[Virus] cmdservice Fermé

Question

Bonjour,
je suis infecté par cmd service
après une passe avec avg anti spyware, voici le log de HJT en mode sans echec

Merci pour le coup de main

Logfile of HijackThis v1.99.1
Scan saved at 11:39:52, on 09/11/06
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\fpodevin\Mes documents\Perso\Download\AntiSpam\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://SECSERVER:80/array.dll?Get.Routing.Script
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http://SECSERVER:80
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {A8BD6820-6ED7-423E-9558-2D1486B0FEEA} - C:\Program Files\DeluxeCommunications\DxcBho.dll
F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {23A973E4-3321-453C-A2B6-943D2AA1853C} - C:\Program Files\Messenger
ixykeb.dll (file missing)
O2 - BHO: SolidConverter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\ExploreExtPDF.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: DeskbarBHO - {A8B28872-3324-4CD2-8AA3-7D555C872D96} - C:\Program Files\Deskbar\deskbar.dll (file missing)
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdmcks.dll
O3 - Toolbar: SolidConverter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\ExploreExtPDF.dll
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro	ype32.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [Iomega Automatic Backup 1.0.1] C:\Program Files\Iomega\Iomega Automatic Backup\ibackup.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [removecpl] RemoveCpl.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [StatusClient 2.6] C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup 2.5] C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe
O4 - HKLM\..\Run: [MediaFace Integration] C:\Program Files\Fellowes\MediaFACE 4.2\SetHook.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [keyboard] C:\kybrdff_e52.exe
O4 - HKLM\..\Run: [defender] C:\dfndrff_e52.exe
O4 - HKLM\..\Run: [DeluxeCommunications] C:\Program Files\DeluxeCommunications\Dxc.exe
O4 - HKLM\..\Run: [windows] C:\windows_e52.exe
O4 - HKLM\..\Run: [newname] c:\nwnmff_e52.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\RunOnce: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe -autorun
O4 - HKCU\..\Run: [Iomega Automatic Backup] C:\Program Files\Iomega\Iomega Automatic Backup\ibackup.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [DeluxeCommunications] C:\Program Files\DeluxeCommunications\Dxc.exe
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 4.0\Distillr\AcroTray.exe
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger le site avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlpage.htm
O8 - Extra context menu item: Télécharger les tous avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: KOAD Recherche - {669695BC-A811-4A9D-8CDF-BA8C795F261A} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: stibo - {FFAD3420-6D61-44F6-BA25-293F17152D79} - C:\Program Files\Fichiers communs\Stibo\RS_ProtocolHandler.dll
O20 - AppInit_DLLs: dxclib303562752.dll
O20 - Winlogon Notify: ShellCompatibility - C:\WINDOWS\system32\EqifView.dll (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVSync Manager (AvSynMgr) - Unknown owner - C:\Program Files\Network Associates\VirusScan\Avsynmgr.exe
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\VXRpbGlzYXRldXIgTUlDUkVM\command.exe (file missing)
O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: InterBase Guardian (InterBaseGuardian) - Borland Software Corporation - C:\Program Files\Borland\InterBase\bin\ibguard.exe
O23 - Service: InterBase Server (InterBaseServer) - Borland Software Corporation - C:\Program Files\Borland\InterBase\bin\ibserver.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: McShield - Network Associates, Inc. - C:\Program Files\Fichiers communs\Network Associates\McShield\Mcshield.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\spool\drivers\w32x86\3\HPZipm12.exe
O23 - Service: SentinelProtectionServer - SafeNet, Inc - C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe

Utilisateur anonyme · Answer

Bonjour

Il n'y a pas que ça.

1. Télécharge Combofix.exe (par sUBs) sur ton Bureau
http://download.bleepingcomputer.com/sUBs/combofix.exe 

2. Double clique combofix.exe et suis les invites.

3. Lorsque le scan sera complété, un rapport apparaîtra. 
Copie/colle ce rapport dans ta prochaine réponse avec un nouveau HijackThis.

Fred56 · Answer

Merci,

il faut le lancer comme HJT en mose sans echec ?

Utilisateur anonyme · Answer

Non, en mode normal.
Et poste aussi le rapport HijackThis en mode normal.

Fred56 · Answer

Voila ce que tu m'as demandé:

fpodevin - 06-11-09 13:45:08,82    Service Pack 2
ComboFix 06.11.9 - Running from: "C:\Documents and Settings\fpodevin\Bureau"

(((((((((((((((((((((((((((((((((((((((((((((   Look2Me's Log   ))))))))))))))))))))))))))))))))))))))))))))))))))
 
REGISTRY ENTRIES REMOVED:

[HKEY_CLASSES_ROOT\clsid\{D91B90F1-3785-41CD-BD37-307ED027B17D}]
@=""
"IDEx"="ADDR"

[HKEY_CLASSES_ROOT\clsid\{D91B90F1-3785-41CD-BD37-307ED027B17D}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\clsid\{D91B90F1-3785-41CD-BD37-307ED027B17D}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\clsid\{D91B90F1-3785-41CD-BD37-307ED027B17D}\InprocServer32]
@="C:\WINDOWS\system32\EqifView.dll"
"ThreadingModel"="Apartment"
 
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *


 Granting sedebugprivilege to Administrateurs   ... successful


(((((((((((((((((((((((((((((((((((((((((((   E-Give / Ssk's Log   )))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\system32\dxclib303562752.dll
C:\Documents and Settings\fpodevin\Application Data\Dxccwrd.dll
C:\Documents and Settings\fpodevin\Application Data\Dxcknwrd.dll
C:\Documents and Settings\fpodevin\Application Data\Dxcuknwrd.dll
C:\WINDOWS\system32\bkd.exe
C:\Program Files\DeluxeCommunications\DxcBho.dll
C:\Program Files\DeluxeCommunications\DxcCore.dll


* * *  POST RUN FILES/FOLDERS  * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *


((((((((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
 

C:\dfndrff_e17.exe
C:\dfndrff_e23.exe
C:\dfndrff_e25.exe
C:\dfndrff_e26.exe
C:\dfndrff_e30.exe
C:\dfndrff_e31.exe
C:\dfndrff_e49.exe
C:\dfndrff_e50.exe
C:\dfndrff_e51.exe
C:\deskbar_e14.exe
C:\deskbar_e17.exe
C:\deskbar_e20.exe
C:\deskbar_e25.exe
C:\deskbar_e26.exe
C:\deskbar_e29.exe
C:\deskbar_e31.exe
C:\deskbar_e49.exe
C:\deskbar_e50.exe
C:\deskbar_e51.exe
C:\deskbar_e52.exe
C:\kybrdff_e23.exe
C:\kybrdff_e31.exe
C:\kybrdff_e49.exe
C:\kybrdff_e50.exe
C:\kybrdff_e51.exe
C:\kybrdff_e52.exe
C:\MTE3NDI6ODoxNgnew.exe
C:
wnmff_e51.exe
C:\Documents and Settings\fpodevin\Local Settings\Temporary Internet Files\Content.IE5\0JYZIJFC\dfndrff_e[1].exe
C:\Documents and Settings\fpodevin\Local Settings\Temporary Internet Files\Content.IE5\9VW7Y5K0\dfndrff_e[1].exe
C:\Documents and Settings\fpodevin\Local Settings\Temporary Internet Files\Content.IE5\9VW7Y5K0\dfndrff_e[2].exe
C:\Documents and Settings\fpodevin\Local Settings\Temporary Internet Files\Content.IE5\9VW7Y5K0\dfndrff_e_uit[1].exe
C:\Documents and Settings\fpodevin\Local Settings\Temporary Internet Files\Content.IE5\IWXH715T\dfndrff_e_uit[2].exe
C:\Documents and Settings\fpodevin\Local Settings\Temporary Internet Files\Content.IE5\9VW7Y5K0\deskbar_e[2].exe
C:\Documents and Settings\fpodevin\Local Settings\Temporary Internet Files\Content.IE5\CHEFKHMJ\deskbar_e[1].exe
C:\Documents and Settings\fpodevin\Local Settings\Temporary Internet Files\Content.IE5\CHEFKHMJ\kybrdff_e[1].exe
C:\Documents and Settings\fpodevin\Local Settings\Temporary Internet Files\Content.IE5\CHEFKHMJ\kybrdff_e[2].exe
C:\Documents and Settings\fpodevin\Local Settings\Temporary Internet Files\Content.IE5\9VW7Y5K0\MTE3NDI6ODoxNg[1].exe
C:\Documents and Settings\fpodevin\Local Settings\Temporary Internet Files\Content.IE5\0JYZIJFC
wnmff_e[1].exe
C:\Documents and Settings\fpodevin\Local Settings\Temporary Internet Files\Content.IE5\9VW7Y5K0
wnmff_e[1].exe
C:\Documents and Settings\fpodevin\Local Settings\Temporary Internet Files\Content.IE5\CHEFKHMJ
wnmff_e[1].exe
C:\Documents and Settings\fpodevin\Local Settings\Temporary Internet Files\Content.IE5\CHEFKHMJ
wnmff_e[2].exe
C:\ac3_0010.exe
C:\RDFX4.exe
C:\secure32.html
C:\WINDOWS\uninstall_nmon.vbs
C:\Program Files
etwork monitor
C:\WINDOWS\VXRpbGlzYXRldXIgTUlDUkVM

 
(((((((((((((((((((((((((((((((   Files Created from 2006-10-09 to 2006-11-09  ))))))))))))))))))))))))))))))))))
 
 
2006-11-09	09:21	3,968	--a------	C:\WINDOWS\system32\drivers\AvgAsCln.sys
2006-11-09	00:00	430,080	--a------	C:\windows_e52.exe
2006-11-08	08:31	442,368	--a------	C:\windows_e51.exe
2006-10-18	23:00	310,482	--a------	C:\Colo2.exe.vir
2006-10-17	10:22	20,000	---------	C:\WINDOWS\system32\drivers\cmapusb.sys
2006-10-17	10:22	18,013	---------	C:\WINDOWS\system32\drivers\cmap_pc2.sys
2006-10-17	10:22	16,088	---------	C:\WINDOWS\system32\drivers\cmapldr.sys
2006-10-12	10:59	98,370	--a------	C:\WINDOWS\system32\CmengDriver.dll
2006-10-11	08:53	52,736	--a------	C:\WINDOWS\system32\drivers\Ssipddp.sys
2006-10-11	08:53	47,616	--a------	C:\WINDOWS\system32\drivers\Ssipddpm.sys
2006-10-09	14:30	23,040	--a------	C:\WINDOWS\system32\drivers\aksusb.sys
2006-10-09	14:29	634,880	--a------	C:\WINDOWS\system32\Gsprop32.dll
2006-10-09	14:29	423,016	--a------	C:\WINDOWS\system32\Gsw32.exe
2006-10-09	14:29	246,848	--a------	C:\WINDOWS\system32\RICHED.DLL
2006-10-09	14:29	242,816	--a------	C:\WINDOWS\system32\Gswag32.dll
2006-10-09	14:29	180,224	--a------	C:\WINDOWS\system32\GLUT32.DLL
2006-10-09	14:29	152,688	--a------	C:\WINDOWS\system32\Gswdll32.dll
2006-10-09	07:36	20,000	---------	C:\WINDOWS\system32\drivers\cmapfp.sys
2006-10-09	07:36	18,392	---------	C:\WINDOWS\system32\drivers\cmapldfp.sys


((((((((((((((((((((((((((((((((((((((((((((((((   Find3M Report   )))))))))))))))))))))))))))))))))))))))))))))))))))))	


