Troyano o virus no sé ayudarme por favor

¡atención! sigue todo al pie de la letra:


/!\ ATENCIÓN: SIGUE ESCRUPULOSAMENTE AL PIE DE LA LETRA estas indicaciones/!\

▶ Sobre todo, piensa en el registro para renombrar Combofix como "tu nombre.exe" antes de que se registre en tu disco duro

_______________________________________________________________
>Este software solo se debe usar prescrito por un helper cualificado y formado en la herramienta.<
>>>>>>>No usar fuera de este caso: ¡peligroso!<<<&<<<<<

▶ Vamos a usar ComboFix.exe. Ve a esta página web para obtener los enlaces de descarga, así como instrucciones para ejecutar la herramienta:

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

Antes de usar ComboFix :
______________________________________________________________________
>> cierra las ventanas de todos los programas en curso.
>> desactiva temporalmente y solo durante la utilización de ComboFix,
>> la protección en tiempo real de tu Antivirus y de tus Antispywares,
>> que pueden dificultar enormemente el procedimiento de búsqueda y limpieza de la herramienta.
°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°

▶ ¡NO TOQUES NADA DURANTE EL TRABAJO DE COMBOFIX (MOUSE/TECLADO... )!!!!!

▶ no olvides reactivar la protección de tu Antivirus y de tus Antispywares, antes de volver a conectarte a Internet.

>> Vuelve al foro, y

▶ copia y pega en tu próximo mensaje el contenido completo de C:\Combofix.txt.

--

--
♦G3и-н@¢км@и™©®♦

ComboFix 10-02-08.06 - karl 2010-02-08 23:25:10.1.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.2.1036.18.2047.1598 [GMT -5:00]
Lancé depuis: c:\documents and settings\karl.AUCUNE-1D235B0F\Bureau\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\karl.AUCUNE-1D235B0F\Local Settings\Temporary Internet Files\Ssk.log
c:\documents and settings\karl\Local Settings\Temporary Internet Files\search.html
C:\install.exe
c:\program files\eqadvice
c:\program files\eqadvice\hf.txt
c:\program files\eqadvice\sf.txt
c:\program files\eqadvice\Uninstall.exe
c:\program files\whInstall
c:\program files\whInstall\license.txt
c:\program files\whInstall\readme.txt
c:\program files\whInstall\whAgent.ini
c:\recycler\S-1-5-21-1220945662-813497703-854245398-1003
C:\secure32.html
C:\test.txt
c:\windows\S2FybA
c:\windows\S2FarbA\mZIVvE.vbs
c:\windows\system32\828687878882
c:\windows\system32\828687878882\444849494A44
c:\windows\system32\828687878882\45494A4A4B45
c:\windows\system32\828687878882\474B4C4C4D47
c:\windows\system32\828687878882\646869696A64
c:\windows\system32\828687878882\65696A6A6B65
c:\windows\system32\828687878882\D3D7D8D8D9D3
c:\windows\system32\828687878882\D9DDDEDEDFD9
c:\windows\system32\828687878882\F9FDFEFEFFF9
c:\windows\system32\service
c:\windows\system32\SIntf16.dll
c:\windows\system32\sstray.exe
c:\windows\system32\tmp3.tmp
c:\windows\uninst2.htm
c:\windows\unist1.htm

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_CMDSERVICE
-------\Legacy_NETWORK_MONITOR
-------\Legacy_WINDOWS_OVERLAY_COMPONENTS
-------\Service_cmdService

((((((((((((((((((((((((((((( Fichiers créés du 2010-01-09 au 2010-02-09 ))))))))))))))))))))))))))))))))))))
.
2010-02-09 02:24 . 2010-02-09 02:24 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\Malwarebytes
2010-02-09 02:24 . 2010-01-07 21:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-02-08 21:22 . 2010-02-08 21:22 -------- d-----w- c:\program files\TrendMicro
2010-02-08 04:12 . 2009-12-02 13:19 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2010-02-08 03:57 . 2010-02-08 03:57 -------- dc-h--w- c:\documents and settings\All Users.WINDOWS\Application Data\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}
2010-01-31 19:22 . 2010-01-31 19:22 -------- d-----w- c:\documents and settings\karl.AUCUNE-1D235B0F\Local Settings\Application Data\Roblox
2010-01-31 19:22 . 2010-01-31 19:22 -------- d-----w- c:\documents and settings\karl.AUCUNE-1D235B0F\Local Settings\Application Data\RobloxDownloads
2010-01-31 19:22 . 2010-01-31 19:22 -------- d-----w- c:\documents and settings\karl.AUCUNE-1D235B0F\Local Settings\Application Data\RobloxVersions
2010-01-14 16:38 . 2010-01-14 16:38 -------- d-----w- c:\documents and settings\karl.AUCUNE-1D235B0F\Application Data\Leadertech
2010-01-14 16:38 . 2010-01-14 16:38 -------- d-----w- C:\EPSONREG
2010-01-14 16:26 . 2004-02-27 10:01 79654 ----a-w- c:\windows\system32\E_FLM9AA.DLL
2010-01-14 16:26 . 2003-05-21 06:27 64000 ----a-w- c:\windows\system32\E_FBCB9AA.DLL
2010-01-14 16:26 . 2000-06-07 05:01 34304 ----a-w- c:\windows\system32\E_FBCH9AA.DLL
2010-01-14 16:26 . 2010-01-14 16:26 -------- d-----w- c:\windows\EPSON CardMonitor Essential
2010-01-14 16:26 . 2003-07-02 06:00 131072 ----a-w- c:\windows\system32\Epcmlib.dll
2010-01-14 16:25 . 2010-01-14 16:25 -------- d-----w- c:\windows\EPSON PhotoStarter Essential
2010-01-14 16:25 . 2010-01-14 16:28 -------- d-----w- c:\program files\epson
2010-01-14 16:25 . 2003-08-06 05:00 29184 ----a-w- c:\windows\system32\escwiadn.dll
2010-01-14 16:25 . 2003-07-01 05:00 46080 ----a-w- c:\windows\system32\escimgd.dll
2010-01-14 16:25 . 2003-07-01 05:00 22528 ----a-w- c:\windows\system32\esccmd.dll
2010-01-12 19:19 . 2009-11-21 15:58 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2010-01-11 08:59 . 2010-02-03 23:36 87160 ----a-w- c:\documents and settings\LocalService.AUTORITE NT\Local Settings\Application Data\FontCache3.0.0.0.dat
2010-01-10 21:49 . 2010-02-09 04:36 -------- d-----w- c:\documents and settings\karl.AUCUNE-1D235B0F\Local Settings\Application Data\Deployment

