rapport hijackthis Résolu

Question

Bonjour, mon ordi n' a pas la super forme . On m'a conseillé un rapport hijackthis . Un seul probléme l' analyser ^^.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:55:52, on 5/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\libusbd-nt.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\NVIDIA Corporation
Tune
TuneService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ITE\ITE IT8212 ATA RAID Controller\RaidMgr.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\NCH Software\Prism\prism.exe
C:\PROGRA~1\FREEDO~1\fdm.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = [vous ne pouvez pas voir le lien].[enregistrez vous ici]
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = [vous ne pouvez pas voir le lien].[enregistrez vous ici]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [vous ne pouvez pas voir le lien].[enregistrez vous ici]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [vous ne pouvez pas voir le lien].[enregistrez vous ici]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [vous ne pouvez pas voir le lien].[enregistrez vous ici]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [vous ne pouvez pas voir le lien].[enregistrez vous ici]
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = [vous ne pouvez pas voir le lien].[enregistrez vous ici]
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - {F4F10C1D-87C7-404A-B4B3-000000000000} - (no file)
R3 - URLSearchHook: FRANCE version Toolbar - {bc5031f9-2097-44f1-8979-74947557d6ce} - C:\Program Files\FRANCE_version	bFRA1.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\s wg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: FRANCE version Toolbar - {bc5031f9-2097-44f1-8979-74947557d6ce} - C:\Program Files\FRANCE_version	bFRA1.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: FRANCE version Toolbar - {bc5031f9-2097-44f1-8979-74947557d6ce} - C:\Program Files\FRANCE_version	bFRA1.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [EasyPHP] "C:\Program Files\EasyPHP1-8\EasyPHP.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe" -osboot
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [McENUI] C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide
O4 - HKLM\..\Run: [RemoveWGA] H:\crack winxp\RemoveWGA.exe -startup
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation
Tune
TuneCmd.exe" clear
O4 - HKCU\..\Run: [DWQueuedReporting] "C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe " -t
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [Software Informer] "C:\Program Files\Free Download Manager\softinfo.exe" -autorun
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'Default user')
O4 - Global Startup: RAID Manager.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Add to Windows &Live Favorites - [vous ne pouvez pas voir le lien].[enregistrez vous ici]
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: [vous ne pouvez pas voir le lien].[enregistrez vous ici]
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} -
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - [vous ne pouvez pas voir le lien].[enregistrez vous ici]
O17 - HKLM\System\CCS\Services\Tcpip\..\{C5D85E58-1E4F-4DD5-BA1C-D2D80EC3A778}: NameServer = 195.238.2.22,195.238.2.21
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LibUsb-Win32 - Daemon, Version 0.1.10.1 (libusbd) - [vous ne pouvez pas voir le lien].[enregistrez vous ici] - C:\WINDOWS\system32\libusbd-nt.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: MySQL - Unknown owner - C:\PROGRA~1\EASYPH~1.0B1\MySql\bin\mysqld.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation
Tune
TuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

benurrr · Accepted Answer

salut

Télécharge Toolbar-S&D (Team IDN) sur ton Bureau. 
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

* Lance l'installation du programme en exécutant le fichier téléchargé. 
* Double-clique maintenant sur le raccourci de Toolbar-S&D. 
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée. 
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche. 
* Poste le rapport généré. (C:\TB.txt)

antouvda · Answer

merci de m' aider voilà ton souhait


   -----------\  ToolBar S&D 1.2.6   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Multiprocessor Free :               Intel(R) Pentium(R) 4 CPU 2.80GHz )
   BIOS : BIOS Date: 09/26/04 14:53:28 Ver: 08.00.10
   USER : User ( Administrator )
   BOOT : Normal boot
   Antivirus : McAfee VirusScan  (Activated)
   Firewall  : McAfee Personal Firewall  (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:149 Go (Free:76 Go)
   D:\ (CD or DVD)
   E:\ (CD or DVD)
   L:\ (USB)
   M:\ (USB)
   N:\ (USB)
   O:\ (USB)

   "C:\ToolBar SD" ( MAJ : 04-12-2008|20:40 )
   Option : [1] ( lun. 08/12/2008|14:10 )

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  Extensions

   (All Users) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Search Page"="http://g.fr.msn.be/0SEFRBE/SAOS01?FORM=TOOLBR"
   "Search Bar"="http://g.fr.msn.be/0SEFRBE/SAOS01?FORM=TOOLBR"
   "Start Page"="https://www.google.be/?gws_rd=ssl"
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\User\Bureau\config counter\Steam2222\SteamApps\antouvda\counter-strike source\cstrike\sound\admin_plugin	riererhautzen\crack.wav
   C:\DOCUME~1\User\Bureau\gravure	‚l‚charg‚s\Nero.7.Premium.v7.2.7.0.FR.Incl-Keygen.rar
   C:\DOCUME~1\User\Bureau\gravure	‚l‚charg‚s\WinZip 10.0 pro+ keygen (En Fran‡ais).zip



   1 - "C:\ToolBar SD\TB_1.txt" - lun. 08/12/2008|14:12 - Option : [1]

   -----------\  Fin du rapport a 14:12:45,70

antouvda · Answer

je fais ca

antouvda · Answer

sais tu me dire quel programme je dois laissé si te donne la liste de mes programmes au démarrage ??
(plus de craks sur mon pc )

antouvda · Answer

en ne laissant que les programme nécessaire

antouvda · Answer

ps : au démarrage j ai plein de programmes (gestionnaires des taches )

antouvda · Answer

j ai fait l analyse (j ai eu un stress car le mode sans echec a mis longtemp a s ' afficher et j avais un ecran noir )

antouvda · Answer

si tu préfere je peux t envoyer des emails 
et encore merci

antouvda · Answer

[b]SDFix: Version 1.240 [/b]
Run by Administrateur on 08/12/2008 at 16:01

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


[b]Checking Files [/b]: 

Trojan Files Found:

C:\WINDOWS\SYSTEM32\ANTI_T~1.EXE - Deleted





Removing Temp Files

[b]ADS Check [/b]:
 


                                 [b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-08 16:38:59
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\000a940192d8]
"0018c546ebe8"=hex:f8,29,df,36,e0,19,94,6d,86,9c,7a,b4,09,0f,11,37
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:f2e4bc9d
"s2"=dword:02f3ee1d
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:2b,59,74,33,82,fb,34,a1,5f,ff,50,ec,8e,77,9c,c8,47,f0,b8,fb,b0,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:2b,59,74,33,82,fb,34,a1,5f,ff,50,ec,8e,77,9c,c8,47,f0,b8,fb,b0,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\BTHPORT\Parameters\Keys\000a940192d8]
"0018c546ebe8"=hex:f8,29,df,36,e0,19,94,6d,86,9c,7a,b4,09,0f,11,37
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:2b,59,74,33,82,fb,34,a1,5f,ff,50,ec,8e,77,9c,c8,47,f0,b8,fb,b0,..

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System]
"OODEFRAG06.00.00.01WORKSTATION"="56F9C1EE444732C820AC69838E40D19F10C13265B2015FDD013FD12A41DA7A89BDA907A3ADB9EFE9DEEA79ACD91609A27EBB7310EEE0AA57362166F8FEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74C8EDD5E5BE2F6E6679DB7CE019D40AA5CA9C6AECB7A5D14075D575E7D6A3B9808805360001278DA70C8440D5759153E0617411241620139CCB72E601C05EC9DA96F5BACC820412518CF008ED11B9D761DE1BEE92EB56479C89DB9AB832A5BFB4832C158069CDC2987207E675FDB104865A04371AC70BCD5F6DF5D2606802865D6007BA11AFD03590AF62884DAA56762723849E0B1D2685AD1273F75519FB1E059E4043C8E4FB3D94F66E4C5431A62A63EDD4B6656348645BD700DB3B8AF18ABBCC4D74E0BB02F84E9D427FD3EED042CA41C48A3577B7A0B7E0A76EFB16F40B6CDD178F26055FDE6D1FB5E761368153D65D246AC9527ECD23C99B12B55335325BE16EB3A0184E8C362E802EAADE51F58A4B3C90B95474AF8871575DC62DF3FD027ED3B268319FC0F5C7D8E0B1DD7712FEBC6E13A0283430CCF4980EC3AEE3546010A75AD24828EF260F0007A96C09F2AA7651A2DA513CB506A5491BAE2EFA9C32AEF2B3DBFC4334D78CA5AD2713A006227BF8AC8F1451A3D91ACEE97870556C165F67232D975442F8DE9A49E2AEF2F2620D747647DF82D7DE197E0CA73E3376559CD64601BC160DD7100E85E5FA10C79AA846DCE7FA343F05D32B28C9A560F0D10731F8F4D6769D35593368655A5389141EF1D49D3D061ABE86C370D92BBE1C8F73D44F8DD3A06BDD2FC9D7EF4E19C59C6997906FD1D4FF4CE89C0EB1407FA5C64D3F8CCE1A19FFC64EAB7A3C8D363EEFED4A931A1B798493B212A41FDBCE3410A35E7AE0F1A65A8E85F1F43820CFB2612C75A6686678F5540204E955377EF248430BE34C0B0C98724307124732E1A040C6D3A379B06457FD3C40F68B8E6B46452EAADE8F409019ABD86D17C9672B3C45D94FDA8F00094DECDA351AAF64B0A18D45E6BCBCF5C0610C0DFE6F9852604D5DADEDCB2BB5698BC6DA4FB42FD7D8E86D3D6315018F398CF9C8E5B3B81A78BD83D4412C2D31FB01B52827D8ADEE4A2ACF8F3BD5DB83139F1A4B8DCD4EBEC8CA59F10DC3B370302AD044F45CFCF01E93B512DD04EBF84AD4490D720CE50FC0EC604DF026F874075D96A6C49552AE45096D1C8B171607781C9FBB9DAA458F55C7A4D26C82A072735BCD29280CFEBB681D6CFE4290A71238136667FC6C75406843346AB7C26A01E33A46FCDE8EAB7AFEEC9057105CE6EB9417432A0A39AB8F25B171889ED96601C2217D4FD8244521E4D6D11B4186B767C969F2864B3769D947801D5AEEE9F78B0FA4AFCD552ED26659679F4C436FECAC29A0C716ABDA63DD63580F15ED85A3C"

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


[b]Remaining Services [/b]:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[b]Remaining Files [/b]:


File Backups: - C:\SDFix\backups\backups.zip

[b]Files with Hidden Attributes [/b]:

