Probleme pointeur qui se fige lorsque je suis sur le net

cricri001 · le 29 Déc 2010 03:16

Bonjour,

J ai un soucis avec ma souris.
Ma souris fonctionne tres bien jusqu a ce que je me connecte sur le net.
Des que je me connecte sur le net, le pointeur se fige, et les clics droit et gauche sont impossibles.
J ai une souris filaire USB2.
Mon clavier fonctionne bien. Ma souris refuse de fonctionner plus de quelques secondes si je suis connecte sur le net (firefox et internet explorer = meme probleme). La souris refonctionne quelques secondes seulement lorsque je la change de port usb (mais uniquement une seule fois--> si je rechange le port, elle reste figee).Je pense qu un virus est la cause de cela car lorsque je redemarre le pc, tout redevient normal.

J espere que quelqu un prendra la peine de m aider.

Cordialement,

cricri

PS: Je n ai pas trop de place disponible sur le disque dur...quelques dizaines de Mo. :s

Del-crosseur · le 29 Déc 2010 03:41

Hello , on va vérifier cela ...

* Téléchargez
>>>OTL<<<
* Faites un double-clic sur l'icône d'OTL pour le lancer.
* Assurez vous d'avoir fermé toutes les applications en court de fonctionnement.
* Quand la fenêtre d'OTL apparaît, cochez les cases situées devant "Tous les utilisateurs", "Recherche LOP" et "Recherche Purity".
* Faites un copier/coller du contenu de cette citation dans la partie inférieure d'OTL "Personnalisation"

NetSvcs
%systemroot%\system32\drivers\*.sys /lockedfiles
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
/md5start
ahcix86s.sys
ahcix86.sys
AGP440.sys
atapi.sys
Changer.sys
cdrom.sys
cngaudit.dll
disk.sys
explorer.exe
eventlog.dll
eNetHook.dll
iastorv.sys
KR10N.sys
IdeChnDr.sys
logevent.dll
userinit.exe
winlogon.exe
wininit.exe
tcpip.sys
Sfloppy.sys
netlogon.dll
nvstor.sys
nvstor32.sys
nvrd32.sys
nvata.sys
nvgts.sys
ndis.sys
nvatabus.sys
usbscan.sys
usbprint.sys
tdtcp.sys
tdpipe.sys
swmidi.sys
splitter.sys
rdpwd.sys
RASACD.SYS
scecli.dll
viasraid.sys
vaxscsi.sys
viamraid.sys
ViPrt.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles

Cliquez sur l'icône "Analyse" (en haut à gauche) .
* Laissez le scan aller à son terme sans te servir du PC.
* A la fin du scan un ou deux rapports vont s'ouvrir "OTL.Txt" et "Extras.Txt"(qui sera réduit dans la barre des taches).
* Fermez ces deux rapports et la fenêtre de commande d'OTL.
* Postez le Rapport Obtenu dans le Sujet Approprié

Bonne nuit

cricri001 · le 29 Déc 2010 03:58

Merci pour la rapidite.
Bouge pas, je repasse de suite, je fais ce que tu as dit.
Je redemarre le pc pour faire les manip (la souris marche jusqu a ce que je me connecte.) Avec le tab...je peux pas faire tout ce que tu demande avec ton fichier --> je peux pas selectionner le recherche lop et purity sans souris

A tout de suite et je collerai les dossier demande.

Del-crosseur · le 29 Déc 2010 04:13

Pas de soucis

PS:: je suis veilleur de nuit ... je rigole .... :lol:

cricri001 · le 29 Déc 2010 04:40

Me revoila....
Bon alors j ai une bonne et une mauvaise nouvelle.

On va commencer par la meilleure :
Ma souris refonctionne depuis le scan et le redemarrage.
(truc bizarre : Mes onglets pour la restauration des onglets sont les memes qu hier...comme si j avais pas ete sur firefox ce jour...).

La mauvaise nouvelle (pas si mauvaise) :
Suite au scan, j ai bien eu une fenetre notepad qui s est ouverte avec une autre petite fenetre avec un triangle jaune avec un point d exclamation dedans (j ai fait un imprime ecran, si tu veux le voir :roll:

) :

Code: Tout sélectionner: The filename, directory name, or volume label syntax is incorrect.

En esperant que ca dure...
J attend les directives...si tu penses que c est necessaire.

cricri001 · le 29 Déc 2010 04:41

Fausse bonne nouvelle.
Apres avoir envoyer le message precedent, ma souris rebug :(

Del-crosseur · le 29 Déc 2010 04:57

Hum étrange ... :s

On va faire autrement ...

Télécharge ZHPDiag par Nicolas Coolman et sauvegarde-le sur le Bureau.

* Double-clique sur ZHPDiag.exe.
* clique sur le bouton Lancer le diagnostic
* Lorsque l'analyse sera terminée, un fichier au format texte s'affiche dans la zone résultat du bas.
* Clique sur le bouton Copier dans le presse papier
* Colle le résultat de l'analyse dans ta réponse en faisant un copier/coller.