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-09 04:35 . 2007-05-31 03:25 -------- d-----w- c:\program files\Steam
2010-02-09 04:16 . 2010-02-09 02:24 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-02-09 02:25 . 2010-02-09 02:25 5115824 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2010-02-09 02:24 . 2010-02-09 02:24 -------- d-----w- c:\documents and settings\karl.AUCUNE-1D235B0F\Application Data\Malwarebytes
2010-02-08 21:22 . 2010-02-08 21:22 388096 ----a-r- c:\documents and settings\karl.AUCUNE-1D235B0F\Application Data\Microsoft\Installer\{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}\HiJackThis.exe
2010-02-08 21:19 . 2006-04-14 18:15 -------- d-----w- c:\program files\Warcraft III
2010-02-08 03:56 . 2009-07-19 02:25 -------- d-----w- c:\program files\Lavasoft
2010-02-08 03:56 . 2009-06-29 03:36 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\Lavasoft
2010-02-08 03:51 . 2006-03-29 22:03 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-02-07 22:27 . 2005-11-12 00:04 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-02-07 22:27 . 2008-10-10 15:44 -------- d-----w- c:\program files\Garena
2010-02-07 21:04 . 2005-12-13 03:03 -------- d-----w- c:\program files\LimeWire
2010-02-07 21:03 . 2006-07-31 17:57 -------- d-----w- c:\program files\Sony
2010-02-07 21:02 . 2005-11-13 20:03 -------- d-----w- c:\program files\Starcraft
2010-02-05 22:34 . 2009-01-07 07:25 -------- d-----w- c:\program files\BitComet
2010-02-04 23:25 . 2006-07-21 05:06 1100 ----a-w- c:\windows\system32\d3d8caps.dat
2010-02-02 23:43 . 2006-03-05 08:32 -------- d-----w- c:\program files\World of Warcraft
2010-01-31 03:13 . 2008-10-06 01:48 215104 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-01-26 04:01 . 2006-04-14 18:21 91647 ----a-w- c:\windows\War3Unin.dat
2010-01-22 08:18 . 2009-12-22 02:33 -------- d-----w- c:\program files\Microsoft Silverlight
2010-01-20 19:58 . 2009-12-21 23:04 79488 ----a-w- c:\documents and settings\karl.AUCUNE-1D235B0F\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2010-01-16 02:33 . 2008-10-06 01:48 138576 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-01-10 06:31 . 2010-01-10 06:31 86576 ----a-w- c:\documents and settings\karl.AUCUNE-1D235B0F\Application Data\Microsoft\Services Windows Live\Raccourci Galerie de Photos Windows Live.exe
2010-01-10 06:31 . 2010-01-10 06:31 132672 ----a-w- c:\documents and settings\karl.AUCUNE-1D235B0F\Application Data\Microsoft\Services Windows Live\Raccourci Windows Live Messenger.exe
2010-01-10 06:31 . 2010-01-10 06:31 392728 ----a-w- c:\documents and settings\karl.AUCUNE-1D235B0F\Application Data\Microsoft\Services Windows Live\Services Windows Live.dll
2010-01-07 21:07 . 2010-02-09 02:24 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-03 23:59 . 2010-01-03 23:59 -------- dc-h--w- c:\documents and settings\All Users.WINDOWS\Application Data\{D2A6A317-7450-472F-8C72-17783BD2E5E3}
2010-01-03 23:59 . 2010-01-03 23:59 -------- d-----w- c:\program files\Viewer
2010-01-03 23:49 . 2010-01-03 23:49 -------- d-----w- c:\documents and settings\karl.AUCUNE-1D235B0F\Application Data\FUJIFILM
2009-12-24 21:31 . 2006-06-27 19:19 1331584 ----a-w- c:\program files\Tenacious D - Dear Penis.mp3
2009-12-24 00:46 . 2006-12-30 19:05 2934647 ----a-w- c:\program files\Eminem - Presents The Re-Up - 19 - Eminem 50 Cent - Ski Mask Way (Remix)-easymp3s.mp3
2009-12-24 00:46 . 2006-12-30 19:05 5283840 ----a-w- c:\program files\Eminem - Eminem Presents The Re-Up - You Don't Know (Ft. 50 Cent, Cashis & Lloyd Banks).mp3
2009-12-24 00:45 . 2006-08-03 00:50 -------- d-----w- c:\documents and settings\karl.AUCUNE-1D235B0F\Application Data\Apple Computer
2009-12-23 20:55 . 2006-12-30 19:03 5839654 ----a-w- c:\program files\G-Unit - Lay You Down.mp3
2009-12-22 19:05 . 2001-09-28 17:00 84526 ----a-w- c:\windows\system32\perfc00C.dat
2009-12-22 19:05 . 2001-09-28 17:00 510324 ----a-w- c:\windows\system32\perfh00C.dat
2009-12-22 02:33 . 2009-03-19 16:57 -------- d-----w- c:\program files\Windows Live
2009-12-22 02:33 . 2009-12-22 02:33 -------- d-----w- c:\program files\Microsoft Sync Framework
2009-12-22 02:32 . 2009-12-22 02:32 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2009-12-22 02:30 . 2009-12-22 02:30 -------- d-----w- c:\program files\Microsoft
2009-12-21 19:07 . 2004-08-04 04:54 916480 ----a-w- c:\windows\system32\wininet.dll
2009-12-07 14:10 . 2010-02-08 03:57 2953352 -c--a-w- c:\documents and settings\All Users.WINDOWS\Application Data\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}\Ad-AwareInstallation.exe
2009-11-21 15:58 . 2004-08-04 04:54 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
2008-11-24 03:31 . 2008-11-24 03:31 7168 --sha-w- c:\program files\Thumbs.db
2007-11-20 05:30 . 2007-11-20 05:26 4442072 ----a-w- c:\program files\Timberland and One Republic - Apologize.mp3
2007-09-02 16:40 . 2007-09-02 16:29 39839888 ----a-w- c:\program files\Elvis Presley - Video - My Way.avi
2007-09-02 16:36 . 2007-09-02 16:30 33219256 ----a-w- c:\program files\ Elvis Presley and Celine Dion- If I Can Dream (American Idol).mpg
2007-09-02 16:05 . 2007-09-02 16:00 40135480 ----a-w- c:\program files\Elvis Presley & Lisa Marie - Don't Cry Daddy (Rare Bootleg).mp3
2007-09-02 16:00 . 2007-09-02 16:00 1167481 ----a-w- c:\program files\lisa marie presley with elvis.mov
2007-09-02 15:59 . 2007-09-02 15:59 1167481 ----a-w- c:\program files\hound doggy elvis presly.mov
2007-09-02 15:59 . 2007-09-02 15:59 1167481 ----a-w- c:\program files\presley elvis loving you.mov
2007-09-02 15:59 . 2007-09-02 15:59 1167481 ----a-w- c:\program files\pretty women elvis presley.mov
2007-09-02 15:27 . 2007-09-02 15:12 2713025 ----a-w- c:\program files\Greace - John Travolta Grease - I Got Chills.mp3
2007-09-02 15:24 . 2007-09-02 15:20 5603706 ----a-w- c:\program files\Mandy Moore - Only Hope - A Walk to Remember(3).mp3
2007-09-02 15:23 . 2007-09-02 15:10 3475375 ----a-w- c:\program files\Grease Soundtrack - Summer Love.mp3
2007-09-02 15:21 . 2007-09-02 15:19 3514496 ----a-w- c:\program files\Kelly Clarkson - Because Of You.mp3
2007-09-02 15:18 . 2007-09-02 15:12 2097152 ----a-w- c:\program files\T-2729580-Greace - You're The One That I Want.mp3
2007-09-02 15:13 . 2007-09-02 15:13 3142112 ----a-w- c:\program files\Olivia Newton John - Hopelessly Devoted To You (Grease Soundtrack).mp3
2007-09-02 15:12 . 2007-09-02 15:12 1595940 ----a-w- c:\program files\Greese - Look At Me, I'm Sandra Dee.mp3
2007-09-02 15:12 . 2007-09-02 15:12 1595940 ----a-w- c:\program files\Grease Soundtrack - You're The One That I Want.mp3
2007-09-02 15:12 . 2007-09-02 15:11 2521088 ----a-w- c:\program files\Grease - John Travolta - Sandy.mp3
2007-09-02 15:12 . 2007-09-02 15:11 2873887 ----a-w- c:\program files\Grease soundtrack - We go together.mp3
2007-09-02 15:12 . 2007-09-02 15:12 3111706 ----a-w- c:\program files\Greese Soundtrack - Greased Lightning.mp3
2007-09-02 15:12 . 2007-09-02 15:11 3471151 ----a-w- c:\program files\greace - grease soundtrack - tell me more.mp3
2007-09-02 14:44 . 2007-09-02 14:30 5057862 ----a-w- c:\program files\Annie Villeneuve - Un Ange Qui Passe.mp3
2007-09-02 14:43 . 2007-09-02 14:36 5487814 ----a-w- c:\program files\Celine Dion - Im Your Lady.mp3
2007-09-02 14:43 . 2007-09-02 14:36 5487524 ----a-w- c:\program files\Celine Dion - The Power Of Love.mp3
2007-09-02 14:42 . 2007-09-02 14:30 4429157 ----a-w- c:\program files\Annie Villeneuve - Quand Je Ferme Les Yeux.mp3
2007-09-02 14:38 . 2007-09-02 14:31 4639050 ----a-w- c:\program files\Celine Dion & Barbara Streisand - Tell Him.mp3
2007-09-02 14:35 . 2007-09-02 14:30 4624801 ----a-w- c:\program files\Rihana - Unfaithfull.mp3
2007-09-02 14:34 . 2007-09-02 14:31 5033984 ----a-w- c:\program files\Celine Dion - I'm Alive.mp3
2007-09-02 14:31 . 2007-09-02 14:29 3066115 ----a-w- c:\program files\From Justin To Kelly Soundtrack - Timeless.mp3
2007-08-29 05:07 . 2007-08-29 05:07 4042964 ----a-w- c:\program files\Shop boyz- Party Like A Rockstarb.mp3
2007-08-27 23:54 . 2007-08-27 23:54 3463168 ----a-w- c:\program files\Linkin Park - In The End.mp3
2007-08-26 01:04 . 2007-08-26 01:04 3772163 ----a-w- c:\program files\Plain White T's - Hey There Delilah.mp3
2007-08-24 03:07 . 2007-08-24 03:04 4409472 ----a-w- c:\program files\Rahzell - Four Elements.mp3
2007-08-24 03:05 . 2007-08-24 03:04 6248448 ----a-w- c:\program files\Rahzell - Heavy Beat Boxing.mp3
2007-08-24 03:05 . 2007-08-24 03:04 4011496 ----a-w- c:\program files\Rahzell - The Human Beatbox.mp3
2007-08-24 03:05 . 2007-08-24 03:04 2152907 ----a-w- c:\program files\Beat Boxing - Rahzel - Freestyle Beatbox Session 2.mp3
2007-08-24 03:05 . 2007-08-24 03:04 3993600 ----a-w- c:\program files\Razelle - The Art Of Beatboxing.mp3
2007-08-24 03:04 . 2007-08-24 03:04 2014644 ----a-w- c:\program files\Rahzel - Mortal Kombat.mp3
2007-07-14 17:24 . 2007-07-14 17:20 6968609 ----a-w- c:\program files\Timbaland Feat. Nelly Furtado & Justin Timberlake - Give It To Me Aetoms Remix ( best than original 2007 Strasbourg France French Hot Hit Rap Crunk Pop Sex Fergie Lil J.mp3
2007-07-14 17:20 . 2007-07-14 17:20 5184566 ----a-w- c:\program files\Timbaland Feat. Justin Timberlake & Jay-Z-Laff At Em (Give It To Me Remix)-(RapGodFathers.com).mp3
2007-07-14 15:14 . 2007-07-14 15:13 5560434 ----a-w- c:\program files\System of A Down - Lost In Hollywood.mp3
2007-07-14 15:14 . 2007-07-14 15:13 4027156 ----a-w- c:\program files\System of a Down - Lonely Day.mp3
2007-07-14 15:14 . 2007-07-14 15:13 4872192 ----a-w- c:\program files\System of a Down - The Prison Song.mp3
2007-07-14 15:14 . 2007-07-14 15:13 5056330 ----a-w- c:\program files\System Of The Down - Chop Suey.mp3
2007-07-14 15:13 . 2007-07-14 15:13 4552832 ----a-w- c:\program files\System Of A Down - Hypnotize .mp3
2007-06-20 04:14 . 2007-06-20 04:13 3733716 ----a-w- c:\program files\Gritz - My Life Be Like.mp3
2007-06-20 04:14 . 2007-06-20 04:13 6028006 ----a-w- c:\program files\10 Gym Class Heroes - Take A Look At My Girlfriend.mp3
2007-06-20 04:13 . 2007-06-20 04:13 6027878 ----a-w- c:\program files\Gym Class Heroes- Cupids Choke hold.mp3
2007-05-25 15:40 . 2007-05-25 15:40 6289796 ----a-w- c:\program files\Desert_Wind-Misirlou-13.wma
2007-05-25 15:40 . 2007-05-25 15:33 5620946 ----a-w- c:\program files\Wolfmother - Woman.mp3
2007-05-25 15:39 . 2007-05-25 15:39 3591272 ----a-w- c:\program files\Dick Dale - Misirlou (Pulp Fiction Theme).mp3
2007-05-25 15:37 . 2007-05-25 15:36 5142569 ----a-w- c:\program files\Kansas - Carry On My Wayward Son.mp3
2007-05-25 15:34 . 2007-05-25 15:33 9723904 ----a-w- c:\program files\Lynard Skynard - Free Bird.mp3
2007-05-25 15:15 . 2007-05-25 15:15 5949555 ----a-w- c:\program files\Justin Timberlake - Summer Love.mp3
2007-05-25 15:11 . 2007-05-25 15:09 4817543 ----a-w- c:\program files\David Guetta vs The Egg - Love Don't Let Me Go.mp3
2007-05-25 15:10 . 2007-05-25 15:09 4618240 ----a-w- c:\program files\David Guetta vs The Egg - Love Dont Let Me Go vs Walking Away.mp3
2007-05-25 03:35 . 2007-05-25 03:26 3176372 ----a-w- c:\program files\David Guetta - Love Is Gone.mp3
2009-05-01 21:02 . 2009-05-01 21:02 1044480

