Ordinateur o_O (les virus)
Résolu
Bonjour,tous le monde
Mon ordi ne marche pas bien ralenti et ya une erreur "exception processing message c0000013 Parameters (truc incopiable)"
J'ai fait un scan par comodo il a trouvé 67 virus donc j'ai eliminé des trucs de restauration comme virus mais un fichier dans C:\Windows \installer je n'ai pas eu le courage de le virer
Après ceci en essayant de faire un scan avec hitman pro il y a une erreur du fichier executable
Je suis deboussolé je ne sais pas quoi faire donc je vous demande conseil
voila un log de rsit:
Logfile of random's system information tool 1.06 (written by random/random)
Run by motec at 2009-12-12 17:17:40
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 30 GB (27%) free of 114 GB
Total RAM: 1982 MB (74% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:19:10, on 12/12/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\UltraVNC Addons\uvnc_service.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Hitman Pro 3.5\HitmanPro35.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIEDE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\motec\Mes documents\M.I\docs\Logiciels\RSIT_1.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\trend micro\motec.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O2 - BHO: SBCONVERT - {A1056498-D09A-41E4-864B-505EDD640D9E} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: DAPIELoader Class - {FF6C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRA~1\DAP\DAPIEL~1.DLL
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [HitmanPro35] "C:\Program Files\Hitman Pro 3.5\HitmanPro35.exe" /scan:boot
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [EPSON SX100 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIEDE.EXE /FU "C:\DOCUME~1\motec\LOCALS~1\Temp\E_SA3.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.0.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O17 - HKLM\System\CCS\Services\Tcpip\..\{95B5D476-2D6C-4720-BD48-9788B4B976B7}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CCS\Services\Tcpip\..\{E4148975-C818-485C-A0FA-27891A4FD8C0}: NameServer = 156.154.70.25 156.154.71.25
O17 - HKLM\System\CCS\Services\Tcpip\..\{FAC13AB6-DE94-4B22-9FEA-A5C0FCD34DD6}: NameServer = 156.154.70.25,156.154.71.25
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Uvnc_service - Unknown owner - C:\Program Files\UltraVNC Addons\uvnc_service.exe
--
End of file - 9179 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{66CB28CE-4B1F-4841-BF73-A7722C446A8E}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02 266240]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A1056498-D09A-41E4-864B-505EDD640D9E}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-11-07 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-11-07 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FF6C3CF0-4B15-11D1-ABED-709549C10000}]
DAPIELoader Class - C:\PROGRA~1\DAP\DAPIEL~1.DLL [2009-05-15 140880]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"VTTrayp"=C:\WINDOWS\system32\VTtrayp.exe [2005-10-31 163840]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-06-24 8466432]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-06-24 81920]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [2008-01-21 29753344]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-11-07 149280]
"SpywareTerminator"=C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe [2009-11-20 2166784]
"ISUSScheduler"=C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe [2005-02-16 81920]
"HitmanPro35"=C:\Program Files\Hitman Pro 3.5\HitmanPro35.exe [2009-12-10 5034816]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2009-12-11 1799952]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-04 40448]
"EPSON SX100 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIEDE.EXE [2008-02-05 258560]
"DownloadAccelerator"=C:\Program Files\DAP\DAP.EXE [2009-12-12 2872832]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 1017208]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DownloadAccelerator]
C:\Program Files\DAP\DAP.EXE [2009-12-12 2872832]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON SX100 Series]
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIEDE.EXE [2008-02-05 258560]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FileHippo.com]
C:\Program Files\FileHippo.com\UpdateChecker.exe [2009-11-02 155648]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe /runcleanupscript []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorUpdate]
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2009-11-07 3055616]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UVS12 Preload]
C:\Program Files\Corel\Corel VideoStudio 12\uvPL.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^motec^Menu Démarrer^Programmes^Démarrage^ImpulseNow.lnk]
C:\Program Files\Stardock\Impulse\Now\ImpulseNow.exe []
C:\Documents and Settings\motec\Menu Démarrer\Programmes\Démarrage
RocketDock.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"=" C:\WINDOWS\system32\guard32.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
WgaLogon.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
0aMCPClient - {F5DF91F9-15E9-416B-A7C3-7519B11ECBFC}
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=
:\WINDOWS\system32\srrstr.dll
cli
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro35]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro35.sys]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=128
"NoActiveDesktop"=0
"NoDriveAutoRun"=128
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe"="C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe:*:Enabled:Nero Home"
"C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe"="C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe:*:Enabled:Nero ShowTime Essentials"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Nero\Nero 7\Nero MediaHome\NeroMediaHome.exe"="C:\Program Files\Nero\Nero 7\Nero MediaHome\NeroMediaHome.exe:*:Enabled:Nero MediaHome Essentials"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\FlashGet\flashget.exe"="C:\Program Files\FlashGet\flashget.exe:*:Enabled:Flashget"
