Virus que bloque el antivirus
Resuelto
lenormand49
Mensajes publicados
115
Estado
Miembro
-
Usuario anónimo -
Usuario anónimo -
Hola,
Tengo un virus en mi ordenador que bloquea el inicio del antivirus (PC Cillin 12) y de Spybot.
Cuando intento iniciar el antivirus manualmente, aparece un mensaje de error durante unos segundos, diciendo que hay un conflicto entre el antivirus y un software instalado.
He intentado iniciar en modo seguro, pero el ordenador se bloquea (pantalla azul).
Si alguien puede ayudarme, porque estoy en un problema...
gracias
Tengo un virus en mi ordenador que bloquea el inicio del antivirus (PC Cillin 12) y de Spybot.
Cuando intento iniciar el antivirus manualmente, aparece un mensaje de error durante unos segundos, diciendo que hay un conflicto entre el antivirus y un software instalado.
He intentado iniciar en modo seguro, pero el ordenador se bloquea (pantalla azul).
Si alguien puede ayudarme, porque estoy en un problema...
gracias
Configuración: Windows XP Pro Firefox 3.5.6
38 respuestas
- 1
- 2
Siguiente
sigue esto en el PC infectado, tienes bastantes infecciones, entre ellas BAGLE, normalmente después de usar la primera herramienta (Findykill), podrás conectarte a internet:
• Descarga FindyKill en el Escritorio:
http://findykill.changelog.fr/Setup.exe
o
http://pagesperso-orange.fr/NosTools/Chiquitine29/Setup.exe
• Haz doble clic en FindyKill presente en el Escritorio.
• Elige la opción 2 (eliminación).
• Deja trabajar a la herramienta.
• Luego publica el informe FindyKill.txt que aparecerá (si has creado un tema en un foro para recibir ayuda).
• Nota: El informe FindyKill.txt se guarda en la raíz del disco (C:\FindyKill.txt).
(CTRL+A para seleccionar todo, CTRL+C para copiar y CTRL+V para pegar)
• Nota: "Process.exe", un componente de la herramienta, es detectado por algunos antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) como un RiskTool.
No es un virus, sino una utilidad destinada a finalizar procesos.
• Tutorial: http://pagesperso-orange.fr/NosTools/index.html
Nota: el UAC de Vista ya no interfiere con FindyKill.
Descarga USBFIX en tu escritorio:
http://pagesperso-orange.fr/NosTools/Chiquitine29/UsbFix.exe
o aquí:
https://www.ionos.fr/?affiliate_id=77097
/!\ Conecta tus fuentes de datos externas a tu PC (pendrive, disco duro externo, etc...) que puedan haber estado infectadas sin abrirlas
• Haz doble clic en el acceso directo de UsbFix presente en tu escritorio.
• Elige la opción 2 (eliminación)
• Deja trabajar a la herramienta.
• Luego publica el informe UsbFix.txt que aparecerá.
• Nota: El informe UsbFix.txt se guarda en la raíz del disco. (C:\UsbFix.txt)
(CTRL+A para seleccionar todo, CTRL+C para copiar y CTRL+V para pegar)
• Nota: "Process.exe", un componente de la herramienta, es detectado por algunos antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) como un RiskTool.
No es un virus, sino una utilidad destinada a finalizar procesos.
• Tutorial: http://pagesperso-orange.fr/nostools/tuto_usbfix2.html
• Descarga FindyKill en el Escritorio:
http://findykill.changelog.fr/Setup.exe
o
http://pagesperso-orange.fr/NosTools/Chiquitine29/Setup.exe
• Haz doble clic en FindyKill presente en el Escritorio.
• Elige la opción 2 (eliminación).
• Deja trabajar a la herramienta.
• Luego publica el informe FindyKill.txt que aparecerá (si has creado un tema en un foro para recibir ayuda).
• Nota: El informe FindyKill.txt se guarda en la raíz del disco (C:\FindyKill.txt).
(CTRL+A para seleccionar todo, CTRL+C para copiar y CTRL+V para pegar)
• Nota: "Process.exe", un componente de la herramienta, es detectado por algunos antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) como un RiskTool.
No es un virus, sino una utilidad destinada a finalizar procesos.
• Tutorial: http://pagesperso-orange.fr/NosTools/index.html
Nota: el UAC de Vista ya no interfiere con FindyKill.
Descarga USBFIX en tu escritorio:
http://pagesperso-orange.fr/NosTools/Chiquitine29/UsbFix.exe
o aquí:
https://www.ionos.fr/?affiliate_id=77097
/!\ Conecta tus fuentes de datos externas a tu PC (pendrive, disco duro externo, etc...) que puedan haber estado infectadas sin abrirlas
• Haz doble clic en el acceso directo de UsbFix presente en tu escritorio.
• Elige la opción 2 (eliminación)
• Deja trabajar a la herramienta.
• Luego publica el informe UsbFix.txt que aparecerá.
• Nota: El informe UsbFix.txt se guarda en la raíz del disco. (C:\UsbFix.txt)
(CTRL+A para seleccionar todo, CTRL+C para copiar y CTRL+V para pegar)
• Nota: "Process.exe", un componente de la herramienta, es detectado por algunos antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) como un RiskTool.
No es un virus, sino una utilidad destinada a finalizar procesos.
• Tutorial: http://pagesperso-orange.fr/nostools/tuto_usbfix2.html
• /!\Advertencia:
Este software solo debe usarse según lo prescrito por un asistente calificado y capacitado en la herramienta.
¡No usar fuera de este contexto: peligroso!
Descarga ComboFix desde este enlace:
https://forum.pcastuces.com/combofix_renomme_au_telechargement-f31s22.htm
o aquí:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Leer
https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
► Y es importante, guárdalo en el escritorio.
Antes de usar ComboFix:
► Desconéctate de Internet y cierra las ventanas de todos los programas en ejecución.
► Desactiva temporalmente y solo durante el uso de ComboFix, la protección en tiempo real de tu Antivirus y de tus Antispywares, que pueden interferir fuertemente con el procedimiento de búsqueda y limpieza de la herramienta.
Una vez hecho esto, haz doble clic en Combofix.exe en tu escritorio.
- Responde sí al mensaje de advertencia para que el programa comience a proceder con el análisis del pc.
/!\ Durante esta etapa, no uses el pc ni abras ningún programa.
- Al final del escaneo es posible que ComboFix necesite reiniciar el pc para finalizar la desinfección/búsqueda, déjalo hacerlo.
- Se abrirá un informe en el bloc de notas, este archivo de informe Combofix.txt se guarda automáticamente y se ubica en C:\Combofix.txt)
► Reactiva la protección en tiempo real de tu Antivirus y de tus Antispywares antes de volver a conectarte a Internet.
► Vuelve al foro y copia y pega todo el contenido de C:\Combofix.txt en tu próximo mensaje.
Si no funciona, elimina combofix de tu escritorio y descarga desde este enlace jacombo que es combofix renombrado, esto permite contrarrestar ciertas infecciones, colócalo en tu escritorio y sigue las instrucciones dadas en el procedimiento de combofix
http://sd-1.archive-host.com/membres/up/89820622056365782/jacombo.exe
•Descarga Malwarebytes' Anti-Malware:
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
o aquí: http://www.malwarebytes.org/mbam/program/mbam-setup.exe
. en la página haz clic en Descargar Malwarebyte's Anti-Malware
. guárdalo en el escritorio
. Haz doble clic en el archivo descargado para iniciar el proceso de instalación.
. En la pestaña "actualización", haz clic en el botón Buscar actualizaciones
. si el firewall solicita permiso para conectarse para malwarebytes, acepta
. Una vez finalizada la actualización
. ve a la pestaña, Búsqueda
. Selecciona Ejecutar un análisis completo
. Haz clic en Buscar
. El escaneo comienza.
. Al final del análisis, aparecerá un mensaje: El examen ha terminado normalmente. Haz clic en 'Mostrar resultados' para ver todos los objetos encontrados.
. Haz clic en Ok para continuar.
. Si se han detectado malwares, haz clic en Mostrar resultados
. Selecciona todo (o deja marcado) y haz clic en Eliminar la selección Malwarebytes eliminará los archivos y claves de registro y pondrá una copia en la cuarentena.
. Malwarebytes abrirá el bloc de notas y copiará el informe del análisis allí.
. ve a la pestaña informe/log
. haz clic en él para mostrarlo una vez visible
. haz clic en edición en la parte superior del bloc de notas, y luego en seleccionar todo
. vuelve a hacer clic en edición y luego en copiar y regresa al foro y en tu respuesta
. Haz clic derecho en el cuadro de respuesta y pegar
. Al final del escaneo, es posible que MBAM necesite reiniciar el pc para finalizar la eliminación, así que no te asustes, ¡reinicia tu pc!
Si necesitas ayuda, mira este tutorial:
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Este software solo debe usarse según lo prescrito por un asistente calificado y capacitado en la herramienta.
¡No usar fuera de este contexto: peligroso!
Descarga ComboFix desde este enlace:
https://forum.pcastuces.com/combofix_renomme_au_telechargement-f31s22.htm
o aquí:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Leer
https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
► Y es importante, guárdalo en el escritorio.
Antes de usar ComboFix:
► Desconéctate de Internet y cierra las ventanas de todos los programas en ejecución.
► Desactiva temporalmente y solo durante el uso de ComboFix, la protección en tiempo real de tu Antivirus y de tus Antispywares, que pueden interferir fuertemente con el procedimiento de búsqueda y limpieza de la herramienta.
Una vez hecho esto, haz doble clic en Combofix.exe en tu escritorio.
- Responde sí al mensaje de advertencia para que el programa comience a proceder con el análisis del pc.
/!\ Durante esta etapa, no uses el pc ni abras ningún programa.
- Al final del escaneo es posible que ComboFix necesite reiniciar el pc para finalizar la desinfección/búsqueda, déjalo hacerlo.
- Se abrirá un informe en el bloc de notas, este archivo de informe Combofix.txt se guarda automáticamente y se ubica en C:\Combofix.txt)
► Reactiva la protección en tiempo real de tu Antivirus y de tus Antispywares antes de volver a conectarte a Internet.
► Vuelve al foro y copia y pega todo el contenido de C:\Combofix.txt en tu próximo mensaje.
Si no funciona, elimina combofix de tu escritorio y descarga desde este enlace jacombo que es combofix renombrado, esto permite contrarrestar ciertas infecciones, colócalo en tu escritorio y sigue las instrucciones dadas en el procedimiento de combofix
http://sd-1.archive-host.com/membres/up/89820622056365782/jacombo.exe
•Descarga Malwarebytes' Anti-Malware:
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
o aquí: http://www.malwarebytes.org/mbam/program/mbam-setup.exe
. en la página haz clic en Descargar Malwarebyte's Anti-Malware
. guárdalo en el escritorio
. Haz doble clic en el archivo descargado para iniciar el proceso de instalación.
. En la pestaña "actualización", haz clic en el botón Buscar actualizaciones
. si el firewall solicita permiso para conectarse para malwarebytes, acepta
. Una vez finalizada la actualización
. ve a la pestaña, Búsqueda
. Selecciona Ejecutar un análisis completo
. Haz clic en Buscar
. El escaneo comienza.
. Al final del análisis, aparecerá un mensaje: El examen ha terminado normalmente. Haz clic en 'Mostrar resultados' para ver todos los objetos encontrados.
. Haz clic en Ok para continuar.
. Si se han detectado malwares, haz clic en Mostrar resultados
. Selecciona todo (o deja marcado) y haz clic en Eliminar la selección Malwarebytes eliminará los archivos y claves de registro y pondrá una copia en la cuarentena.
. Malwarebytes abrirá el bloc de notas y copiará el informe del análisis allí.
. ve a la pestaña informe/log
. haz clic en él para mostrarlo una vez visible
. haz clic en edición en la parte superior del bloc de notas, y luego en seleccionar todo
. vuelve a hacer clic en edición y luego en copiar y regresa al foro y en tu respuesta
. Haz clic derecho en el cuadro de respuesta y pegar
. Al final del escaneo, es posible que MBAM necesite reiniciar el pc para finalizar la eliminación, así que no te asustes, ¡reinicia tu pc!
Si necesitas ayuda, mira este tutorial:
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
descarga Ccleaner desde esta dirección
https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/
.guárdalo en el escritorio
.haz doble clic en el archivo para iniciar la instalación
.en la ventana de instalación, elige bien el idioma francés y OK
.haz clic en siguiente
.lee la licencia y acepto
.haz clic en siguiente
.aquí solo debes marcar la opción de crear un acceso directo en el escritorio y luego controlar automáticamente las actualizaciones de Ccleaner
.haz clic en instalar
.haz clic en cerrar
.haz doble clic en el ícono de Ccleaner para abrirlo
.una vez abierto, haz clic en opciones y luego en avanzado
.desmarca la opción de eliminar solo los archivos de la carpeta temp de windows que tengan más de 48 horas
.haz clic en limpiador
.haz clic en windows y en la columna avanzado
.marca la primera casilla de datos antiguos del prefetch, y solo esa, lo que te dará la casilla de datos antiguos del prefetch y la casilla avanzado que se ha marcado automáticamente, pero solo esa
.haz clic en analizar una vez que se termine el análisis
.haz clic en iniciar la limpieza y en la solicitud de confirmación OK, tendrás que repetirlo otra vez. Una vez terminado, verifica haciendo clic de nuevo en analizar para asegurarte de que no queda nada
.ahora haz clic en registro y luego en buscar errores
.deja todo marcado y haz clic en reparar los errores seleccionados
.te pregunta si deseas guardar SÍ
.dale un nombre para poder encontrarlo y guarda
.haz clic en corregir todos los errores seleccionados y en la solicitud de confirmación OK
.él elimina y cierra, verifica relanzando buscar errores
.regresa a opciones y vuelve a marcar la opción de eliminar solo los archivos de la carpeta temp de windows que tengan más de 48 horas, y en limpiador, windows bajo avanzado desmarca la primera casilla de datos antiguos del prefetch
.puedes cerrar Ccleaner
al final de esta operación, dame noticias sobre el funcionamiento del pc :-)
https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/
.guárdalo en el escritorio
.haz doble clic en el archivo para iniciar la instalación
.en la ventana de instalación, elige bien el idioma francés y OK
.haz clic en siguiente
.lee la licencia y acepto
.haz clic en siguiente
.aquí solo debes marcar la opción de crear un acceso directo en el escritorio y luego controlar automáticamente las actualizaciones de Ccleaner
.haz clic en instalar
.haz clic en cerrar
.haz doble clic en el ícono de Ccleaner para abrirlo
.una vez abierto, haz clic en opciones y luego en avanzado
.desmarca la opción de eliminar solo los archivos de la carpeta temp de windows que tengan más de 48 horas
.haz clic en limpiador
.haz clic en windows y en la columna avanzado
.marca la primera casilla de datos antiguos del prefetch, y solo esa, lo que te dará la casilla de datos antiguos del prefetch y la casilla avanzado que se ha marcado automáticamente, pero solo esa
.haz clic en analizar una vez que se termine el análisis
.haz clic en iniciar la limpieza y en la solicitud de confirmación OK, tendrás que repetirlo otra vez. Una vez terminado, verifica haciendo clic de nuevo en analizar para asegurarte de que no queda nada
.ahora haz clic en registro y luego en buscar errores
.deja todo marcado y haz clic en reparar los errores seleccionados
.te pregunta si deseas guardar SÍ
.dale un nombre para poder encontrarlo y guarda
.haz clic en corregir todos los errores seleccionados y en la solicitud de confirmación OK
.él elimina y cierra, verifica relanzando buscar errores
.regresa a opciones y vuelve a marcar la opción de eliminar solo los archivos de la carpeta temp de windows que tengan más de 48 horas, y en limpiador, windows bajo avanzado desmarca la primera casilla de datos antiguos del prefetch
.puedes cerrar Ccleaner
al final de esta operación, dame noticias sobre el funcionamiento del pc :-)
muy bien :-)
descarga Ccleaner desde esta dirección
https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/
.guárdalo en el escritorio
.haz doble clic en el archivo para iniciar la instalación
.en la ventana de instalación, selecciona bien el idioma francés y OK
.haz clic en siguiente
.lee la licencia y acepto
.haz clic en siguiente
.ahí solo selecciona poner un acceso directo en el escritorio y luego controlar automáticamente las actualizaciones de Ccleaner
.haz clic en instalar
.haz clic en cerrar
.haz doble clic en el ícono de Ccleaner para abrirlo
.una vez abierto, haz clic en opciones y luego en avanzado
.desmarca borrar únicamente los archivos, de la carpeta temp de windows más viejos que 48 horas
.haz clic en limpiador
.haz clic en windows y en la columna avanzado
.marca la primera casilla datos antiguos del perfetch, esa te dará la casilla datos viejos del perfetch y la casilla avanzado que está marcada automáticamente pero solo esa
.haz clic en analizar una vez terminado el análisis
.haz clic en iniciar la limpieza y en la solicitud de confirmación OK, tendrás que hacerlo una vez más, una vez terminado verifica al volver a hacer clic en analizar para asegurarte de que no haya nada más
.ahora haz clic en registro y luego en buscar errores
.deja todo marcado y haz clic en reparar los errores seleccionados
.te pide que guardes SÍ
.le das un nombre para poder encontrarlo y guarda
.haz clic en corregir todos los errores seleccionados y en la solicitud de confirmación OK
.él elimina y cierra, verifica volviendo a buscar errores
.regresa a opciones y vuelve a marcar la casilla borrar únicamente los archivos, de la carpeta temp de windows más viejos que 48 horas y en limpiador, windows en avanzado, desmarca la primera casilla datos viejos del perfetch
.puedes cerrar Ccleaner
• Para desinstalar las herramientas de desinfección que hemos utilizado:
Descarga ToolsCleaner2--> http://pc-system.fr/
-Una vez descargado, instálalo y ejecútalo
-Haz clic en Búsqueda y deja que el escaneo termine
-Haz clic en SUPRESIÓN
-Haz clic en Salir para que se pueda crear el informe
-Mándame el informe que se encuentra aquí--> C:\TCleaner.txt
• Desactivación y luego reactivación de la restauración del sistema después de la desinfección:
Es necesario desactivar y luego reactivar la restauración del sistema para purgarla ya que los puntos de restauración pueden estar infectados:
Para XP: https://www.commentcamarche.net/faq/5097-virus-system-volume-information
Para Vista: https://www.commentcamarche.net/faq/13214-vista-desactiver-reactiver-la-restauration-systeme-de-vista
Para Windows 7:
https://www.commentcamarche.net/informatique/windows/147-restaurer-windows-avec-les-points-de-restauration/
crea un nuevo punto de restauración del sistema, puede ser útil ;-)
dame novedades sobre el funcionamiento de la pc :-)
descarga Ccleaner desde esta dirección
https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/
.guárdalo en el escritorio
.haz doble clic en el archivo para iniciar la instalación
.en la ventana de instalación, selecciona bien el idioma francés y OK
.haz clic en siguiente
.lee la licencia y acepto
.haz clic en siguiente
.ahí solo selecciona poner un acceso directo en el escritorio y luego controlar automáticamente las actualizaciones de Ccleaner
.haz clic en instalar
.haz clic en cerrar
.haz doble clic en el ícono de Ccleaner para abrirlo
.una vez abierto, haz clic en opciones y luego en avanzado
.desmarca borrar únicamente los archivos, de la carpeta temp de windows más viejos que 48 horas
.haz clic en limpiador
.haz clic en windows y en la columna avanzado
.marca la primera casilla datos antiguos del perfetch, esa te dará la casilla datos viejos del perfetch y la casilla avanzado que está marcada automáticamente pero solo esa
.haz clic en analizar una vez terminado el análisis
.haz clic en iniciar la limpieza y en la solicitud de confirmación OK, tendrás que hacerlo una vez más, una vez terminado verifica al volver a hacer clic en analizar para asegurarte de que no haya nada más
.ahora haz clic en registro y luego en buscar errores
.deja todo marcado y haz clic en reparar los errores seleccionados
.te pide que guardes SÍ
.le das un nombre para poder encontrarlo y guarda
.haz clic en corregir todos los errores seleccionados y en la solicitud de confirmación OK
.él elimina y cierra, verifica volviendo a buscar errores
.regresa a opciones y vuelve a marcar la casilla borrar únicamente los archivos, de la carpeta temp de windows más viejos que 48 horas y en limpiador, windows en avanzado, desmarca la primera casilla datos viejos del perfetch
.puedes cerrar Ccleaner
• Para desinstalar las herramientas de desinfección que hemos utilizado:
Descarga ToolsCleaner2--> http://pc-system.fr/
-Una vez descargado, instálalo y ejecútalo
-Haz clic en Búsqueda y deja que el escaneo termine
-Haz clic en SUPRESIÓN
-Haz clic en Salir para que se pueda crear el informe
-Mándame el informe que se encuentra aquí--> C:\TCleaner.txt
• Desactivación y luego reactivación de la restauración del sistema después de la desinfección:
Es necesario desactivar y luego reactivar la restauración del sistema para purgarla ya que los puntos de restauración pueden estar infectados:
Para XP: https://www.commentcamarche.net/faq/5097-virus-system-volume-information
Para Vista: https://www.commentcamarche.net/faq/13214-vista-desactiver-reactiver-la-restauration-systeme-de-vista
Para Windows 7:
https://www.commentcamarche.net/informatique/windows/147-restaurer-windows-avec-les-points-de-restauration/
crea un nuevo punto de restauración del sistema, puede ser útil ;-)
dame novedades sobre el funcionamiento de la pc :-)
hola,
¿puedes reiniciar tu pc?
si es así, sigue esto y publica los informes:
• Descarga la herramienta de información del sistema de random (RSIT) y guárdala en tu escritorio.
http://images.malwareremoval.com/random/RSIT.exe
Tutorial: https://forum.pcastuces.com/randoms_system_information_tool_rsit-f31s31.htm
Haz doble clic en RSIT.exe para iniciar la herramienta.