-Si le rapport est trop long tu peut l'heberger >>>ici<<<

@ ++

Bonne nuit

cricri001 · le 29 Déc 2010 05:49

Re Bonjour

Code: Tout sélectionner: Rapport de ZHPDiag v1.27.1462 par Nicolas Coolman, Update du 27/12/2010 Run by Christophe at 29/12/2010 11:32:35 Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html Contact : nicolascoolman@yahoo.fr ---\\ Web Browser MSIE: Internet Explorer v8.0.6001.18702 MFIE: Mozilla Firefox v3.6.13 (fr) (Defaut) ---\\ System Information Windows XP Professional Service Pack 2 (Build 2600) Processor: x86 Family 15 Model 2 Stepping 4, GenuineIntel Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 511 MB (34% free) System Restore: Activ้ (Enable) System drive C: has 0 GB (1%) free of 18 GB ---\\ Logged in mode Computer Name: HOME-D835667A1B User Name: Christophe All Users Names: SUPPORT_388945a0, HelpAssistant, Guest, Christophe, ASPNET, Administrator, Admin, Unselected Option: O1,O45,O61,O62,O65,O66,O82 Logged in as Administrator ---\\ DOS/Devices A:\ Floppy drive, Flash card reader, USB Key (Not Inserted) C:\ Hard drive, Flash drive, Thumb drive (Free 0 Go of 18 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 4 Go of 20 Go) E:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 20 Go) F:\ CD-ROM drive (Not Inserted) G:\ CD-ROM drive (Not Inserted) H:\ CD-ROM drive (Not Inserted) I:\ CD-ROM drive (Not Inserted) J:\ CD-ROM drive (Not Inserted) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK ---\\ Search Generic System Files [MD5.42D32722B805D7DF42D30487A0BCBD78] - (.Microsoft Corporation - Windows Explorer.) (.30/07/2007 09:54:51.) -- C:\Windows\Explorer.exe [1033216] [MD5.01C3346C241652F43AED8E2149881BFE] - (.Microsoft Corporation - Windows NT Logon Application.) (.30/07/2007 09:54:51.) -- C:\Windows\System32\Winlogon.exe [502272] [MD5.CDFE4411A69C224BD1D11B2DA92DAC51] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.30/07/2007 09:54:51.) -- C:\Windows\System32\drivers\atapi.sys [95360] [MD5.7179AC3F4258AEC9627590A842FDA1D6] - (.Microsoft Corporation - NT File System Driver.) (.30/07/2007 09:54:51.) -- C:\Windows\System32\drivers\ntfs.sys [574976] ---\\ Running Processes [MD5.7207DB389CEAD101251883511A676F91] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [135336] [MD5.8942C0BE637B7EBFBA304D48665B516E] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [267944] [MD5.CDE000884FD7BAF0C1FDFE029B0891DE] - (.Avira GmbH - AntiVir shadow copy service.) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe [76968] [MD5.9AE07549A0D691A103FAF8946554BDB7] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe [153376] [MD5.FF23862146A682FCC3DBAA002E22F958] - (.Logitech Inc. - Logitech LVPrcSrv Module..) -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [150040] [MD5.11F714F85530A2BD134074DC30E99FCA] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [322120] [MD5.56C92289535834AA26144B4368932DCB] - (.Sunbelt Software, Inc. - Sunbelt Personal Firewall SbPFLnch.) -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [95528] [MD5.B3C9D712962DB83C280D0C4AAC8963A8] - (.Sunbelt Software, Inc. - Sunbelt Firewall Service.) -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [1365288] [MD5.4BE6B4D0DB1E5A8167066C9E2F4F2764] - (.Speedbit Ltd. - VideoAcceleratorEngine.) -- C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe [288368] [MD5.DD0042F0C3B606A6A8B92D49AFB18AD6] - (.Yahoo! Inc. - AutoUpater Service Module.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe [602392] [MD5.BA893C5AB87CF065F1E2CB2937D8FE57] - (.Speedbit Ltd. - VideoAcceleratorEngine.) -- C:\PROGRA~1\SPEEDB~1\VideoAcceleratorEngine.exe [124536] [MD5.3CAADDDA144B326B0111C07E0FEE56F3] - (.Sunbelt Software, Inc. - Sunbelt Firewall GUI.) -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe [1705256] [MD5.3FFE8752B77382C5050006C31781D05A] - (.Unknown owner - No comment.) -- C:\Program Files\Unlocker\UnlockerAssistant.exe [15872] [MD5.FD32127449AF0B96EBECA3CAAB74E423] - (.HP - No comment.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe [172032] [MD5.4FEA5B94C6A96860620A62E4A19BD07D] - (.Hewlett-Packard - hpwuSchd.) -- C:\Program Files\HP\HP Software Update\HPWuSchd.exe [49152] [MD5.F5F1A8CDD473D55F9BF6FE23F715B0FA] - (.Hewlett-Packard Company - HP Framework Component Manager Service.) -- C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [241664] [MD5.4022BC4ABCE309F433101911BE83C61C] - (.Unknown owner - No comment.) -- C:\Program Files\Logitech\QuickCam\Quickcam.exe [2656528] [MD5.9D5E8B45BD348DF0882C69EED0E83111] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [281768] [MD5.93DB1FF92B03D24738A71E6E4992DFD3] - (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe [248552] [MD5.38D198A2DD54A67120040566A38103BA] - (.Microsoft Corporation - GrooveMonitor Utility.) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016] [MD5.9B8BBF96B67046D2CBB39AD220CB267D] - (.BitTorrent, Inc. - ?Torrent.) -- C:\Program Files\uTorrent\uTorrent.exe [395640] [MD5.F34E7705751BB413283434697BF8E55D] - (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe [357696] [MD5.62BB79160F86CD962F312C68C6239BFD] - (.Microsoft Corporation - Windows Update.) -- C:\WINDOWS\system32\wuauclt.exe [53472] [MD5.E698235FE26505F2B0F4A60CBBE7A27A] - (.Unknown owner - No comment.) -- C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe [558864] [MD5.00E662B7A5F67DDB81AFF1BEC1573D7F] - (.Unknown owner - No comment.) -- C:\Program Files\Trackerx90\Anti Removable Disk Virus (ARDV) by Trackerx90\ardv32.exe [172099] [MD5.DA6B945E561B1D1DA67663BB45B4B868] - (.Hewlett-Packard Co. - HP Digital Imaging Monitor (CUE).) -- C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [237568] [MD5.D03EE270D6D1A47C06845F04A80A413D] - (.Yahoo! Inc. - Yahoo! Messenger Tray.) -- C:\PROGRA~1\Yahoo!\Messenger\ymsgr_tray.exe [79160] [MD5.388B8FBC36A8558587AFC90FB23A3B99] - (.Microsoft Corporation - Notepad.) -- C:\WINDOWS\notepad.exe [69120] [MD5.0E20A3213ED010FC4997D1EF48082ABC] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [912344] [MD5.035462D1D020DCDA02285EF5EDC91459] - (.Microsoft Corporation - Paint.) -- C:\WINDOWS\system32\mspaint.exe [343040] [MD5.BA9A09CF1B9503C363617F3748F6D791] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [16856] [MD5.DC1ECEA4AAE266094607F179D0F04706] - (.Nicolas Coolman - Nettoyeur de rapport ZHPDiag.) -- C:\ZHPFix\ZHPFix.exe [488960] [MD5.10A3DB2D6369AA2740F5796A08057BF9] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\ZHPDiag\ZHPDiag.exe [621568] ---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (P2,M0,M1,M2) P2 - FPN:Firefox Plugin Navigator . (.The OpenSSL Project, http://www.openssl.org - OpenSSL Shared Library.) -- C:\Program Files\Mozilla Firefox\Plugins\libdivx.dll P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins\npdeployJava1.dll P2 - FPN:Firefox Plugin Navigator . (.DivX,Inc. - DivX Web Player version 1.5.0.52.) -- C:\Program Files\Mozilla Firefox\Plugins\npdivx32.dll P2 - FPN:Firefox Plugin Navigator . (.DivX, Inc - npdivxplayerplugin.) -- C:\Program Files\Mozilla Firefox\Plugins\npDivxPlayerPlugin.dll P2 - FPN:Firefox Plugin Navigator . (.Foxit Software Company - Foxit Reader Plug-In For Firefox and Netscape.) -- C:\Program Files\Mozilla Firefox\Plugins\npFoxitReaderPlugin.dll P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins\npnul32.dll P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFF12.DLL P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.0.0.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll P2 - FPN:Firefox Plugin Navigator . (.The OpenSSL Project, http://www.openssl.org - OpenSSL Shared Library.) -- C:\Program Files\Mozilla Firefox\Plugins\ssldivx.dll P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Unknown owner - No comment.) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.9.615.) -- C:\WINDOWS\system32\Adobe\Director\np32dsw.dll P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.DivX,Inc. - DivX Web Player version 1.5.0.52.) -- C:\Program Files\DivX\DivX Web Player\npdivx32.dll P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.DivX, Inc - npdivxplayerplugin.) -- C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll P2 - FPN: [HKLM] [@fileplanet.com/fpdlm] - (.IGN Entertainment - DLM Netscape Plugin (2.3.10.115).) -- C:\Program Files\Download Manager\npfpdlm.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_22 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll P2 - FPN: [HKLM] [@ma-config.com/HardwareDetection] - (.Cybelsoft - Plugin NPAPI Ma-Config.com.) -- C:\Program Files\ma-config.com\nphardwaredetection.dll P2 - FPN: [HKLM] [@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6] - (.Yahoo! Inc. - Yahoo Application State Plugin version 1.0.0.7.) -- C:\Program Files\Yahoo!\Shared\npYState.dll P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8117.0416] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@videolan.org/vlc,version=1.1.5] - (.the VideoLAN Team - Version 1.1.5, copyright 1996-2010 The VideoLAN Team<br><a href="http:.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll M0 - MFSP: prefs.js [Christophe - wb1iaj2x.default] http://www.yahoo.fr/ M2 - MFEP: prefs.js [Christophe - wb1iaj2x.default\fr@dictionaries.addons.mozilla.org] [] Dictionnaire franรงais ยซRรฉforme 1990ยป v3.5 (.Olivier R..) M2 - MFEP: prefs.js [Christophe - wb1iaj2x.default\{3112ca9c-de6d-4884-a869-9855de68056c}] [] Google Toolbar for Firefox v7.1.20101113Wb1 (.Google Inc..) M2 - MFEP: prefs.js [Christophe - wb1iaj2x.default\{635abd67-4fe9-1b23-4f01-e679fa7484c1}] [yahoo.ytff] Yahoo! Toolbar v2.1.1.20091029021655 (.Yahoo!.) M2 - MFEP: prefs.js [Christophe - wb1iaj2x.default\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}] [] ImTranslator v3.3.5 (.Smart Link Corporation.) M2 - MFEP: prefs.js [Christophe - wb1iaj2x.default\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}] [dwhelper] DownloadHelper v4.8.1 (.Michel Gutierrez.) M2 - MFEP: prefs.js [Christophe - wb1iaj2x.default\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}] [adblockplus] Adblock Plus v1.3.2 (.Wladimir Palant.) ---\\ Internet Explorer Extensions, Start, Search (R3,R0,R1) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.yahoo.fr R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18904 (longhorn_ie8_gdr.100222-1700)) -- C:\WINDOWS\system32\ieframe.dll ---\\ Changed inifile Value, Mapped to Registry (F2) F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe, F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ---\\ Browser Helper Objects (O2) O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} . (.Yahoo! Inc. - Yahoo! Toolbar.) -- C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {389943B0-C3A2-4E69-82CB-8596A84CB3DC} Orphean Key O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} . (.Microsoft Corporation - Family Safety Browser Helper Object Library.) -- C:\Program Files\Windows Live\Family Safety\fssbho.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - GrooveShellExtensions Module.) -- C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} . (.Yahoo! Inc - Yahoo! Single Instance for Mail.) -- C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll ---\\ Internet Explorer toolbars (O3) O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Yahoo! Barre d'outils - {EF99BD32-C1FB-11D2-892F-0090271D4F88} . (.Yahoo! Inc. - Yahoo! Toolbar.) -- C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll ---\\ Auto loading programs from Registry and folders (O4) O4 - HKLM\..\Run: [IMJPMIG8.1] . (.Microsoft Corporation - Microsoft IME.) -- C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe O4 - HKLM\..\Run: [PHIME2002ASync] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe O4 - HKLM\..\Run: [PHIME2002A] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe O4 - HKLM\..\Run: [UnlockerAssistant] . (.Unknown owner - No comment.) -- C:\Program Files\Unlocker\UnlockerAssistant.exe O4 - HKLM\..\Run: [HPDJ Taskbar Utility] . (.HP - No comment.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd.) -- C:\Program Files\HP\HP Software Update\HPWuSchd.exe O4 - HKLM\..\Run: [HP Component Manager] . (.Hewlett-Packard Company - HP Framework Component Manager Service.) -- C:\Program Files\HP\hpcoretech\hpcmpmgr.exe O4 - HKLM\..\Run: [LogitechQuickCamRibbon] . (.Unknown owner - No comment.) -- C:\Program Files\Logitech\QuickCam\Quickcam.exe O4 - HKLM\..\Run: [fssui] . (.Microsoft Corporation - Windows Live Family Safety Filter.) -- C:\Program Files\Windows Live\Family Safety\fsui.exe O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe O4 - HKLM\..\Run: [GrooveMonitor] . (.Microsoft Corporation - GrooveMonitor Utility.) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent, Inc. - ?Torrent.) -- C:\Program Files\uTorrent\uTorrent.exe O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe O4 - HKCU\..\Run: [Messenger (Yahoo!)] . (.Yahoo! Inc. - Yahoo! Messenger.) -- C:\PROGRA~1\Yahoo!\Messenger\YahooMessenger.exe O4 - HKCU\..\Run: [igndlm.exe] . (.IGN Entertainment - Download Manager.) -- C:\Program Files\Download Manager\DLM.exe O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1151601.exeCLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729) -http:\\www.siamzone.com\gameonline\play-games.php?id=82 (.not file.) O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-21-796845957-1417001333-1177238915-1006\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe O4 - HKUS\S-1-5-21-796845957-1417001333-1177238915-1006\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-21-796845957-1417001333-1177238915-1006\..\Run: [uTorrent] . (.BitTorrent, Inc. - ?Torrent.) -- C:\Program Files\uTorrent\uTorrent.exe O4 - HKUS\S-1-5-21-796845957-1417001333-1177238915-1006\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe O4 - HKUS\S-1-5-21-796845957-1417001333-1177238915-1006\..\Run: [Messenger (Yahoo!)] . (.Yahoo! Inc. - Yahoo! Messenger.) -- C:\PROGRA~1\Yahoo!\Messenger\YahooMessenger.exe O4 - HKUS\S-1-5-21-796845957-1417001333-1177238915-1006\..