pop-up "powered by zedo"

Question

Bonjour,
    depuis aujourd'hui j'ai des fenêtes qui s'ouvrent sous internet explorer
Ces fenêtres s'appellent "powered by zedo"  , advaned cleaner"   ,   
Sur des pages internet, j'ai une fenêtre qui revient régulièrement et il est écrit  "alerte adware"
De plus depuis que ceci apparait, certaines lettres ne s'inscrivent plus quand je tapes sur le clavier (exclusivement sur internet, pous MSN ca marche nikel)
Quelqu'un aurait une idée de comment je pourrai m'en débarasser ??

Merci d'avance

ben15 · Answer

salut, va a cette adressse et tlécharge ceci :i http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

choisis Enregistrer et enregistre-le sur ton bureau.


(2) Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord)
Patiente jusqu'au message " Analyse Termine le ....."

Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
Copie/colle l'intégralité du rapport dans ta réponse. Referme le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)


Si ton antivirus detecte un virus ignore le

lorikcana52 · Answer

j'ai exécuter navilog1.exe mais après avoir choisi la langue ca écrit accès refusé et le logiciel beugue

ben15 · Answer

Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):

- Va dans démarrer puis panneau de configuration
- Double Clique sur l'icône "Comptes d'utilisateurs"
- Clique ensuite sur désactiver et valide. 

Tu le réactivera a la fin des manip'

lorikcana52 · Answer

Search Navipromo version 3.4.2 commencé le 04/02/2008 à 20:01:05,07

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Mise à jour le 27.01.2008 à 17h00 par IL-MAFIOSO

Microsoft Windows Vista 6.0.6000 
Internet Explorer : 7.0.6000.16575 
Système de fichiers : NTFS

Executé en mode normal

*** Recherche Programmes installés ***




*** Recherche dossiers dans C:\Windows ***



*** Recherche dossiers dans C:\Program Files ***


*** Recherche dossiers dans C:\ProgramData ***


*** Recherche dossiers dans C:\ProgramData\Microsoft\Windows\Start Menu\Programs ***


*** Recherche dossiers dans C:\Users\LOC~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs ***


*** Recherche dossiers dans C:\Users\Lo‹c\AppData\Local\virtualstore\Program Files ***



*** Recherche dossiers dans C:\Users\Lo‹c\AppData\Roaming ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier trouvé



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans C:\Windows\system32 *

* Recherche dans C:\Users\Lo‹c\AppData\Local\Microsoft *

* Recherche dans C:\Users\Lo‹c\AppData\Local\virtualstore\windows\system32 *

* Recherche dans C:\Users\Lo‹c\AppData\Local *



*** Recherche fichiers *** 




*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans C:\Windows\system32 :


* Dans C:\Users\Lo‹c\AppData\Local\Microsoft :


* Dans C:\Users\Lo‹c\AppData\Local\virtualstore\windows\system32 :


* Dans C:\Users\Lo‹c\AppData\Local :


3)Recherche Certificats :

Certificat Egroup absent !

4)Recherche fichiers connus :



*** Analyse terminée le 04/02/2008 à 20:07:36,01 ***

ben15 · Answer

télécharge l'utilitaire de S!Ri: Moe et balltrap34
http://siri.urz.free.fr/Fix/SmitfraudFix.exe

Tu le décompresses complètement sur ton bureau puis tu double cliques sur ce fichier SmitfraudFix.exe et tu choisis l’option 1
Cela va générer un rapport postes le

lorikcana52 · Answer

SmitFraudFix v2.280

Scan done at 20:17:15,64, 04/02/2008
Run from C:\Users\Lo‹c\Desktop\SmitfraudFix
OS: Microsoft Windows [version 6.0.6000] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\Windows\system32\csrss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\system32\svchost.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32	askeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Windows\autoclk.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\system32\conime.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\System32undll32.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\OpenOffice.org 2.1\program\soffice.exe
C:\Program Files\OpenOffice.org 2.1\program\soffice.BIN
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\Explorer.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Windows\system32\wbem\wmiprvse.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Lo‹c


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Lo‹c\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\LOC~1\FAVORI~1


»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components
 
 

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, following keys are not inevitably infected!!!

IEDFix.exe by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, following keys are not inevitably infected!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
+--------------------------------------------------+
[!] Suspicious: ActiveToolBand.dll
BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}
TypeLib: {834F470C-E0FD-43D9-AA5F-C0B974BE1B2B}
Interface: {F98E5A01-8DA8-408E-BA53-A9F7DB2F8811}
+--------------------------------------------------+
[!] Suspicious: WindowsLiveLogin.dll
BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6}
TypeLib: {FD609BF1-0E01-403F-8F20-EA238F5CDCC3}
Interface: {5823EF01-E0A4-4822-AEBB-0A5D4FA381CF}
Interface: {5E6487A6-75F4-4EAF-9A86-04AB74E05878}


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""
"LoadAppInit_DLLs"=dword:00000000


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{D78A2977-A7C0-4707-8EFE-F8BA52050560}: NameServer=84.103.237.142 86.64.145.142
HKLM\SYSTEM\CS1\Services\Tcpip\..\{D78A2977-A7C0-4707-8EFE-F8BA52050560}: NameServer=84.103.237.142 86.64.145.142


»»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End

ben15 · Answer

Ok maintenant télécharge « clean.zip »
http://www.malekal.com/download/clean.zip
- Décompresse-le sur ton bureau (clic droit / extraire tout), tu dois obtenir un dossier dénommé "clean ".

- Ouvre le dossier « clean » qui se trouve sur ton bureau.
- Double-clic sur « clean.cmd ».
Une fenêtre noire va apparaître, choisis l’option 1.

Clean va travailler.
- Redémarre normalement
- Poste qui se trouve ici C:\rapport_clean.txt.

lorikcana52 · Answer

Voila le rapport mais il me semble incomplet ???

 04/02/2008 a 20:27:22,78 
 
*** Recherche  C: 
 
*** Recherche  C:\Windows\ 
 
*** Recherche  C:\Windows\system32 
C:\Windows\system32\wininit.exe FOUND 
C:\Windows\system32\wininit.exe FOUND

lorikcana52 · Answer

un nouveau probleme est apparu
environ toutes les demi heure, l'explorer de windows beugue avec un mesage d'erreur qui le rallume

ben15 · Answer

Redémarre ton PC en mode sans échec :
Redémarre en mode sans échec (Pour cela : démarrer le PC en tapotant sur la touche F8 du clavier jusqu'à ce que le menu des options avancées de Windows apparaisse puis avec les touches fléchées du clavier, sélectionner Mode sans échec puis appuyer sur la touche Entrée...)
Double-clic sur clean. Cela va ouvrir une fenêtre noire.
Un menu va apparaître, choisis l'option 2 en appuyant sur la touche 2 de ton clavier.
Clean va travailler.
Un rapport Va etre généré, envoie le moi dans ta prochaine réponse

lorikcana52 · Answer

Script executed in Safe Mode 
Rapport clean par Malekal_morte - http://www.malekal.com 
Script executed in Safe Mode 05/02/2008 a 18:46:44,29 

Microsoft Windows [version 6.0.6000]
 
*** Suppression  C: 
 
*** Suppression  C:\Windows\ 
 
*** Suppression  C:\Windows\system32 
tentative de suppression de C:\Windows\system32\wininit.exe 
Impossible de supprimer C:\Windows\system32\wininit.exe  
tentative de suppression de C:\Windows\system32\wininit.exe 
Impossible de supprimer C:\Windows\system32\wininit.exe

ben15 · Answer

ou en sont tes soucis ??

lorikcana52 · Answer

toujours pareil
rien n'a changé

ben15 · Answer

telecharge http://www.commentcamarche.net/telecharger/telecharger 34055170 spyware terminator