Sat 11 Nov 2006       774,144 A..H. --- "C:\Program Files\RngInterstitial.dll"
Wed 29 Aug 2007       255,320 A..H. --- "C:\Program Files\Apple Software Update\ScriptingObjectModel.dll"
Wed 29 Aug 2007       238,936 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdateAdmin.dll"
Wed 29 Aug 2007       558,424 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdate.exe"
Wed 29 Aug 2007       345,432 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdateFiles.dll"
Mon 14 Apr 2008     1,695,232 ..SH. --- "C:\Program Files\Messenger\msmsgs.exe"
Mon 14 Apr 2008     1,314,816 A..H. --- "C:\Program Files\Outlook Express\msoe.dll"
Mon 14 Apr 2008     2,534,400 A..H. --- "C:\Program Files\Outlook Express\msoeres.dll"
Mon 14 Apr 2008       104,448 A..H. --- "C:\Program Files\Outlook Express\oeimport.dll"
Mon 14 Apr 2008        60,928 A..H. --- "C:\Program Files\Outlook Express\oemig50.exe"
Mon 14 Apr 2008        35,840 A..H. --- "C:\Program Files\Outlook Express\oemiglib.dll"
Mon 14 Apr 2008        73,728 A..H. --- "C:\Program Files\Outlook Express\setup50.exe"
Mon 14 Apr 2008        46,080 A..H. --- "C:\Program Files\Outlook Express\wab.exe"
Mon 14 Apr 2008        32,768 A..H. --- "C:\Program Files\Outlook Express\wabfind.dll"
Mon 14 Apr 2008        85,504 A..H. --- "C:\Program Files\Outlook Express\wabimp.dll"
Mon 14 Apr 2008        30,208 A..H. --- "C:\Program Files\Outlook Express\wabmig.exe"
Thu 27 Nov 2008            56 ..SHR --- "C:\WINDOWS\system32\D0BCBE7068.sys"
Thu 27 Nov 2008        11,270 A.SH. --- "C:\WINDOWS\system32\KGyGaAvL.sys"
Thu  2 Mar 2006         4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Wed 29 Aug 2007       202,072 A..H. --- "C:\Program Files\Apple Software Update\plugins\EXEInstallPlugin.dll"
Wed 29 Aug 2007       124,248 A..H. --- "C:\Program Files\Apple Software Update\plugins\MSIInstallPlugin.dll"
Mon 17 May 2004       925,696 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\AegisE5.dll"
Thu 29 Jul 2004       163,840 A..HR --- "C:\Program Files\ASUS\WLAN Card Utilities\AsAuthen.dll"
Fri 13 Aug 2004     1,557,504 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\Center.exe"
Thu  1 Jul 2004       493,056 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\ClearIcs.exe"
Thu 18 Mar 2004        49,152 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\InstDrv.exe"
Thu 23 Oct 2003        24,576 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\Launcher.exe"
Wed 11 Aug 2004     2,423,296 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\Mobile.exe"
Thu  9 Oct 2003        17,920 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\NAUser.exe"
Wed 24 Sep 2003       184,396 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\Remove.exe"
Wed 11 Jun 2003        17,920 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\Resume.exe"
Wed 28 Jul 2004     1,121,280 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\StMonitor.exe"
Wed 28 Jul 2004     1,058,304 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\TShoot.exe"
Thu  3 Feb 2000       116,224 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\Unzdll.dll"
Mon  9 Sep 2002       294,912 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\winFlash.exe"
Fri 13 Aug 2004     2,136,064 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\Wireless.exe"
Fri 13 Aug 2004     2,305,024 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\Wizard.exe"
Fri 14 Nov 2008        20,487 A.SHR --- "C:\Program Files\McAfee\MQC\MRU.bak"
Fri 14 Nov 2008           265 A.SHR --- "C:\Program Files\McAfee\MQC\qcconf.bak"
Thu 26 Oct 2006       953,192 A..H. --- "C:\Program Files\Microsoft Office\Office12\ACCDDS.DLL"
Thu 26 Oct 2006       404,320 A..H. --- "C:\Program Files\Microsoft Office\Office12\ACCDDSF.DLL"
Thu 26 Oct 2006       384,872 A..H. --- "C:\Program Files\Microsoft Office\Office12\ACCDDSLM.DLL"
Thu 26 Oct 2006     1,165,584 A..H. --- "C:\Program Files\Microsoft Office\Office12\ACCICONS.EXE"
Thu 26 Oct 2006     3,135,304 A..H. --- "C:\Program Files\Microsoft Office\Office12\ACCVDT.DLL"
Thu 26 Oct 2006        53,576 A..H. --- "C:\Program Files\Microsoft Office\Office12\AUTHZAX.DLL"
Thu 26 Oct 2006        15,168 A..H. --- "C:\Program Files\Microsoft Office\Office12\BJABLR32.DLL"
Thu 26 Oct 2006        18,776 A..H. --- "C:\Program Files\Microsoft Office\Office12\DSITF.DLL"
Thu 26 Oct 2006       106,824 A..H. --- "C:\Program Files\Microsoft Office\Office12\DSSM.EXE"
Thu 26 Oct 2006        35,160 A..H. --- "C:\Program Files\Microsoft Office\Office12\DUMPSTER.DLL"
Thu 26 Oct 2006       116,544 A..H. --- "C:\Program Files\Microsoft Office\Office12\EMABLT32.DLL"
Thu 26 Oct 2006       154,960 A..H. --- "C:\Program Files\Microsoft Office\Office12\ENVELOPE.DLL"
Thu 26 Oct 2006        72,472 A..H. --- "C:\Program Files\Microsoft Office\Office12\excelcnvpxy.dll"
Mon 12 Jun 2006       264,192 A..H. --- "C:\Program Files\Microsoft Office\Office12\EXCHCSP.DLL"
Thu 26 Oct 2006        15,680 A..H. --- "C:\Program Files\Microsoft Office\Office12\HLP95EN.DLL"
Thu 26 Oct 2006        66,368 A..H. --- "C:\Program Files\Microsoft Office\Office12\INLAUNCH.DLL"
Thu 26 Oct 2006        78,648 A..H. --- "C:\Program Files\Microsoft Office\Office12\INTLDATE.DLL"
Thu 26 Oct 2006       103,208 A..H. --- "C:\Program Files\Microsoft Office\Office12\MCPS.DLL"
Thu 26 Oct 2006        88,896 A..H. --- "C:\Program Files\Microsoft Office\Office12\Microsoft.Office.Interop.InfoPath.Xml.dll"
Thu 26 Oct 2006       404,296 A..H. --- "C:\Program Files\Microsoft Office\Office12\Microsoft.Office.Interop.InfoPath.SemiTrust.dll"
Thu 26 Oct 2006        21,312 A..H. --- "C:\Program Files\Microsoft Office\Office12\MLSHEXT.DLL"
Fri 27 Oct 2006        76,088 A..H. --- "C:\Program Files\Microsoft Office\Office12\MSOHEV.DLL"
Thu 26 Oct 2006        61,240 A..H. --- "C:\Program Files\Microsoft Office\Office12\MSOHEVI.DLL"
Thu 26 Oct 2006        67,896 A..H. --- "C:\Program Files\Microsoft Office\Office12\MSOHTMED.EXE"
Fri 27 Oct 2006        35,152 A..H. --- "C:\Program Files\Microsoft Office\Office12\MSOSTYLE.DLL"
Thu 26 Oct 2006       727,840 A..H. --- "C:\Program Files\Microsoft Office\Office12\msproof6.dll"
Thu 26 Oct 2006        96,008 A..H. --- "C:\Program Files\Microsoft Office\Office12\MSRTEDIT.DLL"
Thu 26 Oct 2006       145,688 A..H. --- "C:\Program Files\Microsoft Office\Office12\MSTORE.EXE"
Thu 26 Oct 2006     1,512,304 A..H. --- "C:\Program Files\Microsoft Office\Office12
lsdata0000.dll"
Thu 26 Oct 2006     2,277,224 A..H. --- "C:\Program Files\Microsoft Office\Office12\NLSDATA0007.DLL"
Thu 26 Oct 2006     9,877,360 A..H. --- "C:\Program Files\Microsoft Office\Office12\NLSDATA000A.DLL"
Thu 26 Oct 2006     2,674,536 A..H. --- "C:\Program Files\Microsoft Office\Office12\NLSDATA000C.DLL"
Thu 26 Oct 2006    24,390,512 A..H. --- "C:\Program Files\Microsoft Office\Office12\NLSDATA0009.DLL"
Thu 26 Oct 2006     5,335,408 A..H. --- "C:\Program Files\Microsoft Office\Office12\NLSLEXICONS000A_SP.dll"
Thu 26 Oct 2006     7,253,360 A..H. --- "C:\Program Files\Microsoft Office\Office12\NLSMODELS000A.dll"
Thu 26 Oct 2006        16,192 A..H. --- "C:\Program Files\Microsoft Office\Office12\NPOFF12.DLL"
Fri 27 Oct 2006        54,680 A..H. --- "C:\Program Files\Microsoft Office\Office12\OFFRHD.DLL"
Fri 20 Oct 2006       637,744 A..H. --- "C:\Program Files\Microsoft Office\Office12\ogalegit.dll"
Thu 26 Oct 2006        23,392 A..H. --- "C:\Program Files\Microsoft Office\Office12\oisctrl.dll"
Thu 26 Oct 2006       254,776 A..H. --- "C:\Program Files\Microsoft Office\Office12\OLKFSTUB.DLL"
Fri 27 Oct 2006        31,000 A..H. --- "C:\Program Files\Microsoft Office\Office12\OUTLACCT.DLL"
Fri 27 Oct 2006       138,512 A..H. --- "C:\Program Files\Microsoft Office\Office12\OUTLCTL.DLL"
Thu 26 Oct 2006       368,968 A..H. --- "C:\Program Files\Microsoft Office\Office12\PPSLAX.DLL"
Thu 26 Oct 2006        48,448 A..H. --- "C:\Program Files\Microsoft Office\Office12\PUBTRAP.DLL"
Thu 26 Oct 2006        39,208 A..H. --- "C:\Program Files\Microsoft Office\Office12\RECALL.DLL"
Thu 26 Oct 2006        40,424 A..H. --- "C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL"
Fri 27 Oct 2006       408,880 A..H. --- "C:\Program Files\Microsoft Office\Office12\RTFHTML.DLL"
Thu 26 Oct 2006       291,128 A..H. --- "C:\Program Files\Microsoft Office\Office12\SAEXT.DLL"
Thu 26 Oct 2006        55,056 A..H. --- "C:\Program Files\Microsoft Office\Office12\SCANOST.EXE"
Thu 26 Oct 2006        24,368 A..H. --- "C:\Program Files\Microsoft Office\Office12\SENDTO.DLL"
Thu 26 Oct 2006        70,456 A..H. --- "C:\Program Files\Microsoft Office\Office12\SEQCHK10.DLL"
Thu 26 Oct 2006        34,104 A..H. --- "C:\Program Files\Microsoft Office\Office12\SETLANG.EXE"
Thu 26 Oct 2006       227,128 A..H. --- "C:\Program Files\Microsoft Office\Office12\STSUPLD.DLL"
Fri 13 Oct 2006       503,296 A..H. --- "C:\Program Files\Microsoft Office\Office12\USP10.DLL"
Thu 26 Oct 2006        33,080 A..H. --- "C:\Program Files\Microsoft Office\Office12\VPREVIEW.EXE"
Wed 13 Sep 2006       215,840 A..H. --- "C:\Program Files\Microsoft Office\Office12\WDBIMP.DLL"
Thu 26 Oct 2006       509,200 A..H. --- "C:\Program Files\Microsoft Office\Office12\Wordcnvr.dll"
Sun 22 Apr 2007        71,168 ..SHR --- "C:\Program Files\Tripy\Arpentar\Setup.exe"
Sat  9 Jul 2005        16,384 A.SHR --- "C:\Program Files\Tripy\Arpentar\_Setup.dll"
Mon 16 Apr 2001       397,312 A..H. --- "C:\Program Files\Adobe\Acrobat 5.0\Reader\AceLite.dll"
Mon 16 Apr 2001        53,248 ...H. --- "C:\Program Files\Adobe\Acrobat 5.0\Reader\ACROFX32.DLL"
Mon 24 Sep 2001     3,891,268 A..H. --- "C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe"
Wed  5 Sep 2001     1,138,688 A..H. --- "C:\Program Files\Adobe\Acrobat 5.0\Reader\Agm.dll"
Mon 16 Apr 2001       147,456 A..H. --- "C:\Program Files\Adobe\Acrobat 5.0\Reader\Bib.dll"
Tue 24 Jul 2001     1,441,792 A..H. --- "C:\Program Files\Adobe\Acrobat 5.0\Reader\CoolType.dll"
Tue 19 Jun 2001        86,016 A..H. --- "C:\Program Files\Adobe\Acrobat 5.0\Reader\OPP.dll"
Mon 16 Apr 2001       878,592 A..H. --- "C:\Program Files\Adobe\Acrobat 5.0\Reader\vdk150.dll"
Mon 10 Sep 2001       172,032 ...H. --- "C:\Program Files\Adobe\Acrobat 5.0\Reader\WHA Library.dll"
Wed 29 Aug 2007        24,576 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdate.Resources\da.lproj\SoftwareUpdateLocalized.dll"
Wed 29 Aug 2007        26,624 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdate.Resources\de.lproj\SoftwareUpdateLocalized.dll"
Wed 29 Aug 2007        24,064 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdate.Resources\en.lproj\SoftwareUpdateLocalized.dll"
Wed 29 Aug 2007        25,600 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdate.Resources\es.lproj\SoftwareUpdateLocalized.dll"
Wed 29 Aug 2007        24,576 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdate.Resources\fi.lproj\SoftwareUpdateLocalized.dll"
Wed 29 Aug 2007        26,112 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdate.Resources\fr.lproj\SoftwareUpdateLocalized.dll"
Wed 29 Aug 2007        25,088 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdate.Resources\it.lproj\SoftwareUpdateLocalized.dll"
Wed 29 Aug 2007        24,064 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdate.Resources\ja.lproj\SoftwareUpdateLocalized.dll"
Wed 29 Aug 2007        24,064 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdate.Resources\ko.lproj\SoftwareUpdateLocalized.dll"
Wed 29 Aug 2007        24,576 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdate.Resources
b.lproj\SoftwareUpdateLocalized.dll"
Wed 29 Aug 2007        26,112 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdate.Resources
l.lproj\SoftwareUpdateLocalized.dll"
Wed 29 Aug 2007        25,088 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdate.Resourcesu.lproj\SoftwareUpdateLocalized.dll"
Wed 29 Aug 2007        24,576 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdate.Resources\sv.lproj\SoftwareUpdateLocalized.dll"
Wed 29 Aug 2007        24,064 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdate.Resources\zh_CN.lproj\SoftwareUpdateLocalized.dll"
Wed 29 Aug 2007        24,064 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdate.Resources\zh_TW.lproj\SoftwareUpdateLocalized.dll"
Wed 29 Aug 2007         4,608 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdateFiles.Resources\da.lproj\SoftwareUpdateFilesLocalized.dll"
Wed 29 Aug 2007         5,120 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdateFiles.Resources\de.lproj\SoftwareUpdateFilesLocalized.dll"
Wed 29 Aug 2007         4,096 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdateFiles.Resources\en.lproj\SoftwareUpdateFilesLocalized.dll"
Wed 29 Aug 2007         4,608 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdateFiles.Resources\es.lproj\SoftwareUpdateFilesLocalized.dll"
Wed 29 Aug 2007         4,608 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdateFiles.Resources\fi.lproj\SoftwareUpdateFilesLocalized.dll"
Wed 29 Aug 2007         5,120 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdateFiles.Resources\fr.lproj\SoftwareUpdateFilesLocalized.dll"
Wed 29 Aug 2007         5,120 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdateFiles.Resources\it.lproj\SoftwareUpdateFilesLocalized.dll"
Wed 29 Aug 2007         4,608 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdateFiles.Resources\ja.lproj\SoftwareUpdateFilesLocalized.dll"
Wed 29 Aug 2007         4,608 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdateFiles.Resources\ko.lproj\SoftwareUpdateFilesLocalized.dll"
Wed 29 Aug 2007         4,608 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdateFiles.Resources
b.lproj\SoftwareUpdateFilesLocalized.dll"
Wed 29 Aug 2007         5,120 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdateFiles.Resources
l.lproj\SoftwareUpdateFilesLocalized.dll"
Wed 29 Aug 2007         5,120 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdateFiles.Resourcesu.lproj\SoftwareUpdateFilesLocalized.dll"
Wed 29 Aug 2007         4,608 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdateFiles.Resources\sv.lproj\SoftwareUpdateFilesLocalized.dll"
Wed 29 Aug 2007         4,608 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdateFiles.Resources\zh_CN.lproj\SoftwareUpdateFilesLocalized.dll"
Wed 29 Aug 2007         4,608 A..H. --- "C:\Program Files\Apple Software Update\SoftwareUpdateFiles.Resources\zh_TW.lproj\SoftwareUpdateFilesLocalized.dll"
Tue 25 Dec 2001       172,032 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\PhotoImpression\abmFind.dll"
Wed  5 Jun 2002       339,968 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\PhotoImpression\AlbumBase.dll"
Mon  3 Dec 2001        73,728 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\PhotoImpression\ASPI.dll"
Mon 22 Oct 2001        53,248 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\PhotoImpression\EditWin.dll"
Mon 22 Oct 2001       122,880 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\PhotoImpression\eff_ehn.dll"
Fri 15 Mar 2002       462,848 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\PhotoImpression\EXIF.dll"
Thu 30 May 2002       724,992 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\PhotoImpression\EzDll.dll"
Tue 21 May 2002       708,608 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\PhotoImpression\EzFile.dll"
Tue 23 Dec 1997       115,712 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\PhotoImpression\Filefpx.dll"
Fri 18 Jan 2002       332,800 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\PhotoImpression\FPXLIB.DLL"
Fri 18 Jan 2002       122,880 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\PhotoImpression\JPEGLIB.DLL"
Tue 12 Mar 2002       147,456 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\PhotoImpression\MultiPrint.dll"
Mon 28 Jan 2002        98,304 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\PhotoImpression\myCtrl.dll"
Mon 22 Oct 2001        32,768 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\PhotoImpression\OsWrapperForPI.dll"
Thu  6 Jun 2002     1,740,800 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\PhotoImpression\PhotoImpression.exe"
Tue 25 Dec 2001        61,440 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\PhotoImpression\PiApi.dll"
Mon 22 Oct 2001        77,824 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\PhotoImpression\PScan.dll"
Tue 16 Apr 2002       229,376 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\PhotoImpression\Res_Dll.dll"
Fri  7 Jun 2002       188,416 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\PhotoImpression\Res_Pi.dll"
Mon 22 Oct 2001        53,248 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\PhotoImpression\wdmcapture.dll"
Wed  4 Jul 2001       315,392 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\VideoImpression\AlbumBase.dll"
Wed 13 Dec 2000        86,016 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\VideoImpression\ASFWriter.dll"
Tue 21 Nov 2000       186,880 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\VideoImpression\CDUtil.dll"
Thu 26 Apr 2001        53,248 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\VideoImpression\EditWin.dll"
Mon 24 Jun 2002       696,320 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\VideoImpression\EzFile.dll"
Sun 30 Apr 2000       115,712 A..HR --- "C:\Program Files\ArcSoft\Camera Suite\VideoImpression\Filefpx.dll"
Sun 30 Apr 2000       308,736 A..HR --- "C:\Program Files\ArcSoft\Camera Suite\VideoImpression\FPXLIB.DLL"
Sun 30 Apr 2000        91,136 A..HR --- "C:\Program Files\ArcSoft\Camera Suite\VideoImpression\JPEGLIB.DLL"
Fri 21 Jun 2002        98,304 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\VideoImpression\Res_vi17.dll"
Thu 27 Jun 2002       843,776 A..H. --- "C:\Program Files\ArcSoft\Camera Suite\VideoImpression\videoimp.exe"
Thu 26 Oct 2006        14,688 A..H. --- "C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\CAGCAT10.DLL"
Thu 26 Oct 2006        14,688 A..H. --- "C:\Program Files\Microsoft Office\MEDIA\OFFICE12\OFFICE10.DLL"
Tue 22 Aug 2006       146,192 A..H. --- "C:\Program Files\Microsoft Office\Office12\1031\WWASUM.DLL"
Thu 26 Oct 2006        56,616 A..H. --- "C:\Program Files\Microsoft Office\Office12\1033\WWASUM.DLL"
Fri 27 Oct 2006        22,392 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\ACCDDSUI.DLL"
Fri 27 Oct 2006        17,840 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\ACCOLKI.DLL"
Fri 27 Oct 2006       187,720 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\ACCVDTUI.DLL"
Fri 27 Oct 2006       348,512 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\ACWIZRC.DLL"
Fri 27 Oct 2006        13,152 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\CERTINTL.DLL"
Fri 27 Oct 2006        20,880 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\CLVWINTL.DLL"
Fri 27 Oct 2006        28,472 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\ContactPickerIntl.dll"
Fri 27 Oct 2006        18,768 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\ENVELOPR.DLL"
Thu 26 Oct 2006        16,696 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\EXPTOOWS.DLL"
Fri 27 Oct 2006       188,728 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\GRINTL32.DLL"
Fri 27 Oct 2006        13,624 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\GRLEX.DLL"
Thu 26 Oct 2006        26,472 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\INFINTL.DLL"
Thu 26 Oct 2006       781,160 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\IPDSINTL.DLL"
Thu 26 Oct 2006       467,304 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\IPEDINTL.DLL"
Thu 26 Oct 2006        74,648 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\IPOLKINTL.DLL"
Thu 26 Oct 2006       465,200 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\MOR6INT.DLL"
Fri 27 Oct 2006       126,248 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\MSTINTL.DLL"
Thu 26 Oct 2006       112,992 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\OCLTINT.DLL"
Fri 27 Oct 2006       136,048 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\OISINTL.DLL"
Fri 27 Oct 2006       107,320 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\OMSINTL.DLL"
Fri 27 Oct 2006       280,352 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\OUTLWVW.DLL"
Fri 27 Oct 2006       967,472 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\PPINTL.DLL"
Fri 27 Oct 2006       425,800 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\PPVWINTL.DLL"
Fri 27 Oct 2006       105,240 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\QRYINT32.DLL"
Fri 27 Oct 2006        58,168 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\SLINTL.DLL"
Thu 26 Oct 2006       113,504 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\STSLISTI.DLL"
Thu 26 Oct 2006        70,504 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\STSUCRES.DLL"
Fri 27 Oct 2006        46,456 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\UmOutlookStrings.dll"
Thu 26 Oct 2006       129,336 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\VVIEWRES.DLL"
Tue 22 Aug 2006       154,384 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\WWASUM.DLL"
Thu 26 Oct 2006     1,060,648 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\WWINTL.DLL"
Fri 27 Oct 2006     1,909,560 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\XLINTL32.DLL"
Fri 27 Oct 2006        43,320 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\XLLEX.DLL"
Fri 27 Oct 2006       150,840 A..H. --- "C:\Program Files\Microsoft Office\Office12\1036\XLSLICER.DLL"
Tue 22 Aug 2006       555,848 A..H. --- "C:\Program Files\Microsoft Office\Office12\3082\WWASUM.DLL"
Thu 26 Oct 2006        94,016 A..H. --- "C:\Program Files\Microsoft Office\Office12\ADDINS\ACCOLK.DLL"
Thu 26 Oct 2006         7,168 A..H. --- "C:\Program Files\Microsoft Office\Office12\ADDINS\MSOSEC.DLL"
Thu 26 Oct 2006       344,064 A..H. --- "C:\Program Files\Microsoft Office\Office12\ADDINS\MSVCR71.DLL"
Thu 26 Oct 2006        81,920 A..H. --- "C:\Program Files\Microsoft Office\Office12\ADDINS\OTKLOADR.DLL"
Thu 26 Oct 2006        53,048 A..H. --- "C:\Program Files\Microsoft Office\Office12\ADDINS\OUTLVBA.DLL"
Fri 27 Oct 2006       436,512 A..H. --- "C:\Program Files\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll"
Thu 26 Oct 2006        76,576 A..H. --- "C:\Program Files\Microsoft Office\Office12\CONVERT\RM.DLL"
Thu 26 Oct 2006       104,760 A..H. --- "C:\Program Files\Microsoft Office\Office12\CONVERT\TRANSMGR.DLL"
Fri  2 May 2008     3,493,888 A..H. --- "C:\Documents and Settings\User\Application Data\U3	emp\Launchpad Removal.exe"
Mon 10 Sep 2001       103,344 ...H. --- "C:\Program Files\Adobe\Acrobat 5.0\Reader\Browser
ppdf32.dll"
Thu 26 Oct 2006        14,688 A..H. --- "C:\Program Files\Microsoft Office\MEDIA\OFFICE12\AUTOSHAP\AUTOSHAP.DLL"
Thu 26 Oct 2006        14,680 A..H. --- "C:\Program Files\Microsoft Office\MEDIA\OFFICE12\BULLETS\BULLETS.DLL"
Thu 26 Oct 2006        14,680 A..H. --- "C:\Program Files\Microsoft Office\MEDIA\OFFICE12\LINES\LINES.DLL"
Fri 27 Oct 2006        41,792 A..H. --- "C:\Program Files\Microsoft Office\Office12\CONVERT\1036\LOCALDV.DLL"
Fri 27 Oct 2006        15,184 A..H. --- "C:\Program Files\Microsoft Office\Office12\CONVERT\1036\TRANSMRR.DLL"
Thu 15 Mar 2001        24,576 ...H. --- "C:\Program Files\Adobe\Acrobat 5.0\Reader\plug_ins\Movie\QT2.dll"
Thu 15 Mar 2001        32,768 ...H. --- "C:\Program Files\Adobe\Acrobat 5.0\Reader\plug_ins\Movie\QT3.dll"
Thu 15 Mar 2001        36,864 ...H. --- "C:\Program Files\Adobe\Acrobat 5.0\Reader\plug_ins\Movie\QT4.dll"
Thu 19 Aug 2004       327,680 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\Driver\WinXP\AP\MRV8KA51.SYS"
Thu 20 May 2004       258,560 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\Driver\WinXP\STA\MRV8KA51.sys"
Thu 20 May 2004       258,432 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\Driver\WL-138g\Win2K\MRV8KA50.sys"
Thu 20 May 2004       258,432 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\Driver\WL-138g\Win98\MRV8KA50.sys"
Thu 20 May 2004       258,432 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\Driver\WL-138g\WinME\MRV8KA50.sys"
Fri 27 Oct 2006       576,376 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACACEDAO.DLL"
Thu 26 Oct 2006       162,616 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\ACCWIZ.DLL"
Fri 27 Oct 2006       399,640 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\CDLMSO.DLL"
Thu 26 Oct 2006       205,616 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\CLVIEW.EXE"
Thu 26 Oct 2006       140,560 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\CNFNOT32.EXE_0004"
Thu 26 Oct 2006        65,312 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\COLLIMP.DLL"
Fri 27 Oct 2006       133,936 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\CONTAB32.DLL"
Thu 26 Oct 2006       189,760 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\CONTACTPICKER.DLL"
Thu 26 Oct 2006        87,344 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\DLGSETP.DLL"
Fri 27 Oct 2006       392,456 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\EXSEC32.DLL_0001"
Thu 26 Oct 2006     2,526,520 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\GRAPH.EXE"
Thu 26 Oct 2006       173,328 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\IEAWSDC.DLL"
Thu 26 Oct 2006       138,024 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\IMPMAIL.DLL"
Fri 27 Oct 2006     1,439,032 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\INFOPATH.EXE"
Fri 27 Oct 2006     5,456,704 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\IPDESIGN.DLL"
Fri 27 Oct 2006     5,281,592 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\IPEDITOR.DLL"
Thu 26 Oct 2006       176,976 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\IPOLK.DLL"
Thu 26 Oct 2006       828,704 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MEDCAT.DLL"
Thu 26 Oct 2006       340,248 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MIMEDIR.DLL"
Fri 27 Oct 2006       497,504 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MORPH9.DLL"
Fri 27 Oct 2006    10,371,880 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSACCESS.EXE"
Thu 26 Oct 2006        66,880 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSAEXP30.DLL"
Fri 27 Oct 2006       161,080 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSOCF.DLL"
Thu 26 Oct 2006        14,664 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSOCFU.DLL"
Thu 26 Oct 2006       428,816 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSODCW.DLL"
Thu 26 Oct 2006       672,024 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSQRY32.EXE"
Thu 26 Oct 2006       832,800 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSTORDB.EXE"
Thu 26 Oct 2006       538,904 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\MSTORES.DLL"
Thu 26 Oct 2006        65,824 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\NAME.DLL"
Fri 27 Oct 2006    14,151,456 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OART.DLL"
Thu 26 Oct 2006     7,033,152 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OFFOWC.DLL"
Thu 26 Oct 2006       274,744 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OIS.EXE"
Thu 26 Oct 2006       998,208 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OISAPP.DLL"
Thu 26 Oct 2006       285,008 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OISGRAPH.DLL"
Thu 26 Oct 2006       660,792 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OMSMAIN.DLL"
Thu 26 Oct 2006       192,848 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OMSXP32.DLL"
Wed 26 Jul 2006       459,080 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OUTLFLTR.DLL"
Fri 27 Oct 2006       594,256 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OUTLMIME.DLL"
Fri 27 Oct 2006       176,976 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OUTLPH.DLL"
Fri 27 Oct 2006        46,864 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OUTLRPC.DLL"
Thu 26 Oct 2006        58,160 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OUTLVBS.DLL_0001"
Thu 26 Oct 2006       798,520 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OWSCLT.DLL_0001"
Thu 26 Oct 2006       140,608 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\OWSSUPP.DLL_0001"
Fri 27 Oct 2006       465,200 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\POWERPNT.EXE"
Fri 27 Oct 2006     7,980,848 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\PPCORE.DLL"
Thu 26 Oct 2006     2,012,480 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\PPTVIEW.EXE"
Thu 26 Oct 2006       136,008 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\PRTF9.DLL"
Thu 26 Oct 2006       413,472 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\PSTPRX32.DLL"
Fri 27 Oct 2006       624,456 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\PTXT9.DLL"
Thu 26 Oct 2006        38,168 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\REFEDIT.DLL"
Thu 26 Oct 2006       744,808 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\REGFORM.EXE"
Thu 26 Oct 2006       503,624 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\SELFCERT.EXE"
Thu 26 Oct 2006       502,608 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\SOA.DLL"
Fri 28 Jul 2006       277,320 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\SSGEN.DLL"
Fri 27 Oct 2006     2,330,968 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\STSLIST.DLL"
Thu 26 Oct 2006     1,841,984 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\VVIEWDWG.DLL"
Thu 26 Oct 2006     3,732,792 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\VVIEWER.DLL"
Fri 27 Oct 2006       347,432 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\WINWORD.EXE"
Thu 26 Oct 2006        11,072 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.4518\XLCALL32.DLL"
Thu 26 Oct 2006     2,204,528 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109F10090400000000000F01FEC\12.0.4518\NLSLEX.DLL_1033"
Thu 26 Oct 2006     6,253,936 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109F10090400000000000F01FEC\12.0.4518\NLSMODEL.DLL_1033"
Fri 27 Oct 2006     1,363,792 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\000021095100C0400000000000F01FEC\12.0.4518\MSAIN.DLL_1036"
Thu 26 Oct 2006     6,264,624 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\000021099100C0400000000000F01FEC\12.0.4518\PUB6INTL.DLL_1036"
Thu 26 Oct 2006       441,136 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\000021099100C0400000000000F01FEC\12.0.4518\PUBWZINT.DLL_1036"
Fri 27 Oct 2006     1,326,888 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109A100C0400000000000F01FEC\12.0.4518\MAPIR.DLL_1036"
Fri 27 Oct 2006     6,059,312 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109A100C0400000000000F01FEC\12.0.4518\OUTLLIBR.DLL_1036"
Fri 27 Oct 2006       645,952 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109E600C0400000000000F01FEC\12.0.4518\OFFOWCI.DLL_1036"
Thu 26 Oct 2006     7,173,992 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109F10070400000000000F01FEC\12.0.4518\NLSLEX.DLL_1031"
Thu 26 Oct 2006     6,911,336 A..HR --- "C:\WINDOWS\Installer\$PatchCache$\Managed\00002109F10070400000000000F01FEC\12.0.4518\NLSMODEL.DLL_1031"
Thu 19 Aug 2004       327,680 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\Driver\WL-138g\WinXP\AP\MRV8KA51.SYS"
Thu 20 May 2004       258,560 A..H. --- "C:\Program Files\ASUS\WLAN Card Utilities\Driver\WL-138g\WinXP\STA\MRV8KA51.sys"