\Run: [igndlm.exe] . (.IGN Entertainment - Download Manager.) -- C:\Program Files\Download Manager\DLM.exe O4 - HKUS\S-1-5-21-796845957-1417001333-1177238915-1006\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1151601.exeCLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729) -http:\\www.siamzone.com\gameonline\play-games.php?id=82 (.not file.) ---\\ Other User Links (O4) O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\CCleaner.lnk . (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\MBRCheck.lnk . (.Unknown owner.) -- C:\ZHPDiag\mbrcheck.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk . (.SUPERAntiSpyware.com.) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\VLC media player.lnk . (.Unknown owner.) -- C:\Program Files\VideoLAN\VLC\vlc.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\ZHPDiag.lnk . (.Nicolas Coolman.) -- C:\ZHPDiag\ZHPDiag.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\ZHPFix.lnk . (.Nicolas Coolman.) -- C:\ZHPDiag\ZHPFix.exe O4 - Global Startup: C:\Documents And Settings\Christophe\Desktop\film.lnk . (.Unknown owner.) -- E:\bureau christophe\telechargement\film O4 - Global Startup: C:\Documents And Settings\Christophe\Desktop\Game.lnk . (.Westwood Studios.) -- E:\CC\EA Games\Command & Conquer The First Decade\Command & Conquer(tm) Tiberian Sun(tm)\SUN\Game.exe O4 - Global Startup: C:\Documents And Settings\Christophe\Desktop\JDownloader.lnk . (.AppWork UG (haftungsbeschr?nkt).) -- C:\Program Files\JDownloader\JDownloader.exe O4 - Global Startup: C:\Documents And Settings\Christophe\Desktop\Mozilla Firefox.lnk . (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\firefox.exe O4 - Global Startup: C:\Documents And Settings\Christophe\Desktop\Paint.lnk . (.Microsoft Corporation.) -- C:\WINDOWS\system32\mspaint.exe ---\\ Extra items in the IE right-click menu (O8) O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe O8 - Extra context menu item: Recherche avec cherche.us - (.not file.) - C:\Documents and Settings\Christophe\scriptjava.html ---\\ Extra buttons on main IE button toolbar, or extra items in IE 'Tools' menu (O9) O9 - Extra button: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (.Unknown owner - No comment.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico O9 - Extra button: Skype add-on for Internet Explorer - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Unknown owner - No comment.) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Microsoft Windows Sockets 2.0 Service Provider.) -- C:\WINDOWS\system32\mswsock.dll ---\\ Site in Trusted Zone (O15) O15 - Trusted Zone: [HKCU\...\Domains] *.chat-land.org O15 - Trusted Zone: [HKCU\...\Domains\www] *.chat-land.org ---\\ ActiveX Objects (Downloaded Program Files) (O16) O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (CDownloadCtrl Object) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.10.115.cab O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab O16 - DPF: {A9F8D9EC-3D0A-4A60-BD82-FBD64BAD370D} (DDRevision Class) - http://h20264.www2.hp.com/ediags/dd/install/HPDriverDiagnosticsxp2k.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab ---\\ Lop.com/Domain Hijackers (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{211132BE-CA21-4E7F-92CB-FFD09D1A57FB}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{211132BE-CA21-4E7F-92CB-FFD09D1A57FB}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{211132BE-CA21-4E7F-92CB-FFD09D1A57FB}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ---\\ Extra protocols and protocol Hijackers (O18) O18 - Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} . (.Hewlett-Packard Company - HPCETIUI Protocol Handler Module.) -- C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll O18 - Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O18 - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL ---\\ AppInit_DLLs Registry value Autorun (O20) O20 - Winlogon Notify: !SASWinLogon . (.SUPERAntiSpyware.com - SUPERAntiSpyware WinLogon Processor.) -- C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\Windows\System32\crypt32.dll O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\Windows\System32\cryptnet.dll O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Offline Network Agent.) -- C:\Windows\System32\cscdll.dll O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\Windows\System32\wlnotify.dll O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\Windows\System32\wlnotify.dll O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - Secondary Logon Service Notification DLL.) -- C:\Windows\System32\sclgntfy.dll O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\Windows\System32\WlNotify.dll O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\Windows\System32\wlnotify.dll O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - Common DLL to receive Winlogon notification.) -- C:\Windows\System32\wlnotify.dll ---\\ ShellServiceObjectDelayLoad (O21) O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\wpdshserviceobj.dll O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Systray shell service object.) -- C:\WINDOWS\system32\stobject.dll ---\\ SharedTaskScheduler (O22) O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (.Microsoft Corporation - Shell Browser UI Library.) -- C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Shell Browser UI Library.) -- C:\WINDOWS\system32\browseui.dll ---\\ non Microsoft non disabled Windows XP/NT/2000 Services (O23) O23 - Service: (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: (LVPrcSrv) . (.Logitech Inc. - Logitech LVPrcSrv Module..) - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe O23 - Service: SbPF.Launcher (SbPF.Launcher) . (.Sunbelt Software, Inc. - Sunbelt Personal Firewall SbPFLnch.) - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe O23 - Service: (SPF4) . (.Sunbelt Software, Inc. - Sunbelt Firewall Service.) - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe O23 - Service: (VideoAcceleratorService) . (.Speedbit Ltd. - VideoAcceleratorEngine.) - C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe O23 - Service: (YahooAUService) . (.Yahoo! Inc. - AutoUpater Service Module.) - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe ---\\ Windows Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(.Unknown owner - No comment.) - (.not file.) ---\\ Task Planned Automatically(039) O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GlaryInitialize.job [MD5.38BB7FFCBD53051FA559FA362606BB74] [APT] [GlaryInitialize] (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\initialize.exe ---\\ Drivers launched at startup (O41) O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\WINDOWS\system32\drivers\afd.sys O41 - Driver: (asplg) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\System32\asplg.sys (.not file.) O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\Windows\System32\DRIVERS\avipbb.sys O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: (i8042prt) . (.Microsoft Corporation - i8042 Port Driver.) - C:\Windows\System32\DRIVERS\i8042prt.sys O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\Windows\System32\DRIVERS\imapi.sys O41 - Driver: (intelppm) . (.Microsoft Corporation - Processor Device Driver.) - C:\Windows\System32\DRIVERS\intelppm.sys O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\Windows\System32\DRIVERS\ipsec.sys O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Keyboard Class Driver.) - C:\Windows\System32\DRIVERS\kbdclass.sys O41 - Driver: (Mouclass) . (.Microsoft Corporation - Mouse Class Driver.) - C:\Windows\System32\DRIVERS\mouclass.sys O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\Windows\System32\DRIVERS\mrxsmb.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: (redbook) . (.Microsoft Corporation - Redbook Audio Filter Driver.) - C:\Windows\System32\DRIVERS\redbook.sys O41 - Driver: (SASDIFSV) . (.SUPERAdBlocker.com and SUPERAntiSpyware.com - SASDIFSV.SYS.) - C:\Program Files\SUPERAntiSpyware\SASDIFSV.sys O41 - Driver: (SASKUTIL) . (.SUPERAdBlocker.com and SUPERAntiSpyware.com - SASKUTIL.SYS.) - C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys O41 - Driver: (SbFw) . (.Sunbelt Software, Inc. - Sunbelt Personal Firewall driver.) - C:\Windows\System32\drivers\SbFw.sys O41 - Driver: (sbhips) . (.Sunbelt Software, Inc. - Sunbelt Personal Firewall Host Intrusion Pr.) - C:\WINDOWS\system32\drivers\sbhips.sys O41 - Driver: (Serial) . (.Microsoft Corporation - Serial Device Driver.) - C:\Windows\System32\DRIVERS\serial.sys O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\System32\DRIVERS\ssmdrv.sys O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\Windows\System32\DRIVERS\tcpip.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys O41 - Driver: Windows Socket 2.0 Non-IFS Service Provider Support Environment (WS2IFSL) . (.Microsoft Corporation - Winsock2 IFS Layer.) - C:\WINDOWS\system32\drivers\ws2ifsl.sys ---\\ Software installed (O42) O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}_ENTERPRISE_{A0353900-21A2-42CF-B973-883500A027F7} O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_ENTERPRISE_{A0353900-21A2-42CF-B973-883500A027F7} O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_ENTERPRISE_{A0353900-21A2-42CF-B973-883500A027F7} O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}_ENTERPRISE_{A0353900-21A2-42CF-B973-883500A027F7} O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}_ENTERPRISE_{A0353900-21A2-42CF-B973-883500A027F7} O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_ENTERPRISE_{A0353900-21A2-42CF-B973-883500A027F7} O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_ENTERPRISE_{5A2F65A4-808F-4A1E-973E-92E17824982D} O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9} O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{3EC77D26-799B-4CD8-914F-C1565E796173} O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{430971B1-C31E-45DA-81E0-72C095BAB72C} O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_ENTERPRISE_{B3F4DC34-7F60-4B7C-A79F-1C13012D99D4} O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{F7A31780-33C4-4E39-951A-5EC9B91D7BF1} O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}_ENTERPRISE_{A0353900-21A2-42CF-B973-883500A027F7} O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_ENTERPRISE_{EC50B538-CBE1-42E6-B7FE-87AA540AADFB} O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}_ENTERPRISE_{A0353900-21A2-42CF-B973-883500A027F7} O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) - (.Microsoft.) [HKLM] -- {90120000-00BA-040C-0000-0000000FF1CE}_ENTERPRISE_{A0353900-21A2-42CF-B973-883500A027F7} O42 - Logiciel: 7-Zip 4.45 beta - (.Microsoft Corporation.) [HKLM] -- 7-Zip O42 - Logiciel: ?Torrent - (.SpeedBit Ltd..) [HKLM] -- uTorrent O42 - Logiciel: ?Torrent - (.Trackerx90.) [HKCU] -- uTorrent O42 - Logiciel: ACDSee 9 Photo Manager - (.ACD Systems Ltd..) [HKLM] -- {B2D41883-3BFC-4BA0-A2F6-5A2C9836C238} O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723} O42 - Logiciel: Adobe Acrobat Reader 3.01 - (.Microsoft Corporation.) [HKLM] -- Adobe Acrobat Reader 3.01 O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Photoshop 7.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Photoshop 7.0 O42 - Logiciel: Adobe Reader X - Fran?ais - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA0000000001} O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player O42 - Logiciel: Alerte Rouge Windows 95 - (.Adobe Systems, Inc..) [HKLM] -- Alerte Rouge O42 - Logiciel: Anti Removable Disk Virus (ARDV) by Trackerx90 - (.Trackerx90.) [HKLM] -- {FB3BFBE2-8AF5-4C6B-8B00-ED87F1E7C6EC} O42 - Logiciel: Aspell French Dictionary-0.50-3 - (.GNU.) [HKLM] -- Aspell French Dictionary_is1 O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop O42 - Logiciel: C:\Program Files\Aspell - (.Trackerx90.) [HKLM] -- Aspell O42 - Logiciel: C:\Program Files\Aspell - (.Trackerx90.) [HKLM] -- Aspell-fr O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: CPL All-in-One - (.KelCorp.) [HKLM] -- CPLBonus O42 - Logiciel: Coffret de pilotes Logitech QuickCam - (.Microsoft Corporation.) [HKLM] -- lvdrivers_11.90 O42 - Logiciel: Configuration DivX - (.DivX, Inc. .) [HKLM] -- DivX Setup.divx.com O42 - Logiciel: ConvertHelper 2.2 - (.DownloadHelper.) [HKLM] -- {27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1 O42 - Logiciel: Critical Update for Windows Media Player 11 (KB959772) - (.Microsoft Corporation.) [HKLM] -- KB959772_WM11 O42 - Logiciel: DivX Codec - (.DivX, Inc..) [HKLM] -- {7B63B2922B174135AFC0E1377DD81EC2} O42 - Logiciel: DivX Converter - (.DivX, Inc..) [HKLM] -- {B13A7C41581B411290FBC0395694E2A9} O42 - Logiciel: DivX Player - (.DivX, Inc..) [HKLM] -- {8ADFC4160D694100B5B8A22DE9DCABD9} O42 - Logiciel: DivX Plus DirectShow Filters - (.DivX, Inc..) [HKLM] -- DivX Plus DirectShow Filters O42 - Logiciel: DivX Web Player - (.DivX,Inc..) [HKLM] -- {B7050CBDB2504B34BC2A9CA0A692CC29} O42 - Logiciel: Download Manager 2.3.10 - (.IGN Entertainment, Inc..) [HKLM] -- Download Manager O42 - Logiciel: EZ Plus 2009 - (.Startup Design & Network.) [HKLM] -- {209C6E15-E71E-4DF9-8662-EA0574DECA2C} O42 - Logiciel: EnglishToThai - (.SpeedBit Ltd..) [HKLM] -- ST6UNST #1 O42 - Logiciel: Foxit Creator - (.Foxit Corporation.) [HKLM] -- Foxit Creator O42 - Logiciel: Foxit Reader - (.Foxit Software Company.) [HKLM] -- Foxit Reader O42 - Logiciel: GNU Aspell 0.50-3 - (.GNU.) [HKLM] -- GNU Aspell_is1 O42 - Logiciel: GTK+ Runtime 2.14.7 rev a (remove only) - (.GNU.) [HKLM] -- GTK 2.0 O42 - Logiciel: Glary Utilities 2.15.0.728 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1 O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {DBEA1034-5882-4A88-8033-81C4EF0CFA29} O42 - Logiciel: Google Toolbar for Internet Explorer - (.Microsoft.) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} O42 - Logiciel: HN Photo Chiang Mai Screensaver - (.GNU.) [HKLM] -- HN Photo Chiang Mai Screensaver O42 - Logiciel: HP Driver Diagnostics - (.Hewlett-Packard.) [HKLM] -- {4CCC7F68-A437-4559-A840-F5E010934951} O42 - Logiciel: HP Image Zone 4.2 - (.HP.) [HKLM] -- HP Photo & Imaging O42 - Logiciel: HP PSC & OfficeJet 3.5 - (.HP.) [HKLM] -- {0FABD3D7-3036-4e78-B29D-58957ADB0A12} O42 - Logiciel: HP PSC & OfficeJet 4.2 - (.HP.) [HKLM] -- {A1062847-0846-427A-92A1-BB8251A91E91} O42 - Logiciel: HP Product Detection - (.Hewlett-Packard Company.) [HKLM] -- {CAE7D1D9-3794-4169-B4DD-964ADBC534EE} O42 - Logiciel: HP Software Update - (.Hewlett-Packard.) [HKLM] -- {34957B51-9676-41CE-9E52-44AE91B73F1C} O42 - Logiciel: High Definition Audio Driver Package - KB888111 - (.Microsoft Corporation.) [HKLM] -- KB888111WXPSP2 O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595 O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484 O42 - Logiciel: Hotfix for Windows Media Player 11 (KB939683) - (.Microsoft Corporation.) [HKLM] -- KB939683 O42 - Logiciel: Hotfix for Windows XP (KB952287) - (.Microsoft Corporation.) [HKLM] -- KB952287 O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5 O42 - Logiciel: Hotfix for Windows XP (KB954708) - (.Microsoft Corporation.) [HKLM] -- KB954708 O42 - Logiciel: Hotfix for Windows XP (KB961118) - (.Microsoft Corporation.) [HKLM] -- KB961118 O42 - Logiciel: Hotfix for Windows XP (KB970653-v3) - (.Microsoft Corporation.) [HKLM] -- KB970653-v3 O42 - Logiciel: Hotfix for Windows XP (KB976098-v2) - (.Microsoft Corporation.) [HKLM] -- KB976098-v2 O42 - Logiciel: Hotfix for Windows XP (KB979306) - (.Microsoft Corporation.) [HKLM] -- KB979306 O42 - Logiciel: JDownloader - (.AppWork UG (haftungsbeschrไnkt).) [HKLM] -- JDownloader O42 - Logiciel: Java(TM) 6 Update 2 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160020} O42 - Logiciel: Java(TM) 6 Update 22 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF} O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {8E5233E1-7495-44FB-8DEB-4BE906D59619} O42 - Logiciel: K-Lite Codec Pack 3.9.0 Full - (.Microsoft Corporation.) [HKLM] -- KLiteCodecPack_is1 O42 - Logiciel: Logitech QuickCam - (.Logitech Inc..) [HKLM] -- {937B232D-9776-471E-92BD-D424E514EF14} O42 - Logiciel: Logitech Updater - (.Logitech, Inc..) [HKLM] -- {53735ECE-E461-4FD0-B742-23A352436D3A} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: MSXML 6 Service Pack 2 (KB973686) - (.Microsoft Corporation.) [HKLM] -- {56EA8BC0-3751-4B93-BC9D-6651CC36E5AA} O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {7EA6E8DF-37B3-4533-B1A4-45E490C77537} O42 - Logiciel: Memories Disc Creator 2.0 - (.Memories Disc Creator 2.0.) [HKLM] -- {2E132061-C78A-48D4-A899-1D13B9D189FA} O42 - Logiciel: Messenger Plus! Live - (.Yuna Software.) [HKLM] -- Messenger Plus! Live O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM] -- {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Yuna Software.) [HKLM] -- Microsoft .NET Framework 1.1 (1033) O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB953297) - (.Microsoft Corporation.) [HKLM] -- M953297 O42 - Logiciel: Microsoft .NET Framework 2.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} O42 - Logiciel: Microsoft .NET Framework 3.0 Service Pack 2 - (.Microsoft Corporation.) [HKLM] -- {A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7} O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1 O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570} O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Enterprise 2007 - (.Microsoft Corporation.) [HKLM] -- ENTERPRISE O42 - Logiciel: Microsoft Office Enterprise 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0030-0000-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Groove MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00BA-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE} O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8} O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {4CBA3D4C-8F51-4D60-B27E-F6B641C571E7} O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5} O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB} O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c} O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989} O42 - Logiciel: Mozilla Firefox (3.6.13) - (.Mozilla.) [HKLM] -- Mozilla Firefox (3.6.13) O42 - Logiciel: Nero 6 Demo - (.Mozilla.) [HKLM] -- Nero - Burning Rom!UninstallKey O42 - Logiciel: Notepad++ - (.Mozilla.) [HKLM] -- Notepad++ O42 - Logiciel: OpenOffice.org 3.2 - (.OpenOffice.org.) [HKLM] -- {69B040CC-E9B1-4769-950E-87786C9E16AD} O42 - Logiciel: PFPortChecker 1.0.32 - (.Portforward.com.) [HKLM] -- PFPortChecker O42 - Logiciel: Phone Suite - (.Donin Chang.) [HKLM] -- {A2B0E08C-3B99-47AE-B3B1-E9BBD2BF4917} O42 - Logiciel: PhotoScape - (.Portforward.com.) [HKLM] -- PhotoScape O42 - Logiciel: PowerDVD - (.Microsoft Corporation.) [HKLM] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1} O42 - Logiciel: Prepwizard - GMAT Preparation Software - (.Prepwizard.com.) [HKLM] -- {D51DF25D-57AC-4129-9A6D-59863C9CD41C} O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: Recuva - (.Piriform.) [HKLM] -- Recuva O42 - Logiciel: SUPERAntiSpyware Free Edition - (.SUPERAntiSpyware.com.) [HKLM] -- {CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA} O42 - Logiciel: Satsuki Decoder Pack - (.Piriform.) [HKLM] -- Satsuki Decoder Pack O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906 O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB971961) - (.Microsoft Corporation.) [HKLM] -- KB971961-IE8 O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB972260) - (.Microsoft Corporation.) [HKLM] -- KB972260-IE8 O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB974455) - (.Microsoft Corporation.) [HKLM] -- KB974455-IE8 O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB976325) - (.Microsoft Corporation.) [HKLM] -- KB976325-IE8 O42 - Logiciel: Security Update for Windows Internet Explorer 8 (KB978207) - (.Microsoft Corporation.) [HKLM] -- KB978207-IE8 O42 - Logiciel: Security Update for Windows Media Player (KB952069) - (.Microsoft Corporation.) [HKLM] -- KB952069_WM9 O42 - Logiciel: Security Update for Windows Media Player (KB954155) - (.Microsoft Corporation.) [HKLM] -- KB954155_WM9 O42 - Logiciel: Security Update for Windows Media Player (KB968816) - (.Microsoft Corporation.) [HKLM] -- KB968816_WM9 O42 - Logiciel: Security Update for Windows Media Player (KB973540) - (.Microsoft Corporation.) [HKLM] -- KB973540_WM9L O42 - Logiciel: Security Update for Windows Media Player 11 (KB936782) - (.Microsoft Corporation.) [HKLM] -- KB936782_WMP11 O42 - Logiciel: Security Update for Windows Media Player 11 (KB954154) - (.Microsoft Corporation.) [HKLM] -- KB954154_WM11 O42 - Logiciel: Security Update for Windows XP (KB923561) - (.Microsoft Corporation.) [HKLM] -- KB923561 O42 - Logiciel: Security Update for Windows XP (KB938464-v2) - (.Microsoft Corporation.) [HKLM] -- KB938464-v2 O42 - Logiciel: Security Update for Windows XP (KB941569) - (.Microsoft Corporation.) [HKLM] -- KB941569 O42 - Logiciel: Security Update for Windows XP (KB944338-v2) - (.Microsoft Corporation.) [HKLM] -- KB944338-v2 O42 - Logiciel: Security Update for Windows XP (KB946648) - (.Microsoft Corporation.) [HKLM] -- KB946648 O42 - Logiciel: Security Update for Windows XP (KB950760) - (.Microsoft Corporation.) [HKLM] -- KB950760 O42 - Logiciel: Security Update for Windows XP (KB950762) - (.Microsoft Corporation.) [HKLM] -- KB950762 O42 - Logiciel: Security Update for Windows XP (KB950974) - (.Microsoft Corporation.) [HKLM] -- KB950974 O42 - Logiciel: Security Update for Windows XP (KB951066) - (.Microsoft Corporation.) [HKLM] -- KB951066 O42 - Logiciel: Security Update for Windows XP (KB951376-v2) - (.Microsoft Corporation.) [HKLM] -- KB951376-v2 O42 - Logiciel: Security Update for Windows XP (KB951698) - (.Microsoft Corporation.) [HKLM] -- KB951698 O42 - Logiciel: Security Update for Windows XP (KB951748) - (.Microsoft Corporation.) [HKLM] -- KB951748 O42 - Logiciel: Security Update for Windows XP (KB952004) - (.Microsoft Corporation.) [HKLM] -- KB952004 O42 - Logiciel: Security Update for Windows XP (KB952954) - (.Microsoft Corporation.) [HKLM] -- KB952954 O42 - Logiciel: Security Update for Windows XP (KB954600) - (.Microsoft Corporation.) [HKLM] -- KB954600 O42 - Logiciel: Security Update for Windows XP (KB955069) - (.Microsoft Corporation.) [HKLM] -- KB955069 O42 - Logiciel: Security Update for Windows XP (KB956572) - (.Microsoft Corporation.) [HKLM] -- KB956572 O42 - Logiciel: Security Update for Windows XP (KB956744) - (.Microsoft Corporation.) [HKLM] -- KB956744 O42 - Logiciel: Security Update for Windows XP (KB956802) - (.Microsoft Corporation.) [HKLM] -- KB956802 O42 - Logiciel: Security Update for Windows XP (KB956803) - (.Microsoft Corporation.) [HKLM] -- KB956803 O42 - Logiciel: Security Update for Windows XP (KB956841) - (.Microsoft Corporation.) [HKLM] -- KB956841 O42 - Logiciel: Security Update for Windows XP (KB956844) - (.Microsoft Corporation.) [HKLM] -- KB956844 O42 - Logiciel: Security Update for Windows XP (KB957097) - (.Microsoft Corporation.) [HKLM] -- KB957097 O42 - Logiciel: Security Update for Windows XP (KB958215) - (.Microsoft Corporation.) [HKLM] -- KB958215 O42 - Logiciel: Security Update for Windows XP (KB958644) - (.Microsoft Corporation.) [HKLM] -- KB958644 O42 - Logiciel: Security Update for Windows XP (KB958687) - (.Microsoft Corporation.) [HKLM] -- KB958687 O42 - Logiciel: Security Update for Windows XP (KB958690) - (.Microsoft Corporation.) [HKLM] -- KB958690 O42 - Logiciel: Security Update for Windows XP (KB958869) - (.Microsoft Corporation.) [HKLM] -- KB958869 O42 - Logiciel: Security Update for Windows XP (KB959426) - (.Microsoft Corporation.) [HKLM] -- KB959426 O42 - Logiciel: Security Update for Windows XP (KB960225) - (.Microsoft Corporation.) [HKLM] -- KB960225 O42 - Logiciel: Security Update for Windows XP (KB960714) - (.Microsoft Corporation.) [HKLM] -- KB960714 O42 - Logiciel: Security Update for Windows XP (KB960715) - (.Microsoft Corporation.) [HKLM] -- KB960715 O42 - Logiciel: Security Update for Windows XP (KB960803) - (.Microsoft Corporation.) [HKLM] -- KB960803 O42 - Logiciel: Security Update for Windows XP (KB960859) - (.Microsoft Corporation.) [HKLM] -- KB960859 O42 - Logiciel: Security Update for Windows XP (KB961371) - (.Microsoft Corporation.) [HKLM] -- KB961371 O42 - Logiciel: Security Update for Windows XP (KB961373) - (.Microsoft Corporation.) [HKLM] -- KB961373 O42 - Logiciel: Security Update for Windows XP (KB961501) - (.Microsoft Corporation.) [HKLM] -- KB961501 O42 - Logiciel: Security Update for Windows XP (KB963027) - (.Microsoft Corporation.) [HKLM] -- KB963027 O42 - Logiciel: Security Update for Windows XP (KB968537) - (.Microsoft Corporation.) [HKLM] -- KB968537 O42 - Logiciel: Security Update for Windows XP (KB969059) - (.Microsoft Corporation.) [HKLM] -- KB969059 O42 - Logiciel: Security Update for Windows XP (KB969897) - (.Microsoft Corporation.) [HKLM] -- KB969897 O42 - Logiciel: Security Update for Windows XP (KB969898) - (.Microsoft Corporation.) [HKLM] -- KB969898 O42 - Logiciel: Security Update for Windows XP (KB969947) - (.Microsoft Corporation.) [HKLM] -- KB969947 O42 - Logiciel: Security Update for Windows XP (KB970238) - (.Microsoft Corporation.) [HKLM] -- KB970238 O42 - Logiciel: Security Update for Windows XP (KB970430) - (.Microsoft Corporation.) [HKLM] -- KB970430 O42 - Logiciel: Security Update for Windows XP (KB971032) - (.Microsoft Corporation.) [HKLM] -- KB971032 O42 - Logiciel: Security Update for Windows XP (KB971468) - (.Microsoft Corporation.) [HKLM] -- KB971468 O42 - Logiciel: Security Update for Windows XP (KB971486) - (.Microsoft Corporation.) [HKLM] -- KB971486 O42 - Logiciel: Security Update for Windows XP (KB971557) - (.Microsoft Corporation.) [HKLM] -- KB971557 O42 - Logiciel: Security Update for Windows XP (KB971633) - (.Microsoft Corporation.) [HKLM] -- KB971633 O42 - Logiciel: Security Update for Windows XP (KB971657) - (.Microsoft Corporation.) [HKLM] -- KB971657 O42 - Logiciel: Security Update for Windows XP (KB972260) - (.Microsoft Corporation.) [HKLM] -- KB972260 O42 - Logiciel: Security Update for Windows XP (KB972270) - (.Microsoft Corporation.) [HKLM] -- KB972270 O42 - Logiciel: Security Update for Windows XP (KB973346) - (.Microsoft Corporation.) [HKLM] -- KB973346 O42 - Logiciel: Security Update for Windows XP (KB973354) - (.Microsoft Corporation.) [HKLM] -- KB973354 O42 - Logiciel: Security Update for Windows XP (KB973507) - (.Microsoft Corporation.) [HKLM] -- KB973507 O42 - Logiciel: Security Update for Windows XP (KB973525) - (.Microsoft Corporation.) [HKLM] -- KB973525 O42 - Logiciel: Security Update for Windows XP (KB973869) - (.Microsoft Corporation.) [HKLM] -- KB973869 O42 - Logiciel: Security Update for Windows XP (KB973904) - (.Microsoft Corporation.) [HKLM] -- KB973904 O42 - Logiciel: Security Update for Windows XP (KB974112) - (.Microsoft Corporation.) [HKLM] -- KB974112 O42 - Logiciel: Security Update for Windows XP (KB974318) - (.Microsoft Corporation.) [HKLM] -- KB974318 O42 - Logiciel: Security Update for Windows XP (KB974392) - (.Microsoft Corporation.) [HKLM] -- KB974392 O42 - Logiciel: Security Update for Windows XP (KB974571) - (.Microsoft Corporation.) [HKLM] -- KB974571 O42 - Logiciel: Security Update for Windows XP (KB975025) - (.Microsoft Corporation.) [HKLM] -- KB975025 O42 - Logiciel: Security Update for Windows XP (KB975467) - (.Microsoft Corporation.) [HKLM] -- KB975467 O42 - Logiciel: Security Update for Windows XP (KB975560) - (.Microsoft Corporation.) [HKLM] -- KB975560 O42 - Logiciel: Security Update for Windows XP (KB975561) - (.Microsoft Corporation.) [HKLM] -- KB975561 O42 - Logiciel: Security Update for Windows XP (KB975713) - (.Microsoft Corporation.) [HKLM] -- KB975713 O42 - Logiciel: Security Update for Windows XP (KB977165-v2) - (.Microsoft Corporation.) [HKLM] -- KB977165-v2 O42 - Logiciel: Security Update for Windows XP (KB977914) - (.Microsoft Corporation.) [HKLM] -- KB977914 O42 - Logiciel: Security Update for Windows XP (KB978037) - (.Microsoft Corporation.) [HKLM] -- KB978037 O42 - Logiciel: Security Update for Windows XP (KB978251) - (.Microsoft Corporation.) [HKLM] -- KB978251 O42 - Logiciel: Security Update for Windows XP (KB978262) - (.Microsoft Corporation.) [HKLM] -- KB978262 O42 - Logiciel: Security Update for Windows XP (KB978706) - (.Microsoft Corporation.) [HKLM] -- KB978706 O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7} O42 - Logiciel: SiS 900 PCI Fast Ethernet Adapter Driver - (.Piriform.) [HKLM] -- SiSLan O42 - Logiciel: Skype Toolbars - (.Skype Technologies S.A..) [HKLM] -- {981029E0-7FC9-4CF3-AB39-6F133621921A} O42 - Logiciel: Skype? 