¿puedes volver a ejecutar combofix en modo seguro y publicar el informe?

Cómo entrar en Modo Seguro:

▶ Reinicia tu ordenador
▶ Toca la tecla F8 inmediatamente, (F5 en algunos PC) justo después del “Beep”
▶ Verás una pantalla con las opciones de inicio que aparecerán
▶ Elige la primera opción: Seguro, y confirma con “Enter”
▶ Elige tu cuenta habitual, y no Administrador (si hace falta ... )

(atención: no hay conexión posible en modo seguro, así que copia o imprime bien la maniobra para evitar errores ...)

--
♦G3и-н@¢км@и™©®♦

ComboFix 10-02-08.06 - karl 2010-02-09 0:14.2.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.2.1036.18.2047.1600 [GMT -5:00]
Lancé depuis: c:\documents and settings\karl.AUCUNE-1D235B0F\Bureau\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.

((((((((((((((((((((((((((((( Ficheros creados del 2010-01-09 al 2010-02-09 ))))))))))))))))))))))))))))))))))))
.
2010-02-09 02:24 . 2010-02-09 02:24 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\Malwarebytes
2010-02-09 02:24 . 2010-01-07 21:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-02-08 21:22 . 2010-02-08 21:22 388096 ----a-r- c:\documents and settings\karl.AUCUNE-1D235B0F\Application Data\Microsoft\Installer\{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}\HiJackThis.exe
2010-02-08 21:22 . 2010-02-08 21:22 -------- d-----w- c:\program files\TrendMicro
2010-02-08 04:12 . 2009-12-02 13:19 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2010-02-08 03:57 . 2010-02-08 03:57 -------- dc-h--w- c:\documents and settings\All Users.WINDOWS\Application Data\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}
2010-02-08 03:57 . 2009-12-07 14:10 2953352 -c--a-w- c:\documents and settings\All Users.WINDOWS\Application Data\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}\Ad-AwareInstallation.exe
2010-01-31 19:22 . 2010-01-31 19:22 -------- d-----w- c:\documents and settings\karl.AUCUNE-1D235B0F\Local Settings\Application Data\Roblox
2010-01-31 19:22 . 2010-01-31 19:22 -------- d-----w- c:\documents and settings\karl.AUCUNE-1D235B0F\Local Settings\Application Data\RobloxDownloads
2010-01-31 19:22 . 2010-01-31 19:22 -------- d-----w- c:\documents and settings\karl.AUCUNE-1D235B0F\Local Settings\Application Data\RobloxVersions
2010-01-14 16:38 . 2010-01-14 16:38 -------- d-----w- c:\documents and settings\karl.AUCUNE-1D235B0F\Application Data\Leadertech
2010-01-14 16:38 . 2010-01-14 16:38 -------- d-----w- C:\EPSONREG
2010-01-14 16:26 . 2004-02-27 10:01 79654 ----a-w- c:\windows\system32\E_FLM9AA.DLL
2010-01-14 16:26 . 2003-05-21 06:27 64000 ----a-w- c:\windows\system32\E_FBCB9AA.DLL
2010-01-14 16:26 . 2000-06-07 05:01 34304 ----a-w- c:\windows\system32\E_FBCH9AA.DLL
2010-01-14 16:26 . 2010-01-14 16:26 -------- d-----w- c:\windows\EPSON CardMonitor Essential
2010-01-14 16:26 . 2003-07-02 06:00 131072 ----a-w- c:\windows\system32\Epcmlib.dll
2010-01-14 16:25 . 2010-01-14 16:25 -------- d-----w- c:\windows\EPSON PhotoStarter Essential
2010-01-14 16:25 . 2010-01-14 16:28 -------- d-----w- c:\program files\epson
2010-01-14 16:25 . 2003-08-06 05:00 29184 ----a-w- c:\windows\system32\escwiadn.dll
2010-01-14 16:25 . 2003-07-01 05:00 46080 ----a-w- c:\windows\system32\escimgd.dll
2010-01-14 16:25 . 2003-07-01 05:00 22528 ----a-w- c:\windows\system32\esccmd.dll
2010-01-12 19:19 . 2009-11-21 15:58 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2010-01-11 08:59 . 2010-02-03 23:36 87160 ----a-w- c:\documents and settings\LocalService.AUTORITE NT\Local Settings\Application Data\FontCache3.0.0.0.dat
2010-01-10 21:49 . 2010-02-09 04:36 -------- d-----w- c:\documents and settings\karl.AUCUNE-1D235B0F\Local Settings\Application Data\Deployment
2010-01-10 06:31 . 2010-01-10 06:31 86576 ----a-w- c:\documents and settings\karl.AUCUNE-1D235B0F\Application Data\Microsoft\Services Windows Live\Raccourci Galerie de Photos Windows Live.exe
2010-01-10 06:31 . 2010-01-10 06:31 132672 ----a-w- c:\documents and settings\karl.AUCUNE-1D235B0F\Application Data\Microsoft\Services Windows Live\Raccourci Windows Live Messenger.exe
2010-01-10 06:31 . 2010-01-10 06:31 392728 ----a-w- c:\documents and settings\karl.AUCUNE-1D235B0F\Application Data\Microsoft\Services Windows Live\Services Windows Live.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-09 04:35 . 2007-05-31 03:25 -------- d-----w- c:\program files\Steam
2010-02-09 04:16 . 2010-02-09 02:24 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-02-09 02:25 . 2010-02-09 02:25 5115824 ----a-w- c:\documents and settings\All Users.WINDOWS\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2010-02-09 02:24 . 2010-02-09 02:24 -------- d-----w- c:\documents and settings\karl.AUCUNE-1D235B0F\Application Data\Malwarebytes
2010-02-08 21:19 . 2006-04-14 18:15 -------- d-----w- c:\program files\Warcraft III
2010-02-08 03:56 . 2009-07-19 02:25 -------- d-----w- c:\program files\Lavasoft
2010-02-08 03:56 . 2009-06-29 03:36 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\Lavasoft
2010-02-08 03:51 . 2006-03-29 22:03 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-02-07 22:27 . 2005-11-12 00:04 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-02-07 22:27 . 2008-10-10 15:44 -------- d-----w- c:\program files\Garena
2010-02-07 21:04 . 2005-12-13 03:03 -------- d-----w- c:\program files\LimeWire
2010-02-07 21:03 . 2006-07-31 17:57 -------- d-----w- c:\program files\Sony
2010-02-07 21:02 . 2005-11-13 20:03 -------- d-----w- c:\program files\Starcraft
2010-02-05 22:34 . 2009-01-07 07:25 -------- d-----w- c:\program files\BitComet
2010-02-04 23:25 . 2006-07-21 05:06 1100 ----a-w- c:\windows\system32\d3d8caps.dat
2010-02-02 23:43 . 2006-03-05 08:32 -------- d-----w- c:\program files\World of Warcraft
2010-01-31 03:13 . 2008-10-06 01:48 215104 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-01-26 04:01 . 2006-04-14 18:21 91647 ----a-w- c:\windows\War3Unin.dat
2010-01-22 08:18 . 2009-12-22 02:33 -------- d-----w- c:\program files\Microsoft Silverlight
2010-01-20 19:58 . 2009-12-21 23:04 79488 ----a-w- c:\documents and settings\karl.AUCUNE-1D235B0F\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2010-01-16 02:33 . 2008-10-06 01:48 138576 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-01-07 21:07 . 2010-02-09 02:24 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-03 23:59 . 2010-01-03 23:59 -------- dc-h--w- c:\documents and settings\All Users.WINDOWS\Application Data\{D2A6A317-7450-472F-8C72-17783BD2E5E3}
2010-01-03 23:59 . 2010-01-03 23:59 -------- d-----w- c:\program files\Viewer
2010-01-03 23:49 . 2010-01-03 23:49 -------- d-----w- c:\documents and settings\karl.AUCUNE-1D235B0F\Application Data\FUJIFILM
2009-12-24 21:31 . 2006-06-27 19:19 1331584 ----a-w- c:\program files\Tenacious D - Dear Penis.mp3
2009-12-24 00:46 . 2006-12-30 19:05 2934647 ----a-w- c:\program files\Eminem - Presents The Re-Up - 19 - Eminem 50 Cent - Ski Mask Way (Remix)-easymp3s.mp3
2009-12-24 00:46 . 2006-12-30 19:05 5283840 ----a-w- c:\program files\Eminem - Eminem Presents The Re-Up - You Don't Know (Ft. 50 Cent, Cashis & Lloyd Banks).mp3
2009-12-24 00:45 . 2006-08-03 00:50 -------- d-----w- c:\documents and settings\karl.AUCUNE-1D235B0F\Application Data\Apple Computer
2009-12-23 20:55 . 2006-12-30 19:03 5839654 ----a-w- c:\program files\G-Unit - Lay You Down.mp3
2009-12-22 19:05 . 2001-09-28 17:00 84526 ----a-w- c:\windows\system32\perfc00C.dat
2009-12-22 19:05 . 2001-09-28 17:00 510324 ----a-w- c:\windows\system32\perfh00C.dat