"C:\wamp\bin\apache\Apache2.2.11\bin\httpd.exe"="C:\wamp\bin\apache\Apache2.2.11\bin\httpd.exe:*:Enabled:Apache HTTP Server"
"C:\Program Files\Shareaza Pro\Shareaza Pro.exe"="C:\Program Files\Shareaza Pro\Shareaza Pro.exe:*:Disabled:Shareaza Pro"
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe"="C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh"
"C:\WINDOWS\pchealth\helpctr\binaries\helpctr.exe"="C:\WINDOWS\pchealth\helpctr\binaries\helpctr.exe:*:Enabled:Assistance à distance - Windows Messenger et voix"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:ipsec"
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
"C:\Program Files\wLite\wLite.exe"="C:\Program Files\wLite\wLite.exe:*:Enabled:webcamXP"
"C:\Program Files\wLite\wService.exe"="C:\Program Files\wLite\wService.exe:*:Enabled:webcamXP Service"
"H:\vnfnh.pif"="H:\vnfnh.pif:*:Enabled:ipsec"
"C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe"="C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe:*:Enabled:ipsec"
"C:\Program Files\DAP\DAP.exe"="C:\Program Files\DAP\DAP.EXE:*:Enabled:ipsec"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Disabled:Crawler Spyware Terminator"
"C:\Documents and Settings\motec\Mes documents\M.I\docs\Logiciels\Navigation\IE8.exe"="C:\Documents and Settings\motec\Mes documents\M.I\docs\Logiciels\Navigation\IE8.exe:*:Enabled:ipsec"
"C:\WINDOWS\Explorer.EXE"="C:\WINDOWS\Explorer.EXE:*:Enabled:ipsec"
"C:\Program Files\Corel\Corel VideoStudio 12\uvPL.exe"="C:\Program Files\Corel\Corel VideoStudio 12\uvPL.exe:*:Enabled:ipsec"
"C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe:*:Enabled:ipsec"
"C:\WINDOWS\system32\userinit.exe"="C:\WINDOWS\system32\userinit.exe:*:Enabled:ipsec"
"C:\WINDOWS\system32\VTTimer.exe"="C:\WINDOWS\system32\VTTimer.exe:*:Enabled:ipsec"
"C:\WINDOWS\system32\wuauclt.exe"="C:\WINDOWS\system32\wuauclt.exe:*:Enabled:ipsec"
"C:\Program Files\Google\Update\GoogleUpdate.exe"="C:\Program Files\Google\Update\GoogleUpdate.exe:*:Enabled:ipsec"
"C:\Program Files\Internet Explorer\IEXPLORE.EXE"="C:\Program Files\Internet Explorer\IEXPLORE.EXE:*:Enabled:ipsec"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:ipsec"
"C:\Program Files\Microsoft Office\Office12\WINWORD.EXE"="C:\Program Files\Microsoft Office\Office12\WINWORD.EXE:*:Enabled:ipsec"
"C:\Program Files\Shareaza\Shareaza.exe"="C:\Program Files\Shareaza\Shareaza.exe:*:Enabled:Shareaza"
"C:\Program Files\Hitman Pro 3.5\HitmanPro35.exe"="C:\Program Files\Hitman Pro 3.5\HitmanPro35.exe:*:Enabled:ipsec"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{177c07de-3f95-11de-ad4d-00730442e694}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL explorer.exe
shell\Explore\command - H:\explorer.exe
shell\Open\command - H:\explorer.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7ad83c03-e17f-11de-afcb-00730442e694}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8f2c6ec3-60a0-11de-adc4-00730442e694}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL explorer.exe
shell\Explore\command - J:\explorer.exe
shell\Open\command - J:\explorer.exe
======List of files/folders created in the last 1 months======
2009-12-12 13:38:09 ----A---- C:\WINDOWS\system32\bootdelete.exe
2009-12-11 23:14:59 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-11 23:14:54 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2009-12-11 23:14:49 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-11 23:14:28 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-11 23:14:24 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-11 23:14:17 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2009-12-11 21:56:52 ----D---- C:\Documents and Settings\All Users\Application Data\Comodo
2009-12-11 21:56:49 ----A---- C:\WINDOWS\system32\guard32.dll
2009-12-10 18:35:17 ----D---- C:\Documents and Settings\All Users\Application Data\Hitman Pro
2009-12-10 18:35:16 ----D---- C:\Program Files\Hitman Pro 3.5
2009-12-09 19:40:53 ----D---- C:\Program Files\Shareaza
2009-12-09 19:40:53 ----D---- C:\Documents and Settings\motec\Application Data\Shareaza
2009-12-08 21:22:13 ----D---- C:\Program Files\ETAJV PC
2009-12-08 20:53:04 ----A---- C:\WINDOWS\setuplog.txt
2009-12-08 20:02:27 ----D---- C:\Program Files\Support Tools
2009-12-07 21:11:26 ----D---- C:\Program Files\ToniArts
2009-12-05 22:40:19 ----A---- C:\~GLHTTP1.TMP
2009-12-03 18:12:17 ----D---- C:\Documents and Settings\All Users\Application Data\InterVideo
2009-12-03 18:12:14 ----A---- C:\WINDOWS\system32\IVIresizeW7.dll
2009-12-03 18:12:14 ----A---- C:\WINDOWS\system32\IVIresizePX.dll
2009-12-03 18:12:14 ----A---- C:\WINDOWS\system32\IVIresizeP6.dll
2009-12-03 18:12:14 ----A---- C:\WINDOWS\system32\IVIresizeM6.dll
2009-12-03 18:12:14 ----A---- C:\WINDOWS\system32\IVIresizeA6.dll
2009-12-03 18:12:14 ----A---- C:\WINDOWS\system32\IVIresize.dll
2009-12-03 18:11:02 ----D---- C:\Program Files\Fichiers communs\Ulead Systems
2009-12-01 18:20:30 ----D---- C:\Program Files\NaturalSoft
2009-12-01 18:03:29 ----D---- C:\Program Files\ScanSoft
2009-12-01 17:30:52 ----D---- C:\Program Files\NCT
2009-12-01 17:30:52 ----D---- C:\Program Files\Common Files
2009-12-01 17:30:45 ----D---- C:\Program Files\Text to Speech Maker
2009-12-01 17:26:59 ----D---- C:\Program Files\Fichiers communs\L&H
2009-11-30 16:18:12 ----A---- C:\WINDOWS\system32\pncrt.dll
2009-11-26 20:56:35 ----D---- C:\Program Files\VDOWNLOADER
2009-11-26 13:52:44 ----HDC---- C:\WINDOWS\$NtUninstallKB976098-v2$
2009-11-26 13:52:42 ----A---- C:\WINDOWS\imsins.BAK
2009-11-26 13:52:38 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2009-11-25 20:45:22 ----A---- C:\WINDOWS\cfplogvw.INI
2009-11-23 21:39:37 ----D---- C:\c7525e3ac2b8c6ade0d762bc806b38f0
2009-11-21 20:50:26 ----A---- C:\WINDOWS\TUTORI~1.INI
2009-11-21 20:23:43 ----D---- C:\Documents and Settings\All Users\Application Data\InstallShield
2009-11-21 20:23:05 ----D---- C:\Documents and Settings\motec\Application Data\Nuance
2009-11-21 20:18:54 ----D---- C:\Documents and Settings\All Users\Application Data\Nuance