4.2 - (.Skype Technologies S.A..) [HKLM] -- {D103C4BA-F905-437A-8049-DB24763BBE36} O42 - Logiciel: SpeedBit Video Accelerator - (.SpeedBit Ltd..) [HKLM] -- SpeedBit Video Accelerator O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1 O42 - Logiciel: Sunbelt Personal Firewall - (.Sunbelt Software.) [HKLM] -- {82B1150E-9B37-49FC-83EB-D52197D900D0} O42 - Logiciel: Talesrunner Launcher 1.0 - (.SpeedBit Ltd..) [HKLM] -- Talesrunner Launcher_is1 O42 - Logiciel: ThaiSoftware Dictionary - (.Skype Technologies S.A..) [HKLM] -- {D30240CC-F199-4A1D-A4D0-55A842A02488} O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707 O42 - Logiciel: Update for Windows Internet Explorer 8 (KB976662) - (.Microsoft Corporation.) [HKLM] -- KB976662-IE8 O42 - Logiciel: Update for Windows Internet Explorer 8 (KB976749) - (.Microsoft Corporation.) [HKLM] -- KB976749-IE8 O42 - Logiciel: Update for Windows Internet Explorer 8 (KB980182) - (.Microsoft Corporation.) [HKLM] -- KB980182-IE8 O42 - Logiciel: Update for Windows XP (KB955759) - (.Microsoft Corporation.) [HKLM] -- KB955759 O42 - Logiciel: Update for Windows XP (KB955839) - (.Microsoft Corporation.) [HKLM] -- KB955839 O42 - Logiciel: Update for Windows XP (KB961503) - (.Microsoft Corporation.) [HKLM] -- KB961503 O42 - Logiciel: Update for Windows XP (KB967715) - (.Microsoft Corporation.) [HKLM] -- KB967715 O42 - Logiciel: Update for Windows XP (KB968389) - (.Microsoft Corporation.) [HKLM] -- KB968389 O42 - Logiciel: Update for Windows XP (KB971737) - (.Microsoft Corporation.) [HKLM] -- KB971737 O42 - Logiciel: Update for Windows XP (KB973687) - (.Microsoft Corporation.) [HKLM] -- KB973687 O42 - Logiciel: Update for Windows XP (KB973815) - (.Microsoft Corporation.) [HKLM] -- KB973815 O42 - Logiciel: VC80CRTRedist - 8.0.50727.762 - (.DivX, Inc.) [HKLM] -- {767CC44C-9BBC-438D-BAD3-FD4595DD148B} O42 - Logiciel: VLC media player 1.1.5 - (.VideoLAN.) [HKLM] -- VLC media player O42 - Logiciel: Westwood Online - (.VideoLAN.) [HKLM] -- WChat O42 - Logiciel: WinRAR archiver - (.Microsoft Corporation.) [HKLM] -- WinRAR archiver O42 - Logiciel: WinZip - (.WinZip Computing, Inc..) [HKLM] -- WinZip O42 - Logiciel: Windows Imaging Component - (.Microsoft Corporation.) [HKLM] -- WIC O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] -- ie8 O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {E6158D07-2637-4ECF-B576-37C489669174} O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3175E049-F9A9-4A3D-8F19-AC9FB04514D1} O42 - Logiciel: Windows Live Essentials - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3 O42 - Logiciel: Windows Live Essentials - (.Microsoft Corporation.) [HKLM] -- {474F25F5-BDC9-40E5-B1B6-F6BF23FC106F} O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM] -- {D92FF8EB-BD77-40AE-B68B-A6BFC6F8661D} O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {6412CECE-8172-4BE5-935B-6CECACD2CA87} O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {B57EAFF2-D6EE-4C6C-9175-ED9F17BFC1BC} O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM] -- {EE39FFBD-544E-49E4-A999-6819828EAE91} O42 - Logiciel: Windows Live Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {45338B07-A236-4270-9A77-EBB4115517B5} O42 - Logiciel: Windows Live Sync - (.Microsoft Corporation.) [HKLM] -- {B10914FD-8812-47A4-85A1-50FCDE7F1F33} O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) [HKLM] -- {1BD07DF4-FB06-41BA-B896-B2DA59000C96} O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {178832DE-9DE0-4C87-9F82-9315A9B03985} O42 - Logiciel: Yahoo! Barre d'outils - (.WinZip Computing, Inc..) [HKLM] -- Yahoo! Companion O42 - Logiciel: Yahoo! Messenger - (.Yahoo! Inc..) [HKLM] -- Yahoo! Messenger O42 - Logiciel: Yahoo! Software Update - (.Yahoo! Inc..) [HKLM] -- Yahoo! Software Update O42 - Logiciel: overland - (.HP.) [HKLM] -- {766273C1-A39B-47EB-ACE8-DEBDD8094BCC} O42 - Logiciel: มหาหมอดู 5.7 รุ่นลงทะเบียนของ คุณศราวุธ อัจฉริยะเดชา - (.Trackerx90.) [HKLM] -- มหาหมอดู_5.4 O42 - Logiciel: เครื่องมืออัปโหลดของ Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238} ---\\ HKCU & HKLM Software Keys [HKCU\Software\7-Zip] [HKCU\Software\AC3filter] [HKCU\Software\ACD Systems] [HKCU\Software\Adobe] [HKCU\Software\Ahead] [HKCU\Software\AppDataLow\AskBarDis] [HKCU\Software\AppDataLow\Software\Macromedia] [HKCU\Software\AppDataLow\Software\Microsoft] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow] [HKCU\Software\Avira] [HKCU\Software\BitTorrent] [HKCU\Software\Blizzard Entertainment] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\CoreVorbis] [HKCU\Software\CyberLink] [HKCU\Software\DT Soft] [HKCU\Software\DivXNetworks] [HKCU\Software\DivX] [HKCU\Software\FilePlanet] [HKCU\Software\Foxit Software] [HKCU\Software\GNU] [HKCU\Software\GRETECH] [HKCU\Software\GSpot Appliance Corp] [HKCU\Software\Gabest] [HKCU\Software\GameSpy] [HKCU\Software\GlarySoft] [HKCU\Software\Google] [HKCU\Software\Haali] [HKCU\Software\Hewlett-Packard] [HKCU\Software\IM Providers] [HKCU\Software\Intel] [HKCU\Software\JEDI-VCL] [HKCU\Software\JavaSoft] [HKCU\Software\Lake] [HKCU\Software\Local AppWizard-Generated Applications] [HKCU\Software\Logishrd] [HKCU\Software\Logitech] [HKCU\Software\Macromedia] [HKCU\Software\MainConcept] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\MediaInfo] [HKCU\Software\Mooii] [HKCU\Software\Mozilla] [HKCU\Software\Netscape] [HKCU\Software\Nico Mak Computing] [HKCU\Software\NirSoft] [HKCU\Software\ODBC] [HKCU\Software\OpenOffice.org] [HKCU\Software\Patchou] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\PopCap] [HKCU\Software\RealNetworks] [HKCU\Software\SPEEDBIT1] [HKCU\Software\SUPERAntiSpyware.com] [HKCU\Software\Safer Networking Limited] [HKCU\Software\Satsuki Decoder Pack] [HKCU\Software\Screensaver Factory] [HKCU\Software\Skype] [HKCU\Software\Softonic] [HKCU\Software\SpeedBit] [HKCU\Software\Sunbelt Software] [HKCU\Software\TENCENT] [HKCU\Software\Trend Micro] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\WinRAR SFX] [HKCU\Software\WinRAR] [HKCU\Software\WinZip Computing] [HKCU\Software\YahooPartnerToolbar] [HKCU\Software\Yahoo] [HKCU\Software\cybelsoft] [HKCU\Software\mlin] [HKLM\Software\14919ea49a8f3b4aa3cf1058d9a64cec] [HKLM\Software\781] [HKLM\Software\ACD Systems] [HKLM\Software\ATI Technologies] [HKLM\Software\Activision] [HKLM\Software\Adobe] [HKLM\Software\AppDataLow] [HKLM\Software\AskBarDis] [HKLM\Software\Aspell-fr] [HKLM\Software\Aspell] [HKLM\Software\Avira] [HKLM\Software\Boonty] [HKLM\Software\C07ft5Y] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\Codec Tweak Tool] [HKLM\Software\CyberLink] [HKLM\Software\DT Soft] [HKLM\Software\DivXNetworks] [HKLM\Software\DivX] [HKLM\Software\DownloadHelper] [HKLM\Software\ETeam] [HKLM\Software\FilePlanet] [HKLM\Software\Foxit Software] [HKLM\Software\GNU] [HKLM\Software\GRETECH] [HKLM\Software\GTK] [HKLM\Software\Gabest] [HKLM\Software\Gemplus] [HKLM\Software\Global IP Solutions] [HKLM\Software\Google] [HKLM\Software\HP] [HKLM\Software\HaaliMkx] [HKLM\Software\Hewlett-Packard] [HKLM\Software\ICE] [HKLM\Software\IDAVLab] [HKLM\Software\InstallShield] [HKLM\Software\InstalledOptions] [HKLM\Software\Intel] [HKLM\Software\InterVideo] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\KLCodecPack] [HKLM\Software\LEAD Technologies, Inc.] [HKLM\Software\Lake] [HKLM\Software\Licenses] [HKLM\Software\LogiShrd] [HKLM\Software\Logitech] [HKLM\Software\Macromedia] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\McAfee.com] [HKLM\Software\Mooii] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\NOS] [HKLM\Software\Nico Mak Computing] [HKLM\Software\Nullsoft] [HKLM\Software\ODBC] [HKLM\Software\Oak Technology] [HKLM\Software\OldTimer Tools] [HKLM\Software\OpenOffice.org] [HKLM\Software\Patchou] [HKLM\Software\Piriform] [HKLM\Software\PlayFirst] [HKLM\Software\Policies] [HKLM\Software\PopCap] [HKLM\Software\Program Groups] [HKLM\Software\RealNetworks] [HKLM\Software\Realtek] [HKLM\Software\ReflexiveArcade] [HKLM\Software\RegisteredApplications] [HKLM\Software\S3R521] [HKLM\Software\SUPERAntiSpyware.com] [HKLM\Software\Safer Networking Limited] [HKLM\Software\Schlumberger] [HKLM\Software\Silver] [HKLM\Software\Skype] [HKLM\Software\SolidStateNetworks] [HKLM\Software\SpeedBit] [HKLM\Software\Startup] [HKLM\Software\Sun Microsystems] [HKLM\Software\Sunbelt Software] [HKLM\Software\Symantec] [HKLM\Software\TENCENT] [HKLM\Software\Thaisoft] [HKLM\Software\TrendMicro] [HKLM\Software\VideoLAN] [HKLM\Software\Westwood] [HKLM\Software\Windows 3.1 Migration Status] [HKLM\Software\Windows] [HKLM\Software\X-AVCSD] [HKLM\Software\Yahoo] [HKLM\Software\ZSMC] [HKLM\Software\ahead] [HKLM\Software\cybelsoft] [HKLM\Software\mozilla.org] ---\\ Contents of the Common Files folders (O43) O43 - CFD: 20/04/2008 - 13:21:52 ----D- C:\Program Files\7-Zip O43 - CFD: 20/04/2008 - 13:33:08 ----D- C:\Program Files\ACD Systems O43 - CFD: 12/12/2010 - 21:03:48 ----D- C:\Program Files\Adobe O43 - CFD: 20/04/2008 - 13:45:16 ----D- C:\Program Files\Ahead O43 - CFD: 27/01/2010 - 00:54:22 ----D- C:\Program Files\Aspell O43 - CFD: 05/06/2009 - 08:10:10 ----D- C:\Program Files\Avira O43 - CFD: 12/12/2010 - 16:27:56 ----D- C:\Program Files\CCleaner O43 - CFD: 02/12/2010 - 01:08:30 ----D- C:\Program Files\Common Files O43 - CFD: 20/06/2009 - 05:04:16 ----D- C:\Program Files\COMODO O43 - CFD: 20/12/2010 - 22:10:42 ----D- C:\Program Files\ConvertHelper O43 - CFD: 20/04/2008 - 13:42:44 ----D- C:\Program Files\CyberLink O43 - CFD: 27/04/2010 - 19:21:34 ----D- C:\Program Files\DAEMON Tools Lite O43 - CFD: 19/12/2009 - 06:58:52 ----D- C:\Program Files\DivX O43 - CFD: 02/05/2010 - 10:57:56 ----D- C:\Program Files\DNA O43 - CFD: 25/10/2010 - 04:27:50 ----D- C:\Program Files\Download Manager O43 - CFD: 11/08/2008 - 19:41:42 ----D- C:\Program Files\EnglilshToThai O43 - CFD: 07/06/2009 - 05:50:06 ----D- C:\Program Files\EZPlus2009 O43 - CFD: 01/09/2008 - 12:16:34 ----D- C:\Program Files\FlashGet O43 - CFD: 14/05/2010 - 02:01:10 ----D- C:\Program Files\Foxit Software O43 - CFD: 27/08/2009 - 04:51:16 ----D- C:\Program Files\Glary Utilities O43 - CFD: 06/06/2009 - 16:49:18 ----D- C:\Program Files\Google O43 - CFD: 20/04/2008 - 13:15:20 ----D- C:\Program Files\HashTab Shell Extension O43 - CFD: 02/11/2009 - 07:02:54 ----D- C:\Program Files\HP O43 - CFD: 22/07/2010 - 19:22:36 --H-D- C:\Program Files\InstallShield Installation Information O43 - CFD: 29/11/2010 - 02:39:12 ----D- C:\Program Files\Internet Explorer O43 - CFD: 15/10/2010 - 02:58:56 ----D- C:\Program Files\Java O43 - CFD: 27/12/2010 - 02:34:00 ----D- C:\Program Files\JDownloader O43 - CFD: 20/06/2009 - 09:27:36 ----D- C:\Program Files\K-Lite Codec Pack O43 - CFD: 21/01/2010 - 20:26:00 ----D- C:\Program Files\Logitech O43 - CFD: 29/12/2010 - 09:34:12 ----D- C:\Program Files\ma-config.com O43 - CFD: 28/07/2010 - 10:23:14 ----D- C:\Program Files\MAKEMSI Package Documentation O43 - CFD: 26/04/2009 - 19:11:04 ----D- C:\Program Files\Messenger O43 - CFD: 10/11/2010 - 22:29:30 ----D- C:\Program Files\Messenger Plus! Live O43 - CFD: 21/03/2009 - 20:33:02 ----D- C:\Program Files\Microsoft O43 - CFD: 23/03/2009 - 03:01:30 ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2 O43 - CFD: 02/12/2010 - 01:09:04 ----D- C:\Program Files\Microsoft Office O43 - CFD: 21/03/2009 - 20:35:52 ----D- C:\Program Files\Microsoft Sync Framework O43 - CFD: 20/04/2008 - 13:50:52 ----D- C:\Program Files\Microsoft Visual Studio O43 - CFD: 02/12/2010 - 01:10:00 ----D- C:\Program Files\Microsoft Works O43 - CFD: 02/12/2010 - 01:06:58 ----D- C:\Program Files\Microsoft.NET O43 - CFD: 29/11/2010 - 03:24:28 ----D- C:\Program Files\Movie Maker O43 - CFD: 10/12/2010 - 20:00:26 ----D- C:\Program Files\Mozilla Firefox O43 - CFD: 15/08/2009 - 15:55:30 ----D- C:\Program Files\MSBuild O43 - CFD: 26/04/2009 - 11:13:06 ----D- C:\Program Files\MSN O43 - CFD: 20/04/2008 - 13:15:14 ----D- C:\Program Files\MSN Gaming Zone O43 - CFD: 22/03/2009 - 03:09:30 ----D- C:\Program Files\MSXML 6.0 O43 - CFD: 26/04/2009 - 19:12:10 ----D- C:\Program Files\NetMeeting O43 - CFD: 04/04/2010 - 07:30:54 ----D- C:\Program Files\Norton Security Scan O43 - CFD: 20/04/2008 - 13:21:52 ----D- C:\Program Files\Notepad++ O43 - CFD: 20/04/2008 - 13:16:44 ----D- C:\Program Files\Online Services O43 - CFD: 01/08/2010 - 18:09:44 ----D- C:\Program Files\OpenOffice.org 3 O43 - CFD: 14/08/2009 - 03:07:02 ----D- C:\Program Files\Outlook Express O43 - CFD: 19/11/2009 - 12:47:02 ----D- C:\Program Files\Overland O43 - CFD: 25/02/2010 - 02:32:38 ----D- C:\Program Files\PFPortChecker O43 - CFD: 28/07/2010 - 10:23:14 ----D- C:\Program Files\PhoneSuite O43 - CFD: 29/09/2010 - 22:46:00 ----D- C:\Program Files\PhotoScape O43 - CFD: 19/07/2009 - 21:00:22 ----D- C:\Program Files\Realtek O43 - CFD: 21/08/2010 - 01:37:26 ----D- C:\Program Files\Recuva O43 - CFD: 15/08/2009 - 15:55:20 ----D- C:\Program Files\Reference Assemblies O43 - CFD: 01/08/2009 - 20:37:22 ----D- C:\Program Files\ReflexiveArcade O43 - CFD: 20/06/2009 - 09:29:24 ----D- C:\Program Files\Satsuki Decoder Pack O43 - CFD: 07/08/2010 - 04:14:26 R---D- C:\Program Files\Skype O43 - CFD: 27/04/2009 - 19:14:18 ----D- C:\Program Files\SpeedBit Video Accelerator O43 - CFD: 15/08/2009 - 03:09:26 ----D- C:\Program Files\Spybot - Search & Destroy O43 - CFD: 20/06/2009 - 08:48:50 ----D- C:\Program Files\Sunbelt Software O43 - CFD: 29/12/2010 - 08:07:32 ----D- C:\Program Files\SUPERAntiSpyware O43 - CFD: 04/04/2010 - 07:31:20 ----D- C:\Program Files\SuperCopier2 O43 - CFD: 20/04/2008 - 13:59:00 ----D- C:\Program Files\Trackerx90 O43 - CFD: 28/11/2010 - 04:53:18 ----D- C:\Program Files\Trend