2006-11-09 13:54	--------	d--------	C:\Documents and Settings\fpodevin\Application Data\Free Download Manager
2006-11-09 13:45	--------	d--------	C:\Documents and Settings\fpodevin\Application Data\Skype
2006-11-09 13:43	--------	d--------	C:\Documents and Settings\fpodevin\Application Data\SolidDocuments
2006-11-09 11:45	--------	d--------	C:\Program Files\eMule
2006-11-09 09:30	--------	d--------	C:\Program Files\Mozilla Thunderbird
2006-11-09 09:21	--------	d--------	C:\Program Files\Grisoft
2006-11-07 07:54	--------	d--------	C:\Program Files\Messenger
2006-10-17 10:20	--------	d--------	C:\Program Files\Navimail
2006-10-17 07:23	--------	d--h-----	C:\Program Files\InstallShield Installation Information
2006-10-16 09:31	--------	d--------	C:\Program Files\WinHTTrack
2006-10-12 10:38	--------	d--------	C:\Program Files\C-Map
2006-10-11 08:53	--------	d--------	C:\Program Files\Transas
2006-10-11 08:53	--------	d--------	C:\Program Files\Fichiers communs\Transas Shared
2006-10-11 08:53	--------	d--------	C:\Program Files\Fichiers communs
2006-10-11 08:24	--------	d--------	C:\Program Files\Fichiers communs\Fugawi
2006-10-11 08:24	--------	d--------	C:\Program Files\Earth Resource Mapping
2006-10-09 07:36	--------	d--------	C:\Program Files\SafeNet Sentinel
2006-10-09 07:36	--------	d--------	C:\Program Files\Fichiers communs\SafeNet Sentinel
2006-10-09 07:30	--------	d--------	C:\Program Files\MaxSea International
2006-10-06 13:34	--------	d--------	C:\Program Files\SentEmul
2006-10-05 16:43	--------	d--------	C:\Program Files\Fichiers communs\Services
2006-10-05 15:23	--------	d--------	C:\Program Files\Fugawi
2006-10-05 09:36	--------	d--------	C:\Program Files\SeaClear
2006-10-02 15:54	--------	d--------	C:\Program Files\GT Interactive
2006-09-29 14:00	--------	d--------	C:\Documents and Settings\fpodevin\Application Data\Adobe
2006-09-27 07:45	--------	d--------	C:\Program Files\Adobe
2006-09-26 10:18	--------	d--------	C:\Program Files\GXTranscoder v2
2006-09-26 10:17	--------	d--------	C:\Program Files\ReNamer
2006-09-25 11:15	--------	d--------	C:\Program Files\Fichiers communs\Adobe
2006-09-25 11:13	--------	d--------	C:\Program Files\Fichiers communs\Adobe Systems Shared
2006-09-25 11:06	--------	d--------	C:\Program Files\CDBurnerXP Pro 3
2006-09-22 16:01	--------	d--------	C:\Documents and Settings\fpodevin\Application Data\Opera
2006-09-22 13:03	--------	d--------	C:\Program Files\Smart Projects
2006-09-21 08:27	--------	d--------	C:\Program Files\XviD
2006-09-21 08:27	--------	d--------	C:\Program Files\x264
2006-09-21 08:27	--------	d--------	C:\Program Files\Windows Media Player
2006-09-21 08:27	--------	d--------	C:\Program Files\MSN Messenger
2006-09-21 08:27	--------	d--------	C:\Program Files\Movie Maker
2006-09-21 08:27	--------	d--------	C:\Program Files\LimeWire
2006-09-21 08:27	--------	d--------	C:\Program Files\Label Creator
2006-09-21 08:27	--------	d--------	C:\Program Files\Free Download Manager
2006-09-21 07:39	--------	d--------	C:\Program Files\Help Workshop
2006-09-20 10:18	--------	d--------	C:\Program Files\Corel
2006-09-20 10:07	12314	--ahs----	C:\WINDOWS\system32\KGyGaAvL.sys
2006-09-20 10:06	--------	d--------	C:\Documents and Settings\fpodevin\Application Data\Corel
2006-09-20 09:09	--------	d--------	C:\Program Files\Fichiers communs\Corel
2006-09-18 09:48	--------	d--------	C:\Program Files\Skype
2006-09-14 14:29	--------	d--------	C:\Program Files\av
 
 
((((((((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))
 
*Note* empty entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversionun]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe"
"Free Download Manager"="C:\Program Files\Free Download Manager\fdm.exe -autorun"
"Iomega Automatic Backup"="C:\Program Files\Iomega\Iomega Automatic Backup\ibackup.exe"
"MsnMsgr"="\"C:\Program Files\MSN Messenger\MsnMsgr.Exe\" /background"
"NBJ"="\"C:\Program Files\Ahead\Nero BackItUp\NBJ.exe\""
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1"
"BitTorrent"="\"C:\Program Files\BitTorrent\bittorrent.exe\" --force_start_minimized"
"Skype"="\"C:\Program Files\Skype\Phone\Skype.exe\" /nosplash /minimized"
"eMuleAutoStart"="C:\Program Files\eMule\emule.exe -AutoStart"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun]
"C-Media Mixer"="Mixer.exe /startup"
"type32"="\"C:\Program Files\Microsoft IntelliType Pro\type32.exe\""
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe"
"QuickTime Task"="\"C:\Program Files\QuickTime\qttask.exe\" -atboottime"
"TkBellExe"="\"C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe\"  -osboot"
"Iomega Automatic Backup 1.0.1"="C:\Program Files\Iomega\Iomega Automatic Backup\ibackup.exe"
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe"
"removecpl"="RemoveCpl.exe"
"IntelliPoint"="\"C:\Program Files\Microsoft IntelliPoint\point32.exe\""
"Cmaudio"="RunDll32 cmicnfg.cpl,CMICtrlWnd"
"EoEngine"=""
"EoWeather"=""
"EoClock"=""
"StatusClient 2.6"="C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe /auto"
"TomcatStartup 2.5"="C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe"
"MediaFace Integration"="C:\Program Files\Fellowes\MediaFACE 4.2\SetHook.exe"
"Windows Defender"="\"C:\Program Files\Windows Defender\MSASCui.exe\" -hide"
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe"
"ISUSPM Startup"="\"C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe\" -startup"
"ISUSScheduler"="\"C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe\" -start"
"windows"="C:\\windows_e52.exe"
"!AVG Anti-Spyware"="\"C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe\" /minimized"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun\OptionalComponents\MAPI]
"NoChange"="1"
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000000

[HKEY_USERS\.default\software\microsoft\windows\currentversionun]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversionun]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"="Microsoft AntiMalware ShellExecuteHook"
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
"EditLevel"=dword:00000000
"NoRun"=dword:00000000
"NoClose"=dword:00000000
"NoFileMenu"=dword:00000000
"NoCommonGroups"=dword:00000000

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"UseDesktopIniCache"=dword:00000000
"NoRemoteRecursiveEvents"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorerun]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"
"WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]	
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

 
Contents of the 'Scheduled Tasks' folder
C:\WINDOWS	asks\Demande_evolution.job
C:\WINDOWS	asks\Fred.job
C:\WINDOWS	asks\MP Scheduled Scan.job

Completion time: 06-11-09 13:59:16.32 
C:\ComboFix.txt ... 06-11-09 13:59

---------------------------------------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 14:05:40, on 09/11/06
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Network Associates\VirusScan\Avsynmgr.exe
C:\WINDOWS\system32\crypserv.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Borland\InterBase\bin\ibguard.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
C:\Program Files\Network Associates\VirusScan\VsStat.exe
C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Network Associates\VirusScan\Vshwin32.exe
C:\Program Files\Borland\InterBase\bin\ibserver.exe
C:\Program Files\Network Associates\VirusScan\Avconsol.exe
C:\Program Files\Fichiers communs\Network Associates\McShield\Mcshield.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\Mixer.exe
C:\Program Files\Microsoft IntelliType Pro	ype32.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Iomega\Iomega Automatic Backup\ibackup.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\windows_e52.exe
C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Adobe\Acrobat 4.0\Distillr\AcroTray.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\fpodevin\Mes documents\Perso\Download\AntiSpam\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://SECSERVER:80/array.dll?Get.Routing.Script
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http://SECSERVER:80
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {A8BD6820-6ED7-423E-9558-2D1486B0FEEA} - C:\Program Files\DeluxeCommunications\DxcBho.dll
F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {23A973E4-3321-453C-A2B6-943D2AA1853C} - C:\Program Files\Messenger
ixykeb.dll (file missing)
O2 - BHO: SolidConverter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\ExploreExtPDF.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {6711B62F-A3D4-413B-83F0-00CEDEA0CAEB} - C:\Program Files\Messenger
ixykeb.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdmcks.dll
O3 - Toolbar: SolidConverter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\ExploreExtPDF.dll
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro	ype32.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [Iomega Automatic Backup 1.0.1] C:\Program Files\Iomega\Iomega Automatic Backup\ibackup.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [removecpl] RemoveCpl.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [StatusClient 2.6] C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup 2.5] C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe
O4 - HKLM\..\Run: [MediaFace Integration] C:\Program Files\Fellowes\MediaFACE 4.2\SetHook.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [windows] C:\windows_e52.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [DeluxeCommunications] C:\Program Files\DeluxeCommunications\Dxc.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe -autorun
O4 - HKCU\..\Run: [Iomega Automatic Backup] C:\Program Files\Iomega\Iomega Automatic Backup\ibackup.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [DeluxeCommunications] C:\Program Files\DeluxeCommunications\Dxc.exe
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 4.0\Distillr\AcroTray.exe
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger le site avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlpage.htm
O8 - Extra context menu item: Télécharger les tous avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: KOAD Recherche - {669695BC-A811-4A9D-8CDF-BA8C795F261A} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: stibo - {FFAD3420-6D61-44F6-BA25-293F17152D79} - C:\Program Files\Fichiers communs\Stibo\RS_ProtocolHandler.dll
O20 - AppInit_DLLs: dxclib303562752.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVSync Manager (AvSynMgr) - Unknown owner - C:\Program Files\Network Associates\VirusScan\Avsynmgr.exe
O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: InterBase Guardian (InterBaseGuardian) - Borland Software Corporation - C:\Program Files\Borland\InterBase\bin\ibguard.exe
O23 - Service: InterBase Server (InterBaseServer) - Borland Software Corporation - C:\Program Files\Borland\InterBase\bin\ibserver.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: McShield - Network Associates, Inc. - C:\Program Files\Fichiers communs\Network Associates\McShield\Mcshield.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\spool\drivers\w32x86\3\HPZipm12.exe
O23 - Service: SentinelProtectionServer - SafeNet, Inc - C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe

Utilisateur anonyme · Answer

On continue le ménage.

Une partie de la procédure se déroulera sans avoir accès à internet, prière d'imprimer ces instructions, ou de les coller dans un fichier texte, pour lecture durant cette désinfection.
Les  manipulations sont à faire sans interruption et dans l'ordre.
Si tu ne comprends pas quelque chose, demande des explications avant de commencer

1 Télécharge 
CCleaner.
http://www.filehippo.com/download_ccleaner.html
Installe le dans un répertoire dédié.

clean.zip
http://www.malekal.com/download/clean.zip 
Décompresse-le sur ton bureau (clic droit / extraire tout), tu dois obtenir un dossier clean. 

2 Redémarre en mode sans échec. Attention, tu n'as pas accès à internet dans ce mode, note bien ce que tu as à faire.
Démarre l'ordinateur.
Une fois le chargement du BIOS terminé, il y a un écran noir. Appuye sur la touche F8 ou F5 jusqu'à l'affichage du menu des options avancées de Windows. 
En utilisant les touches du curseur, sélectionne le mode sans échec approprié et appuye sur Entrée.

3 Relance un scan HijackThis et coche les lignes ci-dessous :

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank 
R3 - URLSearchHook: (no name) - {A8BD6820-6ED7-423E-9558-2D1486B0FEEA} - C:\Program Files\DeluxeCommunications\DxcBho.dll 
F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe 
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll 
O2 - BHO: (no name) - {23A973E4-3321-453C-A2B6-943D2AA1853C} - C:\Program Files\Messenger
ixykeb.dll (file missing) 
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime 
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe" -osboot 
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe 
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -startup 
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start 
O4 - HKLM\..\Run: [windows] C:\windows_e52.exe 
O4 - HKLM\..\Run: [DeluxeCommunications] C:\Program Files\DeluxeCommunications\Dxc.exe 
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1 
O4 - HKCU\..\Run: [DeluxeCommunications] C:\Program Files\DeluxeCommunications\Dxc.exe 
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll 
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll 
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU) 
O20 - AppInit_DLLs: dxclib303562752.dll 

Ferme toutes les fenêtres Windows, Internet explorer, Outlook,sauf le logiciel Hijackthis et clique sur « Fix checked »

4 Assure toi d'avoir accés à tous les fichiers.
Démarrer, Poste de travail ou autre dossier, Menu Outils, Option des dossiers, onglet Affichage :
Activer la case : Afficher les fichiers et dossiers cachés
Désactiver la case : Masquer les extensions des fichiers dont le type est connu
Désactiver la case : Masquer les fichiers protégés du système d'exploitation
Puis Appliquer

5 Désinstalle ces applications (si tu les trouves) dans Ajout-Suppression de programmes :

DeluxeCommunications

6 Supprime les fichiers/dossiers incriminés (s'ils existent encore) :

C:\Program Files\DeluxeCommunications
C:\windows_e52.exe 

7 Lance le nettoyage avec CCleaner

Recache les fichiers systeme afin de ne pas faire d'erreur à l'avenir en sélectionnant ne pas afficher les fichiers cachés ou les fichiers système.

8 Ouvre le dossier Clean qui se trouve sur ton bureau.
Double-clic sur clean.cmd.
Une fenêtre noire va apparaître, suis les consignes

9 Redémarre normalement

Poste un nouveau log HijackThis avec le rapport qui se trouve ici C:apport_clean.txt.

