Faire planter Internet explorer 8

Bonsoir

Il ne faut absolument pas supprimer IE il sert pour mise à jour de windows;donc fait ceci stp merci.

1- Télécharge et installe le logiciel HijackThis :

https://www.commentcamarche.net/telecharger/securite/11747-hijackthis/
ou ici http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
ou ici https://www.clubic.com/telecharger-fiche17891-hijackthis.html

-->Clique sur le setup pour lancer l'installation : laisse toi guider et ne modifie pas les paramètres d'installation .
A la fin de l’installation, le programme se lance automatiquement : ferme le en cliquant sur la croix rouge.
Au final, tu dois avoir un raccourci sur ton bureau et aussi un cheminement comme :
"C:\ program files\Trend Micro\HijackThis\HijackThis.exe " .

(Ne lance pas ce prg pour l'instant et fais la suite ... )

2- Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

-> http://images.malwareremoval.com/random/RSIT.exe

! Déconnecte toi et ferme toutes tes applications en cours !

Double-clique sur " RSIT.exe " pour le lancer.

Clic droit sous VISTA (exécuter en tant que…)

-> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

* Devant l'option "List files/folders created ..." , tu choisis : 2 months

* clique ensuite sur " Continue " pour lancer l'analyse ...

-> laisse faire le scan et ne touche pas au PC ...

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-notes).

Poste le contenu de " log.txt " (c'est celui qui apparaît à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

Important : poste un rapport, puis l'autre dans la réponse suivante ...
Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum ...
( Et si "log.txt" seul, ne passe pas non plus , fais le en 2 fois ... merci ... )

( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit

@+

Ok merci pour l'information mais une idée de comment faire pour planter IE ?
Car pour le moment je n'ai pas d'autre solution pour attendre...

J'ai déjà fait la manipulation avec Rsit voilà le résultat :

Logfile of random's system information tool 1.06 (written by random/random)
Run by stephane at 2009-11-19 18:34:48
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 3
System drive C: has 40 GB (9%) free of 466 GB
Total RAM: 3326 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:36:01, on 19/11/2009
Platform: Windows Vista SP3 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\schtasks.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Panicware\Pop-Up Stopper Free Edition\PSFree.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\BitComet\BitComet.exe
C:\Users\stephane\Documents\task.exe
C:\Users\stephane\Documents\Live Microsoft Update.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\hp\kbd\kbd.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Windows\explorer.exe
C:\Windows\system32\conime.exe
C:\Users\stephane\Desktop\ced\viral\RSIT.exe
C:\Program Files\trend micro\stephane.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: IE 4.x-6.x BHO for Internet Download Accelerator - {2A646672-9C3A-4C28-9A7A-1FB0F63F28B6} - C:\PROGRA~1\IDA\idaiehlp.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [SunJavaUpdateReg] "C:\Windows\system32\jureg.exe"
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [CrocPopup+ ] C:\PROGRA~1\CROCPO~1\CROCPO~1.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Speech Recognition] "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
O4 - HKCU\..\Run: [Task Menu] C:\Users\stephane\Documents\task.exe
O4 - HKCU\..\Run: [Windows Live Updater] C:\Users\stephane\Documents\Live Microsoft Update.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\Program Files\Panicware\Pop-Up Stopper Free Edition\PSFree.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: PES2010_widget4256769472.lnk = stephane\AppData\Local\Temp\Rar$EX00.932\PES2010_widget.exe
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download ALL with IDA - C:\Program Files\IDA\idaieall.htm
O8 - Extra context menu item: Download with IDA - C:\Program Files\IDA\idaie.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIC273~1\Office12\REFIEBAR.DLL
O9 - Extra button: Internet Download Accelerator - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - C:\Program Files\IDA\ida.exe
O9 - Extra 'Tools' menuitem: &Internet Download Accelerator - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - C:\Program Files\IDA\ida.exe
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O17 - HKLM\System\CCS\Services\Tcpip\..\{A37B2FC7-982D-4634-BAA1-6F046F18F5C4}: NameServer = 213.36.80.1
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Planificateur LiveUpdate automatique (Automatic LiveUpdate Scheduler) - Symantec Corporation - c:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
O23 - Service: Service Google Update (gupdate1ca11d294080fbb) (gupdate1ca11d294080fbb) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Chasis Button Service (HPBtnSrv) - Unknown owner - c:\hp\HPEZBTN\HPBtnSrv.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe

Ceci à déjà été fait j'ai fait la recherche et la suppression je poste le résultat :
Pour la recherche

--- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---

2009-01-26 blindman.exe (1.0.0.8)
2009-01-26 SDFiles.exe (1.6.1.7)
2009-01-26 SDMain.exe (1.0.0.6)
2009-01-26 SDShred.exe (1.0.2.5)
2009-01-26 SDUpdate.exe (1.6.0.12)
2009-01-26 SDWinSec.exe (1.0.0.12)
2009-01-26 SpybotSD.exe (1.6.2.46)
2009-01-26 TeaTimer.exe (1.6.4.26)
2009-11-24 unins000.exe (51.49.0.0)
2009-01-26 Update.exe (1.6.0.7)
2009-01-26 advcheck.dll (1.6.2.15)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2009-01-26 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2009-01-26 Tools.dll (2.1.6.10)
2009-01-16 UninsSrv.dll (1.0.0.0)
2009-10-08 Includes\Adware.sbi
2009-11-10 Includes\AdwareC.sbi
2009-01-22 Includes\Cookies.sbi
2009-11-03 Includes\Dialer.sbi
2009-10-13 Includes\DialerC.sbi
2009-01-22 Includes\HeavyDuty.sbi
2009-05-26 Includes\Hijackers.sbi
2009-11-17 Includes\HijackersC.sbi
2009-10-20 Includes\Keyloggers.sbi
2009-10-20 Includes\KeyloggersC.sbi
2004-11-29 Includes\LSP.sbi
2009-11-10 Includes\Malware.sbi
2009-11-18 Includes\MalwareC.sbi
2009-03-25 Includes\PUPS.sbi
2009-11-17 Includes\PUPSC.sbi
2009-01-22 Includes\Revision.sbi
2009-01-13 Includes\Security.sbi
2009-11-10 Includes\SecurityC.sbi
2008-06-03 Includes\Spybots.sbi
2008-06-03 Includes\SpybotsC.sbi
2009-11-03 Includes\Spyware.sbi
2009-11-10 Includes\SpywareC.sbi
2009-06-08 Includes\Tracks.uti
2009-11-17 Includes\Trojans.sbi
2009-11-17 Includes\TrojansC.sbi
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll

--- System information ---
Windows Vista (Build: 6002) Service Pack 3 (6.0.6002)
/ MSXML4SP2: Security update for MSXML4 SP2 (KB954430)

--- Startup entries list ---
Located: HK_LM:Run,
command:
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:Run, Adobe Reader Speed Launcher
command: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
file: C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
size: 39792
MD5: 392845E8D49B5F0E81AAC4D795000A8C

Located: HK_LM:Run, avast!
command: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
file: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
size: 81000
MD5: 28E9092D50AE450662EEA4719E5AA304

Located: HK_LM:Run, ccApp
command: "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
file: c:\Program Files\Common Files\Symantec Shared\ccApp.exe
size: 51048
MD5: B01902E9451B3D39DC5CAFDC9B9B398C

Located: HK_LM:Run, GrooveMonitor
command: "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
file: C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
size: 33648
MD5: 35DCD380D4D579D8B8EA91D5D8AE444C

Located: HK_LM:Run, IAAnotif
command: "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
file: C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
size: 178712
MD5: 1992E7E8BC448CEBA62DC698098C0BD2

Located: HK_LM:Run, KBD
command: C:\HP\KBD\KbdStub.EXE
file: C:\HP\KBD\KbdStub.EXE
size: 65536
MD5: 7088B136BB58A5F95CF0DE8386CA6C0F

Located: HK_LM:Run, Malwarebytes Anti-Malware (reboot)
command: "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
file: C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
size: 1312080
MD5: C5FCC0B761069FABD59E41B7C3280DDF

Located: HK_LM:Run, NPSStartup
command:
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:Run, NvCplDaemon
command: RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
file: C:\Windows\system32\NvCpl.dll
size: 13781536
MD5: 274631707A40398B8773CCB6DB3C2A81

Located: HK_LM:Run, OsdMaestro
command: "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
file: C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
size: 118784
MD5: B1361669BDC6ED612C35B7C67ADA2240

Located: HK_LM:Run, RtHDVCpl
command: RtHDVCpl.exe
file: C:\Windows\RtHDVCpl.exe
size: 6266880
MD5: D93985F5D87DF1A119E939EADB5C4B9E

Located: HK_LM:Run, SunJavaUpdateReg
command: "C:\Windows\system32\jureg.exe"
file: C:\Windows\system32\jureg.exe
size: 54936
MD5: 4F89DD4EA74C66916E15A6E7D74A50B5

Located: HK_LM:Run, SunJavaUpdateSched
command: "C:\Program Files\Java\jre6\bin\jusched.exe"
file: C:\Program Files\Java\jre6\bin\jusched.exe
size: 149280
MD5: 3A0647BDED81DBE0BCBB51D70B22C9E0

Located: HK_LM:Run, Windows Defender
command: %ProgramFiles%\Windows Defender\MSASCui.exe -hide
file: C:\Program Files\Windows Defender\MSASCui.exe
size: 1008184
MD5: 0D392EDE3B97E0B3131B2F63EF1DB94E

Located: HK_CU:Run,
where: S-1-5-21-2014506545-1587375794-4220175357-1000...
command:
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:Run, BitComet
where: S-1-5-21-2014506545-1587375794-4220175357-1000...
command: "C:\Program Files\BitComet\BitComet.exe" /tray
file: C:\Program Files\BitComet\BitComet.exe
size: 2567992
MD5: AC13C3F37D94401C3DAAC39A207BACC0

Located: HK_CU:Run, ehTray.exe
where: S-1-5-21-2014506545-1587375794-4220175357-1000...
command: C:\Windows\ehome\ehTray.exe
file: C:\Windows\ehome\ehTray.exe
size: 125952
MD5: BF08674925F151BD4537B89A493E3E0C

Located: HK_CU:Run, msnmsgr
where: S-1-5-21-2014506545-1587375794-4220175357-1000...
command: "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
file: C:\Program Files\Windows Live\Messenger\msnmsgr.exe
size: 3883856
MD5: 18B4B12358EFCF68D76812058A26181F

Located: HK_CU:Run, Sidebar
where: S-1-5-21-2014506545-1587375794-4220175357-1000...
command: C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
file: C:\Program Files\Windows Sidebar\sidebar.exe
size: 1233920
MD5: 9E35FF7F943AE0FB89192BFE058B7FD4

Located: HK_CU:Run, Speech Recognition
where: S-1-5-21-2014506545-1587375794-4220175357-1000...
command: "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
file: C:\Windows\Speech\Common\sapisvr.exe
size: 49664
MD5: 105A4D87C8DCF2CF5DB042830B203E5F

Located: HK_CU:Run, Task Menu
where: S-1-5-21-2014506545-1587375794-4220175357-1000...
command: C:\Users\stephane\Documents\task.exe
file: C:\Users\stephane\Documents\task.exe
size: 421517
MD5: 133DEB10641BF017962BEC85206D037B

Located: HK_CU:Run, Windows Live Updater
where: S-1-5-21-2014506545-1587375794-4220175357-1000...
command: C:\Users\stephane\Documents\Live Microsoft Update.exe
file: C:\Users\stephane\Documents\Live Microsoft Update.exe
size: 421517
MD5: 133DEB10641BF017962BEC85206D037B

Located: HK_CU:Run, WMPNSCFG
where: S-1-5-21-2014506545-1587375794-4220175357-1000...
command: C:\Program Files\Windows Media Player\WMPNSCFG.exe
file: C:\Program Files\Windows Media Player\WMPNSCFG.exe
size: 202240
MD5: 35937EAD711207544E219C2A19A78A7D

Located: Démarrage (désactivé), HP Digital Imaging Monitor (DISABLED)
command: C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe
file: C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe
size: 214360
MD5: CF03C8F6F6B0D71F6E5BCE167FCF7CA6

Located: Démarrage (désactivé), WiFi Station (DISABLED)
command: C:\PROGRA~1\Hercules\WIFIST~1\WIFIST~1.EXE -s
file: C:\PROGRA~1\Hercules\WIFIST~1\WIFIST~1.EXE
size: 98304
MD5: BD009223C9C4AF53F67EBB4D5E9B790C

Located: Démarrage (désactivé), Enregistrement de (DISABLED)
command: C:\Users\stephane\AppData\Local\Temp\MagicISO_01C9BD1F8DC709D7\EAregister.exe /remind /language=FRA /PRNM="Electronic Arts Product"
file: C:\Users\stephane\AppData\Local\Temp\MagicISO_01C9BD1F8DC709D7\EAregister.exe
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: Démarrage (désactivé), ImpulseNow (DISABLED)
command: C:\PROGRA~1\Stardock\Impulse\Now\IMPULS~1.EXE
file: C:\PROGRA~1\Stardock\Impulse\Now\IMPULS~1.EXE
size: 365872
MD5: 4CD21FD02727AC6276B427B213D02100

Located: Démarrage (désactivé), OneNote 2007 - Capture d'écran et lancement (DISABLED)
command: C:\PROGRA~1\MICROS~3\Office12\ONENOTEM.EXE /tsr
file: C:\PROGRA~1\MICROS~3\Office12\ONENOTEM.EXE
size: 101440
MD5: 9D0EEBDA40D5C33BC63FB8BB984F7681

Located: Démarrage (désactivé), OpenOffice.org 3.1 (DISABLED)
command: C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE
file: C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE
size: 384000
MD5: C047C9C6CD8E134AFDFDB374E80547E5

Located: Démarrage (désactivé), PES2010_widget4256769472 (DISABLED)
command: C:\Users\stephane\AppData\Local\Temp\Rar$EX00.932\PES2010_widget.exe
file: C:\Users\stephane\AppData\Local\Temp\Rar$EX00.932\PES2010_widget.exe
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

--- Browser helper object list ---
{053F9267-DC04-4294-A72C-58F732D338C0} (HP Print Clips)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: HP Print Clips
Path: C:\Program Files\HP\Smart Web Printing\
Long name: hpswp_framework.dll
Short name: HPSWP_~3.DLL
Date (created): 02/03/2007 16:52:08
Date (last access): 17/03/2009 22:04:26
Date (last write): 02/03/2007 16:52:08
Filesize: 177768
Attributes: readonly archive
MD5: A40456DE4EF7E318104955361C72AC9D
CRC32: 6F06AAE2
Version: 2.15.7.0