Micro O43 - CFD: 20/04/2008 - 13:25:34 --H-D- C:\Program Files\Uninstall Information O43 - CFD: 02/10/2008 - 09:57:04 ----D- C:\Program Files\Unlocker O43 - CFD: 21/12/2010 - 22:27:12 ----D- C:\Program Files\uTorrent O43 - CFD: 20/04/2008 - 14:00:40 ----D- C:\Program Files\VideoLAN O43 - CFD: 26/05/2010 - 23:19:22 ----D- C:\Program Files\Windows Live O43 - CFD: 21/03/2009 - 20:32:44 ----D- C:\Program Files\Windows Live SkyDrive O43 - CFD: 20/04/2008 - 13:16:34 ----D- C:\Program Files\Windows Media Connect 2 O43 - CFD: 08/08/2009 - 11:17:16 ----D- C:\Program Files\Windows Media Player O43 - CFD: 26/04/2009 - 19:12:12 ----D- C:\Program Files\Windows NT O43 - CFD: 20/04/2008 - 13:19:14 --H-D- C:\Program Files\WindowsUpdate O43 - CFD: 30/03/2010 - 02:08:14 ----D- C:\Program Files\WinRAR O43 - CFD: 20/04/2008 - 13:57:42 ----D- C:\Program Files\WinZip O43 - CFD: 18/07/2010 - 15:25:44 ----D- C:\Program Files\Yahoo! O43 - CFD: 20/04/2008 - 13:53:08 ----D- C:\Program Files\มหาหมอดู 5.7 O43 - CFD: 20/04/2008 - 13:33:12 ----D- C:\Program Files\Common Files\ACD Systems O43 - CFD: 12/12/2010 - 21:05:06 ----D- C:\Program Files\Common Files\Adobe O43 - CFD: 07/02/2009 - 21:30:00 ----D- C:\Program Files\Common Files\Adobe AIR O43 - CFD: 20/04/2008 - 13:45:16 ----D- C:\Program Files\Common Files\Ahead O43 - CFD: 04/10/2008 - 20:08:58 ----D- C:\Program Files\Common Files\BOONTY Shared O43 - CFD: 02/12/2010 - 01:08:30 ----D- C:\Program Files\Common Files\DESIGNER O43 - CFD: 19/07/2009 - 22:18:06 ----D- C:\Program Files\Common Files\DivX Shared O43 - CFD: 27/01/2010 - 00:43:56 ----D- C:\Program Files\Common Files\GTK O43 - CFD: 10/08/2008 - 22:05:38 ----D- C:\Program Files\Common Files\Hewlett-Packard O43 - CFD: 10/08/2008 - 22:02:34 ----D- C:\Program Files\Common Files\HP O43 - CFD: 01/03/2009 - 04:13:00 ----D- C:\Program Files\Common Files\INCA Shared O43 - CFD: 01/07/2009 - 06:06:52 ----D- C:\Program Files\Common Files\InstallShield O43 - CFD: 10/08/2010 - 00:21:44 ----D- C:\Program Files\Common Files\Java O43 - CFD: 21/04/2009 - 10:00:26 ----D- C:\Program Files\Common Files\logishrd O43 - CFD: 11/09/2009 - 16:20:26 ----D- C:\Program Files\Common Files\Logitech O43 - CFD: 02/12/2010 - 01:29:08 ----D- C:\Program Files\Common Files\Microsoft Shared O43 - CFD: 20/04/2008 - 13:18:22 ----D- C:\Program Files\Common Files\MSSoap O43 - CFD: 20/04/2008 - 20:05:14 ----D- C:\Program Files\Common Files\ODBC O43 - CFD: 20/04/2008 - 13:18:24 ----D- C:\Program Files\Common Files\Services O43 - CFD: 07/08/2010 - 04:12:12 ----D- C:\Program Files\Common Files\Skype O43 - CFD: 20/04/2008 - 20:05:10 ----D- C:\Program Files\Common Files\SpeechEngines O43 - CFD: 04/04/2010 - 07:30:50 ----D- C:\Program Files\Common Files\Symantec Shared O43 - CFD: 02/12/2010 - 01:05:56 ----D- C:\Program Files\Common Files\System O43 - CFD: 27/01/2010 - 01:27:52 ----D- C:\Program Files\Common Files\Tencent O43 - CFD: 21/03/2009 - 20:15:42 ----D- C:\Program Files\Common Files\Windows Live O43 - CFD: 19/06/2009 - 14:39:06 ----D- C:\Program Files\Common Files\Wise Installation Wizard ---\\ Last modified or created files under Windows and System32 (O44) O44 - LFC:[MD5.5F3F41F803816F1AE755F61FAA4FB171] - 29/12/2010 - 10:07:46 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\setupapi.log [2228] O44 - LFC:[MD5.84EF1200A915817C00DCFD7F58F01200] - 29/12/2010 - 10:06:29 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\WindowsUpdate.log [1803931] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 29/12/2010 - 10:05:15 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\0.log [0] O44 - LFC:[MD5.84EF1200A915817C00DCFD7F58F01200] - 29/12/2010 - 10:04:50 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\wiadebug.log [159] O44 - LFC:[MD5.84EF1200A915817C00DCFD7F58F01200] - 29/12/2010 - 10:04:39 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\wiaservc.log [50] O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 29/12/2010 - 10:04:15 -S-A- . (.Unknown owner - No comment.) -- C:\WINDOWS\bootstat.dat [2048] O44 - LFC:[MD5.870A988F1ECDF5E6F243FB1B82E83867] - 29/12/2010 - 09:29:27 -SHA- . (.Unknown owner - No comment.) -- C:\WINDOWS\Thumbs.db [7168] O44 - LFC:[MD5.C5C5ED4889FF02B47447FBEA14A45C54] - 29/12/2010 - 07:36:15 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\System32\wpa.dbl [2206] O44 - LFC:[MD5.045EA6BB82B74699DA5B7780B1036F64] - 03/12/2010 - 14:14:36 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\System32\lvcoinst.log [53257] O44 - LFC:[MD5.051621ED13E662D0F16A7292BA82E7B8] - 02/12/2010 - 05:19:15 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\System32\FNTCACHE.DAT [357752] O44 - LFC:[MD5.3BEB1C0FCEB632B5FAE13A627E7FEE49] - 02/12/2010 - 01:04:35 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\win.ini [546] ---\\ Operations and functions at Windows Explorer startup (O46) O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll O46 - SEH:ShellExecuteHooks - URL Exec Hook - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL ---\\ Export authorized application key (O47) O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Microsoft? Remote Desktop Help Session Manager.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export SP - "C:\Program Files\FlashGet\flashget.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\MSN Messenger\livecall.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- C:\Program Files\MSN Messenger\livecall.exe O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\rundll32.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\DNA\btdna.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\BitTorrent\bittorrent.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\DAP\DAP.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\uTorrent\uTorrent.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Java\jre6\bin\java.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Documents and Settings\Christophe\Desktop\utorrent.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\trademanager\AliIM.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Messenger\msmsgs.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\ADSLTV\adsltv.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\ADSLTV\VLC\vlc.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Documents and Settings\Admin\Program Files\DNA\btdna.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Plugin Manager\skypePM.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Skype\Phone\Skype.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\Microsoft Office\Office12\GROOVE.EXE" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export SP - "C:\Program Files\ma-config.com\maconfservice.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsoft Corporation - Microsoft? Remote Desktop Help Session Manager.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export DP - "C:\Program Files\MSN Messenger\livecall.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- C:\Program Files\MSN Messenger\livecall.exe O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- O47 - AAKE:Key Export DP - "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" [Enabled] .(.Unknown owner - No comment.) (.not file.) -- ---\\ Local Security Authority-LSA Deny (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Windows Security Configuration Editor Client Engine.) -- C:\WINDOWS\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\System32\msv1_0.dll ---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - DSP Group TrueSpeech(TM) Audio Codec for MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak? Codec.) -- C:\WINDOWS\System32\iccvid.dll O52 - TDSD: \Drivers32\"VIDC.I420"="lvcodec2.dll" . (.Logitech Inc. - Video Codec.) -- C:\WINDOWS\System32\lvcodec2.dll O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Unknown owner - No comment.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Unknown owner - No comment.) -- C:\WINDOWS\System32\ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo? Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\system32\iac25_32.ax" . (.Intel Corporation - Indeo? audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo? video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\system32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \Drivers32\"VIDC.ACDV"="ACDV.dll" . (.ACD Systems - ACDV.) -- C:\WINDOWS\System32\ACDV.dll O52 - TDSD: \Drivers32\"VIDC.XVID"="xvidvfw.dll" . (.Unknown owner - No comment.) -- C:\WINDOWS\System32\xvidvfw.dll O52 - TDSD: \Drivers32\"VIDC.YV12"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\System32\DivX.dll O52 - TDSD: \Drivers32\"msacm.ac3acm"="ac3acm.acm" . (.fccHandler - AC-3 ACM Codec.) -- C:\WINDOWS\System32\ac3acm.acm O52 - TDSD: \Drivers32\"msacm.lameacm"="lameACM.acm" . (.http://www.mp3dev.org/ - Lame MP3 codec engine.) -- C:\WINDOWS\System32\lameACM.acm O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (.Unknown owner - No comment.) -- C:\WINDOWS\System32\ff_vfw.dll O52 - TDSD: \Drivers32\"vidc.DIVX"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\WINDOWS\System32\DivX.dll O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\iac25_32.ax"="Indeo? audio software" . (.Intel Corporation - Indeo? audio software.) -- C:\WINDOWS\system32\iac25_32.ax O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo? video 5.10" . (.Unknown owner - No comment.) -- (.not file.) O52 - TDSD: \drivers.desc\"C:\WINDOWS\system32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\system32\l3codeca.acm O52 - TDSD: \drivers.desc\"ACDV.dll"="ACDV 1.0" . (.Unknown owner - No comment.) -- (.not file.) O52 - TDSD: \drivers.desc\"LCODCCMP.DLL"="LEAD MCMP/MJPEG Codec (VFW)" . (.Unknown owner - No comment.) -- (.not file.) O52 - TDSD: \drivers.desc\"xvidvfw.dll"="Xvid MPEG-4 Video Codec v1.2-dev" . (.Unknown owner - No comment.) -- (.not file.) O52 - TDSD: \drivers.desc\"lameACM.acm"="Lame ACM MP3 CODEC v3.97b2" . (.Unknown owner - No comment.) -- (.not file.) O52 - TDSD: \drivers.desc\"ac3acm.acm"="AC-3 ACM Codec" . (.fccHandler - AC-3 ACM Codec.) -- C:\WINDOWS\System32\ac3acm.acm O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (.Unknown owner - No comment.) -- C:\WINDOWS\System32\ff_vfw.dll O52 - TDSD: \drivers.desc\"DivX.dll"="DivX 6.8.5 Codec" . (.Unknown owner - No comment.) -- (.not file.) ---\\ ShareTools MSconfig StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\aliim [Key] . (.Unknown owner - No comment.) -- C:\Program Files\trademanager\aliim.exe O53 - SMSR:HKLM\...\startupreg\DAEMON Tools Lite [Key] . (.Unknown owner - No comment.) -- C:\Program Files\DAEMON Tools Lite\daemon.exe O53 - SMSR:HKLM\...\startupreg\NeroFilterCheck [Key] . (.Ahead Software Gmbh - NeroCheck.) -- C:\WINDOWS\system32\NeroCheck.exe O53 - SMSR:HKLM\...\startupreg\PowerDVD [Key] . (.CyberLink Corp. - PowerDVD.) -- C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe O53 - SMSR:HKLM\...\startupreg\RemoteControl [Key] . (.Cyberlink Corp. - PowerDVD RC Service.) -- C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe O53 - SMSR:HKLM\...\startupreg\SUPERAntiSpyware [Key] . (.SUPERAntiSpyware.com - SUPERAntiSpyware Application.) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O53 - SMSR:HKLM\...\startupreg\uTorrent [Key] . (.BitTorrent, Inc. - ?Torrent.) -- C:\Program Files\uTorrent\uTorrent.exe ---\\ Microsoft Control Security Providers (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - DPA Client for 32 bit platforms.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Digest SSPI Authentication Package.) -- C:\WINDOWS\system32\digest.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - DPA Client for 32 bit platforms.) -- C:\WINDOWS\system32\msapsspc.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Digest SSPI Authentication Package.) -- C:\WINDOWS\system32\digest.dll ---\\ Microsoft Windows Policies System (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "SynchronousMachineGroupPolicy"=0 O55 - MWPS:[HKLM\...\Policies\System] - "SynchronousUserGroupPolicy"=0 O55 - MWPS:[HKCU\...\Policies\System] - "DisableTaskMgr"=0 ---\\ Microsoft Windows Policies Explorer (MWPE) (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoRecentDocsMenu"=1 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoChangeStartMenu"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoClose"=0 O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLogOff"=0 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoRemoteRecursiveEvents"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "HonorAutoRunSetting"=1 ---\\ System Drivers List (SDL) (O58) O58 - SDL:[MD5.11C04B17ED2ABBB4833694BCD644AC90] - 01/04/2002 - 13:15:00 ---A- . (.Andrea Electronics Corporation - Andrea Audio Stub Driver.) -- C:\WINDOWS\system32\drivers\aeaudio.sys [4816] O58 - SDL:[MD5.0EBB674888CBDEFD5773341C16DD6A07] - 08/10/2004 - 08:16:04 ---A- . (.Oak Technology Inc. - Audio File System.) -- C:\WINDOWS\system32\drivers\AFS2K.SYS [35840] O58 - SDL:[MD5.5B44C214F9CD9F590BE9125347610380] - 13/02/2009 - 12:17:49 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver.) -- C:\WINDOWS\system32\drivers\avgntdd.sys [45416] O58 - SDL:[MD5.1EB7D72A82F94F7E9496D363FCE00B68] - 17/08/2010 - 13:39:11 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\WINDOWS\system32\drivers\avgntflt.sys [60936] O58 - SDL:[MD5.87451AA7CC6B6A590EBCEA05E755075A] - 17/06/2010 - 15:28:03 ---A- . (.Avira GmbH - Avira AntiVir File Filter Driver Manager.) -- C:\WINDOWS\system32\drivers\avgntmgr.sys [22360] O58 - SDL:[MD5.F8C56231ED5ECF7D1B46B0330880CCEF] - 17/08/2010 - 13:39:11 ---A- . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\WINDOWS\system32\drivers\avipbb.sys [126856] O58 - SDL:[MD5.B562592B7F5759C99E179CA467ECFB4C] - 30/07/2007 - 09:54:51 ---A- . (.RAVISENT Technologies Inc. - CineMaster C 1.2 WDM Main Driver.) -- C:\WINDOWS\system32\drivers\cinemst2.sys [262528] O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 30/07/2007 - 09:54:51 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys [11776] O58 - SDL:[MD5.3FCC124B6E08EE0E9351F717DD136939] - 30/07/2007 - 09:54:51 ---A- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\system32\drivers\hdaudbus.sys [138752] O58 - SDL:[MD5.2A013E7530BEAB6E569FAA83F517E836] - 30/07/2007 - 09:54:51 ---A- . (.Windows (R) Server 2003 DDK provider - High Definition Audio Function Driver v1.0a.) -- C:\WINDOWS\system32\drivers\hdaudio.sys [145920] O58 - SDL:[MD5.5FABA4775D4C61E55EC669D643FFC71F] - 23/06/2004 - 01:16:46 ---A- . (.HP - IEEE-1284.4-1999 Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\hpzid412.sys [51088] O58 - SDL:[MD5.A3C43980EE1F1BEAC778B44EA65DBDD4] - 23/06/2004 - 01:16:46 ---A- . (.HP - IEEE-1284.4-1999 Print Class Driver.) -- C:\WINDOWS\system32\drivers\HPZipr12.sys [16496] O58 - SDL:[MD5.2906949BD4E206F2BB0DD1896CE9F66F] - 23/06/2004 - 01:16:46 ---A- . (.HP - 1284.4<->Usb Datalink Driver (Windows 2000).) -- C:\WINDOWS\system32\drivers\HPZius12.sys [21744] O58 - SDL:[MD5.970178E8E003EB1481293830069624B9] - 04/08/2004 - 05:41:48 ---A- . (.Conexant Systems, Inc. - HSF_HWB2 WDM driver.) -- C:\WINDOWS\system32\drivers\HSFBS2S2.sys [220032] O58 - SDL:[MD5.1225EBEA76AAC3C84DF6C54FE5E5D8BE] - 04/08/2004 - 05:41:50 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\WINDOWS\system32\drivers\HSFCXTS2.sys [685056] O58 - SDL:[MD5.EBB354438A4C5A3327FB97306260714A] - 04/08/2004 - 05:41:56 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\WINDOWS\system32\drivers\HSFDPSP2.sys [1041536] O58 - SDL:[MD5.FCCF4AE4EF72CBABA6D6BEFEFD77E940] - 29/03/2003 - 15:45:18 ---A- . (.Ahead Software AG and its licensors - NERO IMAGEDRIVE SCSI miniport.) -- C:\WINDOWS\system32\drivers\imagedrv.sys [89184] O58 - SDL:[MD5.4349C7DC0C982CFFC11946FFF20F8524] - 17/12/2008 - 12:53:22 ---A- . (.Logitech Inc. - Audio filter for Express Plus.) -- C:\WINDOWS\system32\drivers\lv302af.sys [13848] O58 - SDL:[MD5.36EDDCEFDD036FFFA95AA84D1645DD67] - 06/12/2005 - 10:30:19 R--A- . (.Logitech Inc. - Logitech QuickCam Driver.) -- C:\WINDOWS\system32\drivers\LV302AV.SYS [916096] O58 - SDL:[MD5.4FC23DAE30EF4F6A2952CD93104909E7] - 17/12/2008 - 12:53:44 ---A- . (.Logitech Inc. - Logitech QuickCam Driver.) -- C:\WINDOWS\system32\drivers\LV302V32.SYS [2686104] O58 - SDL:[MD5.F96CFB47903854F228BAAF3E2D41A0A3] - 16/12/2008 - 21:58:54 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\drivers\LVPr2Mon.sys [25624] O58 - SDL:[MD5.E22FD7852E74F04CCEB6B8A684A51F3E] - 17/12/2008 - 13:00:12 ---A- . (.Logitech Inc. - Logitech Kernel Audio Improvement Filter Driver.) -- C:\WINDOWS\system32\drivers\lvrs.sys [768024] O58 - SDL:[MD5.5F987FC1AAD215EC2C60CF07719B1CCE] - 17/12/2008 - 13:01:20 ---A- . (.Logitech Inc. - USB Statistic Driver.) -- C:\WINDOWS\system32\drivers\LVUSBSta.sys [41752] O58 - SDL:[MD5.195741AEE20369980796B557358CD774] - 04/08/2004 - 05:41:56 ---A- . (.Conexant - Diagnostic Interface DRIVER.) -- C:\WINDOWS\system32\drivers\mdmxsdk.sys [11868] O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 30/07/2007 - 09:54:51 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys [12032] O58 - SDL:[MD5.2B298519EDBFCF451D43E0F1E8F1006D] - 04/08/2004 - 05:29:56 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows 2000 Miniport Driver, Version 56.73.) -- C:\WINDOWS\system32\drivers\nv4_mini.sys [1897408] O58 - SDL:[MD5.957B82EC80AD7EAD64E5E47DF6B0DC40] - 20/04/2008 - 13:33:04 ---A- . (.Padus, Inc. - Padus(R) ASPI Shell.) -- C:\WINDOWS\system32\drivers\pfc.sys [10368] O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 30/07/2007 - 09:54:51 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys [17792] O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 30/07/2007 - 09:54:51 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys [12032] O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 30/07/2007 - 09:54:51 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys [12032] O58 - SDL:[MD5.1EBDE650D97A8ECCDC1CC4A0804647CD] - 10/07/2007 - 09:56:00 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys [4449280] O58 - SDL:[MD5.419883201CA9AD697CCFB8FC46DD6F78] - 31/10/2008 - 07:09:06 R--A- . (.Sunbelt Software, Inc. - Sunbelt Personal Firewall driver.) -- C:\WINDOWS\system32\drivers\SbFw.sys [270888] O58 - SDL:[MD5.F01B8409A11C319E3C5B9DD418676D2C] - 21/06/2008 - 04:54:54 ---A- . (.Sunbelt Software, Inc. - Sunbelt Personal Firewall NDIS Intermediate driver.) -- C:\WINDOWS\system32\drivers\SbFwIm.sys [65576] O58 - SDL:[MD5.31CA701F26EA66468AD3C3C6498755CE] - 21/06/2008 - 04:54:54 R--A- . (.Sunbelt Software, Inc. - Sunbelt Personal Firewall Host Intrusion Prevention Driver.) -- C:\WINDOWS\system32\drivers\sbhips.sys [66600] O58 - SDL:[MD5.07F7F501AD50DE2BA2D5842D9B6D6155] - 30/07/2007 - 09:54:51 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys [163644] O58 - SDL:[MD5.61CA562DEF09A782D26B3E7EDEC5369A] - 18/07/2003 - 15:58:20 ---A- . (.Silicon Integrated Systems Corporation - SiS AGPv3.5 Filter.) -- C:\WINDOWS\system32\drivers\SISAGPX.SYS [36992] O58 - SDL:[MD5.A1348A901A44760CCD76043525E851D0] - 14/02/2006 - 21:02:56 ---A- . (.SiS Corporation - SiS PCI Fast Ethernet Adapter Driver.) -- C:\WINDOWS\system32\drivers\sisnicxp.sys [32768] O58 - SDL:[MD5.F1771926A47A18BD3A3EDAC334FC78E0] - 08/04/2003 - 10:30:48 ---A- . (.Analog Devices, Inc. - SoundMAX Stub Driver.) -- C:\WINDOWS\system32\drivers\smsens.sys [3744] O58 - SDL:[MD5.BF208C85119770E6A9B6577019A3D810] - 29/08/2003 - 15:09:00 ---A- . (.Analog Devices, Inc. - SoundMAX Integrated Digital Audio.) -- C:\WINDOWS\system32\drivers\smwdm.sys [578304] O58 - SDL:[MD5.A1ECEEAA5C5E74B2499EB51D38185B84] - 17/08/2001 - 13:56:16 ---A- . (.Sony Corporation - Sony USB Lower Filter driver.) -- C:\WINDOWS\system32\drivers\SONYPVU1.SYS [7552] O58 - SDL:[MD5.84EF1200A915817C00DCFD7F58F01200] - 09/12/2009 - 00:00:00 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\drivers\sptd.sys [691696] O58 - SDL:[MD5.A36EE93698802CD899F98BFD553D8185] - 17/06/2010 - 15:28:02 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\WINDOWS\system32\drivers\ssmdrv.sys [28520] O58 - SDL:[MD5.DF8444A8FA8FD38D8848BDD40A8403B3] - 05/06/2009 - 06:36:48 ---A- . (.Trend Micro Inc. - TrendMicro Common Module.) -- C:\WINDOWS\system32\drivers\tmcomm.sys [102664] O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 30/07/2007 - 09:54:51 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys [21376] O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 30/07/2007 - 09:54:51 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys [58112] O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ansi.sys [9029] O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\country.sys [27097] O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\himem.sys [4768] O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\key01.sys [42809] O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\keyboard.sys [42537] O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ntdos.sys [27866] O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ntdos404.sys [29146] O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ntdos411.sys [29370] O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ntdos412.sys [29274] O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ntdos804.sys [29146] O58 - SDL:[MD5.4FE09F868CE65B334B42862C372C69CC] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ntio.sys [33840] O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ntio404.sys [34560] O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ntio411.sys [35648] O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ntio412.sys [35424] O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 30/07/2007 - 09:54:51 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\ntio804.sys [34560] ---\\ List all tools cleaner (LATC) (O63) O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 O63 - Logiciel: ZHPFix 1.12 - (.Nicolas Coolman.) [HKLM] -- ZHPFix_is1 O63 - Logiciel: HiJackThis - (.Trend Micro.) [HKLM] -- {45A66726-69BC-466B-A7A4-12FCBA4883D7} O63 - Logiciel: Dial-a-fix - (.Djlizard.) ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\IEXPLORE.exe O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (r) Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\WINDOWS\regedit.exe O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (r) Windows Based Script Host.) -- C:\WINDOWS\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\WINDOWS\regedit.exe ---\\ Start Menu Internet (SMI) (O68) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ---\\ Search Browser Infection (SBI) (O69) O69 - SBI: prefs.js [Christophe - wb1iaj2x.default] user_pref("keyword.URL", "http://www.cherche.us/Result.php?client=pub-0420647136319153&cof=GIMP%3A009900%3BT%3A000000%3BALC%3A551a8b%3BGFNT%3AB7B7B7%3BLC%3A2200cc%3BBGC%3AFFFFFF%3BVLC% O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - () - http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC O69 - SBI: SearchScopes [HKCU] {557C21FE-7274-410D-853E-9ED4471BF193} - (cherche.us) - http://www.cherche.us/Result.php?client=pub-0420647136319153&cof=GIMP%3A009900%3BT%3A000000%3BALC%3A551a8b%3BGFNT%3AB7B7B7%3BLC%3A2200cc%3BBGC%3AFFFFFF%3BVLC%3A551a8b%3BGALT%3A008B45%3BFORID%3A11%3BDIV%3A%23FFFFF0%3B&ie=ISO-8859-1&q={searchTerms}+&meta= O69 - SBI: SearchScopes [HKCU] {C54DD1E9-F3A1-4490-9943-C643FCCB6E1C} [DefaultScope] - (Google) - http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?} ---\\ General States of Services not Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 20/12/2010 251760 | C:\Windows\System32\drivers\LVUSBSta.sys (maconfservice) . (.Logitech Inc..) - C:\Program Files\ma-config.com\maconfservice.exe SR - | Auto 19/06/2003 322120 | C:\Windows\system32\drivers\LVUSBSta.sys (MDM) . (.Logitech Inc..) - C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.exe SS - | Disabled 30/07/2007 14336 | C:\Windows\system32\drivers\LVUSBSta.sys (Messenger) . (.Logitech Inc..) - C:\WINDOWS\system32\svchost.exe SS - | Demand 27/10/2006 65824 | C:\Windows\system32\drivers\LVUSBSta.sys (Microsoft Office Groove Audit Service) . (.Logitech Inc..) - C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe SS - | Demand 30/07/2007 32768 | C:\Windows\system32\drivers\LVUSBSta.sys (mnmsrvc) . (.Logitech Inc..) - C:\WINDOWS\system32\mnmsrvc.exe SS - | Demand 30/07/2007 6144 | C:\Windows\system32\drivers\LVUSBSta.sys (MSDTC) . (.Logitech Inc..) - C:\WINDOWS\system32\msdtc.exe SS - | Demand 30/07/2007 78848 | C:\Windows\system32\drivers\LVUSBSta.sys (MSIServer) . (.Logitech Inc..) - C:\WINDOWS\system32\msiexec.exe SS - | Disabled 30/07/2007 111104 | C:\Windows\system32\drivers\LVUSBSta.sys (NetDDE) . (.Logitech Inc..) - C:\WINDOWS\system32\netdde.exe SS - | Disabled 30/07/2007 111104 | C:\Windows\system32\drivers\LVUSBSta.sys (NetDDEdsdm) . (.Logitech Inc..) - C:\WINDOWS\system32\netdde.exe SS - | Demand 30/07/2007 13312 | C:\Windows\system32\drivers\LVUSBSta.sys (Netlogon) . (.Logitech Inc..) - C:\WINDOWS\system32\lsass.exe SR - | Demand 30/07/2007 14336 | C:\Windows\system32\drivers\LVUSBSta.sys (Netman) . (.Logitech Inc..) - C:\WINDOWS\System32\svchost.exe SS - | Disabled 29/07/2008 132096 | C:\Windows\system32\drivers\LVUSBSta.sys (NetTcpPortSharing) . (.Logitech Inc..) - C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe SR - | Demand 30/07/2007 14336 | C:\Windows\system32\drivers\LVUSBSta.sys (Nla) . (.Logitech Inc..) - C:\WINDOWS\system32\svchost.exe SS - | Demand 30/07/2007 13312 | C:\Windows\system32\drivers\LVUSBSta.sys (NtLmSsp) . (.Logitech Inc..) - C:\WINDOWS\system32\lsass.exe SS - | Demand 30/07/2007 14336 | C:\Windows\system32\drivers\LVUSBSta.sys (NtmsSvc) . (.Logitech Inc..) - C:\WINDOWS\system32\svchost.exe SS - | Demand 26/10/2006 441136 | C:\Windows\system32\drivers\LVUSBSta.sys (odserv) . (.Logitech Inc..) - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.exe SS - | Demand 26/10/2006 145184 | C:\Windows\system32\drivers\LVUSBSta.sys (ose) . (.Logitech Inc..) - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.exe SR - | Auto 06/02/2009 110592 | C:\Windows\system32\drivers\LVUSBSta.sys (PlugPlay) . (.Logitech Inc..) - C:\WINDOWS\system32\services.exe SS - | Demand 18/03/2004 65536 | C:\Windows\system32\drivers\LVUSBSta.sys (Pml Driver HPZ12) . (.Logitech Inc..) - C:\WINDOWS\system32\HPZipm12.exe SR - | Auto 30/07/2007 13312 | C:\Windows\system32\drivers\LVUSBSta.sys (PolicyAgent) . (.Logitech Inc..) - C:\WINDOWS\system32\lsass.exe SR - | Auto 30/07/2007 13312 | C:\Windows\system32\drivers\LVUSBSta.sys (ProtectedStorage) . (.Logitech Inc..) - C:\WINDOWS\system32\lsass.exe SS - | Demand 30/07/2007 14336 | C:\Windows\system32\drivers\LVUSBSta.sys (RasAuto) . (.Logitech Inc..) - C:\WINDOWS\system32\svchost.exe SR - | Demand 30/07/2007 14336 | C:\Windows\system32\drivers\LVUSBSta.sys (RasMan) . (.Logitech Inc..) - C:\WINDOWS\system32\svchost.exe ---\\ Search Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, http://www.gmer.net Run by Christophe at 29/12/2010 11:34:04 device: opened successfully user: MBR read successfully Disk trace: called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x823C81F8]<< 1 nt!IofCallDriver[0x804E37D5] -> \Device\Harddisk0\DR0[0x82337AB8] 3 CLASSPNP[0xF8575FCF] -> nt!IofCallDriver[0x804E37D5] -> \Device\00000067[0x823502E0] 5 ACPI[0xF83E1620] -> nt!IofCallDriver[0x804E37D5] -> \Device\Ide\IdeDeviceP0T0L0-3[0x82338D98] \Driver\atapi[0x823508A8] -> IRP_MJ_CREATE -> 0x823C81F8 kernel: MBR read successfully detected hooks: \Driver\atapi -> 0x823c81f8 user & kernel MBR OK Warning: possible MBR rootkit infection ! Use "ZHPFix" command "MBRFix" to clear infection ! ---\\ Search Master Boot Record Infection (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by Christophe at 29/12/2010 11:34:04 Use the desktop link 'MBRCheck' to have full report ---\\ List of CD/DVD Emulators (MBR Hook) O58 - SDL:[MD5.84EF1200A915817C00DCFD7F58F01200] - 09/12/2009 - 00:00:00 ---A- . (.Unknown owner - No comment.) -- C:\WINDOWS\system32\drivers\sptd.sys [691696] ---\\ Infection BT - BHO/Toolbar (Possible) [HKCU\Software\AppDataLow\AskBarDis] [HKLM\Software\AskBarDis] End of the scan (1181 lines in 01mn 29s)(0)