Fred56 · Answer

Salut, 
tu trouveras ci dessous les rapport demandés, par contre il m'est impossible de suprimer le répertoire DeluxeCommunication, XP me dit qu'il est utilisé par un autre processus.

deplus je ne peux plus utiliser mon explorateur windows quand je souhaite parcourir un dossier il me fait une erreur

Merci encore de ton aide


Script clean par Malekal_morte - http://www.malekal.com 

Microsoft Windows XP [version 5.1.2600]
Script execute en mode sans echec 
 
*** Suppression de fichiers sur C: 
C:\MTE*NDI6ODoxNg*.exe FOUND 
C:\RDFX?.exe FOUND 
C:\StubInstaller.exe FOUND 
 
*** Suppression des fichiers dans C:\WINDOWS\ 
C:\WINDOWS\keyboard*.dat FOUND 
C:\WINDOWS
ewname.dat FOUND 
C:\WINDOWS\smdat32m.sys FOUND 
C:\WINDOWS\UnGins.exe FOUND 
C:\WINDOWS\uniq FOUND 
 
*** Suppression des fichiers dans C:\WINDOWS\system32 
C:\WINDOWS\system32\wupdmgr.exe FOUND 
"C:\WINDOWS\Downloaded Program Files\CONFLICT.1" FOUND 
"C:\WINDOWS\Downloaded Program Files\CONFLICT.2" FOUND 
"C:\Documents and Settings\fpodevin\Application Data\Dxcdmns.dll" FOUND 
"C:\Documents and Settings\fpodevin\Application Data\Dxcknwrd.dll" FOUND 
 
"C:\Program Files\Mozilla Firefox\plugins\NPNd2fn.dll" FOUND 


-----------------------------------------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 07:57:19, on 10/11/06
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Network Associates\VirusScan\Avsynmgr.exe
C:\WINDOWS\system32\crypserv.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Borland\InterBase\bin\ibguard.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
C:\Program Files\Network Associates\VirusScan\VsStat.exe
C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
C:\Program Files\Network Associates\VirusScan\Vshwin32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Borland\InterBase\bin\ibserver.exe
C:\Program Files\Fichiers communs\Network Associates\McShield\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\Avconsol.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\Microsoft IntelliType Pro	ype32.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe
C:\Program Files\Adobe\Acrobat 4.0\Distillr\AcroTray.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
C:\WINDOWS\explorer.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\fpodevin\Mes documents\Perso\Download\AntiSpam\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://SECSERVER:80/array.dll?Get.Routing.Script
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http://SECSERVER:80
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {A8BD6820-6ED7-423E-9558-2D1486B0FEEA} - C:\Program Files\DeluxeCommunications\DxcBho.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: SolidConverter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\ExploreExtPDF.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdmcks.dll
O3 - Toolbar: SolidConverter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\ExploreExtPDF.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro	ype32.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [removecpl] RemoveCpl.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [StatusClient 2.6] C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup 2.5] C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe
O4 - HKLM\..\Run: [MediaFace Integration] C:\Program Files\Fellowes\MediaFACE 4.2\SetHook.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [DeluxeCommunications] C:\Program Files\DeluxeCommunications\Dxc.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe -autorun
O4 - HKCU\..\Run: [Iomega Automatic Backup] C:\Program Files\Iomega\Iomega Automatic Backup\ibackup.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [DeluxeCommunications] C:\Program Files\DeluxeCommunications\Dxc.exe
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 4.0\Distillr\AcroTray.exe
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger le site avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlpage.htm
O8 - Extra context menu item: Télécharger les tous avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: KOAD Recherche - {669695BC-A811-4A9D-8CDF-BA8C795F261A} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: stibo - {FFAD3420-6D61-44F6-BA25-293F17152D79} - C:\Program Files\Fichiers communs\Stibo\RS_ProtocolHandler.dll
O20 - AppInit_DLLs: dxclib303562752.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVSync Manager (AvSynMgr) - Unknown owner - C:\Program Files\Network Associates\VirusScan\Avsynmgr.exe
O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: InterBase Guardian (InterBaseGuardian) - Borland Software Corporation - C:\Program Files\Borland\InterBase\bin\ibguard.exe
O23 - Service: InterBase Server (InterBaseServer) - Borland Software Corporation - C:\Program Files\Borland\InterBase\bin\ibserver.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: McShield - Network Associates, Inc. - C:\Program Files\Fichiers communs\Network Associates\McShield\Mcshield.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\spool\drivers\w32x86\3\HPZipm12.exe
O23 - Service: SentinelProtectionServer - SafeNet, Inc - C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe

Malekal_morte- · Answer

Essaye ça pour ton erreur sur les dossiers :
Ménu Démarrer / executer et tape : regsvr32.exe -u shmedia.dll
clic sur OK.
Un message avec réussi ou successfull doit apparître.

Redémarre l'ordinateur.

DeluxeCommunications se désinstalle très bien par ajout/suppression de programmes.
Essaye de le désinstaller par là.

Poste un nouveau rapport HijackThis ET :

- Télécharge DiagHelp.zip sur ton bureau :http://www.malekal.com/download/DiagHelp.zip
- Ne double-clic pas dessus !! Fais un clic droit sur le fichier et extraire tout
- Un nouveau dossier chercher va être créé DiagHelp
- Ouvre le et double-clic sur go.cmd (le .cmd peut ne pas apparaître)
- Une fenêtre va s'ouvrir, choisis [b]l'option 1[/b]
- L'analyse va commencer, ceci peut durer quelques minutes, laisse faire et appuie sur une touche quand on te le demande
- Copie/colle le contenu du bloc-note qui s'ouvre, pour cela :
         -- Dans le bloc-note, cliquez sur le menu Edition / Selectionner tout
         -- A nouveau menu Edition / copier
         -- Dans un nouveau message ici, faire un clic droit / coller