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Aide pour le lien d'Adobe PDF Reader)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Aide pour le lien d'Adobe PDF Reader
description: Adobe Acrobat reader
classification: Legitimate
known filename: AcroIEhelper.ocx<br>AcroIEhelper.dll
info link: https://get2.adobe.com/reader/otherversions/
info source: TonyKlein
Path: C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\
Long name: AcroIEHelper.dll
Short name: ACROIE~1.DLL
Date (created): 22/10/2006 23:08:42
Date (last access): 12/11/2009 13:06:24
Date (last write): 22/10/2006 23:08:42
Filesize: 62080
Attributes: archive
MD5: C11F6A1F61481E24BE3FDC06EA6F7D2A
CRC32: E388508F
Version: 8.0.0.456

{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} (BitComet ClickCapture)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name: BitComet ClickCapture
CLSID name: BitComet Helper
Path: C:\Program Files\BitComet\tools\
Long name: BitCometBHO_1.2.8.7.dll
Short name: BITCOM~2.DLL
Date (created): 11/08/2008 09:12:14
Date (last access): 04/10/2008 13:50:12
Date (last write): 11/08/2008 09:12:14
Filesize: 656696
Attributes: archive
MD5: F5508AC38274799624B53798F8BA7EE6
CRC32: AB441D08
Version: 1.2.8.7

{53707962-6F74-2D53-2644-206D7942484F} (Spybot-S&D IE Protection)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Spybot-S&D IE Protection
description: Spybot-S&D IE Browser plugin
classification: Legitimate
known filename: SDhelper.dll
info link: http://spybot.eon.net.au/
info source: Patrick M. Kolla
Path: C:\PROGRA~1\SPYBOT~1\
Long name: SDHelper.dll
Short name:
Date (created): 19/11/2009 14:25:08
Date (last access): 19/11/2009 14:25:08
Date (last write): 26/01/2009 15:31:02
Filesize: 1879896
Attributes: archive
MD5: 022C2F6DCCDFA0AD73024D254E62AFAC
CRC32: 5BA24007
Version: 1.6.2.14

{5C255C8A-E604-49b4-9D64-90988571CECB} ()
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name:

{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} (NCO 2.0 IE BHO)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name: NCO 2.0 IE BHO
CLSID name:
Path: c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\
Long name: CoIEPlg.dll
Short name:
Date (created): 24/08/2007 14:51:00
Date (last access): 20/03/2008 10:33:06
Date (last write): 24/08/2007 14:51:00
Filesize: 316784
Attributes: archive
MD5: 6BC066FCC66BB0EE33A618EBC65683D5
CRC32: D7E3A9BB
Version: 2008.2.0.84

{6D53EC84-6AAE-4787-AEEE-F4628F01010C} (Symantec Intrusion Prevention)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name: Symantec Intrusion Prevention
CLSID name: Symantec Intrusion Prevention
Path: C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\
Long name: IPSBHO.dll
Short name:
Date (created): 20/03/2008 10:32:50
Date (last access): 04/10/2008 13:45:10
Date (last write): 04/10/2008 13:45:10
Filesize: 116088
Attributes: archive
MD5: FA3E00177B57D5B2BF058D560931D750
CRC32: DF9D41CC
Version: 8.2.0.86

{72853161-30C5-4D22-B7F9-0BBC1D38A37E} (Groove GFS Browser Helper)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Groove GFS Browser Helper
Path: C:\Program Files\Microsoft Office\Office12\
Long name: GrooveShellExtensions.dll
Short name: GRA8E1~1.DLL
Date (created): 24/08/2007 07:01:22
Date (last access): 06/11/2009 17:06:52
Date (last write): 24/08/2007 07:01:22
Filesize: 2212224
Attributes: archive
MD5: 32C4927E013C018A13D8DFBDA4148812
CRC32: 9A9F3D8B
Version: 12.0.6211.1000

{9030D464-4C02-4ABF-8ECC-5164760863C6} (Programme d'aide de l'Assistant de connexion Windows Live)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Programme d'aide de l'Assistant de connexion Windows Live
Path: C:\Program Files\Common Files\Microsoft Shared\Windows Live\
Long name: WindowsLiveLogin.dll
Short name: WINDOW~1.DLL
Date (created): 17/02/2009 16:11:04
Date (last access): 05/03/2009 13:59:18
Date (last write): 17/02/2009 16:11:04
Filesize: 408440
Attributes: archive
MD5: 1A82C1B9BB43385695EFC3A84F6756A2
CRC32: 75E558CA
Version: 5.0.818.6

{DBC80044-A445-435b-BC74-9C25C1C588A9} (Java(tm) Plug-In 2 SSV Helper)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Java(tm) Plug-In 2 SSV Helper
Path: C:\Program Files\Java\jre6\bin\
Long name: jp2ssv.dll
Short name:
Date (created): 26/09/2009 13:42:10
Date (last access): 11/10/2009 04:18:20
Date (last write): 11/10/2009 04:17:30
Filesize: 41760
Attributes: archive
MD5: C9EDE29F223A27873E187D9FB6045EA6
CRC32: 5951C3E0
Version: 6.0.170.4

--- ActiveX list ---
{8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_17
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
description: Sun Java
classification: Legitimate
known filename: %PROGRAM FILES%\JabaSoft\JRE\*\Bin\npjava131.dll
info link:
info source: Patrick M. Kolla
Path: C:\Program Files\Java\jre6\bin\
Long name: jp2iexp.dll
Short name:
Date (created): 26/09/2009 13:42:10
Date (last access): 11/10/2073 04:18:18
Date (last write): 11/10/2009 04:17:30
Filesize: 100128
Attributes: archive
MD5: 048369C957BCE15E4628FDEB65820BE8
CRC32: C8C19051
Version: 6.0.170.4

{8FFBE65D-2C9C-4669-84BD-5829DC0B603C} ()
DPF name:
CLSID name:
Installer: C:\Windows\Downloaded Program Files\erma.inf
Codebase: http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab

{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_01
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
Path: C:\Program Files\Java\jre6\bin\
Long name: jp2iexp.dll
Short name:
Date (created): 26/09/2009 13:42:10
Date (last access): 11/10/2073 04:18:18
Date (last write): 11/10/2009 04:17:30
Filesize: 100128
Attributes: archive
MD5: 048369C957BCE15E4628FDEB65820BE8
CRC32: C8C19051
Version: 6.0.170.4

{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_17
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
Path: C:\Program Files\Java\jre6\bin\
Long name: jp2iexp.dll
Short name:
Date (created): 26/09/2009 13:42:10
Date (last access): 11/10/2073 04:18:18
Date (last write): 11/10/2009 04:17:30
Filesize: 100128
Attributes: archive
MD5: 048369C957BCE15E4628FDEB65820BE8
CRC32: C8C19051
Version: 6.0.170.4

{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_17
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
Path: C:\Program Files\Java\jre6\bin\
Long name: npjpi160_17.dll
Short name: NPJPI1~1.DLL
Date (created): 11/10/2009 02:14:36
Date (last access): 11/10/2073 04:18:30
Date (last write): 11/10/2009 04:17:30
Filesize: 136992
Attributes: archive
MD5: 3D58770680F268A23A8CE1F14B49AA2F
CRC32: 6091A816
Version: 6.0.170.4

--- Process list ---
PID: 3704 (1100) C:\Windows\system32\Dwm.exe
size: 81920
MD5: 01DD1004181FD46ECDC3628228EB269D
PID: 3744 (3696) C:\Windows\Explorer.EXE
size: 2926592
MD5: D07D4C3038F3578FFCE1C0237F2A1253
PID: 3948 (1112) C:\Windows\system32\taskeng.exe
size: 169984
MD5: E5BBFC283D6F5D69B41E464676361020
PID: 2512 (3744) C:\Program Files\Windows Defender\MSASCui.exe
size: 1008184
MD5: 0D392EDE3B97E0B3131B2F63EF1DB94E
PID: 1876 (3744) C:\Windows\RtHDVCpl.exe
size: 6266880
MD5: D93985F5D87DF1A119E939EADB5C4B9E
PID: 1728 (3744) C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
size: 118784
MD5: B1361669BDC6ED612C35B7C67ADA2240
PID: 3832 ( 752) C:\Windows\system32\schtasks.exe
size: 151552
MD5: 1F171553F1138DC0062A71A7D275055A
PID: 532 (3744) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
size: 178712
MD5: 1992E7E8BC448CEBA62DC698098C0BD2
PID: 3996 (3812) c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
size: 149352
MD5: 2F237AAB91497AAA03AF48EAE68758FC
PID: 4032 (3744) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
size: 33648
MD5: 35DCD380D4D579D8B8EA91D5D8AE444C
PID: 4084 (3744) C:\Program Files\Java\jre6\bin\jusched.exe
size: 149280
MD5: 3A0647BDED81DBE0BCBB51D70B22C9E0
PID: 2828 (3744) C:\Program Files\Alwil Software\Avast4\ashDisp.exe
size: 81000
MD5: 28E9092D50AE450662EEA4719E5AA304
PID: 1572 (3744) C:\Program Files\Windows Sidebar\sidebar.exe
size: 1233920
MD5: 9E35FF7F943AE0FB89192BFE058B7FD4
PID: 1776 (3744) C:\Windows\ehome\ehtray.exe
size: 125952
MD5: BF08674925F151BD4537B89A493E3E0C
PID: 3904 ( 880) C:\Windows\ehome\ehmsas.exe
size: 37376
MD5: 0F4195B9B348DE5CF9B822F81704B20E
PID: 6064 ( 880) C:\Windows\System32\mobsync.exe
size: 95744
MD5: 9B89B3BB79EA1ACF041F40A7B6FC5827
PID: 4756 (3744) C:\Program Files\Windows Media Player\wmpnscfg.exe
size: 202240
MD5: 35937EAD711207544E219C2A19A78A7D
PID: 5660 (3744) C:\Program Files\BitComet\BitComet.exe
size: 2567992
MD5: AC13C3F37D94401C3DAAC39A207BACC0
PID: 5696 (3744) C:\Users\stephane\Documents\task.exe
size: 421517
MD5: 133DEB10641BF017962BEC85206D037B
PID: 5764 (3744) C:\Users\stephane\Documents\Live Microsoft Update.exe
size: 421517
MD5: 133DEB10641BF017962BEC85206D037B
PID: 5792 (3744) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
size: 3883856
MD5: 18B4B12358EFCF68D76812058A26181F
PID: 5752 (3588) C:\hp\kbd\kbd.exe
size: 67128
MD5: 7CAC10A1C258DFCB5ADE563BAE6D2F15
PID: 2068 ( 880) C:\Program Files\Windows Live\Contacts\wlcomm.exe
size: 26464
MD5: ADC11749E6698FC30C603DFCCC4F98F2
PID: 3544 (5336) C:\Windows\system32\conime.exe
size: 69120
MD5: 6080A176D09435FC8E6E800996656E18
PID: 2652 (1112) C:\Windows\system32\taskeng.exe
size: 169984
MD5: E5BBFC283D6F5D69B41E464676361020
PID: 6020 (2240) C:\Program Files\Rockstar Games\Rockstar Games Social Club\1_1_3_0\RGSC.exe
size: 1457064
MD5: 8A7D05395EF04AA6616F4C1B9F763D2D
PID: 4620 (3744) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
size: 5365592
MD5: 0477C2F9171599CA5BC3307FDFBA8D89
PID: 4628 (4484) C:\Program Files\Internet Explorer\IEUser.exe
size: 299520
MD5: A8986E339A9215B9410484814224531E
PID: 3524 (4972) C:\Windows\system32\cmd.exe
size: 318976
MD5: 74F26FC01B180D4A99A168ED69C30A53
PID: 4488 (4628) C:\Program Files\Internet Explorer\iexplore.exe
size: 636080
MD5: 2C5168C856455CC43C4B4E1CC1920001
PID: 4724 (3524) C:\Windows\system32\cmd.exe
size: 318976
MD5: 74F26FC01B180D4A99A168ED69C30A53
PID: 4680 (4724) C:\Windows\system32\findstr.exe
size: 60928
MD5: 186954438DE3DDBF0B46F895B7936DE3
PID: 0 ( 0) [System Process]
PID: 4 ( 0) System
PID: 488 ( 4) smss.exe
size: 64000
PID: 564 ( 552) csrss.exe
size: 6144
PID: 624 ( 552) wininit.exe
size: 96768
PID: 636 ( 616) csrss.exe
size: 6144
PID: 672 ( 624) services.exe
size: 279552
PID: 684 ( 624) lsass.exe
size: 9728
PID: 696 ( 624) lsm.exe
size: 229888
PID: 796 ( 616) winlogon.exe
size: 314368
PID: 880 ( 672) svchost.exe
size: 21504
PID: 944 ( 672) nvvsvc.exe
size: 211488
PID: 972 ( 672) svchost.exe
size: 21504
PID: 1032 ( 672) svchost.exe
size: 21504
PID: 1064 ( 672) svchost.exe
size: 21504
PID: 1100 ( 672) svchost.exe
size: 21504
PID: 1112 ( 672) svchost.exe
size: 21504
PID: 1192 (1064) audiodg.exe
size: 88576
PID: 1220 ( 672) SLsvc.exe
size: 3408896
PID: 1256 ( 672) svchost.exe
size: 21504
PID: 1392 ( 672) svchost.exe
size: 21504
PID: 1584 ( 944) nvvsvc.exe
size: 211488
PID: 1684 ( 672) aswUpdSv.exe
PID: 1700 ( 672) ashServ.exe
PID: 2008 ( 672) spoolsv.exe
size: 127488
PID: 2032 ( 672) CCSVCHST.EXE
PID: 496 ( 672) svchost.exe
size: 21504
PID: 2368 ( 672) HPBtnSrv.exe
PID: 2500 ( 672) svchost.exe
size: 21504
PID: 2528 ( 672) IAANTmon.exe
PID: 2564 ( 672) LSSrvc.exe
PID: 2620 ( 672) svchost.exe
size: 21504
PID: 2780 ( 672) svchost.exe
size: 21504
PID: 2792 ( 672) svchost.exe
size: 21504
PID: 2816 ( 672) svchost.exe
size: 21504
PID: 2852 ( 672) svchost.exe
size: 21504
PID: 2880 ( 672) SearchIndexer.exe
size: 441344
PID: 3164 ( 672) SDWinSec.exe
size: 1153368
MD5: 794D4B48DFB6E999537C7C3947863463
PID: 3372 (1100) WUDFHost.exe
size: 142336
PID: 3816 (1112) taskeng.exe
size: 169984
PID: 6028 ( 672) ashMaiSv.exe
PID: 3480 ( 672) ashWebSv.exe
PID: 5620 ( 672) wmpnetwk.exe
PID: 5824 ( 672) AluSchedulerSvc.exe
PID: 5280 ( 672) HPHC_Service.exe
PID: 5368 ( 672) PresentationFontCache.exe