2009-11-21 20:18:47 ----D---- C:\WINDOWS\speech
2009-11-18 13:24:47 ----D---- C:\Documents and Settings\motec\Application Data\vlc
2009-11-17 16:12:21 ----D---- C:\Program Files\nCube
2009-11-16 20:44:36 ----D---- C:\Program Files\Fichiers communs\Real
2009-11-16 20:44:33 ----D---- C:\Program Files\Real
2009-11-16 18:42:13 ----D---- C:\Documents and Settings\motec\Application Data\Ulead Systems
2009-11-16 18:39:51 ----D---- C:\Program Files\Windows Media Components
2009-11-16 18:38:08 ----D---- C:\Documents and Settings\All Users\Application Data\Ulead Systems
2009-11-16 18:36:30 ----D---- C:\Program Files\Corel
2009-11-16 13:55:25 ----SHD---- C:\Documents and Settings\motec\Application Data\.#
2009-11-16 13:24:58 ----D---- C:\Program Files\NOS
2009-11-15 20:01:11 ----D---- C:\Documents and Settings\motec\Application Data\AVCWare Studio
2009-11-13 14:45:49 ----D---- C:\Program Files\Microsoft Visual Studio
2009-11-13 14:45:49 ----D---- C:\Program Files\Fichiers communs\DESIGNER
2009-11-13 13:10:51 ----D---- C:\Program Files\Audacity 1.3 Beta (Unicode)
2009-11-13 12:41:16 ----A---- C:\WINDOWS\system32\freecell.exe
2009-11-13 12:40:24 ----A---- C:\WINDOWS\system32\sol.exe
2009-11-13 12:40:21 ----A---- C:\WINDOWS\system32\spider.exe
2009-11-13 12:38:45 ----A---- C:\WINDOWS\system32\mshtmled(2).dll
2009-11-13 12:38:41 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-11-13 12:07:26 ----HDC---- C:\WINDOWS\ie8
======List of files/folders modified in the last 1 months======
2009-12-12 17:19:06 ----D---- C:\Program Files\Trend Micro
2009-12-12 17:14:25 ----D---- C:\WINDOWS\Prefetch
2009-12-12 17:11:33 ----D---- C:\WINDOWS\Temp
2009-12-12 17:10:41 ----D---- C:\WINDOWS\system32\CatRoot2
2009-12-12 17:10:32 ----HD---- C:\WINDOWS\system32\drivers
2009-12-12 17:10:00 ----D---- C:\WINDOWS\system32
2009-12-12 15:33:54 ----D---- C:\NEOGEO 5
2009-12-12 14:45:27 ----D---- C:\Documents and Settings\motec\Application Data\LimeWire
2009-12-12 14:07:27 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-12-12 14:02:56 ----D---- C:\Documents and Settings\motec\Application Data\Spyware Terminator
2009-12-12 13:51:16 ----D---- C:\Program Files\DAP
2009-12-12 13:49:05 ----D---- C:\Program Files\LimeWire
2009-12-12 12:45:07 ----D---- C:\Program Files\Mozilla Firefox
2009-12-12 12:37:34 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-12-12 12:09:25 ----D---- C:\Program Files\Notepad++
2009-12-12 10:57:24 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-12 10:53:27 ----D---- C:\WINDOWS
2009-12-12 10:53:00 ----D---- C:\WINDOWS\AppPatch
2009-12-11 23:15:02 ----HD---- C:\WINDOWS\inf
2009-12-11 23:15:01 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-11 23:14:53 ----HD---- C:\WINDOWS\$hf_mig$
2009-12-11 23:14:42 ----D---- C:\Program Files\Internet Explorer
2009-12-11 23:11:36 ----D---- C:\WINDOWS\Debug
2009-12-11 23:11:00 ----D---- C:\Documents and Settings\motec\Application Data\Skype
2009-12-11 21:56:46 ----D---- C:\Program Files\COMODO
2009-12-11 21:12:31 ----D---- C:\Documents and Settings\motec\Application Data\skypePM
2009-12-11 19:40:48 ----D---- C:\Documents and Settings\motec\Application Data\dvdcss
2009-12-11 12:21:00 ----D---- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
2009-12-10 19:59:36 ----D---- C:\Program Files\Google
2009-12-10 19:59:36 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-12-10 19:59:35 ----D---- C:\Program Files\Apple Software Update
2009-12-10 18:51:44 ----D---- C:\Program Files\SF
2009-12-10 18:43:49 ----D---- C:\Program Files\Spyware Terminator
2009-12-10 18:42:33 ----D---- C:\Documents and Settings\motec\Application Data\Notepad++
2009-12-10 18:35:16 ----D---- C:\Program Files
2009-12-10 13:12:31 ----SHD---- C:\WINDOWS\Installer
2009-12-10 13:12:30 ----D---- C:\WINDOWS\WinSxS
2009-12-08 20:02:32 ----D---- C:\WINDOWS\Help
2009-12-07 21:52:14 ----A---- C:\WINDOWS\NeroDigital.ini
2009-12-07 21:11:22 ----HD---- C:\Program Files\InstallShield Installation Information
2009-12-07 21:05:30 ----A---- C:\WINDOWS\AviSplitter.INI
2009-12-07 20:21:01 ----D---- C:\Program Files\CDBurnerXP
2009-12-07 17:41:07 ----D---- C:\Program Files\Fichiers communs
2009-12-07 14:00:41 ----D---- C:\wamp
2009-12-07 13:58:34 ----D---- C:\Program Files\wLite
2009-12-07 13:48:42 ----D---- C:\WINDOWS\SxsCaPendDel
2009-12-07 13:43:34 ----D---- C:\Documents and Settings\All Users\Application Data\NOS
2009-12-07 13:41:50 ----D---- C:\Program Files\SYSTEM 2K+
2009-12-07 13:32:10 ----D---- C:\WINDOWS\system32\Restore
2009-12-06 20:18:33 ----D---- C:\Documents and Settings\motec\Application Data\Audacity
2009-12-05 12:46:18 ----RASH---- C:\boot.ini
2009-12-05 12:46:18 ----A---- C:\WINDOWS\win.ini
2009-12-05 12:46:18 ----A---- C:\WINDOWS\SYSTEM.INI
2009-12-05 12:46:17 ----D---- C:\WINDOWS\pss
2009-12-04 19:46:36 ----D---- C:\Program Files\Core Design
2009-12-01 21:06:19 ----A---- C:\WINDOWS\system32\mrt.exe
2009-12-01 18:24:09 ----SD---- C:\Documents and Settings\motec\Application Data\Microsoft
2009-12-01 14:51:11 ----RSD---- C:\WINDOWS\Fonts
2009-12-01 10:14:04 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-12-01 10:13:54 ----RSD---- C:\WINDOWS\assembly
2009-12-01 10:10:51 ----D---- C:\Program Files\Microsoft Works
2009-12-01 10:07:24 ----D---- C:\Program Files\Fichiers communs\System
2009-11-22 14:59:05 ----SHD---- C:\RECYCLER
2009-11-21 20:19:17 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-11-21 20:19:16 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-11-17 20:26:03 ----D---- C:\WINDOWS\system32\usmt
2009-11-17 20:26:03 ----D---- C:\Program Files\Outlook Express
2009-11-17 20:26:03 ----D---- C:\Program Files\Movie Maker
2009-11-17 11:29:05 ----D---- C:\Documents and Settings\motec\Application Data\Real
2009-11-17 11:23:52 ----D---- C:\Program Files\Filzip
2009-11-17 11:22:09 ----A---- C:\WINDOWS\Filzip.ini
2009-11-16 20:53:20 ----D---- C:\Documents and Settings\All Users\Application Data\Real
2009-11-16 20:44:40 ----A---- C:\WINDOWS\system32\msvcr71.dll
2009-11-16 20:44:40 ----A---- C:\WINDOWS\system32\msvcp71.dll
2009-11-16 09:40:55 ----D---- C:\Program Files\AVS4YOU