Haz clic en 'continuar' en la pantalla de aviso.
Si la herramienta HIjackThis (versión actualizada) no está presente o no se detecta en el ordenador, RSIT la descargará y deberás aceptar la licencia.
Una vez finalizado el escaneo, aparecerán 2 informes. Publica el contenido de los 2 informes por separado. Se encuentran en c:
(log.txt & info.txt)
(CTRL+A para seleccionar todo, CTRL+C para copiar y CTRL+V para pegar)
¿puedes reiniciar tu pc?
si es así, sigue esto y publica los informes:
• Descarga la herramienta de información del sistema de random (RSIT) y guárdala en tu escritorio.
http://images.malwareremoval.com/random/RSIT.exe
Tutorial: https://forum.pcastuces.com/randoms_system_information_tool_rsit-f31s31.htm
Haz doble clic en RSIT.exe para iniciar la herramienta.
Haz clic en 'continuar' en la pantalla de aviso.
Si la herramienta HIjackThis (versión actualizada) no está presente o no se detecta en el ordenador, RSIT la descargará y deberás aceptar la licencia.
Una vez finalizado el escaneo, aparecerán 2 informes. Publica el contenido de los 2 informes por separado. Se encuentran en c:
(log.txt & info.txt)
(CTRL+A para seleccionar todo, CTRL+C para copiar y CTRL+V para pegar)
Prueba un antivirus en línea, pero además de eso, no sé mucho para resolver este tipo de problema...
- http://www.f-secure.com/fr_FR/security/security-lab/tools-and-services/online-scanner/
- https://www.trendmicro.com/en_us/forHome/products/housecall.html
- https://www.eset.com/
Si no puedes acceder a uno de estos sitios, ve aquí:
http://www.confickerworkinggroup.org/infection_test/cfeyechart.html (un anti-conficker)
- http://www.f-secure.com/fr_FR/security/security-lab/tools-and-services/online-scanner/
- https://www.trendmicro.com/en_us/forHome/products/housecall.html
- https://www.eset.com/
Si no puedes acceder a uno de estos sitios, ve aquí:
http://www.confickerworkinggroup.org/infection_test/cfeyechart.html (un anti-conficker)
pequeña precisión: el ordenador infectado está actualmente desconectado de Internet. Estoy trabajando en otro micro.
Aquí está el registro
Archivo de registro de la herramienta de información del sistema de random 1.06 (escrito por random/random)
Ejecutado por Admin el 2010-01-07 17:52:19
Microsoft Windows XP Profesional Service Pack 3
El disco del sistema C: tiene 25 GB (25%) libres de 100 GB
RAM total: 2046 MB (73% libre)
Descarga de HijackThis fallida
====== Carpeta de tareas programadas ======
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
====== Volcado de registro ======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Ayudante de enlace PDF de Adobe - C:\Program Files\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Ayudante SSV del plug-in Java(tm) 2 - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
Clase JQSIEStartDetectorImpl - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"UpdateManager"=C:\Program Files\Archivos comunes\Sonic\Update Manager\sgtray.exe [2003-08-19 110592]
"Synchronization Manager"=C:\WINDOWS\system32\mobsync.exe [2008-04-14 143872]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-05-05 14396416]
"RemoteControl"=C:\WINDOWS\system32\rmctrl.exe [2000-10-16 32768]
"pccguide.exe"=C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe [2010-01-07 823361]
"Omnipage"=C:\Program Files\ScanSoft\OmniPageSE\opware32.exe [2002-06-03 49152]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb03.exe [2001-06-19 200704]
"High Definition Audio Property Page Shortcut"=C:\WINDOWS\system32\HDAShCut.exe [2005-01-07 61952]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"LogitechCommunicationsManager"=C:\Program Files\Archivos comunes\LogiShrd\LComMgr\Communications_Helper.exe [2007-07-25 563984]
"LogitechQuickCamRibbon"=C:\Program Files\Logitech\QuickCam\Quickcam.exe [2007-07-25 2027792]
"EM_EXEC"=C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE [2001-10-04 35328]
"LDM"=C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe [2005-01-09 858624]
"Logitech Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2004-09-15 37888]
"AppleSyncNotifier"=C:\Program Files\Archivos comunes\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2009-08-13 177440]
"ArcSoft Connection Service"=C:\Program Files\Archivos comunes\ArcSoft\Connection Service\Bin\ACDaemon.exe [2007-10-11 31232]
"UPSMS"=C:\Program Files\Commander Pro\UPSMS.exe [2009-06-28 114688]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-06-10 13758464]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-06-10 86016]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2008-03-10 689488]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2008-03-17 1848648]
"IJNetworkScanUtility"=C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE [2007-11-19 128352]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Archivos comunes\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-11-10 417792]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-11-12 141600]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Logman"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\logman.exe [2009-12-20 95232]
"rsvp"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\rsvp.exe [2009-12-20 95232]
"ComRepl"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\Temp\comrepl.exe [2009-12-20 95232]
"DllHst"=C:\WINDOWS\dllhst3g.exe [2009-12-20 95232]
"Spool"=C:\DOCUME~1\ADMIN~1.XPS\A [2007-10-01 14582]
"Cisvc"=C:\WINDOWS\cisvc.exe [2009-12-20 95232]
"CmSTP"=C:\DOCUME~1\ADMIN~1.XPS\A [2007-10-01 14582]
"Esent Utl"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\esentutl.exe [2009-12-20 95232]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"NCLaunch"=C:\WINDOWS\NCLAUNCH.EXe [2007-03-19 40960]
"LDM"=C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe [2005-01-09 858624]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Archivos comunes\Ahead\lib\NMBgMonitor.exe [2005-09-03 94208]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"CmSTP"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\cmstp.exe [2009-12-20 95232]
"Mstsc"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\MICROS~1\mstsc.exe [2009-12-20 95232]
"MstInit"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\MICROS~1\mstinit.exe [2009-12-20 95232]
"Cisvc"=C:\WINDOWS\cisvc.exe [2009-12-20 95232]
"Logman"=C:\WINDOWS\logman.exe [2009-12-20 95232]
"ComRepl"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\MICROS~1\comrepl.exe [2009-12-20 95232]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ANIWZCS2Service]
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe [2004-04-14 45056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\D-Link AirPlus G]
C:\Program Files\D-Link\AirPlus G\AirGCFG.exe [2004-07-09 1249280]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]
C:\Documents and Settings\All Users.WINDOWS\Menú de Inicio\Programas\Inicio
WiFi Station para Livebox.lnk - C:\Program Files\Hercules\WiFi Station para Livebox\WifiStationLB.exe
Windows Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Menú de Inicio\Programas\Inicio
GM_DevUpdate.lnk - C:\Program Files\HAMA Joystick Outlandish\GM_DevUpdate.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2008-10-18 200064]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 240128]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"NoDispScrSavPage"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=95000000
"NoSMHelp"=1
"MemCheckBoxInRunDlg"=1
"NoSMBalloonTip"=1
"NoDesktopCleanupWizard"=1
"NoWelcomeScreen"=1
"NoAutoUpdate"=1
"NoBandCustomize"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Westwood\SUN\GAME.ICD"="C:\Program Files\Westwood\SUN\GAME.ICD:*:Enabled:Ejecutable principal de Tiberian Sun"
"C:\Program Files\Westwood\SUN\Game.exe"="C:\Program Files\Westwood\SUN\Game.exe:*:Enabled:Ejecutable principal de Tiberian Sun"
"C:\Program Files\EA Games\Command and Conquer Generals\patchget.dat"="C:\Program Files\EA Games\Command and Conquer Generals\patchget.dat:*:Enabled:patchgrabber"
"C:\Program Files\ScanSoft\OmniPageSE\EregFre\NAVBrowser.exe"="C:\Program Files\ScanSoft\OmniPageSE\EregFre\NAVBrowser.exe:*:Enabled:NAVBrowser"
"C:\Program Files\Valve\Half Life 2\hl2.exe"="C:\Program Files\Valve\Half Life 2\hl2.exe:*:Enabled:hl2"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\Half-Life\hl.exe"="C:\Program Files\Half-Life\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Half-Life\hlupdate.exe"="C:\Program Files\Half-Life\hlupdate.exe:*:Enabled:hlupdate.exe"
"C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE:*:Enabled:OUTLOOK.EXE"
"C:\Program Files\EA Games\Command and Conquer Generals\game.dat"="C:\Program Files\EA Games\Command and Conquer Generals\game.dat:*:Enabled:game"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:MSN Messenger 7.5"
"C:\Program Files\Microsoft Games\Rise Of Legends\legends.exe"="C:\Program Files\Microsoft Games\Rise Of Legends\legends.exe:*:Enabled:Rise Of Legends"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\Diablo II\Diablo II.exe"="C:\Program Files\Diablo II\Diablo II.exe:*:Enabled:Diablo II"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule iONiX Mod"
"C:\Program Files\EA Games\Command & Conquer Generals - Heure H\game.dat"="C:\Program Files\EA Games\Command & Conquer Generals - Heure H\game.dat:*:Enabled:game"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Ejecutar una DLL como aplicación"
"C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe"="C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe:*:Enabled:Audio Windows Media(TM) (wma)"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\WINDOWS\Temp\occ.exe"="C:\WINDOWS\Temp\occ.exe:*:Enabled:Módulo OneCC"
"C:\Program Files\Microsoft Games\Rise of Nations\rise.exe"="C:\Program Files\Microsoft Games\Rise of Nations\rise.exe:*:Enabled:Rise of Nations"
"C:\Program Files\Microsoft Games\Rise of Nations\nations.exe"="C:\Program Files\Microsoft Games\Rise of Nations\nations.exe:*:Enabled:Rise of Nations"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Microsoft Games\Rise of Nations\thrones.exe"="C:\Program Files\Microsoft Games\Rise of Nations\thrones.exe:*:Enabled:Rise of Nations"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe:*:Enabled:backWeb-8876480"
"C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe"="C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\Program Files\The Gladiators\The Gladiators.exe"="C:\Program Files\The Gladiators\The Gladiators.exe:*:Enabled:The Gladiators"
"C:\Program Files\Real\RealPlayer\realplay.exe"="C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer"
"C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Temp\.ttB.tmp"="C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Temp\.ttB.tmp:*:Enabled:enable"
"C:\WINDOWS\system32\sysrest32.exe"="C:\WINDOWS\system32\sysrest32.exe:*:Enabled:enable"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:MSN Messenger 7.5"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9449eda2-f6ec-11de-877f-001583f2180d}]
shell\AutoRun\command - G:\setup.exe
====== Asociaciones de archivos ======
.reg - abrir - regedit.exe "%1" %*
.scr - abrir - "%1" %*
====== Lista de archivos/carpetas creadas en el último mes ======
2010-01-07 17:45:09 ----D---- C:\rsit
2010-01-07 16:46:16 ----A---- C:\WINDOWS\dllhst3g.exe
2010-01-06 22:06:15 ----HD---- C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m
2010-01-06 21:33:58 ----HD---- C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers
2010-01-06 06:41:03 ----A---- C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\spoolsv.exe
2010-01-02 16:53:11 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2010-01-02 16:53:11 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2010-01-02 16:53:09 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2010-01-02 16:53:08 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2010-01-02 16:53:08 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2010-01-02 16:53:08 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2010-01-02 16:53:07 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2010-01-02 11:27:06 ----A---- C:\WINDOWS\logman.exe
2009-12-28 08:37:35 ----A---- C:\WINDOWS\spoolsv.exe
2009-12-28 08:37:35 ----A---- C:\WINDOWS\ieudinit.exe
2009-12-28 08:37:35 ----A---- C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\mstsc.exe
2009-12-20 10:31:56 ----A---- C:\WINDOWS\cisvc.exe
2009-12-19 00:41:41 ----A---- C:\WINDOWS\game.ini
2009-12-19 00:31:56 ----D---- C:\Program Files\Activision
2009-12-16 19:07:58 ----D---- C:\Program Files\Soldier of Fortune II - SP Demo
2009-12-13 16:54:32 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2009-12-13 16:54:32 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2009-12-13 16:54:31 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2009-12-13 16:54:31 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2009-12-13 16:54:31 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2009-12-13 16:54:30 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2009-12-13 16:54:30 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2009-12-13 16:54:29 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2009-12-13 16:54:29 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2009-12-13 16:54:28 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2009-12-13 16:54:28 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2009-12-13 16:54:28 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2009-12-13 16:54:27 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2009-12-13 16:54:26 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2009-12-13 16:54:26 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2009-12-13 16:54:26 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2009-12-13 16:54:26 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2009-12-13 16:54:25 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2009-12-13 16:54:25 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2009-12-13 16:54:25 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2009-12-13 16:54:24 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2009-12-13 16:54:23 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2009-12-13 16:54:23 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2009-12-13 16:54:23 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2009-12-13 16:54:23 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2009-12-13 16:54:22 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2009-12-13 16:54:18 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2009-12-13 16:53:33 ----D---- C:\WINDOWS\Logs
2009-12-12 00:56:13 ----D---- C:\WINDOWS\system32\AGEIA
2009-12-12 00:56:12 ----D---- C:\Program Files\AGEIA Technologies
2009-12-11 20:45:39 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2009-12-09 07:01:14 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-09 07:01:07 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-09 07:00:37 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-09 07:00:30 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-09 07:00:22 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
====== Lista de archivos/carpetas modificados en el último mes ======
2010-01-07 17:47:16 ----D---- C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\Skype
2010-01-07 16:46:23 ----D---- C:\WINDOWS\system32\Lang
2010-01-07 16:46:16 ----D---- C:\WINDOWS
2010-01-07 16:45:08 ----D---- C:\WINDOWS\system32\drivers
2010-01-07 16:42:49 ----D---- C:\WINDOWS\Temp
2010-01-06 22:29:42 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-06 22:28:18 ----AD---- C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP
2010-01-06 22:14:59 ----D---- C:\Program Files\microsoft frontpage
2010-01-06 22:14:02 ----D---- C:\Program Files\FileZilla
2010-01-06 22:13:30 ----D---- C:\Program Files\eMule
2010-01-06 22:10:09 ----D---- C:\Program Files\BitTorrent
2010-01-06 22:08:55 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-06 21:35:00 ----D---- C:\WINDOWS\system32
2010-01-06 21:29:00 ----RD---- C:\Program Files
2010-01-06 20:56:23 ----D---- C:\Program Files\Mozilla Firefox
2010-01-06 19:37:50 ----D---- C:\Program Files\Commander Pro
2010-01-05 18:30:00 ----SHD---- C:\WINDOWS\Installer
2010-01-05 18:29:19 ----SHD---- C:\Config.Msi
2010-01-05 18:29:12 ----HD---- C:\WINDOWS\inf
2010-01-05 18:29:12 ----D---- C:\WINDOWS\system32\DirectX
2010-01-05 18:28:55 ----RSD---- C:\WINDOWS\assembly
2010-01-04 19:11:22 ----D---- C:\WINDOWS\Prefetch
2010-01-04 19:01:14 ----D---- C:\Program Files\SpywareBlaster
2010-01-03 23:26:33 ----A---- C:\WINDOWS\NeroDigital.ini
2010-01-02 23:06:51 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2010-01-02 23:06:27 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-01-02 16:50:21 ----HD---- C:\Program Files\InstallShield Installation Information
2010-01-01 11:40:44 ----SD---- C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\Microsoft
2009-12-30 08:56:05 ----D---- C:\WINDOWS\system
2009-12-21 19:29:07 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy
2009-12-21 13:35:41 ----D---- C:\WINDOWS\Debug
2009-12-21 13:33:21 ----D---- C:\XtremeAirDemo
2009-12-21 13:32:56 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Ulead Systems
2009-12-21 13:32:55 ----RSD---- C:\WINDOWS\Fonts
2009-12-21 13:32:55 ----D---- C:\Program Files\Archivos comunes
2009-12-21 13:31:35 ----D---- C:\Program Files\Archivos comunes\Real
2009-12-21 13:31:27 ----D---- C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\Real
2009-12-21 13:30:57 ----D---- C:\Program Files\CyberLink
2009-12-21 13:30:43 ----D---- C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\Panasonic
2009-12-18 19:21:47 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-12-15 23:19:50 ----D---- C:\Program Files\Canon
2009-12-13 13:47:17 ----D---- C:\temp
2009-12-12 00:57:39 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-12 00:56:25 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-12-12 00:55:55 ----D---- C:\Program Files\Archivos comunes\Wise Installation Wizard
2009-12-11 22:56:30 ----D---- C:\WINDOWS\AppPatch
2009-12-11 20:45:29 ----HD---- C:\WINDOWS\$hf_mig$
2009-12-09 09:37:18 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-09 07:00:55 ----D---- C:\Program Files\Internet Explorer
2009-12-09 07:00:48 ----D---- C:\WINDOWS\ie8updates
2009-12-09 06:56:02 ----D---- C:\WINDOWS\system32\CatRoot
====== Lista de controladores (R=Ejecutándose, S=Detenido, 0=Arranque, 1=Sistema, 2=Automático, 3=Demanda, 4=Desactivado) ======
R1 intelppm;Controlador de procesador Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 kbdhid;Controlador HID de teclado; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 sK9Ou0s;sK9Ou0s; \??\C:\WINDOWS\system32\srosa2.sys []
R2 ANIO;Servicio ANIO; \??\C:\WINDOWS\system32\ANIO.SYS []
R2 MASPINT;MASPINT; C:\WINDOWS\system32\drivers\MASPINT.sys [2000-03-29 8096]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2006-11-10 18688]
R3 BlueletAudio;Servicio de Audio Bluetooth; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [2006-06-23 31488]
R3 BlueletSCOAudio;Servicio de Audio SCO Bluetooth; C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys [2005-08-31 20480]
R3 BT;Adaptador de Red PAN Bluetooth; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2006-01-19 10068]
R3 BTHidEnum;Enumerador HID Bluetooth; C:\WINDOWS\system32\DRIVERS\vbtenum.sys [2005-07-30 11988]
R3 E100B;Controlador de Adaptador Intel(R) PRO; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2004-02-10 154112]
R3 GEARAspiWDM;Controlador de Filtro GEAR ASPI; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2009-05-18 26600]
R3 GMFilter;Controlador de Filtro HID GMFilter; C:\WINDOWS\system32\DRIVERS\GMFilter.sys [2005-08-23 21760]
R3 HDAudBus;Controlador de bus Microsoft UAA para Audio de Alta Definición; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Controlador de clase HID de Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
Aquí está el registro
Archivo de registro de la herramienta de información del sistema de random 1.06 (escrito por random/random)
Ejecutado por Admin el 2010-01-07 17:52:19
Microsoft Windows XP Profesional Service Pack 3
El disco del sistema C: tiene 25 GB (25%) libres de 100 GB
RAM total: 2046 MB (73% libre)
Descarga de HijackThis fallida
====== Carpeta de tareas programadas ======
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
====== Volcado de registro ======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Ayudante de enlace PDF de Adobe - C:\Program Files\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Ayudante SSV del plug-in Java(tm) 2 - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
Clase JQSIEStartDetectorImpl - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"UpdateManager"=C:\Program Files\Archivos comunes\Sonic\Update Manager\sgtray.exe [2003-08-19 110592]
"Synchronization Manager"=C:\WINDOWS\system32\mobsync.exe [2008-04-14 143872]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-05-05 14396416]
"RemoteControl"=C:\WINDOWS\system32\rmctrl.exe [2000-10-16 32768]
"pccguide.exe"=C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe [2010-01-07 823361]
"Omnipage"=C:\Program Files\ScanSoft\OmniPageSE\opware32.exe [2002-06-03 49152]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb03.exe [2001-06-19 200704]
"High Definition Audio Property Page Shortcut"=C:\WINDOWS\system32\HDAShCut.exe [2005-01-07 61952]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"LogitechCommunicationsManager"=C:\Program Files\Archivos comunes\LogiShrd\LComMgr\Communications_Helper.exe [2007-07-25 563984]
"LogitechQuickCamRibbon"=C:\Program Files\Logitech\QuickCam\Quickcam.exe [2007-07-25 2027792]
"EM_EXEC"=C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE [2001-10-04 35328]
"LDM"=C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe [2005-01-09 858624]
"Logitech Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2004-09-15 37888]
"AppleSyncNotifier"=C:\Program Files\Archivos comunes\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2009-08-13 177440]
"ArcSoft Connection Service"=C:\Program Files\Archivos comunes\ArcSoft\Connection Service\Bin\ACDaemon.exe [2007-10-11 31232]
"UPSMS"=C:\Program Files\Commander Pro\UPSMS.exe [2009-06-28 114688]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-06-10 13758464]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-06-10 86016]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2008-03-10 689488]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2008-03-17 1848648]
"IJNetworkScanUtility"=C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE [2007-11-19 128352]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Archivos comunes\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-11-10 417792]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-11-12 141600]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Logman"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\logman.exe [2009-12-20 95232]
"rsvp"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\rsvp.exe [2009-12-20 95232]
"ComRepl"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\Temp\comrepl.exe [2009-12-20 95232]
"DllHst"=C:\WINDOWS\dllhst3g.exe [2009-12-20 95232]
"Spool"=C:\DOCUME~1\ADMIN~1.XPS\A [2007-10-01 14582]
"Cisvc"=C:\WINDOWS\cisvc.exe [2009-12-20 95232]
"CmSTP"=C:\DOCUME~1\ADMIN~1.XPS\A [2007-10-01 14582]