Fred56 · Answer

Tu trouveras ci-dessous les 2 rapports, par contre je ne peux tjrs pas parcourir mes dossiers par un DoubleCLick, j'ai un message: ******************************* Runtime Error ! Program: c:\windows\explorer.exe This application..... ***************************** --------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 09:53:48, on 10/11/06 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\Network Associates\VirusScan\Avsynmgr.exe C:\WINDOWS\system32\crypserv.exe C:\WINDOWS\system32\inetsrv\inetinfo.exe C:\Program Files\Borland\InterBase\bin\ibguard.exe C:\PROGRA~1\Iomega\System32\AppServices.exe C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe C:\Program Files\Network Associates\VirusScan\VsStat.exe C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe C:\Program Files\Network Associates\VirusScan\Vshwin32.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Borland\InterBase\bin\ibserver.exe C:\Program Files\Fichiers communs\Network Associates\McShield\Mcshield.exe C:\Program Files\Network Associates\VirusScan\Avconsol.exe C:\WINDOWS\Mixer.exe C:\Program Files\Microsoft IntelliType Pro ype32.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\Microsoft IntelliPoint\point32.exe C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe C:\Program Files\Picasa2\PicasaMediaDetector.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Free Download Manager\fdm.exe C:\Program Files\eMule\emule.exe C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe C:\Program Files\Adobe\Acrobat 4.0\Distillr\AcroTray.exe C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe C:\WINDOWS\system32\wuauclt.exe C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\WINDOWS\explorer.exe C:\Documents and Settings\fpodevin\Mes documents\Perso\Download\AntiSpam\HijackThis.exe R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://SECSERVER:80/array.dll?Get.Routing.Script R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http://SECSERVER:80 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: (no name) - {A8BD6820-6ED7-423E-9558-2D1486B0FEEA} - C:\Program Files\DeluxeCommunications\DxcBho.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: SolidConverter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\ExploreExtPDF.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdmcks.dll O3 - Toolbar: SolidConverter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\ExploreExtPDF.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro ype32.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [removecpl] RemoveCpl.exe O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe" O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [StatusClient 2.6] C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe /auto O4 - HKLM\..\Run: [TomcatStartup 2.5] C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe O4 - HKLM\..\Run: [MediaFace Integration] C:\Program Files\Fellowes\MediaFACE 4.2\SetHook.exe O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [DeluxeCommunications] C:\Program Files\DeluxeCommunications\Dxc.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe -autorun O4 - HKCU\..\Run: [Iomega Automatic Backup] C:\Program Files\Iomega\Iomega Automatic Backup\ibackup.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized O4 - HKCU\..\Run: [DeluxeCommunications] C:\Program Files\DeluxeCommunications\Dxc.exe O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 4.0\Distillr\AcroTray.exe O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm O8 - Extra context menu item: Télécharger le site avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlpage.htm O8 - Extra context menu item: Télécharger les tous avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra button: KOAD Recherche - {669695BC-A811-4A9D-8CDF-BA8C795F261A} - C:\WINDOWS\System32\shdocvw.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/... O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/... O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab O18 - Protocol: stibo - {FFAD3420-6D61-44F6-BA25-293F17152D79} - C:\Program Files\Fichiers communs\Stibo\RS_ProtocolHandler.dll O20 - AppInit_DLLs: dxclib303562752.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: AVSync Manager (AvSynMgr) - Unknown owner - C:\Program Files\Network Associates\VirusScan\Avsynmgr.exe O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe O23 - Service: InterBase Guardian (InterBaseGuardian) - Borland Software Corporation - C:\Program Files\Borland\InterBase\bin\ibguard.exe O23 - Service: InterBase Server (InterBaseServer) - Borland Software Corporation - C:\Program Files\Borland\InterBase\bin\ibserver.exe O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe O23 - Service: McShield - Network Associates, Inc. - C:\Program Files\Fichiers communs\Network Associates\McShield\Mcshield.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\spool\drivers\w32x86\3\HPZipm12.exe O23 - Service: SentinelProtectionServer - SafeNet, Inc - C:\Program Files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe ------------------------------------------------------------------------------ C:\WINDOWS\System32\FNTCACHE.DAT -->09/11/06 14:50:45 C:\WINDOWS\System32\dxclib303562752.dll -->09/11/06 14:01:18 C:\WINDOWS\System32\bkd.exe -->09/11/06 14:01:00 C:\WINDOWS\System32\wpa.dbl -->09/11/06 08:03:36 C:\WINDOWS\System32\perfh00C.dat -->07/11/06 07:53:52 C:\WINDOWS\System32\perfh009.dat -->07/11/06 07:53:51 C:\WINDOWS\System32\perfc00C.dat -->07/11/06 07:53:51 C:\WINDOWS\System32\perfc009.dat -->07/11/06 07:53:51 C:\WINDOWS\System32\PerfStringBackup.INI -->07/11/06 07:53:46 C:\WINDOWS\System32\lictest.log -->11/10/06 08:25:27 C:\WINDOWS\System32\config.nt -->09/10/06 14:34:31 C:\WINDOWS\System32\d3d9caps.dat -->09/10/06 07:53:01 C:\WINDOWS\System32\esnecil.ind -->09/10/06 07:38:37 C:\WINDOWS\System32\esnecil.nlp -->06/10/06 10:49:50 C:\WINDOWS\System32\d3d8caps.dat -->05/10/06 16:15:54 C:\WINDOWS\System32\waste.bsr -->05/10/06 15:26:01 C:\WINDOWS\System32\jeterr35.GID -->25/09/06 07:36:49 C:\WINDOWS\System32\MSACAL.TWD -->21/09/06 07:25:42 C:\WINDOWS\System32\KGyGaAvL.sys -->20/09/06 10:07:54 C:\WINDOWS\System32\ffastlog.txt -->15/09/06 07:53:41 C:\WINDOWS\System32 scompat.tlb -->11/09/06 06:46:34 C:\WINDOWS\System32\amcompat.tlb -->11/09/06 06:46:34 C:\WINDOWS\System32\mlfcache.dat -->02/06/06 08:49:12 C:\WINDOWS\System32\BASSMOD.dll -->31/05/06 15:57:51 C:\WINDOWS\System32\SET163A.tmp -->10/05/06 01:51:14 C:\WINDOWS\WindowsUpdate.log -->10/11/06 09:51:40 C:\WINDOWS\wiadebug.log -->10/11/06 09:50:07 C:\WINDOWS\wiaservc.log -->10/11/06 09:49:25 C:\WINDOWS\SchedLgU.Txt -->10/11/06 09:49:00 C:\WINDOWS\0.log -->10/11/06 09:48:59 C:\WINDOWS\bootstat.dat -->10/11/06 09:48:58 C:\WINDOWS\fpodevin8.xlb -->10/11/06 09:46:35 C:\WINDOWS\offitems.log -->10/11/06 09:46:34 C:\WINDOWS tbtlog.txt -->10/11/06 07:41:37 C:\WINDOWS\Sti_Trace.log -->09/11/06 16:39:25 C:\WINDOWS\1.dat -->09/11/06 00:00:49 C:\WINDOWS\Maxsea.ini -->17/10/06 10:25:09 C:\WINDOWS\NeroDigital.ini -->17/10/06 08:28:56 C:\WINDOWS\iltwain.ini -->13/10/06 14:10:34 C:\WINDOWS\ODBC.INI -->13/10/06 13:06:56 C:\WINDOWS\atd.exe |Astase |21/10/2004 14:41:06 C:\WINDOWS\CDLaunch.exe |Computer Systems Odessa Corp. |10/03/2005 08:54:54 C:\WINDOWS\Ckconfig.exe |Kenonic Controls |06/10/2006 08:59:05 C:\WINDOWS\Ckrfresh.exe |COMPANY |06/10/2006 08:59:05 C:\WINDOWS\CmiRmRedundDir.exe |COMPANY |26/09/2005 13:03:43 C:\WINDOWS\CMIUninstall.exe |COMPANY |26/09/2005 13:03:44 C:\WINDOWS\cmuninst.exe |C-Media Electronics Inc. |01/04/2003 07:36:04 C:\WINDOWS\IsUn040c.exe |InstallShield Software Corporation |31/03/2003 15:06:20 C:\WINDOWS\IsUninst.exe |InstallShield Software Corporation |31/03/2003 15:26:49 C:\WINDOWS\iun6002.exe |Indigo Rose Corporation |01/06/2004 14:36:17 C:\WINDOWS\mixer.exe |C-Media Electronic Inc. (www.cmedia.com.tw) |01/04/2003 07:36:04 C:\WINDOWS\NCUNINST.EXE |Northern Codeworks |09/03/2005 07:59:13 C:\WINDOWS\NewMixer.exe |C-Media Electronic Inc. (www.cmedia.com.tw) |01/04/2003 07:36:29 C:\WINDOWS\PLAYER.EXE |Apple Computer, Inc. |21/09/2006 09:43:10 C:\WINDOWS\psuninst2.exe |HelpStudio Software House |22/12/2005 13:47:53 C:\WINDOWS\README.EXE |No Hands Software Inc. |21/09/2006 09:43:11 C:\WINDOWS egdrop.exe |COMPANY |07/02/2006 09:44:55 C:\WINDOWS\Setup_ck.exe |COMPANY |06/10/2006 08:59:05 C:\WINDOWS\slrundll.exe |Smart Link |29/09/2005 14:32:02 C:\WINDOWS wunk_16.exe |Twain Working Group |28/09/2001 13:00:00 C:\WINDOWS wunk_32.exe |Twain Working Group |28/09/2001 13:00:00 C:\WINDOWS\unin040c.exe |InstallShield Corporation, Inc. |31/03/2003 15:22:17 C:\WINDOWS\unins000.exe |COMPANY |25/04/2006 09:40:54 C:\WINDOWS\uninst.exe |InstallShield Corporation, Inc. |31/03/2003 15:49:04 C:\WINDOWS\UninstallFirefox.exe |COMPANY |01/09/2004 10:00:29 C:\WINDOWS\UninstallThunderbird.exe |COMPANY |25/04/2005 13:59:55 C:\WINDOWS\unvise32qt.exe |MindVision |18/10/2004 10:02:08 C:\WINDOWS\UNWISE.EXE |COMPANY |22/07/2004 08:20:06 C:\WINDOWS\VIEWER.EXE |Apple Computer, Inc. |21/09/2006 09:43:10 C:\WINDOWS\CMIRmDriver.dll |COMPANY |26/09/2005 13:03:43 C:\WINDOWS\cygwin1.dll |Red Hat |07/03/2005 09:27:03 C:\WINDOWS\cygz.dll |COMPANY |07/03/2005 09:27:03 C:\WINDOWS\Isdbg51.dll |InstallShield Software Corporation |31/03/2003 15:28:01 C:\WINDOWS\php4isapi.dll |COMPANY |06/10/2005 09:45:21 C:\WINDOWS\php4ts.dll |The PHP Group |06/10/2005 09:45:21 C:\WINDOWS\PLAYENU.DLL |Apple Computer, Inc. |21/09/2006 09:43:11 C:\WINDOWS\Setup_ck.dll |COMPANY |06/10/2006 08:59:05 C:\WINDOWS wain.dll |Groupe de travail Twain |28/09/2001 13:00:00 C:\WINDOWS wain_32.dll |Groupe de travail Twain |28/09/2001 13:00:00 C:\WINDOWS\VIEWENU.DLL |Apple Computer, Inc. |21/09/2006 09:43:11 C:\WINDOWS\system32\append.exe |COMPANY |28/09/2001 13:00:00 C:\WINDOWS\system32\bcmwltry.exe |Belkin Corporation |17/03/2005 16:56:12 C:\WINDOWS\system32\bkd.exe |COMPANY |09/11/2006 14:01:10 C:\WINDOWS\system32\cmirmdrv.exe |COMPANY |26/09/2005 13:04:07 C:\WINDOWS\system32\Crypserv.exe |Kenonic Controls Ltd. |06/10/2006 08:59:06 C:\WINDOWS\system32\debug.exe |COMPANY |28/09/2001 13:00:00 C:\WINDOWS\system32\dosx.exe |COMPANY |28/09/2001 13:00:00 C:\WINDOWS\system32\dvdplay.exe |COMPANY |23/08/2001 18:47:34 C:\WINDOWS\system32\edlin.exe |COMPANY |28/09/2001 13:00:00 C:\WINDOWS\system32\exe2bin.exe |COMPANY |28/09/2001 13:00:00 C:\WINDOWS\system32\fastopen.exe |COMPANY |28/09/2001 13:00:00 C:\WINDOWS\system32\Gsw32.exe |Bits Per Second Ltd |09/10/2006 14:29:40 C:\WINDOWS\system32\HPBOID.EXE |Hewlett-Packard Company |10/12/2003 11:15:50 C:\WINDOWS\system32\HPBPRO.EXE |Hewlett-Packard Company |10/12/2003 11:16:34 C:\WINDOWS\system32\hpzinw12.exe |HP |25/07/2003 11:20:00 C:\WINDOWS\system32\hpzipm12.exe |HP |22/10/2003 09:19:22 C:\WINDOWS\system32\insrepim.exe |COMPANY |07/02/2006 09:38:53 C:\WINDOWS\system32\java.exe |Sun Microsystems, Inc. |28/02/2006 12:11:27 C:\WINDOWS\system32\javaw.exe |Sun Microsystems, Inc. |28/02/2006 12:11:27 C:\WINDOWS\system32\javaws.exe |Sun Microsystems, Inc. |28/02/2006 12:11:27 C:\WINDOWS\system32\Lame.exe |COMPANY |25/04/2006 09:40:55 C:\WINDOWS\system32\mcoinstall.exe |Aapie.Net |05/07/2006 10:08:38 C:\WINDOWS\system32\mem.exe |COMPANY |28/09/2001 13:00:00 C:\WINDOWS\system32\Mp3cnfg.exe |Kristal Studio |02/03/2001 19:37:34 C:\WINDOWS\system32\msasf.exe |COMPANY |26/02/2001 13:01:00 C:\WINDOWS\system32\mscdexnt.exe |COMPANY |28/09/2001 13:00:00 C:\WINDOWS\system32\NeroCheck.exe |Ahead Software Gmbh |15/03/2005 11:40:55 C:\WINDOWS\system32 lsfunc.exe |COMPANY |28/09/2001 13:00:00 C:\WINDOWS\system32 w16.exe |COMPANY |28/09/2001 13:00:00 C:\WINDOWS\system32\ORG11SVR.EXE |DataViz, Inc. |28/08/1997 23:00:00 C:\WINDOWS\system32\ORG21SVR.EXE |DataViz, Inc. |28/08/1997 23:00:00 C:\WINDOWS\system32\pxhpinst.exe |Sonic Solutions |29/10/2004 12:49:50 C:\WINDOWS\system32 edir.exe |COMPANY |31/03/2003 16:08:49 C:\WINDOWS\system32\RegisterExe.exe |COMPANY |19/10/2005 12:39:00 C:\WINDOWS\system32\RegNandub.exe |COMPANY |22/12/2003 03:28:10 C:\WINDOWS\system32\setver.exe |COMPANY |28/09/2001 13:00:00 C:\WINDOWS\system32\share.exe |COMPANY |28/09/2001 13:00:00 C:\WINDOWS\system32\slrundll.exe |Smart Link |29/09/2005 14:32:09 C:\WINDOWS\system32\slserv.exe |Smart Link |29/09/2005 14:32:08 C:\WINDOWS\system32\UNWISE.EXE |COMPANY |14/09/2005 13:17:17 C:\WINDOWS\system32\usrmlnka.exe |U.S. Robotics Corporation |23/08/2001 18:47:48 C:\WINDOWS\system32\usrprbda.exe |U.S. Robotics Corporation |23/08/2001 18:47:48 C:\WINDOWS\system32\usrshuta.exe |U.S. Robotics Corporation |23/08/2001 18:47:48 C:\WINDOWS\system32\vwipxspx.exe |COMPANY |28/09/2001 13:00:00 C:\WINDOWS\system32\WRKGADM.EXE |COMPANY |28/08/1997 23:00:00 C:\WINDOWS\system32\Zap.exe |COMPANY |12/09/2004 15:10:42 C:\WINDOWS\system32\zip.exe |COMPANY |24/05/2004 18:11:28 C:\WINDOWS\system32\3dviewer.dll |Apple Computer, Inc. |04/05/2004 15:49:25 C:\WINDOWS\system32\a3d.dll |Sensaura Ltd |26/09/2005 13:04:07 C:\WINDOWS\system32\amstream.dll |COMPANY |10/11/2004 14:45:54 C:\WINDOWS\system32\ati2cqag.dll |ATI Technologies Inc. |29/09/2005 14:32:33 C:\WINDOWS\system32\ati2dvaa.dll |ATI Technologies Inc. |31/03/2003 16:10:04 C:\WINDOWS\system32\ati2dvag.dll |ATI Technologies Inc. |31/03/2003 16:10:04 C:\WINDOWS\system32\ati3d1ag.dll |ATI Technologies Inc. |31/03/2003 16:10:04 C:\WINDOWS\system32\ati3duag.dll |ATI Technologies Inc. |29/09/2005 14:32:32 C:\WINDOWS\system32\ativtmxx.dll |ATI Technologies Inc. |29/09/2005 14:32:31 C:\WINDOWS\system32\ativvaxx.dll |ATI Technologies Inc. |29/09/2005 14:32:31 C:\WINDOWS\system32\atmfd.dll |Adobe Systems Incorporated |28/09/2001 13:00:00 C:\WINDOWS\system32\atmlib.dll |Adobe Systems |28/09/2001 13:00:00 C:\WINDOWS\system32\Audio3D.dll |Sensaura Ltd |26/09/2005 13:04:07 C:\WINDOWS\system32\auth.dll |COMPANY |26/03/2002 08:19:42 C:\WINDOWS\system32\avisynth.dll |The Public |01/06/2003 22:06:41 C:\WINDOWS\system32\aviwrap.dll |Disappearing Inc. |22/09/2001 09:50:22 C:\WINDOWS\system32\awpe.dll |Corel Corporation Limited |04/05/2004 15:49:12 C:\WINDOWS\system32\Awrtl30.dll |WexTech Systems, Inc. |04/05/2004 15:49:12 C:\WINDOWS\system32\BASSMOD.dll |COMPANY |27/02/2006 09:22:26 C:\WINDOWS\system32\BIDS45F.DLL |Borland International |31/03/2003 16:48:03 C:\WINDOWS\system32\BOCOF.DLL |COMPANY |31/03/2003 16:48:03 C:\WINDOWS\system32\BWCC32.DLL |Borland International |31/03/2003 16:48:03 C:\WINDOWS\system32\ccrpUCW6.dll |Jeremy Adams, CCRP |11/10/2000 16:07:38 C:\WINDOWS\system32\CDVPreviewEx.dll |COMPANY |10/03/2005 09:13:53 C:\WINDOWS\system32\cfhd.dll |CineForm Inc. |04/10/2005 09:43:14 C:\WINDOWS\system32\CmengDriver.dll |Informatique & Mer |12/10/2006 10:59:49 C:\WINDOWS\system32\CMGBase.dll |C-Map Russia |06/10/2006 08:59:18 C:\WINDOWS\system32\cmirmdrv.dll |COMPANY |26/09/2005 13:04:07 C:\WINDOWS\system32\cmnprop.dll |C-Media Corporation |01/04/2003 07:36:04 C:\WINDOWS\system32\cmuda.dll |C-Media |26/09/2005 13:04:07 C:\WINDOWS\system32\compatui.dll |COMPANY |31/03/2003 16:09:23 C:\WINDOWS\system32\CRAXDRT.DLL |Seagate Software, Inc. |23/11/2004 14:51:55 C:\WINDOWS\system32\CRVIEWER.DLL |Seagate Software |23/11/2004 14:51:58 C:\WINDOWS\system32\cvirt.dll |National Instruments |23/12/2004 15:34:02 C:\WINDOWS\system32\cvirte.dll |National Instruments |23/12/2004 15:34:02 C:\WINDOWS\system32\CW3215.DLL |Borland International |31/03/2003 16:48:03 C:\WINDOWS\system32\cygwin1.dll |Red Hat |07/03/2005 09:27:03 C:\WINDOWS\system32\cygz.dll |COMPANY |07/03/2005 09:27:03 C:\WINDOWS\system32\d4channel.dll |Hewlett-Packard |29/03/2005 14:06:23 C:\WINDOWS\system32\Dbgwproc.dll |IRC Inc. 14 Sovente Irvine, CA 92606 |23/11/2005 16:00:42 C:\WINDOWS\system32\devil.dll |Abysmal Software |11/04/2003 05:57:30 C:\WINDOWS\system32\dfolder.dll |COMPANY |01/02/1996 18:25:42 C:\WINDOWS\system32\dfont32.dll |COMPANY |22/09/2004 09:03:55 C:\WINDOWS\system32\dgrpsetu.dll |Digi International, Inc. |31/03/2003 11:13:19 C:\WINDOWS\system32\dgsetup.dll |Digi International |31/03/2003 11:13:19 C:\WINDOWS\system32\DivX.dll |DivXNetworks, Inc. |03/09/2004 19:03:47 C:\WINDOWS\system32\DivXc32.dll |Hacked with Joy ! |31/03/2000 22:35:06 C:\WINDOWS\system32\DivXc32f.dll |Hacked with Joy ! |31/03/2000 22:35:44 C:\WINDOWS\system32\divxdec_0407.dll |DivXNetworks, Inc. |04/09/2004 00:34:08 C:\WINDOWS\system32\divxdec_040c.dll |DivXNetworks, Inc. |04/09/2004 00:34:08 C:\WINDOWS\system32\divxdec_0411.dll |DivXNetworks, Inc. |04/09/2004 00:25:12 C:\WINDOWS\system32\divx_xx07.dll |DivXNetworks, Inc. |01/09/2004 16:48:45 C:\WINDOWS\system32\divx_xx0c.dll |DivXNetworks, Inc. |01/09/2004 16:48:45 C:\WINDOWS\system32\divx_xx11.dll |DivXNetworks, Inc. |01/09/2004 16:48:46 C:\WINDOWS\system32\DOCOBJ.DLL |COMPANY |29/08/1997 00:00:00 C:\WINDOWS\system32\dpu10.dll |DivXNetworks |03/09/2004 18:33:33 C:\WINDOWS\system32\dpuGUI10.dll |DivXNetworks |03/09/2004 18:37:38 C:\WINDOWS\system32\dpus10.dll |DivXNetworks |01/09/2004 16:49:16 C:\WINDOWS\system32\dpv10.dll |DivXNetworks |01/09/2004 16:49:16 C:\WINDOWS\system32\dxclib303562752.dll |COMPANY |09/11/2006 14:01:18 C:\WINDOWS\system32\DXTLIPI.DLL |Live Picture Corporation |27/08/1998 03:51:30 C:\WINDOWS\system32\DXTMETA.DLL |MetaCreations Corporation |27/08/1998 03:51:36 C:\WINDOWS\system32\DXTMETA2.DLL |MetaCreations Corporation |27/08/1998 03:51:42 C:\WINDOWS\system32\DXTSQFX.DLL |Squishy FX, LLC |27/08/1998 03:51:50 C:\WINDOWS\system32\EBPMON2.DLL |SEIKO EPSON CORPORATION |18/11/1999 02:01:00 C:\WINDOWS\system32\encdec.dll |COMPANY |26/11/2002 15:15:52 C:\WINDOWS\system32\encodex.dll |Mabry Software, Inc. |23/11/2004 14:51:59 C:\WINDOWS\system32\epcomdd.dll |SEIKO EPSON CORP |04/05/2004 15:20:00 C:\WINDOWS\system32\EqnClass.Dll |Equinox Systems Inc. |31/03/2003 11:13:18 C:\WINDOWS\system32\esccm.dll |SEIKO EPSON CORP. |04/05/2004 15:20:02 C:\WINDOWS\system32\esccmn.dll |SEIKO EPSON CORP. |04/05/2004 15:20:02 C:\WINDOWS\system32\escimg.dll |SEIKO EPSON CORP. |04/05/2004 15:20:02 C:\WINDOWS\system32\escimgn.dll |SEIKO EPSON CORP. |04/05/2004 15:20:02 C:\WINDOWS\system32\escwiab.dll |SEIKO EPSON CORP. |04/05/2004 15:20:02 C:\WINDOWS\system32\escwian.dll |SEIKO EPSON CORP. |04/05/2004 15:20:02 C:\WINDOWS\system32\ESDTR.dll |SEIKO EPSON CORP. |04/05/2004 15:20:00 C:\WINDOWS\system32\ESICM.dll |SEIKO EPSON Corp. |04/05/2004 15:20:01 C:\WINDOWS\system32\Esint23.dll |SEIKO EPSON CORP. |04/05/2004 15:20:00 C:\WINDOWS\system32\ExifView.dll |Foxbat |27/02/2002 08:55:50 C:\WINDOWS\system32\exlate32.dll |Seagate Software, Inc. |23/11/2004 14:51:59 C:\WINDOWS\system32\gds32.dll |Borland Software Corporation |03/04/2003 16:35:17 C:\WINDOWS\system32\GLUT32.DLL |COMPANY |09/10/2006 14:29:40 C:\WINDOWS\system32\Gsprop32.dll |Bits Per Second Ltd |09/10/2006 14:29:40 C:\WINDOWS\system32\Gswag32.dll |Bits Per Second Ltd |09/10/2006 14:29:40 C:\WINDOWS\system32\Gswdll32.dll |Bits Per Second Ltd |09/10/2006 14:29:40 C:\WINDOWS\system32\HHActiveX.dll |Blue Sky Software Corporation. |20/03/2002 21:01:58 C:\WINDOWS\system32\HLINKPRX.DLL |COMPANY |29/08/1997 00:00:00 C:\WINDOWS\system32\HPBHEALR.DLL |COMPANY |25/02/2003 06:49:56 C:\WINDOWS\system32\hpbmiapi.dll |Hewlett-Packard |10/12/2003 11:14:46 C:\WINDOWS\system32\hpbmmjno.dll |Hewlett-Packard |29/03/2005 14:06:23 C:\WINDOWS\system32\HPBMMON.DLL |Hewlett-Packard |18/07/2003 08:44:56 C:\WINDOWS\system32\HPBNRAC2.DLL |Hewlett-Packard |10/12/2003 11:14:24 C:\WINDOWS\system32\hpboidps.dll |Hewlett-Packard Company |10/12/2003 11:15:54 C:\WINDOWS\system32\hpbprops.dll |Hewlett-Packard Company |10/12/2003 11:16:38 C:\WINDOWS\system32\HPDOMON.DLL |Hewlett-Packard |25/02/2003 06:50:02 C:\WINDOWS\system32\HPJCMN2U.DLL |Hewlett-Packard |06/06/2000 18:27:08 C:\WINDOWS\system32\HPJIPX1U.DLL |Hewlett-Packard |06/06/2000 18:27:08 C:\WINDOWS\system32\hppadt40.dll |HP |22/07/2003 08:44:00 C:\WINDOWS\system32\hppamon0.dll |HP |22/07/2003 08:51:14 C:\WINDOWS\system32\hppapml0.dll |HP |22/07/2003 08:51:10 C:\WINDOWS\system32\hppapts0.dll |HP |22/07/2003 08:51:12 C:\WINDOWS\system32\hppasnm0.dll |HP |22/07/2003 08:51:14 C:\WINDOWS\system32\hptcpmib.dll |Hewlett Packard |30/03/2005 06:43:19 C:\WINDOWS\system32\hptcpmon.dll |Hewlett Packard |30/03/2005 06:43:19 C:\WINDOWS\system32\hpzc3212.dll |Hewlett-Packard Co. |19/09/2003 14:00:38 C:\WINDOWS\system32\hpzidr12.dll |HP |11/11/2003 10:16:46 C:\WINDOWS\system32\hpzipr12.dll |HP |22/10/2003 09:26:46 C:\WINDOWS\system32\hpzipt12.dll |HP |21/07/2003 13:24:06 C:\WINDOWS\system32\hpzisn12.dll |HP |21/07/2003 13:24:12 C:\WINDOWS\system32\hpzjfw01.dll |Hewlett-Packard |30/03/2005 06:43:19 C:\WINDOWS\system32\hpzjsn01.dll |Hewlett Packard Company |30/03/2005 06:43:19 C:\WINDOWS\system32\hsfcisp2.dll |Conexant Systems, Inc. |29/09/2005 14:32:25 C:\WINDOWS\system32\hticons.dll |Hilgraeve, Inc. |31/03/2003 11:20:41 C:\WINDOWS\system32\hypertrm.dll |Hilgraeve, Inc. |31/03/2003 11:20:41 C:\WINDOWS\system32\ibinstall.dll |Borland Software Corporation |03/04/2003 16:35:44 C:\WINDOWS\system32\ibxml.dll |Borland Software Corporation |03/04/2003 16:35:18 C:\WINDOWS\system32\iccvid.dll |Radius Inc. |28/09/2001 13:00:00 C:\WINDOWS\system32\ieencode.dll |COMPANY |29/09/2005 14:32:24 C:\WINDOWS\system32\igxbm30.dll |Micrografx, Inc. |31/03/2003 15:19:46 C:\WINDOWS\system32\igxbm40.dll |Micrografx, Inc. |31/03/2003 15:15:36 C:\WINDOWS\system32\igxfrm2x.DLL |Micrografx, Inc. |31/03/2003 15:15:36 C:\WINDOWS\system32\IGXFRM30.dll |Micrografx, Inc. |31/03/2003 15:19:45 C:\WINDOWS\system32\IGXFRM40.dll |Micrografx, Inc. |31/03/2003 15:15:36 C:\WINDOWS\system32\IGXIMGVW.DLL |Micrografx |31/03/2003 15:19:44 C:\WINDOWS\system32\IGXWlcm.dll |Micrografx |31/03/2003 15:15:31 C:\WINDOWS\system32\ImagX7.dll |Pegasus Imaging Corp. |15/03/2005 11:40:59 C:\WINDOWS\system32\ImagXpr7.dll |Pegasus Imaging Corp. |15/03/2005 11:40:59 C:\WINDOWS\system32\ImagXR7.dll |Pegasus Imaging Corp. |15/03/2005 11:41:00 C:\WINDOWS\system32\ImagXRA7.dll |Pegasus Imaging Corp. |15/03/2005 11:41:00 C:\WINDOWS\system32\INETWH32.dll |Blue Sky Software Corporation. |31/03/2003 15:27:59 C:\WINDOWS\system32\ir32_32.dll |COMPANY |28/09/2001 13:00:00 C:\WINDOWS\system32\ir41_qc.dll |Intel Corporation. |07/01/2004 10:59:51 C:\WINDOWS\system32\ir41_qcx.dll |Intel Corporation. |07/01/2004 10:59:51 C:\WINDOWS\system32\ir50_32.dll |Intel Corporation |07/01/2004 10:59:51 C:\WINDOWS\system32\ir50_qc.dll |Intel Corporation. |07/01/2004 10:59:51 C:\WINDOWS\system32\ir50_qcx.dll |Intel Corporation. |07/01/2004 10:59:51 C:\WINDOWS\system32\isdbgi51.dll |InstallShield Software Corporation |31/03/2003 15:27:59 C:\WINDOWS\system32\isrdbg32.dll |Intel Corporation |31/03/2003 11:22:11 C:\WINDOWS\system32\jgaw400.dll |Johnson-Grace Company |28/09/2001 13:00:00 C:\WINDOWS\system32\jgdw400.dll |America Online |28/09/2001 13:00:00 C:\WINDOWS\system32\jgmd400.dll |Johnson-Grace Company |28/09/2001 13:00:00 C:\WINDOWS\system32\jgpl400.dll |Johnson-Grace Company |28/09/2001 13:00:00 C:\WINDOWS\system32\jgsd400.dll |America Online |28/09/2001 13:00:00 C:\WINDOWS\system32\jgsh400.dll |Johnson-Grace Company |28/09/2001 13:00:00 C:\WINDOWS\system32\jst.dll |COMPANY |29/03/2005 14:06:23 C:\WINDOWS\system32\LameACM.dll |Works Warlock |20/01/2001 17:00:00 C:\WINDOWS\system32\Lame_enc.dll |COMPANY |07/08/2003 14:01:52 C:\WINDOWS\system32\lfAFP13n.dll |LEAD Technologies, Inc. |24/05/2004 17:59:50 C:\WINDOWS\system32\lfani13n.dll |LEAD Technologies, Inc. |24/05/2004 17:59:52 C:\WINDOWS\system32\lfavi13n.dll |LEAD Technologies, Inc. |24/05/2004 17:59:52 C:\WINDOWS\system32\LFAVI80N.DLL |LEAD Technologies, Inc. |31/03/2003 15:36:42 C:\WINDOWS\system32\lfawd13n.dll |LEAD Technologies, Inc. |24/05/2004 17:59:52 C:\WINDOWS\system32\LFAWD80N.DLL |LEAD Technologies, Inc. |31/03/2003 15:36:42 C:\WINDOWS\system32\lfbmp10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\lfbmp13n.dll |LEAD Technologies, Inc. |24/05/2004 17:59:52 C:\WINDOWS\system32\lfbmp80n.dll |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\lfcal10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\lfcal13n.dll |LEAD Technologies, Inc. |24/05/2004 17:59:54 C:\WINDOWS\system32\lfcal80n.dll |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\Lfcgm13n.dll |LEAD Technologies, Inc. |24/05/2004 17:59:54 C:\WINDOWS\system32\lfclp13n.dll |LEAD Technologies, Inc. |24/05/2004 17:59:56 C:\WINDOWS\system32\LFCMP10N.DLL |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\LFCMP13n.dll |LEAD Technologies, Inc. |24/05/2004 18:00:04 C:\WINDOWS\system32\lfcmp80n.dll |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\LFCMW13n.dll |LEAD Technologies, Inc. |24/05/2004 18:00:14 C:\WINDOWS\system32\lfCUT13n.dll |LEAD Technologies, Inc. |24/05/2004 18:00:14 C:\WINDOWS\system32\Lfdgn13n.dll |LEAD Technologies, Inc. |24/05/2004 18:00:14 C:\WINDOWS\system32\LFDIC80N.DLL |LEAD Technologies, Inc. |31/03/2003 15:36:43 C:\WINDOWS\system32\lfdrw13n.dll |LEAD Technologies, Inc. |24/05/2004 18:00:16 C:\WINDOWS\system32\lfdwf13n.dll |LEAD Technologies, Inc. |24/05/2004 18:00:30 C:\WINDOWS\system32\lfdwg13n.dll |LEAD Technologies, Inc. |24/05/2004 18:00:34 C:\WINDOWS\system32\lfdxf13n.dll |LEAD Technologies, Inc. |24/05/2004 18:00:36 C:\WINDOWS\system32\lfeps13n.dll |LEAD Technologies, Inc. |24/05/2004 18:00:38 C:\WINDOWS\system32\LFEPS80N.DLL |LEAD Technologies, Inc. |31/03/2003 15:36:43 C:\WINDOWS\system32\lffax10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\lffax13n.dll |LEAD Technologies, Inc. |24/05/2004 18:00:38 C:\WINDOWS\system32\lffax80n.dll |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\lfflc13n.dll |LEAD Technologies, Inc. |24/05/2004 18:00:40 C:\WINDOWS\system32\lffpx10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\lffpx13n.dll |LEAD