2009-11-16 08:13:33 ----D---- C:\Program Files\Fichiers communs\AVSMedia
2009-11-14 22:42:30 ----D---- C:\WINDOWS\system32\CatRoot
2009-11-14 22:42:27 ----D---- C:\WINDOWS\ie8updates
2009-11-13 14:46:04 ----D---- C:\Program Files\MSBuild
2009-11-13 14:45:40 ----D---- C:\WINDOWS\SHELLNEW
2009-11-13 12:08:11 ----HD---- C:\WINDOWS\msdownld.tmp
2009-11-13 12:07:26 ----D---- C:\WINDOWS\system32\fr-fr
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2009-12-11 132296]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2009-12-11 25160]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-04 40320]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R3 adiusbae;USB ADSL LAN Adapter; C:\WINDOWS\system32\DRIVERS\adiusbae.sys [2003-12-01 117785]
R3 asc3360pr;asc3360pr; \??\C:\WINDOWS\system32\drivers\nnjmnp.sys []
R3 FETND5BV;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys [2006-03-15 43008]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hitmanpro35;Hitman Pro 3.5 Support Driver; \??\C:\WINDOWS\system32\drivers\hitmanpro35.sys []
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2009-11-09 47360]
R3 S3GIGP;S3GIGP; C:\WINDOWS\system32\DRIVERS\S3gIGPm.sys [2007-07-11 714240]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
R3 usbvideo;Périphérique vidéo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2004-08-03 78464]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2008-01-02 215936]
S1 ASPI32;ASPI32; C:\WINDOWS\system32\drivers\ASPI32.sys []
S2 ADILOADER;General Purpose USB Driver (adildr.sys); C:\WINDOWS\System32\Drivers\adildr.sys [2003-07-17 46167]
S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2006-06-27 3972672]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 FETNDIS;Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet; C:\WINDOWS\system32\DRIVERS\fetnd5.sys []
S3 HdAudAddService;VIA High Definition Audio Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2008-01-02 215936]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-12-21 4405248]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2009-09-28 7168]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 viagfx;viagfx; C:\WINDOWS\system32\DRIVERS\vtmini.sys [2005-12-27 247040]
S3 vm331avs;VC0334 USB2.0 Digital Camera; C:\WINDOWS\System32\Drivers\vm331avs.sys [2008-05-06 970624]
S3 vncdrv;vncdrv; C:\WINDOWS\system32\DRIVERS\vncdrv.sys [2007-05-22 12104]
S3 WsAudioDevice_383;WsAudioDevice_383; C:\WINDOWS\system32\drivers\WsAudioDevice_383.sys [2008-11-19 16640]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-02 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-03-26 132424]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2009-12-11 723632]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-11-07 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe [2009-07-20 935208]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2009-09-06 71096]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2009-11-20 488960]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe [2008-06-09 53392]
R2 Uvnc_service;Uvnc_service; C:\Program Files\UltraVNC Addons\uvnc_service.exe [2007-06-04 63296]
S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-06-24 155716]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 getPlusHelper;getPlus(R) Installer; C:\WINDOWS\System32\svchost.exe [2004-08-04 14336]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 987648]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336]
S4 NetTcpPortSharing;Service de partage de ports Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 TipCtrl;TipCtrl; C:\Program Files\uTIPu\TipCtrl.exe []
-----------------EOF-----------------
Merci de m'aider
--
C'est ça VIVE LE XHTML / CSS
Mon ordi ne marche pas bien ralenti et ya une erreur "exception processing message c0000013 Parameters (truc incopiable)"
J'ai fait un scan par comodo il a trouvé 67 virus donc j'ai eliminé des trucs de restauration comme virus mais un fichier dans C:\Windows \installer je n'ai pas eu le courage de le virer
Après ceci en essayant de faire un scan avec hitman pro il y a une erreur du fichier executable
Je suis deboussolé je ne sais pas quoi faire donc je vous demande conseil
voila un log de rsit:
Logfile of random's system information tool 1.06 (written by random/random)
Run by motec at 2009-12-12 17:17:40
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 30 GB (27%) free of 114 GB
Total RAM: 1982 MB (74% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:19:10, on 12/12/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\UltraVNC Addons\uvnc_service.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Hitman Pro 3.5\HitmanPro35.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIEDE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\motec\Mes documents\M.I\docs\Logiciels\RSIT_1.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\trend micro\motec.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O2 - BHO: SBCONVERT - {A1056498-D09A-41E4-864B-505EDD640D9E} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: DAPIELoader Class - {FF6C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRA~1\DAP\DAPIEL~1.DLL
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [HitmanPro35] "C:\Program Files\Hitman Pro 3.5\HitmanPro35.exe" /scan:boot
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [EPSON SX100 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIEDE.EXE /FU "C:\DOCUME~1\motec\LOCALS~1\Temp\E_SA3.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.0.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O17 - HKLM\System\CCS\Services\Tcpip\..\{95B5D476-2D6C-4720-BD48-9788B4B976B7}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CCS\Services\Tcpip\..\{E4148975-C818-485C-A0FA-27891A4FD8C0}: NameServer = 156.154.70.25 156.154.71.25
O17 - HKLM\System\CCS\Services\Tcpip\..\{FAC13AB6-DE94-4B22-9FEA-A5C0FCD34DD6}: NameServer = 156.154.70.25,156.154.71.25
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Uvnc_service - Unknown owner - C:\Program Files\UltraVNC Addons\uvnc_service.exe