2009-12-22 02:33 . 2009-03-19 16:57 -------- d-----w- c:\program files\Windows Live
2009-12-22 02:33 . 2009-12-22 02:33 -------- d-----w- c:\program files\Microsoft Sync Framework
2009-12-22 02:32 . 2009-12-22 02:32 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2009-12-22 02:30 . 2009-12-22 02:30 -------- d-----w- c:\program files\Microsoft
2009-12-21 19:07 . 2004-08-04 04:54 916480 ------w- c:\windows\system32\wininet.dll
2009-11-21 15:58 . 2004-08-04 04:54 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
2008-11-24 03:31 . 2008-11-24 03:31 7168 --sha-w- c:\program files\Thumbs.db
2007-11-20 05:30 . 2007-11-20 05:26 4442072 ----a-w- c:\program files\Timberland and One Republic - Apologize.mp3
2007-09-02 16:40 . 2007-09-02 16:29 39839888 ----a-w- c:\program files\Elvis Presley - Video - My Way.avi
2007-09-02 16:36 . 2007-09-02 16:30 33219256 ----a-w- c:\program files\ Elvis Presley and Celine Dion- If I Can Dream (American Idol).mpg
2007-09-02 16:05 . 2007-09-02 16:00 40135480 ----a-w- c:\program files\Elvis Presley & Lisa Marie - Don't Cry Daddy (Rare Bootleg).mpg
2007-09-02 16:00 . 2007-09-02 16:00 1167481 ----a-w- c:\program files\lisa marie presley with elvis.mov
2007-09-02 15:59 . 2007-09-02 15:59 1167481 ----a-w- c:\program files\hound doggy elvis presly.mov
2007-09-02 15:59 . 2007-09-02 15:59 1167481 ----a-w- c:\program files\presley elvis loving you.mov
2007-09-02 15:59 . 2007-09-02 15:59 1167481 ----a-w- c:\program files\pretty women elvis presley.mov
2007-09-02 15:27 . 2007-09-02 15:12 2713025 ----a-w- c:\program files\Greace - John Travolta Grease - I Got Chills.mp3
2007-09-02 15:24 . 2007-09-02 15:20 5603706 ----a-w- c:\program files\Mandy Moore - Only Hope - A Walk to Remember(3).mp3
2007-09-02 15:23 . 2007-09-02 15:10 3475375 ----a-w- c:\program files\Grease Soundtrack - Summer Love.mp3
2007-09-02 15:21 . 2007-09-02 15:19 3514496 ----a-w- c:\program files\Kelly Clarkson - Because Of You.mp3
2007-09-02 15:18 . 2007-09-02 15:12 2097152 ----a-w- c:\program files\T-2729580-Greace - You're The One That I Want.mp3
2007-09-02 15:13 . 2007-09-02 15:13 3142112 ----a-w- c:\program files\Olivia Newton John - Hopelessly Devoted To You (Grease Soundtrack).mp3
2007-09-02 15:12 . 2007-09-02 15:12 1595940 ----a-w- c:\program files\Greese - Look At Me, I'm Sandra Dee.mp3
2007-09-02 15:12 . 2007-09-02 15:12 1595940 ----a-w- c:\program files\Grease Soundtrack - You're The One That I Want.mp3
2007-09-02 15:12 . 2007-09-02 15:11 2521088 ----a-w- c:\program files\Grease - John Travolta - Sandy.mp3
2007-09-02 15:12 . 2007-09-02 15:11 2873887 ----a-w- c:\program files\Grease soundtrack - We go together.mp3
2007-09-02 15:12 . 2007-09-02 15:11 3471151 ----a-w- c:\program files\greace - grease soundtrack - tell me more.mp3
2007-09-02 14:44 . 2007-09-02 14:30 5057862 ----a-w- c:\program files\Annie Villeneuve - Un Ange Qui Passe.mp3
2007-09-02 14:43 . 2007-09-02 14:36 5487814 ----a-w- c:\program files\Celine Dion - Im Your Lady.mp3
2007-09-02 14:43 . 2007-09-02 14:36 5487524 ----a-w- c:\program files\Celine Dion - The Power Of Love.mp3
2007-09-02 14:42 . 2007-09-02 14:30 4429157 ----a-w- c:\program files\Annie Villeneuve - Quand Je Ferme Les Yeux.mp3
2007-09-02 14:38 . 2007-09-02 14:31 4639050 ----a-w- c:\program files\Celine Dion & Barbara Streisand - Tell Him.mp3
2007-09-02 14:35 . 2007-09-02 14:30 4624801 ----a-w- c:\program files\Rihana - Unfaithfull.mp3
2007-09-02 14:34 . 2007-09-02 14:31 5033984 ----a-w- c:\program files\Celine Dion - I'm Alive.mp3
2007-09-02 14:31 . 2007-09-02 14:29 3066115 ----a-w- c:\program files\From Justin To Kelly Soundtrack - Timeless.mp3
2007-08-29 05:07 . 2007-08-29 05:07 4042964 ----a-w- c:\program files\Shop boyz- Party Like A Rockstarb.mp3
2007-08-27 23:54 . 2007-08-27 23:54 3463168 ----a-w- c:\program files\Linkin Park - In The End.mp3
2007-08-26 01:04 . 2007-08-26 01:04 3772163 ----a-w- c:\program files\Plain White T's - Hey There Delilah.mp3
2007-08-24 03:07 . 2007-08-24 03:04 4409472 ----a-w- c:\program files\Rahzell - Four Elements.mp3
2007-08-24 03:05 . 2007-08-24 03:04 6248448 ----a-w- c:\program files\Rahzell - Heavy Beat Boxing.mp3
2007-08-24 03:05 . 2007-08-24 03:04 4011496 ----a-w- c:\program files\Rahzell - The Human Beatbox.mp3
2007-08-24 03:05 . 2007-08-24 03:04 2152907 ----a-w- c:\program files\Beat Boxing - Rahzel - Freestyle Beatbox Session 2.mp3
2007-08-24 03:05 . 2007-08-24 03:04 3993600 ----a-w- c:\program files\Razelle - The Art Of Beatboxing.mp3
2007-08-24 03:04 . 2007-08-24 03:04 2014644 ----a-w- c:\program files\Rahzel - Mortal Kombat.mp3
2007-07-14 17:24 . 2007-07-14 17:20 6968609 ----a-w- c:\program files\Timbaland Feat. Nelly Furtado & Justin Timberlake - Give It To Me Aetoms Remix ( best than original 2007 Strasbourg France French Hot Hit Rap Crunk Pop Sex Fergie Lil J.mp3
2007-07-14 17:20 . 2007-07-14 17:20 5184566 ----a-w- c:\program files\Timbaland Feat. Justin Timberlake & Jay-Z-Laff At Em (Give It To Me Remix)-(RapGodFathers.com).mp3
2007-07-14 15:14 . 2007-07-14 15:13 5560434 ----a-w- c:\program files\System of A Down - Lost In Hollywood.mp3
2007-07-14 15:14 . 2007-07-14 15:13 4027156 ----a-w- c:\program files\System of a Down - Lonely Day.mp3
2007-07-14 15:14 . 2007-07-14 15:13 4872192 ----a-w- c:\program files\System of A Down - The Prison Song.mp3
2007-07-14 15:14 . 2007-07-14 15:13 5056330 ----a-w- c:\program files\System Of The Down - Chop Suey.mp3
2007-07-14 15:13 . 2007-07-14 15:13 4552832 ----a-w- c:\program files\System Of A Down - Hypnotize .mp3
2007-06-20 04:14 . 2007-06-20 04:13 3733716 ----a-w- c:\program files\Gritz - My Life Be Like.mp3
2007-06-20 04:14 . 2007-06-20 04:13 6028006 ----a-w- c:\program files\10 Gym Class Heroes - Take A Look At My Girlfriend.mp3
2007-06-20 04:13 . 2007-06-20 04:13 6027878 ----a-w- c:\program files\Gym Class Heroes- Cupids Choke hold.mp3
2007-05-25 15:40 . 2007-05-25 15:40 6289796 ----a-w- c:\program files\Desert_Wind-Misirlou-13.wma
2007-05-25 15:40 . 2007-05-25 15:33 5620946 ----a-w- c:\program files\Wolfmother - Woman.mp3
2007-05-25 15:39 . 2007-05-25 15:39 3591272 ----a-w- c:\program files\Dick Dale - Misirlou (Pulp Fiction Theme).mp3
2007-05-25 15:37 . 2007-05-25 15:36 5142569 ----a-w- c:\program files\Kansas - Carry On My Wayward Son.mp3
2007-05-25 15:34 . 2007-05-25 15:33 9723904 ----a-w- c:\program files\Lynard Skynard - Free Bird.mp3
2007-05-25 15:15 . 2007-05-25 15:15 5949555 ----a-w- c:\program files\Justin Timberlake - Summer Love.mp3
2007-05-25 15:11 . 2007-05-25 15:09 4817543 ----a-w- c:\program files\David Guetta vs The Egg - Love Don't Let Me Go.mp3
2007-05-25 15:10 . 2007-05-25 15:09 4618240 ----a-w- c:\program files\David Guetta vs The Egg - Love Dont Let Me Go vs Walking Away.mp3
2007-05-25 03:35 . 2007-05-25 03:26 3176372 ----a-w- c:\program files\David Guetta - Love Is Gone.mp3
2007-05-25 03:28 . 2007-05-25 03:26 6750439 ----a-w- c:\program files\David Guetta - Fuck me I'm Famous (Martin Solveig Mix).mp3
2007-05-25 03:28 . 2007-05-25 03:26 6406686 ----a-w- c:\program files\David Guetta - In Love With Myself.mp3
2007-05-25 03:27 . 2007-05-25 03:26 5234068 ----a-w- c:\program files\David Guetta - The World Is Mine.mp3
2007-05-25 03:26 . 2007-05-25 03:25 7008758 ----a-w- c:\program files\David Guetta - love don't let me go.mp3
2007-04-07 21:17 . 2007-04-07 20:41 6318605 ----a-w- c:\program files\Lord of the Rings - The Two Towers - Main Theme - Requiem for a Dream.mp3
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