"Esent Utl"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\esentutl.exe [2009-12-20 95232]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"NCLaunch"=C:\WINDOWS\NCLAUNCH.EXe [2007-03-19 40960]
"LDM"=C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe [2005-01-09 858624]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Archivos comunes\Ahead\lib\NMBgMonitor.exe [2005-09-03 94208]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"CmSTP"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\cmstp.exe [2009-12-20 95232]
"Mstsc"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\MICROS~1\mstsc.exe [2009-12-20 95232]
"MstInit"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\MICROS~1\mstinit.exe [2009-12-20 95232]
"Cisvc"=C:\WINDOWS\cisvc.exe [2009-12-20 95232]
"Logman"=C:\WINDOWS\logman.exe [2009-12-20 95232]
"ComRepl"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\MICROS~1\comrepl.exe [2009-12-20 95232]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ANIWZCS2Service]
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe [2004-04-14 45056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\D-Link AirPlus G]
C:\Program Files\D-Link\AirPlus G\AirGCFG.exe [2004-07-09 1249280]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]
C:\Documents and Settings\All Users.WINDOWS\Menú de Inicio\Programas\Inicio
WiFi Station para Livebox.lnk - C:\Program Files\Hercules\WiFi Station para Livebox\WifiStationLB.exe
Windows Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Menú de Inicio\Programas\Inicio
GM_DevUpdate.lnk - C:\Program Files\HAMA Joystick Outlandish\GM_DevUpdate.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2008-10-18 200064]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 240128]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"NoDispScrSavPage"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=95000000
"NoSMHelp"=1
"MemCheckBoxInRunDlg"=1
"NoSMBalloonTip"=1
"NoDesktopCleanupWizard"=1
"NoWelcomeScreen"=1
"NoAutoUpdate"=1
"NoBandCustomize"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Westwood\SUN\GAME.ICD"="C:\Program Files\Westwood\SUN\GAME.ICD:*:Enabled:Ejecutable principal de Tiberian Sun"
"C:\Program Files\Westwood\SUN\Game.exe"="C:\Program Files\Westwood\SUN\Game.exe:*:Enabled:Ejecutable principal de Tiberian Sun"
"C:\Program Files\EA Games\Command and Conquer Generals\patchget.dat"="C:\Program Files\EA Games\Command and Conquer Generals\patchget.dat:*:Enabled:patchgrabber"
"C:\Program Files\ScanSoft\OmniPageSE\EregFre\NAVBrowser.exe"="C:\Program Files\ScanSoft\OmniPageSE\EregFre\NAVBrowser.exe:*:Enabled:NAVBrowser"
"C:\Program Files\Valve\Half Life 2\hl2.exe"="C:\Program Files\Valve\Half Life 2\hl2.exe:*:Enabled:hl2"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\Half-Life\hl.exe"="C:\Program Files\Half-Life\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Half-Life\hlupdate.exe"="C:\Program Files\Half-Life\hlupdate.exe:*:Enabled:hlupdate.exe"
"C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE:*:Enabled:OUTLOOK.EXE"
"C:\Program Files\EA Games\Command and Conquer Generals\game.dat"="C:\Program Files\EA Games\Command and Conquer Generals\game.dat:*:Enabled:game"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:MSN Messenger 7.5"
"C:\Program Files\Microsoft Games\Rise Of Legends\legends.exe"="C:\Program Files\Microsoft Games\Rise Of Legends\legends.exe:*:Enabled:Rise Of Legends"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\Diablo II\Diablo II.exe"="C:\Program Files\Diablo II\Diablo II.exe:*:Enabled:Diablo II"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule iONiX Mod"
"C:\Program Files\EA Games\Command & Conquer Generals - Heure H\game.dat"="C:\Program Files\EA Games\Command & Conquer Generals - Heure H\game.dat:*:Enabled:game"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Ejecutar una DLL como aplicación"
"C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe"="C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe:*:Enabled:Audio Windows Media(TM) (wma)"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\WINDOWS\Temp\occ.exe"="C:\WINDOWS\Temp\occ.exe:*:Enabled:Módulo OneCC"
"C:\Program Files\Microsoft Games\Rise of Nations\rise.exe"="C:\Program Files\Microsoft Games\Rise of Nations\rise.exe:*:Enabled:Rise of Nations"
"C:\Program Files\Microsoft Games\Rise of Nations\nations.exe"="C:\Program Files\Microsoft Games\Rise of Nations\nations.exe:*:Enabled:Rise of Nations"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Microsoft Games\Rise of Nations\thrones.exe"="C:\Program Files\Microsoft Games\Rise of Nations\thrones.exe:*:Enabled:Rise of Nations"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe:*:Enabled:backWeb-8876480"
"C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe"="C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\Program Files\The Gladiators\The Gladiators.exe"="C:\Program Files\The Gladiators\The Gladiators.exe:*:Enabled:The Gladiators"
"C:\Program Files\Real\RealPlayer\realplay.exe"="C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer"
"C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Temp\.ttB.tmp"="C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Temp\.ttB.tmp:*:Enabled:enable"
"C:\WINDOWS\system32\sysrest32.exe"="C:\WINDOWS\system32\sysrest32.exe:*:Enabled:enable"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:MSN Messenger 7.5"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9449eda2-f6ec-11de-877f-001583f2180d}]
shell\AutoRun\command - G:\setup.exe
====== Asociaciones de archivos ======
.reg - abrir - regedit.exe "%1" %*
.scr - abrir - "%1" %*
====== Lista de archivos/carpetas creadas en el último mes ======
2010-01-07 17:45:09 ----D---- C:\rsit
2010-01-07 16:46:16 ----A---- C:\WINDOWS\dllhst3g.exe
2010-01-06 22:06:15 ----HD---- C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m
2010-01-06 21:33:58 ----HD---- C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers
2010-01-06 06:41:03 ----A---- C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\spoolsv.exe
2010-01-02 16:53:11 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2010-01-02 16:53:11 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2010-01-02 16:53:09 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2010-01-02 16:53:08 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2010-01-02 16:53:08 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2010-01-02 16:53:08 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2010-01-02 16:53:07 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2010-01-02 11:27:06 ----A---- C:\WINDOWS\logman.exe
2009-12-28 08:37:35 ----A---- C:\WINDOWS\spoolsv.exe
2009-12-28 08:37:35 ----A---- C:\WINDOWS\ieudinit.exe
2009-12-28 08:37:35 ----A---- C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\mstsc.exe
2009-12-20 10:31:56 ----A---- C:\WINDOWS\cisvc.exe
2009-12-19 00:41:41 ----A---- C:\WINDOWS\game.ini
2009-12-19 00:31:56 ----D---- C:\Program Files\Activision
2009-12-16 19:07:58 ----D---- C:\Program Files\Soldier of Fortune II - SP Demo
2009-12-13 16:54:32 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2009-12-13 16:54:32 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2009-12-13 16:54:31 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2009-12-13 16:54:31 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2009-12-13 16:54:31 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2009-12-13 16:54:30 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2009-12-13 16:54:30 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2009-12-13 16:54:29 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2009-12-13 16:54:29 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2009-12-13 16:54:28 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2009-12-13 16:54:28 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2009-12-13 16:54:28 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2009-12-13 16:54:27 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2009-12-13 16:54:26 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2009-12-13 16:54:26 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2009-12-13 16:54:26 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2009-12-13 16:54:26 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2009-12-13 16:54:25 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2009-12-13 16:54:25 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2009-12-13 16:54:25 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2009-12-13 16:54:24 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2009-12-13 16:54:23 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2009-12-13 16:54:23 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2009-12-13 16:54:23 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2009-12-13 16:54:23 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2009-12-13 16:54:22 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2009-12-13 16:54:18 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2009-12-13 16:53:33 ----D---- C:\WINDOWS\Logs
2009-12-12 00:56:13 ----D---- C:\WINDOWS\system32\AGEIA
2009-12-12 00:56:12 ----D---- C:\Program Files\AGEIA Technologies
2009-12-11 20:45:39 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2009-12-09 07:01:14 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-09 07:01:07 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-09 07:00:37 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-09 07:00:30 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-09 07:00:22 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
====== Lista de archivos/carpetas modificados en el último mes ======
2010-01-07 17:47:16 ----D---- C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\Skype
2010-01-07 16:46:23 ----D---- C:\WINDOWS\system32\Lang
2010-01-07 16:46:16 ----D---- C:\WINDOWS
2010-01-07 16:45:08 ----D---- C:\WINDOWS\system32\drivers
2010-01-07 16:42:49 ----D---- C:\WINDOWS\Temp
2010-01-06 22:29:42 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-06 22:28:18 ----AD---- C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP
2010-01-06 22:14:59 ----D---- C:\Program Files\microsoft frontpage
2010-01-06 22:14:02 ----D---- C:\Program Files\FileZilla
2010-01-06 22:13:30 ----D---- C:\Program Files\eMule
2010-01-06 22:10:09 ----D---- C:\Program Files\BitTorrent
2010-01-06 22:08:55 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-06 21:35:00 ----D---- C:\WINDOWS\system32
2010-01-06 21:29:00 ----RD---- C:\Program Files
2010-01-06 20:56:23 ----D---- C:\Program Files\Mozilla Firefox
2010-01-06 19:37:50 ----D---- C:\Program Files\Commander Pro
2010-01-05 18:30:00 ----SHD---- C:\WINDOWS\Installer
2010-01-05 18:29:19 ----SHD---- C:\Config.Msi
2010-01-05 18:29:12 ----HD---- C:\WINDOWS\inf
2010-01-05 18:29:12 ----D---- C:\WINDOWS\system32\DirectX
2010-01-05 18:28:55 ----RSD---- C:\WINDOWS\assembly
2010-01-04 19:11:22 ----D---- C:\WINDOWS\Prefetch
2010-01-04 19:01:14 ----D---- C:\Program Files\SpywareBlaster
2010-01-03 23:26:33 ----A---- C:\WINDOWS\NeroDigital.ini
2010-01-02 23:06:51 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2010-01-02 23:06:27 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-01-02 16:50:21 ----HD---- C:\Program Files\InstallShield Installation Information
2010-01-01 11:40:44 ----SD---- C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\Microsoft
2009-12-30 08:56:05 ----D---- C:\WINDOWS\system
2009-12-21 19:29:07 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy
2009-12-21 13:35:41 ----D---- C:\WINDOWS\Debug
2009-12-21 13:33:21 ----D---- C:\XtremeAirDemo
2009-12-21 13:32:56 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Ulead Systems
2009-12-21 13:32:55 ----RSD---- C:\WINDOWS\Fonts
2009-12-21 13:32:55 ----D---- C:\Program Files\Archivos comunes
2009-12-21 13:31:35 ----D---- C:\Program Files\Archivos comunes\Real
2009-12-21 13:31:27 ----D---- C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\Real
2009-12-21 13:30:57 ----D---- C:\Program Files\CyberLink
2009-12-21 13:30:43 ----D---- C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\Panasonic
2009-12-18 19:21:47 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-12-15 23:19:50 ----D---- C:\Program Files\Canon
2009-12-13 13:47:17 ----D---- C:\temp
2009-12-12 00:57:39 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-12 00:56:25 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-12-12 00:55:55 ----D---- C:\Program Files\Archivos comunes\Wise Installation Wizard
2009-12-11 22:56:30 ----D---- C:\WINDOWS\AppPatch
2009-12-11 20:45:29 ----HD---- C:\WINDOWS\$hf_mig$
2009-12-09 09:37:18 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-09 07:00:55 ----D---- C:\Program Files\Internet Explorer
2009-12-09 07:00:48 ----D---- C:\WINDOWS\ie8updates
2009-12-09 06:56:02 ----D---- C:\WINDOWS\system32\CatRoot
====== Lista de controladores (R=Ejecutándose, S=Detenido, 0=Arranque, 1=Sistema, 2=Automático, 3=Demanda, 4=Desactivado) ======
R1 intelppm;Controlador de procesador Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 kbdhid;Controlador HID de teclado; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 sK9Ou0s;sK9Ou0s; \??\C:\WINDOWS\system32\srosa2.sys []
R2 ANIO;Servicio ANIO; \??\C:\WINDOWS\system32\ANIO.SYS []
R2 MASPINT;MASPINT; C:\WINDOWS\system32\drivers\MASPINT.sys [2000-03-29 8096]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2006-11-10 18688]
R3 BlueletAudio;Servicio de Audio Bluetooth; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [2006-06-23 31488]
R3 BlueletSCOAudio;Servicio de Audio SCO Bluetooth; C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys [2005-08-31 20480]
R3 BT;Adaptador de Red PAN Bluetooth; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2006-01-19 10068]
R3 BTHidEnum;Enumerador HID Bluetooth; C:\WINDOWS\system32\DRIVERS\vbtenum.sys [2005-07-30 11988]
R3 E100B;Controlador de Adaptador Intel(R) PRO; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2004-02-10 154112]
R3 GEARAspiWDM;Controlador de Filtro GEAR ASPI; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2009-05-18 26600]
R3 GMFilter;Controlador de Filtro HID GMFilter; C:\WINDOWS\system32\DRIVERS\GMFilter.sys [2005-08-23 21760]
R3 HDAudBus;Controlador de bus Microsoft UAA para Audio de Alta Definición; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Controlador de clase HID de Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
La descarga de HijackThis falló
hazlo por separado
• - Hijackthis - Herramienta de diagnóstico y reparación
descarga HijackThis aquí:
http://telechargement.zebulon.fr/138-hijackthis-1991.html
Descomprímelo en una carpeta destinada a tal efecto.
Por ejemplo C:\hijackthis < ¡Guárdalo bien en c:!
Lánzalo y luego:
haz clic en "realizar un análisis del sistema y guardar el registro de logs" (ver demo)
haz un copiar y pegar del log completo en el foro
Demo: (Gracias a Balltrap34 por esta realización)
http://www.tutoriaux-excalibur.com/hijackthis.htm
https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html
hazlo por separado
• - Hijackthis - Herramienta de diagnóstico y reparación
descarga HijackThis aquí:
http://telechargement.zebulon.fr/138-hijackthis-1991.html
Descomprímelo en una carpeta destinada a tal efecto.
Por ejemplo C:\hijackthis < ¡Guárdalo bien en c:!
Lánzalo y luego:
haz clic en "realizar un análisis del sistema y guardar el registro de logs" (ver demo)
haz un copiar y pegar del log completo en el foro
Demo: (Gracias a Balltrap34 por esta realización)
http://www.tutoriaux-excalibur.com/hijackthis.htm
https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html
no funciona
he instalado hijack en c: y cuando lo lanzo, el ordenador se bloquea, tengo que detener hijack con el administrador de tareas
lo intenté después renombrando hijack: mismo resultado
he instalado hijack en c: y cuando lo lanzo, el ordenador se bloquea, tengo que detener hijack con el administrador de tareas
lo intenté después renombrando hijack: mismo resultado
voila pour findykill
############################## | FindyKill V5.023 |
# Utilisateur : Admin (Utilisateurs) # CYBER2006
# Mise à jour le 31/12/2009 par El Desaparecido
# Démarrer à : 18:45:17 | 07/01/2010
# Site Web : http://pagesperso-orange.fr/NosTools/index.html
# Contact : FindyKill.Contact@gmail.com
# Intel(R) Pentium(R) 4 CPU 3.00GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# État du pare-feu Windows : Activé
# AV : Trend Micro PC-cillin Internet Security 12 12.0.1364 [ Activé | Mis à jour ]
# FW : Trend Micro PC-cillin Internet Security 12 [ Activé ] 12
# A:\ # Lecteur de disquettes 3 ½ pouces
# C:\ # Disque fixe local # 97,66 Go (24,12 Go libres) # NTFS
# D:\ # Disque fixe local # 135,22 Go (12,35 Go libres) [Docs] # NTFS
# E:\ # Disque CD-ROM # 2,27 Go (0 Mo libres) [TQIT] # UDF
# F:\ # Disque CD-ROM
# M:\ # Disque amovible
# N:\ # Disque amovible
# O:\ # Disque amovible
# P:\ # Disque amovible
############################## | Processus actifs |
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\ups.exe
C:\Program Files\Commander Pro\UPServ.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Commander Pro\UPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
################## | C: |
Supprimé ! E:\"autorun.inf"
################## | C:\WINDOWS |
Supprimé ! C:\WINDOWS\mdelk.exe
Supprimé ! C:\WINDOWS\system32\mdelk.exe
Supprimé ! C:\WINDOWS\wintems.exe
Supprimé ! C:\WINDOWS\system32\wintems.exe
################## | C:\WINDOWS\system32 |
Supprimé ! C:\WINDOWS\system32\ban_list.txt
Supprimé ! C:\WINDOWS\system32\srosa2.sys
Supprimé ! C:\WINDOWS\system32\wfsintwq.sys
################## | C:\WINDOWS\system32\drivers |
################## | C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data |
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7132265.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7132531.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7132828.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7133062.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7133359.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7149890.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7150953.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7153484.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7153750.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7170515.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7172718.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7173375.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7174062.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7175375.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7180906.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7181828.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7182109.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7182453.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7182828.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7183359.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7183765.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7184296.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7184484.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7184796.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7185265.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7185765.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7186078.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7186453.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7186625.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7186921.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7187625.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7188359.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7188625.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7188937.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7189250.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7189687.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7196046.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7202781.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7203515.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7206562.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7206921.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7207359.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7208281.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7212359.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7212703.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7215109.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7215484.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7215921.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7216187.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7216515.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7216765.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7217109.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7217265.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7217546.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7218234.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7219796.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7220593.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7221437.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7221687.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7221984.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7222187.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7222500.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7223625.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7224734.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7224984.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7225296.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7229875.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7233578.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7234312.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7235109.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7235734.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7236406.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7236656.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7236968.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7238218.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7238984.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7239140.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7239484.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7239750.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7240046.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7240609.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7240906.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7241546.exe
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\winupgro.exe
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\data.oct
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\flec006.exe
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\list.oct
