The computer blocks and restarts by itself

Solved
Blei Posted messages 74 Status Member -  
 gen-hackman -
Hello,
Surely many have already asked this question, but my computer has not only become very slow, but freezes or restarts all by itself after causing a beautiful blue screen with lots of white text... SERIOUS ERROR

Just for info: My computer runs on Windows XP - SP3

I take the liberty of inserting below the log of my computer, made with HijackThis.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:01:53, on 14/12/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Microsoft Security Essentials\MsMpEng.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Google\Update\1.2.183.13\GoogleCrashHandler.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Avira\AntiVir Desktop\sched.exe
D:\Program Files\Avira\AntiVir Desktop\avgnt.exe
D:\Program Files\Avira\AntiVir Desktop\avguard.exe
D:\WINDOWS\SOUNDMAN.EXE
D:\WINDOWS\svcadmin.exe
D:\Program Files\Microsoft Security Essentials\msseces.exe
D:\Program Files\Java\jre6\bin\jusched.exe
D:\WINDOWS\system32\rundll32.exe
D:\Program Files\VoipBuster.com\VoipBuster\VoipBuster.exe
D:\Documents and Settings\BC\Bureau\XAMPP\xampp\apache\bin\httpd.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Microsoft ActiveSync\Wcescomm.exe
D:\Program Files\devolo\dlanaudioextender\audioselector\audioselectorapp.exe
D:\Program Files\Bonjour\mDNSResponder.exe
D:\Program Files\TOPCOM\BULTER 4812 v1.1\Butler 4812 USB VoIP.exe
D:\PROGRA~1\MI3AA1~1\rapimgr.exe
D:\Program Files\Stardock\Impulse\Now\ImpulseNow.exe
D:\Documents and Settings\BC\Bureau\XAMPP\xampp\FileZillaFTP\FileZilla server.exe
D:\Program Files\Java\jre6\bin\jqs.exe
D:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
D:\Documents and Settings\BC\Bureau\XAMPP\xampp\mysql\bin\mysqld.exe
D:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\system32\slserv.exe
D:\Program Files\devolo\dlanaudioextender\VaudioServer.exe
D:\Documents and Settings\BC\Bureau\XAMPP\xampp\apache\bin\httpd.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - D:\Program Files\Shareaza\RazaWebHook32.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - D:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - D:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - D:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [avgnt] "D:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "D:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe_ID0ENQBO] D:\PROGRA~1\FICHIE~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [Nuance OmniPage 17-reminder] "D:\Program Files\Nuance\OmniPage17\Ereg\Ereg.exe" -r "D:\Documents and Settings\All Users\Application Data\ScanSoft\OmniPage 17\Ereg\Ereg.ini"
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "D:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [MSSE] "D:\Program Files\Microsoft Security Essentials\msseces.exe" -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NiwradSoft Welcome] D:\WINDOWS\NiwradSoft Shell Pack\Tools\NS Welcome.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [VoipBuster] "D:\Program Files\VoipBuster.com\VoipBuster\VoipBuster.exe" -nosplash -minimized
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "D:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
O4 - HKCU\..\Run: [devolo AudioSelector] D:\Program Files\devolo\dlanaudioextender\audioselector\audioselectorapp.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: ImpulseNow.lnk = D:\Program Files\Stardock\Impulse\Now\ImpulseNow.exe
O4 - Global Startup: Butler 4812 USB VoIP.lnk = ?
O8 - Extra context menu item: Ajouter la cible du lien à un fichier PDF existant - res://D:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Ajouter à un fichier PDF existant - res://D:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir au format Adobe PDF - res://D:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF - res://D:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Download with &Shareaza - res://D:\Program Files\Shareaza\RazaWebHook32.dll/3000
O8 - Extra context menu item: Export to Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - D:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04FAE2D4F} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04FAE2D4F} - D:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://fichiers.touslesdrivers.com/maconfig/MaConfig_3_5_0_0.cab
O20 - AppInit_DLLs: printprov.dll
O22 - SharedTaskScheduler: FencesShellExt - {1984DD45-52CF-49cd-AB77-18F378FEA264} - D:\Program Files\Stardock\Fences\FencesMenu.dll
O23 - Service: Adobe Version Cue CS4 - Adobe Systems Incorporated - D:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - D:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - D:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Anyplace Control Security - Unknown owner - D:\WINDOWS\svcadmin.exe
O23 - Service: Apache2.2 - Apache Software Foundation - D:\Documents and Settings\BC\Bureau\XAMPP\xampp\apache\bin\httpd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - D:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FileZilla Server - FileZilla Project - D:\Documents and Settings\BC\Bureau\XAMPP\xampp\FileZillaFTP\FileZilla server.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - D:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Service Google Update (gupdate1c9de32639b8a5e) (gupdate1c9de32639b8a5e) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - D:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: MySQL - Unknown owner - D:\Documents and Settings\BC\Bureau\XAMPP\xampp\mysql\bin\mysqld.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - D:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - D:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Virtual Audio Service (VAService) - Unknown owner - D:\Program Files\devolo\dlanaudioextender\VaudioServer.exe

--
End of file - 10382 bytes

Thanks a lot for your help

--
Life is too short, so let's live it!!!
Configuration: Windows XP Firefox 3.5.5

28 answers

  • 1
  • 2
  1. gen-hackman
     
    Hi you have two antivirus programs, maybe that’s why I suggest removing Microsoft Essentials.
    --
    ♢G3и-номка@¤камуи™©®♢
    1
  2. Oddfan321
     
    Hello, go do an online scan on Kaspersky.com

    Best regards
    0
  3. Oddfan321
     
    +1, you have antivirus and Microsoft follows its advice: uninstall Microsoft Security Essentials.

    Sincerely and +1 :D
    0
  4. Blei Posted messages 74 Status Member
     
    OK, Thanks....

    Let's get started with a cleanup of Microsoft Suite Essentials...

    --
    Life is too short, so let's live it!!!
    0
  5. Blei Posted messages 74 Status Member
     
    Hello everyone.

    After uninstalling Microsoft Security Essentials, my computer keeps shutting down by itself and/or shows that famous blue screen :(

    I’m wondering if it could be a virus at the processor level, because when I try to copy or move fairly large files (1-2 GB) it crashes or restarts every time, indicating hard drive problems. Maybe it’s simply my hard drive that has reached the end of its life (2007 SATA).

    Does anyone have a suggestion or proposal to try?

    Thank you very much for your help
    Blei
    --
    Life is too short, so let's live it!!!
    0
  6. gen-hackman
     
    hello check the dust level of the processor fan

    Download OTL by OLDTimer

    save it to your Desktop.

    ▶ Double click (for Vista => right-click "Run as administrator") on OTL.exe to launch it.

    ▶ Check the 2 boxes Lop and Purity

    ▶ Check the box in front of scan all users

    ▶ set it to "60 Days"

    ▶ in the left column, set everything to all

    do not modify this:

    "files created within" and "files modified within"


    ▶Click on Run Scan.

    At the end of the scan, Notepad will open with the report (OTL.txt).

    This file is on your Desktop (usually C:\Documents and settings\your_session_name\OTL.txt)

    ▶▶▶ DO NOT POST IT ON THE FORUM

    To send it to me, click on this link: http://www.cijoint.fr/

    ▶ Click Browse and locate the above file.

    ▶ Click Open.

    ▶ Click "Click here to upload the file".

    A link of this form will be added to the page.

    http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt

    is added to the page.

    ▶ Copy this link into your reply.

    ▶▶ You will do the same with the "Extra.txt".

    --
    ♦G3и-н@¢км@и™©®♦
    0
  7. Blei Posted messages 74 Status Member
     
    Thank you very much gen-hackman.

    Right now I can’t try, because I’m at work, but as soon as I get home I’ll get into it.

    Thanks again
    Have a great day
    --
    Life is too short, so let’s live it!!!
    0
  8. gen-hackman
     
    ok this diagnosis will tell us more about the inside of your PC and will help us address what needs to be addressed
    --
    ◊G3н-іаҳкфа™©®◊
    0
    1. Blei Posted messages 74 Status Member
       
      Hello gen-hackman, I sent you tonight, at dawn, the 2 files as requested, to your Hotmail.fr inbox (the one listed on your profile). Best regards, Blei -- Life is too short, so let's live it!!!
      0
  9. gen-hackman
     
    this is not what was indicated
    --
    ◊G3о‑екраий™©®
    0
    1. Blei Posted messages 74 Status Member
       
      Gen-hackman, good afternoon again What should I do then? Or what did I do wrong? -- Life is too short, so let's live it!!!
      0
  10. gen-hackman
     
    ▶▶▶ DO NOT POST IT ON THE FORUM

    To send it to me, click this link: http://www.cijoint.fr/

    ▶ Click Browse and locate the file above.

    ▶ Click Open.

    ▶ Click "Click here to upload the file."

    A link of this form is added to the page:

    http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt

    Copy this link into your reply.

    ▶ Do the same with "Extra.txt".
    --

    ◊ G3 - @¢ƙ@ ™©

    0
    1. Blei Posted messages 74 Status Member
       
      But I have uploaded the 2 files, the OLT and the EXTRA in TXT, that I sent you by email.
      Besides, I just checked and the 2 files are visible under the links I sent you by email.