Technologies, Inc. |24/05/2004 18:00:42 C:\WINDOWS\system32\lffpx7.dll |COMPANY |24/05/2004 18:00:48 C:\WINDOWS\system32\lffpx80n.dll |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\lfgbr13n.dll |LEAD Technologies, Inc. |24/05/2004 18:00:50 C:\WINDOWS\system32\lfgif10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\lfgif13n.dll |LEAD Technologies, Inc. |24/05/2004 18:00:50 C:\WINDOWS\system32\lfgif80n.dll |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\lfica10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\lfica13n.dll |LEAD Technologies, Inc. |24/05/2004 18:00:52 C:\WINDOWS\system32\lfica80n.dll |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\lfiff13n.dll |LEAD Technologies, Inc. |24/05/2004 18:00:52 C:\WINDOWS\system32\lfimg10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\lfimg13n.dll |LEAD Technologies, Inc. |24/05/2004 18:00:52 C:\WINDOWS\system32\lfimg80n.dll |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\lfitg13n.dll |LEAD Technologies, Inc. |24/05/2004 18:00:54 C:\WINDOWS\system32\LFJ2K13n.dll |LEAD Technologies, Inc. |24/05/2004 18:00:58 C:\WINDOWS\system32\lfjbg13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:00 C:\WINDOWS\system32\lfkodak.dll |COMPANY |24/05/2004 18:01:02 C:\WINDOWS\system32\lflma13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:04 C:\WINDOWS\system32\LFLMA80N.DLL |LEAD Technologies, Inc. |31/03/2003 15:36:43 C:\WINDOWS\system32\LFLMB10N.DLL |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\lflmb13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:04 C:\WINDOWS\system32\lflmb80n.dll |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\lfmac10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\lfmac13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:06 C:\WINDOWS\system32\lfmac80n.dll |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\lfmpg13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:08 C:\WINDOWS\system32\lfmsp10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\lfmsp13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:08 C:\WINDOWS\system32\lfmsp80n.dll |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\lfpcd10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\lfpcd13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:10 C:\WINDOWS\system32\LFPCD80N.DLL |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\lfPCL13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:12 C:\WINDOWS\system32\lfpct10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\Lfpct13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:12 C:\WINDOWS\system32\lfpct80n.dll |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\lfpcx10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\lfpcx13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:12 C:\WINDOWS\system32\lfpcx80n.dll |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\lfpdf13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:18 C:\WINDOWS\system32\lfplt13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:20 C:\WINDOWS\system32\lfpng10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\Lfpng13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:22 C:\WINDOWS\system32\lfpng80n.dll |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\LFPNM13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:24 C:\WINDOWS\system32\lfpsd10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\lfpsd13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:24 C:\WINDOWS\system32\lfpsd80n.dll |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\LFPTK13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:26 C:\WINDOWS\system32\lfras10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\lfras13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:26 C:\WINDOWS\system32\lfras80n.dll |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\lfRaw13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:26 C:\WINDOWS\system32\lfsct13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:28 C:\WINDOWS\system32\lfsgi13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:28 C:\WINDOWS\system32\lfshp13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:30 C:\WINDOWS\system32\LFSMP13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:30 C:\WINDOWS\system32\lftga10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\lftga13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:32 C:\WINDOWS\system32\lftga80n.dll |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\lftif10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\lftif13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:34 C:\WINDOWS\system32\lftif80n.dll |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\lfvec13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:36 C:\WINDOWS\system32\lfwfx10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\lfwfx13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:36 C:\WINDOWS\system32\lfwfx80n.dll |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\Lfwmf13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:36 C:\WINDOWS\system32\LFWMF80N.DLL |LEAD Technologies, Inc. |31/03/2003 15:36:43 C:\WINDOWS\system32\lfwmp13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:38 C:\WINDOWS\system32\lfwpg13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:38 C:\WINDOWS\system32\LFWPG80N.DLL |LEAD Technologies, Inc. |31/03/2003 15:36:43 C:\WINDOWS\system32\lfXbm13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:40 C:\WINDOWS\system32\lfXpm13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:40 C:\WINDOWS\system32\lfxwd13n.dll |LEAD Technologies, Inc. |24/05/2004 18:01:40 C:\WINDOWS\system32\ltann10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\ltann13n.dll |LEAD Technologies, Inc. |24/05/2004 18:02:04 C:\WINDOWS\system32\LTAUT13n.dll |LEAD Technologies, Inc. |24/05/2004 18:02:10 C:\WINDOWS\system32\LTCLR13n.dll |LEAD Technologies, Inc. |24/05/2004 18:03:02 C:\WINDOWS\system32\LTCON13n.dll |LEAD Technologies, Inc. |24/05/2004 18:03:02 C:\WINDOWS\system32\ltcry13n.dll |COMPANY |24/05/2004 18:03:20 C:\WINDOWS\system32\LTDic13n.dll |LEAD Technologies, Inc. |24/05/2004 18:03:32 C:\WINDOWS\system32\LTDIS10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:35 C:\WINDOWS\system32\LTDIS13n.dll |LEAD Technologies, Inc. |24/05/2004 18:03:42 C:\WINDOWS\system32\ltdlg13n.dll |LEAD Technologies, Inc. |24/05/2004 18:04:14 C:\WINDOWS\system32\LTEFX13n.dll |LEAD Technologies, Inc. |24/05/2004 18:04:18 C:\WINDOWS\system32\ltfil10N.DLL |LEAD Technologies, Inc. |31/03/2003 15:15:35 C:\WINDOWS\system32\LTFIL13n.dll |LEAD Technologies, Inc. |24/05/2004 18:04:22 C:\WINDOWS\system32\ltfil80n.dll |LEAD Technologies, Inc. |31/03/2003 15:19:44 C:\WINDOWS\system32\ltimg10N.dll |LEAD Technologies, Inc. |31/03/2003 15:15:45 C:\WINDOWS\system32\LTIMG13n.dll |LEAD Technologies, Inc. |24/05/2004 18:04:30 C:\WINDOWS\system32\ltimg80n.dll |LEAD Technologies, Inc. |31/03/2003 15:20:36 C:\WINDOWS\system32\ltisi13n.dll |LEAD Technologies, Inc. |24/05/2004 18:04:30 C:\WINDOWS\system32\LTKRN10N.DLL |LEAD Technologies, Inc. |31/03/2003 15:15:35 C:\WINDOWS\system32\ltkrn13n.dll |LEAD Technologies, Inc. |24/05/2004 18:05:42 C:\WINDOWS\system32\ltkrn80n.dll |LEAD Technologies, Inc. |31/03/2003 15:19:44 C:\WINDOWS\system32\ltlst13n.dll |LEAD Technologies, Inc. |24/05/2004 18:04:30 C:\WINDOWS\system32\ltpdg13n.dll |LEAD Technologies, Inc. |24/05/2004 18:04:32 C:\WINDOWS\system32\Ltpnt13n.dll |LEAD Technologies, Inc. |24/05/2004 18:04:34 C:\WINDOWS\system32\LTRTN13n.dll |LEAD Technologies, Inc. |24/05/2004 18:04:46 C:\WINDOWS\system32\LTSCR13n.dll |LEAD Technologies, Inc. |24/05/2004 18:04:50 C:\WINDOWS\system32\Ltsgm13n.dll |LEAD Technologies, Inc. |24/05/2004 18:04:52 C:\WINDOWS\system32\LTTLB13n.dll |LEAD Technologies, Inc. |24/05/2004 18:04:52 C:\WINDOWS\system32\lttls13n.dll |COMPANY |24/05/2004 18:04:56 C:\WINDOWS\system32\lttmb13n.dll |LEAD Technologies, Inc. |24/05/2004 18:04:56 C:\WINDOWS\system32\lttw213n.dll |LEAD Technologies, Inc. |24/05/2004 18:04:58 C:\WINDOWS\system32\lttwn13n.dll |LEAD Technologies, Inc. |24/05/2004 18:05:00 C:\WINDOWS\system32\ltwen13n.dll |LEAD Technologies, Inc. |24/05/2004 18:05:12 C:\WINDOWS\system32\LTWND13n.dll |LEAD Technologies, Inc. |24/05/2004 18:05:12 C:\WINDOWS\system32\LTWVC13n.dll |LEAD Technologies, Inc. |24/05/2004 18:05:24 C:\WINDOWS\system32\Lvkrn13n.dll |LEAD Technologies, Inc. |24/05/2004 18:05:30 C:\WINDOWS\system32\mabryobj.dll |Mabry Software, Inc. |23/11/2004 14:52:02 C:\WINDOWS\system32\Mapi32.dll |Mozilla.org |29/08/1997 00:00:00 C:\WINDOWS\system32\Mapi32_moz_bak.dll |Mozilla.org |29/08/1997 00:00:00 C:\WINDOWS\system32\mdmxsdk.dll |Conexant |29/09/2005 14:32:18 C:\WINDOWS\system32\mdwmdmsp.dll |RioPort |23/08/2001 18:47:06 C:\WINDOWS\system32\METASTR.DLL |MetaCreations Corporation |21/08/1998 13:51:32 C:\WINDOWS\system32\mimex.dll |Mabry Software, Inc. |23/11/2004 14:52:02 C:\WINDOWS\system32\MPEG2DEC.dll |COMPANY |22/06/2001 05:06:02 C:\WINDOWS\system32\msdmo.dll |COMPANY |16/07/2004 15:06:38 C:\WINDOWS\system32\msencode.dll |COMPANY |28/09/2001 13:00:00 C:\WINDOWS\system32\msmscoin.dll |COMPANY |11/04/2002 10:47:52 C:\WINDOWS\system32\Msvcrt10.dll |COMPANY |31/03/2003 15:10:03 C:\WINDOWS\system32\mtxparhd.dll |Matrox Graphics Inc. |29/09/2005 14:32:16 C:\WINDOWS\system32\NCTAudioFile.dll |NCT Company |23/11/2005 15:51:49 C:\WINDOWS\system32\NCTAudioFile2.dll |NCT Company Ltd. |15/12/2003 12:43:18 C:\WINDOWS\system32\NCTAudioInformation2.dll |NCT Company Ltd. |08/12/2003 12:17:04 C:\WINDOWS\system32\NCTAudioPlayer.dll |NCT Company |23/11/2005 15:51:50 C:\WINDOWS\system32\NCTAudioTransform2.dll |NCT Company Ltd. |08/12/2003 12:19:06 C:\WINDOWS\system32\NCTImageFile.dll |Online Media Technologies Ltd. |19/10/2005 12:39:54 C:\WINDOWS\system32\NCTImageTransform.dll |Online Media Technologies Ltd. |19/10/2005 12:39:55 C:\WINDOWS\system32\NCTImageUtility.dll |Online Media Technologies Ltd. |19/10/2005 12:39:55 C:\WINDOWS\system32\NCTImageView.dll |Online Media Technologies Ltd. |19/10/2005 12:39:54 C:\WINDOWS\system32\NCTWMAFile.dll |NCT Company |23/11/2005 15:51:50 C:\WINDOWS\system32\NCTWMAFile2.dll |NCT Company Ltd. |15/12/2003 12:24:30 C:\WINDOWS\system32 Lame.dll |COMPANY |17/03/2006 23:43:52 C:\WINDOWS\system32 v4.dll |NVIDIA Corporation |31/03/2003 11:14:56 C:\WINDOWS\system32 v4_disp.dll |NVIDIA Corporation |29/08/2002 11:05:14 C:\WINDOWS\system32 wnsp32.dll |Lotus Development Corporation |18/09/2003 05:32:24 C:\WINDOWS\system32\ODBCSTF.DLL |COMPANY |28/08/1997 23:00:00 C:\WINDOWS\system32\OGG.DLL |COMPANY |22/12/2003 03:28:08 C:\WINDOWS\system32\OggDS.dll |COMPANY |22/12/2003 03:28:10 C:\WINDOWS\system32\ORGAPI.DLL |Lotus Development Corporation |28/08/1997 23:00:00 C:\WINDOWS\system32\P2smon.dll |Seagate Software, Inc |23/11/2004 14:52:04 C:\WINDOWS\system32\paqsp.dll |COMPANY |23/08/2001 18:47:16 C:\WINDOWS\system32\PcdLib32.dll |Eastman Kodak |29/08/1997 00:00:00 C:\WINDOWS\system32\PdfPorts.dll |COMPANY |03/12/2004 09:43:58 C:\WINDOWS\system32\Pdfshell.dll |Adobe Systems Incorporated |03/12/2004 09:43:47 C:\WINDOWS\system32\picn20.dll |Pegasus Imaging Corp. |15/03/2005 11:40:59 C:\WINDOWS\system32\PMLJNI.dll |COMPANY |29/03/2005 14:06:23 C:\WINDOWS\system32\pncrt.dll |Real Networks, Inc |26/11/2004 11:14:11 C:\WINDOWS\system32\pndx5016.dll |RealNetworks, Inc. |26/11/2004 11:14:14 C:\WINDOWS\system32\pndx5032.dll |RealNetworks, Inc. |26/11/2004 11:14:14 C:\WINDOWS\system32\popx.dll |Mabry Software, Inc. |23/11/2004 14:52:04 C:\WINDOWS\system32\pr5lang.dll |Softwise Company |07/09/2004 18:25:39 C:\WINDOWS\system32\prtrack.dll |Softwise Company |23/11/2004 14:52:09 C:\WINDOWS\system32\prwebsvr.dll |Softwise Company |23/11/2004 14:52:09 C:\WINDOWS\system32\PSIKey.dll |Protexis Inc. |01/09/2004 16:48:50 C:\WINDOWS\system32\psisdecd.dll |COMPANY |01/02/2005 07:54:57 C:\WINDOWS\system32\px.dll |Sonic Solutions |29/10/2004 12:49:49 C:\WINDOWS\system32\pxc25pm.dll |Tracker Software |16/07/2004 07:20:32 C:\WINDOWS\system32\pxdrv.dll |Sonic Solutions |29/10/2004 12:49:50 C:\WINDOWS\system32\pxmas.dll |Sonic Solutions |29/10/2004 12:49:50 C:\WINDOWS\system32\pxwave.dll |Sonic Solutions |29/10/2004 12:49:50 C:\WINDOWS\system32\qd3d.dll |Apple Computer Inc. |04/05/2004 15:49:24 C:\WINDOWS\system32\qedwipes.dll |COMPANY |10/11/2004 14:45:57 C:\WINDOWS\system32\qt-mt331.dll |COMPANY |01/09/2004 16:49:17 C:\WINDOWS\system32 ave.dll |Apple Computer, Inc. |04/05/2004 15:49:25 C:\WINDOWS\system32\RECNCL.DLL |COMPANY |28/08/1997 23:00:00 C:\WINDOWS\system32 moc3260.dll |RealNetworks, Inc. |26/11/2004 11:14:30 C:\WINDOWS\system32\RNBOVDD.DLL |Rainbow Technologies, Inc. |10/09/2004 06:00:00 C:\WINDOWS\system32\Roboex32.dll |Blue Sky Software Corporation. |01/09/2004 13:10:39 C:\WINDOWS\system32\s3gnb.dll |S3 Graphics, Inc. |29/09/2005 