[b]Finished![/b]

antouvda · Answer

ok pour le rapport ??

antouvda · Answer

as tu une facon sure du mode sans echec car pas envie de recommancer mes acrobaties

antouvda · Answer

ps moi quand je fais F8 j ai mon bios

antouvda · Answer

grâce à msconfig dans executer

antouvda · Answer

alors j arrive sur mon bios

antouvda · Answer

ok je vais esseyer je te previens dés que c' est fini

antouvda · Answer

rien a faire je vais sur mon bios je n ai pas la meme page que sur le site que tu m as envoyé

antouvda · Answer

j ai une carte mère asus et 

A noter: Sur certaines cartes mère (asus) F8 correspond à un menu de démarrage. Dans ce cas, sélectionner le disque de démarrage et refaire aussitôt F8 pour avoir le menu windows complet... ou faire directement F5 pour le mode sans échec uniquement.

Il se peut que vous ayez à valider via la touche "Entrée" une nouvelle fois si le message "Choisissez le système d'exploitation à démarrer" apparait. De même, lors de l'arrivée sur le bureau, un message peut vous demander de confirmer que vous souhaitez continuer à travailler en mode sans échec.

L'apparence des fenêtres, des icônes et du bureau est modifiée, ceci est tout à fait normal en mode sans

antouvda · Answer

voilà c est fait il n a rien trouvé mais je l aivait déja fait en mode normal de windows il y a t il une suite ??

antouvda · Answer

est ce normal de beaucoup de processus en cours au demarage ??
et normal que j ai 9 svchost
merci

antouvda · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:07:19, on 8/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\libusbd-nt.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\NVIDIA Corporation
Tune
TuneService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\program files\steam\steam.exe
C:\Program Files\ITE\ITE IT8212 ATA RAID Controller\RaidMgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
c:\program files\steam\steamapps\antouvda\counter-strike source\hl2.exe
C:\program files\steam\GameOverlayUI.exe
C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.fr.msn.be/0SEFRBE/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.fr.msn.be/0SEFRBE/SAOS01?FORM=TOOLBR
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.fr.msn.be/0SEFRBE/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - {F4F10C1D-87C7-404A-B4B3-000000000000} - (no file)
R3 - URLSearchHook: FRANCE version Toolbar - {bc5031f9-2097-44f1-8979-74947557d6ce} - C:\Program Files\FRANCE_version	bFRA1.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: FRANCE version Toolbar - {bc5031f9-2097-44f1-8979-74947557d6ce} - C:\Program Files\FRANCE_version	bFRA1.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: FRANCE version Toolbar - {bc5031f9-2097-44f1-8979-74947557d6ce} - C:\Program Files\FRANCE_version	bFRA1.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [McENUI] C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide
O4 - HKLM\..\Run: [RemoveWGA] H:\crack winxp\RemoveWGA.exe -startup
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation
Tune
TuneCmd.exe" clear
O4 - HKCU\..\Run: [DWQueuedReporting] "C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" -t
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'Default user')
O4 - Global Startup: RAID Manager.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://*.mcafee.com
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} - 
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O17 - HKLM\System\CCS\Services\Tcpip\..\{C5D85E58-1E4F-4DD5-BA1C-D2D80EC3A778}: NameServer = 195.238.2.22,195.238.2.21
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LibUsb-Win32 - Daemon, Version 0.1.10.1 (libusbd) - https://sourceforge.net/p/libusb-win32/wiki/Home/ - C:\WINDOWS\system32\libusbd-nt.exe
O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: MySQL - Unknown owner - C:\PROGRA~1\EASYPH~1.0B1\MySql\bin\mysqld.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation
Tune
TuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

antouvda · Answer

alors dit moi tout ^^

antouvda · Answer

je fixe process exe c est ca ??

antouvda · Answer

merci je ferai tout ca demain car demain je pars tot
merci et a demain

antouvda · Answer

j 'ai ceci comme ereur 


 Veuillez patienter ...
Error:  Access is denied in the key HKEY_CURRENT_USER\Software\Microsoft\Pr
otected Storage System Provider\S-1-5-21-515967899-1229272821-725345543-100
3

antouvda · Answer

toujours la meme chose

antouvda · Answer

que faire en cas de plantage simplement redémarrer ??