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\3-Clicks 1.0 Build 29.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\3D Angels in Heaven Screensaver 1.0.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\4-Sight Fax 7.0.3r1-key.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\A and G Grapher v4.01 by Lz0.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\A+ Web ScreenSaver v2.0.0.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Abac v1.1 for PalmOS 5.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Acala DVD Ripper PSP Bundle 3.0.3.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Ace File Search 1.0.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Activ E-Book Compiler v3.02 by RAC.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Active Network Monitor v2.01 Cracked WinAll by HS.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\AdBeGone v1.2.0.0.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Address Monitor 2.1.2.4.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\AdventNet QEngine Professional v4.1.3 Linux Incl Keymaker by AGAiN.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Aesop GIF Creator v1.02.302 Loader by DBC.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\AIXcoustic Creations ElectriQ VST v1.5.4 incl KeyGen READ NFO ABOUT PLZ by BEAT.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Allaire ColdFusion Studio v4.5.1 Fixed.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Amibook v1.8 Cracked by QUARTEX.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Antivirus Home - Client 4.1.357 (Serial).zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Any Video Converter Pro v2.5.5 by p1n0yak0.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Ap PDF Stamp v2.2.0 DateCode 06012005 Keygen Only by BRD.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Apex True DBGrid Pro 6.0b.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\AppSense Management Suite v7.1.101.0 Incl Keymaker by AGAiN.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\ArGoSoft Mail Server Plus 1.6.2.3 (Serial).zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Barcode Win32 DLL.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\BestCrypt 6.04.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Bomberic v1.03 Christmas Edition by ICE-WAREZ.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\BPR v1.91-1.93.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\BS1 Small Business.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\BSplayer Pro v1.02.812 WinAll ReggedBLeH.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\BVS Solitaire Collection v2.6.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Cakewalk Sonar Home Studio v4 by SHOCK.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Caricatures PRO v4.4.0.1 French by RamdaM.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\CCS File Sentry v1.0 build 431.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\cheetah dvd burner 1.33 serial by TSRh.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\CleanCenter v1.35.05 Incl Keymaker by ACME.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\CondetSoft Game Packs v1.01 Retail for Pocket PC.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Cricket 2000 v1.0 [ENGLISH] CD-Copy Fixed EXE.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Cub Reporter 1.0.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\D I E XFEMily v6.5 Datecode 05252005 WinALL GERMAN by TBE.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Dream Collection 2.6.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\DreamenStudio iESpa v1.21 build 393 WinALL CrackedFNR.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Easy CD-DA Extractor Pro v11.5.0 build 1 Final by FFF.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Easy Desktop Keeper v2.2 by CiM.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Easy Screen Capture 2.0.4.27.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Easy-Fit ModelDesign 5.02.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Easymodel 2.3 (Serial).zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Echo On 1.0.3.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Eraser v1.4d.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Eric's Telnet 98 v5.2.1.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Exact Mouse 1.01 (Serial).zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\ExploreUrls 1.1 (Serial).zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Ezefee Pro UK 7.001.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Find It v4.00 by Embrace.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Firegraphic XP 5.0.415.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Flash LogoWizard 1.0.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\FlashControl 3.1.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\FolderWizard v1.2 WinAll Cracked by PirateK.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\FotoTime FotoAlbum Professional 4.5.0.3.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Foxy v1.6.6 by Core.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\GemX CalendarGem v1.3 WinALL Cracked by ARN.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Golden ComPass.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Great Invasions v1.0 +5 TRAINER.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\HashPuff v1.0.3 WinALL CrackedNGC.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\ICQ Pro 2003 build 3916 Full Patch by ven00m.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\IMarkup v3.93 by EMBRACE.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\inFantasy ScreenSaver Gallery 2.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Internet Password Pro 1.1.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Invisible Keylogger v1.3 by MP2K.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\iOrgSoft SWF Converter 1.6.0.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\iSkysoft DVD to Apple TV Converter build 1.5.30 by Bidjan.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\ISO Maker 1.8.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\JCheck 1.20 (Serial).zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Joiner 1.04.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\KazStamp v9.0 build 9.0.27 Crack by FFF.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\KeyChanger 2.0.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\LEAD Capture and Convert v1.2 by DVT.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\LogiXML LGX Info Server v6.1.1 by AGAiN.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Lorenz Graf's HTMLtool v3.5c.zip
############################## | FindyKill V5.023 |
# Utilisateur : Admin (Utilisateurs) # CYBER2006
# Mise à jour le 31/12/2009 par El Desaparecido
# Démarrer à : 18:45:17 | 07/01/2010
# Site Web : http://pagesperso-orange.fr/NosTools/index.html
# Contact : FindyKill.Contact@gmail.com
# Intel(R) Pentium(R) 4 CPU 3.00GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# État du pare-feu Windows : Activé
# AV : Trend Micro PC-cillin Internet Security 12 12.0.1364 [ Activé | Mis à jour ]
# FW : Trend Micro PC-cillin Internet Security 12 [ Activé ] 12
# A:\ # Lecteur de disquettes 3 ½ pouces
# C:\ # Disque fixe local # 97,66 Go (24,12 Go libres) # NTFS
# D:\ # Disque fixe local # 135,22 Go (12,35 Go libres) [Docs] # NTFS
# E:\ # Disque CD-ROM # 2,27 Go (0 Mo libres) [TQIT] # UDF
# F:\ # Disque CD-ROM
# M:\ # Disque amovible
# N:\ # Disque amovible
# O:\ # Disque amovible
# P:\ # Disque amovible
############################## | Processus actifs |
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\ups.exe
C:\Program Files\Commander Pro\UPServ.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Commander Pro\UPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
################## | C: |
Supprimé ! E:\"autorun.inf"
################## | C:\WINDOWS |
Supprimé ! C:\WINDOWS\mdelk.exe
Supprimé ! C:\WINDOWS\system32\mdelk.exe
Supprimé ! C:\WINDOWS\wintems.exe
Supprimé ! C:\WINDOWS\system32\wintems.exe
################## | C:\WINDOWS\system32 |
Supprimé ! C:\WINDOWS\system32\ban_list.txt
Supprimé ! C:\WINDOWS\system32\srosa2.sys
Supprimé ! C:\WINDOWS\system32\wfsintwq.sys
################## | C:\WINDOWS\system32\drivers |
################## | C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data |
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7132265.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7132531.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7132828.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7133062.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7133359.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7149890.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7150953.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7153484.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7153750.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7170515.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7172718.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7173375.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7174062.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7175375.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7180906.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7181828.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7182109.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7182453.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7182828.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7183359.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7183765.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7184296.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7184484.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7184796.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7185265.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7185765.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7186078.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7186453.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7186625.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7186921.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7187625.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7188359.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7188625.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7188937.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7189250.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7189687.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7196046.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7202781.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7203515.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7206562.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7206921.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7207359.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7208281.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7212359.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7212703.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7215109.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7215484.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7215921.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7216187.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7216515.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7216765.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7217109.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7217265.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7217546.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7218234.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7219796.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7220593.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7221437.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7221687.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7221984.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7222187.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7222500.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7223625.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7224734.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7224984.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7225296.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7229875.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7233578.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7234312.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7235109.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7235734.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7236406.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7236656.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7236968.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7238218.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7238984.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7239140.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7239484.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7239750.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7240046.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7240609.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7240906.exe
Supprimé ! C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld\7241546.exe
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\downld
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers\winupgro.exe
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\drivers
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\data.oct
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\flec006.exe
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\list.oct
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\3-Clicks 1.0 Build 29.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\3D Angels in Heaven Screensaver 1.0.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\4-Sight Fax 7.0.3r1-key.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\A and G Grapher v4.01 by Lz0.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\A+ Web ScreenSaver v2.0.0.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Abac v1.1 for PalmOS 5.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Acala DVD Ripper PSP Bundle 3.0.3.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Ace File Search 1.0.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Activ E-Book Compiler v3.02 by RAC.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Active Network Monitor v2.01 Cracked WinAll by HS.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\AdBeGone v1.2.0.0.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Address Monitor 2.1.2.4.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\AdventNet QEngine Professional v4.1.3 Linux Incl Keymaker by AGAiN.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Aesop GIF Creator v1.02.302 Loader by DBC.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\AIXcoustic Creations ElectriQ VST v1.5.4 incl KeyGen READ NFO ABOUT PLZ by BEAT.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Allaire ColdFusion Studio v4.5.1 Fixed.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Amibook v1.8 Cracked by QUARTEX.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Antivirus Home - Client 4.1.357 (Serial).zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Any Video Converter Pro v2.5.5 by p1n0yak0.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Ap PDF Stamp v2.2.0 DateCode 06012005 Keygen Only by BRD.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Apex True DBGrid Pro 6.0b.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\AppSense Management Suite v7.1.101.0 Incl Keymaker by AGAiN.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\ArGoSoft Mail Server Plus 1.6.2.3 (Serial).zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Barcode Win32 DLL.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\BestCrypt 6.04.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Bomberic v1.03 Christmas Edition by ICE-WAREZ.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\BPR v1.91-1.93.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\BS1 Small Business.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\BSplayer Pro v1.02.812 WinAll ReggedBLeH.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\BVS Solitaire Collection v2.6.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Cakewalk Sonar Home Studio v4 by SHOCK.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Caricatures PRO v4.4.0.1 French by RamdaM.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\CCS File Sentry v1.0 build 431.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\cheetah dvd burner 1.33 serial by TSRh.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\CleanCenter v1.35.05 Incl Keymaker by ACME.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\CondetSoft Game Packs v1.01 Retail for Pocket PC.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Cricket 2000 v1.0 [ENGLISH] CD-Copy Fixed EXE.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Cub Reporter 1.0.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\D I E XFEMily v6.5 Datecode 05252005 WinALL GERMAN by TBE.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Dream Collection 2.6.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\DreamenStudio iESpa v1.21 build 393 WinALL CrackedFNR.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Easy CD-DA Extractor Pro v11.5.0 build 1 Final by FFF.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Easy Desktop Keeper v2.2 by CiM.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Easy Screen Capture 2.0.4.27.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Easy-Fit ModelDesign 5.02.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Easymodel 2.3 (Serial).zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Echo On 1.0.3.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Eraser v1.4d.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Eric's Telnet 98 v5.2.1.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Exact Mouse 1.01 (Serial).zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\ExploreUrls 1.1 (Serial).zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Ezefee Pro UK 7.001.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Find It v4.00 by Embrace.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Firegraphic XP 5.0.415.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Flash LogoWizard 1.0.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\FlashControl 3.1.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\FolderWizard v1.2 WinAll Cracked by PirateK.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\FotoTime FotoAlbum Professional 4.5.0.3.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Foxy v1.6.6 by Core.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\GemX CalendarGem v1.3 WinALL Cracked by ARN.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Golden ComPass.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Great Invasions v1.0 +5 TRAINER.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\HashPuff v1.0.3 WinALL CrackedNGC.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\ICQ Pro 2003 build 3916 Full Patch by ven00m.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\IMarkup v3.93 by EMBRACE.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\inFantasy ScreenSaver Gallery 2.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Internet Password Pro 1.1.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Invisible Keylogger v1.3 by MP2K.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\iOrgSoft SWF Converter 1.6.0.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\iSkysoft DVD to Apple TV Converter build 1.5.30 by Bidjan.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\ISO Maker 1.8.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\JCheck 1.20 (Serial).zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Joiner 1.04.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\KazStamp v9.0 build 9.0.27 Crack by FFF.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\KeyChanger 2.0.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\LEAD Capture and Convert v1.2 by DVT.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\LogiXML LGX Info Server v6.1.1 by AGAiN.zip
Supprimé ! C:\Documents et Settings\Admin.XPSP2-0ECD3B1B5\Application Data\m\shared\Lorenz Graf's HTMLtool v3.5c.zip
Voilà
############################## | UsbFix V6.071 |
Utilisateur : Admin (Utilisateurs) # CYBER2006
Mise à jour le 06/01/2010 par El Desaparecido , C_XX & Chimay8
Démarré à : 19:21:35 | 07/01/2010
Site Web : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com
Intel(R) Pentium(R) 4 CPU 3.00GHz
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Statut du pare-feu Windows : Activé
AV : Trend Micro PC-cillin Internet Security 12 12.0.1364 [ Activé | Mis à jour ]
FW : Trend Micro PC-cillin Internet Security 12[ Activé ]12
A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local # 97,66 Go (24,3 Go libres) # NTFS
D:\ -> Disque fixe local # 135,22 Go (12,35 Go libres) [Docs] # NTFS
E:\ -> Disque CD-ROM # 2,27 Go (0 Mo libres) [TQIT] # UDF
F:\ -> Disque CD-ROM
H:\ -> Disque amovible # 3,76 Go (1,59 Go libres) [KINGSTON] # FAT32
M:\ -> Disque amovible
N:\ -> Disque amovible
O:\ -> Disque amovible
P:\ -> Disque amovible
############################## | Processus actifs |
C:\WINDOWS\System32\smss.exe 892
C:\WINDOWS\system32\csrss.exe 944
C:\WINDOWS\system32\winlogon.exe 968
C:\WINDOWS\system32\services.exe 1012
C:\WINDOWS\system32\lsass.exe 1024
C:\WINDOWS\system32\nvsvc32.exe 1200
C:\WINDOWS\system32\svchost.exe 1228
C:\WINDOWS\system32\logonui.exe 1236
C:\WINDOWS\system32\svchost.exe 1312
C:\WINDOWS\System32\svchost.exe 1456
C:\WINDOWS\system32\svchost.exe 1500
C:\WINDOWS\system32\spoolsv.exe 1704
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe 1748
C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe 1824
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe 1848
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe 1860
C:\Program Files\Bonjour\mDNSResponder.exe 1896
C:\WINDOWS\system32\svchost.exe 1932
C:\WINDOWS\System32\svchost.exe 1972
C:\Program Files\Java\jre6\bin\jqs.exe 232
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe 336
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE 448
C:\WINDOWS\system32\PnkBstrA.exe 508
C:\WINDOWS\system32\PnkBstrB.exe 532
C:\Program Files\CyberLink\Shared Files\RichVideo.exe 556
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe 596
C:\WINDOWS\system32\svchost.exe 608
C:\WINDOWS\System32\ups.exe 624
C:\Program Files\Commander Pro\UPServ.exe 636
C:\WINDOWS\system32\SearchIndexer.exe 1028
C:\Program Files\Commander Pro\UPS.EXE 1684
C:\WINDOWS\Explorer.EXE 2008
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe 564
C:\WINDOWS\system32\wuauclt.exe 1960
C:\WINDOWS\system32\wbem\wmiprvse.exe 2300
################## | Éléments infectieux |
Supprimé ! C:\WINDOWS\spoolsv.exe
Supprimé ! C:\log.txt
Supprimé ! C:\Recycler\S-1-5-21-73586283-776561741-725345543-1003
Supprimé ! D:\Recycler\S-1-5-21-73586283-776561741-725345543-1003
Non supprimé ! E:\autorun.inf
################## | Registre |
Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoRecentDocsMenu"
################## | Mountpoints2 |
Supprimé ! HKCU\...\Explorer\MountPoints2\{9449eda2-f6ec-11de-877f-001583f2180d}\Shell\AutoRun\Command