14:32:11 C:\WINDOWS\system32\sbe.dll |COMPANY |26/11/2002 15:15:50 C:\WINDOWS\system32\scriptpw.dll |COMPANY |28/09/2001 13:00:00 C:\WINDOWS\system32\shw32.dll |COMPANY |04/05/2004 15:49:29 C:\WINDOWS\system32\slbcsp.dll |Schlumberger Technology Corporation |28/09/2001 13:00:00 C:\WINDOWS\system32\slbiop.dll |Schlumberger Technology Corporation |28/09/2001 13:00:00 C:\WINDOWS\system32\slbrccsp.dll |Schlumberger Technology Corporation |28/09/2001 13:00:00 C:\WINDOWS\system32\slcoinst.dll |Smart Link |29/09/2005 14:32:09 C:\WINDOWS\system32\slextspk.dll |Smart Link |29/09/2005 14:32:09 C:\WINDOWS\system32\slgen.dll |Smart Link |29/09/2005 14:32:09 C:\WINDOWS\system32\smtpx.dll |Mabry Software, Inc. |23/11/2004 14:52:12 C:\WINDOWS\system32\SNTI386.DLL |Rainbow Technologies, Inc. |10/09/2004 06:00:00 C:\WINDOWS\system32\spnike.dll |S3/Diamond Multimedia |23/08/2001 18:47:18 C:\WINDOWS\system32\sprio600.dll |S3/Diamond Multimedia |23/08/2001 18:47:18 C:\WINDOWS\system32\sprio800.dll |S3/Diamond Multimedia |23/08/2001 18:47:18 C:\WINDOWS\system32\spxcoins.dll |Perle Systems Ltd. |31/03/2003 11:13:18 C:\WINDOWS\system32\SS32D25.DLL |FarPoint Technologies, Inc. |31/03/2003 15:59:59 C:\WINDOWS\system32\Ssubtmr6.dll | |19/02/1999 07:54:26 C:\WINDOWS\system32\SVIEWHLP.DLL |Seagate Software |23/11/2004 14:52:12 C:\WINDOWS\system32 sd32.dll |COMPANY |28/09/2001 13:00:00 C:\WINDOWS\system32\TWAIN32d.dll |COMPANY |14/09/1998 20:43:16 C:\WINDOWS\system32\TwnLib20.dll |Pegasus Software |15/03/2005 11:41:00 C:\WINDOWS\system32\TwnLib4.dll |Pegasus Imaging Corp. |15/03/2005 11:41:00 C:\WINDOWS\system32\udaprop.dll |C-Media Corporation |26/09/2005 13:04:07 C:\WINDOWS\system32\UNRAR.DLL |COMPANY |03/02/2000 23:18:12 C:\WINDOWS\system32\usrcntra.dll |U.S. Robotics Corporation |23/08/2001 18:47:20 C:\WINDOWS\system32\usrcoina.dll |U.S. Robotics Corporation |23/08/2001 18:47:20 C:\WINDOWS\system32\usrdpa.dll |U.S. Robotics Corporation |23/08/2001 18:47:20 C:\WINDOWS\system32\usrdtea.dll |U.S. Robotics Corporation |23/08/2001 18:47:20 C:\WINDOWS\system32\usrfaxa.dll |U.S. Robotics Corporation |23/08/2001 18:47:20 C:\WINDOWS\system32\usrlbva.dll |U.S. Robotics Corporation |23/08/2001 18:47:20 C:\WINDOWS\system32\usrrtosa.dll |U.S. Robotics Corporation |23/08/2001 18:47:20 C:\WINDOWS\system32\usrsdpia.dll |U.S. Robotics Corporation |23/08/2001 18:47:20 C:\WINDOWS\system32\usrsvpia.dll |U.S. Robotics Corporation |23/08/2001 18:47:20 C:\WINDOWS\system32\usrv42a.dll |U.S. Robotics Corporation |23/08/2001 18:47:20 C:\WINDOWS\system32\usrv80a.dll |U.S. Robotics Corporation |23/08/2001 18:47:20 C:\WINDOWS\system32\usrvoica.dll |U.S. Robotics Corporation |23/08/2001 18:47:20 C:\WINDOWS\system32\usrvpa.dll |U.S. Robotics Corporation |23/08/2001 18:47:20 C:\WINDOWS\system32\VAFR232.DLL |COMPANY |28/08/1997 23:00:00 C:\WINDOWS\system32\VFCodec.dll |COMPANY |22/07/2000 09:49:46 C:\WINDOWS\system32\Vic32.dll |Catenary Systems |05/09/2005 05:11:44 C:\WINDOWS\system32\vidx16.dll |COMPANY |31/03/2003 15:15:49 C:\WINDOWS\system32\viscomwave.dll |Viscom Software |06/09/2004 10:10:50 C:\WINDOWS\system32\VOBSUB.DLL |Gabest |28/10/2001 05:54:32 C:\WINDOWS\system32\VORBIS.DLL |COMPANY |22/12/2003 03:28:08 C:\WINDOWS\system32\vorbisenc.dll |COMPANY |22/12/2003 03:28:08 C:\WINDOWS\system32\VSDRVM32.DLL |Visigenic Software |31/03/2003 15:59:58 C:\WINDOWS\system32\VSORAC32.DLL |Visigenic Software |31/03/2003 15:59:59 C:\WINDOWS\system32\vxblock.dll |Sonic Solutions |29/10/2004 12:49:50 C:\WINDOWS\system32\W32N50.dll |Printing Communications Assoc., Inc. (PCAUSA) |18/03/2005 08:24:36 C:\WINDOWS\system32\win87em.dll |COMPANY |28/09/2001 13:00:00 C:\WINDOWS\system32\WNASPI32.DLL |Adaptec |01/12/2004 11:29:49 C:\WINDOWS\system32\x264vfw.dll |COMPANY |25/04/2006 10:34:41 C:\WINDOWS\system32\XceedZip.dll |Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com |15/03/2002 10:55:34 C:\WINDOWS\system32\XLREC.DLL |COMPANY |28/08/1997 23:00:00 C:\WINDOWS\system32\xvidcore.dll |COMPANY |20/12/2004 10:03:26 C:\WINDOWS\system32\xvidvfw.dll |COMPANY |20/12/2004 10:08:28 Le volume dans le lecteur C s'appelle XP-APIC Le numéro de série du volume est 7EC3-37AE Répertoire de C:\WINDOWS\system 06/02/95 17:21 6 480 ODBCADM.EXE 14/09/92 17:25 28 802 PXENGCFG.EXE 29/11/94 23:00 4 128 QTNOTIFY.EXE 17/02/04 03:51 1 458 176 SmWizard.exe 10/09/99 11:06 4 672 WOWPOST.EXE 5 fichier(s) 1 502 258 octets 0 Rép(s) 41 954 410 496 octets libres Le volume dans le lecteur C s'appelle XP-APIC Le numéro de série du volume est 7EC3-37AE Répertoire de C:\WINDOWS\system32 19/08/04 15:09 6 144 csrss.exe 1 fichier(s) 6 144 octets 0 Rép(s) 41 954 410 496 octets libres Contenu de Downloaded Program Files Le volume dans le lecteur C s'appelle XP-APIC Le numéro de série du volume est 7EC3-37AE Répertoire de C:\WINDOWS\Downloaded Program Files 09/11/06 16:37 . 09/11/06 16:37 .. 31/03/03 11:23 65 desktop.ini 26/07/02 08:13 24 576 dwusplay.dll 26/07/02 08:13 196 608 dwusplay.exe 10/06/04 13:17 729 HDPlugin1018.inf 11/08/05 15:30 417 792 isusweb.dll 25/08/03 18:12 1 096 iuctl.inf 29/05/03 14:00 160 864 messengerstatsclient.dll 20/01/00 15:25 1 162 Microsoft XML Parser for Java.osd 26/05/05 03:19 293 muweb.inf 29/05/03 14:00 86 112 solitaireshowdown.dll 27/03/06 12:00 5 019 swflash.inf 06/07/04 11:35 230 vxiewer.inf 24/08/04 13:13 307 WinadX.inf 26/05/05 03:19 291 wuweb.inf 14 fichier(s) 895 144 octets Total des fichiers listés : 14 fichier(s) 895 144 octets 2 Rép(s) 41 954 410 496 octets libres Recherche de rootkit! (Merci S!Ri) Recherche d'infections connues Liste des programmes installes Économiseur d'écran Drapeaux de l'Union européenne 7-Zip 4.32 Ad-Aware SE Personal Adobe Acrobat 4.0 Adobe Bridge 1.0 Adobe Common File Installer Adobe Download Manager 2.0 (Supprimer uniquement) Adobe Help Center 1.0 Adobe Photoshop CS2 Adobe Photoshop CS2 Adobe Product/Adobe Studio Update 10/2001 Adobe Reader 7.0.5 - Français Adobe Stock Photos 1.0 Adobe Stock Photos 1.0 AIDA32 v3.93 Archiveur WinRAR AutoUpdate AutoVue SolidModel Pro, Desktop Edition AVG Anti-Spyware 7.5 AVI/MPEG/RM/WMV Joiner 4.81 AviSynth 2.5 Bureau Médias de Kazaa 2.6.7 C-Map PCMCIA and USB drivers C-Map PCMCIA and USB drivers C-Media 3D Audio CCleaner (remove only) Client du proxy Microsoft Codeur Windows Media Série 9 Codeur Windows Media Série 9 Compel Adaptec WinASPI CorelDRAW Graphics Suite X3 DivX DivX Player DVD-lab PRO 1.00 DVD Shrink 3.2 DVDFab Decrypter 2.9.7.9 EasyPHP 1.8 eMule EPSON Logiciel imprimante ES Extension HighMAT pour l'Assistant Graver un CD de Microsoft Windows XP FileZilla (remove only) FontNav Free Download Manager 2.1 Fx Audio Converter Google Earth Help Workshop HijackThis 1.99.1 HP Color LaserJet 4650 hp LaserJet 4250/4350 iGrafx System InterBase 6.5 InterVideo WinDVD 4 IsoBuster 1.9.1 J2SE Runtime Environment 5.0 Update 6 Jasc Paint Shop Pro 9 Jasc Paint Shop Pro 9.01 Patch Java 2 Runtime Environment, SE v1.4.2_05 JntMeego 0.2 la version d'évaluation de Namo WebCanvas la version d'évaluation de Namo WebEdiotor 6 Lecteur Windows Media 11 LeechFTP LimeWire PRO 4.10.9 LiveReg (Symantec Corporation) LiveUpdate 1.80 (Symantec Corporation) Macromedia Dreamweaver MX Macromedia Extension Manager Macromedia Flash Player 8 Macromedia Shockwave Player McAfee VirusScan MediaFACE 4.2 MediaFACE 4.2 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 French Language Pack Microsoft Clipart Extra Microsoft Data Access Components KB870669 Microsoft DirectX Transform optional components Microsoft FrontPage 98 Microsoft IntelliPoint 5.2 Microsoft IntelliType Pro 5.0 Microsoft Office 97 Professional Microsoft Publisher 2002 Microsoft SQL Server 7.0 Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR) Microsoft User-Mode Driver Framework Feature Pack 1.0.0 (Pre-Release 5348) Morgan Stream Switcher Mozilla Firefox (1.0) Mozilla Firefox (1.0.7) Mozilla Thunderbird (1.5) Namo WebUtilities NeoDivx 2006 Nero 6 Ultra Edition Nimo Codecs Pack v4.33 (Remove Only) Pack Vista Inspirat 1.1 PCI Audio Applications PCI Audio Driver Permis bateau façile. PHP 5.0.5 Picasa 2 Platform PowerQuest PartitionMagic 7.0 Demo PR-Tracker QuickTime RealPlayer Scitor Project Communicator - Team Sentinel Protection Installer 7.0.0 Sentinel System Driver SolidConverterPDF Sony DVD Architect 2.0b Sony Media Manager 2.0 Sony Vegas 6.0d Spybot - Search & Destroy 1.4 Ulead COOL 3D Production Studio Trial Update Manager USB FP-Card Reader Drivers USB FP-Card Reader Drivers VBA VBA (2720.8) Video Fixer 3.23 Visionneuse Journal Windows Microsoft WebFldrs XP Win AVI HelixSDK Winamp (remove only) WinAVI VideoConverter Windows Defender Signatures Windows Installer 3.1 (KB893803) Windows Media Format 11 runtime Windows Media Format 11 runtime Windows Media Player 11 Windows XP Service Pack 2 WinHTTrack Website Copier 3.40-2 x264 Revision 468 x264.nl (remove only) XviD & MP3 Codec Pack (remove only) XviD 1.1 final uninstall Yahoo! Toolbar Yahoo! Toolbar avec bloqueur de fenêtres pop-up Le volume dans le lecteur C s'appelle XP-APIC Le numéro de série du volume est 7EC3-37AE Répertoire de C:\Program Files 09/11/06 15:43 . 09/11/06 15:43 .. 23/11/05 15:51 4U Computing 01/06/06 06:45 7-Zip 22/08/06 07:27 a-squared 15/06/05 10:57 ACD Systems 27/09/06 07:45 Adobe 15/03/05 11:41 Ahead 31/01/06 13:31 AIDA32 - Enterprise System Information 14/09/06 14:29 av 24/05/05 08:29 AVI MPEG RM WMV Joiner 23/11/05 15:37 AviSynth 2.5 13/07/06 10:52 Borland 12/10/06 10:38 C-Map 26/09/05 13:03 C-Media 3D Audio 09/11/06 15:43 CCleaner 25/09/06 11:06 CDBurnerXP Pro 3 09/11/06 14:23 CM93_Ed3 & S57 14/02/05 13:32 Common Files 20/09/06 10:18 Corel 10/03/05 09:27 CS Odessa 17/07/06 14:45 DC++ 09/11/06 14:50 DeluxeCommunications 13/09/04 13:06 DivX 04/05/04 09:56 DivXCodec 23/09/04 08:26 DVD Shrink 01/06/06 06:53 DVDFab Decrypter 23/11/05 16:05 DVDlabPro 11/10/06 08:24 Earth Resource Mapping 25/04/06 10:15 EasyDVDRip 23/02/06 12:06 EasyPHP1-8 19/04/06 13:11 ElcomSoft 10/11/06 09:50 eMule 28/01/05 07:57 EPSON 16/02/06 11:57 Fellowes 09/11/06 14:28 Fichiers communs 01/06/04 14:57 FileZilla 21/09/06 08:27 Free Download Manager 05/10/06 15:23 Fugawi 23/11/05 16:00 Fx Audio Conveter 15/11/05 17:11 Google 09/11/06 09:21 Grisoft 02/10/06 15:54 GT Interactive 26/09/06 10:18 GXTranscoder v2 21/09/06 07:39 Help Workshop 02/02/06 08:53 Hewlett-Packard 07/01/04 10:47 HighMAT CD Writing Wizard 24/05/05 08:19 HT Video Splitter & Joiner 2.0 Shareware 12/10/06 10:22 I&M 15/09/05 13:03 IGC 31/03/03 15:19 iGrafx 22/03/06 16:13 Internet Explorer 15/11/04 14:43 InterVideo 16/12/04 07:58 Iomega 14/11/05 09:10 IrfanView 23/02/06 09:47 Jasc Software Inc 28/02/06 12:11 Java 17/08/06 09:48 JntMeego 22/08/06 07:34 jv16 PowerTools 2005 21/09/06 08:27 Label Creator 16/12/05 11:04 Lavasoft 03/02/06 14:12 Le Catalogue Radiospares 23/02/06 10:01 LeechFTP 21/09/06 08:27 LimeWire 02/06/05 07:33 Macromedia 09/10/06 07:30 MaxSea International 15/12/04 14:10 MDBTask 23/02/06 08:12 MediaFACE 09/11/06 14:00 Messenger 29/08/06 16:45 MessengerDiscovery 22/08/06 07:37 Microsoft ActiveSync 14/03/06 08:48 Microsoft AntiSpyware 31/03/03 15:22 microsoft frontpage 05/04/05 16:02 Microsoft IntelliPoint 05/04/05 09:29 Microsoft IntelliPoint 4.1 05/04/05 15:59 Microsoft IntelliPoint 5.2 05/05/04 07:49 Microsoft IntelliType Pro 05/05/04 07:49 Microsoft IntelliType Pro 5.0 14/05/04 10:13 Microsoft Office 28/08/06 16:12 Microsoft SQL Server 25/04/06 10:34 Morgan 21/09/06 08:27 Movie Maker 16/02/06 11:44 Mozilla Firefox 10/11/06 09:38 Mozilla Thunderbird 31/03/03 11:21 MSN 31/03/03 11:20 MSN Gaming Zone 09/11/06 14:35 MSN Messenger 23/02/06 09:48 Namo 25/04/06 10:36 neodivx2006 18/03/05 08:24 NETGEAR 29/09/05 14:19 NetMeeting 03/02/06 14:02 Netscape 29/07/04 15:44 Network Associates 11/05/04 15:46 NimoCodec Pack 22/03/06 16:13 Outlook Express 09/03/05 16:10 Palm 01/04/03 07:36 PCI Audio Applications 02/06/06 06:52 Picasa2 04/03/05 15:12 PocketDivx 07/02/06 09:45 PR-Tracker 21/03/05 16:54 ProgeSOFT 06/01/06 16:00 Quark 18/10/04 10:02 QuickTime 21/08/06 08:47 ReaConverter 4.0 Pro 14/11/05 09:09 ReaJpeg12 26/11/04 11:14 Real 19/10/05 08:49 ReaSoft 23/02/06 09:17 RegCleaner 17/03/05 08:46 Rename-It! 26/09/06 10:17 ReNamer 09/10/06 07:36 SafeNet Sentinel 15/09/04 14:05 Scitor 05/10/06 09:36 SeaClear 06/10/06 13:34 SentEmul 31/03/03 11:23 Services en ligne 31/05/06 15:57 SlySoft 22/09/06 13:03 Smart Projects 15/03/05 09:57 SoftET Koule 1.1 19/10/05 12:38 Softinterface, Inc 16/07/04 07:20 SolidDocuments 05/05/04 10:41 Sonic 28/08/06 16:09 Sony 28/08/06 14:36 Sony Setup 26/09/06 10:21 Spybot - Search & Destroy 22/08/06 08:04 Symantec 22/08/06 07:37 Teleport Pro 11/10/06 08:53 Transas 26/09/05 13:55 VIA 17/03/05 11:43 videofixer 02/06/04 10:06 virtual_Dub 28/08/06 16:10 Vstplugins 17/03/05 11:43 Winad Client 16/02/06 11:58 Winamp 25/04/06 10:35 WinASPI 18/07/05 13:31