      Sorry if I’m a bit lost, lá.
      --
      Life is too short, so let’s live it!!!
      0
  11. gen-hackman
     
    it was necessary to put the two links here in such a way that if I can’t fix your issue, another helper can come to assist
    --
    ◊G3г-налка@¢кф@™©®◊
    0
  12. Blei Posted messages 74 Status Member
     
    The two requested links:
    OTL.txt: http://www.cijoint.fr/cjlink.php?file=cj200912/cij8Tk29YV.txt
    Extras.txt: http://www.cijoint.fr/cjlink.php?file=cj200912/cijr1hNtcr.txt
    --
    Life is too short, so let's live it!!!
    0
  13. gen-hackman
     
    you did not follow the instructions... there is one thing I had asked you not to modify, you did it anyway

    ▶ Download and install UsbFix by Chiquitine29

    ▶ Connect your external data sources to your PC (USB key, external hard drive, etc.) that could have been infected without opening them

    ▶ Double-click the UsbFix shortcut on your desktop

    ▶ In the main menu choose the "F" option for French and press [Enter]

    ▶ In the second menu choose the "1" option (search) and press [Enter]

    ▶ Let the tool run

    ▶ Then post the UsbFix.txt report that appears

    Note: The UsbFix.txt report is saved at the root of the drive. (C:\UsbFix.txt)

    Ctrl+A to select all, Ctrl+C to copy and Ctrl+V to paste

    Note: "Process.exe", a component of the tool, is detected by some antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) as a RiskTool. It is not a virus, but a utility intended to terminate processes. Misused, this utility could stop security software (Antivirus, Firewall...) hence the alert from these antiviruses.

    then:

    ▶ Connect your external data sources to your PC (USB key, external hard drive, etc.) that could have been infected without opening them

    ▶ Double-click (right-click "Run as administrator" for Vista) the UsbFix shortcut on your desktop

    ▶ In the main menu choose the "F" option for French and press [Enter]

    ▶ In the second menu choose the "2" option (Removal) and press [Enter]

    ▶ Your desktop will disappear and the PC will restart

    ▶ On reboot, UsbFix will scan your PC, let the tool run

    ▶ Then post the UsbFix.txt report that appears with the desktop

    Note: The UsbFix.txt report is saved at the root of the drive. (C:\UsbFix.txt)

    Ctrl+A to select all, Ctrl+C to copy and Ctrl+V to paste

    then:

    ▶ relaunch USBFix, option uninstall

    then:



    ▶ download LOP S&D on your Desktop.

    ▶ Double-click it to start the installation

    ▶ Then double-click the Lop S&D shortcut on your Desktop

    ▶ Select the desired language, then choose option 1 (Search)

    ▶ Wait until the scan finishes

    ▶ Post the generated report (C:\lopR.txt)

    --

    ◙ G3 to @¢ kof @ ©

    0
    1. Blei Posted messages 74 Status Member
       
      USBfix:


      ############################## | UsbFix V6.064 |

      User : BC (Administrators) # BLEICRIS
      Update on 16/12/2009 by Chiquitine29, C_XX & Chimay8
      Start at: 22:53:29 | 16/12/2009
      Website : http://pagesperso-orange.fr/NosTools/index.html
      Contact : FindyKill.Contact@gmail.com

      Intel(R) Pentium(R) 4 CPU 3.00GHz
      Microsoft Windows XP Professional (5.1.2600 32-bit) # Service Pack 3
      Internet Explorer 8.0.6001.18702
      Windows Firewall Status : Enabled
      AV : AntiVir Desktop 9.0.1.32 [ Enabled | Updated ]

      A:\ -> Floppy drive 3 ½ inches
      C:\ -> Local fixed disk # 314.01 GB (6.19 GB free) [BleiCris_PERMANENT] # NTFS
      D:\ -> Local fixed disk # 58.59 GB (14.38 GB free) [BleiCris-Programas] # NTFS
      E:\ -> CD-ROM Drive
      F:\ -> CD-ROM Drive
      G:\ -> Local fixed disk # 111.8 GB (660.73 MB free) [BleiCris] # NTFS
      H:\ -> Removable disk
      I:\ -> Removable disk
      J:\ -> Removable disk # 7.6 GB (6.13 GB free) [KODAK] # FAT32
      K:\ -> Removable disk
      L:\ -> Local fixed disk # 931.28 GB (113.4 GB free) [BLEICRIS-EX] # FAT32

      ############################## | Active processes |

      D:\WINDOWS\System32\smss.exe 484
      D:\WINDOWS\system32\csrss.exe 544
      D:\WINDOWS\system32\winlogon.exe 572
      D:\WINDOWS\system32\services.exe 616
      D:\WINDOWS\system32\lsass.exe 628
      D:\WINDOWS\system32\Ati2evxx.exe 800
      D:\WINDOWS\system32\svchost.exe 816
      D:\WINDOWS\system32\svchost.exe 944
      D:\WINDOWS\System32\svchost.exe 1012
      D:\WINDOWS\system32\Ati2evxx.exe 1036
      D:\WINDOWS\system32\svchost.exe 1168
      D:\WINDOWS\system32\svchost.exe 1316
      D:\WINDOWS\system32\spoolsv.exe 1404
      D:\Program Files\Google\Update\1.2.183.13\GoogleCrashHandler.exe 1600
      D:\WINDOWS\Explorer.EXE 1608
      D:\Program Files\Avira\AntiVir Desktop\sched.exe 1768
      D:\WINDOWS\system32\svchost.exe 1916
      D:\Program Files\Avira\AntiVir Desktop\avguard.exe 988
      D:\WINDOWS\s vc admin.exe 1000
      D:\Documents and Settings\BC\Bureau\XAMPP\xampp\apache\bin\httpd.exe 1048
      D:\Program Files\Bonjour\mDNSResponder.exe 1108
      D:\WINDOWS\system32\svchost.exe 1188
      D:\Documents and Settings\BC\Bureau\XAMPP\xampp\FileZillaFTP\FileZilla server.exe 1292
      D:\Program Files\Java\jre6\bin\jqs.exe 1552
      D:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE 1836
      D:\Documents and Settings\BC\Bureau\XAMPP\xampp\mysql\bin\mysqld.exe 1268
      D:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe 1832
      D:\WINDOWS\system32\nvsvc32.exe 264
      D:\WINDOWS\system32\slserv.exe 392
      D:\WINDOWS\system32\svchost.exe 500
      D:\Program Files\devolo\dlanaudioextender\VaudioServer.exe 520
      D:\WINDOWS\system32\wuauclt.exe 2112
      D:\Documents and Settings\BC\Bureau\XAMPP\xampp\apache\bin\httpd.exe 2336
      D:\WINDOWS\system32\wbem\wmiprvse.exe 3168
      D:\WINDOWS\System32\alg.exe 3292

      ################## | Fichiers # Dossiers infectieux |

      Supprimé ! C:\$Recycle.Bin\S-1-5-21-2572629660-1199171564-500141766-1001
      Supprimé ! C:\$Recycle.Bin\S-1-5-21-2901559383-3921094351-1735150735-1000
      Supprimé ! C:\Recycler\S-1-5-21-1123561945-492894223-725345543-1003
      Supprimé ! C:\Recycler\S-1-5-21-1292428093-1220945662-1177238915-1003
      Supprimé ! C:\Recycler\S-1-5-21-1708537768-879983540-1177238915-1003
      Supprimé ! C:\Recycler\S-1-5-21-299502267-1425521274-1606980848-1003
      Supprimé ! C:\Recycler\S-1-5-21-789336058-651377827-682003330-1003
      Supprimé ! D:\Recycler\S-1-5-21-1708537768-879983540-1177238915-1003
      Supprimé ! G:\Recycler\S-1-5-21-1708537768-879983540-1177238915-1003
      Supprimé ! G:\Recycler\S-1-5-21-299502267-1425521274-1606980848-1003
      Supprimé ! L:\autorun.0nf
      Supprimé ! L:\DRIVER\vozacka.exe

      ################## | Registre # Clés infectieuses |

      Supprimé ! [HKLM\SYSTEM\CurrentControlSet\Services\FileZilla Server]
      Supprimé ! [HKLM\SYSTEM\ControlSet002\Services\FileZilla Server]
      Supprimé ! [HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_FILEZILLA_SERVER]

      ################## | Registre # Mountpoints2 |

      Supprimé ! HKCU\...\Explorer\MountPoints2\{44009b48-9391-11de-a698-000d61cdd900}\Shell\AutoRun\Command