################## | Listing des fichiers présent |
[08/12/2005 16:17|---------|11] C:\AuResult.ini
[08/12/2005 13:31|---------|0] C:\AUTOEXEC.BAT
[01/06/2008 23:44|---hs----|212] C:\boot.ini
[02/10/2001 19:15|-r-hs----|4952] C:\Bootfont.bin
[01/05/2007 16:14|--a------|299] C:\clony.txt
[08/12/2005 13:31|---------|0] C:\CONFIG.SYS
[29/06/2008 22:00|--a------|120] C:\drmHeader.bin
[20/01/2007 16:34|--a------|269] C:\INSTALL.LOG
[08/12/2005 13:31|-r-hs----|0] C:\IO.SYS
[04/07/2006 20:02|--a------|183] C:\LogiSetup.log
[05/09/2006 18:29|--a------|6105] C:\lvcoinst.log
[08/12/2005 13:31|-r-hs----|0] C:\MSDOS.SYS
[03/08/2004 23:38|-r-hs----|47564] C:\NTDETECT.COM
[10/05/2008 09:36|-r-hs----|252240] C:\ntldr
[?|?|?] C:\pagefile.sys
[06/08/2006 13:45|--a------|34] C:\phot.ini
[20/07/2008 01:15|--a------|254600] C:\rapport.txt
[19/07/2008 19:34|--a------|254733] C:\rapport2.txt
[08/12/2005 16:19|---------|90] C:\Realtek.log
[08/12/2005 16:19|---------|396] C:\RtlSetup.log
[27/03/2007 19:11|--a------|510] C:\s13c
[23/03/2007 11:19|--a------|510] C:\s158
[22/03/2007 10:31|--a------|510] C:\s1kg
[29/03/2007 18:39|--a------|510] C:\s26g
[25/03/2007 19:26|--a------|510] C:\s298
[23/03/2007 23:19|--a------|510] C:\s2kk
[22/03/2007 22:31|--a------|510] C:\s2l8
[26/03/2007 06:40|--a------|510] C:\s2lk
[28/03/2007 21:55|--a------|510] C:\s2r8
[26/03/2007 19:11|--a------|510] C:\s2vs
[27/03/2007 07:11|--a------|510] C:\s348
[25/03/2007 07:26|--a------|510] C:\s370
[29/03/2007 06:39|--a------|510] C:\s37k
[26/03/2007 10:45|--a------|510] C:\s3k0
[29/03/2007 19:14|--a------|510] C:\s3ss
[28/03/2007 09:55|--a------|510] C:\s3v8
[24/03/2007 17:27|--a------|510] C:\scs
[07/10/2007 11:43|--a------|90] C:\Setup.log
[21/07/2008 12:57|--a------|757] C:\TCleaner.txt
[07/01/2010 19:25|--a------|5177] C:\UsbFix.txt
[24/01/2007 01:04|-r-------|43] E:\autorun.inf
[29/01/2007 23:10|-r-------|7903] E:\Build.log
[29/01/2007 23:01|-r-------|6027395] E:\data1.cab
[29/01/2007 23:01|-r-------|27350] E:\data1.hdr
[29/01/2007 23:06|-r-------|2403760791] E:\data2.cab
[14/11/2005 05:47|-r-------|528384] E:\Demo32.exe
[04/12/2006 20:46|-r-------|553805] E:\engine32.cab
[02/01/2007 02:03|-r-------|1712128] E:\GdiPlus.dll
[21/10/2004 23:38|-r-------|126976] E:\launch.exe
[02/01/2007 02:03|-r-------|68] E:\Launch.ini
[29/01/2007 23:06|-r-------|1394] E:\layout.bin
[02/01/2007 02:03|-r-------|40960] E:\psfind.dll
[23/01/2007 21:04|-r-------|29380] E:\ReadMe_CZ.txt
[23/01/2007 21:04|-r-------|16181] E:\ReadMe_DE.txt
[23/01/2007 21:04|-r-------|15391] E:\ReadMe_ES.txt
[23/01/2007 21:04|-r-------|15081] E:\ReadMe_FR.txt
[23/01/2007 21:04|-r-------|15041] E:\ReadMe_IT.txt
[23/01/2007 21:04|-r-------|14079] E:\ReadMe_PL.txt
[23/01/2007 21:04|-r-------|29963] E:\ReadMe_RU.txt
[24/01/2007 23:37|-r-------|12885] E:\ReadMe_US.txt
[14/11/2005 09:24|-r-------|121064] E:\setup.exe
[29/01/2007 23:01|-r-------|456860] E:\setup.ibt
[29/01/2007 23:01|-r-------|580] E:\setup.ini
[08/01/2007 21:00|-r-------|4240377] E:\setup.isn
[24/01/2007 23:37|-r-------|2780713] E:\TQIT Launcher.dbd
[27/01/2007 19:46|-r-------|23220] E:\TQIT Launcher.txt
[24/01/2007 01:04|-r-------|3262] E:\tqit.ico
[18/01/2007 20:06|-r-------|23043] E:\TQ_EULA_CZE.txt
[18/01/2007 20:06|-r-------|23043] E:\TQ_EULA_English.txt
[18/01/2007 20:06|-r-------|20637] E:\TQ_EULA_FRA.txt
[18/01/2007 20:06|-r-------|19620] E:\TQ_EULA_GER.txt
[18/01/2007 20:06|-r-------|20392] E:\TQ_EULA_ITA.txt
[18/01/2007 20:06|-r-------|23043] E:\TQ_EULA_POL.txt
[18/01/2007 20:06|-r-------|23043] E:\TQ_EULA_RUS.txt
[18/01/2007 20:06|-r-------|16715] E:\TQ_EULA_SPA.txt
[25/10/2009 11:06|--a------|23552] H:\Lapin … la moutarde.doc
################## | Vaccination |
# C:\autorun.inf -> Dossier créé par UsbFix.
# D:\autorun.inf -> Dossier créé par UsbFix.
# H:\autorun.inf -> Dossier créé par UsbFix.
################## | Crack > Keygen > Serial |
"C:\Program Files\MoviePod\MoviePod-Windows\Keygen.exe"
02/07/2006 07:34 |Taille 120320 |Crc32 830b4466 |Md5 904e5d9eaa412e14d620c90e68f3f4cb
"D:\Mes documents\My Games\Crack\iw3sporiginal.exe"
05/10/2007 11:28 |Taille 4498776 |Crc32 bbf3f44a |Md5 5b2f03ee23f148d886ef34075bf4e987
"C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Bureau\Crack\(Pc Game) Rise Of Nations No-Cd Crack.zip"
-> Contient : (PC GAME) Rise Of Nations NO-CD Crack.EXE
"C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Bureau\Crack\(Pc Game) Rise Of Nations No-Cd Crack.zip"
-> Contient : keygen\keygen.exe
"C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Bureau\Crack\- Rise Of Nations - Keygen With No Cd Crack.zip"
-> Contient : (PC GAME) Rise Of Nations NO-CD Crack.EXE
"C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Bureau\Crack\Command & Conquer Generals Nocd-Crack.zip"
-> Contient : generals.exe 118784 DFLT-X 53% 55723 05-02-2003 14:26:34 acb2b036
"C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Bureau\Crack\Command & Conquer Generals Nocd-Crack.zip"
-> Contient : patch\keygen.exe
"C:\Program Files\EA Games\Command and Conquer Generals\Krack\Command & Conquer Generals Nocd-Crack.zip"
-> Contient : generals.exe 118784 DFLT-X 53% 55723 05-02-2003 14:26:34 acb2b036
"C:\Program Files\EA Games\Command and Conquer Generals\Krack\Command & Conquer Generals Nocd-Crack.zip"
-> Contient : patch\patch.exe
"D:\Mes documents\My eBooks\Incoming\Command Conquer Renegade Unknown (Serial).zip"
-> Contient : key_gen.exe 858624 DFLT-N 3% 836901 09-01-2005 03:02:00 40b76d70
"D:\Mes documents\My Games\Counter Strike (Cs) Source 2006 Crack Keygen.zip"
-> Contient : crack.exe 65536 DFLT-N 47% 34449 24-12-2009 17:56:20 bd98f140
"D:\Mes documents\My Games\Medal Of Honor Airborne Serial Keygen.zip"
-> Contient : setup.exe 864256 DFLT-N 6% 816447 09-04-2006 03:09:00 fbef1d0d
"D:\Mes documents\My Games\Crack\(Pc Game) Rise Of Nations No-Cd Crack.zip"
-> Contient : (PC GAME) Rise Of Nations NO-CD Crack.EXE
"D:\Mes documents\My Games\Crack\- Rise Of Nations - Keygen With No Cd Crack.zip"
-> Contient : (PC GAME) Rise Of Nations NO-CD Crack.EXE
"D:\Mes documents\My Games\Crack\Command & Conquer Generals Nocd-Crack.zip"
-> Contient : generals.exe 118784 DFLT-X 53% 55723 05-02-2003 14:26:34 acb2b036
"C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Bureau\Crack\Command & Conquer Generals Zero Hour - Nocd Crack.rar"
-> contient : generals.exe
"C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Bureau\Crack\Command & Conquer Generals Zero Hour - Nocd Crack.rar"
-> contient : WorldBuilder.exe
"C:\Program Files\EA Games\Command & Conquer Generals - Heure H\Krack\Command & Conquer Generals Zero Hour - Nocd Crack.rar"
-> contient : generals.exe
"C:\Program Files\EA Games\Command & Conquer Generals - Heure H\Krack\Command & Conquer Generals Zero Hour - Nocd Crack.rar"
-> contient : WorldBuilder.exe
"D:\Mes documents\My Games\Crack\Command & Conquer Generals Zero Hour - Nocd Crack.rar"
-> contient : generals.exe
"D:\Mes documents\My Games\Crack\Command & Conquer Generals Zero Hour - Nocd Crack.rar"
-> contient : WorldBuilder.exe
################## | ! Fin du rapport # UsbFix V6.071 ! |
############################## | UsbFix V6.071 |
Utilisateur : Admin (Utilisateurs) # CYBER2006
Mise à jour le 06/01/2010 par El Desaparecido , C_XX & Chimay8
Démarré à : 19:21:35 | 07/01/2010
Site Web : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com
Intel(R) Pentium(R) 4 CPU 3.00GHz
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Statut du pare-feu Windows : Activé
AV : Trend Micro PC-cillin Internet Security 12 12.0.1364 [ Activé | Mis à jour ]
FW : Trend Micro PC-cillin Internet Security 12[ Activé ]12
A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local # 97,66 Go (24,3 Go libres) # NTFS
D:\ -> Disque fixe local # 135,22 Go (12,35 Go libres) [Docs] # NTFS
E:\ -> Disque CD-ROM # 2,27 Go (0 Mo libres) [TQIT] # UDF
F:\ -> Disque CD-ROM
H:\ -> Disque amovible # 3,76 Go (1,59 Go libres) [KINGSTON] # FAT32
M:\ -> Disque amovible
N:\ -> Disque amovible
O:\ -> Disque amovible
P:\ -> Disque amovible
############################## | Processus actifs |
C:\WINDOWS\System32\smss.exe 892
C:\WINDOWS\system32\csrss.exe 944
C:\WINDOWS\system32\winlogon.exe 968
C:\WINDOWS\system32\services.exe 1012
C:\WINDOWS\system32\lsass.exe 1024
C:\WINDOWS\system32\nvsvc32.exe 1200
C:\WINDOWS\system32\svchost.exe 1228
C:\WINDOWS\system32\logonui.exe 1236
C:\WINDOWS\system32\svchost.exe 1312
C:\WINDOWS\System32\svchost.exe 1456
C:\WINDOWS\system32\svchost.exe 1500
C:\WINDOWS\system32\spoolsv.exe 1704
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe 1748
C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe 1824
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe 1848
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe 1860
C:\Program Files\Bonjour\mDNSResponder.exe 1896
C:\WINDOWS\system32\svchost.exe 1932
C:\WINDOWS\System32\svchost.exe 1972
C:\Program Files\Java\jre6\bin\jqs.exe 232
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe 336
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE 448
C:\WINDOWS\system32\PnkBstrA.exe 508
C:\WINDOWS\system32\PnkBstrB.exe 532
C:\Program Files\CyberLink\Shared Files\RichVideo.exe 556
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe 596
C:\WINDOWS\system32\svchost.exe 608
C:\WINDOWS\System32\ups.exe 624
C:\Program Files\Commander Pro\UPServ.exe 636
C:\WINDOWS\system32\SearchIndexer.exe 1028
C:\Program Files\Commander Pro\UPS.EXE 1684
C:\WINDOWS\Explorer.EXE 2008
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe 564
C:\WINDOWS\system32\wuauclt.exe 1960
C:\WINDOWS\system32\wbem\wmiprvse.exe 2300
################## | Éléments infectieux |
Supprimé ! C:\WINDOWS\spoolsv.exe
Supprimé ! C:\log.txt
Supprimé ! C:\Recycler\S-1-5-21-73586283-776561741-725345543-1003
Supprimé ! D:\Recycler\S-1-5-21-73586283-776561741-725345543-1003
Non supprimé ! E:\autorun.inf
################## | Registre |
Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoRecentDocsMenu"
################## | Mountpoints2 |
Supprimé ! HKCU\...\Explorer\MountPoints2\{9449eda2-f6ec-11de-877f-001583f2180d}\Shell\AutoRun\Command
################## | Listing des fichiers présent |
[08/12/2005 16:17|---------|11] C:\AuResult.ini
[08/12/2005 13:31|---------|0] C:\AUTOEXEC.BAT
[01/06/2008 23:44|---hs----|212] C:\boot.ini
[02/10/2001 19:15|-r-hs----|4952] C:\Bootfont.bin
[01/05/2007 16:14|--a------|299] C:\clony.txt
[08/12/2005 13:31|---------|0] C:\CONFIG.SYS
[29/06/2008 22:00|--a------|120] C:\drmHeader.bin
[20/01/2007 16:34|--a------|269] C:\INSTALL.LOG
[08/12/2005 13:31|-r-hs----|0] C:\IO.SYS
[04/07/2006 20:02|--a------|183] C:\LogiSetup.log
[05/09/2006 18:29|--a------|6105] C:\lvcoinst.log
[08/12/2005 13:31|-r-hs----|0] C:\MSDOS.SYS
[03/08/2004 23:38|-r-hs----|47564] C:\NTDETECT.COM
[10/05/2008 09:36|-r-hs----|252240] C:\ntldr
[?|?|?] C:\pagefile.sys
[06/08/2006 13:45|--a------|34] C:\phot.ini
[20/07/2008 01:15|--a------|254600] C:\rapport.txt
[19/07/2008 19:34|--a------|254733] C:\rapport2.txt
[08/12/2005 16:19|---------|90] C:\Realtek.log
[08/12/2005 16:19|---------|396] C:\RtlSetup.log
[27/03/2007 19:11|--a------|510] C:\s13c
[23/03/2007 11:19|--a------|510] C:\s158
[22/03/2007 10:31|--a------|510] C:\s1kg
[29/03/2007 18:39|--a------|510] C:\s26g
[25/03/2007 19:26|--a------|510] C:\s298
[23/03/2007 23:19|--a------|510] C:\s2kk
[22/03/2007 22:31|--a------|510] C:\s2l8
[26/03/2007 06:40|--a------|510] C:\s2lk
[28/03/2007 21:55|--a------|510] C:\s2r8
[26/03/2007 19:11|--a------|510] C:\s2vs
[27/03/2007 07:11|--a------|510] C:\s348
[25/03/2007 07:26|--a------|510] C:\s370
[29/03/2007 06:39|--a------|510] C:\s37k
[26/03/2007 10:45|--a------|510] C:\s3k0
[29/03/2007 19:14|--a------|510] C:\s3ss
[28/03/2007 09:55|--a------|510] C:\s3v8
[24/03/2007 17:27|--a------|510] C:\scs
[07/10/2007 11:43|--a------|90] C:\Setup.log
[21/07/2008 12:57|--a------|757] C:\TCleaner.txt
[07/01/2010 19:25|--a------|5177] C:\UsbFix.txt
[24/01/2007 01:04|-r-------|43] E:\autorun.inf
[29/01/2007 23:10|-r-------|7903] E:\Build.log
[29/01/2007 23:01|-r-------|6027395] E:\data1.cab
[29/01/2007 23:01|-r-------|27350] E:\data1.hdr
[29/01/2007 23:06|-r-------|2403760791] E:\data2.cab
[14/11/2005 05:47|-r-------|528384] E:\Demo32.exe
[04/12/2006 20:46|-r-------|553805] E:\engine32.cab
[02/01/2007 02:03|-r-------|1712128] E:\GdiPlus.dll
[21/10/2004 23:38|-r-------|126976] E:\launch.exe
[02/01/2007 02:03|-r-------|68] E:\Launch.ini
[29/01/2007 23:06|-r-------|1394] E:\layout.bin
[02/01/2007 02:03|-r-------|40960] E:\psfind.dll
[23/01/2007 21:04|-r-------|29380] E:\ReadMe_CZ.txt
[23/01/2007 21:04|-r-------|16181] E:\ReadMe_DE.txt
[23/01/2007 21:04|-r-------|15391] E:\ReadMe_ES.txt
[23/01/2007 21:04|-r-------|15081] E:\ReadMe_FR.txt
[23/01/2007 21:04|-r-------|15041] E:\ReadMe_IT.txt
[23/01/2007 21:04|-r-------|14079] E:\ReadMe_PL.txt
[23/01/2007 21:04|-r-------|29963] E:\ReadMe_RU.txt
[24/01/2007 23:37|-r-------|12885] E:\ReadMe_US.txt
[14/11/2005 09:24|-r-------|121064] E:\setup.exe
[29/01/2007 23:01|-r-------|456860] E:\setup.ibt
[29/01/2007 23:01|-r-------|580] E:\setup.ini
[08/01/2007 21:00|-r-------|4240377] E:\setup.isn
[24/01/2007 23:37|-r-------|2780713] E:\TQIT Launcher.dbd
[27/01/2007 19:46|-r-------|23220] E:\TQIT Launcher.txt
[24/01/2007 01:04|-r-------|3262] E:\tqit.ico
[18/01/2007 20:06|-r-------|23043] E:\TQ_EULA_CZE.txt
[18/01/2007 20:06|-r-------|23043] E:\TQ_EULA_English.txt
[18/01/2007 20:06|-r-------|20637] E:\TQ_EULA_FRA.txt
[18/01/2007 20:06|-r-------|19620] E:\TQ_EULA_GER.txt
[18/01/2007 20:06|-r-------|20392] E:\TQ_EULA_ITA.txt
[18/01/2007 20:06|-r-------|23043] E:\TQ_EULA_POL.txt
[18/01/2007 20:06|-r-------|23043] E:\TQ_EULA_RUS.txt
[18/01/2007 20:06|-r-------|16715] E:\TQ_EULA_SPA.txt
[25/10/2009 11:06|--a------|23552] H:\Lapin … la moutarde.doc
################## | Vaccination |
# C:\autorun.inf -> Dossier créé par UsbFix.
# D:\autorun.inf -> Dossier créé par UsbFix.
# H:\autorun.inf -> Dossier créé par UsbFix.
################## | Crack > Keygen > Serial |
"C:\Program Files\MoviePod\MoviePod-Windows\Keygen.exe"
02/07/2006 07:34 |Taille 120320 |Crc32 830b4466 |Md5 904e5d9eaa412e14d620c90e68f3f4cb
"D:\Mes documents\My Games\Crack\iw3sporiginal.exe"
05/10/2007 11:28 |Taille 4498776 |Crc32 bbf3f44a |Md5 5b2f03ee23f148d886ef34075bf4e987
"C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Bureau\Crack\(Pc Game) Rise Of Nations No-Cd Crack.zip"
-> Contient : (PC GAME) Rise Of Nations NO-CD Crack.EXE
"C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Bureau\Crack\(Pc Game) Rise Of Nations No-Cd Crack.zip"
-> Contient : keygen\keygen.exe
"C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Bureau\Crack\- Rise Of Nations - Keygen With No Cd Crack.zip"
-> Contient : (PC GAME) Rise Of Nations NO-CD Crack.EXE
"C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Bureau\Crack\Command & Conquer Generals Nocd-Crack.zip"
-> Contient : generals.exe 118784 DFLT-X 53% 55723 05-02-2003 14:26:34 acb2b036
"C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Bureau\Crack\Command & Conquer Generals Nocd-Crack.zip"
-> Contient : patch\keygen.exe
"C:\Program Files\EA Games\Command and Conquer Generals\Krack\Command & Conquer Generals Nocd-Crack.zip"
-> Contient : generals.exe 118784 DFLT-X 53% 55723 05-02-2003 14:26:34 acb2b036
"C:\Program Files\EA Games\Command and Conquer Generals\Krack\Command & Conquer Generals Nocd-Crack.zip"
-> Contient : patch\patch.exe
"D:\Mes documents\My eBooks\Incoming\Command Conquer Renegade Unknown (Serial).zip"
-> Contient : key_gen.exe 858624 DFLT-N 3% 836901 09-01-2005 03:02:00 40b76d70
"D:\Mes documents\My Games\Counter Strike (Cs) Source 2006 Crack Keygen.zip"
-> Contient : crack.exe 65536 DFLT-N 47% 34449 24-12-2009 17:56:20 bd98f140
"D:\Mes documents\My Games\Medal Of Honor Airborne Serial Keygen.zip"
-> Contient : setup.exe 864256 DFLT-N 6% 816447 09-04-2006 03:09:00 fbef1d0d
"D:\Mes documents\My Games\Crack\(Pc Game) Rise Of Nations No-Cd Crack.zip"
-> Contient : (PC GAME) Rise Of Nations NO-CD Crack.EXE
"D:\Mes documents\My Games\Crack\- Rise Of Nations - Keygen With No Cd Crack.zip"
-> Contient : (PC GAME) Rise Of Nations NO-CD Crack.EXE
"D:\Mes documents\My Games\Crack\Command & Conquer Generals Nocd-Crack.zip"
-> Contient : generals.exe 118784 DFLT-X 53% 55723 05-02-2003 14:26:34 acb2b036
"C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Bureau\Crack\Command & Conquer Generals Zero Hour - Nocd Crack.rar"
-> contient : generals.exe
"C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Bureau\Crack\Command & Conquer Generals Zero Hour - Nocd Crack.rar"
-> contient : WorldBuilder.exe
"C:\Program Files\EA Games\Command & Conquer Generals - Heure H\Krack\Command & Conquer Generals Zero Hour - Nocd Crack.rar"
-> contient : generals.exe
"C:\Program Files\EA Games\Command & Conquer Generals - Heure H\Krack\Command & Conquer Generals Zero Hour - Nocd Crack.rar"
-> contient : WorldBuilder.exe
"D:\Mes documents\My Games\Crack\Command & Conquer Generals Zero Hour - Nocd Crack.rar"
-> contient : generals.exe
"D:\Mes documents\My Games\Crack\Command & Conquer Generals Zero Hour - Nocd Crack.rar"
-> contient : WorldBuilder.exe
################## | ! Fin du rapport # UsbFix V6.071 ! |
Logfile del sistema de información de random 1.06 (escrito por random/random)
Ejecutado por Admin el 2010-01-07 20:27:12
Microsoft Windows XP Profesional Service Pack 3
La unidad del sistema C: tiene 25 GB (25%) libres de 100 GB
RAM total: 2046 MB (75% libres)
Logfile de Trend Micro HijackThis v2.0.2
Escaneo guardado a las 20:27:31, el 07/01/2010
Plataforma: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Modo de arranque: Normal
Procesos en ejecución:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Archivos comunes\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Archivos comunes\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Archivos comunes\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Archivos comunes\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Archivos comunes\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\CyberLink\Archivos Compartidos\RichVideo.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\ups.exe
C:\Program Files\Commander Pro\UPServ.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Commander Pro\UPS.EXE
C:\Program Files\Archivos comunes\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Escritorio\RSIT.exe
C:\Program Files\trend micro\Admin.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://es.msn.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Enlaces
F3 - REG:win.ini: load=C:\WINDOWS\System\rsvp.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Archivos comunes\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [RemoteControl] C:\WINDOWS\system32\rmctrl.exe
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe"
O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb03.exe
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Archivos comunes\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Archivos comunes\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Archivos comunes\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [UPSMS] C:\Program Files\Commander Pro\UPSMS.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [IJNetworkScanUtility] C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Archivos comunes\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NCLaunch] C:\WINDOWS\NCLAUNCH.EXe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Archivos comunes\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKLM\..\Policies\Explorer\Run: [Logman] C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\logman.exe /waitservice
O4 - HKLM\..\Policies\Explorer\Run: [rsvp] C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\rsvp.exe /waitservice
O4 - HKLM\..\Policies\Explorer\Run: [ComRepl] C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\Temp\comrepl.exe /waitservice
O4 - HKLM\..\Policies\Explorer\Run: [DllHst] C:\WINDOWS\dllhst3g.exe /waitservice
O4 - HKLM\..\Policies\Explorer\Run: [Spool] C:\DOCUME~1\ADMIN~1.XPS\APPLIC~1\spoolsv.exe /waitservice
O4 - HKLM\..\Policies\Explorer\Run: [Cisvc] C:\WINDOWS\cisvc.exe /waitservice
O4 - HKLM\..\Policies\Explorer\Run: [CmSTP] C:\DOCUME~1\ADMIN~1.XPS\APPLIC~1\MICROS~1\cmstp.exe /waitservice
O4 - HKLM\..\Policies\Explorer\Run: [Esent Utl] C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\esentutl.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [CmSTP] C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\cmstp.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [Mstsc] C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\MICROS~1\mstsc.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [MstInit] C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\MICROS~1\mstinit.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [Cisvc] C:\WINDOWS\cisvc.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [Logman] C:\WINDOWS\logman.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [ComRepl] C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\MICROS~1\comrepl.exe /waitservice
O4 - HKUS\S-1-5-19\..\RunOnce: [Config] %systemroot%\system32\run.cmd (Usuario 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (Usuario 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (Usuario 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-20\..\RunOnce: [Config] %systemroot%\system32\run.cmd (Usuario 'SERVICIO RED')
O4 - HKUS\S-1-5-18\..\RunOnce: [Config] %systemroot%\system32\run.cmd (Usuario 'SISTEMA')
O4 - HKUS\S-1-5-18\..\Policies\Explorer\Run: [Cisvc] C:\WINDOWS\cisvc.exe /waitservice (Usuario 'SISTEMA')
O4 - HKUS\.DEFAULT\..\RunOnce: [Config] %systemroot%\system32\run.cmd (Usuario 'Usuario predeterminado')
O4 - HKUS\.DEFAULT\..\Policies\Explorer\Run: [Cisvc] C:\WINDOWS\cisvc.exe /waitservice (Usuario 'Usuario predeterminado')
O4 - Inicio: GM_DevUpdate.lnk = C:\Program Files\HAMA Joystick Outlandish\GM_DevUpdate.exe
O4 - Inicio Global: WiFi Station para Livebox.lnk = ?