--- Browser start & search pages list ---
Spybot - Search & Destroy browser pages report, 24/11/2009 16:26:06

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
C:\Windows\system32\blank.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
about:blank
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
%SystemRoot%\system32\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

--- Winsock Layered Service Provider list ---
Protocol 0: MSAFD Tcpip [TCP/IP]
GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IP protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol 1: MSAFD Tcpip [UDP/IP]
GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IP protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol 2: MSAFD Tcpip [RAW/IP]
GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IP protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol 3: MSAFD Tcpip [TCP/IPv6]
GUID: {F9EAB0C0-26D4-11D0-BBBF-00AA006C34E4}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IPv6 protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol 4: MSAFD Tcpip [UDP/IPv6]
GUID: {F9EAB0C0-26D4-11D0-BBBF-00AA006C34E4}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IPv6 protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol 5: MSAFD Tcpip [RAW/IPv6]
GUID: {F9EAB0C0-26D4-11D0-BBBF-00AA006C34E4}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IPv6 protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol 6: Fournisseur de services RSVP TCPv6
GUID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP RVSP
DB filename: %SystemRoot%\system32\rsvpsp.dll
DB protocol: RSVP * Service Provider

Protocol 7: Fournisseur de services RSVP TCP
GUID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP RVSP
DB filename: %SystemRoot%\system32\rsvpsp.dll
DB protocol: RSVP * Service Provider

Protocol 8: Fournisseur de services RSVP UDPv6
GUID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP RVSP
DB filename: %SystemRoot%\system32\rsvpsp.dll
DB protocol: RSVP * Service Provider

Protocol 9: Fournisseur de services RSVP UDP
GUID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP RVSP
DB filename: %SystemRoot%\system32\rsvpsp.dll
DB protocol: RSVP * Service Provider

Protocol 10: MSAFD NetBIOS [\Device\NetBT_Tcpip_{EB1EBC5B-54EB-4874-97F2-D41CA8386C55}] SEQPACKET 6
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 11: MSAFD NetBIOS [\Device\NetBT_Tcpip_{EB1EBC5B-54EB-4874-97F2-D41CA8386C55}] DATAGRAM 6
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 12: MSAFD NetBIOS [\Device\NetBT_Tcpip_{53CEB202-5E71-4201-A526-4B2FEEB512EE}] SEQPACKET 15
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 13: MSAFD NetBIOS [\Device\NetBT_Tcpip_{53CEB202-5E71-4201-A526-4B2FEEB512EE}] DATAGRAM 15
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 14: MSAFD NetBIOS [\Device\NetBT_Tcpip_{7BC966C3-E2E3-4E25-ABCF-F0EF2EC0B1CD}] SEQPACKET 9
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 15: MSAFD NetBIOS [\Device\NetBT_Tcpip_{7BC966C3-E2E3-4E25-ABCF-F0EF2EC0B1CD}] DATAGRAM 9
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 16: MSAFD NetBIOS [\Device\NetBT_Tcpip_{9E4E2DF7-DAB2-4444-95F5-79EAE79EB1A1}] SEQPACKET 10
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 17: MSAFD NetBIOS [\Device\NetBT_Tcpip_{9E4E2DF7-DAB2-4444-95F5-79EAE79EB1A1}] DATAGRAM 10
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 18: MSAFD NetBIOS [\Device\NetBT_Tcpip_{46DEBCCF-8358-46D3-8C56-C7581F8F99DC}] SEQPACKET 7
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 19: MSAFD NetBIOS [\Device\NetBT_Tcpip_{46DEBCCF-8358-46D3-8C56-C7581F8F99DC}] DATAGRAM 7
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 20: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A37B2FC7-982D-4634-BAA1-6F046F18F5C4}] SEQPACKET 0
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 21: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A37B2FC7-982D-4634-BAA1-6F046F18F5C4}] DATAGRAM 0
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 22: MSAFD NetBIOS [\Device\NetBT_Tcpip_{1AEEBF4A-31A0-4624-A6D2-227D76F90088}] SEQPACKET 4
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 23: MSAFD NetBIOS [\Device\NetBT_Tcpip_{1AEEBF4A-31A0-4624-A6D2-227D76F90088}] DATAGRAM 4
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 24: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{C9A2E87E-A1BB-41BB-918E-196F9D129081}] SEQPACKET 13
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 25: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{C9A2E87E-A1BB-41BB-918E-196F9D129081}] DATAGRAM 13
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 26: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{4B49286F-0136-4B17-8A9C-05D83A2F44B0}] SEQPACKET 3
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 27: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{4B49286F-0136-4B17-8A9C-05D83A2F44B0}] DATAGRAM 3
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 28: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{EB1EBC5B-54EB-4874-97F2-D41CA8386C55}] SEQPACKET 18
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 29: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{EB1EBC5B-54EB-4874-97F2-D41CA8386C55}] DATAGRAM 18
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 30: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{53CEB202-5E71-4201-A526-4B2FEEB512EE}] SEQPACKET 16
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 31: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{53CEB202-5E71-4201-A526-4B2FEEB512EE}] DATAGRAM 16
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 32: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{7BC966C3-E2E3-4E25-ABCF-F0EF2EC0B1CD}] SEQPACKET 14
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 33: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{7BC966C3-E2E3-4E25-ABCF-F0EF2EC0B1CD}] DATAGRAM 14
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 34: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{AED35E26-6A34-4CF2-BB53-DDB305B40402}] SEQPACKET 12
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 35: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{AED35E26-6A34-4CF2-BB53-DDB305B40402}] DATAGRAM 12
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 36: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{9E4E2DF7-DAB2-4444-95F5-79EAE79EB1A1}] SEQPACKET 11
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 37: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{9E4E2DF7-DAB2-4444-95F5-79EAE79EB1A1}] DATAGRAM 11
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 38: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{46DEBCCF-8358-46D3-8C56-C7581F8F99DC}] SEQPACKET 8
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 39: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{46DEBCCF-8358-46D3-8C56-C7581F8F99DC}] DATAGRAM 8
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 40: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{1F47B3B0-9BCA-42B2-8348-55FF9DE2AFCA}] SEQPACKET 2
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 41: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{1F47B3B0-9BCA-42B2-8348-55FF9DE2AFCA}] DATAGRAM 2
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 42: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{A37B2FC7-982D-4634-BAA1-6F046F18F5C4}] SEQPACKET 1
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 43: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{A37B2FC7-982D-4634-BAA1-6F046F18F5C4}] DATAGRAM 1
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 44: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{1AEEBF4A-31A0-4624-A6D2-227D76F90088}] SEQPACKET 5
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 45: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{1AEEBF4A-31A0-4624-A6D2-227D76F90088}] DATAGRAM 5
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Namespace Provider 0: Espace de noms NLAv1 (Network Location Awareness Legacy)
GUID: {6642243A-3BA8-4AA6-BAA5-2E0BD71FDD83}
Filename:
Description: Microsoft Windows NT/2k/XP name space provider
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: NLA-Namespace

Namespace Provider 1: Fournisseur Shim d'affectation de noms de messagerie
GUID: {964ACBA2-B2BC-40EB-8C6A-A6DB40161CAE}
Filename:

Namespace Provider 2: Fournisseur d'espace de noms du nuage PNRP
GUID: {03FE89CE-766D-4976-B9C1-BB9BC42C7B4D}
Filename:

Namespace Provider 3: Fournisseur d'espace de noms du nom PNRP
GUID: {03FE89CD-766D-4976-B9C1-BB9BC42C7B4D}
Filename:

Namespace Provider 4: mdnsNSP
GUID: {B600E6E9-553B-4A19-8696-335E5C896153}
Filename: C:\Program Files\Bonjour\mdnsNSP.dll
Description: Apple Rendezvous protocol
DB filename: %ProgramFiles%\Rendezvous\bin\mdnsNSP.dll
DB protocol: mdnsNSP

Namespace Provider 5: TCP/IP
GUID: {22059D40-7E9E-11CF-AE5A-00AA00A7112B}
Filename:
Description: Microsoft Windows NT/2k/XP TCP/IP name space provider
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: TCP/IP

Namespace Provider 6: NTDS
GUID: {3B2637EE-E580-11CF-A555-00C04FD8D4AC}
Filename: %SystemRoot%\System32\winrnr.dll
Description: Microsoft Windows NT/2k/XP name space provider
DB filename: %SystemRoot%\system32\winrnr.dll
DB protocol: NTDS

Pour la suppression :

--- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---

2009-01-26 blindman.exe (1.0.0.8)
2009-01-26 SDFiles.exe (1.6.1.7)
2009-01-26 SDMain.exe (1.0.0.6)
2009-01-26 SDShred.exe (1.0.2.5)
2009-01-26 SDUpdate.exe (1.6.0.12)
2009-01-26 SDWinSec.exe (1.0.0.12)
2009-01-26 SpybotSD.exe (1.6.2.46)
2009-01-26 TeaTimer.exe (1.6.4.26)
2009-11-24 unins000.exe (51.49.0.0)
2009-01-26 Update.exe (1.6.0.7)
2009-01-26 advcheck.dll (1.6.2.15)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2009-01-26 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2009-01-26 Tools.dll (2.1.6.10)
2009-01-16 UninsSrv.dll (1.0.0.0)
2009-10-08 Includes\Adware.sbi
2009-11-10 Includes\AdwareC.sbi
2009-01-22 Includes\Cookies.sbi
2009-11-03 Includes\Dialer.sbi
2009-10-13 Includes\DialerC.sbi
2009-01-22 Includes\HeavyDuty.sbi
2009-05-26 Includes\Hijackers.sbi
2009-11-17 Includes\HijackersC.sbi
2009-10-20 Includes\Keyloggers.sbi
2009-10-20 Includes\KeyloggersC.sbi
2004-11-29 Includes\LSP.sbi
2009-11-10 Includes\Malware.sbi
2009-11-18 Includes\MalwareC.sbi
2009-03-25 Includes\PUPS.sbi
2009-11-17 Includes\PUPSC.sbi
2009-01-22 Includes\Revision.sbi
2009-01-13 Includes\Security.sbi
2009-11-10 Includes\SecurityC.sbi
2008-06-03 Includes\Spybots.sbi
2008-06-03 Includes\SpybotsC.sbi
2009-11-03 Includes\Spyware.sbi
2009-11-10 Includes\SpywareC.sbi
2009-06-08 Includes\Tracks.uti
2009-11-17 Includes\Trojans.sbi
2009-11-17 Includes\TrojansC.sbi
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll

--- System information ---
Windows Vista (Build: 6002) Service Pack 3 (6.0.6002)
/ MSXML4SP2: Security update for MSXML4 SP2 (KB954430)

--- Startup entries list ---
Located: HK_LM:Run,
command:
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:Run, Adobe Reader Speed Launcher
command: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
file: C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
size: 39792
MD5: 392845E8D49B5F0E81AAC4D795000A8C

Located: HK_LM:Run, avast!
command: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
file: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
size: 81000
MD5: 28E9092D50AE450662EEA4719E5AA304

Located: HK_LM:Run, ccApp
command: "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
file: c:\Program Files\Common Files\Symantec Shared\ccApp.exe
size: 51048
MD5: B01902E9451B3D39DC5CAFDC9B9B398C

Located: HK_LM:Run, GrooveMonitor
command: "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
file: C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
size: 33648
MD5: 35DCD380D4D579D8B8EA91D5D8AE444C

Located: HK_LM:Run, IAAnotif
command: "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
file: C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
size: 178712
MD5: 1992E7E8BC448CEBA62DC698098C0BD2

Located: HK_LM:Run, KBD
command: C:\HP\KBD\KbdStub.EXE
file: C:\HP\KBD\KbdStub.EXE
size: 65536
MD5: 7088B136BB58A5F95CF0DE8386CA6C0F

Located: HK_LM:Run, Malwarebytes Anti-Malware (reboot)
command: "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
file: C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
size: 1312080
MD5: C5FCC0B761069FABD59E41B7C3280DDF

Located: HK_LM:Run, NPSStartup
command:
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:Run, NvCplDaemon
command: RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
file: C:\Windows\system32\NvCpl.dll
size: 13781536
MD5: 274631707A40398B8773CCB6DB3C2A81

Located: HK_LM:Run, OsdMaestro
command: "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
file: C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
size: 118784
MD5: B1361669BDC6ED612C35B7C67ADA2240

Located: HK_LM:Run, RtHDVCpl
command: RtHDVCpl.exe
file: C:\Windows\RtHDVCpl.exe
size: 6266880
MD5: D93985F5D87DF1A119E939EADB5C4B9E

Located: HK_LM:Run, SunJavaUpdateReg
command: "C:\Windows\system32\jureg.exe"
file: C:\Windows\system32\jureg.exe
size: 54936
MD5: 4F89DD4EA74C66916E15A6E7D74A50B5

Located: HK_LM:Run, SunJavaUpdateSched
command: "C:\Program Files\Java\jre6\bin\jusched.exe"
file: C:\Program Files\Java\jre6\bin\jusched.exe
size: 149280
MD5: 3A0647BDED81DBE0BCBB51D70B22C9E0

Located: HK_LM:Run, Windows Defender
command: %ProgramFiles%\Windows Defender\MSASCui.exe -hide
file: C:\Program Files\Windows Defender\MSASCui.exe
size: 1008184
MD5: 0D392EDE3B97E0B3131B2F63EF1DB94E

Located: HK_CU:Run,
where: S-1-5-21-2014506545-1587375794-4220175357-1000...
command:
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_CU:Run, BitComet
where: S-1-5-21-2014506545-1587375794-4220175357-1000...
command: "C:\Program Files\BitComet\BitComet.exe" /tray
file: C:\Program Files\BitComet\BitComet.exe
size: 2567992
MD5: AC13C3F37D94401C3DAAC39A207BACC0

Located: HK_CU:Run, ehTray.exe
where: S-1-5-21-2014506545-1587375794-4220175357-1000...
command: C:\Windows\ehome\ehTray.exe
file: C:\Windows\ehome\ehTray.exe
size: 125952
MD5: BF08674925F151BD4537B89A493E3E0C

Located: HK_CU:Run, msnmsgr
where: S-1-5-21-2014506545-1587375794-4220175357-1000...
command: "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
file: C:\Program Files\Windows Live\Messenger\msnmsgr.exe
size: 3883856
MD5: 18B4B12358EFCF68D76812058A26181F

Located: HK_CU:Run, Sidebar
where: S-1-5-21-2014506545-1587375794-4220175357-1000...
command: C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
file: C:\Program Files\Windows Sidebar\sidebar.exe
size: 1233920
MD5: 9E35FF7F943AE0FB89192BFE058B7FD4