Il va te trouver des truc donc dis moi ce qu'il te trouve dans un rapport

lorikcana52 · Answer

Logfile of Spyware Terminator v2.0.1.224 (db:1.0.044.807) Scan Time: 05/02/2008 20:13:08 length: 2451 s Platform: Windows Vista (WINNT 6.0.6000) User: Limited Boot Mode: Normal Scan type: Full_Spyware_Scan Scanned Objects: 121918 (Critical:66) Filter: No System items, No Safe items Running Processes Ati2evxx.exe [ATI Technologies Inc.] : C:\Windows\system32\Ati2evxx.exe audiodg.exe ( PID=1280 ) SLsvc.exe [Microsoft Corporation] : C:\Windows\system32\SLsvc.exe Ati2evxx.exe [ATI Technologies Inc.] : C:\Windows\system32\Ati2evxx.exe aawservice.exe [Lavasoft] : C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe CLMSServer.exe [CyberLink] : C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe MemCheck.exe : C:\Acer\Empowering Technology\ePerformance\MemCheck.exe eDSService.exe [HiTRSUT] : C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe LSSrvc.exe [Hewlett-Packard Company] : C:\Program Files\Common Files\LightScribe\LSSrvc.exe RichVideo.exe : C:\Program Files\CyberLink\Shared Files\RichVideo.exe eRecoveryService.exe [Acer Inc.] : C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe RtHDVCpl.exe [Realtek Semiconductor] : C:\Windows\RtHDVCpl.exe SysMonitor.exe : C:\Acer\Empowering Technology\SysMonitor.exe eDSloader.exe [HiTRUST] : C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe autoclk.exe : C:\Windows\autoclk.exe mrofinu1044.exe : C:\Windows\mrofinu1044.exe sidebar.exe [Microsoft Corporation] : C:\Program Files\Windows Sidebar\sidebar.exe msnmsgr.exe [Microsoft Corporation] : C:\Program Files\Windows Live\Messenger\msnmsgr.exe wmpnscfg.exe [Microsoft Corporation] : C:\Program Files\Windows Media Player\wmpnscfg.exe rundll32.exe [Microsoft Corporation] : C:\Windows\system32 undll32.exe dslmon.exe : C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe hpohmr08.exe [Hewlett-Packard Co.] : C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe PCMMediaSharing.exe : C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe wmpnetwk.exe [Microsoft Corporation] : C:\Program Files\Windows Media Player\wmpnetwk.exe soffice.exe [OpenOffice.org] : C:\Program Files\OpenOffice.org 2.1\program\soffice.exe soffice.BIN [OpenOffice.org] : C:\Program Files\OpenOffice.org 2.1\program\soffice.BIN ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE [Acer Inc.] : C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE ERAGENT.EXE [Acer Inc.] : C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE usnsvc.exe [Microsoft Corporation] : C:\Program Files\Windows Live\Messenger\usnsvc.exe iexplore.exe [Microsoft Corporation] : C:\Program Files\Internet Explorer\iexplore.exe WLLoginProxy.exe [Microsoft Corporation] : C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe wmplayer.exe ( PID=4508 ) Internet Settings R - HKLM\System\CurrentControlSet\Services\Tcpip\Parameters, Domain = R - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony, DomainName = BHO 02 - BHO: - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - File not found 02 - BHO: - {2C59817E-BA67-45EF-9AB2-1EA6FCE39045} - File not found 02 - BHO: - {31419DE3-5F3E-41AC-B532-D440763654AE} - File not found 02 - BHO: - {4702FC2B-0170-4068-8E4F-C0C8EEF2E3BC} - File not found 02 - BHO: - {7E853D72-626A-48EC-A868-BA8D5E23E045} - File not found 02 - BHO: - {828F9412-75CB-4F29-B377-355BE854138B} - File not found 02 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - [HiTRUST] : C:\Windows\system32\ActiveToolBand.dll 02 - BHO: - {8FAC5D62-B67E-43AB-8FF1-6F96ECA1A135} - : C:\Users\Loïc\AppData\Local\Temp\fcywu.dll 02 - BHO: - {D3ED10CD-2882-4E14-ACE4-64D007A76B7B} - File not found 02 - BHO: - {E1F2ADFB-8C1D-4872-B847-B98FF7A4BEA0} - : C:\Users\Loïc\AppData\Local\Temp\fcywu.dll 02 - BHO: - {F881E7E9-B2B6-4596-98A4-5A32776DA9F0} - File not found 02 - BHO: - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - File not found 02 - BHO: - {2670000A-7350-4f3c-8081-5663EE0C6C49} - File not found 02 - BHO: - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - File not found Toolbars 03 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - [HiTRUST] : C:\Windows\system32\eDStoolbar.dll 03 - Toolbar: - {90222687-F593-4738-B738-FBEE9C7B26DF} - File not found StartUps 04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Sidebar : [Microsoft Corporation] : C:\Program Files\Windows Sidebar\sidebar.exe 04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Acer Tour Reminder : [Acer Inc.] : C:\Acer\AcerTour\Reminder.exe 04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MsnMsgr : [Microsoft Corporation] : C:\Program Files\Windows Live\Messenger\msnmsgr.exe 04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, WMPNSCFG : [Microsoft Corporation] : C:\Program Files\Windows Media Player\wmpnscfg.exe 04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, cmds : : C:\Users\Loïc\AppData\Local\Temp\fcywu.dll 04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MS Juan : : C:\Users\Loïc\AppData\Local\Temp\lvoashby.dll 04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, e4d7fbc0 : : C:\Users\Loïc\AppData\Local\Temp\yudjkcak.dll 04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSServer : : C:\USERS\LOC~1\APPDATA\LOCAL\TEMP\LJJGH.DLL 04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, RtHDVCpl : [Realtek Semiconductor] : C:\Windows\RtHDVCpl.exe 04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Acer Empowering Technology Monitor : : C:\Acer\Empowering Technology\SysMonitor.exe 04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, eDataSecurity Loader : [HiTRUST] : C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, WarReg_PopUp : [Acer Inc.] : C:\Acer\WR_PopUp\WarReg_PopUp.exe 04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Acer Tour Reminder : [Acer Inc.] : C:\Acer\AcerTour\Reminder.exe 04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Apanel : : C:\ACERSW\config\NewSetApanel.cmd 04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, autoclk : : C:\Windows\autoclk.exe 04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, adiras : : adiras.exe 04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MSServer : : C:\Windows\system32\pmklk.dll 04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, osCheck : : C:\Program Files\NORTON INTERNET SECURITY\OSCHECK.EXE 04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Symantec PIF AlertEng : : C:\Program Files\Common Files\SYMANTEC SHARED\PIF\{B8E1DD85-8582-4C61-B58F-2F227FCA9A08}\PIFSVC.EXE 04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, runner1 : : C:\Windows\mrofinu1044.exe 04 - Startup: %START_PROGRAMS%\Startup\OpenOffice.org 2.1.lnk : C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe 04 - Startup: %START_PROGRAMSALL%\Startup\DSLMON.lnk : C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe 04 - Startup: %START_PROGRAMSALL%\Startup\Empowering Technology Launcher.lnk [Acer Inc.] : C:\Acer\Empowering Technology\eAPLauncher.exe 04 - Startup: %START_PROGRAMSALL%\Startup\hp psc 1000 series.lnk [Hewlett-Packard Co.] : C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe 04 - Startup: %START_PROGRAMSALL%\Startup\PCM Media Sharing.lnk : C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe Shell Extensions Microsoft OLE DB Service Component Data Links - {2206CDB2-19C1-11D1-89E0-00C04FD7A829} - File not found ExtractIcon Class - {7A80E4A8-8005-11D2-BCF8-00C04F72C717} - File not found WebCheckWebCrawler - {08165EA0-E946-11CF-9C87-00AA005127ED} - File not found Code Download Agent - {7D559C10-9FE9-11d0-93F7-00AA0059CE02} - File not found WebCheck SyncMgr Handler - {7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB} - File not found Subscription Mgr - {ABBE31D0-6DAE-11D0-BECA-00C04FD940BE} - File not found WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - File not found Subscription Folder - {F5175861-2688-11d0-9C5E-00AA00A45957} - File not found CLSID_PreviewMime - {92dbad9f-5025-49b0-9078-2d78f935e341} - File not found CLSID_PreviewEmail - {b9815375-5d7f-4ce2-9245-c9d4da436930} - File not found CLSID_PreviewHtml - {f8b8412b-dea3-4130-b36c-5e8be73106ac} - File not found Shell Message Handler - {5FA29220-36A1-40f9-89C6-F4B384B7642E} - File not found Shell DocObject Viewer - {E7E4BC40-E76A-11CE-A9BB-00AA004AE837} - File not found Microsoft Browser Architecture - {BC476F4C-D9D7-4100-8D4E-E043F6DEC409} - File not found Internet Shortcut - {FBF23B40-E3F0-101B-8488-00AA003E56F8} - File not found Microsoft Url History Service - {3C374A40-BAE4-11CF-BF7D-00AA006946EE} - File