      ################## | Listing des fichiers présent |

      [26/11/2009 22:11|--a------|1024] C:\.rnd
      [18/05/2009 20:20|--a------|0] C:\AUTOEXEC.BAT
      [18/05/2009 20:15|---hs----|212] C:\boot.ini
      [14/04/2008 13:00|-rahs----|4952] C:\Bootfont.bin
      [18/05/2009 20:20|--a------|0] C:\CONFIG.SYS
      [28/08/2009 17:40|--a------|0] C:\DO NOT UPLOAD FILES HERE
      [07/10/2009 20:19|--a------|3532] C:\drmHeader.bin
      [31/08/2009 13:26|--a------|27736] C:\hpCDE.log
      [29/08/2009 18:13|--a------|747218] C:\IMG_1772.JPG
      [18/05/2009 20:20|-rahs----|0] C:\IO.SYS
      [20/06/2007 14:57|--a------|94208] C:\mavideo.scr
      [29/09/2009 20:52|--a------|0] C:\MMiPodExcept.log
      [13/09/2009 22:35|--a------|0] C:\MMWMDMExcept.log
      [18/05/2009 20:20|-rahs----|0] C:\MSDOS.SYS
      [14/04/2008 13:00|-rahs----|47564] C:\NTDETECT.COM
      [14/04/2008 13:00|-rahs----|252240] C:\ntldr
      [12/11/2009 22:02|--ahs----|1609801728] C:\pagefile.sys
      [22/11/2009 17:31|--a------|28672] C:\Sabores de infancia.doc
      [26/11/2009 17:21|--a------|24576] C:\Saveurs de mon enfance.doc
      [06/12/2009 20:39|--ahs----|5632] C:\Thumbs.db
      [09/11/2009 08:08|--a------|3919380480] C:\Windows 7 Ultimate Rtm international multilingual X86.iso
      [?|?|?] D:\hiberfil.sys
      [?|?|?] D:\pagefile.sys
      [16/12/2009 23:09|--a------|5280] D:\UsbFix.txt
      [13/05/2009 04:17|--a------|9870884864] G:\Sans titre.mpg
      [17/03/2007 14:45|--a------|12862] L:\de.ico
      [07/08/2009 15:16|--a------|2889408] L:\planning.exe
      [27/11/2009 10:27|--ahs----|7168] L:\Thumbs.db
      [21/09/2009 16:15|--a------|3434946] L:\VILLA.dwg
      [26/11/2009 14:35|--a------|1856000] L:\UBUNTU - Installer Linux Ubuntu depuis zéro.doc
      [26/11/2009 15:11|--a------|341737432] L:\VisioSingleImage.exe
      [26/11/2009 15:13|--a------|700963048] L:\MSOffice-2010_ProfessionalPlus.exe
      [05/06/2008 11:51|--a------|354275328] L:\24 Heures chrono - [5x19] - 01h00-02h00 - FR - [found via www.ed2k-series.org].avi
      [06/06/2008 04:29|--a------|354580480] L:\24 Heures chrono - [5x20] - 02h00-03h00 - FR - [found via www.ed2k-series.org].avi
      [13/10/2006 19:11|-ra------|16904192] L:\CM2007.exe
      [06/11/2006 05:07|--a------|338688000] L:\entraineur 2007.bin
      [29/04/2008 06:51|--a------|294907904] L:\L'ENTRAINEUR 2007 + CRACK.ISO
      [19/08/2004 16:10|--a------|28672] L:\setupSNK.exe
      [27/11/2009 11:27|--a------|1276158] L:\pc-decrapifier-2.1.0.exe
      [03/12/2009 10:06|--a------|358400] L:\MDS Heures - 2008.xls
      [01/12/2009 10:31|--a------|528384] L:\MDS Heures - 2009.xls
      [15/03/2009 21:35|--a------|142536] L:\CUBO.png
      [17/03/2009 11:49|--a------|9473945] L:\viCompte.zip
      [02/03/2009 10:18|--a------|17612] L:\anastasia.zip
      [02/03/2009 10:14|--a------|23360] L:\chopin_script.zip

      ################## | Vaccination |

      # C:\autorun.inf -> Folder created by UsbFix.
      # D:\autorun.inf -> Folder created by UsbFix.
      # G:\autorun.inf -> Folder created by UsbFix.
      # J:\autorun.inf -> Folder created by UsbFix.
      # L:\autorun.inf -> Folder created by UsbFix.

      ################## | Cracks / Keygens / Serials |

      "C:\ANTIGO\My Downloads\SOFTS to BURN\camtasia 3.0.2 + serial\camtasia\camtasia.exe"
      24/06/2002 16:44 |Size 8447891 |Crc32 084b9ee6 |Md5 644a9a15a7cdb26e30b434da32d19d0f

      "C:\ANTIGO\My Downloads\SOFTS to BURN\camtasia 3.0.2 + serial\camtasia\tscc.exe"
      24/06/2002 16:47 |Size 173336 |Crc32 fe1f74f1 |Md5 99addfd3b91e5c2de78376dc5bbb73d1

      "C:\ANTIGO\My Downloads\SOFTS to BURN\GameHouse\GameHouse Luxor + Crack\GameHouse.Luxor.Cura + install\LuxorInstall.exe"
      20/03/2005 17:35 |Size 11764792 |Crc32 4963cf11 |Md5 7c6c73a3185f26bf270938cafddeb82e

      "C:\ANTIGO\My Downloads\SOFTS to BURN\Where is it\Where is it v3.24 + Crack\50COMUPD.EXE"
      12/01/2002 02:24 |Size 509984 |Crc32 2187dc5a |Md5 1fe5054c22c17f349e96b977365da427

      "C:\ANTIGO\My Downloads\SOFTS to BURN\Where is it\Where is it v3.24 + Crack\SETUP.EXE"
      12/01/2002 02:24 |Size 3060507 |Crc32 c468dfe4 |Md5 82859b819f38dff26646f08eefa561ba

      "C:\ANTIGO\My Downloads\SOFTS to BURN\Where is it\Where is it v3.24 + Crack\Crack\WII.exe"
      12/01/2002 11:19 |Size 43520 |Crc32 fbaaf700 |Md5 301ee1f7e970f6cbc6675cc37fe74fe9

      "C:\ANTIGO\My Downloads\SOFTS to BURN\Where is it\Where is it v3.24 + Crack\Plugin\Langage\French.exe"
      24/02/2002 22:40 |Size 68096 |Crc32 960626d1 |Md5 dc6204b9476fc6e8ba7a3b18976aaae0

      "C:\ANTIGO\My Downloads\SOFTS to BURN\WinDVD6 Platinum\keygen.exe"
      06/06/2004 00:59 |Size 43962 |Crc32 6d6887b3 |Md5 ce38c680145b42b5634dbdef2cc44be3

      "C:\ANTIGO\My Downloads\SOFTS to BURN\Xplorer2.Professional.v1.6.5.1.Multilingual.WinALL.Incl.Keygen-BRD\Keygen.exe"
      01/10/2006 23:32 |Size 75264 |Crc32 e3b95072 |Md5 b4a1dabfd82a0676686cfc381f22c32c

      "C:\ANTIGO\My Downloads\SOFTS to BURN\Xplorer2.Professional.v1.6.5.1.Multilingual.WinALL.Incl.Keygen-BRD\xplorer2_setup.exe"
      26/11/2006 21:42 |Size 1224799 |Crc32 e263329c |Md5 d7ad90cc4c5da74412122b36c3599f48

      "C:\Downloads\SIMS3\SIMS3\CRACK\TS3.exe"
      25/05/2009 19:30 |Size 11285776 |Crc32 368ce21a |Md5 2fcdcd3025033c85c19d9c1aea8c3b9a

      "L:\Ma musique\NFS.Carbon-Serial-Patch.FR-Crack-par.NXS\NFS.Carbon-Serial-Patch.FR-Crack-par.NXS\Crack\nfsc.exe"
      06/11/2006 19:42 |Size 8904704 |Crc32 1567ba3f |Md5 c540d0fa9c6d8506e848110ff9bfa0ad

      "L:\Antigo\ANTIGO\My Downloads\SOFTS to BURN\Xplorer2.Professional.v1.6.5.1.Multilingual.WinALL.Incl.Keygen-BRD\Keygen.exe"
      01/10/2006 23:32 |Size 75264 |Crc32 e3b95072 |Md5 b4a1dabfd82a0676686cfc381f22c32c

      "L:\Antigo\ANTIGO\My Downloads\SOFTS to BURN\Xplorer2.Professional.v1.6.5.1.Multilingual.WinALL.Incl.Keygen-BRD\xplorer2_setup.exe"
      26/11/2006 21:42 |Size 1224799 |Crc32 e263329c |Md5 d7ad90cc4c5da74412122b36c3599f48

      "L:\Antigo\ANTIGO\My Downloads\SOFTS to BURN\WinDVD6 Platinum\keygen.exe"
      06/06/2004 00:59 |Size 43962 |Crc32 6d6887b3 |Md5 ce38c680145b42b5634dbdef2cc44be3

      "L:\Antigo\ANTIGO\My Downloads\SOFTS to BURN\Where is it\Where is it v3.24 + Crack\50COMUPD.EXE"
      12/01/2002 02:24 |Size 509984 |Crc32 2187dc5a |Md5 1fe5054c22c17f349e96b977365da427

      "L:\Antigo\ANTIGO\My Downloads\SOFTS to BURN\Where is it\Where is it v3.24 + Crack\SETUP.EXE"
      12/01/2002 02:24 |Size 3060507 |Crc32 c468dfe4 |Md5 82859b819f38dff26646f08eefa561ba

      "L:\Antigo\ANTIGO\My Downloads\SOFTS to BURN\Where is it\Where is it v3.24 + Crack\Plugin\Langage\French.exe"
      24/02/2002 22:40 |Size 68096 |Crc32 960626d1 |Md5 dc6204b9476fc6e8ba7a3b18976aaae0

      "L:\Antigo\ANTIGO\My Downloads\SOFTS to BURN\Where is it\Where is it v3.24 + Crack\Crack\WII.exe"
      12/01/2002 11:19 |Size 43520 |Crc32 fbaaf700 |Md5 301ee1f7e970f6cbc6675cc37fe74fe9

      "L:\Antigo\ANTIGO\My Downloads\SOFTS to BURN\camtasia 3.0.2 + serial\camtasia\camtasia.exe"
      24/06/2002 16:44 |Size 8447891 |Crc32 084b9ee6 |Md5 644a9a15a7cdb26e30b434da32d19d0f

      "L:\Antigo\ANTIGO\My Downloads\SOFTS to BURN\camtasia 3.0.2 + serial\camtasia\tscc.exe"
      24/06/2002 16:47 |Size 173336 |Crc32 fe1f74f1 |Md5 99addfd3b91e5c2de78376dc5bbb73d1