Located: HK_CU:Run, Speech Recognition
where: S-1-5-21-2014506545-1587375794-4220175357-1000...
command: "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
file: C:\Windows\Speech\Common\sapisvr.exe
size: 49664
MD5: 105A4D87C8DCF2CF5DB042830B203E5F

Located: HK_CU:Run, Task Menu
where: S-1-5-21-2014506545-1587375794-4220175357-1000...
command: C:\Users\stephane\Documents\task.exe
file: C:\Users\stephane\Documents\task.exe
size: 421517
MD5: 133DEB10641BF017962BEC85206D037B

Located: HK_CU:Run, Windows Live Updater
where: S-1-5-21-2014506545-1587375794-4220175357-1000...
command: C:\Users\stephane\Documents\Live Microsoft Update.exe
file: C:\Users\stephane\Documents\Live Microsoft Update.exe
size: 421517
MD5: 133DEB10641BF017962BEC85206D037B

Located: HK_CU:Run, WMPNSCFG
where: S-1-5-21-2014506545-1587375794-4220175357-1000...
command: C:\Program Files\Windows Media Player\WMPNSCFG.exe
file: C:\Program Files\Windows Media Player\WMPNSCFG.exe
size: 202240
MD5: 35937EAD711207544E219C2A19A78A7D

Located: Démarrage (désactivé), HP Digital Imaging Monitor (DISABLED)
command: C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe
file: C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe
size: 214360
MD5: CF03C8F6F6B0D71F6E5BCE167FCF7CA6

Located: Démarrage (désactivé), WiFi Station (DISABLED)
command: C:\PROGRA~1\Hercules\WIFIST~1\WIFIST~1.EXE -s
file: C:\PROGRA~1\Hercules\WIFIST~1\WIFIST~1.EXE
size: 98304
MD5: BD009223C9C4AF53F67EBB4D5E9B790C

Located: Démarrage (désactivé), Enregistrement de (DISABLED)
command: C:\Users\stephane\AppData\Local\Temp\MagicISO_01C9BD1F8DC709D7\EAregister.exe /remind /language=FRA /PRNM="Electronic Arts Product"
file: C:\Users\stephane\AppData\Local\Temp\MagicISO_01C9BD1F8DC709D7\EAregister.exe
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: Démarrage (désactivé), ImpulseNow (DISABLED)
command: C:\PROGRA~1\Stardock\Impulse\Now\IMPULS~1.EXE
file: C:\PROGRA~1\Stardock\Impulse\Now\IMPULS~1.EXE
size: 365872
MD5: 4CD21FD02727AC6276B427B213D02100

Located: Démarrage (désactivé), OneNote 2007 - Capture d'écran et lancement (DISABLED)
command: C:\PROGRA~1\MICROS~3\Office12\ONENOTEM.EXE /tsr
file: C:\PROGRA~1\MICROS~3\Office12\ONENOTEM.EXE
size: 101440
MD5: 9D0EEBDA40D5C33BC63FB8BB984F7681

Located: Démarrage (désactivé), OpenOffice.org 3.1 (DISABLED)
command: C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE
file: C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE
size: 384000
MD5: C047C9C6CD8E134AFDFDB374E80547E5

Located: Démarrage (désactivé), PES2010_widget4256769472 (DISABLED)
command: C:\Users\stephane\AppData\Local\Temp\Rar$EX00.932\PES2010_widget.exe
file: C:\Users\stephane\AppData\Local\Temp\Rar$EX00.932\PES2010_widget.exe
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

--- Browser helper object list ---
{053F9267-DC04-4294-A72C-58F732D338C0} (HP Print Clips)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: HP Print Clips
Path: C:\Program Files\HP\Smart Web Printing\
Long name: hpswp_framework.dll
Short name: HPSWP_~3.DLL
Date (created): 02/03/2007 16:52:08
Date (last access): 17/03/2009 22:04:26
Date (last write): 02/03/2007 16:52:08
Filesize: 177768
Attributes: readonly archive
MD5: A40456DE4EF7E318104955361C72AC9D
CRC32: 6F06AAE2
Version: 2.15.7.0

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Aide pour le lien d'Adobe PDF Reader)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Aide pour le lien d'Adobe PDF Reader
description: Adobe Acrobat reader
classification: Legitimate
known filename: AcroIEhelper.ocx<br>AcroIEhelper.dll
info link: https://get2.adobe.com/reader/otherversions/
info source: TonyKlein
Path: C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\
Long name: AcroIEHelper.dll
Short name: ACROIE~1.DLL
Date (created): 22/10/2006 23:08:42
Date (last access): 12/11/2009 13:06:24
Date (last write): 22/10/2006 23:08:42
Filesize: 62080
Attributes: archive
MD5: C11F6A1F61481E24BE3FDC06EA6F7D2A
CRC32: E388508F
Version: 8.0.0.456

{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} (BitComet ClickCapture)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name: BitComet ClickCapture
CLSID name: BitComet Helper
Path: C:\Program Files\BitComet\tools\
Long name: BitCometBHO_1.2.8.7.dll
Short name: BITCOM~2.DLL
Date (created): 11/08/2008 09:12:14
Date (last access): 04/10/2008 13:50:12
Date (last write): 11/08/2008 09:12:14
Filesize: 656696
Attributes: archive
MD5: F5508AC38274799624B53798F8BA7EE6
CRC32: AB441D08
Version: 1.2.8.7

{53707962-6F74-2D53-2644-206D7942484F} (Spybot-S&D IE Protection)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Spybot-S&D IE Protection
description: Spybot-S&D IE Browser plugin
classification: Legitimate
known filename: SDhelper.dll
info link: http://spybot.eon.net.au/
info source: Patrick M. Kolla
Path: C:\PROGRA~1\SPYBOT~1\
Long name: SDHelper.dll
Short name:
Date (created): 19/11/2009 14:25:08
Date (last access): 19/11/2009 14:25:08
Date (last write): 26/01/2009 15:31:02
Filesize: 1879896
Attributes: archive
MD5: 022C2F6DCCDFA0AD73024D254E62AFAC
CRC32: 5BA24007
Version: 1.6.2.14

{5C255C8A-E604-49b4-9D64-90988571CECB} ()
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name:

{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} (NCO 2.0 IE BHO)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name: NCO 2.0 IE BHO
CLSID name:
Path: c:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\
Long name: CoIEPlg.dll
Short name:
Date (created): 24/08/2007 14:51:00
Date (last access): 20/03/2008 10:33:06
Date (last write): 24/08/2007 14:51:00
Filesize: 316784
Attributes: archive
MD5: 6BC066FCC66BB0EE33A618EBC65683D5
CRC32: D7E3A9BB
Version: 2008.2.0.84

{6D53EC84-6AAE-4787-AEEE-F4628F01010C} (Symantec Intrusion Prevention)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name: Symantec Intrusion Prevention
CLSID name: Symantec Intrusion Prevention
Path: C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\
Long name: IPSBHO.dll
Short name:
Date (created): 20/03/2008 10:32:50
Date (last access): 04/10/2008 13:45:10
Date (last write): 04/10/2008 13:45:10
Filesize: 116088
Attributes: archive
MD5: FA3E00177B57D5B2BF058D560931D750
CRC32: DF9D41CC
Version: 8.2.0.86

{72853161-30C5-4D22-B7F9-0BBC1D38A37E} (Groove GFS Browser Helper)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Groove GFS Browser Helper
Path: C:\Program Files\Microsoft Office\Office12\
Long name: GrooveShellExtensions.dll
Short name: GRA8E1~1.DLL
Date (created): 24/08/2007 07:01:22
Date (last access): 06/11/2009 17:06:52
Date (last write): 24/08/2007 07:01:22
Filesize: 2212224
Attributes: archive
MD5: 32C4927E013C018A13D8DFBDA4148812
CRC32: 9A9F3D8B
Version: 12.0.6211.1000

{9030D464-4C02-4ABF-8ECC-5164760863C6} (Programme d'aide de l'Assistant de connexion Windows Live)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Programme d'aide de l'Assistant de connexion Windows Live
Path: C:\Program Files\Common Files\Microsoft Shared\Windows Live\
Long name: WindowsLiveLogin.dll
Short name: WINDOW~1.DLL
Date (created): 17/02/2009 16:11:04
Date (last access): 05/03/2009 13:59:18
Date (last write): 17/02/2009 16:11:04
Filesize: 408440
Attributes: archive
MD5: 1A82C1B9BB43385695EFC3A84F6756A2
CRC32: 75E558CA
Version: 5.0.818.6

{DBC80044-A445-435b-BC74-9C25C1C588A9} (Java(tm) Plug-In 2 SSV Helper)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Java(tm) Plug-In 2 SSV Helper
Path: C:\Program Files\Java\jre6\bin\
Long name: jp2ssv.dll
Short name:
Date (created): 26/09/2009 13:42:10
Date (last access): 11/10/2009 04:18:20
Date (last write): 11/10/2009 04:17:30
Filesize: 41760
Attributes: archive
MD5: C9EDE29F223A27873E187D9FB6045EA6
CRC32: 5951C3E0
Version: 6.0.170.4

--- ActiveX list ---
{8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_17
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
description: Sun Java
classification: Legitimate
known filename: %PROGRAM FILES%\JabaSoft\JRE\*\Bin\npjava131.dll
info link:
info source: Patrick M. Kolla
Path: C:\Program Files\Java\jre6\bin\
Long name: jp2iexp.dll
Short name:
Date (created): 26/09/2009 13:42:10
Date (last access): 11/10/2073 04:18:18
Date (last write): 11/10/2009 04:17:30
Filesize: 100128
Attributes: archive
MD5: 048369C957BCE15E4628FDEB65820BE8
CRC32: C8C19051
Version: 6.0.170.4

{8FFBE65D-2C9C-4669-84BD-5829DC0B603C} ()
DPF name:
CLSID name:
Installer: C:\Windows\Downloaded Program Files\erma.inf
Codebase: http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab

{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_01
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
Path: C:\Program Files\Java\jre6\bin\
Long name: jp2iexp.dll
Short name:
Date (created): 26/09/2009 13:42:10
Date (last access): 11/10/2073 04:18:18
Date (last write): 11/10/2009 04:17:30
Filesize: 100128
Attributes: archive
MD5: 048369C957BCE15E4628FDEB65820BE8
CRC32: C8C19051
Version: 6.0.170.4

{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_17
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
Path: C:\Program Files\Java\jre6\bin\
Long name: jp2iexp.dll
Short name:
Date (created): 26/09/2009 13:42:10
Date (last access): 11/10/2073 04:18:18
Date (last write): 11/10/2009 04:17:30
Filesize: 100128
Attributes: archive
MD5: 048369C957BCE15E4628FDEB65820BE8
CRC32: C8C19051
Version: 6.0.170.4

{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
DPF name: Java Runtime Environment 1.6.0
CLSID name: Java Plug-in 1.6.0_17
Installer:
Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
Path: C:\Program Files\Java\jre6\bin\
Long name: npjpi160_17.dll
Short name: NPJPI1~1.DLL
Date (created): 11/10/2009 02:14:36
Date (last access): 11/10/2073 04:18:30
Date (last write): 11/10/2009 04:17:30
Filesize: 136992
Attributes: archive
MD5: 3D58770680F268A23A8CE1F14B49AA2F
CRC32: 6091A816
Version: 6.0.170.4