--
End of file - 9179 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{66CB28CE-4B1F-4841-BF73-A7722C446A8E}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02 266240]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A1056498-D09A-41E4-864B-505EDD640D9E}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-11-07 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-11-07 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FF6C3CF0-4B15-11D1-ABED-709549C10000}]
DAPIELoader Class - C:\PROGRA~1\DAP\DAPIEL~1.DLL [2009-05-15 140880]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"VTTrayp"=C:\WINDOWS\system32\VTtrayp.exe [2005-10-31 163840]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-06-24 8466432]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-06-24 81920]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [2008-01-21 29753344]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-11-07 149280]
"SpywareTerminator"=C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe [2009-11-20 2166784]
"ISUSScheduler"=C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe [2005-02-16 81920]
"HitmanPro35"=C:\Program Files\Hitman Pro 3.5\HitmanPro35.exe [2009-12-10 5034816]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2009-12-11 1799952]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-04 40448]
"EPSON SX100 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIEDE.EXE [2008-02-05 258560]
"DownloadAccelerator"=C:\Program Files\DAP\DAP.EXE [2009-12-12 2872832]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 1017208]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DownloadAccelerator]
C:\Program Files\DAP\DAP.EXE [2009-12-12 2872832]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON SX100 Series]
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIEDE.EXE [2008-02-05 258560]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FileHippo.com]
C:\Program Files\FileHippo.com\UpdateChecker.exe [2009-11-02 155648]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe /runcleanupscript []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorUpdate]
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2009-11-07 3055616]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UVS12 Preload]
C:\Program Files\Corel\Corel VideoStudio 12\uvPL.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^motec^Menu Démarrer^Programmes^Démarrage^ImpulseNow.lnk]
C:\Program Files\Stardock\Impulse\Now\ImpulseNow.exe []
C:\Documents and Settings\motec\Menu Démarrer\Programmes\Démarrage
RocketDock.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"=" C:\WINDOWS\system32\guard32.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
WgaLogon.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
0aMCPClient - {F5DF91F9-15E9-416B-A7C3-7519B11ECBFC}
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=
:\WINDOWS\system32\srrstr.dll
cli
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro35]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro35.sys]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=128
"NoActiveDesktop"=0
"NoDriveAutoRun"=128
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe"="C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe:*:Enabled:Nero Home"
"C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe"="C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe:*:Enabled:Nero ShowTime Essentials"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Nero\Nero 7\Nero MediaHome\NeroMediaHome.exe"="C:\Program Files\Nero\Nero 7\Nero MediaHome\NeroMediaHome.exe:*:Enabled:Nero MediaHome Essentials"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\FlashGet\flashget.exe"="C:\Program Files\FlashGet\flashget.exe:*:Enabled:Flashget"
"C:\wamp\bin\apache\Apache2.2.11\bin\httpd.exe"="C:\wamp\bin\apache\Apache2.2.11\bin\httpd.exe:*:Enabled:Apache HTTP Server"
"C:\Program Files\Shareaza Pro\Shareaza Pro.exe"="C:\Program Files\Shareaza Pro\Shareaza Pro.exe:*:Disabled:Shareaza Pro"
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe"="C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh"
"C:\WINDOWS\pchealth\helpctr\binaries\helpctr.exe"="C:\WINDOWS\pchealth\helpctr\binaries\helpctr.exe:*:Enabled:Assistance à distance - Windows Messenger et voix"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:ipsec"
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
"C:\Program Files\wLite\wLite.exe"="C:\Program Files\wLite\wLite.exe:*:Enabled:webcamXP"
"C:\Program Files\wLite\wService.exe"="C:\Program Files\wLite\wService.exe:*:Enabled:webcamXP Service"
"H:\vnfnh.pif"="H:\vnfnh.pif:*:Enabled:ipsec"
"C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe"="C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe:*:Enabled:ipsec"
"C:\Program Files\DAP\DAP.exe"="C:\Program Files\DAP\DAP.EXE:*:Enabled:ipsec"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Disabled:Crawler Spyware Terminator"
"C:\Documents and Settings\motec\Mes documents\M.I\docs\Logiciels\Navigation\IE8.exe"="C:\Documents and Settings\motec\Mes documents\M.I\docs\Logiciels\Navigation\IE8.exe:*:Enabled:ipsec"
"C:\WINDOWS\Explorer.EXE"="C:\WINDOWS\Explorer.EXE:*:Enabled:ipsec"
"C:\Program Files\Corel\Corel VideoStudio 12\uvPL.exe"="C:\Program Files\Corel\Corel VideoStudio 12\uvPL.exe:*:Enabled:ipsec"
"C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe:*:Enabled:ipsec"
"C:\WINDOWS\system32\userinit.exe"="C:\WINDOWS\system32\userinit.exe:*:Enabled:ipsec"
"C:\WINDOWS\system32\VTTimer.exe"="C:\WINDOWS\system32\VTTimer.exe:*:Enabled:ipsec"
"C:\WINDOWS\system32\wuauclt.exe"="C:\WINDOWS\system32\wuauclt.exe:*:Enabled:ipsec"
"C:\Program Files\Google\Update\GoogleUpdate.exe"="C:\Program Files\Google\Update\GoogleUpdate.exe:*:Enabled:ipsec"
"C:\Program Files\Internet Explorer\IEXPLORE.EXE"="C:\Program Files\Internet Explorer\IEXPLORE.EXE:*:Enabled:ipsec"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:ipsec"
"C:\Program Files\Microsoft Office\Office12\WINWORD.EXE"="C:\Program Files\Microsoft Office\Office12\WINWORD.EXE:*:Enabled:ipsec"