antouvda · Answer

voilà le rapport ComboFix 08-12-07.04 - User 2008-12-09 20:08:21.1 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.2515 [GMT 1:00] Lancé depuis: c:\documents and settings\User\Bureau\ComboFix.exe Commutateurs utilisés :: c:\documents and settings\User\Bureau\WinXP_FR_PRO_BF.EXE * Un nouveau point de restauration a été créé . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\User\Application Data\inst.exe c:\windows\install.exe c:\windows\system32\bszip.dll . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_BOONTY_GAMES -------\Service_Boonty Games ((((((((((((((((((((((((((((( Fichiers créés du 2008-11-09 au 2008-12-09 )))))))))))))))))))))))))))))))))))) . 2008-12-09 16:43 . 2008-12-09 16:43 d----c--- c:\program files\MegauploadToolbar 2008-12-09 16:43 . 2008-12-09 17:30 d-------- c:\documents and settings\User\Application Data\MegauploadToolbar 2008-12-09 16:43 . 2008-12-09 16:43 d-------- c:\documents and settings\User\Application Data\EmailNotifier 2008-12-09 16:43 . 2008-12-09 16:52 d-------- c:\documents and settings\All Users\Application Data\Megaupload 2008-12-09 16:43 . 2008-12-09 16:43 d-------- c:\documents and settings\All Users\Application Data\EmailNotifier 2008-12-09 07:52 . 2008-12-09 17:29 d----c--- c:\program files\TOOLS 2008-12-08 21:10 . 2008-12-09 15:44 d----c--- c:\program files\Ad-remover 2008-12-08 18:48 . 2008-12-08 18:48 d-------- c:\documents and settings\Administrateur\Application Data\Malwarebytes 2008-12-08 16:00 . 2008-12-08 16:00 579,584 --a--c--- c:\windows\system32\dllcache\user32.dll 2008-12-08 15:58 . 2008-12-08 15:58 d-------- c:\windows\ERUNT 2008-12-08 15:55 . 2005-10-06 13:02 d--h----- c:\documents and settings\Administrateur\Voisinage réseau 2008-12-08 15:55 . 2005-10-06 13:02 d--h----- c:\documents and settings\Administrateur\Voisinage d'impression 2008-12-08 15:55 . 2006-12-26 12:20 d--h----- c:\documents and settings\Administrateur\Modèles 2008-12-08 15:55 . 2005-10-06 13:02 d-------- c:\documents and settings\Administrateur\Mes documents 2008-12-08 15:55 . 2005-10-06 13:02 dr------- c:\documents and settings\Administrateur\Menu Démarrer 2008-12-08 15:55 . 2007-09-12 18:33 d-------- c:\documents and settings\Administrateur\Favoris 2008-12-08 15:55 . 2008-12-08 19:38 d-------- c:\documents and settings\Administrateur\Bureau 2008-12-08 15:55 . 2007-09-12 18:33 d-------- c:\documents and settings\Administrateur\Application Data\SiteAdvisor 2008-12-08 15:55 . 2008-12-08 15:55 d-------- c:\documents and settings\Administrateur 2008-12-08 15:02 . 2008-12-08 16:43 d-------- C:\SDFix 2008-12-08 14:09 . 2008-12-08 14:12 d-------- C:\ToolBar SD 2008-12-07 18:06 . 2008-12-07 18:06 d-------- c:\documents and settings\User\Application Data\Malwarebytes 2008-12-07 18:06 . 2008-12-07 18:06 d-------- c:\documents and settings\All Users\Application Data\Malwarebytes 2008-12-07 10:52 . 2008-12-07 10:52 d-------- c:\documents and settings\All Users\Application Data\SiComponents 2008-12-06 11:45 . 2008-12-06 11:45 d-------- c:\documents and settings\All Users\Application Data\NortonInstaller 2008-12-05 20:20 . 2008-12-05 20:20 54,156 --ah----- c:\windows\QTFont.qfn 2008-12-05 20:20 . 2008-12-05 20:20 1,409 --a------ c:\windows\QTFont.for 2008-12-05 17:42 . 2008-12-09 14:50 d----c--- c:\program files\Fichiers communs\DVDVideoSoft 2008-12-05 17:42 . 2008-12-09 14:50 d----c--- c:\program files\DVDVideoSoft 2008-12-01 18:17 . 2008-12-01 21:34 d-------- c:\documents and settings\User\Application Data\Uniblue 2008-12-01 18:17 . 2008-12-01 21:34 d-------- c:\documents and settings\All Users\Application Data\DriverScanner 2008-11-29 08:53 . 2008-11-29 08:53 410,976 --a------ c:\windows\system32\deploytk.dll 2008-11-27 18:58 . 2008-11-27 19:54 d----c--- c:\program files\PhotoFiltre Studio 2008-11-27 18:58 . 2008-11-27 18:58 45 ---h----- c:\windows\ddis2875.dat 2008-11-18 19:59 . 2008-11-19 12:47 d-------- c:\documents and settings\User\Application Data\Orbit 2008-11-18 19:59 . 2008-11-18 19:59 d-------- c:\documents and settings\User\Application Data\GrabPro 2008-11-18 19:11 . 2008-11-18 19:11 d-------- c:\windows\Caps 2008-11-18 19:10 . 2008-11-18 19:40 d----c--- c:\program files\RapidLeecher Ultimate 2007 2008-11-17 19:18 . 2008-11-17 19:18 d-------- c:\documents and settings\User\Application Data\Software Informer 2008-11-17 19:17 . 2008-12-09 16:42 d----c--- c:\program files\Free Download Manager 2008-11-17 19:17 . 2008-12-09 20:02 d-------- c:\documents and settings\User\Application Data\Free Download Manager 2008-11-17 19:17 . 2008-11-17 19:17 d-------- c:\documents and settings\All Users\Application Data\FreeDownloadManager.ORG 2008-11-12 06:50 . 2008-09-04 18:16 1,106,944 -----c--- c:\windows\system32\dllcache\msxml3.dll 2008-11-12 06:50 . 2008-10-24 12:21 455,296 -----c--- c:\windows\system32\dllcache\mrxsmb.sys . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-12-09 18:29 --------- dc----w c:\program files\Radio Fr Solo 2008-12-09 18:28 --------- d--h--w c:\program files\InstallShield Installation Information 2008-12-09 18:26 --------- dc----w c:\program files\Steam 2008-12-09 14:46 --------- dc----w c:\program files\AviSynth 2.5 2008-12-09 14:44 4,608 -csha-w c:\program files\Thumbs.db 2008-12-09 14:21 --------- d-----w c:\program files\Google 2008-12-09 13:08 --------- d-----w c:\documents and settings\LocalService\Application Data\SACore 2008-12-08 18:56 --------- d-----w c:\documents and settings\User\Application Data eamspeak2 2008-12-06 16:54 --------- d-----w c:\program files\NCH Swift Sound 2008-12-06 16:54 --------- d-----w c:\documents and settings\All Users\Application Data\NCH Swift Sound 2008-12-06 11:17 --------- dc----w c:\program files\K-Lite Codec Pack 2008-12-06 11:16 --------- dc----w c:\program files\Xvid 2008-12-06 11:10 --------- dc----w c:\program files\ma-config.com 2008-12-06 11:10 --------- d-----w c:\documents and settings\User\Application Data\DivX 2008-12-06 11:10 --------- d-----w c:\documents and settings\All Users\Application Data\ma-config.com 2008-12-05 14:00 --------- dc----w c:\program files\Norton Security Scan 2008-11-29 07:53 --------- d-----w c:\program files\Java 2008-11-29 07:52 --------- dc----w c:\program files\AVS4YOU 2008-11-29 07:52 --------- d-----w c:\program files\Fichiers communs\AVSMedia 2008-11-27 17:07 --------- d-----w c:\documents and settings\User\Application Data\AVS4YOU 2008-11-27 16:56 --------- dc----w c:\program files\DivX 2008-11-27 16:20 --------- d-----w c:\documents and settings\User\Application Data\U3 2008-11-25 20:21 --------- dc----w c:\program files\Every Toolbar 1.1 2008-11-21 17:17 --------- dc----w c:\program files\FRANCE_version 2008-11-15 08:03 --------- dc----w c:\program files\McAfee 2008-11-12 12:06 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help 2008-11-11 10:05 --------- dc----w c:\program files\Fichiers communs\Adobe 2008-11-06 15:24 --------- d-----w c:\program files\HP 2008-11-06 15:24 --------- d-----w c:\program files\Hewlett-Packard 2008-11-06 15:22 --------- d-----w c:\documents and settings\All Users\Application Data\HP Product Assistant 2008-11-05 13:50 --------- dc----w c:\program files\DVD Decrypter1 2008-11-05 13:39 --------- dc----w c:\program files\DVD Shrink 2008-10-30 20:05 --------- dc----w c:\program files\Messenger Plus! Live 2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys 2008-10-16 15:01 --------- d-----w c:\documents and settings\All Users\Application Data\McAfee 2008-10-09 17:03 --------- dc----w c:\program files\SpeedFan 2008-09-01 08:57 0 -c--a-w c:\program files emp01 2008-07-11 07:22 47,360 -c--a-w c:\documents and settings\User\Application Data\pcouffin.sys 2006-11-11 18:09 774,144 -c-ha-w c:\program files\RngInterstitial.dll 2005-12-27 11:56 2,448 -c-ha-w c:\program files\ixbot-d.ide 2005-12-18 17:29 0 -c--a-w c:\documents and settings\User\WebExcl.dat . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{bc5031f9-2097-44f1-8979-74947557d6ce}"= "c:\program files\FRANCE_version bFRA1.dll" [2008-07-10 1569304] [HKEY_CLASSES_ROOT\clsid\{bc5031f9-2097-44f1-8979-74947557d6ce}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A057A204-BACC-4D26-C39E-35F1D2A32EC8}] 2008-08-04 21:44 1947080 --a--c--- c:\progra~1\MEGAUP~2\MEGAUP~1.DLL [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{bc5031f9-2097-44f1-8979-74947557d6ce}] 2008-07-10 07:44 1569304 --a--c--- c:\program files\FRANCE_version bFRA1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{bc5031f9-2097-44f1-8979-74947557d6ce}"= "c:\program files\FRANCE_version bFRA1.dll" [2008-07-10 1569304] "{A057A204-BACC-4D26-C39E-35F1D2A32EC8}"= "c:\progra~1\MEGAUP~2\MEGAUP~1.DLL" [2008-08-04 1947080] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser] "{BC5031F9-2097-44F1-8979-74947557D6CE}"= "c:\program files\FRANCE_version bFRA1.dll" [2008-07-10 1569304] "{A057A204-BACC-4D26-C39E-35F1D2A32EC8}"= "c:\progra~1\MEGAUP~2\MEGAUP~1.DLL" [2008-08-04 1947080] [HKEY_CLASSES_ROOT\clsid\{bc5031f9-2097-44f1-8979-74947557d6ce}] [HKEY_CLASSES_ROOT\clsid\{a057a204-bacc-4d26-c39e-35f1d2a32ec8}] [HKEY_CLASSES_ROOT\megauploadtoolbar.MEGAUPLOADTOOLBAR] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "NVIDIA nTune"="c:\program files\NVIDIA Corporation Tune TuneCmd.exe" [2007-09-04 81920] "DWQueuedReporting"="c:\progra~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" [2007-08-24 437160] "Steam"="c:\program files\steam\steam.exe" [2008-10-27 1410296] "Free Download Manager"="c:\program files\Free Download Manager\fdm.exe" [2008-05-20 2474031] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-29 136600] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-11-14 286720] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840] "TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB ealsched.exe" [2008-07-03 185896] "mcagent_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2008-07-11 641208] "McENUI"="c:\progra~1\McAfee\MHN\McENUI.exe" [2008-06-13 1176808] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-10-07 13574144] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-10-07 86016] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792] "NeroFilterCheck"="c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648] "Raccourci vers la page des propriétés de High Definition Audio"="HDAudPropShortcut.exe" [2004-03-17 c:\windows\system32\Hdaudpropshortcut.exe] "BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 c:\windows\system32\bthprops.cpl] "nwiz"="nwiz.exe" [2008-10-07 c:\windows\system32 wiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2008-03-26 1232896] c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ RAID Manager.lnk - c:\program files\ITE\ITE IT8212 ATA RAID Controller\RaidMgr.exe [2005-10-06 724992] [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2008-05-26 304128] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.HFYU"= huffyuv.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un-] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" "nwiz"=nwiz.exe /install [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\PandaAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\PandaFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) R0 iteraid;ITERAID_Service_Install;c:\windows\system32\DRIVERS\iteraid.sys [2005-10-06 24971] R1 ShldDrv;Panda File Shield Driver;c:\windows\system32\drivers\ShldDrv.sys [2005-10-12 26752] R2 libusbd;LibUsb-Win32 - Daemon, Version 0.1.10.1;system32\libusbd-nt.exe [] R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;"c:\program files\McAfee\SiteAdvisor\McSACore.exe" [2008-10-01 203280] R2 PavProc;Panda Process Protection Driver;\??\c:\windows\system32\DRIVERS\PavProc.sys [2005-10-12 163856] R3 cmudax;C-Media High Definition Audio Interface;c:\windows\system32\drivers\cmudax.sys [2007-01-28 1287296] R3 libusb0;LibUsb-Win32 - Kernel Driver, Version 0.1.10.1;c:\windows\system32\drivers\libusb0.sys [2007-08-17 33792] R3 SNCP106;PC Camera (6009 CIF);c:\windows\system32\DRIVERS\sncp106.sys [2005-10-12 243712] R3 W8100XP;Marvell Libertas 802.11b/g SoftAP Driver for Windows XP ;c:\windows\system32\DRIVERS\mrv8ka51.sys [2005-10-06 258560] S3 ASNDIS5;ASNDIS5 Protocol Driver;\??\c:\windows\system32\ASNDIS5.SYS [2005-10-06 16269] S3 FTD2XX;FTD2XX.SYS FT8U2XX device driver;c:\windows\system32\Drivers\FTD2XX.sys [2005-10-12 29292] S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers mwcdnsu.sys [2008-06-18 138112] S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers mwcdnsuc.sys [2008-06-18 8320] S3 PavSRK.sys;PavSRK.sys;\??\c:\windows\system32\PavSRK.sys [] S3 vhack;vhack;\??\c:\docume~1\User\LOCALS~1\Temp\Rar$EX03.281\vhack.sys [] S3 XPADFL02;XPAD Filter Service 02;c:\windows\system32\DRIVERS\xpadfl02.sys [2008-04-16 27904] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e69ed4dd-9c72-11dd-b07c-00112fd90972}] \Shell\AutoRun\command - F:\LaunchU3.exe -a . Contenu du dossier 'Tâches planifiées' 2008-12-09 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 13:57] 2008-09-18 c:\windows\Tasks\McDefragTask.job - c:\progra~1\mcafee\mqc\QcConsol.exe [2008-07-09 17:10] 2008-12-01 c:\windows\Tasks\McQcTask.job - c:\progra~1\mcafee\mqc\QcConsol.exe [2008-07-09 17:10] 2008-12-05 c:\windows\Tasks\Norton Security Scan.job - c:\program files\Norton Security Scan\Nss.exe [2007-09-18 22:42] 2008-12-09 c:\windows\Tasks\SpeedOptimizer Startup.job - c:\progra~1\speedo~1\SPO.exe [] 2007-09-08 c:\windows\Tasks\Spybot - Search & Destroy - Scheduled Task.job - c:\program files\Spybot - Search & Destroy\SpybotSD.exe [] . - - - - ORPHELINS SUPPRIMES - - - - URLSearchHooks-{F4F10C1D-87C7-404A-B4B3-000000000000} - (no file) HKCU-Run-fsm - (no file) HKLM-Run-RemoveWGA - h:\crack winxp\RemoveWGA.exe HKLM-Run-Cmaudio - cmicnfg.cpl . ------- Examen supplémentaire ------- . uStart Page = hxxp://www.google.be/ uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms} uInternet Connection Wizard,ShellNext = iexplore uSearchURL,(Default) = hxxp://g.fr.msn.be/0SEFRBE/SAOS01?FORM=TOOLBR IE: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Tout télécharger avec Free Download Manager - file://c:\program files\Free Download Manager\dlall.htm IE: Télécharger avec Free Download Manager - file://c:\program files\Free Download Manager\dllink.htm IE: Télécharger avec Star Downloader - c:\program files\Star Downloader\sdie.htm IE: Télécharger la sélection avec Free Download Manager - file://c:\program files\Free Download Manager\dlselected.htm IE: Télécharger la vidéo avec Free Download Manager - file://c:\program files\Free Download Manager\dlfvideo.htm TCP: {C5D85E58-1E4F-4DD5-BA1C-D2D80EC3A778} = 195.238.2.22,195.238.2.21 FireFox -: Profile - c:\documents and settings\User\Application Data\Mozilla\Firefox\Profiles\yg1shx4u.default\ FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.be FF -: plugin - c:\program files\Java\jre6\bin ew_plugin pdeploytk.dll FF -: plugin - c:\program files\Java\jre6\bin ew_plugin pjp2.dll FF -: plugin - c:\program files\Mozilla Firefox\plugins pdeploytk.dll FF -: plugin - c:\program files\Real\RealArcade\Plugins\Mozilla pracplug.dll FF -: plugin - c:\program files\Yahoo!\Common pyaxmpb.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-12-09 20:13:48 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . ------------------------ Autres processus actifs ------------------------ . c:\program files\Lavasoft\Ad-Aware\aawservice.exe c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe c:\program files\Java\jre6\bin\jqs.exe c:\windows\system32\libusbd-nt.exe c:\progra~1\McAfee\MSC\mcmscsvc.exe c:\progra~1\FICHIE~1\McAfee\MNA\McNASvc.exe c:\progra~1\FICHIE~1\McAfee\McProxy\McProxy.exe c:\progra~1\McAfee\VIRUSS~1\Mcshield.exe c:\program files\McAfee\MPF\MpfSrv.exe c:\program files\McAfee\MSK\msksrver.exe c:\program files\NVIDIA Corporation Tune TuneService.exe c:\windows\system32 vsvc32.exe c:\windows\system32\HPZipm12.exe c:\windows\system32\PnkBstrA.exe c:\windows\system32\wdfmgr.exe c:\windows\system32\searchindexer.exe c:\windows\system32\WgaTray.exe c:\windows\system32\searchprotocolhost.exe c:\windows\system32 undll32.exe c:\windows\system32 undll32.exe c:\windows\system32 undll32.exe c:\windows\system32\searchfilterhost.exe . ************************************************************************** . Heure de fin: 2008-12-09 20:18:07 - La machine a redémarré [User] ComboFix-quarantined-files.txt 2008-12-09 19:18:02 Avant-CF: 80.661.921.792 octets libres Après-CF: 80,653,545,472 octets libres WinXP_FR_PRO_BF.EXE [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect 279 --- E O F --- 2008-12-09 05:04:11

antouvda · Answer

ps mon fond d ecran est noir je n ai plus ma photo

benurrr · Answer

****************************************************

/!\ Manip crée spécialement pour cet utilisateur , ne pas reproduire chez soi ... /!\

Ouvre le Bloc-Notes (Démarrer\Tous les programmes\Accessoires\Bloc notes.)

Copie ce texte ( en gras )d'une traite ( CTRL+C pour copier ) puis colle-le ( CTRL+V dans le bloc-note )


KillAll::

File:: 
c:\windows\QTFont.qfn 
c:\windows\QTFont.for 
c:\windows\system32\deploytk.dll 
c:\windows\ddis2875.dat 


Sauvegarde ce fichier sur ton bureau sous le nom de CFScript.txt.



Glisse maintenant le fichier CFScript.txt dans Combofix.exe comme ci-dessous :

http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif

Cela va relancer Combofix,

Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

Ne touche à rien tant que le scan n'est pas terminé.

Après redémarrage, poste le contenu du rapport Combofix.txt accompagné d'un rapport Hijackthis.

S'il n'y a pas de rédémarrage, poste quand même les rapports.

antouvda · Answer

ok je fais sa demain et pour mon fonds  d' ecran ??

benurrr · Answer

pour le fond d'écran

fait un clic droit sur un emplacement vide de ton bureau.

Puis sélectionne Propriétés.

Pour sélectionnez l' image que tu veut, clique sur le bouton Parcourir

Double-cliquez sur ton image...

pour que celle-ci apparaisse dans ton aperçu.