J espere que ca va aller cette fois ci

Bonne lecture

cricri001 · le 29 Déc 2010 05:59

Coucou,

Le lien ou utu trouveras les details du rapport....
http://cjoint.com/?0mDf5FLLYnI

Desole pour le temps des reponses, mais sans la souris, je suis un peu lent.

A bientot

cricri001 · le 29 Déc 2010 06:29

Coucou,

A toute fin utile et pour gagner du temps, un rapport Hijackthis :

Code: Tout sélectionner: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 12:18:15, on 29/12/2010 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\Program Files\Avira\AntiVir Desktop\avshadow.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe C:\WINDOWS\system32\svchost.exe C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\SPEEDB~1\VideoAcceleratorEngine.exe C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe C:\Program Files\Unlocker\UnlockerAssistant.exe C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe C:\Program Files\HP\HP Software Update\HPWuSchd.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\Program Files\Logitech\QuickCam\Quickcam.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\uTorrent\uTorrent.exe C:\Program Files\DAEMON Tools Lite\DTLite.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe C:\Program Files\Trackerx90\Anti Removable Disk Virus (ARDV) by Trackerx90\ardv32.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\PROGRA~1\Yahoo!\Messenger\ymsgr_tray.exe C:\WINDOWS\system32\taskmgr.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.yahoo.fr R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {389943B0-C3A2-4E69-82CB-8596A84CB3DC} - (no file) O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Yahoo! Barre d'outils - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe" -H O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe" O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~1\Yahoo!\Messenger\YahooMessenger.exe" -quiet O4 - HKCU\..\Run: [igndlm.exe] C:\Program Files\Download Manager\DLM.exe /windowsstart /startifwork O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1151601.exe -Update -1151601 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)" -"http://www.siamzone.com/gameonline/play-games.php?id=82" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: ARDV.lnk = C:\Program Files\Trackerx90\Anti Removable Disk Virus (ARDV) by Trackerx90\ardv32.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Recherche avec cherche.us - C:\Documents and Settings\Christophe\scriptjava.html O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\progra~1\speedb~1\sblsp.dll O10 - Unknown file in Winsock LSP: c:\progra~1\speedb~1\sblsp.dll O10 - Unknown file in Winsock LSP: c:\progra~1\speedb~1\sblsp.dll O15 - Trusted Zone: *.chat-land.org O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (CDownloadCtrl Object) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.10.115.cab O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab O16 - DPF: {A9F8D9EC-3D0A-4A60-BD82-FBD64BAD370D} (DDRevision Class) - http://h20264.www2.hp.com/ediags/dd/install/HPDriverDiagnosticsxp2k.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe O23 - Service: Ma-Config Service (maconfservice) - Unknown owner - C:\Program Files\ma-config.com\maconfservice.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe O23 - Service: VideoAcceleratorService - Speedbit Ltd. - C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- End of file - 11438 bytes

cricri001 · le 29 Déc 2010 12:56

Coucou,
Y a quelqu un qui sait quoi faire avec les rapports ? :-?

Je patauge dans la semoule avec ma souris :(

Del-crosseur · le 29 Déc 2010 13:27

Bonjour

• Télécharge AD-Remover (de C_XX) sur ton Bureau.
:!: Déconnecte toi et ferme toutes les applications en cours :!:
• Double-clique sur l'icône AD-Remover
• Au menu principal, clique sur "SCAN"
• Confirme le lancement de l'analyse et laisse l'outil travailler
• Poste le rapport qui apparait à la fin (il est aussi sauvegardé sous C:\Ad-report-Scan.txt )

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

cricri001 · le 29 Déc 2010 20:11

Bonjour,

Je vais pas lacher

On va le bousiller ce virus s il est la.

Code: Tout sélectionner: ======= REPORT FROM AD-REMOVER 2.0.0.2,C | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 22/12/10 at 11:40 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Launched at 01:52:55 on 30/12/2010, Normal boot Microsoft Windows XP Professional Service Pack 2 (X86) Christophe@HOME-D835667A1B ( ) ============== SEARCH ============== File found: C:\Documents and Settings\Christophe\Application Data\Mozilla\FireFox\Profiles\wb1iaj2x.default\searchplugins\cherche.xml Folder found: C:\Documents and Settings\Christophe\Application Data\Toolbar4 Folder found: C:\Documents and Settings\Admin\Application Data\Toolbar4 -- File opened: C:\Documents and Settings\Christophe\Application Data\Mozilla\FireFox\Profiles\wb1iaj2x.default\Prefs.js -- Line found: user_pref("keyword.URL", "hxxp://www.cherche.us/Result.php?client=pub-0420647136319153&cof=GIMP%3A00... -- File closed -- Key found: HKLM\Software\Classes\CLSID\{601ac3dc-786a-4eb0-bf40-ee3521e70bfb} Key found: HKLM\Software\Classes\CLSID\{72b3882f-453a-4633-aac9-8c3dced62aff} Key found: HKLM\Software\Classes\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b} Key found: HKLM\Software\Classes\Interface\{384FE458-A963-450D-9187-EEFF81913FD0} Key found: HKLM\Software\Classes\Interface\{4634804A-F0B0-4A74-A550-FC0EEF8A4362} Key found: HKLM\Software\Classes\Interface\{4C07EA4F-5F52-4222-B170-4CD9ED33BAEA} Key found: HKLM\Software\Classes\Interface\{C44FEFF4-EF0C-4CF7-83D0-92B4266A32B9} Key found: HKLM\Software\Classes\Interface\{F131923C-381D-4E4C-A472-4A17118FD742} Key found: HKLM\Software\Classes\TypeLib\{4B1C1E16-6B34-430E-B074-5928ECA4C150} Key found: HKLM\Software\Classes\TypeLib\{D2E5FA06-DCC7-46F9-BEFF-BFD06F69B9B2} Key found: HKLM\Software\Classes\AskIBar.PopSwatterBarButton Key found: HKLM\Software\Classes\AskIBar.PopSwatterBarButton.1 Key found: HKLM\Software\Classes\AskIBar.PopSwatterSettingsControl Key found: HKLM\Software\Classes\AskIBar.PopSwatterSettingsControl.1 Key found: HKLM\Software\Classes\AskToolBar.SettingsPlugin Key found: HKLM\Software\Classes\AskToolBar.SettingsPlugin.1 Key found: HKLM\Software\AskBarDis Key found: HKLM\Software\PopCap Key found: HKCU\Software\PopCap Key found: HKCU\Software\AppDataLow\AskBarDis Key found: HKCU\Software\Microsoft\Internet Explorer\MenuExt\Recherche avec cherche.us Value found: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{3041D03E-FD4B-44E0-B742-2D9B88305F98} ============== ADDITIONNAL SCAN ============== ** Mozilla Firefox Version [3.6.13 (fr)] ** -- C:\Documents and Settings\Christophe\Application Data\Mozilla\FireFox\Profiles\wb1iaj2x.default\Prefs.js -- browser.download.lastDir, C:\\Documents and Settings\\Christophe\\Desktop browser.search.defaultenginename, Google browser.startup.homepage, hxxp://www.yahoo.fr/ browser.startup.homepage_override.mstone, rv:1.9.2.13 keyword.URL, hxxp://www.cherche.us/Result.php?client=pub-0420647136319153&cof=GIMP%3A009900%3BT%3A000000%3BALC%3A551a8b%... -- C:\Documents and Settings\Admin\Application Data\Mozilla\FireFox\Profiles\fiqjqewy.default\Prefs.js -- browser.download.lastDir, C:\\Documents and Settings\\Admin\\My Documents\\My Videos\\QuickCam browser.startup.homepage, google.fr browser.startup.homepage_override.mstone, rv:1.9.2.3 keyword.URL, hxxp://search.speedbit.com/searchresults.asp?src=default&q= ======================================== ** Internet Explorer Version [8.0.6001.18702] ** [HKCU\Software\Microsoft\Internet Explorer\Main] Do404Search: 0x01000000 Enable Browser Extensions: yes Local Page: C:\WINDOWS\system32\blank.htm Show_ToolBar: yes Start Page: www.yahoo.fr [HKLM\Software\Microsoft\Internet Explorer\Main] Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896 Delete_Temp_Files_On_Exit: yes Local Page: C:\WINDOWS\system32\blank.htm Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157 [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] Tabs: res://ieframe.dll/tabswelcome.htm Blank: res://mshtml.dll/blank.htm ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 File(s) C:\Program Files\Ad-Remover\Backup: 1 File(s) C:\Ad-Report-SCAN[1].txt - 30/12/2010 (2647 Byte(s)) End at: 01:54:31, 30/12/2010 ============== E.O.F ==============

J ai fait le scan avec les applications fermees et le cable internet retire.

A tout de suite. J ai toute la journee, je veux pas laisser ce virus survivre a 2010 sur ce pc.

cricri

Del-crosseur · le 29 Déc 2010 20:16

J'ai bien peur que tu est un cheval de troie ... :S
on s'en occupe en dernier de ceci ..

Relance AD-REMOVER en choisissant l'option "Nettoyer"
(n'oublie pas de fermer toutes les applications en cours lors du nettoyage stp...)

poste le rapport

cricri001 · le 29 Déc 2010 20:35

Coucou,

Code: Tout sélectionner: ======= REPORT FROM AD-REMOVER 2.0.0.2,C | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 22/12/10 at 11:40 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Launched at 02:17:36 on 30/12/2010, Normal boot Microsoft Windows XP Professional Service Pack 2 (X86) Christophe@HOME-D835667A1B ( ) ============== ACTION(S) ============== File deleted: C:\Documents and Settings\Christophe\Application Data\Mozilla\FireFox\Profiles\wb1iaj2x.default\searchplugins\cherche.xml Folder deleted: C:\Documents and Settings\Christophe\Application Data\Toolbar4 Folder deleted: C:\Documents and Settings\Admin\Application Data\Toolbar4 (!) -- Temporary files deleted. -- File opened: C:\Documents and Settings\Christophe\Application Data\Mozilla\FireFox\Profiles\wb1iaj2x.default\Prefs.js -- Line deleted: Line deleted: Line deleted: user_pref("keyword.URL", "hxxp://www.cherche.us/Result.php?client=pub-0420647136319153&cof=GIMP%3A00... -- File closed -- Key deleted: HKLM\Software\Classes\CLSID\{601ac3dc-786a-4eb0-bf40-ee3521e70bfb} Key deleted: HKLM\Software\Classes\CLSID\{72b3882f-453a-4633-aac9-8c3dced62aff} Key deleted: HKLM\Software\Classes\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b} Key deleted: HKLM\Software\Classes\Interface\{384FE458-A963-450D-9187-EEFF81913FD0} Key deleted: HKLM\Software\Classes\Interface\{4634804A-F0B0-4A74-A550-FC0EEF8A4362} Key deleted: HKLM\Software\Classes\Interface\{4C07EA4F-5F52-4222-B170-4CD9ED33BAEA} Key deleted: HKLM\Software\Classes\Interface\{C44FEFF4-EF0C-4CF7-83D0-92B4266A32B9} Key deleted: HKLM\Software\Classes\Interface\{F131923C-381D-4E4C-A472-4A17118FD742} Key deleted: HKLM\Software\Classes\TypeLib\{4B1C1E16-6B34-430E-B074-5928ECA4C150} Key deleted: HKLM\Software\Classes\TypeLib\{D2E5FA06-DCC7-46F9-BEFF-BFD06F69B9B2} Key deleted: HKLM\Software\Classes\AskIBar.PopSwatterBarButton Key deleted: HKLM\Software\Classes\AskIBar.PopSwatterBarButton.1 Key deleted: HKLM\Software\Classes\AskIBar.PopSwatterSettingsControl Key deleted: HKLM\Software\Classes\AskIBar.PopSwatterSettingsControl.1 Key deleted: HKLM\Software\Classes\AskToolBar.SettingsPlugin Key deleted: HKLM\Software\Classes\AskToolBar.SettingsPlugin.1 Key deleted: HKLM\Software\AskBarDis Key deleted: HKLM\Software\PopCap Key deleted: HKCU\Software\PopCap Key deleted: HKCU\Software\AppDataLow\AskBarDis Key deleted: HKCU\Software\Microsoft\Internet Explorer\MenuExt\Recherche avec cherche.us Value deleted: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{3041D03E-FD4B-44E0-B742-2D9B88305F98} ============== ADDITIONNAL SCAN ============== ** Mozilla Firefox Version [3.6.13 (fr)] ** -- C:\Documents and Settings\Christophe\Application Data\Mozilla\FireFox\Profiles\wb1iaj2x.default\Prefs.js -- browser.download.lastDir, C:\\Documents and Settings\\Christophe\\Desktop browser.search.defaultenginename, Google browser.startup.homepage, hxxp://www.yahoo.fr/ browser.startup.homepage_override.mstone, rv:1.9.2.13 -- C:\Documents and Settings\Admin\Application Data\Mozilla\FireFox\Profiles\fiqjqewy.default\Prefs.js -- browser.download.lastDir, C:\\Documents and Settings\\Admin\\My Documents\\My Videos\\QuickCam browser.startup.homepage, google.fr browser.startup.homepage_override.mstone, rv:1.9.2.3 keyword.URL, hxxp://search.speedbit.com/searchresults.asp?src=default&q= ======================================== ** Internet Explorer Version [8.0.6001.18702] ** [HKCU\Software\Microsoft\Internet Explorer\Main] Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Do404Search: 0x01000000 Enable Browser Extensions: yes Local Page: C:\WINDOWS\system32\blank.htm Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896 Show_ToolBar: yes Start Page: hxxp://fr.msn.com/ [HKLM\Software\Microsoft\Internet Explorer\Main] Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896 Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Delete_Temp_Files_On_Exit: yes Local Page: C:\WINDOWS\system32\blank.htm Search bar: hxxp://search.msn.com/spbasic.htm Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Start Page: hxxp://fr.msn.com/ [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] Tabs: res://ieframe.dll/tabswelcome.htm Blank: res://mshtml.dll/blank.htm ======================================== C:\Program Files\Ad-Remover\Quarantine: 10 File(s) C:\Program Files\Ad-Remover\Backup: 15 File(s) C:\Ad-Report-CLEAN[1].txt - 30/12/2010 (1076 Byte(s)) C:\Ad-Report-SCAN[1].txt - 30/12/2010 (4431 Byte(s)) End at: 02:19:59, 30/12/2010 ============== E.O.F ==============

Voila le rapport

On va le traquer, le bruler et le manger pour la Saint Sylvestre cet enfoire de cheval.

Cricri

Probleme pointeur qui se fige lorsque je suis sur le net

Probleme pointeur qui se fige lorsque je suis sur le net

Re: Probleme pointeur qui se fige lorsque je suis sur le net

Re: Probleme pointeur qui se fige lorsque je suis sur le net

Re: Probleme pointeur qui se fige lorsque je suis sur le net

Re: Probleme pointeur qui se fige lorsque je suis sur le net

Re: Probleme pointeur qui se fige lorsque je suis sur le net

Re: Probleme pointeur qui se fige lorsque je suis sur le net

Re: Probleme pointeur qui se fige lorsque je suis sur le net

Re: Probleme pointeur qui se fige lorsque je suis sur le net

Re: Probleme pointeur qui se fige lorsque je suis sur le net

Re: Probleme pointeur qui se fige lorsque je suis sur le net

Re: Probleme pointeur qui se fige lorsque je suis sur le net

Re: Probleme pointeur qui se fige lorsque je suis sur le net

Re: Probleme pointeur qui se fige lorsque je suis sur le net

Re: Probleme pointeur qui se fige lorsque je suis sur le net

Sujets similaires

Qui est en ligne