      "L:\Antigo\ANTIGO\My Downloads\SOFTS to BURN\GameHouse\GameHouse Luxor + Crack\GameHouse.Luxor.Cura + install\LuxorInstall.exe"
      20/03/2005 17:35 |Size 11764792 |Crc32 4963cf11 |Md5 7c6c73a3185f26bf270938cafddeb82e

      "C:\2009 02 04\Incoming\Camtasia Studio 2007 v.5.0.0 build 384 retail serial included (31.6 mb).zip"
      -> Contain : Camtasia Studio 2007 v.5.0.0 build 384 retail serial included\keygen.exe

      "C:\ANTIGO\My Downloads\PPC\PPC Pocket informant 2005 v6.0+manual+serial ok.zip"
      -> Contain : PPC Pocket informant 2005.exe

      "C:\ANTIGO\My Downloads\PPC\[Pocket PC] Agenda Fusion 7.00 + serial.zip"
      -> Contain : Agenda Fusion 7.00.exe

      "C:\ANTIGO\My Downloads\PPC\[Pocket PC] Agenda Fusion 7.00 + serial.zip"
      -> Contain : Agenda Fusion 7.00 + serial\Agenda Fusion 7.00.exe

      "C:\ANTIGO\My Downloads\PPC\[Pocket PC] Agenda Fusion 7.00 + serial.zip"
      -> Contain : Agenda Fusion 7.00 + serial\devoneagendafusion_ppc_en_v725.exe

      "C:\ANTIGO\My Downloads\SOFTS to BURN\GameHouse\GameHouse Zuma Deluxe v1.001 + Keygen.zip"
      -> Contain : ZumaInstall.exe

      "C:\ANTIGO\My Downloads\SOFTS to BURN\GameHouse\Super GameHouse Solitaire & serial.zip"
      -> Contain : solitaireyahoo.exe

      "C:\ANTIGO\My Downloads\SOFTS to BURN\Where is it\Crack_WhereIsIt2.15a.zip"
      -> Contain : WhereKey.exe 28672 DFLT-X 46% 15595 10-01-2000 23:04:20 40d0ec3f

      "C:\Documentos\AutoCad\Autocad 2005 2006 2007 Crack All Language.zip"
      -> Contain : Cd2\Bin\ACADFeui\AcadmIcn.exe

      "C:\Downloads\Softs\-- cracked lavasoft adAware 2008 pro.zip"
      -> Contain : ad-aware-2008-pro.exe

      "C:\Downloads\Softs\Adobe_InDesign_CS3_v5__(with_crack_full_version).zip"
      -> Contain : redist\WindowsInstaller-KB893803-v2-x86.exe

      "C:\Downloads\Softs\Adobe_InDesign_CS3_v5__(with_crack_full_version).zip"
      -> Contain : redist\WindowsServer2003-KB898715-ia64-enu.exe

      "C:\Downloads\Softs\Adobe_InDesign_CS3_v5__(with_crack_full_version).zip"
      -> Contain : redist\WindowsServer2003-KB898715-x64-enu.exe

      "C:\Downloads\Softs\Adobe_InDesign_CS3_v5__(with_crack_full_version).zip"
      -> Contain : redist\WindowsServer2003-KB898715-x86-enu.exe

      "C:\Downloads\Softs\Adobe_InDesign_CS3_v5__(with_crack_full_version).zip"
      -> Contain : redist\WindowsXP-KB898715-x64-enu.exe

      "C:\Downloads\Softs\Adobe_InDesign_CS3_v5__(with_crack_full_version).zip"
      -> Contain : Setup.exe 2689184 DFLT-X 57% 1156282 26-04-2007 01:03:56 76b5558e

      "C:\Downloads\Softs\Room Arranger 5.02+Keygen.zip"
      -> Contain : rooarr502.exe

      "C:\Downloads\Softs\Room Arranger 5.02+Keygen.zip"
      -> Contain : keymaker.exe 233984 DFLT-N 2% 228305 25-11-2005 19:50:42 44d30e2e

      "C:\Downloads\Softs\Webexpert 6 Fr Log Crack Tutorial.zip"
      -> Contain : webexpert 6 crack+ log\webexpert6.exe

      "D:\Documents and Settings\BC\Mes documents\Shareaza Downloads\BatchPhoto.Pro.2.0.cracked-SND.zip"
      -> Contain : setup.exe 480256 DFLT-N 2% 472792 20-09-2009 02:51:36 6764fc71

      "D:\Documents and Settings\BC\Mes documents\Shareaza Downloads\stereo tool (+ serial by FFF).zip"
      -> Contain : keygen_from_FFF\keygen.exe

      "D:\Documents and Settings\BC\Mes documents\Shareaza Downloads\stereo tool (+ serial by FFF).zip"
      -> Contain : setup.exe 6787072 Stored 0% 6787072 27-04-2009 17:20:06 28a55e68

      "D:\Documents and Settings\BC\Mes documents\Shareaza Downloads\stereo tool (keygen is included).zip"
      -> Contain : keygen_from_Black_X\keygen.exe

      "D:\Documents and Settings\BC\Mes documents\Shareaza Downloads\stereo tool (keygen is included).zip"
      -> Contain : setup.exe 7409664 Stored 0% 7409664 27-04-2009 17:21:28 72204a11

      "D:\Documents and Settings\BC\Mes documents\Shareaza Downloads\stereo tool + crack.zip"
      -> Contain : crack_by_TSRh\crack.exe

      "D:\Documents and Settings\BC\Mes documents\Shareaza Downloads\stereo tool + crack.zip"
      -> Contain : setup.exe 5726208 Stored 0% 5726208 27-04-2009 17:24:10 a503d66b

      "D:\Documents and Settings\BC\Mes documents\Shareaza Downloads\stereo tool including crack by SND.zip"
      -> Contain : patch_by_SND\patch.exe

      "D:\Documents and Settings\BC\Mes documents\Shareaza Downloads\stereo tool including crack by SND.zip"
      -> Contain : setup.exe 6279168 Stored 0% 6279168 27-04-2009 17:19:28 4f2200a0

      "G:\Shareaza Downloads\BatchPhoto.Pro.2.0.cracked-SND.zip"
      -> Contain : setup.exe 480256 DFLT-N 2% 472792 20-09-2009 02:51:36 6764fc71

      "G:\Shareaza Downloads\stereo tool (+ serial by FFF).zip"
      -> Contain : keymaker_from_FFF\keygen.exe

      "G:\Shareaza Downloads\stereo tool (+ serial by FFF).zip"
      -> Contain : setup.exe 6787072 Stored 0% 6787072 27-04-2009 17:20:06 28a55e68

      "G:\Shareaza Downloads\stereo tool (keygen is included).zip"
      -> Contain : keygen_from_Black_X\keygen.exe

      "G:\Shareaza Downloads\stereo tool (keygen is included).zip"
      -> Contain : setup.exe 7409664 Stored 0% 7409664 27-04-2009 17:21:28 72204a11

      "G:\Shareaza Downloads\stereo tool + crack.zip"
      -> Contain : crack_by_TSRh\crack.exe

      "G:\Shareaza Downloads\stereo tool + crack.zip"
      -> Contain : setup.exe 5726208 Stored 0% 5726208 27-04-2009 17:24:10 a503d66b

      "G:\Shareaza Downloads\stereo tool including crack by SND.zip"
      -> Contain : patch_by_SND\patch.exe

      "G:\Shareaza Downloads\stereo tool including crack by SND.zip"
      -> Contain : setup.exe 6279168 Stored 0% 6279168 27-04-2009 17:19:28 4f2200a0

      "L:\Antigo\ANTIGO\My Downloads\The Sims 2 crack + keygen V‚rifier.zip"
      -> Contain : Sims2.exe 14012416 DFLT-N 56% 6167165 14-09-2004 23:51:00 3a1c64f3

      "L:\Antigo\ANTIGO\My Downloads\The Sims 2 crack + keygen V‚rifier.zip"
      -> Contain : The Sims 2 Keygen.exe

      "L:\Antigo\ANTIGO\My Downloads\SOFTS to BURN\Where is it\Crack_WhereIsIt2.15a.zip"
      -> Contain : WhereKey.exe 28672 DFLT-X 46% 15595 10-01-2000 23:04:20 40d0ec3f
      0
  14. gen-hackman
     
    What can you tell me about this file? :

    C:\mavideo.scr

    ▶ double-click the Lop S&D shortcut on your Desktop

    ▶ Select the desired language, then choose the "Suppression + Hosts" option
    ▶ Wait until the scan finishes
    ▶ Post the generated report (C:\lopR.txt)
    --
    ♦G3и-н@¢км@и™©®♦
    0
    1. Blei Posted messages 74 Status Member
       
      Thank you very much Gen-Hackman... especially for your help and all your patience with me

      As usual, I can only do this manipulation once at home, tonight

      See you later
      thanks
      --
      Life is too short, so let's live it!!!
      0
  15. gen-hackman
     
    okay don’t forget the details on the requested file ^^
    --
    ◆G3о-nа@кфа™©®
    0
    1. Blei Posted messages 74 Status Member
       