Clique ensuite sur le bouton appliquer et OK.

antouvda · Answer

a chaque redemarage il redevient noir !!!!!!!!

antouvda · Answer

sa marche pas !!!

antouvda · Answer

je me demande si ce n est pas depuis sd fix ?,

benurrr · Answer

très possible ou combofix

on continue la désinfection si sa s'arrange pas on fera une restauration système pour récupérer ton fond d'écran

esque sa te le fait qu'avec ton fond d'origine ou ta essayer une autre image ?

mais si on refait une restauration système sa veut dire qu'on réinfecter se que nous avons désinfecter

il faudra reprendre mais d'une autre façon mais on va éviter sa

antouvda · Answer

ccleaner  = ok
defrag = en cours
après je fais combofix et hijackthis

antouvda · Answer

j ai 4.6 gb de fragmenté

il lui en reste 4.5 a faire

antouvda · Answer

est ce possible que ce soit un virus qui detraque mon fond d ecran ??

antouvda · Answer

ok

antouvda · Answer

la defrag est à 6 pourcent je ne la metterait pas en pause pour faire le rapport hijackthis ??

antouvda · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:42:52, on 10/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\libusbd-nt.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\NVIDIA Corporation
Tune
TuneService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\svchost.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ITE\ITE IT8212 ATA RAID Controller\RaidMgr.exe
C:\Program Files\Defraggler\Defraggler.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Java\jre6\bin\jucheck.exe
C:\WINDOWS\system32\wuauclt.exe
C:\DOCUME~1\User\LOCALS~1\Temp\jre-6u11-windows-i586-p-iftw.exe
C:\Program Files\HijackThis\HijackThis.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\MsiExec.exe
C:\WINDOWS\system32\MsiExec.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.fr.msn.be/0SEFRBE/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: FRANCE version Toolbar - {bc5031f9-2097-44f1-8979-74947557d6ce} - C:\Program Files\FRANCE_version	bFRA1.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: FRANCE version Toolbar - {bc5031f9-2097-44f1-8979-74947557d6ce} - C:\Program Files\FRANCE_version	bFRA1.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: FRANCE version Toolbar - {bc5031f9-2097-44f1-8979-74947557d6ce} - C:\Program Files\FRANCE_version	bFRA1.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [McENUI] C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [McAfee Backup] "C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation
Tune
TuneCmd.exe" clear
O4 - HKCU\..\Run: [DWQueuedReporting] "C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" -t
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'Default user')
O4 - Global Startup: RAID Manager.lnk = ?
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://*.mcafee.com
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} - 
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O17 - HKLM\System\CCS\Services\Tcpip\..\{C5D85E58-1E4F-4DD5-BA1C-D2D80EC3A778}: NameServer = 195.238.2.22,195.238.2.21
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LibUsb-Win32 - Daemon, Version 0.1.10.1 (libusbd) - https://sourceforge.net/p/libusb-win32/wiki/Home/ - C:\WINDOWS\system32\libusbd-nt.exe
O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: MySQL - Unknown owner - C:\PROGRA~1\EASYPH~1.0B1\MySql\bin\mysqld.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation
Tune
TuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

antouvda · Answer

alors dit moi tout lol

antouvda · Answer

il faudrait me remettre mon fond d ecran le plus vite possible svp sinon je vais avoir des probs
merci

antouvda · Answer

pour mon fond d ecran je pense avoir réparer les probs tout seul

antouvda · Answer

spybot ma trouver un joli spayware

antouvda · Answer

il y a du changement : 

- ad remover marche lorsque je fais B( clean ) mais je ne sais pas ce que dois faire ensuite car il me demande si je veux supprimer diverce chose
- mon fond d'ecran est revenu
- spybot m ' a supprimer un vilain spyware
-ad-aware m'a trouvé ceci :win32.worm.Kdcrypt  qui est de la catégorie worm  en allant un peux plus loin il s'agit de sdfix lol
que doit je faire ??

antouvda · Answer

help

antouvda · Answer

et un rapport hijackthis recent car je sent que tu vas me le demander ^^

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:57:09, on 10/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\libusbd-nt.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\NVIDIA Corporation
Tune
TuneService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\svchost.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\ITE\ITE IT8212 ATA RAID Controller\RaidMgr.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\WINDOWS\explorer.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\PROGRA~1\FREEDO~1\fdm.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.fr.msn.be/0SEFRBE/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: FRANCE version Toolbar - {bc5031f9-2097-44f1-8979-74947557d6ce} - C:\Program Files\FRANCE_version	bFRA1.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: FRANCE version Toolbar - {bc5031f9-2097-44f1-8979-74947557d6ce} - C:\Program Files\FRANCE_version	bFRA1.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: FRANCE version Toolbar - {bc5031f9-2097-44f1-8979-74947557d6ce} - C:\Program Files\FRANCE_version	bFRA1.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [McENUI] C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [McAfee Backup] "C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation
Tune
TuneCmd.exe" clear
O4 - HKCU\..\Run: [DWQueuedReporting] "C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" -t
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'Default user')
O4 - Global Startup: RAID Manager.lnk = ?
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://*.mcafee.com
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} - 
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O17 - HKLM\System\CCS\Services\Tcpip\..\{C5D85E58-1E4F-4DD5-BA1C-D2D80EC3A778}: NameServer = 195.238.2.22,195.238.2.21
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LibUsb-Win32 - Daemon, Version 0.1.10.1 (libusbd) - https://sourceforge.net/p/libusb-win32/wiki/Home/ - C:\WINDOWS\system32\libusbd-nt.exe
O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: MySQL - Unknown owner - C:\PROGRA~1\EASYPH~1.0B1\MySql\bin\mysqld.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation
Tune
TuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

benurrr · Answer

salut

pour ad-remover tu fait B et dans la fenêtre qui s'ouvre tu coche tout et fait supprimer

pour sdfix ne t'inquiète pas c'est un faux positive

antouvda · Answer

lorsque je m'est l'analyse en route ad remover disparait quasi immédiatement . est ce normal ??

merci 
je te poste après un nouveau rapport

antouvda · Answer

pour ceci on fait quoi ??

KillAll::

File::
c:\windows\QTFont.qfn
c:\windows\QTFont.for
c:\windows\system32\deploytk.dll
c:\windows\ddis2875.dat


et le rapport ( tu veux bien vérifier que boontygames est mort svp )




Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:35:17, on 11/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\libusbd-nt.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\NVIDIA Corporation
Tune
TuneService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\svchost.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\program files\steam\steam.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\ITE\ITE IT8212 ATA RAID Controller\RaidMgr.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.fr.msn.be/0SEFRBE/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: FRANCE version Toolbar - {bc5031f9-2097-44f1-8979-74947557d6ce} - C:\Program Files\FRANCE_version	bFRA1.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: FRANCE version Toolbar - {bc5031f9-2097-44f1-8979-74947557d6ce} - C:\Program Files\FRANCE_version	bFRA1.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: FRANCE version Toolbar - {bc5031f9-2097-44f1-8979-74947557d6ce} - C:\Program Files\FRANCE_version	bFRA1.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [McENUI] C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [McAfee Backup] "C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation
Tune
TuneCmd.exe" clear
O4 - HKCU\..\Run: [DWQueuedReporting] "C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" -t
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'Default user')
O4 - Global Startup: RAID Manager.lnk = ?
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://*.mcafee.com
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} - 
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O17 - HKLM\System\CCS\Services\Tcpip\..\{C5D85E58-1E4F-4DD5-BA1C-D2D80EC3A778}: NameServer = 195.238.2.22,195.238.2.21
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LibUsb-Win32 - Daemon, Version 0.1.10.1 (libusbd) - https://sourceforge.net/p/libusb-win32/wiki/Home/ - C:\WINDOWS\system32\libusbd-nt.exe
O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: MySQL - Unknown owner - C:\PROGRA~1\EASYPH~1.0B1\MySql\bin\mysqld.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation
Tune
TuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