--- Process list ---
PID: 3704 (1100) C:\Windows\system32\Dwm.exe
size: 81920
MD5: 01DD1004181FD46ECDC3628228EB269D
PID: 3744 (3696) C:\Windows\Explorer.EXE
size: 2926592
MD5: D07D4C3038F3578FFCE1C0237F2A1253
PID: 3948 (1112) C:\Windows\system32\taskeng.exe
size: 169984
MD5: E5BBFC283D6F5D69B41E464676361020
PID: 2512 (3744) C:\Program Files\Windows Defender\MSASCui.exe
size: 1008184
MD5: 0D392EDE3B97E0B3131B2F63EF1DB94E
PID: 1876 (3744) C:\Windows\RtHDVCpl.exe
size: 6266880
MD5: D93985F5D87DF1A119E939EADB5C4B9E
PID: 1728 (3744) C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
size: 118784
MD5: B1361669BDC6ED612C35B7C67ADA2240
PID: 3832 ( 752) C:\Windows\system32\schtasks.exe
size: 151552
MD5: 1F171553F1138DC0062A71A7D275055A
PID: 532 (3744) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
size: 178712
MD5: 1992E7E8BC448CEBA62DC698098C0BD2
PID: 3996 (3812) c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
size: 149352
MD5: 2F237AAB91497AAA03AF48EAE68758FC
PID: 4032 (3744) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
size: 33648
MD5: 35DCD380D4D579D8B8EA91D5D8AE444C
PID: 4084 (3744) C:\Program Files\Java\jre6\bin\jusched.exe
size: 149280
MD5: 3A0647BDED81DBE0BCBB51D70B22C9E0
PID: 2828 (3744) C:\Program Files\Alwil Software\Avast4\ashDisp.exe
size: 81000
MD5: 28E9092D50AE450662EEA4719E5AA304
PID: 1572 (3744) C:\Program Files\Windows Sidebar\sidebar.exe
size: 1233920
MD5: 9E35FF7F943AE0FB89192BFE058B7FD4
PID: 1776 (3744) C:\Windows\ehome\ehtray.exe
size: 125952
MD5: BF08674925F151BD4537B89A493E3E0C
PID: 3904 ( 880) C:\Windows\ehome\ehmsas.exe
size: 37376
MD5: 0F4195B9B348DE5CF9B822F81704B20E
PID: 6064 ( 880) C:\Windows\System32\mobsync.exe
size: 95744
MD5: 9B89B3BB79EA1ACF041F40A7B6FC5827
PID: 4756 (3744) C:\Program Files\Windows Media Player\wmpnscfg.exe
size: 202240
MD5: 35937EAD711207544E219C2A19A78A7D
PID: 5660 (3744) C:\Program Files\BitComet\BitComet.exe
size: 2567992
MD5: AC13C3F37D94401C3DAAC39A207BACC0
PID: 5696 (3744) C:\Users\stephane\Documents\task.exe
size: 421517
MD5: 133DEB10641BF017962BEC85206D037B
PID: 5764 (3744) C:\Users\stephane\Documents\Live Microsoft Update.exe
size: 421517
MD5: 133DEB10641BF017962BEC85206D037B
PID: 5792 (3744) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
size: 3883856
MD5: 18B4B12358EFCF68D76812058A26181F
PID: 5752 (3588) C:\hp\kbd\kbd.exe
size: 67128
MD5: 7CAC10A1C258DFCB5ADE563BAE6D2F15
PID: 2068 ( 880) C:\Program Files\Windows Live\Contacts\wlcomm.exe
size: 26464
MD5: ADC11749E6698FC30C603DFCCC4F98F2
PID: 3544 (5336) C:\Windows\system32\conime.exe
size: 69120
MD5: 6080A176D09435FC8E6E800996656E18
PID: 2652 (1112) C:\Windows\system32\taskeng.exe
size: 169984
MD5: E5BBFC283D6F5D69B41E464676361020
PID: 6020 (2240) C:\Program Files\Rockstar Games\Rockstar Games Social Club\1_1_3_0\RGSC.exe
size: 1457064
MD5: 8A7D05395EF04AA6616F4C1B9F763D2D
PID: 4620 (3744) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
size: 5365592
MD5: 0477C2F9171599CA5BC3307FDFBA8D89
PID: 4628 (4484) C:\Program Files\Internet Explorer\IEUser.exe
size: 299520
MD5: A8986E339A9215B9410484814224531E
PID: 3524 (4972) C:\Windows\system32\cmd.exe
size: 318976
MD5: 74F26FC01B180D4A99A168ED69C30A53
PID: 4488 (4628) C:\Program Files\Internet Explorer\iexplore.exe
size: 636080
MD5: 2C5168C856455CC43C4B4E1CC1920001
PID: 4724 (3524) C:\Windows\system32\cmd.exe
size: 318976
MD5: 74F26FC01B180D4A99A168ED69C30A53
PID: 4680 (4724) C:\Windows\system32\findstr.exe
size: 60928
MD5: 186954438DE3DDBF0B46F895B7936DE3
PID: 0 ( 0) [System Process]
PID: 4 ( 0) System
PID: 488 ( 4) smss.exe
size: 64000
PID: 564 ( 552) csrss.exe
size: 6144
PID: 624 ( 552) wininit.exe
size: 96768
PID: 636 ( 616) csrss.exe
size: 6144
PID: 672 ( 624) services.exe
size: 279552
PID: 684 ( 624) lsass.exe
size: 9728
PID: 696 ( 624) lsm.exe
size: 229888
PID: 796 ( 616) winlogon.exe
size: 314368
PID: 880 ( 672) svchost.exe
size: 21504
PID: 944 ( 672) nvvsvc.exe
size: 211488
PID: 972 ( 672) svchost.exe
size: 21504
PID: 1032 ( 672) svchost.exe
size: 21504
PID: 1064 ( 672) svchost.exe
size: 21504
PID: 1100 ( 672) svchost.exe
size: 21504
PID: 1112 ( 672) svchost.exe
size: 21504
PID: 1192 (1064) audiodg.exe
size: 88576
PID: 1220 ( 672) SLsvc.exe
size: 3408896
PID: 1256 ( 672) svchost.exe
size: 21504
PID: 1392 ( 672) svchost.exe
size: 21504
PID: 1584 ( 944) nvvsvc.exe
size: 211488
PID: 1684 ( 672) aswUpdSv.exe
PID: 1700 ( 672) ashServ.exe
PID: 2008 ( 672) spoolsv.exe
size: 127488
PID: 2032 ( 672) CCSVCHST.EXE
PID: 496 ( 672) svchost.exe
size: 21504
PID: 2368 ( 672) HPBtnSrv.exe
PID: 2500 ( 672) svchost.exe
size: 21504
PID: 2528 ( 672) IAANTmon.exe
PID: 2564 ( 672) LSSrvc.exe
PID: 2620 ( 672) svchost.exe
size: 21504
PID: 2780 ( 672) svchost.exe
size: 21504
PID: 2792 ( 672) svchost.exe
size: 21504
PID: 2816 ( 672) svchost.exe
size: 21504
PID: 2852 ( 672) svchost.exe
size: 21504
PID: 2880 ( 672) SearchIndexer.exe
size: 441344
PID: 3164 ( 672) SDWinSec.exe
size: 1153368
MD5: 794D4B48DFB6E999537C7C3947863463
PID: 3372 (1100) WUDFHost.exe
size: 142336
PID: 3816 (1112) taskeng.exe
size: 169984
PID: 6028 ( 672) ashMaiSv.exe
PID: 3480 ( 672) ashWebSv.exe
PID: 5620 ( 672) wmpnetwk.exe
PID: 5824 ( 672) AluSchedulerSvc.exe
PID: 5280 ( 672) HPHC_Service.exe
PID: 5368 ( 672) PresentationFontCache.exe

--- Browser start & search pages list ---
Spybot - Search & Destroy browser pages report, 24/11/2009 16:26:06

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
C:\Windows\system32\blank.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
about:blank
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
%SystemRoot%\system32\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

--- Winsock Layered Service Provider list ---
Protocol 0: MSAFD Tcpip [TCP/IP]
GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IP protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol 1: MSAFD Tcpip [UDP/IP]
GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IP protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol 2: MSAFD Tcpip [RAW/IP]
GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IP protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol 3: MSAFD Tcpip [TCP/IPv6]
GUID: {F9EAB0C0-26D4-11D0-BBBF-00AA006C34E4}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IPv6 protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol 4: MSAFD Tcpip [UDP/IPv6]
GUID: {F9EAB0C0-26D4-11D0-BBBF-00AA006C34E4}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IPv6 protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol 5: MSAFD Tcpip [RAW/IPv6]
GUID: {F9EAB0C0-26D4-11D0-BBBF-00AA006C34E4}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IPv6 protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol 6: Fournisseur de services RSVP TCPv6
GUID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP RVSP
DB filename: %SystemRoot%\system32\rsvpsp.dll
DB protocol: RSVP * Service Provider

Protocol 7: Fournisseur de services RSVP TCP
GUID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP RVSP
DB filename: %SystemRoot%\system32\rsvpsp.dll
DB protocol: RSVP * Service Provider

Protocol 8: Fournisseur de services RSVP UDPv6
GUID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP RVSP
DB filename: %SystemRoot%\system32\rsvpsp.dll
DB protocol: RSVP * Service Provider

Protocol 9: Fournisseur de services RSVP UDP
GUID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP RVSP
DB filename: %SystemRoot%\system32\rsvpsp.dll
DB protocol: RSVP * Service Provider

Protocol 10: MSAFD NetBIOS [\Device\NetBT_Tcpip_{EB1EBC5B-54EB-4874-97F2-D41CA8386C55}] SEQPACKET 6
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 11: MSAFD NetBIOS [\Device\NetBT_Tcpip_{EB1EBC5B-54EB-4874-97F2-D41CA8386C55}] DATAGRAM 6
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 12: MSAFD NetBIOS [\Device\NetBT_Tcpip_{53CEB202-5E71-4201-A526-4B2FEEB512EE}] SEQPACKET 15
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 13: MSAFD NetBIOS [\Device\NetBT_Tcpip_{53CEB202-5E71-4201-A526-4B2FEEB512EE}] DATAGRAM 15
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 14: MSAFD NetBIOS [\Device\NetBT_Tcpip_{7BC966C3-E2E3-4E25-ABCF-F0EF2EC0B1CD}] SEQPACKET 9
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 15: MSAFD NetBIOS [\Device\NetBT_Tcpip_{7BC966C3-E2E3-4E25-ABCF-F0EF2EC0B1CD}] DATAGRAM 9
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 16: MSAFD NetBIOS [\Device\NetBT_Tcpip_{9E4E2DF7-DAB2-4444-95F5-79EAE79EB1A1}] SEQPACKET 10
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 17: MSAFD NetBIOS [\Device\NetBT_Tcpip_{9E4E2DF7-DAB2-4444-95F5-79EAE79EB1A1}] DATAGRAM 10
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 18: MSAFD NetBIOS [\Device\NetBT_Tcpip_{46DEBCCF-8358-46D3-8C56-C7581F8F99DC}] SEQPACKET 7
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 19: MSAFD NetBIOS [\Device\NetBT_Tcpip_{46DEBCCF-8358-46D3-8C56-C7581F8F99DC}] DATAGRAM 7
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 20: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A37B2FC7-982D-4634-BAA1-6F046F18F5C4}] SEQPACKET 0
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 21: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A37B2FC7-982D-4634-BAA1-6F046F18F5C4}] DATAGRAM 0
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 22: MSAFD NetBIOS [\Device\NetBT_Tcpip_{1AEEBF4A-31A0-4624-A6D2-227D76F90088}] SEQPACKET 4
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 23: MSAFD NetBIOS [\Device\NetBT_Tcpip_{1AEEBF4A-31A0-4624-A6D2-227D76F90088}] DATAGRAM 4
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 24: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{C9A2E87E-A1BB-41BB-918E-196F9D129081}] SEQPACKET 13
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 25: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{C9A2E87E-A1BB-41BB-918E-196F9D129081}] DATAGRAM 13
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 26: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{4B49286F-0136-4B17-8A9C-05D83A2F44B0}] SEQPACKET 3
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 27: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{4B49286F-0136-4B17-8A9C-05D83A2F44B0}] DATAGRAM 3
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 28: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{EB1EBC5B-54EB-4874-97F2-D41CA8386C55}] SEQPACKET 18
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 29: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{EB1EBC5B-54EB-4874-97F2-D41CA8386C55}] DATAGRAM 18
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 30: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{53CEB202-5E71-4201-A526-4B2FEEB512EE}] SEQPACKET 16
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 31: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{53CEB202-5E71-4201-A526-4B2FEEB512EE}] DATAGRAM 16
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 32: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{7BC966C3-E2E3-4E25-ABCF-F0EF2EC0B1CD}] SEQPACKET 14
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 33: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{7BC966C3-E2E3-4E25-ABCF-F0EF2EC0B1CD}] DATAGRAM 14
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 34: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{AED35E26-6A34-4CF2-BB53-DDB305B40402}] SEQPACKET 12
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 35: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{AED35E26-6A34-4CF2-BB53-DDB305B40402}] DATAGRAM 12
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 36: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{9E4E2DF7-DAB2-4444-95F5-79EAE79EB1A1}] SEQPACKET 11
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 37: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{9E4E2DF7-DAB2-4444-95F5-79EAE79EB1A1}] DATAGRAM 11
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 38: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{46DEBCCF-8358-46D3-8C56-C7581F8F99DC}] SEQPACKET 8
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 39: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{46DEBCCF-8358-46D3-8C56-C7581F8F99DC}] DATAGRAM 8
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 40: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{1F47B3B0-9BCA-42B2-8348-55FF9DE2AFCA}] SEQPACKET 2
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 41: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{1F47B3B0-9BCA-42B2-8348-55FF9DE2AFCA}] DATAGRAM 2
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 42: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{A37B2FC7-982D-4634-BAA1-6F046F18F5C4}] SEQPACKET 1
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 43: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{A37B2FC7-982D-4634-BAA1-6F046F18F5C4}] DATAGRAM 1
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 44: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{1AEEBF4A-31A0-4624-A6D2-227D76F90088}] SEQPACKET 5
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 45: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{1AEEBF4A-31A0-4624-A6D2-227D76F90088}] DATAGRAM 5
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Namespace Provider 0: Espace de noms NLAv1 (Network Location Awareness Legacy)
GUID: {6642243A-3BA8-4AA6-BAA5-2E0BD71FDD83}
Filename:
Description: Microsoft Windows NT/2k/XP name space provider
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: NLA-Namespace

Namespace Provider 1: Fournisseur Shim d'affectation de noms de messagerie
GUID: {964ACBA2-B2BC-40EB-8C6A-A6DB40161CAE}
Filename:

Namespace Provider 2: Fournisseur d'espace de noms du nuage PNRP
GUID: {03FE89CE-766D-4976-B9C1-BB9BC42C7B4D}
Filename:

Namespace Provider 3: Fournisseur d'espace de noms du nom PNRP
GUID: {03FE89CD-766D-4976-B9C1-BB9BC42C7B4D}
Filename:

Namespace Provider 4: mdnsNSP
GUID: {B600E6E9-553B-4A19-8696-335E5C896153}
Filename: C:\Program Files\Bonjour\mdnsNSP.dll
Description: Apple Rendezvous protocol
DB filename: %ProgramFiles%\Rendezvous\bin\mdnsNSP.dll
DB protocol: mdnsNSP

Namespace Provider 5: TCP/IP
GUID: {22059D40-7E9E-11CF-AE5A-00AA00A7112B}
Filename:
Description: Microsoft Windows NT/2k/XP TCP/IP name space provider
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: TCP/IP

Namespace Provider 6: NTDS
GUID: {3B2637EE-E580-11CF-A555-00C04FD8D4AC}
Filename: %SystemRoot%\System32\winrnr.dll
Description: Microsoft Windows NT/2k/XP name space provider
DB filename: %SystemRoot%\system32\winrnr.dll
DB protocol: NTDS

Voici le rapport fait à l'aide de usbfix :

############################## | UsbFix V6.058 |

User : stephane (Administrateurs) # GAIAII
Update on 26/11/2009 by Chiquitine29, C_XX & Chimay8
Start at: 20:53:57 | 26/11/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 3
Internet Explorer 7.0.6002.18005
Windows Firewall Status : Enabled

C:\ -> Disque fixe local # 455,46 Go (73,67 Go free) [HP] # NTFS
D:\ -> Disque fixe local # 10,3 Go (1,37 Go free) [FACTORY_IMAGE] # NTFS
E:\ -> Disque fixe local # 465,76 Go (338,34 Go free) [NEW_VOLUME] # NTFS
F:\ -> Disque CD-ROM
G:\ -> Disque CD-ROM
H:\ -> Disque amovible
I:\ -> Disque amovible
J:\ -> Disque amovible
K:\ -> Disque fixe local # 298,08 Go (154,76 Go free) [Baal] # NTFS
L:\ -> Disque amovible
M:\ -> Disque fixe local # 465,76 Go (280,51 Go free) [IOMEGA_HDD] # NTFS