      --------------------\\ Lop S&D 4.2.5-0 XP/Vista

      Microsoft Windows XP Professional ( v5.1.2600 ) Service Pack 3
      X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
      BIOS : Award Modular BIOS v6.00PG
      USER : BC ( Administrator )
      BOOT : Normal boot
      Antivirus : AntiVir Desktop 9.0.1.32 (Activated)
      A:\ (USB)
      C:\ (Local Disk) - NTFS - Total:314 GB (Free:6 GB)
      D:\ (Local Disk) - NTFS - Total:58 GB (Free:14 GB)
      E:\ (CD or DVD)
      F:\ (CD or DVD)
      G:\ (Local Disk) - NTFS - Total:111 GB (Free:1 GB)
      H:\ (USB)
      I:\ (USB)
      J:\ (USB)
      K:\ (USB)
      M:\ (USB) - FAT32 - Total:978 MB (Free:0 GB)

      "D:\Lop SD" ( UPDATED : 19-12-2008|23:40 )
      Option : [2] ( 17/12/2009|18:25 )


      \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

      Delete! - D:\DOCUME~1\BC\LOCALS~1\Temp\nsd3.tmp
      Delete! - D:\DOCUME~1\BC\LOCALS~1\Temp\nsf3.tmp
      Delete! - D:\DOCUME~1\BC\LOCALS~1\Temp\nsi4.tmp
      Delete! - D:\DOCUME~1\BC\LOCALS~1\Temp\nsq4.tmp
      Delete! - D:\Program Files\TorrentSpeeder

      \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


      --------------------\\ Listing of folders in APPLIC~1

      [02/09/2009|19:40] D:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
      [02/09/2009|19:40] D:\DOCUME~1\ADMINI~1\APPLIC~1\Stardock

      [21/10/2009|19:51] D:\DOCUME~1\ADMINI~1.BLE\APPLIC~1\Microsoft
      [21/10/2009|19:51] D:\DOCUME~1\ADMINI~1.BLE\APPLIC~1\Stardock

      [21/10/2009|20:00] D:\DOCUME~1\ADMINI~1.000\APPLIC~1\Microsoft
      [21/10/2009|20:00] D:\DOCUME~1\ADMINI~1.000\APPLIC~1\Stardock

      [02/09/2009|18:00] D:\DOCUME~1\ALLUSE~1\APPLIC~1\{62902F53-D725-44F9-B385-979CC0E00E8A}
      [14/09/2009|20:59] D:\DOCUME~1\ALLUSE~1\APPLIC~1\{755AC846-7372-4AC8-8550-C52491DAA8BD}
      [21/06/2009|17:14] D:\DOCUME~1\ALLUSE~1\APPLIC~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
      [15/11/2009|08:35] D:\DOCUME~1\ALLUSE~1\APPLIC~1\{A87EB928-0C6C-4071-AEF1-59E32BAEDF1B}
      [29/06/2009|16:23] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
      [23/05/2009|01:50] D:\DOCUME~1\ALLUSE~1\APPLIC~1\ALM
      [21/06/2009|17:13] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
      [23/11/2009|21:57] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
      [18/05/2009|21:28] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
      [11/07/2009|19:39] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Babylon
      [05/07/2009|19:08] D:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
      [15/07/2009|06:11] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Electronic Arts
      [27/06/2009|10:41] D:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
      [22/10/2009|23:02] D:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
      [03/11/2009|22:03] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
      [24/10/2009|20:03] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
      [25/05/2009|19:50] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
      [27/06/2009|10:42] D:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
      [23/06/2009|17:32] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Ericsson
      [02/09/2009|18:55] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Stardock
      [23/06/2009|17:32] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Teleca
      [11/07/2009|10:31] D:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
      [18/05/2009|22:48] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

      [14/12/2009|22:39] D:\DOCUME~1\BC\APPLIC~1\Adobe
      [23/06/2009|00:15] D:\DOCUME~1\BC\APPLIC~1\Apple Computer
      [16/07/2009|06:51] D:\DOCUME~1\BC\APPLIC~1\ArcSoft
      [06/07/2009|01:23] D:\DOCUME~1\BC\APPLIC~1\Artisteer
      [19/05/2009|19:34] D:\DOCUME~1\BC\APPLIC~1\ATI
      [11/07/2009|19:39] D:\DOCUME~1\BC\APPLIC~1\Babylon
      [06/10/2009|14:21] D:\DOCUME~1\BC\APPLIC~1\Bows internet cake
      [13/12/2009|14:21] D:\DOCUME~1\BC\APPLIC~1\Canon
      [22/10/2009|22:50] D:\DOCUME~1\BC\APPLIC~1\Desktopicon
      [12/07/2009|11:38] D:\DOCUME~1\BC\APPLIC~1\DivX
      [14/10/2009|22:23] D:\DOCUME~1\BC\APPLIC~1\dvdcss
      [02/06/2009|23:03] D:\DOCUME~1\BC\APPLIC~1\FileMaker
      [13/12/2009|22:21] D:\DOCUME~1\BC\APPLIC~1\FileZilla
      [27/06/2009|11:05] D:\DOCUME~1\BC\APPLIC~1\FLEXnet
      [22/10/2009|23:03] D:\DOCUME~1\BC\APPLIC~1\GlarySoft
      [26/05/2009|19:49] D:\DOCUME~1\BC\APPLIC~1\Google
      [18/05/2009|20:27] D:\DOCUME~1\BC\APPLIC~1\Identities
      [09/11/2009|19:56] D:\DOCUME~1\BC\APPLIC~1\InstallShield
      [18/10/2009|21:19] D:\DOCUME~1\BC\APPLIC~1\JAlbum
      [02/06/2009|23:06] D:\DOCUME~1\BC\APPLIC~1\Leadertech
      [18/05/2009|21:40] D:\DOCUME~1\BC\APPLIC~1\Macromedia
      [03/11/2009|22:03] D:\DOCUME~1\BC\APPLIC~1\Malwarebytes
      [09/11/2009|20:01] D:\DOCUME~1\BC\APPLIC~1\Megaupload
      [10/11/2009|21:33] D:\DOCUME~1\BC\APPLIC~1\Microsoft
      [18/05/2009|21:28] D:\DOCUME~1\BC\APPLIC~1\Mozilla
      [13/07/2009|20:56] D:\DOCUME~1\BC\APPLIC~1\Nero
      [27/06/2009|10:42] D:\DOCUME~1\BC\APPLIC~1\Nuance
      [27/11/2009|19:34] D:\DOCUME~1\BC\APPLIC~1\Samsung
      [27/06/2009|11:05] D:\DOCUME~1\BC\APPLIC~1\ScanSoft
      [18/08/2009|17:19] D:\DOCUME~1\BC\APPLIC~1\SecuROM
      [19/05/2009|19:51] D:\DOCUME~1\BC\APPLIC~1\Shareaza
      [23/06/2009|17:32] D:\DOCUME~1\BC\APPLIC~1\Sony Ericsson
      [08/10/2009|05:51] D:\DOCUME~1\BC\APPLIC~1\Stardock
      [18/05/2009|21:35] D:\DOCUME~1\BC\APPLIC~1\Sun
      [23/06/2009|17:36] D:\DOCUME~1\BC\APPLIC~1\Teleca
      [11/07/2009|10:26] D:\DOCUME~1\BC\APPLIC~1\vghd
      [28/11/2009|12:46] D:\DOCUME~1\BC\APPLIC~1\ViGlance
      [28/11/2009|12:42] D:\DOCUME~1\BC\APPLIC~1\ViStart
      [17/12/2009|16:22] D:\DOCUME~1\BC\APPLIC~1\vlc
      [19/05/2009|20:15] D:\DOCUME~1\BC\APPLIC~1\VoipBuster
      [16/12/2009|21:49] D:\DOCUME~1\BC\APPLIC~1\WinRAR
      [27/06/2009|11:05] D:\DOCUME~1\BC\APPLIC~1\Zeon

      [18/05/2009|20:20] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

      [18/05/2009|20:20] D:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

      [26/11/2009|22:20] D:\DOCUME~1\LOGMEI~1\APPLIC~1\Microsoft

      [18/05/2009|20:20] D:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

      --------------------\\ Scheduled tasks in D:\WINDOWS\tasks

      [17/12/2009 18:05][--a------] D:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
      [17/12/2009 17:33][--a------] D:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
      [17/12/2009 17:33][--a------] D:\WINDOWS\tasks\GlaryInitialize.job
      [17/12/2009 17:33][--ah-----] D:\WINDOWS\tasks\SA.DAT
      [14/04/2008 13:00][-r-h-----] D:\WINDOWS\tasks\desktop.ini

      ...FIN PARTIE A
      --
      La vie est trop courte, alors vivons-la!!!
      0
    2. Blei Posted messages 74 Status Member
       
