Voila de la lecture pour la semaine...lol
ComboScan v20070306.20 run by BERNARDO on 2007-03-11 at 00:40:13
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- System Restore --------------------------------------------------------------
Successfully created ComboScan Restore Point.
Performed disk cleanup.
-- HijackThis (run as BERNARDO.exe) --------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 00:42:43, on 11/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\vsnpstd3.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\ZoneLabs\isafe.exe
C:\Documents and Settings\BERNARDO\Bureau\comboscan.exe
C:\PROGRA~1\HIJACK~2\BERNARDO.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.f1live.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AutoComplete Service (Autocomplete) - Acesoft - C:\Program Files\Acesoft\Tracks Eraser Pro\delautocomp.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINDOWS\system32\ZoneLabs\isafe.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: Groove Installer Service (GrooveInstallerService) - Unknown owner - c:\Program Files\Groove Networks\Groove\Bin\GrooveInstallerService.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
-- File Associations -----------------------------------------------------------
.bat - batfile - "%1" %*
.chm - chm.file - "C:\WINDOWS\hh.exe" %1
.cmd - cmdfile - "%1" %*
.com - comfile - "%1" %*
.exe - exefile - "%1" %*
.hlp - hlpfile - %SystemRoot%\System32\winhlp32.exe %1
.inf - inffile - %SystemRoot%\System32\NOTEPAD.EXE %1
.ini - inifile - %SystemRoot%\System32\NOTEPAD.EXE %1
.js - JSFile - %SystemRoot%\System32\WScript.exe "%1" %*
.lnk - lnkfile - {00021401-0000-0000-C000-000000000046}
.pif - piffile - "%1" %*
.reg - regfile - regedit.exe "%1"
[COLOR=red].scr - AutoCADScriptFile - "C:\WINDOWS\notepad.exe" "%1"[/COLOR]
.txt - txtfile - %SystemRoot%\system32\NOTEPAD.EXE %1
.vbs - VBSFile - %SystemRoot%\System32\WScript.exe "%1" %*
-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------
3S alcan5wn (Alcatel SpeedTouch USB ADSL PPP Networking Driver (NDISWAN)) - C:\WINDOWS\system32\drivers\alcan5wn.sys
3S alcaudsl (Alcatel Speed Touch ADSL Modem ATM Transport) - C:\WINDOWS\system32\drivers\alcaudsl.sys
3R Arp1394 (Protocole client ARP 1394) - C:\WINDOWS\system32\drivers\arp1394.sys
3R ati2mtag - C:\WINDOWS\system32\drivers\ati2mtag.sys
1R AVG Anti-Spyware Driver - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys
1R AvgAsCln (AVG Anti-Spyware Clean Driver) - C:\WINDOWS\system32\drivers\AvgAsCln.sys
3S CCDECODE (Décodeur sous-titre fermé) - C:\WINDOWS\system32\drivers\CCDECODE.sys
2R CdaC15BA - C:\WINDOWS\system32\drivers\CDAC15BA.SYS
3S DTVFW (DVB-T USB adapter firmware) - C:\WINDOWS\system32\drivers\dtvfw.sys
3S HdAudAddService (Pilote de fonction Microsoft UAA pour Service High Definition Audio) - C:\WINDOWS\system32\drivers\Hdaudio.sys
3R HDAudBus (Pilote de bus Microsoft UAA pour High Definition Audio) - C:\WINDOWS\system32\drivers\Hdaudbus.sys
3S HidUsb (Pilote de classe HID Microsoft) - C:\WINDOWS\system32\drivers\hidusb.sys
3S HPZid412 (IEEE-1284.4 Driver HPZid412) - C:\WINDOWS\system32\drivers\HPZid412.sys