benurrr · Answer

salut

fait le poste 43 sur la page 2

antouvda · Answer

le rapport combofix : ComboFix 08-12-09.03 - User 2008-12-11 15:55:50.2 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.2396 [GMT 1:00] Lancé depuis: c:\documents and settings\User\Bureau\ComboFix.exe Commutateurs utilisés :: c:\documents and settings\User\Bureau\CFScript.txt * Un nouveau point de restauration a été créé FILE :: c:\windows\ddis2875.dat c:\windows\QTFont.for c:\windows\QTFont.qfn c:\windows\system32\deploytk.dll . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\program files\Windows Live\Messenger\msimg32.dll c:\windows\ddis2875.dat c:\windows\QTFont.for c:\windows\QTFont.qfn c:\windows\system32\deploytk.dll . ((((((((((((((((((((((((((((( Fichiers créés du 2008-11-11 au 2008-12-11 )))))))))))))))))))))))))))))))))))) . 2008-12-10 11:47 . 2008-12-10 11:47 d----c--- c:\program files\Defraggler 2008-12-10 11:36 . 2008-12-10 11:36 d----c--- c:\program files\CCleaner 2008-12-10 10:55 . 2008-12-10 11:03 d----c--- c:\program files\RegCleaner 2008-12-09 07:52 . 2008-12-09 17:29 d----c--- c:\program files\TOOLS 2008-12-08 21:10 . 2008-12-11 13:34 d----c--- c:\program files\Ad-remover 2008-12-08 18:48 . 2008-12-08 18:48 d-------- c:\documents and settings\Administrateur\Application Data\Malwarebytes 2008-12-08 16:00 . 2008-12-08 16:00 579,584 --a--c--- c:\windows\system32\dllcache\user32.dll 2008-12-08 15:58 . 2008-12-08 15:58 d-------- c:\windows\ERUNT 2008-12-08 15:55 . 2005-10-06 13:02 d--h----- c:\documents and settings\Administrateur\Voisinage réseau 2008-12-08 15:55 . 2005-10-06 13:02 d--h----- c:\documents and settings\Administrateur\Voisinage d'impression 2008-12-08 15:55 . 2006-12-26 12:20 d--h----- c:\documents and settings\Administrateur\Modèles 2008-12-08 15:55 . 2005-10-06 13:02 d-------- c:\documents and settings\Administrateur\Mes documents 2008-12-08 15:55 . 2005-10-06 13:02 dr------- c:\documents and settings\Administrateur\Menu Démarrer 2008-12-08 15:55 . 2007-09-12 18:33 d-------- c:\documents and settings\Administrateur\Favoris 2008-12-08 15:55 . 2008-12-08 19:38 d-------- c:\documents and settings\Administrateur\Bureau 2008-12-08 15:55 . 2007-09-12 18:33 d-------- c:\documents and settings\Administrateur\Application Data\SiteAdvisor 2008-12-08 15:55 . 2008-12-08 15:55 d-------- c:\documents and settings\Administrateur 2008-12-08 15:02 . 2008-12-10 16:58 d-------- C:\SDFix 2008-12-08 14:09 . 2008-12-08 14:12 d-------- C:\ToolBar SD 2008-12-07 18:06 . 2008-12-07 18:06 d-------- c:\documents and settings\User\Application Data\Malwarebytes 2008-12-07 18:06 . 2008-12-07 18:06 d-------- c:\documents and settings\All Users\Application Data\Malwarebytes 2008-12-07 10:52 . 2008-12-07 10:52 d-------- c:\documents and settings\All Users\Application Data\SiComponents 2008-12-06 11:45 . 2008-12-06 11:45 d-------- c:\documents and settings\All Users\Application Data\NortonInstaller 2008-12-05 17:42 . 2008-12-09 14:50 d----c--- c:\program files\Fichiers communs\DVDVideoSoft 2008-12-05 17:42 . 2008-12-09 14:50 d----c--- c:\program files\DVDVideoSoft 2008-12-01 18:17 . 2008-12-01 21:34 d-------- c:\documents and settings\User\Application Data\Uniblue 2008-12-01 18:17 . 2008-12-01 21:34 d-------- c:\documents and settings\All Users\Application Data\DriverScanner 2008-11-27 18:58 . 2008-11-27 19:54 d----c--- c:\program files\PhotoFiltre Studio 2008-11-18 19:59 . 2008-11-19 12:47 d-------- c:\documents and settings\User\Application Data\Orbit 2008-11-18 19:59 . 2008-11-18 19:59 d-------- c:\documents and settings\User\Application Data\GrabPro 2008-11-18 19:11 . 2008-11-18 19:11 d-------- c:\windows\Caps 2008-11-18 19:10 . 2008-11-18 19:40 d----c--- c:\program files\RapidLeecher Ultimate 2007 2008-11-17 19:18 . 2008-11-17 19:18 d-------- c:\documents and settings\User\Application Data\Software Informer 2008-11-17 19:17 . 2008-12-09 16:42 d----c--- c:\program files\Free Download Manager 2008-11-17 19:17 . 2008-12-11 15:53 d-------- c:\documents and settings\User\Application Data\Free Download Manager 2008-11-17 19:17 . 2008-11-17 19:17 d-------- c:\documents and settings\All Users\Application Data\FreeDownloadManager.ORG 2008-11-12 06:50 . 2008-09-04 18:16 1,106,944 -----c--- c:\windows\system32\dllcache\msxml3.dll 2008-11-12 06:50 . 2008-10-24 12:21 455,296 -----c--- c:\windows\system32\dllcache\mrxsmb.sys . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-12-11 14:59 --------- dc----w c:\program files\FRANCE_version 2008-12-11 14:47 --------- dc----w c:\program files\AviSynth 2.5 2008-12-11 12:47 --------- dc----w c:\program files\Steam 2008-12-11 12:26 --------- d-----w c:\program files\Lavasoft 2008-12-10 18:30 --------- d-----w c:\documents and settings\User\Application Data eamspeak2 2008-12-10 17:13 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2008-12-10 14:23 --------- d-----w c:\program files\Spybot - Search & Destroy 2008-12-10 12:22 --------- d-----w c:\program files\Java 2008-12-10 11:51 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help 2008-12-09 18:29 --------- dc----w c:\program files\Radio Fr Solo 2008-12-09 18:28 --------- d--h--w c:\program files\InstallShield Installation Information 2008-12-09 14:44 4,608 -csha-w c:\program files\Thumbs.db 2008-12-09 14:21 --------- d-----w c:\program files\Google 2008-12-09 13:08 --------- d-----w c:\documents and settings\LocalService\Application Data\SACore 2008-12-06 16:54 --------- d-----w c:\program files\NCH Swift Sound 2008-12-06 16:54 --------- d-----w c:\documents and settings\All Users\Application Data\NCH Swift Sound 2008-12-06 11:17 --------- dc----w c:\program files\K-Lite Codec Pack 2008-12-06 11:16 --------- dc----w c:\program files\Xvid 2008-12-06 11:10 --------- dc----w c:\program files\ma-config.com 2008-12-06 11:10 --------- d-----w c:\documents and settings\User\Application Data\DivX 2008-12-06 11:10 --------- d-----w c:\documents and settings\All Users\Application Data\ma-config.com 2008-11-29 07:52 --------- dc----w c:\program files\AVS4YOU 2008-11-29 07:52 --------- d-----w c:\program files\Fichiers communs\AVSMedia 2008-11-27 17:07 --------- d-----w c:\documents and settings\User\Application Data\AVS4YOU 2008-11-27 16:56 --------- dc----w c:\program files\DivX 2008-11-27 16:20 --------- d-----w c:\documents and settings\User\Application Data\U3 2008-11-25 20:21 --------- dc----w c:\program files\Every Toolbar 1.1 2008-11-15 08:03 --------- dc----w c:\program files\McAfee 2008-11-11 10:05 --------- dc----w c:\program files\Fichiers communs\Adobe 2008-11-06 15:24 --------- d-----w c:\program files\HP 2008-11-06 15:24 --------- d-----w c:\program files\Hewlett-Packard 2008-11-06 15:22 --------- d-----w c:\documents and settings\All Users\Application Data\HP Product Assistant 2008-11-05 13:50 --------- dc----w c:\program files\DVD Decrypter1 2008-11-05 13:39 --------- dc----w c:\program files\DVD Shrink 2008-10-30 20:05 --------- dc----w c:\program files\Messenger Plus! Live 2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys 2008-10-16 15:01 --------- d-----w c:\documents and settings\All Users\Application Data\McAfee 2008-09-01 08:57 0 -c--a-w c:\program files emp01 2008-07-11 07:22 47,360 -c--a-w c:\documents and settings\User\Application Data\pcouffin.sys 2006-11-11 18:09 774,144 -c-ha-w c:\program files\RngInterstitial.dll 2005-12-27 11:56 2,448 -c-ha-w c:\program files\ixbot-d.ide 2005-12-18 17:29 0 -c--a-w c:\documents and settings\User\WebExcl.dat . ((((((((((((((((((((((((((((( snapshot@2008-12-09_20.16.58.21 ))))))))))))))))))))))))))))))))))))))))) . + 2008-08-26 08:11:45 124,928 -c----w c:\windows\ie7updates\KB958215-IE7\advpack.dll + 2008-08-26 08:11:45 347,136 -c----w c:\windows\ie7updates\KB958215-IE7\dxtmsft.dll + 2008-08-26 08:11:45 214,528 -c----w c:\windows\ie7updates\KB958215-IE7\dxtrans.dll + 2008-08-26 08:11:45 133,120 -c----w c:\windows\ie7updates\KB958215-IE7\extmgr.dll + 2008-08-26 08:11:45 63,488 -c----w c:\windows\ie7updates\KB958215-IE7\icardie.dll + 2008-08-25 08:39:40 70,656 -c----w c:\windows\ie7updates\KB958215-IE7\ie4uinit.exe + 2008-08-26 08:11:45 153,088 -c----w c:\windows\ie7updates\KB958215-IE7\ieakeng.dll + 2008-08-26 08:11:45 230,400 -c----w c:\windows\ie7updates\KB958215-IE7\ieaksie.dll + 2008-08-23 05:54:51 161,792 -c----w c:\windows\ie7updates\KB958215-IE7\ieakui.dll + 2008-08-26 08:11:46 383,488 -c----w c:\windows\ie7updates\KB958215-IE7\ieapfltr.dll + 2008-08-26 08:11:46 384,512 -c----w c:\windows\ie7updates\KB958215-IE7\iedkcs32.dll + 2008-10-03 17:12:27 6,066,176 -c----w c:\windows\ie7updates\KB958215-IE7\ieframe.dll + 2008-08-26 08:11:48 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\iernonce.dll + 2008-08-26 08:11:48 267,776 -c----w c:\windows\ie7updates\KB958215-IE7\iertutil.dll + 2008-08-25 08:38:00 13,824 -c----w c:\windows\ie7updates\KB958215-IE7\ieudinit.exe + 2008-08-23 05:56:15 635,848 -c----w c:\windows\ie7updates\KB958215-IE7\iexplore.exe + 2008-08-26 08:11:49 27,648 -c----w c:\windows\ie7updates\KB958215-IE7\jsproxy.dll + 2008-08-26 08:11:49 459,264 -c----w c:\windows\ie7updates\KB958215-IE7\msfeeds.dll + 2008-08-26 08:11:49 52,224 -c----w c:\windows\ie7updates\KB958215-IE7\msfeedsbs.dll + 2008-08-27 09:11:52 3,593,216 -c----w c:\windows\ie7updates\KB958215-IE7\mshtml.dll + 2008-08-26 08:11:52 477,696 -c----w c:\windows\ie7updates\KB958215-IE7\mshtmled.dll + 2008-08-26 08:11:52 193,024 -c----w c:\windows\ie7updates\KB958215-IE7\msrating.dll + 2008-08-26 08:11:52 671,232 -c----w c:\windows\ie7updates\KB958215-IE7\mstime.dll + 2008-08-26 08:11:52 102,912 -c----w c:\windows\ie7updates\KB958215-IE7\occache.dll + 2008-08-26 08:11:52 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\pngfilt.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\ie7updates\KB958215-IE7\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\ie7updates\KB958215-IE7\spuninst\updspapi.dll + 2008-08-26 08:11:52 105,984 -c----w c:\windows\ie7updates\KB958215-IE7\url.dll + 2008-08-26 08:11:53 1,159,680 -c----w c:\windows\ie7updates\KB958215-IE7\urlmon.dll + 2008-08-26 08:11:53 233,472 -c----w c:\windows\ie7updates\KB958215-IE7\webcheck.dll + 2008-08-26 08:11:54 826,368 -c----w c:\windows\ie7updates\KB958215-IE7\wininet.dll - 2008-11-12 12:06:18 1,165,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe + 2008-12-10 11:51:00 1,165,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe - 2008-11-12 12:06:18 20,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe + 2008-12-10 11:51:02 20,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe - 2008-11-12 12:06:18 159,504 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe + 2008-12-10 11:51:01 159,504 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe - 2008-11-12 12:06:18 217,864 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe + 2008-12-10 11:51:01 217,864 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe - 2008-11-12 12:06:18 18,704 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe + 2008-12-10 11:51:02 18,704 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe - 2008-11-12 12:06:19 35,088 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe + 2008-12-10 11:51:02 35,088 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe - 2008-11-12 12:06:18 845,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe + 2008-12-10 11:51:01 845,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe - 2008-11-12 12:06:18 922,384 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe + 2008-12-10 11:51:01 922,384 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe - 2008-11-12 12:06:18 272,648 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe + 2008-12-10 11:51:01 272,648 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe - 2008-11-12 12:06:18 888,080 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe + 2008-12-10 11:51:02 888,080 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe - 2008-11-12 12:06:18 1,172,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe + 2008-12-10 11:51:00 1,172,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe - 2008-08-26 08:11:45 124,928 ----a-w c:\windows\system32\advpack.dll + 2008-10-16 20:18:31 124,928 ----a-w c:\windows\system32\advpack.dll - 2008-12-09 18:16:11 32,768 -c--a-w c:\windows\system32\config\systemprofile\Cookies\index.dat + 2008-12-11 13:20:24 32,768 -c--a-w c:\windows\system32\config\systemprofile\Cookies\index.dat - 2008-12-09 18:16:11 32,768 -c--a-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat + 2008-12-11 13:20:24 32,768 -c--a-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat - 2008-08-26 08:11:45 124,928 -c----w c:\windows\system32\dllcache\advpack.dll + 2008-10-16 20:18:31 124,928 -c----w c:\windows\system32\dllcache\advpack.dll - 2008-08-26 08:11:45 347,136 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll + 2008-10-16 20:18:31 347,136 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll - 2008-08-26 08:11:45 214,528 -c--a-w c:\windows\system32\dllcache\dxtrans.dll + 2008-10-16 20:18:31 214,528 -c--a-w c:\windows\system32\dllcache\dxtrans.dll - 2008-08-26 08:11:45 133,120 -c--a-w c:\windows\system32\dllcache\extmgr.dll + 2008-10-16 20:18:31 133,120 -c--a-w c:\windows\system32\dllcache\extmgr.dll + 2008-10-23 12:36:51 286,720 -c----w c:\windows\system32\dllcache\gdi32.dll - 2008-08-26 08:11:45 63,488 -c----w c:\windows\system32\dllcache\icardie.dll + 2008-10-16 20:18:32 63,488 -c----w c:\windows\system32\dllcache\icardie.dll - 2008-08-25 08:39:40 70,656 -c--a-w c:\windows\system32\dllcache\ie4uinit.exe + 2008-10-16 13:12:20 70,656 -c--a-w c:\windows\system32\dllcache\ie4uinit.exe - 2008-08-26 08:11:45 153,088 -c--a-w c:\windows\system32\dllcache\ieakeng.dll + 2008-10-16 20:18:32 153,088 -c--a-w c:\windows\system32\dllcache\ieakeng.dll - 2008-08-26 08:11:45 230,400 -c--a-w c:\windows\system32\dllcache\ieaksie.dll + 2008-10-16 20:18:32 230,400 -c--a-w c:\windows\system32\dllcache\ieaksie.dll - 2008-08-23 05:54:51 161,792 -c--a-w c:\windows\system32\dllcache\ieakui.dll + 2008-10-15 07:04:53 161,792 -c--a-w c:\windows\system32\dllcache\ieakui.dll - 2008-08-26 08:11:46 383,488 -c----w c:\windows\system32\dllcache\ieapfltr.dll + 2008-10-16 20:18:32 383,488 -c----w c:\windows\system32\dllcache\ieapfltr.dll - 2008-08-26 08:11:46 384,512 -c--a-w c:\windows\system32\dllcache\iedkcs32.dll + 2008-10-16 20:18:32 384,512 -c--a-w c:\windows\system32\dllcache\iedkcs32.dll - 2008-10-03 17:12:27 6,066,176 -c----w c:\windows\system32\dllcache\ieframe.dll + 2008-10-16 20:18:35 6,066,176 -c----w c:\windows\system32\dllcache\ieframe.dll - 2008-08-26 08:11:48 44,544 -c--a-w c:\windows\system32\dllcache\iernonce.dll + 2008-10-16 20:18:35 44,544 -c--a-w c:\windows\system32\dllcache\iernonce.dll - 2008-08-26 08:11:48 267,776 -c----w c:\windows\system32\dllcache\iertutil.dll + 2008-10-16 20:18:35 267,776 -c----w c:\windows\system32\dllcache\iertutil.dll - 2008-08-25 08:38:00 13,824 -c----w c:\windows\system32\dllcache\ieudinit.exe + 2008-10-16 13:11:09 13,824 -c----w c:\windows\system32\dllcache\ieudinit.exe - 2008-08-23 05:56:15 635,848 -c--a-w c:\windows\system32\dllcache\iexplore.exe + 2008-10-15 07:06:26 633,632 -c--a-w c:\windows\system32\dllcache\iexplore.exe - 2008-08-26 08:11:49 27,648 -c--a-w c:\windows\system32\dllcache\jsproxy.dll + 2008-10-16 20:18:36 27,648 -c--a-w c:\windows\system32\dllcache\jsproxy.dll - 2005-01-27 23:21:46 96,768 -c--a-w c:\windows\system32\dllcache\logagent.exe + 2008-06-10 04:52:04 96,768 -c--a-w c:\windows\system32\dllcache\logagent.exe - 2008-08-26 08:11:49 459,264 -c----w c:\windows\system32\dllcache\msfeeds.dll + 2008-10-16 20:18:37 459,264 -c----w c:\windows\system32\dllcache\msfeeds.dll - 2008-08-26 08:11:49 52,224 -c----w c:\windows\system32\dllcache\msfeedsbs.dll + 2008-10-16 20:18:37 52,224 -c----w c:\windows\system32\dllcache\msfeedsbs.dll - 2008-08-27 09:11:52 3,593,216 -c----w c:\windows\system32\dllcache\mshtml.dll + 2008-10-17 00:48:40 3,593,216 -c----w c:\windows\system32\dllcache\mshtml.dll - 2008-08-26 08:11:52 477,696 -c--a-w c:\windows\system32\dllcache\mshtmled.dll + 2008-10-16 20:18:40 477,696 -c--a-w c:\windows\system32\dllcache\mshtmled.dll - 2008-08-26 08:11:52 193,024 -c--a-w c:\windows\system32\dllcache\msrating.dll + 2008-10-16 20:18:40 193,024 -c--a-w c:\windows\system32\dllcache\msrating.dll - 2008-08-26 08:11:52 671,232 -c--a-w c:\windows\system32\dllcache\mstime.dll + 2008-10-16 20:18:41 671,232 -c--a-w c:\windows\system32\dllcache\mstime.dll - 2008-08-26 08:11:52 102,912 -c----w c:\windows\system32\dllcache\occache.dll + 2008-10-16 20:18:41 102,912 -c----w c:\windows\system32\dllcache\occache.dll - 2008-08-26 08:11:52 44,544 -c--a-w c:\windows\system32\dllcache\pngfilt.dll + 2008-10-16 20:18:41 44,544 -c--a-w c:\windows\system32\dllcache\pngfilt.dll - 2008-04-14 02:33:46 246,814 -c--a-w c:\windows\system32\dllcache\strmdll.dll + 2008-10-03 10:03:53 247,326 -c--a-w c:\windows\system32\dllcache\strmdll.dll - 2008-08-26 08:11:52 105,984 -c----w c:\windows\system32\dllcache\url.dll + 2008-10-16 20:18:41 105,984 -c----w c:\windows\system32\dllcache\url.dll - 2008-08-26 08:11:53 1,159,680 -c----w c:\windows\system32\dllcache\urlmon.dll + 2008-10-16 20:18:42 1,160,192 -c----w c:\windows\system32\dllcache\urlmon.dll - 2008-08-26 08:11:53 233,472 -c----w c:\windows\system32\dllcache\webcheck.dll + 2008-10-16 20:18:42 233,472 -c----w c:\windows\system32\dllcache\webcheck.dll - 2008-08-26 08:11:54 826,368 -c----w c:\windows\system32\dllcache\wininet.dll + 2008-10-16 20:18:43 826,368 -c----w c:\windows\system32\dllcache\wininet.dll - 2005-01-28 06:53:16 1,027,072 -c--a-w c:\windows\system32\dllcache\wmnetmgr.dll + 2008-06-10 05:28:36 1,028,096 -c--a-w c:\windows\system32\dllcache\WMNetmgr.dll - 2006-12-07 05:29:34 2,374,472 -c--a-w c:\windows\system32\dllcache\wmvcore.dll + 2008-06-10 06:07:24 2,376,760 -c--a-w c:\windows\system32\dllcache\WMVCore.dll - 2008-08-26 08:11:45 347,136 -c--a-w c:\windows\system32\dxtmsft.dll + 2008-10-16 20:18:31 347,136 ----a-w c:\windows\system32\dxtmsft.dll - 2008-08-26 08:11:45 214,528 -c--a-w c:\windows\system32\dxtrans.dll + 2008-10-16 20:18:31 214,528 ----a-w c:\windows\system32\dxtrans.dll - 2008-08-26 08:11:45 133,120 -c----w c:\windows\system32\extmgr.dll + 2008-10-16 20:18:31 133,120 ------w c:\windows\system32\extmgr.dll - 2008-04-14 02:33:25 285,184 ----a-w c:\windows\system32\gdi32.dll + 2008-10-23 12:36:51 286,720 ----a-w c:\windows\system32\gdi32.dll - 2008-08-26 08:11:45 63,488 -c--a-w c:\windows\system32\icardie.dll + 2008-10-16 20:18:32 63,488 ----a-w c:\windows\system32\icardie.dll - 2008-08-25 08:39:40 70,656 -c----w c:\windows\system32\ie4uinit.exe + 2008-10-16 13:12:20 70,656 ------w c:\windows\system32\ie4uinit.exe - 2008-08-26 08:11:45 153,088 -c----w c:\windows\system32\ieakeng.dll + 2008-10-16 20:18:32 153,088 ------w c:\windows\system32\ieakeng.dll - 2008-08-26 08:11:45 230,400 -c----w c:\windows\system32\ieaksie.dll + 2008-10-16 20:18:32 230,400 ------w c:\windows\system32\ieaksie.dll - 2008-08-23 05:54:51 161,792 -c----w c:\windows\system32\ieakui.dll + 2008-10-15 07:04:53 161,792 ------w c:\windows\system32\ieakui.dll - 2008-08-26 08:11:46 383,488 -c--a-w c:\windows\system32\ieapfltr.dll + 2008-10-16 20:18:32 383,488 ----a-w c:\windows\system32\ieapfltr.dll - 2008-08-26 08:11:46 384,512 -c----w c:\windows\system32\iedkcs32.dll + 2008-10-16 20:18:32 384,512 ------w c:\windows\system32\iedkcs32.dll - 2008-10-03 17:12:27 6,066,176 ----a-w c:\windows\system32\ieframe.dll + 2008-10-16 20:18:35 6,066,176 ----a-w c:\windows\system32\ieframe.dll - 2008-08-26 08:11:48 44,544 -c----w c:\windows\system32\iernonce.dll + 2008-10-16 20:18:35 44,544 ------w c:\windows\system32\iernonce.dll - 2008-08-26 08:11:48 267,776 ----a-w c:\windows\system32\iertutil.dll + 2008-10-16 20:18:35 267,776 ----a-w c:\windows\system32\iertutil.dll - 2008-08-25 08:38:00 13,824 -c--a-w c:\windows\system32\ieudinit.exe + 2008-10-16 13:11:09 13,824 ----a-w c:\windows\system32\ieudinit.exe - 2008-11-29 07:53:41 144,792 ----a-w c:\windows\system32\java.exe + 2008-11-10 04:43:37 144,792 ----a-w c:\windows\system32\java.exe - 2008-11-29 07:53:41 144,792 ----a-w c:\windows\system32\javaw.exe + 2008-11-10 04:43:38 144,792 ----a-w c:\windows\system32\javaw.exe - 2008-11-29 07:53:41 148,888 ----a-w c:\windows\system32\javaws.exe + 2008-11-10 04:43:39 148,888 ----a-w c:\windows\system32\javaws.exe - 2008-08-26 08:11:49 27,648 -c--a-w c:\windows\system32\jsproxy.dll + 2008-10-16 20:18:36 27,648 ----a-w c:\windows\system32\jsproxy.dll - 2005-01-27 23:21:46 96,768 -c--a-w c:\windows\system32\logagent.exe + 2008-06-10 04:52:04 96,768 ----a-w c:\windows\system32\logagent.exe - 2008-08-26 08:11:49 459,264 -c--a-w c:\windows\system32\msfeeds.dll + 2008-10-16 20:18:37 459,264 ----a-w c:\windows\system32\msfeeds.dll - 2008-08-26 08:11:49 52,224 -c--a-w c:\windows\system32\msfeedsbs.dll + 2008-10-16 20:18:37 52,224 ----a-w c:\windows\system32\msfeedsbs.dll - 2008-08-27 09:11:52 3,593,216 ----a-w c:\windows\system32\mshtml.dll + 2008-10-17 00:48:40 3,593,216 ----a-w c:\windows\system32\mshtml.dll - 2008-08-26 08:11:52 477,696 -c--a-w c:\windows\system32\mshtmled.dll + 2008-10-16 20:18:40 477,696 ----a-w c:\windows\system32\mshtmled.dll - 2008-08-26 08:11:52 193,024 -c----w c:\windows\system32\msrating.dll + 2008-10-16 20:18:40 193,024 ------w c:\windows\system32\msrating.dll - 2008-08-26 08:11:52 671,232 -c----w c:\windows\system32\mstime.dll + 2008-10-16 20:18:41 671,232 ------w c:\windows\system32\mstime.dll - 2008-08-26 08:11:52 102,912 ------w c:\windows\system32\occache.dll + 2008-10-16 20:18:41 102,912 ------w c:\windows\system32\occache.dll - 2008-08-26 08:11:52 44,544 -c----w c:\windows\system32\pngfilt.dll + 2008-10-16 20:18:41 44,544 ------w c:\windows\system32\pngfilt.dll + 2008-12-10 09:44:44 136,984 ----a-w c:\windows\system32\Restore strlog.dat - 2008-07-08 13:03:54 18,296 ------w c:\windows\system32\spmsg.dll + 2007-11-30 11:19:06 18,296 ------w c:\windows\system32\spmsg.dll - 2008-04-14 02:33:46 246,814 -c--a-w c:\windows\system32\strmdll.dll + 2008-10-03 10:03:53 247,326 ----a-w c:\windows\system32\strmdll.dll - 2008-04-14 02:34:25 60,416 -c----w c:\windows\system32 zchange.exe + 2008-10-23 10:06:59 62,976 ------w c:\windows\system32 zchange.exe - 2008-08-26 08:11:52 105,984 ----a-w c:\windows\system32\url.dll + 2008-10-16 20:18:41 105,984 ----a-w c:\windows\system32\url.dll - 2008-08-26 08:11:53 1,159,680 ----a-w c:\windows\system32\urlmon.dll + 2008-10-16 20:18:42 1,160,192 ----a-w c:\windows\system32\urlmon.dll - 2008-08-26 08:11:53 233,472 ----a-w c:\windows\system32\webcheck.dll + 2008-10-16 20:18:42 233,472 ----a-w c:\windows\system32\webcheck.dll - 2008-08-26 08:11:54 826,368 ----a-w c:\windows\system32\wininet.dll + 2008-10-16 20:18:43 826,368 ----a-w c:\windows\system32\wininet.dll - 2005-01-28 06:53:16 1,027,072 -c--a-w c:\windows\system32\wmnetmgr.dll + 2008-06-10 05:28:36 1,028,096 ----a-w c:\windows\system32\WMNetmgr.dll - 2006-12-07 05:29:34 2,374,472 -c--a-w c:\windows\system32\wmvcore.dll + 2008-06-10 06:07:24 2,376,760 ----a-w c:\windows\system32\WMVCore.dll + 2008-12-11 14:59:43 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_1c8.dat + 2008-12-11 15:00:19 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_5cc.dat . -- Instantané actualisé -- . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "NVIDIA nTune"="c:\program files\NVIDIA Corporation Tune TuneCmd.exe" [2007-09-04 81920] "DWQueuedReporting"="c:\progra~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" [2007-08-24 437160] "Steam"="c:\program files\steam\steam.exe" [2008-10-27 1410296] "Free Download Manager"="c:\program files\Free Download Manager\fdm.exe" [2008-05-20 2474031] "ccleaner"="c:\program files\CCleaner\CCleaner.exe" [2008-12-01 1406192] "SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-11-14 286720] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840] "TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB ealsched.exe" [2008-07-03 185896] "mcagent_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2008-07-11 641208] "McENUI"="c:\progra~1\McAfee\MHN\McENUI.exe" [2008-06-13 1176808] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-10-07 13574144] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-10-07 86016] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792] "NeroFilterCheck"="c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648] "McAfee Backup"="c:\program files\McAfee\MBK\McAfeeDataBackup.exe" [2008-07-10 5129504] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-10 136600] "Raccourci vers la page des propriétés de High Definition Audio"="HDAudPropShortcut.exe" [2004-03-17 c:\windows\system32\Hdaudpropshortcut.exe] "BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 c:\windows\system32\bthprops.cpl] "nwiz"="nwiz.exe" [2008-10-07 c:\windows\system32 wiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2008-03-26 1232896] c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ RAID Manager.lnk - c:\program files\ITE\ITE IT8212 ATA RAID Controller\RaidMgr.exe [2005-10-06 724992] [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2008-05-26 304128] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.HFYU"= huffyuv.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un-] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" "nwiz"=nwiz.exe /install [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\PandaAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\PandaFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) R0 iteraid;ITERAID_Service_Install;c:\windows\system32\DRIVERS\iteraid.sys [2005-10-06 24971] R1 ShldDrv;Panda File Shield Driver;c:\windows\system32\drivers\ShldDrv.sys [2005-10-12 26752] R2 libusbd;LibUsb-Win32 - Daemon, Version 0.1.10.1;system32\libusbd-nt.exe [] R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;"c:\program files\McAfee\SiteAdvisor\McSACore.exe" [2008-10-01 203280] R2 PavProc;Panda Process Protection Driver;\??\c:\windows\system32\DRIVERS\PavProc.sys [2005-10-12 163856] R3 cmudax;C-Media High Definition Audio Interface;c:\windows\system32\drivers\cmudax.sys [2007-01-28 1287296] R3 libusb0;LibUsb-Win32 - Kernel Driver, Version 0.1.10.1;c:\windows\system32\drivers\libusb0.sys [2007-08-17 33792] R3 SNCP106;PC Camera (6009 CIF);c:\windows\system32\DRIVERS\sncp106.sys [2005-10-12 243712] R3 W8100XP;Marvell Libertas 802.11b/g SoftAP Driver for Windows XP ;c:\windows\system32\DRIVERS\mrv8ka51.sys [2005-10-06 258560] S3 ASNDIS5;ASNDIS5 Protocol Driver;\??\c:\windows\system32\ASNDIS5.SYS [2005-10-06 16269] S3 FTD2XX;FTD2XX.SYS FT8U2XX device driver;c:\windows\system32\Drivers\FTD2XX.sys [2005-10-12 29292] S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers mwcdnsu.sys [2008-06-18 138112] S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers mwcdnsuc.sys [2008-06-18 8320] S3 PavSRK.sys;PavSRK.sys;\??\c:\windows\system32\PavSRK.sys [] S3 vhack;vhack;\??\c:\docume~1\User\LOCALS~1\Temp\Rar$EX03.281\vhack.sys [] S3 XPADFL02;XPAD Filter Service 02;c:\windows\system32\DRIVERS\xpadfl02.sys [2008-04-16 27904] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e69ed4dd-9c72-11dd-b07c-00112fd90972}] \Shell\AutoRun\command - F:\LaunchU3.exe -a . Contenu du dossier 'Tâches planifiées' 2008-12-09 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 13:57] 2008-09-18 c:\windows\Tasks\McDefragTask.job - c:\progra~1\mcafee\mqc\QcConsol.exe [2008-07-09 17:10] 2008-12-01 c:\windows\Tasks\McQcTask.job - c:\progra~1\mcafee\mqc\QcConsol.exe [2008-07-09 17:10] 2008-12-11 c:\windows\Tasks\SpeedOptimizer Startup.job - c:\progra~1\speedo~1\SPO.exe [] 2007-09-08 c:\windows\Tasks\Spybot - Search & Destroy - Scheduled Task.job - c:\program files\Spybot - Search & Destroy\SpybotSD.exe [2008-07-07 09:42] . . ------- Examen supplémentaire ------- . uStart Page = hxxp://www.google.be/ uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms} uInternet Connection Wizard,ShellNext = iexplore uSearchURL,(Default) = hxxp://g.fr.msn.be/0SEFRBE/SAOS01?FORM=TOOLBR IE: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Tout télécharger avec Free Download Manager - file://c:\program files\Free Download Manager\dlall.htm IE: Télécharger avec Free Download Manager - file://c:\program files\Free Download Manager\dllink.htm IE: Télécharger avec Star Downloader - c:\program files\Star Downloader\sdie.htm IE: Télécharger la sélection avec Free Download Manager - file://c:\program files\Free Download Manager\dlselected.htm IE: Télécharger la vidéo avec Free Download Manager - file://c:\program files\Free Download Manager\dlfvideo.htm TCP: {C5D85E58-1E4F-4DD5-BA1C-D2D80EC3A778} = 195.238.2.22,195.238.2.21 FireFox -: Profile - c:\documents and settings\User\Application Data\Mozilla\Firefox\Profiles\yg1shx4u.default\ FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.be FF -: plugin - c:\program files\Java\jre6\bin ew_plugin pdeploytk.dll FF -: plugin - c:\program files\Java\jre6\bin ew_plugin pjp2.dll FF -: plugin - c:\program files\Mozilla Firefox\plugins pdeploytk.dll FF -: plugin - c:\program files\Real\RealArcade\Plugins\Mozilla pracplug.dll FF -: plugin - c:\program files\Yahoo!\Common pyaxmpb.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-12-11 16:00:30 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . ------------------------ Autres processus actifs ------------------------ . c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe c:\program files\Java\jre6\bin\jqs.exe c:\windows\system32\libusbd-nt.exe c:\progra~1\McAfee\MSC\mcmscsvc.exe c:\progra~1\FICHIE~1\McAfee\MNA\McNASvc.exe c:\progra~1\FICHIE~1\McAfee\McProxy\McProxy.exe c:\progra~1\McAfee\VIRUSS~1\Mcshield.exe c:\program files\McAfee\MPF\MpfSrv.exe c:\program files\McAfee\MSK\msksrver.exe c:\program files\NVIDIA Corporation Tune TuneService.exe c:\windows\system32 vsvc32.exe c:\windows\system32\HPZipm12.exe c:\windows\system32\PnkBstrA.exe c:\windows\system32\wdfmgr.exe c:\windows\system32\searchindexer.exe c:\windows\system32 undll32.exe c:\windows\system32 undll32.exe c:\progra~1\McAfee\VIRUSS~1\mcsysmon.exe . ************************************************************************** . Heure de fin: 2008-12-11 16:06:25 - La machine a redémarré ComboFix-quarantined-files.txt 2008-12-11 15:06:19 ComboFix2.txt 2008-12-09 19:18:09 Avant-CF: 79.430.647.808 octets libres Après-CF: 79,953,879,040 octets libres WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect 462 --- E O F --- 2008-12-10 11:51:09 et lorsque je vais dans spybot les prog au démarage j ai ca --- Spybot - Search & Destroy version: 1.6.0 (build: 20080707) --- 2008-07-07 blindman.exe (1.0.0.8) 2008-07-07 SDFiles.exe (1.6.0.4) 2008-07-07 SDMain.exe (1.0.0.6) 2008-07-07 SDShred.exe (1.0.2.3) 2008-07-07 SDUpdate.exe (1.6.0.8) 2008-07-07 SDWinSec.exe (1.0.0.12) 2008-07-07 SpybotSD.exe (1.6.0.30) 2008-09-16 TeaTimer.exe (1.6.3.25) 2005-10-06 unins000.exe (51.41.0.0) 2008-12-10 unins001.exe (51.49.0.0) 2008-07-07 Update.exe (1.6.0.7) 2008-10-22 advcheck.dll (1.6.2.13) 2007-04-02 aports.dll (2.1.0.0) 2005-05-31 borlndmm.dll (7.0.4.453) 2005-05-31 delphimm.dll (7.0.4.453) 2008-06-14 DelZip179.dll (1.79.11.1) 2008-09-15 SDHelper.dll (1.6.2.14) 2008-06-19 sqlite3.dll 2008-10-22 Tools.dll (2.1.6.8) 2005-05-31 UnzDll.dll (1.73.1.1) 2005-05-31 ZipDll.dll (1.73.2.0) 2008-11-04 Includes\Adware.sbi 2008-12-09 Includes\AdwareC.sbi 2008-06-03 Includes\Cookies.sbi 2008-09-02 Includes\Dialer.sbi 2008-09-09 Includes\DialerC.sbi 2008-07-23 Includes\HeavyDuty.sbi 2008-11-18 Includes\Hijackers.sbi 2008-11-18 Includes\HijackersC.sbi 2008-12-09 Includes\Keyloggers.sbi 2008-12-09 Includes\KeyloggersC.sbi 2004-11-29 Includes\LSP.sbi 2008-11-18 Includes\Malware.sbi 2008-12-09 Includes\MalwareC.sbi 2008-11-03 Includes\PUPS.sbi 2008-12-09 Includes\PUPSC.sbi 2007-11-07 Includes\Revision.sbi 2008-06-18 Includes\Security.sbi 2008-12-09 Includes\SecurityC.sbi 2008-06-03 Includes\Spybots.sbi 2008-06-03 Includes\SpybotsC.sbi 2008-12-10 Includes\Spyware.sbi 2008-12-10 Includes\SpywareC.sbi 2008-06-03 Includes\Tracks.uti 2008-11-04 Includes\Trojans.sbi 2008-12-10 Includes\TrojansC.sbi 2008-03-04 Plugins\Chai.dll 2008-03-05 Plugins\Fennel.dll 2008-02-26 Plugins\Mate.dll 2007-12-24 Plugins\TCPIPAddress.dll Located: HK_LM:Run, Adobe Reader Speed Launcher command: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" file: C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe size: 39792 MD5: 392845E8D49B5F0E81AAC4D795000A8C Located: HK_LM:Run, BluetoothAuthenticationAgent command: rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent file: C:\WINDOWS\system32\bthprops.cpl size: 110592 MD5: 2406501851B02B50A140690FFF45029E Located: HK_LM:Run, HP Software Update command: C:\Program Files\HP\HP Software Update\HPWuSchd2.exe file: C:\Program Files\HP\HP Software Update\HPWuSchd2.exe size: 54840 MD5: 21293443961A4E2597453EE7A9347F22 Located: HK_LM:Run, McAfee Backup command: "C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe" file: C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe size: 5129504 MD5: DDE97BA4539DD6E0500656E8CB50578C Located: HK_LM:Run, mcagent_exe command: "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey file: C:\Program Files\McAfee.com\Agent\mcagent.exe size: 641208 MD5: 6E1AA17E2758D565AF541A213DD1A217 Located: HK_LM:Run, McENUI command: C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide file: C:\PROGRA~1\McAfee\MHN\McENUI.exe size: 1176808 MD5: 58F91D0CC64C53D8C4716D4FC6D599BA Located: HK_LM:Run, NeroFilterCheck command: C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe file: C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe size: 155648 MD5: C93AB037A8C792D5F8A1A9FC88A7C7C5 Located: HK_LM:Run, NvCplDaemon command: RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup file: C:\WINDOWS\system32\NvCpl.dll size: 13574144 MD5: 315A6E9D2114D67C75F684A9F8638413 Located: HK_LM:Run, NvMediaCenter command: RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit file: C:\WINDOWS\system32\NvMcTray.dll size: 86016 MD5: C4170F4788F0A5BE48B1307DB1647958 Located: HK_LM:Run, nwiz command: nwiz.exe /install file: C:\WINDOWS\system32 wiz.exe size: 1630208 MD5: D76B1D340C6C8F5A676DC717919B319A Located: HK_LM:Run, QuickTime Task command: "C:\Program Files\QuickTime\qttask.exe" -atboottime file: C:\Program Files\QuickTime\qttask.exe size: 286720 MD5: 45E5DB49800F1BF5BD39BDB8CC501E66 Located: HK_LM:Run, Raccourci vers la page des propriétés de High Definition Audio command: HDAudPropShortcut.exe file: C:\WINDOWS\system32\HDAudPropShortcut.exe size: 61952 MD5: 3E7A11C1C4EBD2C3C52197238DF4E14B Located: HK_LM:Run, SunJavaUpdateSched command: "C:\Program Files\Java\jre6\bin\jusched.exe" file: C:\Program Files\Java\jre6\bin\jusched.exe size: 136600 MD5: B98FFA8288EFAABC436C30D198608345 Located: HK_LM:Run, TkBellExe command: "C:\Program Files\Fichiers communs\Real\Update_OB ealsched.exe" -osboot file: C:\Program Files\Fichiers communs\Real\Update_OB ealsched.exe size: 185896 MD5: 89D583FC41D48328128A974C25AFAEB7 Located: HK_LM:Run, iTunesHelper (DISABLED) command: "C:\Program Files\iTunes\iTunesHelper.exe" file: C:\Program Files\iTunes\iTunesHelper.exe size: 0 MD5: D41D8CD98F00B204E9800998ECF8427E Warning: if the file is actually larger than 0 bytes, the checksum could not be properly calculated! Located: HK_LM:Run, nwiz (DISABLED) command: nwiz.exe /install file: C:\WINDOWS\system32 wiz.exe size: 1630208 MD5: D76B1D340C6C8F5A676DC717919B319A Located: HK_CU:Run, Nokia.PCSync where: .DEFAULT... command: "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog file: C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe size: 1232896 MD5: E10B85BCFEE1CA3B61D894CA162E21FC Located: HK_CU:Run, swg (DISABLED) where: .DEFAULT... command: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe file: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe size: 68856 MD5: E616A6A6E91B0A86F2F6217CDE835FFE Located: HK_CU:Run, ctfmon.exe where: PE_C_ADMINISTRATEUR... command: C:\WINDOWS\system32\ctfmon.exe file: C:\WINDOWS\system32\ctfmon.exe size: 15360 MD5: 59DC5BB82E4C8E0B3EADCFDBC44BA6E4 Located: HK_CU:Run, ccleaner where: S-1-5-21-515967899-1229272821-725345543-1003... command: "C:\Program Files\CCleaner\CCleaner.exe" /AUTO file: C:\Program Files\CCleaner\CCleaner.exe size: 1406192 MD5: B5B740B717810D1EBBB50AC244D8EB14 Located: HK_CU:Run, ctfmon.exe where: S-1-5-21-515967899-1229272821-725345543-1003... command: C:\WINDOWS\system32\ctfmon.exe file: C:\WINDOWS\system32\ctfmon.exe size: 15360 MD5: 59DC5BB82E4C8E0B3EADCFDBC44BA6E4 Located: HK_CU:Run, DWQueuedReporting where: S-1-5-21-515967899-1229272821-725345543-1003... command: "C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" -t file: C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe size: 437160 MD5: E108B79EEEE444335A9F300E4C756F6A Located: HK_CU:Run, Free Download Manager where: S-1-5-21-515967899-1229272821-725345543-1003... command: "C:\Program Files\Free Download Manager\fdm.exe" -autorun file: C:\Program Files\Free Download Manager\fdm.exe size: 2474031 MD5: 3293CE6EE5D2B03AC139B24FACC61C93 Located: HK_CU:Run, NVIDIA nTune where: S-1-5-21-515967899-1229272821-725345543-1003... command: "C:\Program Files\NVIDIA Corporation Tune TuneCmd.exe" clear file: C:\Program Files\NVIDIA Corporation Tune TuneCmd.exe size: 81920 MD5: DA32F8864EFF0B437A7F4BD75FA9A7BA Located: HK_CU:Run, SpybotSD TeaTimer where: S-1-5-21-515967899-1229272821-725345543-1003... command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe size: 1833296 MD5: 63B3FF83B87AFCEBA89CED54695DA0F6 Located: HK_CU:Run, Steam where: S-1-5-21-515967899-1229272821-725345543-1003... command: "c:\program files\steam\steam.exe" -silent file: c:\program files\steam\steam.exe size: 1410296 MD5: E2F041F209D4ADDA9882778A11EAB922 Located: HK_CU:Run, Nokia.PCSync where: S-1-5-18... command: "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog file: C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe size: 1232896 MD5: E10B85BCFEE1CA3B61D894CA162E21FC Located: HK_CU:Run, swg (DISABLED) where: S-1-5-18... command: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe file: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe size: 68856 MD5: E616A6A6E91B0A86F2F6217CDE835FFE Located: Démarrage (tous utilisateurs), RAID Manager.lnk where: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage... command: C:\Program Files\ITE\ITE IT8212 ATA RAID Controller\RaidMgr.exe file: C:\Program Files\ITE\ITE IT8212 ATA RAID Controller\RaidMgr.exe size: 724992 MD5: A366430B077C0265416799BFEFCE5C20 Located: WinLogon, crypt32chain command: crypt32.dll file: crypt32.dll size: 0 MD5: D41D8CD98F00B204E9800998ECF8427E Warning: if the file is actually larger than 0 bytes, the checksum could not be properly calculated! Located: WinLogon, cryptnet command: cryptnet.dll file: cryptnet.dll size: 0 MD5: D41D8CD98F00B204E9800998ECF8427E Warning: if the file is actually larger than 0 bytes, the checksum could not be properly calculated! Located: WinLogon, cscdll command: cscdll.dll file: cscdll.dll size: 0 MD5: D41D8CD98F00B204E9800998ECF8427E Warning: if the file is actually larger than 0 bytes, the checksum could not be properly calculated! Located: WinLogon, dimsntfy command: %SystemRoot%\System32\dimsntfy.dll file: %SystemRoot%\System32\dimsntfy.dll size: 0 MD5: D41D8CD98F00B204E9800998ECF8427E Warning: if the file is actually larger than 0 bytes, the checksum could not be properly calculated! Located: WinLogon, ScCertProp command: wlnotify.dll file: wlnotify.dll size: 0 MD5: D41D8CD98F00B204E9800998ECF8427E Warning: if the file is actually larger than 0 bytes, the checksum could not be properly calculated! Located: WinLogon, Schedule command: wlnotify.dll file: wlnotify.dll size: 0 MD5: D41D8CD98F00B204E9800998ECF8427E Warning: if the file is actually larger than 0 bytes, the checksum could not be properly calculated! Located: WinLogon, sclgntfy command: sclgntfy.dll file: sclgntfy.dll size: 0 MD5: D41D8CD98F00B204E9800998ECF8427E Warning: if the file is actually larger than 0 bytes, the checksum could not be properly calculated! Located: WinLogon, SensLogn command: WlNotify.dll file: WlNotify.dll size: 0 MD5: D41D8CD98F00B204E9800998ECF8427E Warning: if the file is actually larger than 0 bytes, the checksum could not be properly calculated! Located: WinLogon, termsrv command: wlnotify.dll file: wlnotify.dll size: 0 MD5: D41D8CD98F00B204E9800998ECF8427E Warning: if the file is actually larger than 0 bytes, the checksum could not be properly calculated! Located: WinLogon, WgaLogon command: WgaLogon.dll file: WgaLogon.dll size: 0 MD5: D41D8CD98F00B204E9800998ECF8427E Warning: if the file is actually larger than 0 bytes, the checksum could not be properly calculated! Located: WinLogon, wlballoon command: wlnotify.dll file: wlnotify.dll size: 0 MD5: D41D8CD98F00B204E9800998ECF8427E Warning: if the file is actually larger than 0 bytes, the checksum could not be properly calculated!