      --------------------\\ Listing of folders in D:\Program Files

      [04/07/2009|16:03] D:\Program Files\Adobe
      [23/05/2009|01:38] D:\Program Files\Adobe Media Player
      [15/11/2009|14:23] D:\Program Files\Alky for Applications
      [27/11/2009|19:21] D:\Program Files\Apple Software Update
      [16/07/2009|06:50] D:\Program Files\ArcSoft
      [31/08/2009|00:38] D:\Program Files\Artisteer 2
      [15/11/2009|08:51] D:\Program Files\ATI Technologies
      [18/05/2009|21:28] D:\Program Files\Avira
      [15/06/2009|19:37] D:\Program Files\AviSynth 2.5
      [24/08/2009|00:28] D:\Program Files\Axon Data
      [29/09/2009|20:33] D:\Program Files\BatchPhoto
      [22/10/2009|23:06] D:\Program Files\Bonjour
      [01/10/2009|20:10] D:\Program Files\Bows internet cake
      [24/06/2009|19:36] D:\Program Files\Canon
      [18/05/2009|20:17] D:\Program Files\ComPlus Applications
      [15/09/2009|17:30] D:\Program Files\DeltaPROD
      [18/10/2009|21:26] D:\Program Files\DevalVR
      [11/07/2009|10:45] D:\Program Files\devolo
      [20/11/2009|07:42] D:\Program Files\DivX
      [22/06/2009|17:14] D:\Program Files\DVD Shrink
      [22/10/2009|23:02] D:\Program Files\Electronic Arts
      [15/06/2009|19:36] D:\Program Files\eRightSoft
      [19/06/2009|22:20] D:\Program Files\ffdshow
      [27/11/2009|19:30] D:\Program Files\Fichiers communs
      [02/06/2009|23:03] D:\Program Files\FileMaker
      [28/10/2009|18:41] D:\Program Files\FileZilla FTP Client
      [11/07/2009|10:26] D:\Program Files\Foto-Mosaik-Edda
      [31/05/2009|01:55] D:\Program Files\Free Download Manager
      [08/11/2009|15:41] D:\Program Files\Glary Utilities
      [04/12/2009|09:08] D:\Program Files\Google
      [11/06/2009|17:44] D:\Program Files\Innovative Solutions
      [09/11/2009|19:57] D:\Program Files\InstallShield Installation Information
      [09/12/2009|03:04] D:\Program Files\Internet Explorer
      [27/11/2009|19:59] D:\Program Files\IZArc
      [03/11/2009|21:53] D:\Program Files\Java
      [27/11/2009|19:17] D:\Program Files\LogMeIn
      [22/10/2009|23:02] D:\Program Files\ma-config.com
      [01/10/2009|17:07] D:\Program Files\MediaMonkey
      [09/11/2009|19:57] D:\Program Files\Megaupload
      [19/05/2009|06:23] D:\Program Files\Messenger
      [09/12/2009|03:05] D:\Program Files\Microsoft ActiveSync
      [23/10/2009|02:15] D:\Program Files\Microsoft CAPICOM 2.1.0.2
      [18/05/2009|20:20] D:\Program Files\microsoft FrontPage
      [23/10/2009|19:18] D:\Program Files\Microsoft Office
      [09/09/2009|17:59] D:\Program Files\Microsoft Office Outlook Connector
      [29/10/2009|23:22] D:\Program Files\Microsoft Silverlight
      [18/05/2009|22:46] D:\Program Files\Microsoft Visual Studio
      [23/10/2009|02:02] D:\Program Files\Microsoft Works
      [13/07/2009|19:30] D:\Program Files\Microsoft WSE
      [16/11/2009|23:44] D:\Program Files\Microsoft.NET
      [28/11/2009|13:03] D:\Program Files\Movie Maker
      [17/12/2009|18:23] D:\Program Files\Mozilla Firefox
      [27/11/2009|19:13] D:\Program Files\Mozilla Firefox 3.6 Beta 3
      [19/05/2009|18:37] D:\Program Files\MSBuild
      [31/08/2009|22:55] D:\Program Files\MSECache
      [18/05/2009|20:16] D:\Program Files\MSN
      [18/05/2009|20:16] D:\Program Files\MSN Gaming Zone
      [27/05/2009|02:00] D:\Program Files\MSXML 4.0
      [25/05/2009|19:56] D:\Program Files\Nero
      [18/05/2009|20:18] D:\Program Files\NetMeeting
      [22/10/2009|23:03] D:\Program Files\Novel Games
      [27/06/2009|10:41] D:\Program Files\Nuance
      [18/05/2009|20:17] D:\Program Files\Online Services
      [24/11/2009|23:58] D:\Program Files\OpenXML-ODF Translator
      [28/11/2009|13:03] D:\Program Files\Outlook Express
      [23/11/2009|22:00] D:\Program Files\QuickTime
      [19/05/2009|19:31] D:\Program Files\Realtek AC97
      [19/05/2009|18:34] D:\Program Files\Reference Assemblies
      [27/11/2009|19:34] D:\Program Files\Samsung
      [18/05/2009|20:19] D:\Program Files\Services en ligne
      [08/11/2009|15:47] D:\Program Files\Shareaza
      [18/05/2009|21:47] D:\Program Files\Silicon Integrated Systems
      [15/08/2009|00:30] D:\Program Files\SodeaSoft
      [23/06/2009|17:32] D:\Program Files\Sony Ericsson
      [02/09/2009|17:40] D:\Program Files\Stardock
      [18/07/2009|15:12] D:\Program Files\Steinberg
      [18/07/2009|13:27] D:\Program Files\Syncrosoft
      [18/05/2009|21:35] D:\Program Files\TOPCOM
      [24/08/2009|00:26] D:\Program Files\Trend Micro
      [18/05/2009|20:27] D:\Program Files\Uninstall Information
      [13/12/2009|15:58] D:\Program Files\VDOWNLOADER
      [12/09/2009|14:44] D:\Program Files\VideoLAN
      [28/11/2009|12:46] D:\Program Files\ViGlance
      [28/11/2009|12:45] D:\Program Files\ViStart
      [18/05/2009|21:39] D:\Program Files\VoipBuster.com
      [17/07/2009|19:38] D:\Program Files\wamp
      [18/05/2009|22:52] D:\Program Files\Windows Media Connect 2
      [28/11/2009|13:03] D:\Program Files\Windows Media Player
      [28/11/2009|13:03] D:\Program Files\Windows NT
      [17/11/2009|07:18] D:\Program Files\Windows Sidebar
      [18/05/2009|20:19] D:\Program Files\WindowsUpdate
      [18/05/2009|20:20] D:\Program Files\xerox
      [03/10/2009|19:10] D:\Program Files\ZapWallPaper

      --------------------\\ Listing of folders in D:\Program Files\Fichiers communs

      [26/10/2009|02:02] D:\Program Files\Fichiers communs\Adobe
      [23/05/2009|01:37] D:\Program Files\Fichiers communs\Adobe AIR
      [18/05/2009|22:46] D:\Program Files\Fichiers communs\DESIGNER
      [12/07/2009|11:35] D:\Program Files\Fichiers communs\DivX Shared
      [31/05/2009|01:56] D:\Program Files\Fichiers communs\DVDVideoSoft
      [18/05/2009|22:01] D:\Program Files\Fichiers communs\InstallShield
      [23/05/2009|01:33] D:\Program Files\Fichiers communs\Macrovision Shared
      [23/10/2009|18:42] D:\Program Files\Fichiers communs\Microsoft Shared
      [18/05/2009|20:18] D:\Program Files\Fichiers communs\MSSoap
      [25/05/2009|20:09] D:\Program Files\Fichiers communs\Nero
      [18/05/2009|21:00] D:\Program Files\Fichiers communs\ODBC
      [18/05/2009|20:18] D:\Program Files\Fichiers communs\Services
      [18/05/2009|21:00] D:\Program Files\Fichiers communs\SpeechEngines
      [28/11/2009|13:03] D:\Program Files\Fichiers communs\System
      [24/06/2009|21:16] D:\Program Files\Fichiers communs\Teleca Shared

      --------------------\\ Process

      ( 48 Processes )

      ... OK !

      ..................END Part B
      --
      Life is too short, so let's live it!!!
      0
    3. Blei Posted messages 74 Status Member
       
      --------------------\\ Search with S_Lop

      No Lop file/folder found!

      --------------------\\ Search for Lop Files / Folders

      D:\DOCUME~1\BC\LOCALS~1\Temp\nss3.tmp
      D:\DOCUME~1\BC\LOCALS~1\Temp\nsy4.tmp

      --------------------\\ Registry Verification

      ..... OK !

      --------------------\\ Hosts file Verification

      Hosts file CLEAN


      --------------------\\ Search for files with Catchme

      catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2009-12-17 18:27:54
      Windows 5.1.2600 Service Pack 3 NTFS
      scanning hidden processes ...
      scanning hidden files ...
      scan completed successfully
      hidden processes: 0
      hidden files: 0

      --------------------\\ Search for other infections

      --------------------\\ Cracks & Keygens ..

      D:\DOCUME~1\BC\Bureau\Coppermine-Live-Demo_1_5\server\php\ext\php_crack.dll
      D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\(Multilanguage) keygen artisteer.rar
      D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\ArcSoft Panorama Maker Pro v4.2.3.56Crack.rar
      D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\Artisteer.2.0.2.15338 + Crack.rar
      D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\ConvertXtoDVD.v4.0.8.320.Multilangages.Incl-Keygen.[emule-island.com].rar
      D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\Crack [2009] Joomla Artisteer.rar
      D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\Keygen keygen artisteer.rar
      D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\MediaMonkey.Gold.3.1.0.1256.Incl.KeyGen-CORE.rar
      D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\Original version artisteer.2.2.0.17981.crack.rar
      D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\Steinberg Wavelab v6.0 (Crack & Keygen).iso
      D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\stereo tool (keygen is included).zip
      D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\stereo tool + crack.zip
      D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\stereo tool including crack by SND.zip


      [F:1371][D:129]-> D:\DOCUME~1\BC\LOCALS~1\Temp
      [F:81][D:0]-> D:\DOCUME~1\BC\Cookies
      [F:22][D:6]-> D:\DOCUME~1\BC\LOCALS~1\TEMPOR~1\content.IE5

      1 - "D:\Lop SD\LopR_1.txt" - 16/12/2009|23:38 - Option : [1]
      2 - "D:\Lop SD\LopR_2.txt" - 17/12/2009|18:37 - Option : [2]

      --------------------\\ End of report at 18:37:18
      --
      Life is too short, so let's live it!!!
      0
  16. Blei Posted messages 74 Status Member
     