############################## | Processus actifs |

C:\Windows\System32\smss.exe 484
C:\Windows\system32\csrss.exe 560
C:\Windows\system32\csrss.exe 620
C:\Windows\system32\wininit.exe 628
C:\Windows\system32\services.exe 668
C:\Windows\system32\lsass.exe 684
C:\Windows\system32\lsm.exe 692
C:\Windows\system32\winlogon.exe 728
C:\Windows\system32\svchost.exe 880
C:\Windows\system32\nvvsvc.exe 944
C:\Windows\system32\svchost.exe 972
C:\Windows\System32\svchost.exe 1040
C:\Windows\System32\svchost.exe 1116
C:\Windows\System32\svchost.exe 1144
C:\Windows\system32\svchost.exe 1156
C:\Windows\system32\SLsvc.exe 1316
C:\Windows\system32\svchost.exe 1352
C:\Windows\system32\nvvsvc.exe 1476
C:\Windows\system32\svchost.exe 1512
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 1712
C:\Program Files\Alwil Software\Avast4\ashServ.exe 1728
C:\Windows\System32\spoolsv.exe 260
c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe 344
C:\Windows\system32\svchost.exe 872
C:\Windows\system32\taskeng.exe 2332
c:\hp\HPEZBTN\HPBtnSrv.exe 2500
C:\Windows\system32\svchost.exe 2600
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe 2612
C:\Program Files\Common Files\LightScribe\LSSrvc.exe 2644
C:\Windows\System32\svchost.exe 2692
C:\Windows\System32\svchost.exe 2736
C:\Windows\system32\svchost.exe 2748
C:\Windows\system32\svchost.exe 2776
C:\Windows\System32\svchost.exe 2832
C:\Windows\system32\SearchIndexer.exe 2872
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe 3108
C:\Windows\system32\WUDFHost.exe 3260
c:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe 4172
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe 4256
C:\Windows\system32\taskeng.exe 4752
C:\Windows\system32\Dwm.exe 3692
C:\Windows\Explorer.EXE 2348
C:\Program Files\Windows Defender\MSASCui.exe 5024
C:\Windows\RtHDVCpl.exe 4940
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe 3680
c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe 4492
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe 3468
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe 5532
C:\Program Files\Java\jre6\bin\jusched.exe 5500
C:\Program Files\Alwil Software\Avast4\ashDisp.exe 2560
C:\Program Files\Windows Sidebar\sidebar.exe 5716
C:\Windows\ehome\ehtray.exe 5708
C:\Program Files\Windows Media Player\wmpnscfg.exe 3652
C:\Users\stephane\Documents\task.exe 3816
C:\Program Files\Windows Live\Messenger\msnmsgr.exe 3856
C:\Windows\ehome\ehmsas.exe 3484
C:\Program Files\Windows Media Player\wmpnetwk.exe 336
C:\Windows\system32\schtasks.exe 1060
C:\hp\kbd\kbd.exe 1752
C:\Windows\system32\conime.exe 4020
C:\Windows\System32\mobsync.exe 5576
C:\Program Files\Windows Live\Contacts\wlcomm.exe 3020
C:\Windows\system32\taskeng.exe 4772
C:\Program Files\iPod\bin\iPodService.exe 5464
C:\Program Files\iTunes\iTunesHelper.exe 4776
C:\Program Files\Internet Explorer\IEUser.exe 3404
C:\Program Files\Internet Explorer\iexplore.exe 1652
C:\Program Files\Mozilla Firefox\firefox.exe 4308
C:\Windows\system32\SearchProtocolHost.exe 3312
C:\Windows\system32\SearchFilterHost.exe 3496
C:\Windows\system32\wbem\wmiprvse.exe 5248

################## | Fichiers # Dossiers infectieux |

C:\Windows\System32\autorun.inf

################## | Registre # Clés infectieuses |

################## | Registre # Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{30d3676c-9370-11dd-ba2e-806e6f6e6963}
shell\Auto\command =cmd /C launch.bat
shell\AutoRun\command =C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL cmd /C launch.bat

HKCU\..\..\Explorer\MountPoints2\{fceb596e-a987-11dd-8f6a-001e8cc5a021}
shell\AutoRun\command =F:\Autorun.exe

################## | Cracks / Keygens / Serials |

"C:\Users\stephane\Desktop\ced\iso\GTA.IV-ArenaBG\Crack\LaunchGTAIV.exe"
02/10/2009 17:50 |Size 28160 |Crc32 373b5f85 |Md5 b4f4a2841f0857aaf18232724762cc52

"E:\download\Anno_1404_Dawn_Of_Discovery-Razor1911-Crack\Exe\Anno4.exe"
24/10/2009 23:02 |Size 14708672 |Crc32 cbdd026c |Md5 8e4edf35d1fe4d20cd606dd02702fbd2

"E:\download\Anno_1404_Dawn_Of_Discovery-Razor1911-Crack\Razor1911\Anno4.exe"
24/10/2009 23:03 |Size 14658048 |Crc32 b2279462 |Md5 7648ffdd996f1b64e7ff6fc107e69e4f

"E:\download\Anno_1404_Dawn_Of_Discovery-Razor1911-Crack\Razor1911\Trainer\rzr-a4t4.exe"
24/10/2009 23:02 |Size 361299 |Crc32 8557504c |Md5 e5fbd09d6443301fbcbc7a8f7f7931e8

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Crack\Civ4BeyondSword.exe"
27/12/2008 14:22 |Size 12767232 |Crc32 c06e1bee |Md5 a1fe79ac326c16bf4922a5c4158c4449

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Patch 1\Civ4BeyondTheSwordPatch3.02.exe"
27/12/2008 14:22 |Size 28388287 |Crc32 0635df5c |Md5 8313b9e254ad33edba1e7c24bfc8e56d

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Patch 2\Civ4BeyondTheSwordPatch3.03.exe"
27/12/2008 12:20 |Size 85021405 |Crc32 fc6af1c3 |Md5 c02e96f29160b4e6eda7eac62db24799

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Patch 3\Civ4BeyondTheSwordPatch3.13.exe"
27/12/2008 14:21 |Size 126887463 |Crc32 001fa334 |Md5 39d34db36bc165b5f75c31bdc0e4249b

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Civilization IV\Crack\Civilization4.exe"
27/12/2008 16:17 |Size 10407936 |Crc32 d8be76e3 |Md5 ae3b47863e7d88636a5c87d90643e845

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Civilization IV\Patch 1\Civ4Patch1.61.exe"
27/12/2008 14:24 |Size 48291703 |Crc32 45b9550a |Md5 dffd182f5e13813468a79eaccbb52520

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Civilization IV\Patch 2\Civ4Patch1.74_Final.exe"
27/12/2008 12:55 |Size 63228492 |Crc32 52574a24 |Md5 127a37aaff0f95f9f1e52f73f9c538da

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Warlords\Crack\Civ4Warlords.exe"
27/12/2008 15:38 |Size 9976832 |Crc32 64f34fdf |Md5 0b40d3ea2040552bd47cd9ff37205730

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Warlords\Patch 1\Civ4WarlordsPatch2.08.exe"
27/12/2008 15:38 |Size 67299871 |Crc32 f9c88a18 |Md5 1a4e98c1aaaf3ff9b65a64b118c80191

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Warlords\Patch 2\Civ4WarlordsPatch2.13.exe"
27/12/2008 12:56 |Size 84846989 |Crc32 b9fbfc2e |Md5 5378b7b7bf6eae6d22fd4ac67c9479cf

"E:\download\Grand_Theft_Auto_IV_Crack_Only-Razor1911\GTAIV.exe"
07/12/2008 16:41 |Size 13411688 |Crc32 be148d03 |Md5 9fa1c2a3f2932d46538bc14e715cfccc

"E:\download\Grand_Theft_Auto_IV_Crack_Only-Razor1911\LaunchGTAIV.exe"
07/12/2008 16:41 |Size 73728 |Crc32 83eb9232 |Md5 25ea124fc3e2b578c48900633d00a0bd

"E:\download\Sacred 2 Fallen Angel PC FR\Crack\DeleteSecuromReg.exe"
15/08/2009 20:32 |Size 65536 |Crc32 b9345910 |Md5 ecbcd35f44cebd44d64ff5d5529ed22b

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Crack\Civ4BeyondSword.exe"
27/12/2008 13:22 |Size 12767232 |Crc32 c06e1bee |Md5 a1fe79ac326c16bf4922a5c4158c4449

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Patch 1\Civ4BeyondTheSwordPatch3.02.exe"
27/12/2008 13:22 |Size 28388287 |Crc32 0635df5c |Md5 8313b9e254ad33edba1e7c24bfc8e56d

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Patch 2\Civ4BeyondTheSwordPatch3.03.exe"
27/12/2008 11:20 |Size 85021405 |Crc32 fc6af1c3 |Md5 c02e96f29160b4e6eda7eac62db24799

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Patch 3\Civ4BeyondTheSwordPatch3.13.exe"
27/12/2008 13:21 |Size 126887463 |Crc32 001fa334 |Md5 39d34db36bc165b5f75c31bdc0e4249b

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Civilization IV\Crack\Civilization4.exe"
27/12/2008 15:17 |Size 10407936 |Crc32 d8be76e3 |Md5 ae3b47863e7d88636a5c87d90643e845

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Civilization IV\Patch 1\Civ4Patch1.61.exe"
27/12/2008 13:24 |Size 48291703 |Crc32 45b9550a |Md5 dffd182f5e13813468a79eaccbb52520

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Civilization IV\Patch 2\Civ4Patch1.74_Final.exe"
27/12/2008 11:55 |Size 63228492 |Crc32 52574a24 |Md5 127a37aaff0f95f9f1e52f73f9c538da

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Warlords\Crack\Civ4Warlords.exe"
27/12/2008 14:38 |Size 9976832 |Crc32 64f34fdf |Md5 0b40d3ea2040552bd47cd9ff37205730

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Warlords\Patch 1\Civ4WarlordsPatch2.08.exe"
27/12/2008 14:38 |Size 67299871 |Crc32 f9c88a18 |Md5 1a4e98c1aaaf3ff9b65a64b118c80191

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Warlords\Patch 2\Civ4WarlordsPatch2.13.exe"
27/12/2008 11:56 |Size 84846989 |Crc32 b9fbfc2e |Md5 5378b7b7bf6eae6d22fd4ac67c9479cf

"M:\ioméga\2\iso games\GTA IV PCgame\GTA 4 v1.0.2.0 Crack - Razor1911\Crack\LaunchGTAIV.exe"
13/10/2009 11:24 |Size 73728 |Crc32 83eb9232 |Md5 25ea124fc3e2b578c48900633d00a0bd

"M:\ioméga\2\iso games\GTA IV PCgame\Readme\GTA 4 v1.0.2.0 Crack - Razor1911\LaunchGTAIV.exe"
13/10/2009 11:30 |Size 73728 |Crc32 83eb9232 |Md5 25ea124fc3e2b578c48900633d00a0bd

"M:\ioméga\2\iso games\Pro Evolution Soccer 2010\Crack\pes2010.exe"
26/10/2009 19:18 |Size 19603456 |Crc32 6a65cb88 |Md5 8d98473b892907f342bcf25384bc4a07

"M:\ioméga\2\utorren\téléchargement\Borderlands-RELOADED\Crack\Borderlands.exe"
22/10/2009 01:19 |Size 35745460 |Crc32 25f4b07e |Md5 af55737b3e2f399a3dd271d0f77dee3f

"C:\Users\stephane\Desktop\ced\iso\GTA.IV-ArenaBG\autre\Grand.Theft.Auto.IV.Crack.Offline.Activation.zip"
-> Contain : OfflineActivation.exe

"E:\download\Sacred 2 Fallen Angel PC FR\Crack\DeleteSecuromReg.zip"
-> Contain : DeleteSecuromReg.exe

"C:\Users\stephane\Desktop\ced\iso\serial+crack.Sims3.rar"
-> contain : rld-sim3.exe

"C:\Users\stephane\Desktop\ced\iso\serial+crack.Sims3.rar"
-> contain : TS3.exe

"E:\download\Grand_Theft_Auto_IV_Crack_Only-Razor1911\rzr-gta4-crack.rar"
-> contain : GTAIV.exe

"E:\download\Grand_Theft_Auto_IV_Crack_Only-Razor1911\rzr-gta4-crack.rar"
-> contain : LaunchGTAIV.exe

"E:\Iso game\Clive Barker's Jericho [PC rip] (~GHo$T~) (Fps équipe horreur)\Clive Barker's Jericho No-DVD Crack (Fairlight).rar"
-> contain : Jericho.exe

"M:\ioméga\2\utorren\téléchargement\Fallout 3 Hope Collection of mods\INSTALLATION\Fallout 3 No cd crack v1.4.0.6.rar"
-> contain : FalloutLauncher.exe

################## | ! Fin du rapport # UsbFix V6.058 ! |

Voici le rapport dois-je l'envoyer au site? ou n'est-ce pas préférable?

############################## | UsbFix V6.058 |

User : stephane (Administrateurs) # GAIAII
Update on 26/11/2009 by Chiquitine29, C_XX & Chimay8
Start at: 21:13:08 | 26/11/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 3
Internet Explorer 7.0.6002.18005
Windows Firewall Status : Enabled

C:\ -> Disque fixe local # 455,46 Go (73,66 Go free) [HP] # NTFS
D:\ -> Disque fixe local # 10,3 Go (1,37 Go free) [FACTORY_IMAGE] # NTFS
E:\ -> Disque fixe local # 465,76 Go (338,34 Go free) [NEW_VOLUME] # NTFS
F:\ -> Disque CD-ROM
G:\ -> Disque CD-ROM
H:\ -> Disque amovible
I:\ -> Disque amovible
J:\ -> Disque amovible
K:\ -> Disque fixe local # 298,08 Go (154,76 Go free) [Baal] # NTFS
L:\ -> Disque amovible
M:\ -> Disque fixe local # 465,76 Go (280,51 Go free) [IOMEGA_HDD] # NTFS

############################## | Processus actifs |

C:\Windows\System32\smss.exe 484
C:\Windows\system32\csrss.exe 560
C:\Windows\system32\csrss.exe 620
C:\Windows\system32\wininit.exe 628
C:\Windows\system32\services.exe 668
C:\Windows\system32\lsass.exe 684
C:\Windows\system32\lsm.exe 692
C:\Windows\system32\winlogon.exe 728
C:\Windows\system32\svchost.exe 880
C:\Windows\system32\nvvsvc.exe 944
C:\Windows\system32\svchost.exe 972
C:\Windows\System32\svchost.exe 1040
C:\Windows\System32\svchost.exe 1116
C:\Windows\System32\svchost.exe 1144
C:\Windows\system32\svchost.exe 1156
C:\Windows\system32\SLsvc.exe 1316
C:\Windows\system32\svchost.exe 1352
C:\Windows\system32\nvvsvc.exe 1476
C:\Windows\system32\svchost.exe 1512
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 1712
C:\Program Files\Alwil Software\Avast4\ashServ.exe 1728
C:\Windows\System32\spoolsv.exe 260
c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe 344
C:\Windows\system32\svchost.exe 872
C:\Windows\system32\taskeng.exe 2332
c:\hp\HPEZBTN\HPBtnSrv.exe 2500
C:\Windows\system32\svchost.exe 2600
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe 2612
C:\Program Files\Common Files\LightScribe\LSSrvc.exe 2644
C:\Windows\System32\svchost.exe 2692
C:\Windows\System32\svchost.exe 2736
C:\Windows\system32\svchost.exe 2748
C:\Windows\system32\svchost.exe 2776
C:\Windows\System32\svchost.exe 2832
C:\Windows\system32\SearchIndexer.exe 2872
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe 3108
C:\Windows\system32\WUDFHost.exe 3260
c:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe 4172
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe 4256
C:\Windows\system32\taskeng.exe 4752
C:\Windows\system32\Dwm.exe 3692
C:\Windows\Explorer.EXE 2348
C:\Program Files\Windows Defender\MSASCui.exe 5024
C:\Windows\RtHDVCpl.exe 4940
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe 3680
c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe 4492
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe 3468
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe 5532
C:\Program Files\Java\jre6\bin\jusched.exe 5500
C:\Program Files\Alwil Software\Avast4\ashDisp.exe 2560
C:\Program Files\Windows Sidebar\sidebar.exe 5716
C:\Windows\ehome\ehtray.exe 5708
C:\Program Files\Windows Media Player\wmpnscfg.exe 3652
C:\Users\stephane\Documents\task.exe 3816
C:\Windows\ehome\ehmsas.exe 3484
C:\Program Files\Windows Media Player\wmpnetwk.exe 336
C:\Windows\system32\schtasks.exe 1060
C:\hp\kbd\kbd.exe 1752
C:\Windows\system32\conime.exe 4020
C:\Windows\System32\mobsync.exe 5576
C:\Windows\system32\taskeng.exe 4772
C:\Program Files\iPod\bin\iPodService.exe 5464
C:\Program Files\iTunes\iTunesHelper.exe 4776
C:\Program Files\Internet Explorer\IEUser.exe 3404
C:\Program Files\Internet Explorer\iexplore.exe 1652
C:\Windows\system32\SearchProtocolHost.exe 3504
C:\Windows\system32\SearchFilterHost.exe 1488
C:\Windows\system32\wbem\wmiprvse.exe 5800