3S HPZipr12 (Print Class Driver for IEEE-1284.4 HPZipr12) - C:\WINDOWS\system32\drivers\HPZipr12.sys
3S HPZius12 (USB to IEEE-1284.4 Translation Driver HPZius12) - C:\WINDOWS\system32\drivers\HPZius12.sys
0R iaStor - C:\WINDOWS\system32\drivers\iaStor.sys
3R IntcAzAudAddService (Service for Realtek HD Audio (WDM)) - C:\WINDOWS\system32\drivers\RtkHDAud.sys
1R intelppm (Pilote de processeur Intel) - C:\WINDOWS\system32\drivers\intelppm.sys
3R LVUSBSta (Logitech USB Monitor Filter) - C:\WINDOWS\system32\drivers\LVUSBSta.sys
3S MPE (Filtre BDA MPE) - C:\WINDOWS\system32\drivers\MPE.sys
3S MSTEE (Convertisseur en T/site-à-site de répartition Microsoft) - C:\WINDOWS\system32\drivers\MSTEE.sys
3S NABTSFEC (Codec NABTS/FEC VBI) - C:\WINDOWS\system32\drivers\NABTSFEC.sys
3S NdisIP (Connection TV/vidéo Microsoft) - C:\WINDOWS\system32\drivers\NdisIP.sys
3R NIC1394 (Pilote réseau 1394) - C:\WINDOWS\system32\drivers\nic1394.sys
3S Nokia USB Generic - C:\WINDOWS\system32\drivers\nmwcdc.sys
3S Nokia USB Modem - C:\WINDOWS\system32\drivers\nmwcdcm.sys
3S Nokia USB Phone Parent - C:\WINDOWS\system32\drivers\nmwcd.sys
0R nvatabus - C:\WINDOWS\system32\drivers\nvatabus.sys
0R nvraid - C:\WINDOWS\system32\drivers\nvraid.sys
0R ohci1394 (Contrôleur hôte Texas Instruments IEEE 1394 compatible OHCI (Open Host Controller Interface)) - C:\WINDOWS\system32\drivers\ohci1394.sys
3S PID_0920 (Logitech QuickCam Express(PID_0920)) - C:\WINDOWS\system32\drivers\LV532AV.SYS
3R psa500 (Sound Agent 2 for Audio Set (WDM)) - C:\WINDOWS\system32\drivers\psa500.sys
3R QsndEnum (QSound Virtual Audio Devices Bus Enumerator) - C:\WINDOWS\system32\drivers\QsndEnum.sys
3R RTL8023xp (Realtek 10/100/1000 NIC Family all in one NDIS XP Driver) - C:\WINDOWS\system32\drivers\Rtlnicxp.sys
3S rtl8139 (Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C)) - C:\WINDOWS\system32\drivers\RTL8139.sys
0R sfdrv01 (StarForce Protection Environment Driver (version 1.x)) - C:\WINDOWS\system32\drivers\sfdrv01.sys
0R sfhlp02 (StarForce Protection Helper Driver (version 2.x)) - C:\WINDOWS\system32\drivers\sfhlp02.sys
0R sfsync02 (StarForce Protection Synchronization Driver (version 2.x)) - C:\WINDOWS\system32\drivers\sfsync02.sys
0R sfvfs02 (StarForce Protection VFS Driver (version 2.x)) - C:\WINDOWS\system32\drivers\sfvfs02.sys
0R SiSRaid2 - C:\WINDOWS\system32\drivers\SiSRaid2.sys
3S SLIP (Détrameur décalage BDA) - C:\WINDOWS\system32\drivers\SLIP.sys
3R smserial - C:\WINDOWS\system32\drivers\smserial.sys
3R SNPSTD3 (USB PC Camera (SNPSTD3)) - C:\WINDOWS\system32\drivers\snpstd3.sys
0R srescan - C:\WINDOWS\system32\ZoneLabs\srescan.sys
3S streamip (BDA IPSink) - C:\WINDOWS\system32\drivers\StreamIP.sys
3R SynTP (Synaptics TouchPad Driver) - C:\WINDOWS\system32\drivers\SynTP.sys
2R UacFlt (Philips Composite Class Filter Driver) - C:\WINDOWS\system32\drivers\uacbflt.sys
3R usbaudio (Pilote USB audio (WDM)) - C:\WINDOWS\system32\drivers\USBAUDIO.sys
3R usbccgp (Pilote parent générique USB Microsoft) - C:\WINDOWS\system32\drivers\usbccgp.sys
3S usbdtv (DVB-T TV Tuner) - C:\WINDOWS\system32\drivers\usbdtv.sys