    ...BALANCE

    --------------------\\ Listing of folders in D:\Program Files

    [04/07/2009|16:03] D:\Program Files\Adobe
    [23/05/2009|01:38] D:\Program Files\Adobe Media Player
    [15/11/2009|14:23] D:\Program Files\Alky for Applications
    [27/11/2009|19:21] D:\Program Files\Apple Software Update
    [16/07/2009|06:50] D:\Program Files\ArcSoft
    [31/08/2009|00:38] D:\Program Files\Artisteer 2
    [15/11/2009|08:51] D:\Program Files\ATI Technologies
    [18/05/2009|21:28] D:\Program Files\Avira
    [15/06/2009|19:37] D:\Program Files\AviSynth 2.5
    [24/08/2009|00:28] D:\Program Files\Axon Data
    [29/09/2009|20:33] D:\Program Files\BatchPhoto
    [22/10/2009|23:06] D:\Program Files\Bonjour
    [01/10/2009|20:10] D:\Program Files\Bows internet cake
    [24/06/2009|19:36] D:\Program Files\Canon
    [18/05/2009|20:17] D:\Program Files\ComPlus Applications
    [15/09/2009|17:30] D:\Program Files\DeltaPROD
    [18/10/2009|21:26] D:\Program Files\DevalVR
    [11/07/2009|10:45] D:\Program Files\devolo
    [20/11/2009|07:42] D:\Program Files\DivX
    [22/06/2009|17:14] D:\Program Files\DVD Shrink
    [22/10/2009|23:02] D:\Program Files\Electronic Arts
    [15/06/2009|19:36] D:\Program Files\eRightSoft
    [19/06/2009|22:20] D:\Program Files\ffdshow
    [27/11/2009|19:30] D:\Program Files\Fichiers communs
    [02/06/2009|23:03] D:\Program Files\FileMaker
    [28/10/2009|18:41] D:\Program Files\FileZilla FTP Client
    [11/07/2009|10:26] D:\Program Files\Foto-Mosaik-Edda
    [31/05/2009|01:55] D:\Program Files\Free Download Manager
    [08/11/2009|15:41] D:\Program Files\Glary Utilities
    [04/12/2009|09:08] D:\Program Files\Google
    [11/06/2009|17:44] D:\Program Files\Innovative Solutions
    [09/11/2009|19:57] D:\Program Files\InstallShield Installation Information
    [09/12/2009|03:04] D:\Program Files\Internet Explorer
    [27/11/2009|19:59] D:\Program Files\IZArc
    [03/11/2009|21:53] D:\Program Files\Java
    [27/11/2009|19:17] D:\Program Files\LogMeIn
    [22/10/2009|23:02] D:\Program Files\ma-config.com
    [01/10/2009|17:07] D:\Program Files\MediaMonkey
    [09/11/2009|19:57] D:\Program Files\Megaupload
    [19/05/2009|06:23] D:\Program Files\Messenger
    [09/12/2009|03:05] D:\Program Files\Microsoft ActiveSync
    [23/10/2009|02:15] D:\Program Files\Microsoft CAPICOM 2.1.0.2
    [18/05/2009|20:20] D:\Program Files\microsoft frontpage
    [23/10/2009|19:18] D:\Program Files\Microsoft Office
    [09/09/2009|17:59] D:\Program Files\Microsoft Office Outlook Connector
    [29/10/2009|23:22] D:\Program Files\Microsoft Silverlight
    [18/05/2009|22:46] D:\Program Files\Microsoft Visual Studio
    [23/10/2009|02:02] D:\Program Files\Microsoft Works
    [13/07/2009|19:30] D:\Program Files\Microsoft WSE
    [16/11/2009|23:44] D:\Program Files\Microsoft.NET
    [28/11/2009|13:03] D:\Program Files\Movie Maker
    [17/12/2009|18:23] D:\Program Files\Mozilla Firefox
    [27/11/2009|19:13] D:\Program Files\Mozilla Firefox 3.6 Beta 3
    [19/05/2009|18:37] D:\Program Files\MSBuild
    [31/08/2009|22:55] D:\Program Files\MSECache
    [18/05/2009|20:16] D:\Program Files\MSN
    [18/05/2009|20:16] D:\Program Files\MSN Gaming Zone
    [27/05/2009|02:00] D:\Program Files\MSXML 4.0
    [25/05/2009|19:56] D:\Program Files\Nero
    [18/05/2009|20:18] D:\Program Files\NetMeeting
    [22/10/2009|23:03] D:\Program Files\Novel Games
    [27/06/2009|10:41] D:\Program Files\Nuance
    [18/05/2009|20:17] D:\Program Files\Online Services
    [24/11/2009|23:58] D:\Program Files\OpenXML-ODF Translator
    [28/11/2009|13:03] D:\Program Files\Outlook Express
    [23/11/2009|22:00] D:\Program Files\QuickTime
    [19/05/2009|19:31] D:\Program Files\Realtek AC97
    [19/05/2009|18:34] D:\Program Files\Reference Assemblies
    [27/11/2009|19:34] D:\Program Files\Samsung
    [18/05/2009|20:19] D:\Program Files\Services en ligne
    [08/11/2009|15:47] D:\Program Files\Shareaza
    [18/05/2009|21:47] D:\Program Files\Silicon Integrated Systems
    [15/08/2009|00:30] D:\Program Files\SodeaSoft
    [23/06/2009|17:32] D:\Program Files\Sony Ericsson
    [02/09/2009|17:40] D:\Program Files\Stardock
    [18/07/2009|15:12] D:\Program Files\Steinberg
    [18/07/2009|13:27] D:\Program Files\Syncrosoft
    [18/05/2009|21:35] D:\Program Files\TOPCOM
    [24/08/2009|00:26] D:\Program Files\Trend Micro
    [18/05/2009|20:27] D:\Program Files\Uninstall Information
    [13/12/2009|15:58] D:\Program Files\VDOWNLOADER
    [12/09/2009|14:44] D:\Program Files\VideoLAN
    [28/11/2009|12:46] D:\Program Files\ViGlance
    [28/11/2009|12:45] D:\Program Files\ViStart
    [18/05/2009|21:39] D:\Program Files\VoipBuster.com
    [17/07/2009|19:38] D:\Program Files\wamp
    [18/05/2009|22:52] D:\Program Files\Windows Media Connect 2
    [28/11/2009|13:03] D:\Program Files\Windows Media Player
    [28/11/2009|13:03] D:\Program Files\Windows NT
    [17/11/2009|07:18] D:\Program Files\Windows Sidebar
    [18/05/2009|20:19] D:\Program Files\WindowsUpdate
    [18/05/2009|20:20] D:\Program Files\xerox
    [03/10/2009|19:10] D:\Program Files\ZapWallPaper

    --------------------\\ Listing of folders in D:\Program Files\Shared Folders

    [26/10/2009|02:02] D:\Program Files\Shared Files\Adobe
    [23/05/2009|01:37] D:\Program Files\Shared Files\Adobe AIR
    [18/05/2009|22:46] D:\Program Files\Shared Files\DESIGNER
    [12/07/2009|11:35] D:\Program Files\Shared Files\DivX Shared
    [31/05/2009|01:56] D:\Program Files\Shared Files\DVDVideoSoft
    [18/05/2009|22:01] D:\Program Files\Shared Files\InstallShield
    [23/05/2009|01:33] D:\Program Files\Shared Files\Macrovision Shared
    [23/10/2009|18:42] D:\Program Files\Shared Files\Microsoft Shared
    [18/05/2009|20:18] D:\Program Files\Shared Files\MSSoap
    [25/05/2009|20:09] D:\Program Files\Shared Files\Nero
    [18/05/2009|21:00] D:\Program Files\Shared Files\ODBC
    [18/05/2009|20:18] D:\Program Files\Shared Files\Services
    [18/05/2009|21:00] D:\Program Files\Shared Files\SpeechEngines
    [28/11/2009|13:03] D:\Program Files\Shared Files\System
    [24/06/2009|21:16] D:\Program Files\Shared Files\Teleca Shared

    --------------------\\ Process

    ( 48 Processes )

    ... OK !

    --------------------\\ Recherche avec S_Lop

    No file / folder Lop found !

    --------------------\\ Recherche de Fichiers / Dossiers Lop

    D:\DOCUME~1\BC\LOCALS~1\Temp\nss3.tmp
    D:\DOCUME~1\BC\LOCALS~1\Temp\nsy4.tmp

    --------------------\\ Verification du Registre

    ..... OK !

    --------------------\\ Verification du fichier Hosts

    Fichier Hosts CLEAN

    --------------------\\ Recherche de fichiers avec Catchme

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-12-17 18:27:54
    Windows 5.1.2600 Service Pack 3 NTFS
    scanning hidden processes ...
    scanning hidden files ...
    scan completed successfully
    hidden processes: 0
    hidden files: 0

    --------------------\\ Recherche d'autres infections

    --------------------\\ Cracks & Keygens ..