O4 - Inicio Global: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Item de menú contextual extra: E&xportar a Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Botón extra: Buscar - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Botón extra: (sin nombre) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Elemento de menú extra 'Herramientas': @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Botón extra: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Elemento de menú extra 'Herramientas': Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocolo: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Servicio: ArcSoft Connect Daemon (ACDaemon) - ArcSoft - C:\Program Files\Archivos comunes\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Servicio: Servicio LM de Adobe - Adobe Systems - C:\Program Files\Archivos comunes\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Servicio: Apple Mobile Device - Apple Inc. - C:\Program Files\Archivos comunes\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Servicio: Servicio Hid de BlueSoleil - Propietario desconocido - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Servicio: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Servicio: Instalador del Administrador de Tablas Driver (IDriverT) - Macrovision Corporation - C:\Program Files\Archivos comunes\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Servicio: Servicio de iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Servicio: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Servicio: LVCOMSer - Logitech Inc. - C:\Program Files\Archivos comunes\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Servicio: Monitor de Procesos (LVPrcSrv) - Logitech Inc. - C:\Program Files\Archivos comunes\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Servicio: LVSrvLauncher - Logitech Inc. - C:\Program Files\Archivos comunes\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Servicio: Servicio del controlador de pantalla NVIDIA (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Servicio: Componente de Control Central de Trend Micro (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Servicio: PnkBstrA - Propietario desconocido - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Servicio: PnkBstrB - Propietario desconocido - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Servicio: Servicio RichVideo de Cyberlink (RichVideo) - Propietario desconocido - C:\Program Files\CyberLink\Archivos Compartidos\RichVideo.exe
O23 - Servicio: Servicio iSCSI StarWind (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Servicio: Gestión de UPS - Macrovision - C:\PROGRA~1\COMMAN~1\manager.exe
O23 - Servicio: UPSmart - Propietario desconocido - C:\Program Files\Commander Pro\UPServ.exe
O23 - Servicio: UPSmonitor - Macrovision - C:\PROGRA~1\COMMAN~1\monitor.exe
O23 - Servicio: UPSRMI - Macrovision - C:\PROGRA~1\COMMAN~1\wpRMI.exe
--
Fin del archivo - 11698 bytes
======Carpeta de tareas programadas======
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
======Volcado del registro======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Ayudante de enlace PDF de Adobe - C:\Program Files\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Ayudante SSV del Plug-In Java(tm) 2 - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
Clase JQSIEStartDetectorImpl - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"UpdateManager"=C:\Program Files\Archivos comunes\Sonic\Update Manager\sgtray.exe [2003-08-19 110592]
"Synchronization Manager"=C:\WINDOWS\system32\mobsync.exe [2008-04-14 143872]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-05-05 14396416]
"RemoteControl"=C:\WINDOWS\system32\rmctrl.exe [2000-10-16 32768]
"pccguide.exe"=C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe [2010-01-07 823361]
"Omnipage"=C:\Program Files\ScanSoft\OmniPageSE\opware32.exe [2002-06-03 49152]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb03.exe [2001-06-19 200704]
"High Definition Audio Property Page Shortcut"=C:\WINDOWS\system32\HDAShCut.exe [2005-01-07 61952]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"LogitechCommunicationsManager"=C:\Program Files\Archivos comunes\LogiShrd\LComMgr\Communications_Helper.exe [2007-07-25 563984]
"LogitechQuickCamRibbon"=C:\Program Files\Logitech\QuickCam\Quickcam.exe [2007-07-25 2027792]
"EM_EXEC"=C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE [2001-10-04 35328]
"LDM"=C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe []
"Logitech Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2004-09-15 37888]
"AppleSyncNotifier"=C:\Program Files\Archivos comunes\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2009-08-13 177440]
"ArcSoft Connection Service"=C:\Program Files\Archivos comunes\ArcSoft\Connection Service\Bin\ACDaemon.exe [2007-10-11 31232]
"UPSMS"=C:\Program Files\Commander Pro\UPSMS.exe [2009-06-28 114688]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-06-10 13758464]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-06-10 86016]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2008-03-10 689488]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2008-03-17 1848648]
"IJNetworkScanUtility"=C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE [2007-11-19 128352]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Archivos comunes\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-11-10 417792]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-11-12 141600]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Logman"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\logman.exe [2009-12-20 95232]
"rsvp"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\rsvp.exe [2009-12-20 95232]
"ComRepl"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\Temp\comrepl.exe [2009-12-20 95232]
"DllHst"=C:\WINDOWS\dllhst3g.exe [2009-12-20 95232]
"Spool"=C:\DOCUME~1\ADMIN~1.XPS\A [2007-10-01 14582]
"Cisvc"=C:\WINDOWS\cisvc.exe [2009-12-20 95232]
"CmSTP"=C:\DOCUME~1\ADMIN~1.XPS\A [2007-10-01 14582]
"Esent Utl"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\esentutl.exe [2009-12-20 95232]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"NCLaunch"=C:\WINDOWS\NCLAUNCH.EXe [2007-03-19 40960]
"LDM"=C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe []
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Archivos comunes\Ahead\lib\NMBgMonitor.exe [2005-09-03 94208]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"CmSTP"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\cmstp.exe [2009-12-20 95232]
"Mstsc"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\MICROS~1\mstsc.exe [2009-12-20 95232]
"MstInit"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\MICROS~1\mstinit.exe [2009-12-20 95232]
"Cisvc"=C:\WINDOWS\cisvc.exe [2009-12-20 95232]
"Logman"=C:\WINDOWS\logman.exe [2009-12-20 95232]
"ComRepl"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\MICROS~1\comrepl.exe [2009-12-20 95232]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ANIWZCS2Service]
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe [2004-04-14 45056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\D-Link AirPlus G]
C:\Program Files\D-Link\AirPlus G\AirGCFG.exe [2004-07-09 1249280]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]
C:\Documents and Settings\Todos los usuarios.WINDOWS\Menu de Inicio\Programas\Inicio
WiFi Station para Livebox.lnk - C:\Program Files\Hercules\WiFi Station para Livebox\WifiStationLB.exe
Windows Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Menu de Inicio\Programas\Inicio
GM_DevUpdate.lnk - C:\Program Files\HAMA Joystick Outlandish\GM_DevUpdate.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2008-10-18 200064]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 240128]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"NoDispScrSavPage"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=128
"NoSMHelp"=1
"MemCheckBoxInRunDlg"=1
"NoSMBalloonTip"=1
"NoDesktopCleanupWizard"=1
"NoWelcomeScreen"=1
"NoAutoUpdate"=1
"NoBandCustomize"=1
"NoDriveAutoRun"=128
"HonorAutoRunSetting"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Westwood\SUN\GAME.ICD"="C:\Program Files\Westwood\SUN\GAME.ICD:*:Enabled:Main executable for Tiberian Sun"
"C:\Program Files\Westwood\SUN\Game.exe"="C:\Program Files\Westwood\SUN\Game.exe:*:Enabled:Main executable for Tiberian Sun"
"C:\Program Files\EA Games\Command and Conquer Generals\patchget.dat"="C:\Program Files\EA Games\Command and Conquer Generals\patchget.dat:*:Enabled:patchgrabber"
"C:\Program Files\ScanSoft\OmniPageSE\EregFre\NAVBrowser.exe"="C:\Program Files\ScanSoft\OmniPageSE\EregFre\NAVBrowser.exe:*:Enabled:NAVBrowser"
"C:\Program Files\Valve\Half Life 2\hl2.exe"="C:\Program Files\Valve\Half Life 2\hl2.exe:*:Enabled:hl2"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\Half-Life\hl.exe"="C:\Program Files\Half-Life\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Half-Life\hlupdate.exe"="C:\Program Files\Half-Life\hlupdate.exe:*:Enabled:hlupdate.exe"
"C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE:*:Enabled:OUTLOOK.EXE"
"C:\Program Files\EA Games\Command and Conquer Generals\game.dat"="C:\Program Files\EA Games\Command and Conquer Generals\game.dat:*:Enabled:game"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:MSN Messenger 7.5"
"C:\Program Files\Microsoft Games\Rise Of Legends\legends.exe"="C:\Program Files\Microsoft Games\Rise Of Legends\legends.exe:*:Enabled:Rise Of Legends"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\Diablo II\Diablo II.exe"="C:\Program Files\Diablo II\Diablo II.exe:*:Enabled:Diablo II"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule iONiX Mod"
"C:\Program Files\EA Games\Command & Conquer Generals - Heure H\game.dat"="C:\Program Files\EA Games\Command & Conquer Generals - Heure H\game.dat:*:Enabled:game"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Ejecutar una DLL como aplicación"
"C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe"="C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe:*:Enabled:Audio Windows Media(TM) (wma)"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\WINDOWS\Temp\occ.exe"="C:\WINDOWS\Temp\occ.exe:*:Enabled:Módulo OneCC"
"C:\Program Files\Microsoft Games\Rise of Nations\rise.exe"="C:\Program Files\Microsoft Games\Rise of Nations\rise.exe:*:Enabled:Rise of Nations"
"C:\Program Files\Microsoft Games\Rise of Nations\nations.exe"="C:\Program Files\Microsoft Games\Rise of Nations\nations.exe:*:Enabled:Rise of Nations"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Microsoft Games\Rise of Nations\thrones.exe"="C:\Program Files\Microsoft Games\Rise of Nations\thrones.exe:*:Enabled:Rise of Nations"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe:*:Enabled:backWeb-8876480"
"C:\Program Files\Activision\Call of Duty
Ejecutado por Admin el 2010-01-07 20:27:12
Microsoft Windows XP Profesional Service Pack 3
La unidad del sistema C: tiene 25 GB (25%) libres de 100 GB
RAM total: 2046 MB (75% libres)
Logfile de Trend Micro HijackThis v2.0.2
Escaneo guardado a las 20:27:31, el 07/01/2010
Plataforma: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Modo de arranque: Normal
Procesos en ejecución:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Archivos comunes\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Archivos comunes\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Archivos comunes\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Archivos comunes\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Archivos comunes\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\CyberLink\Archivos Compartidos\RichVideo.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\ups.exe
C:\Program Files\Commander Pro\UPServ.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Commander Pro\UPS.EXE
C:\Program Files\Archivos comunes\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Escritorio\RSIT.exe
C:\Program Files\trend micro\Admin.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://es.msn.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Enlaces
F3 - REG:win.ini: load=C:\WINDOWS\System\rsvp.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Archivos comunes\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [RemoteControl] C:\WINDOWS\system32\rmctrl.exe
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe"
O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb03.exe
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Archivos comunes\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Archivos comunes\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Archivos comunes\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [UPSMS] C:\Program Files\Commander Pro\UPSMS.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [IJNetworkScanUtility] C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Archivos comunes\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NCLaunch] C:\WINDOWS\NCLAUNCH.EXe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Archivos comunes\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKLM\..\Policies\Explorer\Run: [Logman] C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\logman.exe /waitservice
O4 - HKLM\..\Policies\Explorer\Run: [rsvp] C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\rsvp.exe /waitservice
O4 - HKLM\..\Policies\Explorer\Run: [ComRepl] C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\Temp\comrepl.exe /waitservice
O4 - HKLM\..\Policies\Explorer\Run: [DllHst] C:\WINDOWS\dllhst3g.exe /waitservice
O4 - HKLM\..\Policies\Explorer\Run: [Spool] C:\DOCUME~1\ADMIN~1.XPS\APPLIC~1\spoolsv.exe /waitservice
O4 - HKLM\..\Policies\Explorer\Run: [Cisvc] C:\WINDOWS\cisvc.exe /waitservice
O4 - HKLM\..\Policies\Explorer\Run: [CmSTP] C:\DOCUME~1\ADMIN~1.XPS\APPLIC~1\MICROS~1\cmstp.exe /waitservice
O4 - HKLM\..\Policies\Explorer\Run: [Esent Utl] C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\esentutl.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [CmSTP] C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\cmstp.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [Mstsc] C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\MICROS~1\mstsc.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [MstInit] C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\MICROS~1\mstinit.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [Cisvc] C:\WINDOWS\cisvc.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [Logman] C:\WINDOWS\logman.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [ComRepl] C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\MICROS~1\comrepl.exe /waitservice
O4 - HKUS\S-1-5-19\..\RunOnce: [Config] %systemroot%\system32\run.cmd (Usuario 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (Usuario 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (Usuario 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-20\..\RunOnce: [Config] %systemroot%\system32\run.cmd (Usuario 'SERVICIO RED')
O4 - HKUS\S-1-5-18\..\RunOnce: [Config] %systemroot%\system32\run.cmd (Usuario 'SISTEMA')
O4 - HKUS\S-1-5-18\..\Policies\Explorer\Run: [Cisvc] C:\WINDOWS\cisvc.exe /waitservice (Usuario 'SISTEMA')
O4 - HKUS\.DEFAULT\..\RunOnce: [Config] %systemroot%\system32\run.cmd (Usuario 'Usuario predeterminado')
O4 - HKUS\.DEFAULT\..\Policies\Explorer\Run: [Cisvc] C:\WINDOWS\cisvc.exe /waitservice (Usuario 'Usuario predeterminado')
O4 - Inicio: GM_DevUpdate.lnk = C:\Program Files\HAMA Joystick Outlandish\GM_DevUpdate.exe
O4 - Inicio Global: WiFi Station para Livebox.lnk = ?
O4 - Inicio Global: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Item de menú contextual extra: E&xportar a Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Botón extra: Buscar - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Botón extra: (sin nombre) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Elemento de menú extra 'Herramientas': @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Botón extra: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Elemento de menú extra 'Herramientas': Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocolo: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Servicio: ArcSoft Connect Daemon (ACDaemon) - ArcSoft - C:\Program Files\Archivos comunes\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Servicio: Servicio LM de Adobe - Adobe Systems - C:\Program Files\Archivos comunes\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Servicio: Apple Mobile Device - Apple Inc. - C:\Program Files\Archivos comunes\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Servicio: Servicio Hid de BlueSoleil - Propietario desconocido - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Servicio: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Servicio: Instalador del Administrador de Tablas Driver (IDriverT) - Macrovision Corporation - C:\Program Files\Archivos comunes\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Servicio: Servicio de iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Servicio: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Servicio: LVCOMSer - Logitech Inc. - C:\Program Files\Archivos comunes\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Servicio: Monitor de Procesos (LVPrcSrv) - Logitech Inc. - C:\Program Files\Archivos comunes\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Servicio: LVSrvLauncher - Logitech Inc. - C:\Program Files\Archivos comunes\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Servicio: Servicio del controlador de pantalla NVIDIA (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Servicio: Componente de Control Central de Trend Micro (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Servicio: PnkBstrA - Propietario desconocido - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Servicio: PnkBstrB - Propietario desconocido - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Servicio: Servicio RichVideo de Cyberlink (RichVideo) - Propietario desconocido - C:\Program Files\CyberLink\Archivos Compartidos\RichVideo.exe
O23 - Servicio: Servicio iSCSI StarWind (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Servicio: Gestión de UPS - Macrovision - C:\PROGRA~1\COMMAN~1\manager.exe
O23 - Servicio: UPSmart - Propietario desconocido - C:\Program Files\Commander Pro\UPServ.exe
O23 - Servicio: UPSmonitor - Macrovision - C:\PROGRA~1\COMMAN~1\monitor.exe
O23 - Servicio: UPSRMI - Macrovision - C:\PROGRA~1\COMMAN~1\wpRMI.exe
--
Fin del archivo - 11698 bytes
======Carpeta de tareas programadas======
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
======Volcado del registro======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Ayudante de enlace PDF de Adobe - C:\Program Files\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Ayudante SSV del Plug-In Java(tm) 2 - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
Clase JQSIEStartDetectorImpl - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"UpdateManager"=C:\Program Files\Archivos comunes\Sonic\Update Manager\sgtray.exe [2003-08-19 110592]
"Synchronization Manager"=C:\WINDOWS\system32\mobsync.exe [2008-04-14 143872]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-05-05 14396416]
"RemoteControl"=C:\WINDOWS\system32\rmctrl.exe [2000-10-16 32768]
"pccguide.exe"=C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe [2010-01-07 823361]
"Omnipage"=C:\Program Files\ScanSoft\OmniPageSE\opware32.exe [2002-06-03 49152]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb03.exe [2001-06-19 200704]
"High Definition Audio Property Page Shortcut"=C:\WINDOWS\system32\HDAShCut.exe [2005-01-07 61952]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"LogitechCommunicationsManager"=C:\Program Files\Archivos comunes\LogiShrd\LComMgr\Communications_Helper.exe [2007-07-25 563984]
"LogitechQuickCamRibbon"=C:\Program Files\Logitech\QuickCam\Quickcam.exe [2007-07-25 2027792]
"EM_EXEC"=C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE [2001-10-04 35328]
"LDM"=C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe []
"Logitech Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2004-09-15 37888]
"AppleSyncNotifier"=C:\Program Files\Archivos comunes\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2009-08-13 177440]
"ArcSoft Connection Service"=C:\Program Files\Archivos comunes\ArcSoft\Connection Service\Bin\ACDaemon.exe [2007-10-11 31232]
"UPSMS"=C:\Program Files\Commander Pro\UPSMS.exe [2009-06-28 114688]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-06-10 13758464]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-06-10 86016]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2008-03-10 689488]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2008-03-17 1848648]
"IJNetworkScanUtility"=C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE [2007-11-19 128352]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Archivos comunes\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-11-10 417792]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-11-12 141600]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Logman"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\logman.exe [2009-12-20 95232]
"rsvp"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\rsvp.exe [2009-12-20 95232]
"ComRepl"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\Temp\comrepl.exe [2009-12-20 95232]
"DllHst"=C:\WINDOWS\dllhst3g.exe [2009-12-20 95232]
"Spool"=C:\DOCUME~1\ADMIN~1.XPS\A [2007-10-01 14582]
"Cisvc"=C:\WINDOWS\cisvc.exe [2009-12-20 95232]
"CmSTP"=C:\DOCUME~1\ADMIN~1.XPS\A [2007-10-01 14582]
"Esent Utl"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\esentutl.exe [2009-12-20 95232]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"NCLaunch"=C:\WINDOWS\NCLAUNCH.EXe [2007-03-19 40960]
"LDM"=C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe []
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Archivos comunes\Ahead\lib\NMBgMonitor.exe [2005-09-03 94208]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"CmSTP"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\cmstp.exe [2009-12-20 95232]
"Mstsc"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\MICROS~1\mstsc.exe [2009-12-20 95232]
"MstInit"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\MICROS~1\mstinit.exe [2009-12-20 95232]
"Cisvc"=C:\WINDOWS\cisvc.exe [2009-12-20 95232]
"Logman"=C:\WINDOWS\logman.exe [2009-12-20 95232]
"ComRepl"=C:\DOCUME~1\ADMIN~1.XPS\LOCALS~1\APPLIC~1\MICROS~1\comrepl.exe [2009-12-20 95232]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ANIWZCS2Service]
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe [2004-04-14 45056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\D-Link AirPlus G]
C:\Program Files\D-Link\AirPlus G\AirGCFG.exe [2004-07-09 1249280]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]
C:\Documents and Settings\Todos los usuarios.WINDOWS\Menu de Inicio\Programas\Inicio
WiFi Station para Livebox.lnk - C:\Program Files\Hercules\WiFi Station para Livebox\WifiStationLB.exe
Windows Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Documents and Settings\Admin.XPSP2-0ECD3B1B5\Menu de Inicio\Programas\Inicio
GM_DevUpdate.lnk - C:\Program Files\HAMA Joystick Outlandish\GM_DevUpdate.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2008-10-18 200064]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 240128]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"NoDispScrSavPage"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=128
"NoSMHelp"=1
"MemCheckBoxInRunDlg"=1
"NoSMBalloonTip"=1
"NoDesktopCleanupWizard"=1
"NoWelcomeScreen"=1
"NoAutoUpdate"=1
"NoBandCustomize"=1
"NoDriveAutoRun"=128
"HonorAutoRunSetting"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Westwood\SUN\GAME.ICD"="C:\Program Files\Westwood\SUN\GAME.ICD:*:Enabled:Main executable for Tiberian Sun"
"C:\Program Files\Westwood\SUN\Game.exe"="C:\Program Files\Westwood\SUN\Game.exe:*:Enabled:Main executable for Tiberian Sun"
"C:\Program Files\EA Games\Command and Conquer Generals\patchget.dat"="C:\Program Files\EA Games\Command and Conquer Generals\patchget.dat:*:Enabled:patchgrabber"
"C:\Program Files\ScanSoft\OmniPageSE\EregFre\NAVBrowser.exe"="C:\Program Files\ScanSoft\OmniPageSE\EregFre\NAVBrowser.exe:*:Enabled:NAVBrowser"
"C:\Program Files\Valve\Half Life 2\hl2.exe"="C:\Program Files\Valve\Half Life 2\hl2.exe:*:Enabled:hl2"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\Half-Life\hl.exe"="C:\Program Files\Half-Life\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Half-Life\hlupdate.exe"="C:\Program Files\Half-Life\hlupdate.exe:*:Enabled:hlupdate.exe"
"C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE:*:Enabled:OUTLOOK.EXE"
"C:\Program Files\EA Games\Command and Conquer Generals\game.dat"="C:\Program Files\EA Games\Command and Conquer Generals\game.dat:*:Enabled:game"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:MSN Messenger 7.5"
"C:\Program Files\Microsoft Games\Rise Of Legends\legends.exe"="C:\Program Files\Microsoft Games\Rise Of Legends\legends.exe:*:Enabled:Rise Of Legends"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\Diablo II\Diablo II.exe"="C:\Program Files\Diablo II\Diablo II.exe:*:Enabled:Diablo II"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule iONiX Mod"
"C:\Program Files\EA Games\Command & Conquer Generals - Heure H\game.dat"="C:\Program Files\EA Games\Command & Conquer Generals - Heure H\game.dat:*:Enabled:game"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Ejecutar una DLL como aplicación"
"C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe"="C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe:*:Enabled:Audio Windows Media(TM) (wma)"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\WINDOWS\Temp\occ.exe"="C:\WINDOWS\Temp\occ.exe:*:Enabled:Módulo OneCC"
"C:\Program Files\Microsoft Games\Rise of Nations\rise.exe"="C:\Program Files\Microsoft Games\Rise of Nations\rise.exe:*:Enabled:Rise of Nations"
"C:\Program Files\Microsoft Games\Rise of Nations\nations.exe"="C:\Program Files\Microsoft Games\Rise of Nations\nations.exe:*:Enabled:Rise of Nations"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Microsoft Games\Rise of Nations\thrones.exe"="C:\Program Files\Microsoft Games\Rise of Nations\thrones.exe:*:Enabled:Rise of Nations"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe:*:Enabled:backWeb-8876480"
"C:\Program Files\Activision\Call of Duty
ComboFix 10-01-04.01 - Admin 07/01/2010 21:38:38.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.33.1036.18.2046.1567 [GMT 1:00]
Lancé depuis: c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Bureau\Bibitte.exe
AV: Trend Micro PC-cillin Internet Security 12 *Analyse à la volée activée* (Mise à jour) {7D2296BC-32CC-4519-917E-52E652474AF5}
FW: Trend Micro PC-cillin Internet Security 12 *activé* {3E790E9E-6A5D-4303-A7F9-185EC20F3EB6}
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Application Data\Microsoft\cmstp.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Application Data\mstinit.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Application Data\mstsc.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Application Data\spoolsv.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Application Data\cmstp.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Application Data\esentutl.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Application Data\logman.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Application Data\Microsoft\comrepl.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Application Data\Microsoft\logman.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Application Data\Microsoft\mstinit.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Application Data\Microsoft\mstsc.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Application Data\rsvp.exe
c:\windows\CISVC.exe
c:\windows\dllhst3g.exe
c:\windows\ieudinit.exe
c:\windows\logman.exe
c:\windows\system\cisvc.exe
c:\windows\system\dllhst3g.exe
c:\windows\system\rsvp.exe
c:\windows\system32\drivers\mstinit.exe
c:\windows\system32\mcrh.tmp
c:\windows\system32\tmp.reg
c:\windows\system32\win.ini
c:\windows\unins000.dat
c:\windows\unins000.exe
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Service_sysrest.sys
((((((((((((((((((((((((((((( Fichiers créés du 2009-12-07 au 2010-01-07 ))))))))))))))))))))))))))))))))))))
.