además de eso, el combofix acaba de desinstalar mi antivirus… wow…

Desactive ton antivirus le temps de la manip ainsi que ton pare-feu si présent (car il est détecté à tort comme infection)
Télécharge List&Kill'em et enregistre-le sur ton bureau
Branche clés USB, disques durs externes, mp3, mp4, etc..
double-clique (clic droit "exécuter en tant qu'administrateur" pour Vista/7) sur le raccourci sur ton bureau pour lancer l'installation
coche la case "créer une icône sur le bureau"
une fois terminée, clique sur "terminer" et le programme se lancera seul
choisis la langue puis choisis l'option 1 = Mode Recherche
laisse travailler l'outil
à l'apparition de la fenêtre blanche, c'est un peu long, c'est normal, le programme n'est pas bloqué.
un rapport du nom de catchme apparaît sur ton bureau, ignore-le, ne le poste pas, mais ne le supprime pas pour l'instant, le scan n'est pas fini.
Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'écran "COMPLETED"
tu peux supprimer le rapport catchme.log de ton bureau maintenant.

List'em by g3n-h@ckm@n 1.2.5.0

User : karl (Administrators)
Update on 08/02/2010 by g3n-h@ckm@n ::::: 15.30
Start at: 16:27:29 | 2010-02-09
Contact : https://forums.commentcamarche.net/forum/virus-securite-7

Intel(R) Pentium(R) D CPU 2.80GHz
Microsoft Windows XP Professional (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Disabled
AV : AVG Anti-Virus Free 8.5 [ (!) Disabled | Updated ]

A:\ -> Floppy drive 3 1/2
C:\ -> Local fixed disk | 111.78 Go (13.11 Go free) | NTFS
D:\ -> CD-ROM

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Razer\DeathAdder\razerhid.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\Mixer.exe
C:\Program Files\Razer\DeathAdder\razerofa.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9AA.EXE
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\program files\steam\steam.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\WINDOWS\BricoPacks\Vista Inspirat II\RocketDock\RocketDock.exe
C:\WINDOWS\BricoPacks\Vista Inspirat II\YzShadow\YzShadow.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\List_Kill'em\List_Kill'em.scr
C:\WINDOWS\system32\cmd.exe
C:\Documents and Settings\karl.AUCUNE-1D235B0F\Local Settings\temp\35.tmp\pv.exe

======================
Keys "Run"
======================
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
SetDefaultMIDI REG_SZ MIDIDef.exe
Steam REG_SZ "c:\program files\steam\steam.exe" -silent
EA Core REG_SZ "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
LDM REG_SZ C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Logitech Utility REG_SZ Logi_MwX.Exe
NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
nwiz REG_SZ nwiz.exe /install
P17Helper REG_SZ Rundll32 SPIRun.dll,RunDLLEntry
Ulead AutoDetector REG_SZ C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
DeathAdder REG_SZ C:\Program Files\Razer\DeathAdder\razerhid.exe
SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe"
QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime
iTunesHelper REG_SZ "C:\Program Files\iTunes\iTunesHelper.exe"
NvMediaCenter REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
P17RunE REG_SZ RunDll32 P17RunE.dll,RunDLLEntry
C-Media Mixer REG_SZ Mixer.exe /startup
AVG8_TRAY REG_SZ C:\PROGRA~1\AVG\AVG8\avgtray.exe
RTHDCPL REG_SZ RTHDCPL.EXE
EPSON Stylus CX4600 Series REG_SZ C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9AA.EXE /P26 "EPSON Stylus CX4600 Series" /O6 "USB001" /M "Stylus CX4600"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

=====================
Other Keys
=====================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
dontdisplaylastusername REG_DWORD 0 (0x0)
legalnoticecaption REG_SZ
legalnoticetext REG_SZ
shutdown_without_logon REG_DWORD 1 (0x1)
undock_without_logon REG_DWORD 1 (0x1)
DisableRegistryTools REG_DWORD 0 (0x0)