    D:\DOCUME~1\BC\Bureau\Coppermine-Live-Demo_1_5\server\php\ext\php_crack.dll
    D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\(Multilanguage) keygen artisteer.rar
    D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\ArcSoft Panorama Maker Pro v4.2.3.56Crack.rar
    D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\Artisteer.2.0.2.15338 + Crack.rar
    D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\ConvertXtoDVD.v4.0.8.320.Multilangages.Incl-Keygen.[emule-island.com].rar
    D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\Crack [2009] Joomla Artisteer.rar
    D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\Keygen keygen artisteer.rar
    D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\MediaMonkey.Gold.3.1.0.1256.Incl.KeyGen-CORE.rar
    D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\Original version artisteer.2.2.0.17981.crack.rar
    D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\Steinberg Wavelab v6.0 (Crack & Keygen).iso
    D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\stereo tool (keygen is included).zip
    D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\stereo tool + crack.zip
    D:\DOCUME~1\BC\Mes documents\Shareaza Downloads\stereo tool including crack by SND.zip

    [F:1371][D:129]-> D:\DOCUME~1\BC\LOCALS~1\Temp
    [F:81][D:0]-> D:\DOCUME~1\BC\Cookies
    [F:22][D:6]-> D:\DOCUME~1\BC\LOCALS~1\TEMPOR~1\content.IE5

    1 - "D:\ Lop SD\LopR_1.txt" - 16/12/2009|23:38 - Option : [1]
    2 - "D:\ Lop SD\LopR_2.txt" - 17/12/2009|18:37 - Option : [2]

    --------------------\\ Fin du rapport a 18:37:18

    --
    La vie est trop courte, alors vivons-la!!!
    0
  17. Blei Posted messages 74 Status Member
     
    I’m having big problems inserting the messages...

    The end of the report is missing
    --
    Life is too short, so let’s live it!!!
    0
  18. gen-hackman
     
    ▶ Click the Start menu / Control Panel / Folder Options, then in the View tab
    - Check Show hidden files, folders, and drives
    - Uncheck Hide extensions for known file types
    - Uncheck Hide protected operating system files (recommended)

    ▶ Click Apply, then OK.

    Remember to re-hide hidden and protected OS files at the end of the cleanup, it’s important.

    Scan the following file(s) on VirusTotal:

    Virus Total

    - Click Browse at the top, choose My Computer, and locate these files:

    C:\mavideo.scr

    - Now click Send file and let it run while “Status: In progress” is displayed.
    - It’s possible the file is queued due to high demand. In that case, wait without refreshing the page.
    - When the scan is finished (“Status: Completed”), click Format
    - A new browser window will open
    - Then click the two arrows
    - Right-click on the page, choose Select all, then copy
    - Finally paste the result in your next reply.

    Note: To analyze another file, click Bottom on Other file.

    -- G3-ツ-@¢@…
    0
    1. Blei Posted messages 74 Status Member
       
      Thank you for all the help you’ve given me!!!!
      --
      Life is too short, so let's live it!!!
      0
    1. Blei Posted messages 74 Status Member
       
      analysis/ec3ead8e61d49817c5c2d6ff572b899c4472363b00097e7ab1024247d27003b3-1261074683

      File mavideo.scr received on 2009.12.17 18:31:23 (UTC)
      Current status: finished
      Result: 0/41 (0.00%)
      Formatted Formatted
      Results printing Results printing
      Antivirus Version Last update Result
      a-squared 4.5.0.43 2009.12.17 -
      AhnLab-V3 5.0.0.2 2009.12.17 -
      AntiVir 7.9.1.114 2009.12.17 -
      Antiy-AVL 2.0.3.7 2009.12.17 -
      Authentium 5.2.0.5 2009.12.02 -
      Avast 4.8.1351.0 2009.12.17 -
      AVG 8.5.0.427 2009.12.17 -
      BitDefender 7.2 2009.12.17 -
      CAT-QuickHeal 10.00 2009.12.17 -
      ClamAV 0.94.1 2009.12.17 -
      Comodo 3275 2009.12.17 -
      DrWeb 5.0.0.12182 2009.12.17 -
      eSafe 7.0.17.0 2009.12.16 -
      eTrust-Vet 35.1.7180 2009.12.17 -
      F-Prot 4.5.1.85 2009.12.16 -
      F-Secure 9.0.15370.0 2009.12.17 -
      Fortinet 4.0.14.0 2009.12.17 -
      GData 19 2009.12.17 -
      Ikarus T3.1.1.79.0 2009.12.17 -
      Jiangmin 13.0.900 2009.12.17 -
      K7AntiVirus 7.10.923 2009.12.17 -
      Kaspersky 7.0.0.125 2009.12.17 -
      McAfee 5835 2009.12.17 -
      McAfee+Artemis 5835 2009.12.17 -
      McAfee-GW-Edition 6.8.5 2009.12.17 -
      Microsoft 1.5302 2009.12.17 -
      NOD32 4697 2009.12.17 -
      Norman 6.04.03 2009.12.17 -
      nProtect 2009.1.8.0 2009.12.17 -
      Panda 10.0.2.2 2009.12.15 -
      PCTools 7.0.3.5 2009.12.17 -
      Prevx 3.0 2009.12.17 -
      Rising 22.26.03.04 2009.12.17 -
      Sophos 4.49.0 2009.12.17 -
      Sunbelt 3.2.1858.2 2009.12.17 -
      Symantec 1.4.4.12 2009.12.17 -
      TheHacker 6.5.0.2.095 2009.12.17 -
      TrendMicro 9.100.0.1001 2009.12.17 -
      VBA32 3.12.12.0 2009.12.16 -
      ViRobot 2009.12.17.2094 2009.12.17 -
      VirusBuster 5.0.21.0 2009.12.17 -
      Additional information
      File size: 94208 bytes
      MD5 : f51417dad4cb472e4c8d13be58e2dec6
      SHA1 : e20f232050adee5eeb03ede129e5f0da735243a1
      SHA256: ec3ead8e61d49817c5c2d6ff572b899c4472363b00097e7ab1024247d27003b3
      PEInfo: PE Structure information

      ( base data )
      entrypointaddress.: 0x2870
      timedatestamp.....: 0x4679324D (Wed Jun 20 15:57:33 2007)
      machinetype.......: 0x14C (Intel I386)

      ( 4 sections )
      name viradd virsiz rawdsiz ntrpy md5
      .text 0x1000 0xB104 0xC000 6.44 b73c882357dee74557eaf47e407ed2f2
      .rdata 0xD000 0x2B84 0x3000 5.22 826d78039b7c3b2fbacd517cb67f440e
      .data 0x10000 0x2040 0x2000 2.17 80c3e09ee0aae91d355fe7a8d9d5c4cd
      .rsrc 0x13000 0x4C04 0x5000 6.41 4362c289e49c3518848cee4448d645bb

      ( 7 imports )

      > advapi32.dll: RegCloseKey, RegCreateKeyExW, RegSetValueExW, RegOpenKeyExW, RegQueryValueExW
      > comctl32.dll: InitCommonControlsEx
      > comdlg32.dll: GetOpenFileNameW
      > gdi32.dll: GetClipBox, GetStockObject
      > kernel32.dll: GetCommandLineW, HeapSize, GetStringTypeW, GetStringTypeA, LCMapStringW, MultiByteToWideChar, LCMapStringA, GetStartupInfoW, LoadLibraryA, IsValidCodePage, GetOEMCP, GetCPInfo, HeapReAlloc, VirtualAlloc, EnterCriticalSection, LeaveCriticalSection, VirtualQuery, RtlUnwind, GetSystemTimeAsFileTime, GetCurrentProcessId, QueryPerformanceCounter, VirtualFree, HeapCreate, HeapDestroy, ExitProcess, UnhandledExceptionFilter, GetVersionExW, GetTickCount, GetSystemPowerStatus, LoadLibraryW, FreeLibrary, GetProcAddress, Sleep, GetModuleHandleW, InitializeCriticalSection, InterlockedDecrement, GetCurrentThreadId, SetLastError, InterlockedExchange, GetACP, GetLocaleInfoA, GetThreadLocale, GetVersionExA, GetCommandLineA, HeapFree, HeapAlloc, GetProcessHeap, GetStartupInfoA, GetLastError, TerminateProcess, GetCurrentProcess, SetUnhandledExceptionFilter, IsDebuggerPresent, GetModuleHandleA, WriteFile, GetStdHandle, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, SetHandleCount, GetFileType, DeleteCriticalSection, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement
      > ole32.dll: CoUninitialize, CoInitialize, CoCreateInstance
      > user32.dll: SendMessageW, GetWindowTextW, EndDialog, CharNextW, LoadIconW, GetSystemMetrics, GetDC, ReleaseDC, FindWindowW, RegisterWindowMessageW, RegisterClassW, CreateWindowExW, GetMessageW, TranslateMessage, DispatchMessageW, GetForegroundWindow, PeekMessageW, DialogBoxParamW, GetParent, IsWindow, PostMessageW, DefWindowProcW, SetCursor, PostQuitMessage, GetCursorPos, SystemParametersInfoW, ShowCursor, SetForegroundWindow, SetFocus, GetClientRect, LoadStringW, GetDlgItem, SetWindowTextW

      ( 0 exports )
      TrID : File type identification
      Win64 Executable Generic (59.6%)
      Win32 Executable MS Visual C++ (generic) (26.2%)
      Win32 Executable Generic (5.9%)
      Win32 Dynamic Link Library (generic) (5.2%)
      Generic Win/DOS Executable (1.3%)
      ssdeep: 1536:ks8bh0oSemYXfkF5OxBlQP03ytr/H1lxNIGKFEe6H:kLT5HxBlQcCtrtpdH
      PEiD : -
      RDS : NSRL Reference Data Set
      -

      --
      La vie est trop courte, alors vivons-la!!!
      0
  19. gen-hackman
     
    ok!

    do another OTL scan as previously requested
    --
    ♦G3и-н@¢км@и™©®♦
    0
  • 1
  • 2