2010-01-07 18:18 . 2010-01-07 18:39 -------- d-----w- C:\UsbFix
2010-01-07 17:42 . 2010-01-07 18:10 -------- d-----w- C:\FindyKill
2010-01-07 17:38 . 2010-01-07 17:38 -------- d-----w- C:\HJ
2010-01-07 17:11 . 2010-01-07 17:11 -------- d-----w- C:\HJT
2010-01-07 16:45 . 2010-01-07 19:26 -------- d-----w- C:\rsit
2010-01-02 15:53 . 2009-03-09 14:27 453456 ----a-w- c:\windows\system32\d3dx10_41.dll
2010-01-02 15:53 . 2009-03-09 14:27 1846632 ----a-w- c:\windows\system32\D3DCompiler_41.dll
2010-01-02 15:53 . 2009-03-09 14:27 4178264 ----a-w- c:\windows\system32\D3DX9_41.dll
2010-01-02 15:53 . 2009-03-16 13:18 69448 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2010-01-02 15:53 . 2009-03-16 13:18 517448 ----a-w- c:\windows\system32\XAudio2_4.dll
2010-01-02 15:53 . 2009-03-16 13:18 235352 ----a-w- c:\windows\system32\xactengine3_4.dll
2010-01-02 15:53 . 2009-03-16 13:18 22360 ----a-w- c:\windows\system32\X3DAudio1_6.dll
2009-12-18 23:31 . 2010-01-02 16:30 -------- d-----w- c:\program files\Activision
2009-12-16 18:07 . 2010-01-02 15:27 -------- d-----w- c:\program files\Soldier of Fortune II - SP Demo
2009-12-15 23:07 . 2009-12-15 23:07 -------- d-----w- c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Application Data\PunkBuster
2009-12-13 15:53 . 2009-12-13 15:53 -------- d-----w- c:\windows\Logs
2009-12-11 23:56 . 2009-12-11 23:56 -------- d-----w- c:\windows\system32\AGEIA
2009-12-11 23:56 . 2009-12-11 23:56 -------- d-----w- c:\program files\AGEIA Technologies
2009-12-11 19:45 . 2009-11-21 15:58 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-07 20:48 . 2005-12-08 19:03 -------- d-----w- c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Application Data\Skype
2010-01-07 20:42 . 2007-05-04 17:42 12 ----a-w- c:\windows\bthservsdp.dat
2010-01-07 19:27 . 2005-12-08 14:43 -------- d-----w- c:\program files\Trend Micro
2010-01-07 18:09 . 2001-10-02 18:17 536002 ----a-w- c:\windows\system32\perfh00C.dat
2010-01-07 18:09 . 2001-10-02 18:17 94526 ----a-w- c:\windows\system32\perfc00C.dat
2010-01-06 21:28 . 2008-07-19 20:58 -------- d---a-w- c:\documents and settings\All Users.WINDOWS\Application Data\TEMP
2010-01-06 21:14 . 2005-12-08 12:32 -------- d-----w- c:\program files\microsoft frontpage
2010-01-06 21:14 . 2006-03-25 09:16 -------- d-----w- c:\program files\FileZilla
2010-01-06 21:13 . 2005-12-11 19:53 -------- d-----w- c:\program files\eMule
2010-01-06 21:10 . 2006-07-07 11:26 -------- d-----w- c:\program files\BitTorrent
2010-01-06 18:37 . 2006-02-22 17:38 -------- d-----w- c:\program files\Commander Pro
2010-01-04 18:01 . 2009-04-14 20:43 -------- d-----w- c:\program files\SpywareBlaster
2010-01-02 22:06 . 2008-01-08 18:12 138328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-01-02 22:06 . 2008-01-08 18:12 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-01-02 22:06 . 2008-01-08 18:12 214816 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-01-02 16:20 . 2005-12-09 15:50 46160 ----a-w- c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-01-02 15:50 . 2005-12-08 13:44 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-21 18:29 . 2005-12-08 17:13 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy
2009-12-21 12:32 . 2007-05-08 09:48 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\Ulead Systems
2009-12-21 12:31 . 2006-01-12 19:02 -------- d-----w- c:\program files\Fichiers communs\Real
2009-12-21 12:30 . 2005-12-08 19:54 -------- d-----w- c:\program files\CyberLink
2009-12-21 12:30 . 2008-11-30 23:17 -------- d-----w- c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Application Data\Panasonic
2009-12-18 23:42 . 2008-01-08 18:12 22328 ----a-w- c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Application Data\PnkBstrK.sys
2009-12-18 23:42 . 2008-01-08 18:12 22328 ----a-w- c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Application Data\PnkBstrK.sys
2009-12-15 22:19 . 2005-12-09 17:05 -------- d-----w- c:\program files\Canon
2009-12-11 23:55 . 2006-10-22 16:06 -------- d-----w- c:\program files\Fichiers communs\Wise Installation Wizard
2009-12-07 21:06 . 2009-12-07 21:06 -------- d-----w- c:\program files\Fox
2009-12-07 13:37 . 2009-12-07 13:37 -------- d-----w- c:\program files\Hercules
2009-11-30 10:35 . 2009-11-30 10:34 -------- d-----w- c:\program files\iTunes
2009-11-30 10:34 . 2009-11-30 10:34 -------- d-----w- c:\program files\iPod
2009-11-30 10:34 . 2007-08-05 19:00 -------- d-----w- c:\program files\Fichiers communs\Apple
2009-11-30 10:30 . 2006-06-15 17:35 -------- d-----w- c:\program files\QuickTime
2009-11-30 10:20 . 2009-11-30 10:20 79144 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\Apple Computer\Installer Cache\iTunes 9.0.2.25\SetupAdmin.exe
2009-11-28 10:02 . 2006-08-08 05:53 -------- d-----w- c:\program files\Google
2009-11-28 10:00 . 2009-11-25 19:07 -------- d-----w- c:\program files\MyDSC2
2009-11-25 20:54 . 2008-04-13 10:31 -------- d-----w- c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Application Data\ArcSoft
2009-11-25 19:37 . 2008-11-30 23:18 -------- d-----w- c:\program files\ArcSoft
2009-11-21 15:58 . 2004-08-19 16:09 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
2009-11-21 01:35 . 2005-12-08 20:02 -------- d-----w- c:\program files\DivX
2009-11-21 01:35 . 2009-11-21 01:34 -------- d-----w- c:\program files\Fichiers communs\DivX Shared
2009-11-14 00:47 . 2009-11-14 00:47 90112 ----a-w- c:\windows\system32\dpl100.dll
2009-11-14 00:47 . 2009-11-14 00:47 856064 ----a-w- c:\windows\system32\divx_xx0c.dll
2009-11-14 00:47 . 2009-11-14 00:47 856064 ----a-w- c:\windows\system32\divx_xx07.dll
2009-11-14 00:47 . 2009-11-14 00:47 847872 ----a-w- c:\windows\system32\divx_xx0a.dll
2009-11-14 00:47 . 2009-11-14 00:47 843776 ----a-w- c:\windows\system32\divx_xx16.dll
2009-11-14 00:47 . 2009-11-14 00:47 839680 ----a-w- c:\windows\system32\divx_xx11.dll
2009-11-14 00:47 . 2009-11-14 00:47 696320 ----a-w- c:\windows\system32\DivX.dll
2009-11-13 19:42 . 2005-12-08 17:13 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-11-04 06:59 . 2009-11-04 06:59 152576 ----a-w- c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Application Data\Sun\Java\jre1.6.0_17\lzma.dll
2009-10-29 07:42 . 2005-10-12 10:25 916480 ----a-w- c:\windows\system32\wininet.dll
2009-10-24 09:26 . 2009-10-24 09:26 0 ----a-w- c:\windows\PowerReg.dat
2009-10-21 05:39 . 2004-08-19 16:09 75776 ----a-w- c:\windows\system32\strmfilt.dll
2009-10-21 05:39 . 2004-08-19 16:09 25088 ----a-w- c:\windows\system32\httpapi.dll
2009-10-20 16:20 . 2005-07-26 15:01 265728 ------w- c:\windows\system32\drivers\http.sys
2009-10-13 10:33 . 2004-08-19 16:09 271360 ------w- c:\windows\system32\oakley.dll
2009-10-12 13:39 . 2004-08-19 16:09 79872 ----a-w- c:\windows\system32\raschap.dll
2009-10-12 13:39 . 2004-08-19 16:09 150528 ----a-w- c:\windows\system32\rastls.dll
2009-10-11 03:17 . 2008-11-22 10:18 411368 ----a-w- c:\windows\system32\deploytk.dll
2008-03-03 17:47 . 2005-12-08 20:02 56 --sh--r- c:\windows\system32\7924C48F39.sys
2008-03-03 17:47 . 2005-12-08 20:02 10020 --sha-w- c:\windows\system32\KGyGaAvL.sys
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NCLaunch"="c:\windows\NCLAUNCH.EXe" [2007-03-19 40960]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Fichiers communs\Ahead\lib\NMBgMonitor.exe" [2005-09-03 94208]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-10-09 25623336]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"UpdateManager"="c:\program files\Fichiers communs\Sonic\Update Manager\sgtray.exe" [2003-08-19 110592]
"Synchronization Manager"="c:\windows\system32\mobsync.exe" [2008-04-14 143872]
"RTHDCPL"="RTHDCPL.EXE" [2005-05-05 14396416]
"RemoteControl"="c:\windows\system32\rmctrl.exe" [2000-10-16 32768]
"pccguide.exe"="c:\program files\Trend Micro\Internet Security 12\pccguide.exe" [2010-01-07 823361]
"Omnipage"="c:\program files\ScanSoft\OmniPageSE\opware32.exe" [2002-06-03 49152]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb03.exe" [2001-06-19 200704]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2005-01-07 61952]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"LogitechCommunicationsManager"="c:\program files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [2007-07-25 563984]
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2007-07-25 2027792]
"EM_EXEC"="c:\progra~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE" [2001-10-04 35328]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2004-09-15 37888]
"AppleSyncNotifier"="c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-08-13 177440]
"ArcSoft Connection Service"="c:\program files\Fichiers communs\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2007-10-11 31232]
"UPSMS"="c:\program files\Commander Pro\UPSMS.exe" [2009-06-28 114688]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-06-10 13758464]
"nwiz"="nwiz.exe" [2009-06-10 1657376]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-06-10 86016]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2008-03-10 689488]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2008-03-17 1848648]
"IJNetworkScanUtility"="c:\program files\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE" [2007-11-19 128352]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-11-12 141600]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nlsf"="move" [X]
"Config"="c:\windows\system32\run.cmd" [2005-08-23 341]
"tscuninstall"="c:\windows\system32\tscupgrd.exe" [2004-08-19 44544]
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Menu Démarrer\Programmes\Démarrage\
GM_DevUpdate.lnk - c:\program files\HAMA Joystick Outlandish\GM_DevUpdate.exe [2009-10-27 45056]
c:\documents and settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\
WiFi Station pour Livebox.lnk - c:\program files\Hercules\WiFi Station pour Livebox\WifiStationLB.exe [2009-12-7 721408]
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"= 1 (0x1)
"MemCheckBoxInRunDlg"= 1 (0x1)
"NoSMBalloonTip"= 1 (0x1)
"NoWelcomeScreen"= 1 (0x1)
"NoAutoUpdate"= 1 (0x1)
"NoBandCustomize"= 1 (0x1)
"HonorAutoRunSetting"= 0 (0x0)
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"= 1 (0x1)
"MemCheckBoxInRunDlg"= 1 (0x1)
"NoSMBalloonTip"= 1 (0x1)
"NoWelcomeScreen"= 1 (0x1)
"NoAutoUpdate"= 1 (0x1)
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ANIWZCS2Service]
2004-04-14 10:54 45056 ----a-w- c:\program files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\D-Link AirPlus G]
2004-07-09 14:07 1249280 ----a-w- c:\program files\D-Link\AirPlus G\AirGCFG.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
2009-01-26 14:31 2144088 --sha-r- c:\program files\Spybot - Search & Destroy\TeaTimer.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\TrendAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\TrendFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Westwood\\SUN\\GAME.ICD"=
"c:\\Program Files\\Westwood\\SUN\\Game.exe"=
"c:\\Program Files\\EA Games\\Command and Conquer Generals\\patchget.dat"=
"c:\\Program Files\\ScanSoft\\OmniPageSE\\EregFre\\NAVBrowser.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Microsoft Office\\OFFICE11\\OUTLOOK.EXE"=
"c:\\Program Files\\EA Games\\Command and Conquer Generals\\game.dat"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\Diablo II\\Diablo II.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\Program Files\\EA Games\\Command & Conquer Generals - Heure H\\game.dat"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\Program Files\\Microsoft Games\\Rise of Nations\\rise.exe"=
"c:\\Program Files\\Microsoft Games\\Rise of Nations\\nations.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Microsoft Games\\Rise of Nations\\thrones.exe"=
"c:\\Program Files\\THQ\\Titan Quest Immortal Throne\\Tqit.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Electronic Arts\\Command & Conquer 3\\RetailExe\\1.0\\cnc3game.dat"=
"c:\\Program Files\\Electronic Arts\\Command & Conquer(tm) 3 La Fureur de Kane\\RetailExe\\1.0\\cnc3ep1.dat"=
"c:\\Program Files\\Electronic Arts\\Command & Conquer 3\\RetailExe\\1.9\\cnc3game.dat"=
"c:\\Program Files\\Commander Pro\\jre\\bin\\javaw.exe"=
"c:\\Program Files\\Codemasters\\Heroes of the Pacific\\Heroes.exe"=
"c:\\Program Files\\NovaLogic\\Comanche 4\\Update.exe"=
"c:\\Program Files\\NovaLogic\\Comanche 4\\c4.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"7561:TCP"= 7561:TCP:E mule
"7571:UDP"= 7571:UDP:E mule
"6112:TCP"= 6112:TCP:Diablo
"4000:TCP"= 4000:TCP:diablo
"25:TCP"= 25:TCP:Outlook Office
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowOutboundDestinationUnreachable"= 1 (0x1)
"AllowOutboundSourceQuench"= 1 (0x1)
"AllowOutboundTimeExceeded"= 1 (0x1)
"AllowRedirect"= 1 (0x1)
R0 Vax347b;Vax347b;c:\windows\system32\drivers\Vax347b.sys [08/12/2005 18:02 159616]
R0 Vax347s;Vax347s;c:\windows\system32\drivers\Vax347s.sys [08/12/2005 18:02 5248]
R0 VirtualK;VirtaulK;c:\windows\system32\drivers\VirtualK.sys [27/10/2009 20:45 3968]
R2 UPSmart;UPSmart;c:\program files\Commander Pro\UPServ.exe UPSmart --> c:\program files\Commander Pro\UPServ.exe UPSmart [?]
R3 GMFilter;GMFilter HID Filter Driver;c:\windows\system32\drivers\GMFilter.sys [27/10/2009 20:44 21760]
R3 phaudlwr;Philips Audio Filter;c:\windows\system32\drivers\phaudlwr.sys [19/02/2008 08:00 88704]
R3 skbusenum;SKBus Enumerator;c:\windows\system32\drivers\SKBusEnum.sys [27/10/2009 20:45 10880]
R3 SPC520;Philips SPC520NC PC Camera;c:\windows\system32\drivers\SPC520.sys [13/04/2008 11:21 483328]
R3 SPC520m;Philips SPC520NC PC Cameram;c:\windows\system32\drivers\SPC520m.sys [13/04/2008 11:21 7680]
S2 Tmfilter;Tmfilter;c:\windows\system32\drivers\TmXPFlt.sys --> c:\windows\system32\drivers\TmXPFlt.sys [?]
S2 Tmpreflt;Tmpreflt;c:\windows\system32\drivers\Tmpreflt.sys --> c:\windows\system32\drivers\Tmpreflt.sys [?]
S2 UPSmonitor;UPSmonitor;c:\progra~1\COMMAN~1\monitor.exe -zglaxservice UPSmonitor --> c:\progra~1\COMMAN~1\monitor.exe -zglaxservice UPSmonitor [?]
S3 PIXMCV;JVC Communication PIX-MCV Driver;c:\windows\system32\drivers\pixmcvc.sys [11/12/2005 21:40 32000]
S3 PIXMCVA;JVC PIX-MCV Audio Capture;c:\windows\system32\drivers\pixmcva.sys [11/12/2005 22:12 28057]
S3 PIXMCVV;JVC PIX-MCV Video Capture;c:\windows\system32\drivers\pixmcvv.sys [11/12/2005 21:45 21081]
S3 SNPP202;PC Camera (6028 VGA);c:\windows\system32\drivers\snpp202.sys [09/12/2005 17:36 235136]
S3 UPSmanager;UPSmanager;c:\progra~1\COMMAN~1\manager.exe -zglaxservice UPSmanager --> c:\progra~1\COMMAN~1\manager.exe -zglaxservice UPSmanager [?]
S3 UPSRMI;UPSRMI;c:\progra~1\COMMAN~1\wpRMI.exe -zglaxservice UPSRMI --> c:\progra~1\COMMAN~1\wpRMI.exe -zglaxservice UPSRMI [?]
S4 Tmntsrv;Trend Micro Real-time Service;c:\progra~1\TRENDM~1\INTERN~1\Tmntsrv.exe [27/10/2004 11:13 282696]
S4 TmPfw;Trend Micro Personal Firewall;c:\progra~1\TRENDM~1\INTERN~1\TmPfw.exe [15/09/2004 10:03 585789]
S4 tmproxy;Trend Micro Proxy Service;c:\progra~1\TRENDM~1\INTERN~1\tmproxy.exe [15/09/2004 10:04 188484]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E4066320-E4AE-11CF-B1B0-00AA00BBAD66}]
2009-03-08 02:32 128512 ----a-w- c:\windows\system32\advpack.dll
.
Contenu du dossier 'Tâches planifiées'
2010-01-04 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 10:34]
.
.
------- Examen supplémentaire -------
.
uInternet Settings,ProxyOverride = localhost;*.local
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FF
Microsoft Windows XP Professional 5.1.2600.3.1252.33.1036.18.2046.1567 [GMT 1:00]
Lancé depuis: c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Bureau\Bibitte.exe
AV: Trend Micro PC-cillin Internet Security 12 *Analyse à la volée activée* (Mise à jour) {7D2296BC-32CC-4519-917E-52E652474AF5}
FW: Trend Micro PC-cillin Internet Security 12 *activé* {3E790E9E-6A5D-4303-A7F9-185EC20F3EB6}
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Application Data\Microsoft\cmstp.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Application Data\mstinit.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Application Data\mstsc.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Application Data\spoolsv.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Application Data\cmstp.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Application Data\esentutl.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Application Data\logman.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Application Data\Microsoft\comrepl.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Application Data\Microsoft\logman.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Application Data\Microsoft\mstinit.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Application Data\Microsoft\mstsc.exe
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Application Data\rsvp.exe
c:\windows\CISVC.exe
c:\windows\dllhst3g.exe
c:\windows\ieudinit.exe
c:\windows\logman.exe
c:\windows\system\cisvc.exe
c:\windows\system\dllhst3g.exe
c:\windows\system\rsvp.exe
c:\windows\system32\drivers\mstinit.exe
c:\windows\system32\mcrh.tmp
c:\windows\system32\tmp.reg
c:\windows\system32\win.ini
c:\windows\unins000.dat
c:\windows\unins000.exe
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Service_sysrest.sys
((((((((((((((((((((((((((((( Fichiers créés du 2009-12-07 au 2010-01-07 ))))))))))))))))))))))))))))))))))))
.