afideg · Answer

Up
Juste pour suivre

Merci
;)

Fred56 · Answer

Désolé je ne comprends pas ?

Malekal_morte- · Answer

Le rapport Diaghelp n'es tpas entier.

As-tu essayé de désinstaller Deluxecommunications par ajout/suppression de programmes ?
Si oui et que ça n'a pas fonctionné, fais ceci :

Sur HiJackThis, refais un scan et coches les lignes suivantes :

R3 - URLSearchHook: (no name) - {A8BD6820-6ED7-423E-9558-2D1486B0FEEA} - C:\Program Files\DeluxeCommunications\DxcBho.dll
O4 - HKLM\..\Run: [DeluxeCommunications] C:\Program Files\DeluxeCommunications\Dxc.exe
O4 - HKCU\..\Run: [DeluxeCommunications] C:\Program Files\DeluxeCommunications\Dxc.exe 
O20 - AppInit_DLLs: dxclib303562752.dll

---> puis clic sur le bouton "Fix Checked"
n'hésite pas à consulter le lien d'aide : https://www.malekal.com/tutoriel-hijackthis/

Redémarre l'ordinateur

-- Ouvre le poste de travail
-- Clic sur le menu outils  en haut à droite puis options des dossiers
-- Dans la nouvelle fenêtre, clic sur l'onglet Affichage en haut
-- Coche dans la liste "Afficher les fichiers cachés"
-- Décoche "masquer les fichier proteger du systeme d exploitation (recommandée)"
-- Tu vas recevoir un message qui te dit que cela peut endommager le système, n'en tiens pas compte.

Supprime :
C:\WINDOWS\System32\dxclib303562752.dll
C:\WINDOWS\System32\bkd.exe
C:\Program Files\DeluxeCommunications


Puis :

Ouvre internet explorer --> Outils --> Options internet --> onglet "sécurité" --> Valide "niveau par défaut".
Toujours sur Internet explorer --> Outils --> Options internet --> onglet "avancé" --> valide "Paramètres par défaut".

Pour effectuer les scans, désactive ton antivirus, logiciels de protections et logiciels pouvant bloquer les popups (barres Google, barres Yahoo etc..).


- Fais un https://www.pandasecurity.com/?ref=www.pandasoftware.com/products/activescan.htm en [u]désactivant[/u] ton antivirus pendant le scan!
(Si tu es perdu, tu peux suivre ce tuto : https://www.malekal.com/scan-antivirus-ligne-nod32/#mozTocId237368]
- Copie/colle le rapport panda ici

Fred56 · Answer

tout cela en mode normal ou sans echec?

Malekal_morte- · Answer

Non sauf si tu n'arrives pas à supprimer les fichiers/dossiers.

[Virus] cmdservice

13 réponses

Discussions similaires

Newsletters