"C:\Program Files\Shareaza\Shareaza.exe"="C:\Program Files\Shareaza\Shareaza.exe:*:Enabled:Shareaza"
"C:\Program Files\Hitman Pro 3.5\HitmanPro35.exe"="C:\Program Files\Hitman Pro 3.5\HitmanPro35.exe:*:Enabled:ipsec"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{177c07de-3f95-11de-ad4d-00730442e694}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL explorer.exe
shell\Explore\command - H:\explorer.exe
shell\Open\command - H:\explorer.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7ad83c03-e17f-11de-afcb-00730442e694}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8f2c6ec3-60a0-11de-adc4-00730442e694}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL explorer.exe
shell\Explore\command - J:\explorer.exe
shell\Open\command - J:\explorer.exe
======List of files/folders created in the last 1 months======
2009-12-12 13:38:09 ----A---- C:\WINDOWS\system32\bootdelete.exe
2009-12-11 23:14:59 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-11 23:14:54 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2009-12-11 23:14:49 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-11 23:14:28 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-11 23:14:24 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-11 23:14:17 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2009-12-11 21:56:52 ----D---- C:\Documents and Settings\All Users\Application Data\Comodo
2009-12-11 21:56:49 ----A---- C:\WINDOWS\system32\guard32.dll
2009-12-10 18:35:17 ----D---- C:\Documents and Settings\All Users\Application Data\Hitman Pro
2009-12-10 18:35:16 ----D---- C:\Program Files\Hitman Pro 3.5
2009-12-09 19:40:53 ----D---- C:\Program Files\Shareaza
2009-12-09 19:40:53 ----D---- C:\Documents and Settings\motec\Application Data\Shareaza
2009-12-08 21:22:13 ----D---- C:\Program Files\ETAJV PC
2009-12-08 20:53:04 ----A---- C:\WINDOWS\setuplog.txt
2009-12-08 20:02:27 ----D---- C:\Program Files\Support Tools
2009-12-07 21:11:26 ----D---- C:\Program Files\ToniArts
2009-12-05 22:40:19 ----A---- C:\~GLHTTP1.TMP
2009-12-03 18:12:17 ----D---- C:\Documents and Settings\All Users\Application Data\InterVideo
2009-12-03 18:12:14 ----A---- C:\WINDOWS\system32\IVIresizeW7.dll
2009-12-03 18:12:14 ----A---- C:\WINDOWS\system32\IVIresizePX.dll
2009-12-03 18:12:14 ----A---- C:\WINDOWS\system32\IVIresizeP6.dll
2009-12-03 18:12:14 ----A---- C:\WINDOWS\system32\IVIresizeM6.dll
2009-12-03 18:12:14 ----A---- C:\WINDOWS\system32\IVIresizeA6.dll
2009-12-03 18:12:14 ----A---- C:\WINDOWS\system32\IVIresize.dll
2009-12-03 18:11:02 ----D---- C:\Program Files\Fichiers communs\Ulead Systems
2009-12-01 18:20:30 ----D---- C:\Program Files\NaturalSoft
2009-12-01 18:03:29 ----D---- C:\Program Files\ScanSoft
2009-12-01 17:30:52 ----D---- C:\Program Files\NCT
2009-12-01 17:30:52 ----D---- C:\Program Files\Common Files
2009-12-01 17:30:45 ----D---- C:\Program Files\Text to Speech Maker
2009-12-01 17:26:59 ----D---- C:\Program Files\Fichiers communs\L&H
2009-11-30 16:18:12 ----A---- C:\WINDOWS\system32\pncrt.dll
2009-11-26 20:56:35 ----D---- C:\Program Files\VDOWNLOADER
2009-11-26 13:52:44 ----HDC---- C:\WINDOWS\$NtUninstallKB976098-v2$
2009-11-26 13:52:42 ----A---- C:\WINDOWS\imsins.BAK
2009-11-26 13:52:38 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2009-11-25 20:45:22 ----A---- C:\WINDOWS\cfplogvw.INI
2009-11-23 21:39:37 ----D---- C:\c7525e3ac2b8c6ade0d762bc806b38f0
2009-11-21 20:50:26 ----A---- C:\WINDOWS\TUTORI~1.INI
2009-11-21 20:23:43 ----D---- C:\Documents and Settings\All Users\Application Data\InstallShield
2009-11-21 20:23:05 ----D---- C:\Documents and Settings\motec\Application Data\Nuance
2009-11-21 20:18:54 ----D---- C:\Documents and Settings\All Users\Application Data\Nuance
2009-11-21 20:18:47 ----D---- C:\WINDOWS\speech
2009-11-18 13:24:47 ----D---- C:\Documents and Settings\motec\Application Data\vlc
2009-11-17 16:12:21 ----D---- C:\Program Files\nCube
2009-11-16 20:44:36 ----D---- C:\Program Files\Fichiers communs\Real
2009-11-16 20:44:33 ----D---- C:\Program Files\Real
2009-11-16 18:42:13 ----D---- C:\Documents and Settings\motec\Application Data\Ulead Systems
2009-11-16 18:39:51 ----D---- C:\Program Files\Windows Media Components
2009-11-16 18:38:08 ----D---- C:\Documents and Settings\All Users\Application Data\Ulead Systems
2009-11-16 18:36:30 ----D---- C:\Program Files\Corel
2009-11-16 13:55:25 ----SHD---- C:\Documents and Settings\motec\Application Data\.#
2009-11-16 13:24:58 ----D---- C:\Program Files\NOS
2009-11-15 20:01:11 ----D---- C:\Documents and Settings\motec\Application Data\AVCWare Studio
2009-11-13 14:45:49 ----D---- C:\Program Files\Microsoft Visual Studio
2009-11-13 14:45:49 ----D---- C:\Program Files\Fichiers communs\DESIGNER
2009-11-13 13:10:51 ----D---- C:\Program Files\Audacity 1.3 Beta (Unicode)
2009-11-13 12:41:16 ----A---- C:\WINDOWS\system32\freecell.exe
2009-11-13 12:40:24 ----A---- C:\WINDOWS\system32\sol.exe
2009-11-13 12:40:21 ----A---- C:\WINDOWS\system32\spider.exe
2009-11-13 12:38:45 ----A---- C:\WINDOWS\system32\mshtmled(2).dll
2009-11-13 12:38:41 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-11-13 12:07:26 ----HDC---- C:\WINDOWS\ie8
======List of files/folders modified in the last 1 months======
2009-12-12 17:19:06 ----D---- C:\Program Files\Trend Micro
2009-12-12 17:14:25 ----D---- C:\WINDOWS\Prefetch
2009-12-12 17:11:33 ----D---- C:\WINDOWS\Temp
2009-12-12 17:10:41 ----D---- C:\WINDOWS\system32\CatRoot2
2009-12-12 17:10:32 ----HD---- C:\WINDOWS\system32\drivers
2009-12-12 17:10:00 ----D---- C:\WINDOWS\system32
2009-12-12 15:33:54 ----D---- C:\NEOGEO 5
2009-12-12 14:45:27 ----D---- C:\Documents and Settings\motec\Application Data\LimeWire
2009-12-12 14:07:27 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-12-12 14:02:56 ----D---- C:\Documents and Settings\motec\Application Data\Spyware Terminator
2009-12-12 13:51:16 ----D---- C:\Program Files\DAP
2009-12-12 13:49:05 ----D---- C:\Program Files\LimeWire
2009-12-12 12:45:07 ----D---- C:\Program Files\Mozilla Firefox
2009-12-12 12:37:34 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-12-12 12:09:25 ----D---- C:\Program Files\Notepad++