not found History - {FF393560-C2A7-11CF-BFF4-444553540000} - File not found Temporary Internet Files - {7BD29E00-76C1-11CF-9DD0-00A0C9034933} - File not found Temporary Internet Files - {7BD29E01-76C1-11CF-9DD0-00A0C9034933} - File not found Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - File not found The Internet - {3DC7A020-0ACD-11CF-A9BB-00AA004AE837} - File not found IE BandProxy - {73CFD649-CD48-4fd8-A272-2070EA56526B} - File not found IE Microsoft BrowserBand - {07C45BB1-4A8C-4642-A1F5-237E7215FF66} - File not found IE Navigation Bar - {43886CD5-6529-41c4-A707-7B3C92C05E68} - File not found IE Search Band - {30D02401-6A81-11d0-8274-00C04FD5AE38} - File not found IE Registry Tree Options Utility - {F83DAC1C-9BB9-4f2b-B619-09819DA81B0E} - File not found IE AutoComplete - {3028902F-6374-48b2-8DC6-9725E775B926} - File not found IE MRU AutoComplete List - {98FF6D4B-6387-4b0a-8FBD-C5C4BB17B4F8} - File not found IE Custom MRU AutoCompleted List - {FDE7673D-2E19-4145-8376-BBD58C4BC7BA} - File not found IE Microsoft History AutoComplete List - {6038EF75-ABFC-4e59-AB6F-12D397F6568D} - File not found IE Microsoft Shell Folder AutoComplete List - {9D958C62-3954-4b44-8FAB-C4670C1DB4C2} - File not found IE Microsoft Multiple AutoComplete List Container - {B31C5FAE-961F-415b-BAF0-E697A5178B94} - File not found IE Shell Band Site Menu - {E6EE9AAC-F76B-4947-8260-A9F136138E11} - File not found IE Shell Rebar BandSite - {BFAD62EE-9D54-4b2a-BF3B-76F90697BD2A} - File not found IE User Assist - {FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75} - File not found IE Menu Band - {4B78D326-D922-44f9-AF2A-07805C2A3560} - File not found - {6CF48EF8-44CD-45d2-8832-A16EA016311B} - File not found &Links - {F2CF5485-4E02-4f68-819C-B92DE9277049} - File not found IE Fade Task - {1C1EDB47-CE22-4bbb-B608-77B48F83C823} - File not found IE Tracking Shell Menu - {6B4ECC4F-16D1-4474-94AB-5A763F2A54AE} - File not found IE Menu Site - {44C76ECD-F7FA-411c-9929-1B77BA77F524} - File not found IE Menu Desk Bar - {205D7A97-F16D-4691-86EF-F3075DCCA57D} - File not found - {871C5380-42A0-1069-A2EA-08002B30309D} - File not found IE RSS Feeds Folder - {9A096BB5-9DC3-4D1C-8526-C3CBF991EA4E} - File not found Microsoft Web Browser - {8856f961-340a-11d0-a96b-00c04fd705a2} - File not found MHTML Document - {3050f3d9-98b5-11cf-bb82-00aa00bdce0b} - File not found HTML Document - {25336920-03f9-11cf-8fd0-00aa00686f13} - File not found - {00020d75-0000-0000-c000-000000000046} - File not found ICM Scanner Management - {176d6597-26d3-11d1-b350-080036a75b03} - File not found ICM Monitor Management - {5DB2625A-54DF-11D0-B6C4-0800091AA605} - File not found ICM Printer Management - {675F097E-4C4D-11D0-B6C1-0800091AA605} - File not found Color Profile - {DBCE2480-C732-101B-BE72-BA78E9AD5B27} - File not found Color Control Panel Applet - {b2c761c6-29bc-4f19-9251-e6195265baf1} - File not found PrintUIShellExtension Class - {77597368-7b15-11d0-a0c2-080036af3f03} - File not found Windows Update - {36eef7db-88ad-4e81-ad49-0e313f0c35f8} - File not found Add New Hardware - {7A979262-40CE-46ff-AEEE-7884AC3B6136} - File not found Get Programs Online - {3e7efb4c-faf1-453d-89eb-56026875ef90} - File not found Taskbar and Start Menu - {0DF44EAA-FF21-4412-828E-260A8728E7F1} - File not found - {1b24a030-9b20-49bc-97ac-1be4426f9e59} - File not found - {34449847-FD14-4fc8-A75A-7432F5181EFB} - File not found - {C8494E42-ACDD-4739-B0FB-217361E4894F} - File not found - {E29F9716-5C08-4FCD-955A-119FDB5A522D} - File not found Control Panel command object for Start menu - {5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0} - File not found Default Programs command object for Start menu - {E44E5D18-0652-4508-A4E2-8A090067BCB0} - File not found Folder Options - {6dfd7c5c-2451-11d3-a299-00c04f8ef6af} - File not found ActiveX Cache Folder - {88C6C381-2E85-11D0-94DE-444553540000} - File not found - {2C2577C2-63A7-40e3-9B7F-586602617ECB} - File not found prturl Class - {92337A8C-E11D-11D0-BE48-00C04FC30DF6} - File not found Microsoft XPS Shell Metadata Handler - {45670FA8-ED97-4F44-BC93-305082590BFB} - File not found - {44121072-A222-48f2-A58A-6D9AD51EBBE9} - File not found - {38a98528-6cbf-4ca9-8dc0-b1e1d10f7b1b} - File not found CLSID_ContactReadingPane - {13D3C4B8-B179-4ebb-BF62-F704173E7448} - : %COMMONPROGRAMFILES%\System\wab32.dll For &People... - {32714800-2E5F-11d0-8B85-00AA0044F941} - File not found - {0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48} - File not found .group shell extension handler - {4F58F63F-244B-4c07-B29F-210BE59BE9B4} - File not found .contact shell extension handler - {8082C5E6-4C27-48ec-A809-B8E1122E8F97} - File not found .group shell context menu - {16C2C29D-0E5F-45f3-A445-03E03F587B7D} - File not found .contact shell context menu - {CF67796C-F57F-45F8-92FB-AD698826C602} - File not found LayerUIPropPage - {513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8} - File not found Remote Sessions CPL Extension - {F0152790-D56E-4445-850E-4F3117DB740C} - File not found Windows Firewall - {4026492f-2f69-46b8-b9bf-5654fc07e423} - File not found Extensions Manager Folder - {692F0339-CBAA-47e6-B5B5-3B84DB604E87} - File not found Problem Reports and Solutions - {fcfeecae-ee1b-4849-ae50-685dcf7717ec} - File not found iSCSI Initiator - {a304259d-52b8-4526-8b1a-a1d6cecc8243} - File not found Power Options - {025A5937-A6BE-4686-A844-36FE4BEC8B6D} - File not found User Accounts - {60632754-c523-4b62-b45c-4172da012619} - File not found AutoPlay - {9C60DE1E-E5FC-40f4-A487-460851A8D915} - File not found CompressedFolder - {E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31} - [Microsoft Corporation] : C:\Windows\system32\zipfldr.dll Compressed (zipped) Folder Right Drag Handler - {BD472F60-27FA-11cf-B8B4-444553540000} - [Microsoft Corporation] : C:\Windows\system32\zipfldr.dll Compressed (zipped) Folder SendTo Target - {888DCA60-FC0A-11CF-8F0F-00C04FD7D062} - [Microsoft Corporation] : C:\Windows\system32\zipfldr.dll Compressed (zipped) Folder Context Menu - {b8cdcb65-b1bf-4b42-9428-1dfdb7ee92af} - [Microsoft Corporation] : C:\Windows\system32\zipfldr.dll Compressed (zipped) Folder DropHandler - {ed9d80b9-d157-457b-9192-0e7280313bf0} - [Microsoft Corporation] : C:\Windows\system32\zipfldr.dll - {911051fa-c21c-4246-b470-070cd8df6dc4} - File not found - {da67b8ad-e81b-4c70-9b91b417b5e33527} - File not found DfsShell Class - {ECCDF543-45CC-11CE-B9BF-0080C87CDBA6} - File not found IPropertyStore Handler for Images - {a38b883c-1682-497e-97b0-0a3a9e801682} - File not found Photo Thumbnail Provider - {C7657C4A-9F68-40fa-A4DF-96BC08EB3551} - File not found Photo Extract Image - {3F30C968-480A-4C6C-862D-EFC0897BB84B} - File not found Windows Photo Gallery Viewer Video Verbs - {E598560B-28D5-46aa-A14A-8A3BEA34B576} - [Microsoft Corporation] : C:\Program Files\Windows Photo Gallery\PhotoViewer.dll Scanner and Camera Control Panel - {00f2886f-cd64-4fc9-8ec5-30ef6cdbe8c3} - File not found &Windows Media Player - {0a4286ea-e355-44fb-8086-af3df7645bd9} - [Microsoft Corporation] : C:\Program Files\Windows Media Player\wmpband.dll - {BB6B2374-3D79-41DB-87F4-896C91846510} - File not found Windows SideShow - {E95A4861-D57A-4be1-AD0F-35267E261739} - File not found @%systemroot%\system32\mssvp.dll,-110 - {89D83576-6BD1-4c86-9454-BEB04E94C819} - File not found Windows Photo Gallery Viewer Autoplay Handler - {9D687A4C-1404-41ef-A089-883B6FBECDE6} - : DropTarget Object for Photo Printing Wizard - {60fd46de-f830-4894-a628-6fa81bc0190d} - File not found Windows Sidebar Properties - {37efd44d-ef8d-41b1-940d-96973a50e9e0} - File not found Portable Media Devices - {640167b4-59b0-47a6-b335-a6b3c0695aea} - File not found PhotoAcqDropTarget - {00f20eb5-8fd6-4d9d-b75e-36801766c8f1} - File not found @C:\Windows\System32\shell32.dll,-30579 - {ED228FDF-9EA8-4870-83B1-96B02CFE0D52} - File not found Windows Features - {67718415-c450-4f3c-bf8a-b487642dc39b} - File not found Backup and Restore Center - {335a31dd-f04b-4d76-a925-d6b47cf360df} - File not found Windows Photo Gallery Viewer Image Verbs - {FFE2A43C-56B9-4bf5-9A79-CC6D4285608A} - [Microsoft Corporation] : C:\Program Files\Windows Photo Gallery\PhotoViewer.dll Windows Defender - {d8559eb9-20c0-410e-beda-7ed416aecc2a} - File not found Mobility Center Control Panel - {5ea4f148-308c-46d7-98a9-49041b1dd468} - File not found File Backup Index - {877ca5ac-cb41-4842-9c69-9136e42d47e2} - File not found Portable Devices Menu - {D6791A63-E7E2-4fee-BF52-5DED8E86E9B8} - File not found Speech Recognition Options - {58E3C745-D971-4081-9034-86E34B30836A} - File not found Tablet PC Input Panel - {15D633E2-AD00-465b-9EC7-F56B7CDF8E27} - File not found Performance Information and Tools - {78F3955E-3B90-4184-BD14-5397C15F1EFC} - File not found MAPI Mail Previewer - {53BEDF0B-4E5B-4183-8DC9-B844344FA104} - File not found Windows gadget DropTarget - {6b9228da-9c15-419e-856c-19e768a13bdc} - [Microsoft Corporation] : C:\Program Files\Windows Sidebar\sbdrop.dll Portable Devices - {35786D3C-B075-49b9-88DD-029876E11C01} - File not found @%systemroot%\system32\mssvp.dll,-112 - {BD7A2E7B-21CB-41b2-A086-B309680C6B7E} - File not found User Accounts - {7A9D77BD-5403-11d2-8785-2E0420524153} - File not found SimpleShlExt Class - {5E2121EE-0300-11D4-8D3B-444553540000} - : C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll Mes dossiers de partage - {FC9FB64A-1EB2-4CCF-AF5E-1A497A9B5C2D} - [Microsoft Corporation] : C:\Program Files\Windows Live\Messenger\fsshext.8.5.1302.1018.dll WinRAR - {B41DB860-8EE4-11D2-9906-E49FADC173CA} - : C:\Program Files\WinRAR arext.dll - {06A2568A-CED6-4187-BB20-400B8C02BE5A} - [Microsoft Corporation] : C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe Windows Live Photo Gallery Import Autoplay Shim - {00F33137-EE26-412F-8D71-F84E4C2C6625} - [Microsoft Corporation] : C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll Windows Live Photo Gallery Autoplay Drop Target - {2BE99FD4-A181-4996-BFA9-58C5FFD11F6C} - [Microsoft Corporation] : C:\Program Files\WINDOWS LIVE\PHOTO GALLERY\WLXPHOTOVIEWER.DLL Windows Live Photo Gallery Editor Drop Target - {00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C} - [Microsoft Corporation] : C:\Program Files\WINDOWS LIVE\PHOTO GALLERY\WLXPHOTOVIEWER.DLL Windows Live Photo Gallery Viewer Drop Target - {00F374B7-B390-4884-B372-2FC349F2172B} - [Microsoft Corporation] : C:\Program Files\WINDOWS LIVE\PHOTO GALLERY\WLXPHOTOVIEWER.DLL Windows Live Photo Gallery Viewer Shim - {00F346CB-35A4-465B-8B8F-65A29DBAB1F6} - [Microsoft Corporation] : C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll Windows Live Photo Gallery Editor Shim - {00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} - [Microsoft Corporation] : C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll Windows Live Photo Gallery Viewer Autoplay Shim - {00F30F90-3E96-453B-AFCD-D71989ECC2C7} - [Microsoft Corporation] : C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll - {C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} - [Sun Microsystems, Inc.] : C:\Program Files\OPENOFFICE.ORG 2.1\PROGRAM\SHLXTHDL.DLL - {087B3AE3-E237-4467-B8DB-5A38AB959AC9} - [Sun Microsystems, Inc.] : C:\Program Files\OPENOFFICE.ORG 2.1\PROGRAM\SHLXTHDL.DLL - {63542C48-9552-494A-84F7-73AA6A7C99C1} - [Sun Microsystems, Inc.] : C:\Program Files\OPENOFFICE.ORG 2.1\PROGRAM\SHLXTHDL.DLL - {3B092F0C-7696-40E3-A80F-68D74DA84210} - [Sun Microsystems, Inc.] : C:\Program Files\OPENOFFICE.ORG 2.1\PROGRAM\SHLXTHDL.DLL Protocol Filters AP encoding/decoding Filters - {8f6b0360-b80d-11d0-a9b3-006097942311} - File not found AP encoding/decoding Filters - {8f6b0360-b80d-11d0-a9b3-006097942311} - File not found Protocol Handler Microsoft HTML About Pluggable Protocol - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - File not found CDL: Asychronous Pluggable Protocol Handler - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - File not found DVD: Pluggable Protocol - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - File not found file:, local: Asychronous Pluggable Protocol Handler - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - File not found ftp: Asychronous Pluggable Protocol Handler - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - File not found http: Asychronous Pluggable Protocol Handler - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - File not found https: Asychronous Pluggable Protocol Handler - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - File not found Microsoft InfoTech Protocols for IE 4.0 - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - File not found Microsoft HTML Javascript Pluggable Protocol - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - File not found - {828030A1-22C1-4009-854F-8E305202313F} - [Microsoft Corporation] : C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll file:, local: Asychronous Pluggable Protocol Handler - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - File not found Microsoft HTML Mailto Pluggable Protocol - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - File not found MHTML Asynchronous Pluggable Protocol Handler - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - File not found mk: Asychronous Pluggable Protocol Handler - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - File not found Microsoft InfoTech Protocols for IE 4.0 - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - File not found - {828030A1-22C1-4009-854F-8E305202313F} - [Microsoft Corporation] : C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll Microsoft HTML Resource Pluggable Protocol - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - File not found TV: Pluggable Protocol - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - File not found Microsoft HTML Javascript Pluggable Protocol - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - File not found Services 23 - [Lavasoft] : C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe 23 - [CyberLink] : C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe 23 - : C:\Acer\Empowering Technology\ePerformance\MemCheck.exe 23 - [Analog Devices Inc.] : C:\Windows\system32\DRIVERS\adiusbaw.sys 23 - [ALWIL Software] : C:\Windows\system32\DRIVERS\aswMonFlt.sys 23 - [ATI Technologies Inc.] : C:\Windows\system32\Ati2evxx.exe 23 - [ATI Technologies Inc.] : C:\Windows\system32\DRIVERS\atikmdag.sys 23 - [ATI Technologies Inc.] : C:\Windows\system32\DRIVERS\AtiPcie.sys 23 - [HiTRSUT] : C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe 23 - : C:\??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys 23 - [Acer Inc.] : C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe 23 - : C:\??\C:\Acer\Empowering Technology\eRecovery\int15.sys 23 - [Realtek Semiconductor Corp.] : C:\Windows\system32\drivers\RTKVHDA.sys 23 - [Hewlett-Packard Company] : C:\Program Files\Common Files\LightScribe\LSSrvc.exe 23 - [NewTech Infosystems, Inc.] : C:\Windows\system32\DRIVERS\NTIDrvr.sys 23 - [HiTRUST] : C:\Windows\system32\DRIVERS\psdfilter.sys 23 - [HiTRUST] : C:\Windows\system32\drivers\PSDNServ.sys 23 - [HiTRUST] : C:\Windows\system32\drivers\psdvdisk.sys 23 - : C:\Program Files\CyberLink\Shared Files\RichVideo.exe 23 - [Microsoft Corporation] : C:\Windows\system32\SLsvc.exe 23 - : C:\Windows\system32\Drivers\sptd.sys 23 - [Microsoft Corporation] : C:\Program Files\Windows Live\Messenger\usnsvc.exe 23 - [Microsoft Corporation] : C:\Program Files\Windows Media Player\wmpnetwk.exe 23 - [Marvell] : C:\Windows\system32\DRIVERS\yk60x86.sys 23 - : C:\??\C:\ProgramData\Spyware Terminator\FileObjInfo.sys Threat Files : C:\Users\Loïc\AppData\Local\Temp\lvoashby.dll : C:\Users\Loïc\AppData\Local\Temp\yudjkcak.dll : C:\Windows\system32\Drivers\sptd.sys : C:\Program Files\EVEREST POKER\CSTART.EXE : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Everest Poker\Everest Poker.lnk : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Everest Poker\Uninstall Everest Poker.lnk : C:\Program Files\Everest Poker\casino.exe : C:\Program Files\Everest Poker\Everest Poker.exe : C:\Program Files\Everest Poker\gvbase.dll : C:\Program Files\Everest Poker\gvmain.dll : C:\Program Files\Everest Poker\gvmain.exe : C:\Program Files\Everest Poker\gvnetwork.dll : C:\Program Files\Everest Poker\gvsound.dll : C:\Program Files\Everest Poker\gvcrt.dll : C:\Program Files\Everest Poker\gvgfx-dib.dll : C:\Program Files\Everest Poker\gvgfx.dll : C:\Program Files\Everest Poker\init.ini : C:\Program Files\Everest Poker\log.dat : C:\Program Files\Everest Poker\settings.ini : C:\Program Files\Everest Poker oc_fr.ini : C:\Program Files\Everest Poker\data\fonts\kgp-en.ttf : C:\Program Files\Everest Poker\data\mp-lobby\fr.gvt : C:\Program Files\Everest Poker\data\mp-lobby\shared.gvt : C:\Program Files\Everest Poker\data\mp-poker\shared.gvt : C:\Program Files\Everest Poker\data\mp-poker\background\default.gvt : C:\Program Files\Everest Poker\data\mp-poker\fr\bitmaps.gvt : C:\Program Files\Everest Poker\data\mp-poker\fr\mp-poker_strings.txt : C:\Program Files\Everest Poker\data\mp-poker\fr\mp-poker_tutorial.txt : C:\Program Files\Everest Poker\data\shared\fr\country.txt : C:\Program Files\Everest Poker\data\shared\fr\language.txt : C:\Program Files\Everest Poker\data\shared\fr\ordinal.txt : C:\Program Files\Everest Poker\data\shared\shared\bitmaps\btn_scroll.gvt : C:\Program Files\Everest Poker\data\shared\shared\bitmaps\check.art : C:\Program Files\Everest Poker\data\shared\shared\bitmaps\chips.art : C:\Program Files\Everest Poker\data\shared\shared\sounds\button.ogg : C:\Program Files\Everest Poker\data\shared\shared\sounds\carddeal.ogg : C:\Program Files\Everest Poker\data\shared\shared\sounds\cardflip.ogg : C:\Program Files\Everest Poker\data\shared\shared\sounds\chipclick.ogg : C:\Program Files\Everest Poker\data\startup\en\startup_strings.txt : C:\Program Files\Everest Poker\data\startup\fr\cstart.txt : C:\Program Files\Everest Poker\data\startup\fr\startup_strings.txt : C:\Program Files\Everest Poker\data\startup\shared\bitmaps\splash_poker.art : C:\Program Files\Everest Poker\data\startup\shared\icons\ep.ico : C:\Program Files\Everest Poker\data\startup\shared\sounds\alert.ogg : C:\Program Files\Everest Poker\history\11.txt : C:\Program Files\Everest Poker\history\12.txt : C:\Program Files\Everest Poker\history\13.txt : C:\Program Files\Everest Poker\history\14.txt : C:\Program Files\Everest Poker\history\15.txt : C:\Program Files\Everest Poker\history\16.txt : C:\Program Files\Everest Poker\history\17.txt : C:\Program Files\Everest Poker\history\19.txt : C:\Program Files\Everest Poker\history\2.txt : C:\Program Files\Everest Poker\history\21.txt : C:\Program Files\Everest Poker\history\22.txt : C:\Program Files\Everest Poker\history\23.txt : C:\Program Files\Everest Poker\history\3.txt : C:\Program Files\Everest Poker\history\4.txt : C:\Program Files\Everest Poker\var\content-fr.dat : C:\Documents and Settings\All Users\Desktop\Everest Poker.lnk : C:\Windows\system32\esuofndw.dll : C:\Windows\system32\qgbkjywq.dll : C:\Windows\system32\qgowxaqm.dll Advanced Files Report %SYSDIR%\Ati2evxx.exe [ATI Technologies Inc.] [ATI External Event Utility for Windows] MD5=C74D9A831B523EF5A66F4F13B2DDEA2E SIZE=569344 %SYSDIR%\RtkAPO.dll [Realtek Semiconductor Corp.] [Realtek(r) LFX/GFX DSP component] MD5=411B9DE081BAFC4A46952FAA73B8560B SIZE=1844224 %SYSDIR%\SLsvc.exe [Microsoft Corporation] [Système d'exploitation Microsoft® Windows®] MD5=A1DCD30534835CB67733AD00175125A6 SIZE=2605568 %SYSDIR%\Ati2edxx.dll [ATI Technologies, Inc.] [ATI External Device Utility] MD5=E1AF1DB9EDE02F647EC335033E9D4839 SIZE=42496 %SYSDIR%\atipdlxx.dll [ATI Technologies, Inc.] [ATI Desktop Component] MD5=29BE37C147AD09B99E25C5233224455C SIZE=245760 %SYSDIR%\ati2evxx.dll [ATI Technologies Inc.] [ATI External Event Utility for Windows] MD5=99E8951F60AAA6F49019AD6CD228BBCA SIZE=233472 %PROGRAMFILES%\Lavasoft\Ad-Aware 2007\aawservice.exe [Lavasoft] [Ad-Aware 2007 Service] MD5=0629361FAC4576BA48AB39F4903DCE9E SIZE=587096 %PROGRAMFILES%\Lavasoft\Ad-Aware 2007\CEAPI.dll [Lavasoft] [CEAPI Dynamic Link Library] MD5=759C45CA544A92DE4B88618894A15587 SIZE=738664 %PROGRAMFILES%\Lavasoft\Ad-Aware 2007\PKArchive85u.dll [PKWARE, Inc.] [PKWARE Archive API] MD5=46374252AFA0A37F4F7AF528F6F16B96 SIZE=907096 %PROGRAMFILES%\Lavasoft\Ad-Aware 2007\Update.dll [] [Update Dynamic Link Library] MD5=72CCE73551D24D7863369F3BFD6548C9 SIZE=525664 %SYSDIR%\hpzsnt07.dll [HP] [HP DeskJet] MD5=FB44C8568224451A43B745C39C182406 SIZE=184386 %PROGRAMFILES%\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [CyberLink] [CyberLink CLMSServer] MD5=A5F948A07B69401683BD809EEA3DC34B SIZE=266343 %PROGRAMFILES%\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaServer.dll [CyberLink] [CyberLink PCMMediaServer] MD5=D4F76F8819674C8AE7E862FD52EA7D97 SIZE=479232 %PROGRAMFILES%\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLSchRecordMonitor.dll [] MD5=33DCFA425C2A584DD8CF13BEAF995E83 SIZE=98304 %PROGRAMFILES%\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\sqlite3.dll [] MD5=5E77D83899D0CAC845C22BEA665FE261 SIZE=260096 %PROGRAMFILES%\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMediaFormat.dll [CyberLink] [CyberLink CLMediaFormat] MD5=A52F5B7CBB80ACAAA898383C9511B3AC SIZE=73728 %SystemDiskRoot%\Acer\Empowering Technology\ePerformance\MemCheck.exe [] [MemCheck.Service] MD5=509980831739ED65E173EC6CAB056B5B SIZE=28672 %SystemDiskRoot%\Acer\Empowering Technology\ePerformance\MemCheck.Interface.dll [] [MemCheck.Interface] MD5=0A6D99AE347D58FB4FE81BA35BA52365 SIZE=16384 %SystemDiskRoot%\Acer\Empowering Technology\ePerformance\ePerformance.Library.dll [] [ePerformance.Library] MD5=5814B9AC8D01CA9B0540A7ACEEF8FEC6 SIZE=40960 %SystemDiskRoot%\Acer\Empowering Technology\ePerformance\log4net.dll [The Apache Software Foundation] [log4net] MD5=B89CB7F3F1A1E2807E708F5435DEB13D SIZE=270336 %SystemDiskRoot%\Acer\Empowering Technology\eDataSecurity\eDSService.exe [HiTRSUT] [eDataSecurity Management] MD5=F87DDE13D57062DA8EBA2368667D8130 SIZE=457512 %SYSDIR%\PSDUtil.dll [HiTRUST] MD5=8FF15B0E7C6F4627C007EAF3ADAFA083 SIZE=121344 %SYSDIR%\CryptoAPI.dll [HiTRUST] [CryptoAPI] MD5=DF53B8BD2C2D86E8CFEB4BB488B5EA37 SIZE=401408 %SYSDIR%\sysenv.dll [HiTRUST] [SysEnv] MD5=26114324A6F9A71DADC97413B22FF8AD SIZE=286720 %COMMONFILES%\LightScribe\LSSrvc.exe [Hewlett-Packard Company] [LightScribe] MD5=793FF718477345CD5D232C50BED1E452 SIZE=61440 %COMMONFILES%\LightScribe\LSSProxy.dll [Hewlett-Packard Company] [LightScribe] MD5=D7EB32B51B7472FBEE86BFA47B3C4BC5 SIZE=81920 %COMMONFILES%\LightScribe\LSLog.dll [Hewlett-Packard Company] [LightScribe] MD5=0EE266A90D43E82A07CF33755D6DE1CC SIZE=32768 %PROGRAMFILES%\CyberLink\Shared Files\RichVideo.exe [] [RichVideo Module] MD5=A76CDDB6D1F25797843E2557A2118E2E SIZE=143360 %SystemDiskRoot%\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [Acer Inc.] [eRecoveryService] MD5=A2580C15D2664D18C3E140C7F98B366C SIZE=53248 %SystemDiskRoot%\Acer\Empowering Technology\eRecovery\ServiceInterface.dll [] [ServiceInterface] MD5=1F8F142EDDCD886BA81A832EF2136C68 SIZE=16384 %SystemDiskRoot%\Acer\Empowering Technology\eRecovery\IERYETF.dll [] [IERYETF] MD5=6C05BAB88EB6A65A56BBE7A3DBF72E0A SIZE=16384 %SystemDiskRoot%\Acer\Empowering Technology\eRecovery\INT15.dll [] MD5=195A33F53A7D346191E72A921E2A7760 SIZE=81920 %SYSDIR%\atiumdag.dll [ATI Technologies Inc.] [ATI Technologies Inc. Radeon DirectX Universal Driver] MD5=4737F8E9689EAFBB7E4CC464B157346F SIZE=2759168 %SYSDIR%\atiumdva.dll [ATI Technologies Inc.] [ATI Technologies Inc. Radeon Video Acceleration Universal Driver] MD5=FBDA61669F22AD42BC6333A56582CC4A SIZE=2731008 %SYSDIR%\MsnChatHook.dll [HiTRUST Inc.] [MsnChatHook] MD5=81ADB60C39DECB86676D1C6F9578E68B SIZE=94208 %SYSDIR%\ShowErrMsg.dll [] [ShowErrMsg] MD5=DBC8E6FF0168A4F4BEA32565878571E0 SIZE=63488 %SYSDIR%\BatchCrypto.dll [] [BatchCrypto Dynamic Link Library] MD5=7135365E28F2502D56FBEDB5854D1B9C SIZE=28672 %SYSDIR%\keyManager.dll [HiTRSUT] [keyManager] MD5=998883A579D77E07F0833D84CE46593B SIZE=237568 %SYSDIR%\atitmmxx.dll [] [TMM Com Clone Control Module] MD5=451A032B54F5620DC7D66DB20B3484D3 SIZE=159744 %SYSDIR%\ADMIN_CLASS_LIB.dll [HiTRUST] [eDataSecurity Aministration Core Class library] MD5=4D9367904655D53D46CDD74A8B202B73 SIZE=123392 %PROGRAMFILES%\Messenger Plus! Live\Detoured.dll [] MD5=6256684495C499B22DCDBA266E4F2494 SIZE=4096 %PROGRAMFILES%\Messenger Plus! Live\libsndfile.dll [] MD5=4D317140C3EAA32B8871731495E81C05 SIZE=385024 %PROGRAMFILES%\Messenger Plus! Live\lame_enc.dll [] MD5=869B190E16CAFD9446B4A2114E601FA6 SIZE=401408 %PROGRAMFILES%\DAEMON Tools\daemon.dll [DT Soft Ltd.] [DAEMON Tools] MD5=47E55070D8E1E329238154EE6E3122A8 SIZE=892312 %PROGRAMFILES%\DAEMON Tools\cryptapi.dll [] MD5=652D8D6E149790C879CF46F4D705698C SIZE=131072 %PROGRAMFILES%\DAEMON Tools\Plugins\Images\bw5mount.dll [] [Blindwrite 5/6 image access library] MD5=E8E41362EC073388A92DD1F6DA4523E0 SIZE=7680 %PROGRAMFILES%\DAEMON Tools\Plugins\Images\bwtmount.dll [DT Soft Ltd.] [Image access plugin] MD5=9F57DEED2D44AE778C0D0877BC035E54 SIZE=12288 %PROGRAMFILES%\DAEMON Tools\Plugins\Images\ccdmount.dll [DT Soft Ltd.] [Image access plugin] MD5=D36C418C8AEFF68E72C3BEEE52749AE0 SIZE=7168 %PROGRAMFILES%\DAEMON Tools\Plugins\Images\cuemount.dll [DT Soft Ltd.] [Image access plugin] MD5=254A2CD46D23C0B2692DDED53FE58048 SIZE=9728 %PROGRAMFILES%\DAEMON Tools\Plugins\Images\iszmount.dll [DT Soft Ltd.] [Image access plugin] MD5=232F9C11D98977B6DB2DD41BA8B14649 SIZE=7168 %PROGRAMFILES%\DAEMON Tools\Plugins\Images\mdsmount.dll [DT Soft Ltd.] [Image access plugin] MD5=357E47D4A14970044D2983EF814099D5 SIZE=24064 %PROGRAMFILES%\DAEMON Tools\Plugins\Images rgmount.dll [DT Soft Ltd.] [Image access plugin] MD5=81F898D8B1234806A99E65017EA8D2AB SIZE=12800 %PROGRAMFILES%\DAEMON Tools\Plugins\Images\pdimount.dll [DT Soft Ltd.] [Image access plugin] MD5=908B345BCC15E955ED2957329202BAA4 SIZE=7680 %PROGRAMFILES%\DAEMON Tools\Plugins\Images\pfcmount.dll [DT Soft Ltd.] [Image access plugin] MD5=D5AE88643391E0788E73CCA08E3ED743 SIZE=6144 %SYSDIR% undll32.exe [Microsoft Corporation] [Système d'exploitation Microsoft® Windows®] MD5=4B555106290BD117334E9A08761C035A SIZE=44544 %PROGRAMFILES%\SAGEM\SAGEM F@st 800-840\dslmon.exe [] [DSLMON Application] MD5=B2EB1A530F47EEEA0E8F42D4D29392EE SIZE=962663 %PROGRAMFILES%\SAGEM\SAGEM F@st 800-840\Languages\French.dll [] [DSLMON Application] MD5=A7D31B1D1F5CC9FD81FDF0C9F8CC8D36 SIZE=81920 %PROGRAMFILES%\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=03163BAF3A5DBF8742804093931D7D32 SIZE=147456 %PROGRAMFILES%\Hewlett-Packard\Digital Imaging\bin\hpqcxm08.