Virus BOO/TDss.M

O81 - IFC: Internet Feature Controls [HKUS\.DEFAULT] [FEATURE_BROWSER_EMULATION] -- svchost.exe
O81 - IFC: Internet Feature Controls [HKUS\S-1-5-18] [FEATURE_BROWSER_EMULATION] -- svchost.exe
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\ForceRenive]
[HKCR\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF]
[HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\daemon tools toolbar]
C:\Documents and Settings\Vincent\Local Settings\Application Data\Crazyloader Air
O4 - HKLM\..\Run: [RDesc] Clé orpheline
O23 - Service:  (FileZilla Server) - Clé orpheline
O64 - Services: CurCS - C:\Windows\system32\drivers\EagleXNt.sys (.not file.) - EagleXNt (EagleXNt)  .(...) - LEGACY_EAGLEXNT
O64 - Services: CurCS - C:\Windows\system32\XDva362.sys (.not file.) - XDva362 (XDva362)  .(...) - LEGACY_XDVA362
O64 - Services: CurCS - C:\Windows\system32\XDva385.sys (.not file.) - XDva385 (XDva385)  .(...) - LEGACY_XDVA385
O87 - FAEL: "TCP Query User{05FC2F78-9B2E-4982-B1ED-24BA72B6F593}C:\users\vincent\appdata\local\temp\rar$ex00.459\ivmp-svr.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\vincent\appdata\local\temp\rar$ex00.459\ivmp-svr.exe (.not file.) 
O87 - FAEL: "UDP Query User{4110276E-A54B-4C14-BB31-D87CA5A638E6}C:\users\vincent\appdata\local\temp\rar$ex00.459\ivmp-svr.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\vincent\appdata\local\temp\rar$ex00.459\ivmp-svr.exe (.not file.)
O87 - FAEL: "TCP Query User{854857A0-D265-481C-864B-AFA35FA16E64}C:\users\vincent\appdata\local\temp\rar$ex00.959\ivmp-svr.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\vincent\appdata\local\temp\rar$ex00.959\ivmp-svr.exe (.not file.)
O87 - FAEL: "UDP Query User{E67F3D85-859C-4D74-B497-2B7EDF8B94A6}C:\users\vincent\appdata\local\temp\rar$ex00.959\ivmp-svr.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\vincent\appdata\local\temp\rar$ex00.959\ivmp-svr.exe (.not file.)
O87 - FAEL: "{A1429440-4319-4B17-AC46-7E314B499AE8}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files\EA Play\Create Demo\pc\Create.exe (.not file.)
O87 - FAEL: "{091F7BDD-E01F-4925-BFB7-323E380B863F}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files\EA Play\Create Demo\pc\Create.exe (.not file.)
O87 - FAEL: "{78A9AC75-DA93-45B0-807B-B09AD4F9B721}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files\World of Warcraft Public Test\Launcher.patch.exe (.not file.)
O87 - FAEL: "{361F1D50-6D81-4E92-BA8E-80CA545CCBED}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files\World of Warcraft Public Test\Launcher.patch.exe (.not file.)
O87 - FAEL: "TCP Query User{D58B968D-F505-45F6-A270-C2738130A0A1}C:\users\vincent\desktop\server minecraft\mcsharp cli.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\vincent\desktop\server minecraft\mcsharp cli.exe (.not file.) 
O87 - FAEL: "UDP Query User{C6141588-CB26-4E24-AC6F-EF6C6BF79BBC}C:\users\vincent\desktop\server minecraft\mcsharp cli.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\vincent\desktop\server minecraft\mcsharp cli.exe (.not file.)
O87 - FAEL: "{571A020D-DFB9-4FB1-AB6C-9FA9AF7F8B69}" |In - Public - P17 - TRUE | .(...) -- C:\users\vincent\desktop\server minecraft\mcsharp cli.exe (.not file.)
O87 - FAEL: "{9A391E8B-F66E-4939-9EA8-48DAF05E297D}" |In - Public - P6 - TRUE | .(...) -- C:\users\vincent\desktop\server minecraft\mcsharp cli.exe (.not file.) 
O87 - FAEL: "TCP Query User{3825A325-13CC-402C-8D8B-EDFB3FB1AB63}C:\users\vincent\desktop\serveur minecraft 2\mclawl.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\vincent\desktop\serveur minecraft 2\mclawl.exe (.not file.)
O87 - FAEL: "UDP Query User{BD1D76DD-9E56-47D2-B64A-11869749AB85}C:\users\vincent\desktop\serveur minecraft 2\mclawl.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\vincent\desktop\serveur minecraft 2\mclawl.exe (.not file.)
O87 - FAEL: "{F287F4C3-575C-460D-B14D-FE26519CD1CA}" |In - Public - P17 - TRUE | .(...) -- C:\users\vincent\desktop\serveur minecraft 2\mclawl.exe (.not file.)
O87 - FAEL: "{3805F098-350D-4F60-9349-AC36D407C988}" |In - Public - P6 - TRUE | .(...) -- C:\users\vincent\desktop\serveur minecraft 2\mclawl.exe (.not file.)
O87 - FAEL: "{2A9D33DF-8A63-4445-9487-6E6C21C7D1AE}" |In - Public - P17 - TRUE | .(...) -- C:\users\vincent\desktop\server minecraft\zicores minecraft admin.exe (.not file.)
O87 - FAEL: "{D5779E16-81D6-4E8C-90B5-AD92F055A36D}" |In - Public - P6 - TRUE | .(...) -- C:\users\vincent\desktop\server minecraft\zicores minecraft admin.exe (.not file.)
O87 - FAEL: "{8908D0D0-8DC5-4C58-9F8F-DD555C365017}" |In - Public - P17 - TRUE | .(...) -- C:\users\vincent\appdata\local\temp\rar$ex00.718\zicores minecraft admin.exe (.not file.)
O87 - FAEL: "{0F6EAD24-7820-44D3-A915-648D8C877178}" |In - Public - P6 - TRUE | .(...) -- C:\users\vincent\appdata\local\temp\rar$ex00.718\zicores minecraft admin.exe (.not file.)
O87 - FAEL: "{7D84EA19-66CB-4870-BEF9-5E8EBAB7FC34}" |In - Public - P17 - TRUE | .(...) -- C:\users\vincent\appdata\local\temp\rar$ex82.702\zicores minecraft admin.exe (.not file.)
O87 - FAEL: "{DCEC1F13-CFFD-44E6-93BE-55878CF42674}" |In - Public - P6 - TRUE | .(...) -- C:\users\vincent\appdata\local\temp\rar$ex82.702\zicores minecraft admin.exe (.not file.)
EmptyTemp