2009-12-12 10:57:24 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-12 10:53:27 ----D---- C:\WINDOWS
2009-12-12 10:53:00 ----D---- C:\WINDOWS\AppPatch
2009-12-11 23:15:02 ----HD---- C:\WINDOWS\inf
2009-12-11 23:15:01 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-11 23:14:53 ----HD---- C:\WINDOWS\$hf_mig$
2009-12-11 23:14:42 ----D---- C:\Program Files\Internet Explorer
2009-12-11 23:11:36 ----D---- C:\WINDOWS\Debug
2009-12-11 23:11:00 ----D---- C:\Documents and Settings\motec\Application Data\Skype
2009-12-11 21:56:46 ----D---- C:\Program Files\COMODO
2009-12-11 21:12:31 ----D---- C:\Documents and Settings\motec\Application Data\skypePM
2009-12-11 19:40:48 ----D---- C:\Documents and Settings\motec\Application Data\dvdcss
2009-12-11 12:21:00 ----D---- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
2009-12-10 19:59:36 ----D---- C:\Program Files\Google
2009-12-10 19:59:36 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-12-10 19:59:35 ----D---- C:\Program Files\Apple Software Update
2009-12-10 18:51:44 ----D---- C:\Program Files\SF
2009-12-10 18:43:49 ----D---- C:\Program Files\Spyware Terminator
2009-12-10 18:42:33 ----D---- C:\Documents and Settings\motec\Application Data\Notepad++
2009-12-10 18:35:16 ----D---- C:\Program Files
2009-12-10 13:12:31 ----SHD---- C:\WINDOWS\Installer
2009-12-10 13:12:30 ----D---- C:\WINDOWS\WinSxS
2009-12-08 20:02:32 ----D---- C:\WINDOWS\Help
2009-12-07 21:52:14 ----A---- C:\WINDOWS\NeroDigital.ini
2009-12-07 21:11:22 ----HD---- C:\Program Files\InstallShield Installation Information
2009-12-07 21:05:30 ----A---- C:\WINDOWS\AviSplitter.INI
2009-12-07 20:21:01 ----D---- C:\Program Files\CDBurnerXP
2009-12-07 17:41:07 ----D---- C:\Program Files\Fichiers communs
2009-12-07 14:00:41 ----D---- C:\wamp
2009-12-07 13:58:34 ----D---- C:\Program Files\wLite
2009-12-07 13:48:42 ----D---- C:\WINDOWS\SxsCaPendDel
2009-12-07 13:43:34 ----D---- C:\Documents and Settings\All Users\Application Data\NOS
2009-12-07 13:41:50 ----D---- C:\Program Files\SYSTEM 2K+
2009-12-07 13:32:10 ----D---- C:\WINDOWS\system32\Restore
2009-12-06 20:18:33 ----D---- C:\Documents and Settings\motec\Application Data\Audacity
2009-12-05 12:46:18 ----RASH---- C:\boot.ini
2009-12-05 12:46:18 ----A---- C:\WINDOWS\win.ini
2009-12-05 12:46:18 ----A---- C:\WINDOWS\SYSTEM.INI
2009-12-05 12:46:17 ----D---- C:\WINDOWS\pss
2009-12-04 19:46:36 ----D---- C:\Program Files\Core Design
2009-12-01 21:06:19 ----A---- C:\WINDOWS\system32\mrt.exe
2009-12-01 18:24:09 ----SD---- C:\Documents and Settings\motec\Application Data\Microsoft
2009-12-01 14:51:11 ----RSD---- C:\WINDOWS\Fonts
2009-12-01 10:14:04 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-12-01 10:13:54 ----RSD---- C:\WINDOWS\assembly
2009-12-01 10:10:51 ----D---- C:\Program Files\Microsoft Works
2009-12-01 10:07:24 ----D---- C:\Program Files\Fichiers communs\System
2009-11-22 14:59:05 ----SHD---- C:\RECYCLER
2009-11-21 20:19:17 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-11-21 20:19:16 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-11-17 20:26:03 ----D---- C:\WINDOWS\system32\usmt
2009-11-17 20:26:03 ----D---- C:\Program Files\Outlook Express
2009-11-17 20:26:03 ----D---- C:\Program Files\Movie Maker
2009-11-17 11:29:05 ----D---- C:\Documents and Settings\motec\Application Data\Real
2009-11-17 11:23:52 ----D---- C:\Program Files\Filzip
2009-11-17 11:22:09 ----A---- C:\WINDOWS\Filzip.ini
2009-11-16 20:53:20 ----D---- C:\Documents and Settings\All Users\Application Data\Real
2009-11-16 20:44:40 ----A---- C:\WINDOWS\system32\msvcr71.dll
2009-11-16 20:44:40 ----A---- C:\WINDOWS\system32\msvcp71.dll
2009-11-16 09:40:55 ----D---- C:\Program Files\AVS4YOU
2009-11-16 08:13:33 ----D---- C:\Program Files\Fichiers communs\AVSMedia
2009-11-14 22:42:30 ----D---- C:\WINDOWS\system32\CatRoot
2009-11-14 22:42:27 ----D---- C:\WINDOWS\ie8updates
2009-11-13 14:46:04 ----D---- C:\Program Files\MSBuild
2009-11-13 14:45:40 ----D---- C:\WINDOWS\SHELLNEW
2009-11-13 12:08:11 ----HD---- C:\WINDOWS\msdownld.tmp
2009-11-13 12:07:26 ----D---- C:\WINDOWS\system32\fr-fr
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2009-12-11 132296]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2009-12-11 25160]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-04 40320]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R3 adiusbae;USB ADSL LAN Adapter; C:\WINDOWS\system32\DRIVERS\adiusbae.sys [2003-12-01 117785]
R3 asc3360pr;asc3360pr; \??\C:\WINDOWS\system32\drivers\nnjmnp.sys []
R3 FETND5BV;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys [2006-03-15 43008]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hitmanpro35;Hitman Pro 3.5 Support Driver; \??\C:\WINDOWS\system32\drivers\hitmanpro35.sys []
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2009-11-09 47360]
R3 S3GIGP;S3GIGP; C:\WINDOWS\system32\DRIVERS\S3gIGPm.sys [2007-07-11 714240]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
R3 usbvideo;Périphérique vidéo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2004-08-03 78464]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2008-01-02 215936]
S1 ASPI32;ASPI32; C:\WINDOWS\system32\drivers\ASPI32.sys []
S2 ADILOADER;General Purpose USB Driver (adildr.sys); C:\WINDOWS\System32\Drivers\adildr.sys [2003-07-17 46167]
S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2006-06-27 3972672]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 FETNDIS;Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet; C:\WINDOWS\system32\DRIVERS\fetnd5.sys []
S3 HdAudAddService;VIA High Definition Audio Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2008-01-02 215936]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-12-21 4405248]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2009-09-28 7168]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 viagfx;viagfx; C:\WINDOWS\system32\DRIVERS\vtmini.sys [2005-12-27 247040]
S3 vm331avs;VC0334 USB2.0 Digital Camera; C:\WINDOWS\System32\Drivers\vm331avs.sys [2008-05-06 970624]
S3 vncdrv;vncdrv; C:\WINDOWS\system32\DRIVERS\vncdrv.sys [2007-05-22 12104]