3R usbehci (Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0) - C:\WINDOWS\system32\drivers\usbehci.sys
3S usbprint (Classe d'imprimantes USB Microsoft) - C:\WINDOWS\system32\drivers\usbprint.sys
3S usbscan (Pilote de scanneur USB) - C:\WINDOWS\system32\drivers\usbscan.sys
3S USBSTOR (Pilote de stockage de masse USB) - C:\WINDOWS\system32\drivers\USBSTOR.SYS
1R VET-FILT (VET File System Filter) - C:\WINDOWS\system32\drivers\vet-filt.sys
1R VET-REC (VET File System Recognizer) - C:\WINDOWS\system32\drivers\vet-rec.sys
1R VETFDDNT (VET Floppy Boot Sector Monitor) - C:\WINDOWS\system32\drivers\vetfddnt.sys
1R VETMONNT (VET File and Macro Monitor) - C:\WINDOWS\system32\drivers\vetmonnt.sys
0R viamraid - C:\WINDOWS\system32\drivers\viamraid.sys
1R vsdatant - C:\WINDOWS\system32\vsdatant.sys
3R w29n51 (Pilote de carte de connexion réseau Intel(R) PRO/Wireless 2200BG pour Windows XP) - C:\WINDOWS\system32\drivers\w29n51.sys
1R WmiAcpi (Interface de gestion Microsoft Windows pour ACPI) - C:\WINDOWS\system32\drivers\wmiacpi.sys
4S WS2IFSL (Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0) - C:\WINDOWS\system32\drivers\ws2ifsl.sys
3S WSTCODEC (Codec Teletext standard) - C:\WINDOWS\system32\drivers\WSTCODEC.SYS
3S WudfPf (Windows Driver Foundation - User-mode Driver Framework Platform Driver) - C:\WINDOWS\system32\drivers\WudfPf.sys
3S WudfRd (Windows Driver Foundation - User-mode Driver Framework Reflector) - C:\WINDOWS\system32\drivers\WudfRd.sys
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
3S aspnet_state (ASP.NET State Service) - C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
2R Ati HotKey Poller - C:\WINDOWS\system32\Ati2evxx.exe
3S Autocomplete (AutoComplete Service) - C:\Program Files\Acesoft\Tracks Eraser Pro\delautocomp.exe
2R AVG Anti-Spyware Guard - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
4S C-DillaCdaC11BA - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
3R CAISafe (CA ISafe) - C:\WINDOWS\system32\ZoneLabs\isafe.exe
2R Diskeeper - "C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe"
2S Fax - C:\WINDOWS\system32\fxssvc.exe
3S GrooveInstallerService (Groove Installer Service) - c:\Program Files\Groove Networks\Groove\Bin\GrooveInstallerService.exe
3S NBService - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
3S NMIndexingService - "C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe"
2R O&O Defrag - C:\WINDOWS\system32\oodag.exe
3S ose (Office Source Engine) - "C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE"
3S Pml Driver HPZ12 - C:\WINDOWS\system32\HPZipm12.exe
3S ServiceLayer - "C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe"
2S UPnPDevService -
2R UxTuneUp (Extension de conception TuneUp) - C:\WINDOWS\System32\svchost.exe -k netsvcs
2R vsmon (TrueVector Internet Monitor) - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service
-- Scheduled Tasks -------------------------------------------------------------
2007-03-11 00:36:01 260 --a------ C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job<VRIFIE~1.JOB>
2007-03-11 00:00:00 354 --a------ C:\WINDOWS\Tasks\HPpromotions psc 2350 series.job<HPPROM~1.JOB>