===============
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
NoDriveTypeAutoRun REG_DWORD 323 (0x143)
NoDriveAutoRun REG_DWORD 67108863 (0x3ffffff)
NoDrives REG_DWORD 0 (0x0)

===============
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
HonorAutoRunSetting REG_DWORD 1 (0x1)
NoDriveAutoRun REG_DWORD 67108863 (0x3ffffff)
NoDriveTypeAutoRun REG_DWORD 323 (0x143)
NoDrives REG_DWORD 0 (0x0)

===============
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
AppInit_DLLS REG_SZ C:\WINDOWS\system32\wbsys.dll

===============
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
AutoRestartShell REG_DWORD 1 (0x1)
DefaultDomainName REG_SZ AUCUNE-1D235B0F
DefaultUserName REG_SZ karl
LegalNoticeCaption REG_SZ
LegalNoticeText REG_SZ
PowerdownAfterShutdown REG_SZ 0
ReportBootOk REG_SZ 1
Shell REG_SZ Explorer.exe
ShutdownWithoutLogon REG_SZ 0
System REG_SZ
Userinit REG_SZ C:\WINDOWS\system32\userinit.exe,
VmApplet REG_SZ rundll32 shell32,Control_RunDLL "sysdm.cpl"
SfcQuota REG_DWORD -1 (0xffffffff)
allocatecdroms REG_SZ 0
allocatedasd REG_SZ 0
allocatefloppies REG_SZ 0
cachedlogonscount REG_SZ 10
forceunlocklogon REG_DWORD 0 (0x0)
passwordexpirywarning REG_DWORD 14 (0xe)
scremoveoption REG_SZ 0
AllowMultipleTSSessions REG_DWORD 1 (0x1)
UIHost REG_EXPAND_SZ logonui.exe
LogonType REG_DWORD 0 (0x0)
Background REG_SZ 0 0 0
DebugServerCommand REG_SZ no
SFCDisable REG_DWORD 0 (0x0)
WinStationsDisabled REG_SZ 0
HibernationPreviouslyEnabled REG_DWORD 1 (0x1)
ShowLogonOptions REG_DWORD 1 (0x1)
AltDefaultUserName REG_SZ karl
AltDefaultDomainName REG_SZ AUCUNE-1D235B0F
SfcScan REG_DWORD 0 (0x0)
ChangePasswordUseKerberos REG_DWORD 1 (0x1)

===============
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\crypt32chain]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cryptnet]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cscdll]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\dimsntfy]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ScCertProp]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Schedule]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\sclgntfy]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\SensLogn]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\termsrv]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WB]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WgaLogon]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wlballoon]

===============
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
{AEB6717E-7E19-11d0-97EE-00C04FD91972} REG_SZ

===============
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
%windir%\system32\sessmgr.exe REG_SZ %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe REG_SZ C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe:*:Enabled:backWeb-8876480
C:\Program Files\HLSW\hlsw.exe REG_SZ C:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW
C:\Program Files\Steam\Steam.exe REG_SZ C:\Program Files\Steam\Steam.exe:*:Enabled:Steam
C:\Program Files\Ventrilo\Ventrilo.exe REG_SZ C:\Program Files\Ventrilo\Ventrilo.exe:*:Enabled:Ventrilo
C:\Program Files\Steam\SteamApps\bayer88\counter-strike\hl.exe REG_SZ C:\Program Files\Steam\SteamApps\bayer88\counter-strike\hl.exe:*:Enabled:Half-Life Launcher
C:\Program Files\Steam\SteamApps\bayer88\counter-strike source\hl2.exe REG_SZ C:\Program Files\Steam\SteamApps\bayer88\counter-strike source\hl2.exe:*:Enabled:hl2
C:\WINDOWS\system32\dpvsetup.exe REG_SZ C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test
C:\Program Files\World of Warcraft\WoW-1.5.1.4449-to-1.9.0.4937-enUS-downloader.exe REG_SZ C:\Program Files\World of Warcraft\WoW-1.5.1.4449-to-1.9.0.4937-enUS-downloader.exe:*:Enabled:Blizzard Downloader
C:\Program Files\World of Warcraft\WoW-1.9.2.4996-to-1.9.3.5059-enUS-downloader.exe REG_SZ C:\Program Files\World of Warcraft\WoW-1.9.2.4996-to-1.9.3.5059-enUS-downloader.exe:*:Enabled:Blizzard Downloader
C:\Program Files\mIRC\mirc.exe REG_SZ C:\Program Files\MIRC\mirc.exe:*:Enabled:mIRC
C:\Program Files\Warcraft III\War3.exe REG_SZ C:\Program Files\Warcraft III\War3.exe:*:Enabled:Warcraft III
C:\Program Files\World of Warcraft\WoW-1.9.4.5086-to-1.10.0.5195-enUS-downloader.exe REG_SZ C:\Program Files\World of Warcraft\WoW-1.9.4.5086-to-1.10.0.5195-enUS-downloader.exe:*:Enabled:Blizzard Downloader
C:\Program Files\Warcraft III\Frozen Throne.exe REG_SZ C:\Program Files\Warcraft III\Frozen Throne.exe:*:Enabled:Warcraft III - The Frozen Throne
C:\StubInstaller.exe REG_SZ C:\StubInstaller.exe:*:Enabled:LimeWire swarmed installer
C:\Program Files\World of Warcraft\BackgroundDownloader.exe REG_SZ C:\Program Files\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader
C:\Program Files\World of Warcraft\WoW-1.10.2.5302-to-1.11.0.5428-enUS-downloader.exe REG_SZ C:\Program Files\World of Warcraft\WoW-1.10.2.5302-to-1.11.0.5428-enUS-downloader.exe:*:Enabled:Blizzard Downloader
C:\Program Files\World of Warcraft\WoW-1.11.1.5462-to-1.11.2.5464-enUS-downloader.exe REG_SZ C:\Program Files\World of Warcraft\WoW-1.11.1.5462-to-1.11.2.5464-enUS-downloader.exe:*:Enabled:Blizzard Downloader
C:\Program Files\Messenger\msmsgs.exe REG_SZ C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger
C:\Program Files\Warcraft III\Warcraft III.exe REG_SZ C:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III
C:\Program Files\World of Warcraft\WoW-1.11.2.5464-to-1.12.0.5595-enUS-downloader.exe REG_SZ C:\Program Files\World of Warcraft\WoW-1.11.2.5464-to-1.12.0.5595-enUS-downloader.exe:*:Enabled:Blizzard Downloader
C:\Program Files\World of Warcraft\WoW-1.12.0.5595-to-1.12.1.5875-enUS-downloader.exe REG_SZ C:\Program Files\World of Warcraft\WoW-1.12.0.5595-to-1.12.1.5875-enUS-downloader.exe:*:Enabled:Blizzard Downloader
C:\Program Files\Steam\SteamApps\bayer88\day of defeat\hl.exe REG_SZ C:\Program Files\Steam\SteamApps\bayer88\day of defeat\hl.exe:*:Enabled:Half-Life Launcher
C:\Program Files\World of Warcraft\WoW-2.0.3-enUS-downloader.exe REG_SZ C:\Program Files\World of Warcraft\WoW-2.0.3-enUS-downloader.exe:*:Enabled:Blizzard Downloader
C:\Program Files\World of Warcraft\WoW-2.0.3.6299-to-2.0.5.6320-enUS-downloader.exe REG_SZ C:\Program Files\World of Warcraft\WoW-2.0.3.6299-to-2.0.5.6320-enUS-downloader.exe:*:Enabled:Blizzard Downloader
C:\Program Files\World of Warcraft\WoW-2.0.5.6320-to-2.0.6.6337-enUS-downloader.exe REG_SZ C:\Program Files\World of Warcraft\WoW-2.0.5.6320-to-2.0.6.6337-enUS-downloader.exe:*:Enabled:Blizzard Downloader
C:\Program Files\World of Warcraft\WoW-2.0.6.6337-to-2.0.7.6383-enUS-downloader.exe REG_SZ C:\Program Files\World of Warcraft\WoW-2.0.6.6337-to-2.0.7.6383-enUS-downloader.exe:*:Enabled:Blizzard Downloader
C:\Program Files\World of Warcraft\WoW-2.0.7.6383-to-2.0.8.6403-enUS-downloader.exe REG_SZ C:\Program Files\World of Warcraft\WoW-2.0.7.6383-to-2.0.8.6403-enUS-downloader.exe:*:Enabled:Blizzard Downloader
C:\Program Files\World of Warcraft\WoW-2.0.8.6403-to-2.0.10.6448-enUS-downloader.exe REG_SZ C:\Program Files\World of Warcraft\WoW-2.0.8.6403-to-2.0.10.6448-enUS-downloader.exe:*:Enabled:Blizzard Downloader
C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe REG_SZ C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe:*:Enabled:Remote Assistance - Windows Messenger and Voice
C:\Program Files\World of Warcraft\WoW-2.0.10.6448-to-2.0.12.6546-enUS-downloader.exe REG_SZ C:\Program Files\World of Warcraft\WoW-2.0.10.6448-to-2.0.12.6546-enUS-downloader.exe:*:Enabled:Blizzard Downloader
C:\WINDOWS\system32\PnkBstrA.exe REG_SZ C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA
C:\WINDOWS\system32\PnkBstrB.exe REG_SZ C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB
C:\Program Files\Mozilla Firefox\firefox.exe REG_SZ C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox
C:\Program Files\Warcraft III\pickup.listchecker.exe REG_SZ C:\Program Files\Warcraft III\pickup.listchecker.exe:*:Enabled:pickup.listchecker
C:\Program Files\Electronic Arts\EADM\Core.exe REG_SZ C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager
C:\Program Files\Java\jre6\bin\java.exe REG_SZ C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary
C:\Program Files BitComet\BitComet.exe REG_SZ C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client
C:\Program Files Aspyr\Guitar Hero III\GH3.exe REG_SZ C:\Program Files\Aspyr\Guitar Hero III\GH3.exe:*:Enabled:Guitar Hero III
C:\Program Files\iTunes\iTunes.exe REG_SZ C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes
C:\Program Files\World of Warcraft\Launcher.exe REG_SZ C:\Program Files\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher
C:\Program Files\Steam\steamapps\common\insaniquarium deluxe\InsaniquariumDeluxe.exe REG_SZ C:\Program Files\Steam\steamapps\common\insaniquarium deluxe\InsaniquariumDeluxe.exe:*:Enabled:Insaniquarium Deluxe Demo
C:\Games\DotA Allstars\DotA Allstars.exe REG_SZ C:\Games\DotA Allstars\DotA Allstars.exe:*:Enabled:DotA Allstars
C:\Program Files\AVG\AVG8\avgemc.exe REG_SZ C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe
C:\Program Files\AVG\AVG8\avgupd.exe REG_SZ C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe
C:\Program Files\AVG\AVG8\avgnsx.exe REG_SZ C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe
%windir%\Network Diagnostic\xpnetdiag.exe REG_SZ %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
C:\Program Files\Windows Live\Messenger\wlcsdk.exe REG_SZ C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call
C:\Program Files\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-enUS-downloader.exe REG_SZ C:\Program Files\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-enUS-downloader.exe:*:Enabled:Blizzard Downloader
C:\Program Files\Windows Live\Messenger\msnmsgr.exe REG_SZ C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe REG_SZ C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare
C:\Documents and Settings\karl.AUCUNE-1D235B0F\Local Settings\Apps\2.0\B2NYP7OP.EX1\L33H515C.EE1\curs..tion_eee711038731a406_0004.0000_1430d97334050788\CurseClient.exe REG_SZ C:\Documents and Settings\karl.AUCUNE-1D235B0F\Local Settings\Apps\2.0\B2NYP7OP.EX1\L33H515C.EE1\curs..tion_eee711038731a406_0004.0000_1430d97334050788\CurseClient.exe:*:Enabled:Curse Client 4.0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
%windir%\system32\sessmgr.exe REG_SZ %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
C:\Program Files\MSN Messenger\msncall.exe REG_SZ C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)
C:\Program Files\MSN Messenger\livecall.exe REG_SZ C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)
%windir%\Network Diagnostic\xpnetdiag.exe REG_SZ %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
C:\Program Files\Windows Live\Messenger\wlcsdk.exe REG_SZ C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call
C:\Program Files\Windows Live\Messenger\msnmsgr.exe REG_SZ C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe REG_SZ C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare

===============
ActivX controls
===============
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\CabBuilder
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{20A60F0D-9AFA-4515-A0FD-83BD84642501}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{33564D57-0000-0010-8000-00AA00389B71}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{5D6F45B3-9043-443D-A792-115447494D24}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{C3F79A2B-B9B4-4A66-B012-3EE46475B072}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{D27CDB6E-AE6D-11CF-96B8-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{F5A7706B-B9C0-4C89-A715-7A0C6B05DD48}

===============
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{26923b43-4d38-484f-9b9e-de460746276c}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10072CEC-8CC1-11D1-986E-00A0C955B42F}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{166B1BCA-3F9C-11CF-8075-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{233C1507-6A77-46A4-9443-F871F945D258}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{283807B5-2C60-11D0-A31D-00AA00B92C03}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2A202491-F00D-11cf-87CC-0020AFEECF20}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{36f8ec70-c29a-11d1-b5c7-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3af36230-a269-11d1-b5bf-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3bf42070-b3b1-11d1-b5c5-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{411EDCF7-755D-414E-A74B-3DCD6583F589}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4278c270-a269-11d1-b5bf-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA855-CC51-11CF-AAFA-00AA00B6015F}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{45ea75a0-a269-11d1-b5bf-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f216970-c90c-11d1-b5c7-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f645220-306d-11d2-995d-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5945c046-1e7d-11d1-bc44-00c04fd912be}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5A8D6EE0-3E18-11D0-821E-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5fd399c0-a70a-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{630b1da0-b465-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}
HKEY_LOCAL_MACHINE\ software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4340}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4383}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9381D8F2-0288-11D0-9501-00AA00B911A5}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C9E9A340-D1F1-11D0-821E-444553540600}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CC2A9BA0-3BDD-11D0-821E-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CDD7975E-60F8-41d5-8149-19E51D6F71D0}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D27CDB6E-AE6D-11cf-96B8-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{DAA94A2A-2A8D-4D3B-9DB8-56FBECED082D}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{de5aed00-a4bf-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E92B03AB-B707-11d2-9CBD-0000F87A369E}

==============
BHO :
======
[<no name=""> REG_SZ ]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{53707962-6F74-2D53-2644-206D7942484F}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{ecdee021-0d17-467f-a1ff-c7a115230949}]

================
Internet Explorer :
================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ https://www.msn.com/fr-fr/?ocid=iehp

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ https://www.msn.com/fr-fr

========
Services
========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]

Ndisuio : 0x3 ( OK = 3 )
EapHost : 0x3 ( OK = 2 )
SharedAccess : 0x2 ( OK = 2 )
wuauserv : 0x2 ( OK = 2 )

=========
Atapi.sys
=========

%%%% HASHDEEP-1.0
%%%% size,md5,sha256,filename
## Invoked from: C:\Documents and Settings\karl.AUCUNE-1D235B0F\Local Settings\temp\35.tmp
## C:\> hashdeep C:\WINDOWS\System32\Drivers\atapi.sys
##
96512,9f3a2f5aa6875c72bf062c712cfa2674,b4df1d2c56a593c6b54de57395e3b51d288f547842893b32b0f59228a0cf70b9,C:\WINDOWS\System32\Drivers\atapi.sys

Sources
=======

C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
C:\WINDOWS\ERDNT\cache\atapi.sys
C:\WINDOWS\ServicePackFiles\i386\atapi.sys
C:\WINDOWS\system32\drivers\atapi.sys
C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\i386\atapi.sys
C:\WINDOWS\system32\ReinstallBackups\0018\DriverFiles\i386\atapi.sys
C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\i386\atapi.sys

Référence :
==========

Win XP_32b : a64013e98426e1877cb653685c5c0009
Win XP_SP2_32b : CDFE4411A69C224BD1D11B2DA92DAC51
Win XP_SP3_32b : 9F3A2F5AA6875C72BF062C712CFA2674
Vista_32b : e03e8c99d15d0381e02743c36afc7c6f
Vista_SP1_32b : 2d9c903dc76a66813d350a562de40ed9
Vista_SP2_32b : 1F05B78AB91C9075565A9D8A4B880BC4
Vista_SP2_64b : 1898FAE8E07D97F2F6C2D5326C633FAC
Windows 7_32b : 80C40F7FDFC376E4C5FEEC28B41C119E
Windows 7_64b : 02062C0B390B7729EDC9E69C680A6F3C

=======
Drive :
=======

Disk Defragmenter Windows
Copyright (c) 2001 Microsoft Corp. and Executive Software International Inc.

Analysis Report
112 GB total, 13.11 GB free (11%), 26% fragmented (file fragmentation 52%)

You should defragment this volume.

¤¤¤¤¤¤¤¤¤¤ Files/folders :

Present !! : C:\Documents and Settings\All Users.WINDOWS\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
Present !! : C:\Documents and Settings\All Users.WINDOWS\Application Data\QTSBandwidthCache
Present !! : C:\Program Files\DAEMON Tools Toolbar
Present !! :</no>

ok entonces me haces descargar un montón de cosas en mi ordenador y luego… nada cambia todavía… siguen saliendo todas las páginas de búsqueda a centenas… es cansado esto… ni siquiera puedo controlar mi teclado… cuántos pasos me quedan antes de que pare…

haz la opción 2 de list_kill'em y publica el informe

a propósito te digo que tu PC está lleno de suciedad
--
♦G3и-н@¢км@и™©®♦

No dudo ni un instante !! haha gracias igual por ayudar, lo aprecio mucho. te lo envío en 2 segundos, pero hay alguna forma de que charlemos más rápido que así, como MSN o lo que sea.. es solo para la ayuda al fin y al cabo.