################## | Fichiers # Dossiers infectieux |

Supprimé ! C:\Windows\System32\autorun.inf

################## | Registre # Clés infectieuses |

Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDesktop"
Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoFind"
Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoFolderOptions"
Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoRun"
Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoViewContextMenu"

################## | Registre # Mountpoints2 |

Supprimé ! HKCU\...\Explorer\MountPoints2\{30d3676c-9370-11dd-ba2e-806e6f6e6963}\Shell\Auto\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{fceb596e-a987-11dd-8f6a-001e8cc5a021}\Shell\AutoRun\Command

################## | Listing des fichiers présent |

[20/03/2008 10:20|--a------|74] C:\autoexec.bat
[11/04/2009 07:36|-rahs----|333257] C:\bootmgr
[20/03/2008 18:08|-ra-s----|8192] C:\BOOTSECT.BAK
[20/11/2009 21:13|--a------|1486] C:\cleannavi.txt
[18/09/2006 22:43|--a------|10] C:\config.sys
[17/10/2009 22:36|--a------|125] C:\FINIS_IT.TXT
[10/12/2008 19:30|-rahs----|0] C:\IO.SYS
[10/12/2008 19:30|-rahs----|0] C:\MSDOS.SYS
[?|?|?] C:\pagefile.sys
[12/10/2008 17:07|--a------|574] C:\RHDSetup.log
[26/11/2009 17:14|--a------|1688] C:\TB.txt
[08/04/2009 18:38|--a------|1013] C:\updatedatfix.log
[26/11/2009 21:14|--a------|5583] C:\UsbFix.txt
[22/06/2007 16:44|---hs----|438328] D:\boo.mgr
[02/11/2006 00:53|---hs----|438840] D:\bootmgr
[19/06/2007 15:22|---hs----|1322] D:\Desktop.ini
[20/03/2008 20:21|---hs----|111] D:\MASTER.LOG
[04/10/2008 13:32|---hs----|428] D:\pcdr.ini
[19/06/2007 15:22|---hs----|181616] D:\Protect.ed
[20/03/2008 20:21|---hs----|44] D:\RESTORE.INI
[26/08/2008 18:06|--a------|727910400] E:\Disjoncté.avi
[15/03/2009 13:02|--a------|3051] K:\lapin.txt
[10/12/2007 09:38|--a------|28181] K:\mynameisearls03e04.srt
[10/12/2007 09:32|--a------|27855] K:\mynameisearls03e05.srt
[25/04/2009 13:06|--a------|42970300] K:\West Side De Paname.mp3

################## | Vaccination |

# C:\autorun.inf -> Dossier créé par UsbFix.
# D:\autorun.inf -> Dossier créé par UsbFix.
# E:\autorun.inf -> Dossier créé par UsbFix.
# K:\autorun.inf -> Dossier créé par UsbFix.
# M:\autorun.inf -> Dossier créé par UsbFix.

################## | Suspect | https://www.virustotal.com/gui/ |

################## | Cracks / Keygens / Serials |

"C:\Users\stephane\Desktop\ced\iso\GTA.IV-ArenaBG\Crack\LaunchGTAIV.exe"
02/10/2009 17:50 |Size 28160 |Crc32 373b5f85 |Md5 b4f4a2841f0857aaf18232724762cc52

"E:\download\Anno_1404_Dawn_Of_Discovery-Razor1911-Crack\Exe\Anno4.exe"
24/10/2009 23:02 |Size 14708672 |Crc32 cbdd026c |Md5 8e4edf35d1fe4d20cd606dd02702fbd2

"E:\download\Anno_1404_Dawn_Of_Discovery-Razor1911-Crack\Razor1911\Anno4.exe"
24/10/2009 23:03 |Size 14658048 |Crc32 b2279462 |Md5 7648ffdd996f1b64e7ff6fc107e69e4f

"E:\download\Anno_1404_Dawn_Of_Discovery-Razor1911-Crack\Razor1911\Trainer\rzr-a4t4.exe"
24/10/2009 23:02 |Size 361299 |Crc32 8557504c |Md5 e5fbd09d6443301fbcbc7a8f7f7931e8

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Crack\Civ4BeyondSword.exe"
27/12/2008 14:22 |Size 12767232 |Crc32 c06e1bee |Md5 a1fe79ac326c16bf4922a5c4158c4449

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Patch 1\Civ4BeyondTheSwordPatch3.02.exe"
27/12/2008 14:22 |Size 28388287 |Crc32 0635df5c |Md5 8313b9e254ad33edba1e7c24bfc8e56d

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Patch 2\Civ4BeyondTheSwordPatch3.03.exe"
27/12/2008 12:20 |Size 85021405 |Crc32 fc6af1c3 |Md5 c02e96f29160b4e6eda7eac62db24799

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Patch 3\Civ4BeyondTheSwordPatch3.13.exe"
27/12/2008 14:21 |Size 126887463 |Crc32 001fa334 |Md5 39d34db36bc165b5f75c31bdc0e4249b

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Civilization IV\Crack\Civilization4.exe"
27/12/2008 16:17 |Size 10407936 |Crc32 d8be76e3 |Md5 ae3b47863e7d88636a5c87d90643e845

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Civilization IV\Patch 1\Civ4Patch1.61.exe"
27/12/2008 14:24 |Size 48291703 |Crc32 45b9550a |Md5 dffd182f5e13813468a79eaccbb52520

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Civilization IV\Patch 2\Civ4Patch1.74_Final.exe"
27/12/2008 12:55 |Size 63228492 |Crc32 52574a24 |Md5 127a37aaff0f95f9f1e52f73f9c538da

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Warlords\Crack\Civ4Warlords.exe"
27/12/2008 15:38 |Size 9976832 |Crc32 64f34fdf |Md5 0b40d3ea2040552bd47cd9ff37205730

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Warlords\Patch 1\Civ4WarlordsPatch2.08.exe"
27/12/2008 15:38 |Size 67299871 |Crc32 f9c88a18 |Md5 1a4e98c1aaaf3ff9b65a64b118c80191

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Warlords\Patch 2\Civ4WarlordsPatch2.13.exe"
27/12/2008 12:56 |Size 84846989 |Crc32 b9fbfc2e |Md5 5378b7b7bf6eae6d22fd4ac67c9479cf

"E:\download\Grand_Theft_Auto_IV_Crack_Only-Razor1911\GTAIV.exe"
07/12/2008 16:41 |Size 13411688 |Crc32 be148d03 |Md5 9fa1c2a3f2932d46538bc14e715cfccc

"E:\download\Grand_Theft_Auto_IV_Crack_Only-Razor1911\LaunchGTAIV.exe"
07/12/2008 16:41 |Size 73728 |Crc32 83eb9232 |Md5 25ea124fc3e2b578c48900633d00a0bd

"E:\download\Sacred 2 Fallen Angel PC FR\Crack\DeleteSecuromReg.exe"
15/08/2009 20:32 |Size 65536 |Crc32 b9345910 |Md5 ecbcd35f44cebd44d64ff5d5529ed22b

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Crack\Civ4BeyondSword.exe"
27/12/2008 13:22 |Size 12767232 |Crc32 c06e1bee |Md5 a1fe79ac326c16bf4922a5c4158c4449

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Patch 1\Civ4BeyondTheSwordPatch3.02.exe"
27/12/2008 13:22 |Size 28388287 |Crc32 0635df5c |Md5 8313b9e254ad33edba1e7c24bfc8e56d

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Patch 2\Civ4BeyondTheSwordPatch3.03.exe"
27/12/2008 11:20 |Size 85021405 |Crc32 fc6af1c3 |Md5 c02e96f29160b4e6eda7eac62db24799

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Patch 3\Civ4BeyondTheSwordPatch3.13.exe"
27/12/2008 13:21 |Size 126887463 |Crc32 001fa334 |Md5 39d34db36bc165b5f75c31bdc0e4249b

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Civilization IV\Crack\Civilization4.exe"
27/12/2008 15:17 |Size 10407936 |Crc32 d8be76e3 |Md5 ae3b47863e7d88636a5c87d90643e845

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Civilization IV\Patch 1\Civ4Patch1.61.exe"
27/12/2008 13:24 |Size 48291703 |Crc32 45b9550a |Md5 dffd182f5e13813468a79eaccbb52520

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Civilization IV\Patch 2\Civ4Patch1.74_Final.exe"
27/12/2008 11:55 |Size 63228492 |Crc32 52574a24 |Md5 127a37aaff0f95f9f1e52f73f9c538da

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Warlords\Crack\Civ4Warlords.exe"
27/12/2008 14:38 |Size 9976832 |Crc32 64f34fdf |Md5 0b40d3ea2040552bd47cd9ff37205730

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Warlords\Patch 1\Civ4WarlordsPatch2.08.exe"
27/12/2008 14:38 |Size 67299871 |Crc32 f9c88a18 |Md5 1a4e98c1aaaf3ff9b65a64b118c80191

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Warlords\Patch 2\Civ4WarlordsPatch2.13.exe"
27/12/2008 11:56 |Size 84846989 |Crc32 b9fbfc2e |Md5 5378b7b7bf6eae6d22fd4ac67c9479cf

"M:\ioméga\2\iso games\GTA IV PCgame\GTA 4 v1.0.2.0 Crack - Razor1911\Crack\LaunchGTAIV.exe"
13/10/2009 11:24 |Size 73728 |Crc32 83eb9232 |Md5 25ea124fc3e2b578c48900633d00a0bd

"M:\ioméga\2\iso games\GTA IV PCgame\Readme\GTA 4 v1.0.2.0 Crack - Razor1911\LaunchGTAIV.exe"
13/10/2009 11:30 |Size 73728 |Crc32 83eb9232 |Md5 25ea124fc3e2b578c48900633d00a0bd

"M:\ioméga\2\iso games\Pro Evolution Soccer 2010\Crack\pes2010.exe"
26/10/2009 19:18 |Size 19603456 |Crc32 6a65cb88 |Md5 8d98473b892907f342bcf25384bc4a07

"M:\ioméga\2\utorren\téléchargement\Borderlands-RELOADED\Crack\Borderlands.exe"
22/10/2009 01:19 |Size 35745460 |Crc32 25f4b07e |Md5 af55737b3e2f399a3dd271d0f77dee3f

"C:\Users\stephane\Desktop\ced\iso\GTA.IV-ArenaBG\autre\Grand.Theft.Auto.IV.Crack.Offline.Activation.zip"
-> Contain : OfflineActivation.exe

"E:\download\Sacred 2 Fallen Angel PC FR\Crack\DeleteSecuromReg.zip"
-> Contain : DeleteSecuromReg.exe

"C:\Users\stephane\Desktop\ced\iso\serial+crack.Sims3.rar"
-> contain : rld-sim3.exe

"C:\Users\stephane\Desktop\ced\iso\serial+crack.Sims3.rar"
-> contain : TS3.exe

"E:\download\Grand_Theft_Auto_IV_Crack_Only-Razor1911\rzr-gta4-crack.rar"
-> contain : GTAIV.exe

"E:\download\Grand_Theft_Auto_IV_Crack_Only-Razor1911\rzr-gta4-crack.rar"
-> contain : LaunchGTAIV.exe

"E:\Iso game\Clive Barker's Jericho [PC rip] (~GHo$T~) (Fps équipe horreur)\Clive Barker's Jericho No-DVD Crack (Fairlight).rar"
-> contain : Jericho.exe

"M:\ioméga\2\utorren\téléchargement\Fallout 3 Hope Collection of mods\INSTALLATION\Fallout 3 No cd crack v1.4.0.6.rar"
-> contain : FalloutLauncher.exe

Merci pour ton aide précieuse.

Voici le rapport dois-je l'envoyer au site? ou n'est-ce pas préférable?