benurrr · Answer

pour nettoyer les fix qui ont servit car

combofix a bien excuter le script en supprimant se qu'on voulait 

mais j'ai l'impression qu'il a buggue en donnant les fichier en double dans le rapport pour analyser c'est pas pratique

comme sa en le repassera sur du propre

Ferme toutes les applications en cours, puis télécharge ToolsCleaner2 sur ton Bureau.
http://www.commentcamarche.net/telecharger/telechargement 34055291 toolscleaner

Double clique sur ToolsCleaner2.exe >
puis Recherche
et sur Suppression
Note : ton bureau va disparaître, c'est normal. S'il n'apparaît pas à la fin du scan, fais la manip suivante :

CTRL+ALT+SUPP pour ouvrir le Gestionnaire des tâches.
Puis rends toi à l'onglet "Processus". Clique en haut à gauche sur Fichiers et choisis "Exécuter"

Tape explorer.exe et valide. Cela fera re-apparaître le Bureau

tu poste le rapport générer après suppression

antouvda · Answer

[ Rapport ToolsCleaner version 2.2.7 (par A.Rothstein & dj QUIOU) ]

-->- Recherche: 

C:\Combofix.txt: trouvé !
C:\TB.txt: trouvé !
C:\SDFIX: trouvé !
C:\Qoobox: trouvé !
C:\Toolbar SD: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\User\Bureau\gravure\HijackThis.lnk: trouvé !
C:\Documents and Settings\User\Bureau\gravure\hijackthis.log: trouvé !
C:\Documents and Settings\User\Mes documents\hijackthis.log: trouvé !
C:\Program Files\HijackThis: trouvé !
C:\Program Files\HijackThis\HijackThis.exe: trouvé !
C:\WINDOWS\NIRCMD.exe: trouvé !

---------------------------------
-->- Suppression: 

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\User\Bureau\gravure\HijackThis.lnk: supprimé !
C:\Program Files\HijackThis\HijackThis.exe: supprimé !
C:\Combofix.txt: supprimé !
C:\TB.txt: supprimé !
C:\Documents and Settings\User\Bureau\gravure\hijackthis.log: supprimé !
C:\Documents and Settings\User\Mes documents\hijackthis.log: supprimé !
C:\WINDOWS\NIRCMD.exe: supprimé !
C:\SDFIX: supprimé !
C:\Qoobox: supprimé !
C:\Toolbar SD: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Program Files\HijackThis: supprimé !

antouvda · Answer

ps : mon bureau n a pas disparu

antouvda · Answer

donc mtn il ne reste plus que les progs au démarage c est ca ??,

benurrr · Answer

pour désactiver les service inutile

1--)Cliquez sur Démarrer , puis sur Exécuter .

2--)Dans le champ Ouvrir, tapez : MSConfig.

3--)Cliquez sur  OK .

La fenêtre de l'utilitaire de configuration système apparaît.

tu va dans l'onglet démarrage et décoche les service qui te serve le moins

si t'est pas sur de certain service tu n'y touche pas et met nous leur nom si tu veut une aide

antouvda · Answer

voilà mes progs au demarrage je te demande un dernier serv lequel je peux désactiver ??
merci bcp 

Located: HK_LM:Run, Adobe Reader Speed Launcher
command: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
file: C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
size: 39792
MD5: 392845E8D49B5F0E81AAC4D795000A8C

Located: HK_LM:Run, BluetoothAuthenticationAgent
command: rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
file: C:\WINDOWS\system32\bthprops.cpl
size: 110592
MD5: 2406501851B02B50A140690FFF45029E

Located: HK_LM:Run, HP Software Update
command: C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
file: C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
size: 54840
MD5: 21293443961A4E2597453EE7A9347F22

Located: HK_LM:Run, McAfee Backup
command: "C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe"
file: C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe
size: 5129504
MD5: DDE97BA4539DD6E0500656E8CB50578C

Located: HK_LM:Run, mcagent_exe
command: "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
file: C:\Program Files\McAfee.com\Agent\mcagent.exe
size: 641208
MD5: 6E1AA17E2758D565AF541A213DD1A217

Located: HK_LM:Run, McENUI
command: C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide
file: C:\PROGRA~1\McAfee\MHN\McENUI.exe
size: 1176808
MD5: 58F91D0CC64C53D8C4716D4FC6D599BA

Located: HK_LM:Run, NeroFilterCheck
command: C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
file: C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
size: 155648
MD5: C93AB037A8C792D5F8A1A9FC88A7C7C5

Located: HK_LM:Run, NvCplDaemon
command: RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
file: C:\WINDOWS\system32\NvCpl.dll
size: 13574144
MD5: 315A6E9D2114D67C75F684A9F8638413

Located: HK_LM:Run, NvMediaCenter
command: RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
file: C:\WINDOWS\system32\NvMcTray.dll
size: 86016
MD5: C4170F4788F0A5BE48B1307DB1647958

Located: HK_LM:Run, nwiz
command: nwiz.exe /install
file: C:\WINDOWS\system32
wiz.exe
size: 1630208
MD5: D76B1D340C6C8F5A676DC717919B319A

Located: HK_LM:Run, QuickTime Task
command: "C:\Program Files\QuickTime\qttask.exe" -atboottime
file: C:\Program Files\QuickTime\qttask.exe
size: 286720
MD5: 45E5DB49800F1BF5BD39BDB8CC501E66

Located: HK_LM:Run, Raccourci vers la page des propriétés de High Definition Audio
command: HDAudPropShortcut.exe
file: C:\WINDOWS\system32\HDAudPropShortcut.exe
size: 61952
MD5: 3E7A11C1C4EBD2C3C52197238DF4E14B

Located: HK_LM:Run, SunJavaUpdateSched
command: "C:\Program Files\Java\jre6\bin\jusched.exe"
file: C:\Program Files\Java\jre6\bin\jusched.exe
size: 136600
MD5: B98FFA8288EFAABC436C30D198608345

Located: HK_LM:Run, TkBellExe
command: "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe" -osboot
file: C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
size: 185896
MD5: 89D583FC41D48328128A974C25AFAEB7

Located: HK_LM:Run, iTunesHelper (DISABLED)
command: "C:\Program Files\iTunes\iTunesHelper.exe"
file: C:\Program Files\iTunes\iTunesHelper.exe
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:Run, nwiz (DISABLED)
command: nwiz.exe /install
file: C:\WINDOWS\system32
wiz.exe
size: 1630208
MD5: D76B1D340C6C8F5A676DC717919B319A

Located: HK_CU:Run, Nokia.PCSync
where: .DEFAULT...
command: "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog
file: C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
size: 1232896
MD5: E10B85BCFEE1CA3B61D894CA162E21FC

Located: HK_CU:Run, swg (DISABLED)
where: .DEFAULT...
command: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
file: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
size: 68856
MD5: E616A6A6E91B0A86F2F6217CDE835FFE

Located: HK_CU:Run, ctfmon.exe
where: PE_C_ADMINISTRATEUR...
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 59DC5BB82E4C8E0B3EADCFDBC44BA6E4

Located: HK_CU:Run, ccleaner
where: S-1-5-21-515967899-1229272821-725345543-1003...
command: "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
file: C:\Program Files\CCleaner\CCleaner.exe
size: 1406192
MD5: B5B740B717810D1EBBB50AC244D8EB14

Located: HK_CU:Run, ctfmon.exe
where: S-1-5-21-515967899-1229272821-725345543-1003...
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 59DC5BB82E4C8E0B3EADCFDBC44BA6E4

Located: HK_CU:Run, DWQueuedReporting
where: S-1-5-21-515967899-1229272821-725345543-1003...
command: "C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" -t
file: C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe
size: 437160
MD5: E108B79EEEE444335A9F300E4C756F6A

Located: HK_CU:Run, Free Download Manager
where: S-1-5-21-515967899-1229272821-725345543-1003...
command: "C:\Program Files\Free Download Manager\fdm.exe" -autorun
file: C:\Program Files\Free Download Manager\fdm.exe
size: 2474031
MD5: 3293CE6EE5D2B03AC139B24FACC61C93

Located: HK_CU:Run, NVIDIA nTune
where: S-1-5-21-515967899-1229272821-725345543-1003...
command: "C:\Program Files\NVIDIA Corporation
Tune
TuneCmd.exe" clear
file: C:\Program Files\NVIDIA Corporation
Tune
TuneCmd.exe
size: 81920
MD5: DA32F8864EFF0B437A7F4BD75FA9A7BA

Located: HK_CU:Run, SpybotSD TeaTimer
where: S-1-5-21-515967899-1229272821-725345543-1003...
command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
size: 1833296
MD5: 63B3FF83B87AFCEBA89CED54695DA0F6

Located: HK_CU:Run, Steam
where: S-1-5-21-515967899-1229272821-725345543-1003...
command: "c:\program files\steam\steam.exe" -silent
file: c:\program files\steam\steam.exe
size: 1410296
MD5: E2F041F209D4ADDA9882778A11EAB922

Located: HK_CU:Run, Nokia.PCSync
where: S-1-5-18...
command: "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog
file: C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
size: 1232896
MD5: E10B85BCFEE1CA3B61D894CA162E21FC

Located: HK_CU:Run, swg (DISABLED)
where: S-1-5-18...
command: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
file: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
size: 68856
MD5: E616A6A6E91B0A86F2F6217CDE835FFE

Located: Démarrage (tous utilisateurs), RAID Manager.lnk
where: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage...
command: C:\Program Files\ITE\ITE IT8212 ATA RAID Controller\RaidMgr.exe
file: C:\Program Files\ITE\ITE IT8212 ATA RAID Controller\RaidMgr.exe
size: 724992
MD5: A366430B077C0265416799BFEFCE5C20

Located: WinLogon, crypt32chain
command: crypt32.dll
file: crypt32.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cryptnet
command: cryptnet.dll
file: cryptnet.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, cscdll
command: cscdll.dll
file: cscdll.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, dimsntfy
command: %SystemRoot%\System32\dimsntfy.dll
file: %SystemRoot%\System32\dimsntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, Schedule
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, SensLogn
command: WlNotify.dll
file: WlNotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, termsrv
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, WgaLogon
command: WgaLogon.dll
file: WgaLogon.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: WinLogon, wlballoon
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

benurrr · Answer

dans msconfig y'a t'il les même programmes ?

antouvda · Answer

oui il me semble c est spybot qui a fait la liste

benurrr · Answer

tu peut regarder dans msconfig comme je t'ai expliquer

c'est celle la la plus fiable a la désactivation

antouvda · Answer

mais spybot en donne beaucoup plus tu veux que je fasse un liste a partir de ms config ??
tu as juste besoin du nom ?? ou plus

antouvda · Answer

je te fait une liste a partir de msconfig

antouvda · Answer

voila le debut

hdaudpropshortcut : hdaudpropshortcut.exe

rundll32

qttask : c:programe files/quicktim/qttask.exe

hpwuschd2 : c:/programme files/hp/ hp software update / hpwuschd2.exe

realsched :  c:/programme files / fichiers communs / real/update_Ob/realsched.exe -osboot

mcagent : ................................................ mcaffee.com/mcagent.exe a mon avis celui la il faut le laissé

mcenui :.................................................... mcenui.exe/hide

nvcpl : Rundll32exe c:/windows/systeme32/nvcpl.dll,nvstartup

nwiz : nwiz.exe/install

antouvda · Answer

et la suite 

nvmctray : rundll32.exe c/:windows/systeme32/nvmctray.dll,nvtaskbarinit

reader_sl    reader_sl.exe

nerocheck :  lib/ nerocheck.exe


mcaffeedatabackup (celui meme moi je sais qu il faut le laissé )

jusched :  jre/bin/jushed.exe

ctfmon   : systeme32/ctfmon.exe

ntunecmd : nvidia corporation/ntune/ntunecmd.exe clear

dwtrig 20 : c:/progra~1/fichie~/micros~1/dw/dwtrig20.exe - t

steam (c est un de mes jeux pas besoin au démarage lol )

ccleaner 

teatimer :spybot - search & destroy / teatimer.exe

antouvda · Answer

je vais aussi faire des capture d ecran

benurrr · Answer

pour désactiver a décocher c'est 3 la sur

reader_sl reader_sl.exe------) Adobe Reader 

nerocheck : lib/ nerocheck.exe---) Nero 

jusched : jre/bin/jushed.exe---) Java 

 j'ai un doute sur un quatrième

 je me renseigne et je te tien au courant

antouvda · Answer

ok merci

antouvda · Answer

Salut Merci beaucoup pour toute ton aide 

encore merci 

Antoine

benurrr · Answer

re

cela aussi aussi a desactiver dans msconfig

c:programe files/quicktim/qttask.exe 

c:/programme files/hp/ hp software update / hpwuschd2.exe 

c:/programme files / fichiers communs / real/update_Ob/realsched.exe -osboot

antouvda · Answer

merci beaucoup pour ton aide 

a+ 

Antouvda

antouvda · Answer

desolé pour le retard 

oui merci bcp mon pc va mieux

a+ 

j ' espère ne plus avoir besoin de toi (lol )

bye

Antoine

Rapport hijackthis

73 réponses

Votre réponse

Discussions similaires

Newsletters