No tengo nada instalado como mensajería instantánea en este PC y prefiero no mezclar CCM y MSN
--
◆G3на-@кмa™©®

tienes razón MSN no es compatible con CCM

Kill'em by g3n-h@ckm@n 1.2.5.0

User : karl (Administrateurs)
Update on 08/02/2010 by g3n-h@ckm@n ::::: 15.30
Start at: 20:47:27 | 2010-02-09
Contact : https://forums.commentcamarche.net/forum/virus-securite-7

Intel(R) Pentium(R) D CPU 2.80GHz
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Disabled
AV : AVG Anti-Virus Free 8.5 [ (!) Disabled | Updated ]

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local | 111,78 Go (13,11 Go free) | NTFS
D:\ -> Disque CD-ROM

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Razer\DeathAdder\razerhid.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\Mixer.exe
C:\Program Files\Razer\DeathAdder\razerofa.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9AA.EXE
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\WINDOWS\BricoPacks\Vista Inspirat II\RocketDock\RocketDock.exe
C:\WINDOWS\BricoPacks\Vista Inspirat II\YzShadow\YzShadow.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Windows Live\Messenger\wlcsdk.exe
C:\Program Files\List_Kill'em\List_Kill'em.scr
C:\WINDOWS\system32\cmd.exe
C:\Documents and Settings\karl.AUCUNE-1D235B0F\Local Settings\temp\4E0.tmp\ERUNT.EXE
C:\Documents and Settings\karl.AUCUNE-1D235B0F\Local Settings\temp\4E0.tmp\pv.exe

Detections :
==========

¤¤¤¤¤¤¤¤¤¤ Files/folders :

Quarantined & Deleted !! : C:\Documents and Settings\All Users.WINDOWS\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
Quarantined & Deleted !! : C:\Documents and Settings\All Users.WINDOWS\Application Data\QTSBandwidthCache
Quarantined & Deleted !! : C:\Program Files\DAEMON Tools Toolbar
Quarantined & Deleted !! : C:\Program Files\WinPCap
Quarantined & Deleted !! : C:\WINDOWS\002891_.tmp
Quarantined & Deleted !! : C:\WINDOWS\SET3.tmp
Quarantined & Deleted !! : C:\WINDOWS\SET4.tmp
Quarantined & Deleted !! : C:\WINDOWS\SET8.tmp
Quarantined & Deleted !! : C:\WINDOWS\iun6002.exe
Quarantined & Deleted !! : C:\WINDOWS\mbr.exe
Quarantined & Deleted !! : C:\WINDOWS\newname.dat

Quarantined & Deleted !! : C:\WINDOWS\System32\drivers\etc\hosts.msn
Quarantined & Deleted !! : C:\WINDOWS\system32\drivers\npf.sys
Quarantined & Deleted !! : C:\WINDOWS\system32\Packet.dll
Quarantined & Deleted !! : C:\WINDOWS\system32\pthreadVC.dll
Quarantined & Deleted !! : C:\WINDOWS\System32\SET97.tmp
Quarantined & Deleted !! : C:\WINDOWS\System32\SETB5.tmp
Quarantined & Deleted !! : C:\WINDOWS\System32\SETC1.tmp
Quarantined & Deleted !! : C:\WINDOWS\system32\WanPacket.dll
Quarantined & Deleted !! : C:\WINDOWS\system32\wpcap.dll
Quarantined & Deleted !! : C:\Documents and Settings\karl.AUCUNE-1D235B0F\application data\Cosmos Prefs
Quarantined & Deleted !! : C:\Documents and Settings\karl.AUCUNE-1D235B0F\Local Settings\Application Data\Kiwee Toolbar
Quarantined & Deleted !! : C:\Documents and Settings\karl.AUCUNE-1D235B0F\LOCAL Settings\Temp\EAD1B.exe
Quarantined & Deleted !! : C:\Documents and Settings\karl.AUCUNE-1D235B0F\LOCAL Settings\Temp\IadHide4.dll

==============
host file OK !
==============

========
Registry
========

Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{0E5CBF21-D15F-11D0-8301-00AA005B4383}
Deleted : HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives
Deleted : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives
Deleted : "HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}"
Deleted : "HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}"
Deleted : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Install.exe"
Deleted : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe"
Deleted : "HKLM\Software\Trymedia Systems"
Deleted : HKCR\CLSID\{248dd896-bb45-11cf-9abc-0080c7e7b78d}
Deleted : HKCR\CLSID\{248dd897-bb45-11cf-9abc-0080c7e7b78d}
Deleted : HKCR\CLSID\{6E15D3C4-C6FC-4F02-B130-77CC5B1F09DB}
Deleted : HKCR\CLSID\{E03BAFDC-EB9D-4C35-A7A2-AB6C62FF0A68}
Deleted : HKCR\CLSID\{E6375F37-E4D1-4F51-B651-4658C27AC5BF}
Deleted : HKCR\Interface\{248dd892-bb45-11cf-9abc-0080c7e7b78d}
Deleted : HKCR\Interface\{248dd893-bb45-11cf-9abc-0080c7e7b78d}
Deleted : HKCR\interface\{5663B370-F3C3-40D1-9C46-0E800AA4D0E8}
Deleted : HKCR\KiweeIEToolbar.KiweeToolbar
Deleted : HKCR\KiweeIEToolbar.KiweeToolbar.1
Deleted : HKCR\KiweeIEToolbar.ToolbarInfo
Deleted : HKCR\KiweeIEToolbar.ToolbarInfo.1
Deleted : HKCR\TypeLib\{248dd890-bb45-11cf-9abc-0080c7e7b78d}
Deleted : HKCR\Typelib\{259EEB17-79AA-44DF-8410-8E55F82A902A}
Deleted : HKCR\Typelib\{C7403C30-3644-43D8-A82F-4BD84B9682D9}
Deleted : HKCU\Software\AGI
Deleted : HKLM\Software\Classes\Interface\{DB885111-F39F-4D88-9EE5-C88460B6DF7B}
Deleted : HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_NPF
Deleted : HKLM\SYSTEM\ControlSet002\Services\npf
Deleted : HKLM\SYSTEM\ControlSet003\Enum\Root\LEGACY_NPF
Deleted : HKLM\SYSTEM\ControlSet003\Services\npf
Deleted : HKLM\SYSTEM\ControlSet004\Enum\Root\LEGACY_NPF
Deleted : HKLM\SYSTEM\ControlSet004\Services\npf
========
Services
=========

Ndisuio : Start = 3
EapHost : Start = 2
Ip6Fw : Start = 2
SharedAccess : Start = 2
wuauserv : Start = 2
wscsvc : Start = 2

============
Disk Cleaned
============

=================
anti-ver blaster : OK !!
=================

================
Prefetch cleaned
================

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

actualiza Malwarebytes y realiza un análisis completo y publica el informe por favor
--
◊G3ю-нукмa™©®◊

Malwarebytes' Anti-Malware 1.44
Database version: 3717
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

2010-02-09 22:04:57
mbam-log-2010-02-09 (22-04-57).txt

Scan type: Quick Scan
Objects scanned: 145916
Time elapsed: 6 minute(s), 27 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

sigue diciendo todavía muchas cosas y tengo problem with my keyboard; ¿tienes que reiniciar? ¿o hay más cosas que hacer antes?

Tengo muchoyyyy necesidad de ayuda, esto ya se está volviendo realmente agotador y con todo lo que tengo en mi ordenador no me apetece reformatarlo, sobre todo porque no tengo ningún problema para hacerlo y no sé de qué manera hacerlo, así que probablemente llegue un momento en que haga desaparecer esta estupidez de mi ordenador, gracias de nuevo

hola, ehhh... ¿qué problemas persisten?
--
G3à-nà@nkf@™©®

1. Mi teclado deja de funcionar y escribe un montón de asdasdadsadfadasdadasdadasdasdasdasd sin parar durante un cierto tiempo
2. si estoy en un juego mi ventana sigue redescendiéndose, realmente fatiga
3. muchas páginas de búsqueda de Windows aparecen cuando hago clic para cerrar una, se abre otra y no deja de aparecer, puede llegar hasta 70 como vale.

así que en resumen eso es lo que me pasa muy, muy a menudo y casi no tengo control de mi ordenador, apenas si puedo hacer algo encima ahora.. con todos los escaneos y eso, nada cambia en absoluto! no sé qué hay en mi ordenador pero es realmente una mierda, jajaj.

cambiar de teclado para ver ??
--
◊G3о-ня@¢кфа@™©®◊