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=CC9B2B1C42766A18A42226F41637B789 SIZE=122880 %PROGRAMFILES%\Hewlett-Packard\Digital Imaging\bin\hpodvb08.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=D37ABC42E55B4D69685345233C7B5915 SIZE=200704 %PROGRAMFILES%\Hewlett-Packard\Digital Imaging\bin\hpodvd08.dll [Hewlett-Packard] [Hewlett-Packard hpodvd08] MD5=0C8B5063810B0AF4FE765682ED53E1A7 SIZE=212992 %PROGRAMFILES%\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe [] MD5=FD3A651B9E9B6A20BBAC78525C8A4694 SIZE=200812 %PROGRAMFILES%\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSClient.dll [CyberLink] [CyberLink CLMSClient] MD5=273130477E405E17BF945D3E72B375F0 SIZE=113800 %PROGRAMFILES%\Windows Media Player\wmpnetwk.exe [Microsoft Corporation] [Système d'exploitation Microsoft® Windows®] MD5=ACB2E63D50157E3EA7140F29D9E76A48 SIZE=895488 %PROGRAMFILES%\OpenOffice.org 2.1\program\soffice.exe [OpenOffice.org] MD5=303EAD15DE8EE43CC874C709BB17BF2E SIZE=2334720 %PROGRAMFILES%\OpenOffice.org 2.1\program\uwinapi.dll [Sun Microsystems, Inc.] MD5=0724A7FEF633C670ED97E047808E8985 SIZE=98304 %PROGRAMFILES%\OpenOffice.org 2.1\program\soffice.BIN [OpenOffice.org] MD5=550E3443C77EDE680C06BB47D9DA276D SIZE=2486272 %PROGRAMFILES%\OpenOffice.org 2.1\program\vcl680mi.dll [Sun Microsystems, Inc.] MD5=FE525F6B902C2096697EE8054064F738 SIZE=2297856 %PROGRAMFILES%\OpenOffice.org 2.1\program\sot680mi.dll [Sun Microsystems, Inc.] MD5=6A770816DBB5C3BE53B71FB0376193AF SIZE=217088 %PROGRAMFILES%\OpenOffice.org 2.1\program l680mi.dll [Sun Microsystems, Inc.] MD5=74895FC0673A3C44A9AFAD63DEB47CE6 SIZE=397312 %PROGRAMFILES%\OpenOffice.org 2.1\program\cppu3.dll [Sun Microsystems, Inc.] MD5=8D4E89B0BA15DD45110D425B1B1C6648 SIZE=114688 %PROGRAMFILES%\OpenOffice.org 2.1\program\sal3.dll [Sun Microsystems, Inc.] MD5=9691F9E9390C587CB4826E99AE773774 SIZE=1720320 %PROGRAMFILES%\OpenOffice.org 2.1\program\stlport_vc7145.dll [STLport Consulting, Inc.] [STLport Standard ANSI C++ Libarary] MD5=D66A53BD97E40512C20E99260D43FD11 SIZE=577536 %PROGRAMFILES%\OpenOffice.org 2.1\program\vos3MSC.dll [Sun Microsystems, Inc.] MD5=C8B7EF3EC0883557539A53C5E4D0B0D2 SIZE=47104 %PROGRAMFILES%\OpenOffice.org 2.1\program\basegfx680mi.dll [Sun Microsystems, Inc.] MD5=0082001425755A732A25CFC5E379897A SIZE=229376 %PROGRAMFILES%\OpenOffice.org 2.1\program\i18nisolang1MSC.dll [Sun Microsystems, Inc.] MD5=F597C591E874B503EC7D9D8028687B4B SIZE=15360 %PROGRAMFILES%\OpenOffice.org 2.1\program\utl680mi.dll [Sun Microsystems, Inc.] MD5=0D015D885537B52AE0D381756B645219 SIZE=290816 %PROGRAMFILES%\OpenOffice.org 2.1\program\salhelper3MSC.dll [Sun Microsystems, Inc.] MD5=1DF4FE0F23B5B2497299870556BD08C0 SIZE=9728 %PROGRAMFILES%\OpenOffice.org 2.1\program\comphelp4MSC.dll [Sun Microsystems, Inc.] MD5=43BD9B43FF5CF0CF1C1B3AB16C3E5807 SIZE=446464 %PROGRAMFILES%\OpenOffice.org 2.1\program\cppuhelper3MSC.dll [Sun Microsystems, Inc.] MD5=289D06D13F1585963F731B8D3A0A761F SIZE=241664 %PROGRAMFILES%\OpenOffice.org 2.1\program\ucbhelper3MSC.dll [Sun Microsystems, Inc.] MD5=EC3F51973A36C0005253792A0FAB9674 SIZE=245760 %PROGRAMFILES%\OpenOffice.org 2.1\program\icuuc26.dll [IBM Corporation and others] [International Components for Unicode] MD5=FDC9F44E329BF8E50D5561039B1B675E SIZE=524288 %PROGRAMFILES%\OpenOffice.org 2.1\program\icudt26l.dll [IBM Corporation and others] [International Components for Unicode] MD5=8A0FF83221857EFC4C11B09BEEB792C2 SIZE=3915776 %PROGRAMFILES%\OpenOffice.org 2.1\program\svl680mi.dll [Sun Microsystems, Inc.] MD5=FBFFB08DC7D47D397C71ADE06298A50D SIZE=483328 %PROGRAMFILES%\OpenOffice.org 2.1\program\svt680mi.dll [Sun Microsystems, Inc.] MD5=61E7A9B8969EB0FDEA2B8B1B3D36EDD9 SIZE=2093056 %PROGRAMFILES%\OpenOffice.org 2.1\program k680mi.dll [Sun Microsystems, Inc.] MD5=80592AE8455EB863318241E7DF753B5C SIZE=1167360 %PROGRAMFILES%\OpenOffice.org 2.1\program\jvmfwk3.dll [Sun Microsystems, Inc.] MD5=6A1205BF310C3BA49E7710498F43C0F0 SIZE=81920 %PROGRAMFILES%\OpenOffice.org 2.1\program\libxml2.dll [] MD5=7C4374B6271580EC90924FDC2833FDD7 SIZE=828416 %PROGRAMFILES%\OpenOffice.org 2.1\program\servicemgr.uno.dll [Sun Microsystems, Inc.] MD5=1529FBDEF8AC4E630F2631840C88B2A1 SIZE=81920 %PROGRAMFILES%\OpenOffice.org 2.1\program\shlibloader.uno.dll [Sun Microsystems, Inc.] MD5=3E4E3ACBEF0CE9F0641AA94402EFCC54 SIZE=18432 %PROGRAMFILES%\OpenOffice.org 2.1\program\simplereg.uno.dll [Sun Microsystems, Inc.] MD5=1668BE720E668933C087D8973FE63D2B SIZE=44032 %PROGRAMFILES%\OpenOffice.org 2.1\program estedreg.uno.dll [Sun Microsystems, Inc.] MD5=837E630F87BD400FCED979C26D40C2AE SIZE=39936 %PROGRAMFILES%\OpenOffice.org 2.1\program ypemgr.uno.dll [Sun Microsystems, Inc.] MD5=4A4DEA2541FEB9EDB83A2DAE1C1CD19C SIZE=90112 %PROGRAMFILES%\OpenOffice.org 2.1\program\implreg.uno.dll [Sun Microsystems, Inc.] MD5=91ED2F52A431DA2BA7A98DC334B2D93F SIZE=50688 %PROGRAMFILES%\OpenOffice.org 2.1\program\security.uno.dll [Sun Microsystems, Inc.] MD5=4CEFD353322A8B6F0FBC27F3FFA70F33 SIZE=69632 %PROGRAMFILES%\OpenOffice.org 2.1\program eg3.dll [Sun Microsystems, Inc.] MD5=D64C45596FF479EC6FFE8F23B5C95A73 SIZE=90112 %PROGRAMFILES%\OpenOffice.org 2.1\program\store3.dll [Sun Microsystems, Inc.] MD5=97A793448A23A99216D1D46DFBA9801E SIZE=61952 %PROGRAMFILES%\OpenOffice.org 2.1\program egtypeprov.uno.dll [Sun Microsystems, Inc.] MD5=A2EB163D173DC97B3FDE18A2160CE584 SIZE=118784 %PROGRAMFILES%\OpenOffice.org 2.1\program\configmgr2.uno.dll [Sun Microsystems, Inc.] MD5=61B892BA9F94BE9A5C0AE2DBFE43F524 SIZE=1220608 %PROGRAMFILES%\OpenOffice.org 2.1\program ypeconverter.uno.dll [Sun Microsystems, Inc.] MD5=66197B3EE621C08D2877E5D4677F08FA SIZE=27136 %PROGRAMFILES%\OpenOffice.org 2.1\program\sysmgr1.uno.dll [Sun Microsystems, Inc.] MD5=90189749025AAA8F9EF2CB2FEDD9C16F SIZE=29184 %PROGRAMFILES%\OpenOffice.org 2.1\program\sax.uno.dll [Sun Microsystems, Inc.] MD5=D63A0E683FFF42437465012A35A2B3B2 SIZE=126976 %PROGRAMFILES%\OpenOffice.org 2.1\program\localebe1.uno.dll [Sun Microsystems, Inc.] MD5=FA5496AEC32F2AEEB21E3E1755A7D3F8 SIZE=20992 %PROGRAMFILES%\OpenOffice.org 2.1\program\behelper.uno.dll [Sun Microsystems, Inc.] MD5=B1DEFFAA4DC1A6B31206A8A01C6D3DC1 SIZE=22528 %PROGRAMFILES%\OpenOffice.org 2.1\program\uriproc.uno.dll [Sun Microsystems, Inc.] MD5=4A2AEF17506B88564F9705269F37D62A SIZE=39424 %PROGRAMFILES%\OpenOffice.org 2.1\program\ucb1.dll [Sun Microsystems, Inc.] MD5=8A38E1783CB8E2CAA6B940097FD4C1EE SIZE=151552 %PROGRAMFILES%\OpenOffice.org 2.1\program\fwl680mi.dll [Sun Microsystems, Inc.] MD5=D0F17E898E9D1BB937226A0A04D363DE SIZE=90112 %PROGRAMFILES%\OpenOffice.org 2.1\program\fwi680mi.dll [Sun Microsystems, Inc.] MD5=33333C62F525596493DE513633961DDD SIZE=126976 %PROGRAMFILES%\OpenOffice.org 2.1\program\ucpfile1.dll [Sun Microsystems, Inc.] MD5=4DC9D34A166771166D4B731AE08866B1 SIZE=188416 %PROGRAMFILES%\OpenOffice.org 2.1\program\sfx680mi.dll [Sun Microsystems, Inc.] MD5=E1DF08FDB6FC281585308DBEF6CA08E3 SIZE=2269184 %PROGRAMFILES%\OpenOffice.org 2.1\program\fwe680mi.dll [Sun Microsystems, Inc.] MD5=99A2F6B70164A74046FF26962CB1D907 SIZE=274432 %PROGRAMFILES%\OpenOffice.org 2.1\program\sb680mi.dll [Sun Microsystems, Inc.] MD5=7CD9E71FC25AC2FEB265E9CE5F1EE30A SIZE=540672 %PROGRAMFILES%\OpenOffice.org 2.1\program\xcr680mi.dll [Sun Microsystems, Inc.] MD5=48B87300F0DA32727CFD8B16835E2B92 SIZE=294912 %PROGRAMFILES%\OpenOffice.org 2.1\program\j680mi_g.dll [Sun Microsystems, Inc.] MD5=0AA6BA466167E19E15CF9A5DE083DED2 SIZE=17920 %PROGRAMFILES%\OpenOffice.org 2.1\program\jvmaccess3MSC.dll [Sun Microsystems, Inc.] MD5=19E352F38804A7B95A9DA0358648F3A1 SIZE=10752 %PROGRAMFILES%\OpenOffice.org 2.1\program\fwk680mi.dll [Sun Microsystems, Inc.] MD5=6AFB7CDA040948E3D192BB9837101ABF SIZE=1339392 %PROGRAMFILES%\OpenOffice.org 2.1\program\msci_uno.dll [Sun Microsystems, Inc.] MD5=555089F8382EBF3FF8E889E910D06E3E SIZE=37888 %PROGRAMFILES%\OpenOffice.org 2.1\program\spl680mi.dll [Sun Microsystems, Inc.] MD5=4D79FD6197543B61A5B225EF0A68CA90 SIZE=114688 %PROGRAMFILES%\OpenOffice.org 2.1\program\oleautobridge.uno.dll [Sun Microsystems, Inc.] MD5=C406B0CA64D177B0C5EAB2DB04E98358 SIZE=245760 %PROGRAMFILES%\OpenOffice.org 2.1\program\emser680mi.dll [Sun Microsystems, Inc.] MD5=BF47C772EFEC0572F12126D79E12048A SIZE=126976 %SystemDiskRoot%\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE [Acer Inc.] MD5=4E84B8FF8E71A7EFF108FF5224DA379D SIZE=319488 %SystemDiskRoot%\Acer\Empowering Technology\log4net.dll [The Apache Software Foundation] [log4net] MD5=5F3BD963F02108C36592B5728FA725C5 SIZE=270336 %SystemDiskRoot%\Acer\Empowering Technology\Acer.Empowering.Framework.DialogManager.dll [] [DialogManager] MD5=13DE8B34ADFE0651973787BA8E73C3A4 SIZE=57344 %SystemDiskRoot%\Acer\Empowering Technology\Acer.Empowering.Shared.UI.dll [Acer Inc.] MD5=FBF9FD20506BF30E901E56DD3783BD3B SIZE=53248 %SystemDiskRoot%\Acer\Empowering Technology\Acer.Empowering.Windows.Forms.dll [Acer inc.] [Acer Empowering UI Components] MD5=AC0B659D444F7A58C4C2C30741166C21 SIZE=1323008 %SystemDiskRoot%\Acer\Empowering Technology\Acer.Empowering.Framework.Presenter.dll [Acer Inc.] MD5=77809FED09844D004431A636CA8183B0 SIZE=49152 %SystemDiskRoot%\Acer\Empowering Technology\Acer.Empowering.Framework.LaunchBarView.dll [Acer Inc.] MD5=E03BCF1A7F5BE0A7BCA5FBACB99EB667 SIZE=1675264 %SystemDiskRoot%\Acer\Empowering Technology\Acer.Empowering.Framework.Shared.dll [Acer Inc.] MD5=911EC88162DA93452D5BC97E6DA0730E SIZE=32768 %SystemDiskRoot%\Acer\Empowering Technology\Acer.Empowering.Framework.Host.dll [Acer Inc.] [Empowering Technology] MD5=BB6EACA31B4B6D6F074FD8DD8FB99D6F SIZE=45056 %SystemDiskRoot%\Acer\Empowering Technology\Acer.Empowering.Framework.PasswordSetting.dll [] MD5=4B1D2A3D8A3BD10DF668CE21DA2E000C SIZE=24576 %SystemDiskRoot%\Acer\Empowering Technology\Acer.Empowering.Framework.Interface.dll [Acer Inc.] [Empowering Technology] MD5=ACF82D255E6218FD46AD9264B4C76258 SIZE=20480 %SystemDiskRoot%\Acer\Empowering Technology\fr\Acer.Empowering.Framework.LaunchBarView.resources.dll [Acer Inc.] MD5=0E20966CD760FF5E1E6B00A6A1A9AA2B SIZE=110592 %SystemDiskRoot%\Acer\Empowering Technology\eDataSecurity\eDSplugin.dll [HiTRUST Inc.] [Acer eDataSecurity Management] MD5=758975933EC54AE5BEEDD0682C1097E0 SIZE=192512 %SystemDiskRoot%\Acer\Empowering Technology\eRecovery\eRecoveryUI.dll [Acer Inc.] [Empowering Technology] MD5=2B3FF28E9D1BC62BD2CDE3082C8389CC SIZE=2285568 %SystemDiskRoot%\Acer\Empowering Technology\ePerformance\ePerformance.Plugin.dll [] [ePerformance.Plugin] MD5=2C4D5881C23918AC2E8DE313C263D683 SIZE=45056 %SystemDiskRoot%\Acer\Empowering Technology\ePerformance\ePerformance.Presenter.dll [] [ePerformance.Presenter] MD5=51EA5E23A65844AA5B3F60C5D16BC946 SIZE=24576 %SystemDiskRoot%\Acer\Empowering Technology\ePerformance\ePerformance.Model.Interface.dll [] [ePeformance.Model.Interface] MD5=E90E17C19120A277CD3AC85CCB2C83F8 SIZE=20480 %SystemDiskRoot%\Acer\Empowering Technology\ePerformance\ePerformance.Model.dll [] [ePerformance.Model] MD5=2F7E442D8915BE8D3410DED7DBF43B85 SIZE=28672 %SystemDiskRoot%\Acer\Empowering Technology\MemCheck.Interface.dll [] [MemCheck.Interface] MD5=0A6D99AE347D58FB4FE81BA35BA52365 SIZE=16384 %SystemDiskRoot%\Acer\Empowering Technology\eRecovery\fr\eRecoveryUI.resources.dll [Acer Inc.] [Empowering Technology] MD5=4E02A85E3EF011D837D5F3E355CC7650 SIZE=118784 %SystemDiskRoot%\Acer\Empowering Technology\ePerformance\fr\ePerformance.Plugin.resources.dll [] [ePerformance.Plugin] MD5=FB4DFB8D8BB0EA7E25F3478AF3F03730 SIZE=3584 %SystemDiskRoot%\Acer\Empowering Technology\eRecovery\ERAGENT.EXE [Acer Inc.] [Acer eRecovery Management] MD5=4F779AD993A2975D945EE6985CAC0FEA SIZE=397312 %PROGRAMFILES%\Windows Live\Messenger\usnsvc.exe [Microsoft Corporation] [Messenger] MD5=9D19B042A4FD5C02195071EA2FE0C821 SIZE=98328 %PROGRAMFILES%\Internet Explorer\iexplore.exe [Microsoft Corporation] [Windows® Internet Explorer] MD5=7023BC3AF58F0C47856AF147E290D81A SIZE=625152 %SYSDIR%\Macromed\Flash\Flash9e.ocx [Adobe Systems, Inc.] [Shockwave Flash] MD5=D3C50535C26190FEAD7785A03499C0AC SIZE=2987392 %SYSDIR% moc3260.dll [RealNetworks, Inc.] [Real Player(tm) ActiveX Control] MD5=E4CA4AE71A12198CA9A13835B1FF8A27 SIZE=185952 %SYSDIR%\PNCRT.dll [Real Networks, Inc] [RealPlayer/RealServer] MD5=13001EB0A58B4DE96126B16AB15FD8CC SIZE=278528 %COMMONFILES%\Microsoft Shared\Windows Live\WLLoginProxy.exe [Microsoft Corporation] [Microsoft® Windows Live Login Helper] MD5=7FA0AA2F3DABA5BEB2C4AC1EEC054EFA SIZE=118336 %SystemDiskRoot%\USERS\LOC~1\APPDATA\LOCAL\TEMP\LJJGH.DLL [] %SystemDiskRoot%\ACERSW\config\NewSetApanel.cmd [] adiras.exe [] %PROGRAMFILES%\NORTON INTERNET SECURITY\OSCHECK.EXE [] %COMMONFILES%\SYMANTEC SHARED\PIF\{B8E1DD85-8582-4C61-B58F-2F227FCA9A08}\PIFSVC.EXE [] %PROGRAMFILES%\OpenOffice.org 2.1\program\quickstart.exe [] MD5=FB0C64A2D3BA9CB3D23430847968E635 SIZE=393216 %SystemDiskRoot%\Acer\Empowering Technology\eAPLauncher.exe [Acer Inc.] [Acer eAP Launch Tool] MD5=C849D57292E58A9E1C55559930FD1082 SIZE=528384 %COMMONPROGRAMFILES%\System\wab32.dll [] %SYSDIR%\zipfldr.dll [Microsoft Corporation] [Système d'exploitation Microsoft® Windows®] MD5=C9F8C752ED450D74A51FC4DA40B0DA16 SIZE=338432 %PROGRAMFILES%\Windows Photo Gallery\PhotoViewer.dll [Microsoft Corporation] [Système d'exploitation Microsoft® Windows®] MD5=7CB1C510F55B2D5E3DE24823839D320D SIZE=2313216 %PROGRAMFILES%\Windows Media Player\wmpband.dll [Microsoft Corporation] [Système d'exploitation Microsoft® Windows®] MD5=4AEED1FBB53F915CBE30671793776A80 SIZE=99328 [] %PROGRAMFILES%\Windows Sidebar\sbdrop.dll [Microsoft Corporation] [Système d'exploitation Microsoft® Windows®] MD5=1690302570CC80160F68B604E6806802 SIZE=66048 %PROGRAMFILES%\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll [] [ACE Context Menu] MD5=3A9F70479A886DCC8E5151326156472D SIZE=73728 %PROGRAMFILES%\Windows Live\Messenger\fsshext.8.5.1302.1018.dll [Microsoft Corporation] [Messenger] MD5=8BDE1F61DFBAAE7A2916170E8B75FE0F SIZE=329240 %PROGRAMFILES%\WinRAR arext.dll [] MD5=023707D932BA31314210E6844D33D500 SIZE=129024 %PROGRAMFILES%\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe [Microsoft Corporation] [Windows Live Photo Gallery] MD5=6BE9C13981922712998FDD6CFF9A6377 SIZE=229920 %PROGRAMFILES%\Windows Live\Photo Gallery\PhotoViewerShim.dll [Microsoft Corporation] [Windows Live Photo Gallery] MD5=04F15118776E528C065CDEF9C339CA3D SIZE=46112 %PROGRAMFILES%\WINDOWS LIVE\PHOTO GALLERY\WLXPHOTOVIEWER.DLL [Microsoft Corporation] [Windows Live Photo Gallery] MD5=C5EE821BAC33EE3E7DD10A746C5DA3F0 SIZE=1514528 %PROGRAMFILES%\OPENOFFICE.ORG 2.1\PROGRAM\SHLXTHDL.DLL [Sun Microsystems, Inc.] MD5=AC548E2D1AEA3B1C4FF3DC9BB737383D SIZE=335872 %SYSDIR%\DRIVERS\adiusbaw.sys [Analog Devices Inc.] [ADSL USB WAN Driver] MD5=88FA846846E5080FA2D2FBEC1EF2AEAA SIZE=127145 %SYSDIR%\DRIVERS\aswMonFlt.sys [ALWIL Software] [avast! Antivirus System] MD5=B28EDAB0902B6C4AC89C4334186AEB4F SIZE=45648 %SYSDIR%\DRIVERS\atikmdag.sys [ATI Technologies Inc.] [ATI Radeon Family] MD5=184E2B47542BADBE5CA606F0FC9A90CC SIZE=2427392 %SYSDIR%\DRIVERS\AtiPcie.sys [ATI Technologies Inc.] [ATI PCIE Driver] MD5=A356E45E8432432C06981EA63A1E0FE8 SIZE=8192 %SystemDiskRoot%\??\%COMMONFILES%\Symantec Shared\EENGINE\eeCtrl.sys [] %SystemDiskRoot%\??\%SystemDiskRoot%\Acer\Empowering Technology\eRecovery\int15.sys [] %SYSDIR%\drivers\RTKVHDA.sys [Realtek Semiconductor Corp.] [Realtek(r) High Definition Audio Function Driver] MD5=2BD6633DB50A98534AA3262E0F9F5A14 SIZE=1761696 %SYSDIR%\DRIVERS\NTIDrvr.sys [NewTech Infosystems, Inc.] MD5=7F1C1F78D709C4A54CBB46EDE7E0B48D SIZE=6144 %SYSDIR%\DRIVERS\psdfilter.sys [HiTRUST] MD5=C2821F33B846A52FDC25FF554ACF11F2 SIZE=20264 %SYSDIR%\drivers\PSDNServ.sys [HiTRUST] MD5=28D3A91FE7791B970E6B15C88F98DFBD SIZE=16680 %SYSDIR%\drivers\psdvdisk.sys [HiTRUST] MD5=3A66F69459052DE13EF8A0F77D728A73 SIZE=60712 %SYSDIR%\DRIVERS\yk60x86.sys [Marvell] [Marvell Yukon Ethernet Controller] MD5=7927E830ECDE6DB3682CC319BAD26984 SIZE=240128 %SystemDiskRoot%\??\%ALLUSERS_APPDATA%\Spyware Terminator\FileObjInfo.sys [] %PROGRAMFILES%\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll [Microsoft Corporation] [Messenger] MD5=56319E6B4D190A2DEB4463A9CE4D4F74 SIZE=66072 End of Report