2007-03-06 08:17:28 414 --a------ C:\WINDOWS\Tasks\Maintenance en 1 clic.job<MAINTE~1.JOB>
2007-02-27 20:53:02 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job<APPLES~1.JOB>
-- Files created between 2007-02-11 and 2007-03-11 -----------------------------
2007-03-09 22:28:37 0 d-------- C:\Pipe_Dsn
2007-03-09 22:23:45 0 d-------- C:\Motademo
2007-03-09 22:23:24 286720 -----n--- C:\WINDOWS\Setup1.exe
2007-03-09 22:23:22 73216 --a------ C:\WINDOWS\ST6UNST.EXE
2007-03-09 17:50:57 0 d--hs---- C:\Diskeeper<DISKEE~1>
2007-03-09 09:27:10 0 d-------- C:\Documents and Settings\All Users\Application Data\Diskeeper Corporation<DISKEE~1>
2007-03-09 09:21:00 0 d-------- C:\Program Files\Diskeeper Corporation<DISKEE~1>
2007-03-02 17:43:06 0 d-------- C:\Documents and Settings\BERNARDO\Application Data\Media Player Classic<MEDIAP~1>
2007-03-02 17:37:48 217088 --a------ C:\WINDOWS\system32\yv12vfw.dll
2007-03-02 17:37:48 1565480 --a------ C:\WINDOWS\system32\wmv9vcm.dll
2007-03-02 17:37:47 180224 --a------ C:\WINDOWS\system32\xvidvfw.dll
2007-03-02 17:37:47 765952 --a------ C:\WINDOWS\system32\xvidcore.dll
2007-03-02 17:37:46 200704 --a------ C:\WINDOWS\system32\ssldivx.dll
2007-03-02 17:37:46 3596288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2007-03-02 17:37:45 1044480 --a------ C:\WINDOWS\system32\libdivx.dll
2007-03-02 17:37:45 196608 --a------ C:\WINDOWS\system32\dtu100.dll
2007-03-02 17:37:45 73728 --a------ C:\WINDOWS\system32\dpl100.dll
2007-03-02 17:37:43 639066 --a------ C:\WINDOWS\system32\divx.dll
2007-03-02 17:37:42 10752 --a------ C:\WINDOWS\system32\ff_vfw.dll
2007-03-02 17:37:39 0 d-------- C:\Program Files\K-Lite Codec Pack<K-LITE~1>
2007-02-26 02:52:44 0 d-------- C:\Program Files\xp-AntiSpy<XP-ANT~1>
2007-02-25 01:09:09 0 d-------- C:\Program Files\Hijackthis Version Française<HIJACK~1>
2007-02-24 17:59:57 28672 --a------ C:\WINDOWS\system32\drivers\CO_Mon.sys
2007-02-24 15:42:52 0 d-------- C:\WINDOWS\system32\ActiveScan<ACTIVE~1>
2007-02-24 02:22:58 0 d-------- C:\WINDOWS\BDOSCAN8
2007-02-24 00:22:07 0 d-------- C:\fixwareout<FIXWAR~1>
2007-02-23 15:01:50 0 d-------- C:\Program Files\Registry Mechanic<REGIST~1>
2007-02-22 21:31:16 5242880 --a------ C:\Documents and Settings\BERNARDO\ntuser.dat
2007-02-22 15:46:04 335 --a------ C:\WINDOWS\mozregistry.dat<MOZREG~1.DAT>
2007-02-21 23:54:57 0 d-------- C:\Documents and Settings\All Users\Application Data\SecTaskMan<SECTAS~1>
2007-02-21 23:54:38 0 d-------- C:\Program Files\Security Task Manager<SECURI~1>
2007-02-21 20:31:44 0 d-------- C:\Documents and Settings\BERNARDO\.housecall6.6<HOUSEC~1.6>
2007-02-17 19:40:13 0 d-------- C:\Documents and Settings\All Users\Application Data\Nero
2007-02-17 19:40:12 0 d-------- C:\Program Files\Nero
2007-02-17 12:42:53 0 d-------- C:\Program Files\PACK TPS& C+<PACKTP~1>
2007-02-16 23:23:25 0 d-------- C:\Documents and Settings\All Users\Application Data\Adobe
2007-02-13 22:51:20 0 d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy<SPYBOT~1>
2007-02-13 18:55:40 224256 --a------ C:\WINDOWS\system32\AutoFAT.exe
2007-02-13 18:55:32 185344 --a------ C:\WINDOWS\system32\AutoNTFS.exe