2010-01-07 18:18 . 2010-01-07 18:39 -------- d-----w- C:\UsbFix
2010-01-07 17:42 . 2010-01-07 18:10 -------- d-----w- C:\FindyKill
2010-01-07 17:38 . 2010-01-07 17:38 -------- d-----w- C:\HJ
2010-01-07 17:11 . 2010-01-07 17:11 -------- d-----w- C:\HJT
2010-01-07 16:45 . 2010-01-07 19:26 -------- d-----w- C:\rsit
2010-01-02 15:53 . 2009-03-09 14:27 453456 ----a-w- c:\windows\system32\d3dx10_41.dll
2010-01-02 15:53 . 2009-03-09 14:27 1846632 ----a-w- c:\windows\system32\D3DCompiler_41.dll
2010-01-02 15:53 . 2009-03-09 14:27 4178264 ----a-w- c:\windows\system32\D3DX9_41.dll
2010-01-02 15:53 . 2009-03-16 13:18 69448 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2010-01-02 15:53 . 2009-03-16 13:18 517448 ----a-w- c:\windows\system32\XAudio2_4.dll
2010-01-02 15:53 . 2009-03-16 13:18 235352 ----a-w- c:\windows\system32\xactengine3_4.dll
2010-01-02 15:53 . 2009-03-16 13:18 22360 ----a-w- c:\windows\system32\X3DAudio1_6.dll
2009-12-18 23:31 . 2010-01-02 16:30 -------- d-----w- c:\program files\Activision
2009-12-16 18:07 . 2010-01-02 15:27 -------- d-----w- c:\program files\Soldier of Fortune II - SP Demo
2009-12-15 23:07 . 2009-12-15 23:07 -------- d-----w- c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Application Data\PunkBuster
2009-12-13 15:53 . 2009-12-13 15:53 -------- d-----w- c:\windows\Logs
2009-12-11 23:56 . 2009-12-11 23:56 -------- d-----w- c:\windows\system32\AGEIA
2009-12-11 23:56 . 2009-12-11 23:56 -------- d-----w- c:\program files\AGEIA Technologies
2009-12-11 19:45 . 2009-11-21 15:58 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-07 20:48 . 2005-12-08 19:03 -------- d-----w- c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Application Data\Skype
2010-01-07 20:42 . 2007-05-04 17:42 12 ----a-w- c:\windows\bthservsdp.dat
2010-01-07 19:27 . 2005-12-08 14:43 -------- d-----w- c:\program files\Trend Micro
2010-01-07 18:09 . 2001-10-02 18:17 536002 ----a-w- c:\windows\system32\perfh00C.dat
2010-01-07 18:09 . 2001-10-02 18:17 94526 ----a-w- c:\windows\system32\perfc00C.dat
2010-01-06 21:28 . 2008-07-19 20:58 -------- d---a-w- c:\documents and settings\All Users.WINDOWS\Application Data\TEMP
2010-01-06 21:14 . 2005-12-08 12:32 -------- d-----w- c:\program files\microsoft frontpage
2010-01-06 21:14 . 2006-03-25 09:16 -------- d-----w- c:\program files\FileZilla
2010-01-06 21:13 . 2005-12-11 19:53 -------- d-----w- c:\program files\eMule
2010-01-06 21:10 . 2006-07-07 11:26 -------- d-----w- c:\program files\BitTorrent
2010-01-06 18:37 . 2006-02-22 17:38 -------- d-----w- c:\program files\Commander Pro
2010-01-04 18:01 . 2009-04-14 20:43 -------- d-----w- c:\program files\SpywareBlaster
2010-01-02 22:06 . 2008-01-08 18:12 138328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-01-02 22:06 . 2008-01-08 18:12 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-01-02 22:06 . 2008-01-08 18:12 214816 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-01-02 16:20 . 2005-12-09 15:50 46160 ----a-w- c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-01-02 15:50 . 2005-12-08 13:44 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-21 18:29 . 2005-12-08 17:13 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy
2009-12-21 12:32 . 2007-05-08 09:48 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\Ulead Systems
2009-12-21 12:31 . 2006-01-12 19:02 -------- d-----w- c:\program files\Fichiers communs\Real
2009-12-21 12:30 . 2005-12-08 19:54 -------- d-----w- c:\program files\CyberLink
2009-12-21 12:30 . 2008-11-30 23:17 -------- d-----w- c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Application Data\Panasonic
2009-12-18 23:42 . 2008-01-08 18:12 22328 ----a-w- c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Application Data\PnkBstrK.sys
2009-12-18 23:42 . 2008-01-08 18:12 22328 ----a-w- c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Application Data\PnkBstrK.sys
2009-12-15 22:19 . 2005-12-09 17:05 -------- d-----w- c:\program files\Canon
2009-12-11 23:55 . 2006-10-22 16:06 -------- d-----w- c:\program files\Fichiers communs\Wise Installation Wizard
2009-12-07 21:06 . 2009-12-07 21:06 -------- d-----w- c:\program files\Fox
2009-12-07 13:37 . 2009-12-07 13:37 -------- d-----w- c:\program files\Hercules
2009-11-30 10:35 . 2009-11-30 10:34 -------- d-----w- c:\program files\iTunes
2009-11-30 10:34 . 2009-11-30 10:34 -------- d-----w- c:\program files\iPod
2009-11-30 10:34 . 2007-08-05 19:00 -------- d-----w- c:\program files\Fichiers communs\Apple
2009-11-30 10:30 . 2006-06-15 17:35 -------- d-----w- c:\program files\QuickTime
2009-11-30 10:20 . 2009-11-30 10:20 79144 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\Apple Computer\Installer Cache\iTunes 9.0.2.25\SetupAdmin.exe
2009-11-28 10:02 . 2006-08-08 05:53 -------- d-----w- c:\program files\Google
2009-11-28 10:00 . 2009-11-25 19:07 -------- d-----w- c:\program files\MyDSC2
2009-11-25 20:54 . 2008-04-13 10:31 -------- d-----w- c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Application Data\ArcSoft
2009-11-25 19:37 . 2008-11-30 23:18 -------- d-----w- c:\program files\ArcSoft
2009-11-21 15:58 . 2004-08-19 16:09 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
2009-11-21 01:35 . 2005-12-08 20:02 -------- d-----w- c:\program files\DivX
2009-11-21 01:35 . 2009-11-21 01:34 -------- d-----w- c:\program files\Fichiers communs\DivX Shared
2009-11-14 00:47 . 2009-11-14 00:47 90112 ----a-w- c:\windows\system32\dpl100.dll
2009-11-14 00:47 . 2009-11-14 00:47 856064 ----a-w- c:\windows\system32\divx_xx0c.dll
2009-11-14 00:47 . 2009-11-14 00:47 856064 ----a-w- c:\windows\system32\divx_xx07.dll
2009-11-14 00:47 . 2009-11-14 00:47 847872 ----a-w- c:\windows\system32\divx_xx0a.dll
2009-11-14 00:47 . 2009-11-14 00:47 843776 ----a-w- c:\windows\system32\divx_xx16.dll
2009-11-14 00:47 . 2009-11-14 00:47 839680 ----a-w- c:\windows\system32\divx_xx11.dll
2009-11-14 00:47 . 2009-11-14 00:47 696320 ----a-w- c:\windows\system32\DivX.dll
2009-11-13 19:42 . 2005-12-08 17:13 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-11-04 06:59 . 2009-11-04 06:59 152576 ----a-w- c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Application Data\Sun\Java\jre1.6.0_17\lzma.dll
2009-10-29 07:42 . 2005-10-12 10:25 916480 ----a-w- c:\windows\system32\wininet.dll
2009-10-24 09:26 . 2009-10-24 09:26 0 ----a-w- c:\windows\PowerReg.dat
2009-10-21 05:39 . 2004-08-19 16:09 75776 ----a-w- c:\windows\system32\strmfilt.dll
2009-10-21 05:39 . 2004-08-19 16:09 25088 ----a-w- c:\windows\system32\httpapi.dll
2009-10-20 16:20 . 2005-07-26 15:01 265728 ------w- c:\windows\system32\drivers\http.sys
2009-10-13 10:33 . 2004-08-19 16:09 271360 ------w- c:\windows\system32\oakley.dll
2009-10-12 13:39 . 2004-08-19 16:09 79872 ----a-w- c:\windows\system32\raschap.dll
2009-10-12 13:39 . 2004-08-19 16:09 150528 ----a-w- c:\windows\system32\rastls.dll
2009-10-11 03:17 . 2008-11-22 10:18 411368 ----a-w- c:\windows\system32\deploytk.dll
2008-03-03 17:47 . 2005-12-08 20:02 56 --sh--r- c:\windows\system32\7924C48F39.sys
2008-03-03 17:47 . 2005-12-08 20:02 10020 --sha-w- c:\windows\system32\KGyGaAvL.sys
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NCLaunch"="c:\windows\NCLAUNCH.EXe" [2007-03-19 40960]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Fichiers communs\Ahead\lib\NMBgMonitor.exe" [2005-09-03 94208]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-10-09 25623336]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"UpdateManager"="c:\program files\Fichiers communs\Sonic\Update Manager\sgtray.exe" [2003-08-19 110592]
"Synchronization Manager"="c:\windows\system32\mobsync.exe" [2008-04-14 143872]
"RTHDCPL"="RTHDCPL.EXE" [2005-05-05 14396416]
"RemoteControl"="c:\windows\system32\rmctrl.exe" [2000-10-16 32768]
"pccguide.exe"="c:\program files\Trend Micro\Internet Security 12\pccguide.exe" [2010-01-07 823361]
"Omnipage"="c:\program files\ScanSoft\OmniPageSE\opware32.exe" [2002-06-03 49152]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb03.exe" [2001-06-19 200704]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2005-01-07 61952]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"LogitechCommunicationsManager"="c:\program files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [2007-07-25 563984]
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2007-07-25 2027792]
"EM_EXEC"="c:\progra~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE" [2001-10-04 35328]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2004-09-15 37888]
"AppleSyncNotifier"="c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-08-13 177440]
"ArcSoft Connection Service"="c:\program files\Fichiers communs\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2007-10-11 31232]
"UPSMS"="c:\program files\Commander Pro\UPSMS.exe" [2009-06-28 114688]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-06-10 13758464]
"nwiz"="nwiz.exe" [2009-06-10 1657376]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-06-10 86016]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2008-03-10 689488]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2008-03-17 1848648]
"IJNetworkScanUtility"="c:\program files\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE" [2007-11-19 128352]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-11-12 141600]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nlsf"="move" [X]
"Config"="c:\windows\system32\run.cmd" [2005-08-23 341]
"tscuninstall"="c:\windows\system32\tscupgrd.exe" [2004-08-19 44544]
c:\documents and settings\Admin.XPSP2-0ECD3B1B5\Menu Démarrer\Programmes\Démarrage\
GM_DevUpdate.lnk - c:\program files\HAMA Joystick Outlandish\GM_DevUpdate.exe [2009-10-27 45056]
c:\documents and settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\
WiFi Station pour Livebox.lnk - c:\program files\Hercules\WiFi Station pour Livebox\WifiStationLB.exe [2009-12-7 721408]
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"= 1 (0x1)
"MemCheckBoxInRunDlg"= 1 (0x1)
"NoSMBalloonTip"= 1 (0x1)
"NoWelcomeScreen"= 1 (0x1)
"NoAutoUpdate"= 1 (0x1)
"NoBandCustomize"= 1 (0x1)
"HonorAutoRunSetting"= 0 (0x0)
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"= 1 (0x1)
"MemCheckBoxInRunDlg"= 1 (0x1)
"NoSMBalloonTip"= 1 (0x1)
"NoWelcomeScreen"= 1 (0x1)
"NoAutoUpdate"= 1 (0x1)
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ANIWZCS2Service]
2004-04-14 10:54 45056 ----a-w- c:\program files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\D-Link AirPlus G]
2004-07-09 14:07 1249280 ----a-w- c:\program files\D-Link\AirPlus G\AirGCFG.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
2009-01-26 14:31 2144088 --sha-r- c:\program files\Spybot - Search & Destroy\TeaTimer.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\TrendAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\TrendFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Westwood\\SUN\\GAME.ICD"=
"c:\\Program Files\\Westwood\\SUN\\Game.exe"=
"c:\\Program Files\\EA Games\\Command and Conquer Generals\\patchget.dat"=
"c:\\Program Files\\ScanSoft\\OmniPageSE\\EregFre\\NAVBrowser.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Microsoft Office\\OFFICE11\\OUTLOOK.EXE"=
"c:\\Program Files\\EA Games\\Command and Conquer Generals\\game.dat"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\Diablo II\\Diablo II.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\Program Files\\EA Games\\Command & Conquer Generals - Heure H\\game.dat"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\Program Files\\Microsoft Games\\Rise of Nations\\rise.exe"=
"c:\\Program Files\\Microsoft Games\\Rise of Nations\\nations.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Microsoft Games\\Rise of Nations\\thrones.exe"=
"c:\\Program Files\\THQ\\Titan Quest Immortal Throne\\Tqit.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Electronic Arts\\Command & Conquer 3\\RetailExe\\1.0\\cnc3game.dat"=
"c:\\Program Files\\Electronic Arts\\Command & Conquer(tm) 3 La Fureur de Kane\\RetailExe\\1.0\\cnc3ep1.dat"=
"c:\\Program Files\\Electronic Arts\\Command & Conquer 3\\RetailExe\\1.9\\cnc3game.dat"=
"c:\\Program Files\\Commander Pro\\jre\\bin\\javaw.exe"=
"c:\\Program Files\\Codemasters\\Heroes of the Pacific\\Heroes.exe"=
"c:\\Program Files\\NovaLogic\\Comanche 4\\Update.exe"=
"c:\\Program Files\\NovaLogic\\Comanche 4\\c4.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"7561:TCP"= 7561:TCP:E mule
"7571:UDP"= 7571:UDP:E mule
"6112:TCP"= 6112:TCP:Diablo
"4000:TCP"= 4000:TCP:diablo
"25:TCP"= 25:TCP:Outlook Office
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowOutboundDestinationUnreachable"= 1 (0x1)
"AllowOutboundSourceQuench"= 1 (0x1)
"AllowOutboundTimeExceeded"= 1 (0x1)
"AllowRedirect"= 1 (0x1)
R0 Vax347b;Vax347b;c:\windows\system32\drivers\Vax347b.sys [08/12/2005 18:02 159616]
R0 Vax347s;Vax347s;c:\windows\system32\drivers\Vax347s.sys [08/12/2005 18:02 5248]
R0 VirtualK;VirtaulK;c:\windows\system32\drivers\VirtualK.sys [27/10/2009 20:45 3968]
R2 UPSmart;UPSmart;c:\program files\Commander Pro\UPServ.exe UPSmart --> c:\program files\Commander Pro\UPServ.exe UPSmart [?]
R3 GMFilter;GMFilter HID Filter Driver;c:\windows\system32\drivers\GMFilter.sys [27/10/2009 20:44 21760]
R3 phaudlwr;Philips Audio Filter;c:\windows\system32\drivers\phaudlwr.sys [19/02/2008 08:00 88704]
R3 skbusenum;SKBus Enumerator;c:\windows\system32\drivers\SKBusEnum.sys [27/10/2009 20:45 10880]
R3 SPC520;Philips SPC520NC PC Camera;c:\windows\system32\drivers\SPC520.sys [13/04/2008 11:21 483328]
R3 SPC520m;Philips SPC520NC PC Cameram;c:\windows\system32\drivers\SPC520m.sys [13/04/2008 11:21 7680]
S2 Tmfilter;Tmfilter;c:\windows\system32\drivers\TmXPFlt.sys --> c:\windows\system32\drivers\TmXPFlt.sys [?]
S2 Tmpreflt;Tmpreflt;c:\windows\system32\drivers\Tmpreflt.sys --> c:\windows\system32\drivers\Tmpreflt.sys [?]
S2 UPSmonitor;UPSmonitor;c:\progra~1\COMMAN~1\monitor.exe -zglaxservice UPSmonitor --> c:\progra~1\COMMAN~1\monitor.exe -zglaxservice UPSmonitor [?]
S3 PIXMCV;JVC Communication PIX-MCV Driver;c:\windows\system32\drivers\pixmcvc.sys [11/12/2005 21:40 32000]
S3 PIXMCVA;JVC PIX-MCV Audio Capture;c:\windows\system32\drivers\pixmcva.sys [11/12/2005 22:12 28057]
S3 PIXMCVV;JVC PIX-MCV Video Capture;c:\windows\system32\drivers\pixmcvv.sys [11/12/2005 21:45 21081]
S3 SNPP202;PC Camera (6028 VGA);c:\windows\system32\drivers\snpp202.sys [09/12/2005 17:36 235136]
S3 UPSmanager;UPSmanager;c:\progra~1\COMMAN~1\manager.exe -zglaxservice UPSmanager --> c:\progra~1\COMMAN~1\manager.exe -zglaxservice UPSmanager [?]
S3 UPSRMI;UPSRMI;c:\progra~1\COMMAN~1\wpRMI.exe -zglaxservice UPSRMI --> c:\progra~1\COMMAN~1\wpRMI.exe -zglaxservice UPSRMI [?]
S4 Tmntsrv;Trend Micro Real-time Service;c:\progra~1\TRENDM~1\INTERN~1\Tmntsrv.exe [27/10/2004 11:13 282696]
S4 TmPfw;Trend Micro Personal Firewall;c:\progra~1\TRENDM~1\INTERN~1\TmPfw.exe [15/09/2004 10:03 585789]
S4 tmproxy;Trend Micro Proxy Service;c:\progra~1\TRENDM~1\INTERN~1\tmproxy.exe [15/09/2004 10:04 188484]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E4066320-E4AE-11CF-B1B0-00AA00BBAD66}]
2009-03-08 02:32 128512 ----a-w- c:\windows\system32\advpack.dll
.
Contenu du dossier 'Tâches planifiées'
2010-01-04 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 10:34]
.
.
------- Examen supplémentaire -------
.
uInternet Settings,ProxyOverride = localhost;*.local
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FF
por otro lado, no consigo reiniciar mi antivirus, siempre tengo el mensaje de error, se inicia pero no hay forma de reactivarlo.
los cracks han dañado bien tu sistema :-(
en mi opinión, ¡tu antivirus ha dado su último suspiro!!!
pasa a la siguiente publicación 12 con MBAM:
https://forums.commentcamarche.net/forum/affich-16041844-virus-qui-bloque-l-antivirus#12
en mi opinión, ¡tu antivirus ha dado su último suspiro!!!
pasa a la siguiente publicación 12 con MBAM:
https://forums.commentcamarche.net/forum/affich-16041844-virus-qui-bloque-l-antivirus#12
Bueno, lo dejaré funcionar durante la noche
publicaré el informe mañana por la mañana a primera hora
y retomaré la conversación mañana por la tarde alrededor de las 17:45
gracias por tu ayuda y el tiempo que dedicaste a mi problema
hasta mañana y buenas noches, pequeños
publicaré el informe mañana por la mañana a primera hora
y retomaré la conversación mañana por la tarde alrededor de las 17:45
gracias por tu ayuda y el tiempo que dedicaste a mi problema
hasta mañana y buenas noches, pequeños
Malwarebytes' Anti-Malware 1.43
Versión de la base de datos: 3510
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
08/01/2010 06:27:37
mbam-log-2010-01-08 (06-27-22).txt
Tipo de búsqueda: Examen completo (C:\|D:\|H:\|)
Elementos examinados: 285903
Tiempo transcurrido: 53 minuto(s), 23 segundo(s)
Proceso(s) en memoria infectado(s): 0
Módulo(s) en memoria infectado(s): 0
Clave(s) del Registro infectada(s): 0
Valor(es) del Registro infectado(s): 2
Elemento(s) de datos del Registro infectado(s): 1
Carpeta(s) infectada(s): 0
Archivo(s) infectado(s): 1
Proceso(s) en memoria infectado(s):
(Ningún elemento dañino detectado)
Módulo(s) en memoria infectado(s):
(Ningún elemento dañino detectado)
Clave(s) del Registro infectada(s):
(Ningún elemento dañino detectado)
Valor(es) del Registro infectado(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\upsms (Worm.P2P) -> No se tomó ninguna acción.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\rhcl90j0ejcr (Rogue.AntiVirusXP) -> No se tomó ninguna acción.
Elemento(s) de datos del Registro infectado(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMHelp (Hijack.Help) -> Mal: (1) Bueno: (0) -> No se tomó ninguna acción.
Carpeta(s) infectada(s):
(Ningún elemento dañino detectado)
Archivo(s) infectado(s):
C:\System Volume Information\_restore{3D64EAA2-C25B-4ABD-AA55-F123DEE84BD0}\RP1\A0000082.sys (Malware.Trace) -> No se tomó ninguna acción.
hasta esta noche
Versión de la base de datos: 3510
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
08/01/2010 06:27:37
mbam-log-2010-01-08 (06-27-22).txt
Tipo de búsqueda: Examen completo (C:\|D:\|H:\|)
Elementos examinados: 285903
Tiempo transcurrido: 53 minuto(s), 23 segundo(s)
Proceso(s) en memoria infectado(s): 0
Módulo(s) en memoria infectado(s): 0
Clave(s) del Registro infectada(s): 0
Valor(es) del Registro infectado(s): 2
Elemento(s) de datos del Registro infectado(s): 1
Carpeta(s) infectada(s): 0
Archivo(s) infectado(s): 1
Proceso(s) en memoria infectado(s):
(Ningún elemento dañino detectado)
Módulo(s) en memoria infectado(s):
(Ningún elemento dañino detectado)
Clave(s) del Registro infectada(s):
(Ningún elemento dañino detectado)
Valor(es) del Registro infectado(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\upsms (Worm.P2P) -> No se tomó ninguna acción.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\rhcl90j0ejcr (Rogue.AntiVirusXP) -> No se tomó ninguna acción.
Elemento(s) de datos del Registro infectado(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMHelp (Hijack.Help) -> Mal: (1) Bueno: (0) -> No se tomó ninguna acción.
Carpeta(s) infectada(s):
(Ningún elemento dañino detectado)
Archivo(s) infectado(s):
C:\System Volume Information\_restore{3D64EAA2-C25B-4ABD-AA55-F123DEE84BD0}\RP1\A0000082.sys (Malware.Trace) -> No se tomó ninguna acción.
hasta esta noche
hola,
-> No se tomó ninguna acción.
olvidaste eliminarlos :-)
. Si se han detectado malwares, haz clic en Mostrar resultados
. Selecciona todo (o deja marcados) y haz clic en Eliminar selección. Malwarebytes destruirá los archivos y claves del registro y colocará una copia en cuarentena.
. Malwarebytes abrirá el bloc de notas y copiará el informe de análisis allí.
. dirígete a la pestaña informe/log
. haz clic en ella para mostrarla, una vez mostrada
. haz clic en edición en la parte superior del bloc de notas, y luego en seleccionar todo
. vuelve a hacer clic en edición y luego en copiar y regresa al foro y en tu respuesta
. haz clic derecho en el cuadro de respuesta y pega
. Al final del escaneo, puede que MBAM necesite reiniciar la pc para finalizar la eliminación, así que no te preocupes, ¡reinicia tu pc!
Si necesitas ayuda, mira este tutorial:
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
-> No se tomó ninguna acción.
olvidaste eliminarlos :-)
. Si se han detectado malwares, haz clic en Mostrar resultados
. Selecciona todo (o deja marcados) y haz clic en Eliminar selección. Malwarebytes destruirá los archivos y claves del registro y colocará una copia en cuarentena.
. Malwarebytes abrirá el bloc de notas y copiará el informe de análisis allí.
. dirígete a la pestaña informe/log
. haz clic en ella para mostrarla, una vez mostrada
. haz clic en edición en la parte superior del bloc de notas, y luego en seleccionar todo
. vuelve a hacer clic en edición y luego en copiar y regresa al foro y en tu respuesta
. haz clic derecho en el cuadro de respuesta y pega
. Al final del escaneo, puede que MBAM necesite reiniciar la pc para finalizar la eliminación, así que no te preocupes, ¡reinicia tu pc!
Si necesitas ayuda, mira este tutorial:
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
- 1
- 2
Siguiente