ben15 · Answer

Il a du te trouver des truc refet un scan et supprime les toute

lorikcana52 · Answer

je refais un scan avec quel logiciel ?? Cleaner?? Option 1 ?? mode sans échec ou normal ?

ben15 · Answer

Tu fais un scan avec spyware terminator ensuite tu supprime tout ce qu'il y atu as quoi comme enti virus ??

lorikcana52 · Answer

j'ai avast ...
pour le scan avec spyware terminator je supprime tous les fichiers qu'il trouve ou simplement les plus dangereux ?

ben15 · Answer

tout ce qu'il trouve. Fait un scan avec avat et il va te dire ce qu'il y a de virus sur l'ordi dis moi juste les noms .

lorikcana52 · Answer

je rentre chez moi dans une demi-heure ... j'effectue les scans et je te tiens au courant ...
Je fais d'abord spyware terminator puis Avast ensuite ?

ben15 · Answer

oui

lorikcana52 · Answer

je supprimes meme les fichiers sans danger et inconnus ??
Car il y a des fichiers d'Avast dedans par exemple ...

ben15 · Answer

supprime tout sauf avast

lorikcana52 · Answer

désolé pour le temps de réponse ...
J'ai effectué ses manipulations et depuis je n'ai plus rien ... tout est redevenu comme avant :-D
Merci beaucoup a toi Ben15

ben15 · Answer

ok c'est bien marque resolu en heut

emmy-11 · Answer

bonsoir,
moi aussi j'ai le souci pop up "powered by zedo" j'ai besoin d'aide...

Pop-up "powered by zedo"

27 réponses

Votre réponse

Discussions similaires

Newsletters