S3 WsAudioDevice_383;WsAudioDevice_383; C:\WINDOWS\system32\drivers\WsAudioDevice_383.sys [2008-11-19 16640]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-02 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-03-26 132424]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2009-12-11 723632]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-11-07 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe [2009-07-20 935208]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2009-09-06 71096]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2009-11-20 488960]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe [2008-06-09 53392]
R2 Uvnc_service;Uvnc_service; C:\Program Files\UltraVNC Addons\uvnc_service.exe [2007-06-04 63296]
S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-06-24 155716]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 getPlusHelper;getPlus(R) Installer; C:\WINDOWS\System32\svchost.exe [2004-08-04 14336]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 987648]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336]
S4 NetTcpPortSharing;Service de partage de ports Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 TipCtrl;TipCtrl; C:\Program Files\uTIPu\TipCtrl.exe []
-----------------EOF-----------------
Merci de m'aider
--
C'est ça VIVE LE XHTML / CSS
Configuration: Windows XP Internet Explorer 7.0
195 réponses
Résumé de la discussion
Ralentissement du système et message d'erreur 'exception processing message c0000013', accompagnés de détections antivirus et d'infections présumées, alors que des scans détaillent les processus, services et entrées de registre à dépouiller. Des solutions essentielles évoquées incluent la suppression des éléments de démarrage suspects, la vérification des extensions malveillantes et l'emploi d'outils dédiés comme Hitman Pro et Malwarebytes pour nettoyer les infections. En parallèle, il faut analyser les démarrages et les services (Run keys, tâches planifiées), repérer les DLL suspectes comme guard32.dll et vérifier les paramètres réseau et les pages de démarrage. D'autres précautions soulignent d'effectuer le nettoyage en mode sans échec, d'éviter la suppression irréversible de fichiers critiques et de prévoir une réinstallation propre si les infections persistent.
-
Contributeur sécuritéslt
sa veut dire que tu as un fichier endommagé et/ou infecté
met le CD de windows, sachant que cela ne sert a rien si on te desinfecte pas....
FORMATE tu as + de place sur ton DD, tu repartira sur de bonne bases etc... -
Bonjour
J'ai executer la commande sfc/scannow (je n'ai pas encore formaté) alors celle ci me demande le CD windows ... peut etre que c'est parce que j'ai mit nod32 en version d'evaluation
erci de me dire si c'est un bon signe -
Pas grave en tout cas merci pour m'avoir proposé l'aide
-
Oui oui, formate. Au moins tu repartiras avec des bases propres et un OS qui ressemble un peu moins à du gruyère.
Désolé mais je n'ai pas pu repasser avant. -
Bonjour
:/ je formate dit lui de ne pas se casser trop la tete
Merci encore pour m'avoir aidé -
Contributeur sécuritésalut
"je crois que je vais formater tout simplement "
pour ma part je n'arrive pas a l'eradiquer, jdois louper un truc, donc
atta DllD, il a dit qu'il allait repasser ou si t'est pressé formate :-/ -
Bonjour
:/ je crois que je vais formater tout simplement
Je vous donne un rapport RSIT si vous voulez bien me dire quand est ce qu'il ne sera plus utile
https://www.cjoint.com/?bDqcCzGSZy
Merci -
Bonjour,
On peut me donner un signe de vie ?? :/
Merci -
Contributeur sécuritére
jsais pas a quel moment on peut dire appartenir a la famille virut mais je dirai que oui.
j'ai eu un echantillon (file par jalobs) de ce fichier en question
et ben quand sa ce lance c'est pas jolie jolie, tout est infectés etc...apparament on en est pas la, mais il a deja ete executer en autorun sur le support H, donc voila.
c'est la 1er qui vient sous cette forme.
des fois le pirate qui controle a reussi a faire une maj vers la derniere version c'est un peu comme windows pour eviter les failles de leur systeme ^^
allez bonne chance DllD, toutes façon jsuis pas loin
@+ -
Aucun problème ^^, de toute façon tu essai de m'aider
Merci -
Ha ok, mais cette variante de Mazebat est considérée comme appartenant à Virut ?
Je veux bien assez de trouver une solution mais avant faut que lise le sujet plus en détail. Et y a pas mal de lecture ^^
shareaza15, je regarde et te dis ce que j'en pense. Mais peut être que demain. Là j'ai des trucs à faire.
Mais je te dis prochainement.
+ -
Contributeur sécuritésalut DllD
y'en a eu dans le sujet et en revoila encore (variante mazebat) dans le dernier log USB fix
Supprimé ! H:\zPharaoh.exe
cette ligne revient sans cesse :
Non supprimé ! F:\Recycler\S-1-5-21-842925246-2025429265-682008880-1013
d'ailleurs el desaparecido voulait que jlui fasse un dirlook de cette ligne...
si tu as une idée DllD avec plaisir, moi je vois pas du tout d'ou sa revient toujours... -
il y a un espoir?!
-
afin de préserver quelque documents je compte les graver dans des DVD mais je craint graver cette merde de viruT, alors tu as une solution ou un filtre??
Voila un log RSIT https://www.cjoint.com/?bAtGqxrOma
merci -
Salut vous deux,
plopus, tu le vois où Virut ? -
Contributeur sécurité"combien reste il de vie pour le PC avant qu'il ne soit plus fonctionnel ?? "
+ tu va t'en servir plus vite il va bug, jpeux pas te dire exactement quand
poste un RSIT pour info mais on se relance pas dans une desinfection -
Ca alors !!!
serait ce a cause de mes delais :'(
Bon, hhh de toute facon, puisque c'est comme ca, je te remercie de m'avoir aidé
Mais j'ai une petite question, combien reste il de vie pour le PC avant qu'il ne soit plus fonctionnel ??
Merci -
Contributeur sécuritémalheureusement non !!
-
O_O, c'est une blague ?????????????
-
Contributeur sécuritésalut
laisse tomber, ViruT est de retour
on peut plus rien faire, ta plus qu'a formater desolé :(
sa va sans cesse revenir et de pire en pire
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
Suivant