############################## | UsbFix V6.058 |

User : stephane (Administrateurs) # GAIAII
Update on 26/11/2009 by Chiquitine29, C_XX & Chimay8
Start at: 21:13:08 | 26/11/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 3
Internet Explorer 7.0.6002.18005
Windows Firewall Status : Enabled

C:\ -> Disque fixe local # 455,46 Go (73,66 Go free) [HP] # NTFS
D:\ -> Disque fixe local # 10,3 Go (1,37 Go free) [FACTORY_IMAGE] # NTFS
E:\ -> Disque fixe local # 465,76 Go (338,34 Go free) [NEW_VOLUME] # NTFS
F:\ -> Disque CD-ROM
G:\ -> Disque CD-ROM
H:\ -> Disque amovible
I:\ -> Disque amovible
J:\ -> Disque amovible
K:\ -> Disque fixe local # 298,08 Go (154,76 Go free) [Baal] # NTFS
L:\ -> Disque amovible
M:\ -> Disque fixe local # 465,76 Go (280,51 Go free) [IOMEGA_HDD] # NTFS

############################## | Processus actifs |

C:\Windows\System32\smss.exe 484
C:\Windows\system32\csrss.exe 560
C:\Windows\system32\csrss.exe 620
C:\Windows\system32\wininit.exe 628
C:\Windows\system32\services.exe 668
C:\Windows\system32\lsass.exe 684
C:\Windows\system32\lsm.exe 692
C:\Windows\system32\winlogon.exe 728
C:\Windows\system32\svchost.exe 880
C:\Windows\system32\nvvsvc.exe 944
C:\Windows\system32\svchost.exe 972
C:\Windows\System32\svchost.exe 1040
C:\Windows\System32\svchost.exe 1116
C:\Windows\System32\svchost.exe 1144
C:\Windows\system32\svchost.exe 1156
C:\Windows\system32\SLsvc.exe 1316
C:\Windows\system32\svchost.exe 1352
C:\Windows\system32\nvvsvc.exe 1476
C:\Windows\system32\svchost.exe 1512
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 1712
C:\Program Files\Alwil Software\Avast4\ashServ.exe 1728
C:\Windows\System32\spoolsv.exe 260
c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe 344
C:\Windows\system32\svchost.exe 872
C:\Windows\system32\taskeng.exe 2332
c:\hp\HPEZBTN\HPBtnSrv.exe 2500
C:\Windows\system32\svchost.exe 2600
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe 2612
C:\Program Files\Common Files\LightScribe\LSSrvc.exe 2644
C:\Windows\System32\svchost.exe 2692
C:\Windows\System32\svchost.exe 2736
C:\Windows\system32\svchost.exe 2748
C:\Windows\system32\svchost.exe 2776
C:\Windows\System32\svchost.exe 2832
C:\Windows\system32\SearchIndexer.exe 2872
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe 3108
C:\Windows\system32\WUDFHost.exe 3260
c:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe 4172
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe 4256
C:\Windows\system32\taskeng.exe 4752
C:\Windows\system32\Dwm.exe 3692
C:\Windows\Explorer.EXE 2348
C:\Program Files\Windows Defender\MSASCui.exe 5024
C:\Windows\RtHDVCpl.exe 4940
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe 3680
c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe 4492
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe 3468
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe 5532
C:\Program Files\Java\jre6\bin\jusched.exe 5500
C:\Program Files\Alwil Software\Avast4\ashDisp.exe 2560
C:\Program Files\Windows Sidebar\sidebar.exe 5716
C:\Windows\ehome\ehtray.exe 5708
C:\Program Files\Windows Media Player\wmpnscfg.exe 3652
C:\Users\stephane\Documents\task.exe 3816
C:\Windows\ehome\ehmsas.exe 3484
C:\Program Files\Windows Media Player\wmpnetwk.exe 336
C:\Windows\system32\schtasks.exe 1060
C:\hp\kbd\kbd.exe 1752
C:\Windows\system32\conime.exe 4020
C:\Windows\System32\mobsync.exe 5576
C:\Windows\system32\taskeng.exe 4772
C:\Program Files\iPod\bin\iPodService.exe 5464
C:\Program Files\iTunes\iTunesHelper.exe 4776
C:\Program Files\Internet Explorer\IEUser.exe 3404
C:\Program Files\Internet Explorer\iexplore.exe 1652
C:\Windows\system32\SearchProtocolHost.exe 3504
C:\Windows\system32\SearchFilterHost.exe 1488
C:\Windows\system32\wbem\wmiprvse.exe 5800

################## | Fichiers # Dossiers infectieux |

Supprimé ! C:\Windows\System32\autorun.inf

################## | Registre # Clés infectieuses |

Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDesktop"
Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoFind"
Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoFolderOptions"
Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoRun"
Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoViewContextMenu"

################## | Registre # Mountpoints2 |

Supprimé ! HKCU\...\Explorer\MountPoints2\{30d3676c-9370-11dd-ba2e-806e6f6e6963}\Shell\Auto\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{fceb596e-a987-11dd-8f6a-001e8cc5a021}\Shell\AutoRun\Command

################## | Listing des fichiers présent |

[20/03/2008 10:20|--a------|74] C:\autoexec.bat
[11/04/2009 07:36|-rahs----|333257] C:\bootmgr
[20/03/2008 18:08|-ra-s----|8192] C:\BOOTSECT.BAK
[20/11/2009 21:13|--a------|1486] C:\cleannavi.txt
[18/09/2006 22:43|--a------|10] C:\config.sys
[17/10/2009 22:36|--a------|125] C:\FINIS_IT.TXT
[10/12/2008 19:30|-rahs----|0] C:\IO.SYS
[10/12/2008 19:30|-rahs----|0] C:\MSDOS.SYS
[?|?|?] C:\pagefile.sys
[12/10/2008 17:07|--a------|574] C:\RHDSetup.log
[26/11/2009 17:14|--a------|1688] C:\TB.txt
[08/04/2009 18:38|--a------|1013] C:\updatedatfix.log
[26/11/2009 21:14|--a------|5583] C:\UsbFix.txt
[22/06/2007 16:44|---hs----|438328] D:\boo.mgr
[02/11/2006 00:53|---hs----|438840] D:\bootmgr
[19/06/2007 15:22|---hs----|1322] D:\Desktop.ini
[20/03/2008 20:21|---hs----|111] D:\MASTER.LOG
[04/10/2008 13:32|---hs----|428] D:\pcdr.ini
[19/06/2007 15:22|---hs----|181616] D:\Protect.ed
[20/03/2008 20:21|---hs----|44] D:\RESTORE.INI
[26/08/2008 18:06|--a------|727910400] E:\Disjoncté.avi
[15/03/2009 13:02|--a------|3051] K:\lapin.txt
[10/12/2007 09:38|--a------|28181] K:\mynameisearls03e04.srt
[10/12/2007 09:32|--a------|27855] K:\mynameisearls03e05.srt
[25/04/2009 13:06|--a------|42970300] K:\West Side De Paname.mp3

################## | Vaccination |

# C:\autorun.inf -> Dossier créé par UsbFix.
# D:\autorun.inf -> Dossier créé par UsbFix.
# E:\autorun.inf -> Dossier créé par UsbFix.
# K:\autorun.inf -> Dossier créé par UsbFix.
# M:\autorun.inf -> Dossier créé par UsbFix.

################## | Suspect | https://www.virustotal.com/gui/ |

################## | Cracks / Keygens / Serials |

"C:\Users\stephane\Desktop\ced\iso\GTA.IV-ArenaBG\Crack\LaunchGTAIV.exe"
02/10/2009 17:50 |Size 28160 |Crc32 373b5f85 |Md5 b4f4a2841f0857aaf18232724762cc52

"E:\download\Anno_1404_Dawn_Of_Discovery-Razor1911-Crack\Exe\Anno4.exe"
24/10/2009 23:02 |Size 14708672 |Crc32 cbdd026c |Md5 8e4edf35d1fe4d20cd606dd02702fbd2

"E:\download\Anno_1404_Dawn_Of_Discovery-Razor1911-Crack\Razor1911\Anno4.exe"
24/10/2009 23:03 |Size 14658048 |Crc32 b2279462 |Md5 7648ffdd996f1b64e7ff6fc107e69e4f

"E:\download\Anno_1404_Dawn_Of_Discovery-Razor1911-Crack\Razor1911\Trainer\rzr-a4t4.exe"
24/10/2009 23:02 |Size 361299 |Crc32 8557504c |Md5 e5fbd09d6443301fbcbc7a8f7f7931e8

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Crack\Civ4BeyondSword.exe"
27/12/2008 14:22 |Size 12767232 |Crc32 c06e1bee |Md5 a1fe79ac326c16bf4922a5c4158c4449

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Patch 1\Civ4BeyondTheSwordPatch3.02.exe"
27/12/2008 14:22 |Size 28388287 |Crc32 0635df5c |Md5 8313b9e254ad33edba1e7c24bfc8e56d

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Patch 2\Civ4BeyondTheSwordPatch3.03.exe"
27/12/2008 12:20 |Size 85021405 |Crc32 fc6af1c3 |Md5 c02e96f29160b4e6eda7eac62db24799

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Patch 3\Civ4BeyondTheSwordPatch3.13.exe"
27/12/2008 14:21 |Size 126887463 |Crc32 001fa334 |Md5 39d34db36bc165b5f75c31bdc0e4249b

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Civilization IV\Crack\Civilization4.exe"
27/12/2008 16:17 |Size 10407936 |Crc32 d8be76e3 |Md5 ae3b47863e7d88636a5c87d90643e845

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Civilization IV\Patch 1\Civ4Patch1.61.exe"
27/12/2008 14:24 |Size 48291703 |Crc32 45b9550a |Md5 dffd182f5e13813468a79eaccbb52520

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Civilization IV\Patch 2\Civ4Patch1.74_Final.exe"
27/12/2008 12:55 |Size 63228492 |Crc32 52574a24 |Md5 127a37aaff0f95f9f1e52f73f9c538da

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Warlords\Crack\Civ4Warlords.exe"
27/12/2008 15:38 |Size 9976832 |Crc32 64f34fdf |Md5 0b40d3ea2040552bd47cd9ff37205730

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Warlords\Patch 1\Civ4WarlordsPatch2.08.exe"
27/12/2008 15:38 |Size 67299871 |Crc32 f9c88a18 |Md5 1a4e98c1aaaf3ff9b65a64b118c80191

"E:\download\Civilization 4 Complete\Civilization Patches + Cracks\Warlords\Patch 2\Civ4WarlordsPatch2.13.exe"
27/12/2008 12:56 |Size 84846989 |Crc32 b9fbfc2e |Md5 5378b7b7bf6eae6d22fd4ac67c9479cf

"E:\download\Grand_Theft_Auto_IV_Crack_Only-Razor1911\GTAIV.exe"
07/12/2008 16:41 |Size 13411688 |Crc32 be148d03 |Md5 9fa1c2a3f2932d46538bc14e715cfccc

"E:\download\Grand_Theft_Auto_IV_Crack_Only-Razor1911\LaunchGTAIV.exe"
07/12/2008 16:41 |Size 73728 |Crc32 83eb9232 |Md5 25ea124fc3e2b578c48900633d00a0bd

"E:\download\Sacred 2 Fallen Angel PC FR\Crack\DeleteSecuromReg.exe"
15/08/2009 20:32 |Size 65536 |Crc32 b9345910 |Md5 ecbcd35f44cebd44d64ff5d5529ed22b

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Crack\Civ4BeyondSword.exe"
27/12/2008 13:22 |Size 12767232 |Crc32 c06e1bee |Md5 a1fe79ac326c16bf4922a5c4158c4449

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Patch 1\Civ4BeyondTheSwordPatch3.02.exe"
27/12/2008 13:22 |Size 28388287 |Crc32 0635df5c |Md5 8313b9e254ad33edba1e7c24bfc8e56d

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Patch 2\Civ4BeyondTheSwordPatch3.03.exe"
27/12/2008 11:20 |Size 85021405 |Crc32 fc6af1c3 |Md5 c02e96f29160b4e6eda7eac62db24799

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Beyond The Sword\Patch 3\Civ4BeyondTheSwordPatch3.13.exe"
27/12/2008 13:21 |Size 126887463 |Crc32 001fa334 |Md5 39d34db36bc165b5f75c31bdc0e4249b

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Civilization IV\Crack\Civilization4.exe"
27/12/2008 15:17 |Size 10407936 |Crc32 d8be76e3 |Md5 ae3b47863e7d88636a5c87d90643e845

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Civilization IV\Patch 1\Civ4Patch1.61.exe"
27/12/2008 13:24 |Size 48291703 |Crc32 45b9550a |Md5 dffd182f5e13813468a79eaccbb52520

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Civilization IV\Patch 2\Civ4Patch1.74_Final.exe"
27/12/2008 11:55 |Size 63228492 |Crc32 52574a24 |Md5 127a37aaff0f95f9f1e52f73f9c538da

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Warlords\Crack\Civ4Warlords.exe"
27/12/2008 14:38 |Size 9976832 |Crc32 64f34fdf |Md5 0b40d3ea2040552bd47cd9ff37205730

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Warlords\Patch 1\Civ4WarlordsPatch2.08.exe"
27/12/2008 14:38 |Size 67299871 |Crc32 f9c88a18 |Md5 1a4e98c1aaaf3ff9b65a64b118c80191

"M:\ioméga\2\iso games\Civilization 4 Complete\Civilization Patches + Cracks\Warlords\Patch 2\Civ4WarlordsPatch2.13.exe"
27/12/2008 11:56 |Size 84846989 |Crc32 b9fbfc2e |Md5 5378b7b7bf6eae6d22fd4ac67c9479cf

"M:\ioméga\2\iso games\GTA IV PCgame\GTA 4 v1.0.2.0 Crack - Razor1911\Crack\LaunchGTAIV.exe"
13/10/2009 11:24 |Size 73728 |Crc32 83eb9232 |Md5 25ea124fc3e2b578c48900633d00a0bd

"M:\ioméga\2\iso games\GTA IV PCgame\Readme\GTA 4 v1.0.2.0 Crack - Razor1911\LaunchGTAIV.exe"
13/10/2009 11:30 |Size 73728 |Crc32 83eb9232 |Md5 25ea124fc3e2b578c48900633d00a0bd

"M:\ioméga\2\iso games\Pro Evolution Soccer 2010\Crack\pes2010.exe"
26/10/2009 19:18 |Size 19603456 |Crc32 6a65cb88 |Md5 8d98473b892907f342bcf25384bc4a07

"M:\ioméga\2\utorren\téléchargement\Borderlands-RELOADED\Crack\Borderlands.exe"
22/10/2009 01:19 |Size 35745460 |Crc32 25f4b07e |Md5 af55737b3e2f399a3dd271d0f77dee3f

"C:\Users\stephane\Desktop\ced\iso\GTA.IV-ArenaBG\autre\Grand.Theft.Auto.IV.Crack.Offline.Activation.zip"
-> Contain : OfflineActivation.exe

"E:\download\Sacred 2 Fallen Angel PC FR\Crack\DeleteSecuromReg.zip"
-> Contain : DeleteSecuromReg.exe

"C:\Users\stephane\Desktop\ced\iso\serial+crack.Sims3.rar"
-> contain : rld-sim3.exe

"C:\Users\stephane\Desktop\ced\iso\serial+crack.Sims3.rar"
-> contain : TS3.exe

"E:\download\Grand_Theft_Auto_IV_Crack_Only-Razor1911\rzr-gta4-crack.rar"
-> contain : GTAIV.exe

"E:\download\Grand_Theft_Auto_IV_Crack_Only-Razor1911\rzr-gta4-crack.rar"
-> contain : LaunchGTAIV.exe

"E:\Iso game\Clive Barker's Jericho [PC rip] (~GHo$T~) (Fps équipe horreur)\Clive Barker's Jericho No-DVD Crack (Fairlight).rar"
-> contain : Jericho.exe

"M:\ioméga\2\utorren\téléchargement\Fallout 3 Hope Collection of mods\INSTALLATION\Fallout 3 No cd crack v1.4.0.6.rar"
-> contain : FalloutLauncher.exe

Merci pour ton aide précieuse.