-- Find3M Report ---------------------------------------------------------------
2007-03-10 22:27:42 0 d-------- C:\Documents and Settings\BERNARDO\Application Data\Skype
2007-03-10 18:37:00 0 d-------- C:\Program Files\Mozilla Firefox<MOZILL~1>
2007-03-09 16:59:00 0 d-------- C:\Program Files\eMule
2007-03-09 13:42:05 453768 --a------ C:\WINDOWS\system32\perfh00C.dat
2007-03-09 13:42:05 67264 --a------ C:\WINDOWS\system32\perfc00C.dat
2007-02-26 13:19:15 0 d---s---- C:\Documents and Settings\BERNARDO\Application Data\Microsoft<MICROS~1>
2007-02-24 11:36:29 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1>
2007-02-24 09:48:59 0 d-------- C:\Program Files\Fichiers communs<FICHIE~1>
2007-02-24 09:46:58 0 d-------- C:\Program Files\TrackMaker<TRACKM~1>
2007-02-24 09:45:42 0 d-------- C:\Program Files\Fichiers communs\Microsoft Shared<MICROS~1>
2007-02-18 10:18:48 0 d-------- C:\Documents and Settings\BERNARDO\Application Data\Adobe
2007-02-17 20:13:42 0 d-------- C:\Documents and Settings\BERNARDO\Application Data\Ahead
2007-02-17 19:42:05 0 d-------- C:\Program Files\Fichiers communs\Ahead
2007-02-17 18:46:56 0 d-------- C:\Program Files\Fichiers communs\Adobe
2007-02-16 23:12:33 0 d-------- C:\Program Files\Google
2007-02-16 09:26:10 0 d-------- C:\Documents and Settings\BERNARDO\Application Data\PTC
2007-02-14 10:20:14 0 d-------- C:\Program Files\Raccourcis de programmes<RACCOU~1>
2007-02-13 20:55:38 0 d-------- C:\Program Files\QuickTime<QUICKT~1>
2007-02-12 16:43:48 0 d-------- C:\Documents and Settings\BERNARDO\Application Data\MailWasherPro<MAILWA~1>
2007-02-02 09:25:29 0 d-------- C:\Documents and Settings\BERNARDO\Application Data\AdobeUM
2007-02-02 09:25:21 0 d-------- C:\Program Files\Fichiers communs\Adobe(2)
2007-01-29 09:58:06 60416 -----n--- C:\WINDOWS\system32\tzchange.exe
2007-01-28 10:08:08 0 d-------- C:\Documents and Settings\BERNARDO\Application Data\Azureus
2007-01-24 01:39:59 0 d-------- C:\Program Files\VideoLAN
2007-01-19 13:16:49 0 d-------- C:\Program Files\Logitech
2007-01-18 11:23:33 0 d-------- C:\Program Files\adslTV
2007-01-13 12:12:04 0 d-------- C:\Program Files\Skype
2007-01-13 12:08:07 0 d-------- C:\Program Files\Fichiers communs\Skype
2007-01-12 09:27:42 232960 --a------ C:\WINDOWS\system32\webcheck.dll
2007-01-12 09:27:42 51712 -----n--- C:\WINDOWS\system32\msfeedsbs.dll<MSFEED~1.DLL>
2007-01-12 09:27:42 458752 -----n--- C:\WINDOWS\system32\msfeeds.dll
2007-01-12 09:27:42 6054400 --a------ C:\WINDOWS\system32\ieframe.dll
2007-01-08 19:04:54 105984 --a------ C:\WINDOWS\system32\url.dll
2007-01-08 19:04:08 102400 --a------ C:\WINDOWS\system32\occache.dll
2007-01-08 19:02:04 266752 --a------ C:\WINDOWS\system32\iertutil.dll
2007-01-08 19:02:04 44544 --a------ C:\WINDOWS\system32\iernonce.dll
2007-01-08 19:02:02 384000 --a------ C:\WINDOWS\system32\iedkcs32.dll
2007-01-08 19:02:02 383488 -----n--- C:\WINDOWS\system32\ieapfltr.dll
2007-01-08 19:02:02 161792 --a------ C:\WINDOWS\system32\ieakui.dll
2007-01-08 19:02:02 230400 --a------ C:\WINDOWS\system32\ieaksie.dll
2007-01-08 19:02:02 153088 --a------ C:\WINDOWS\system32\ieakeng.dll
2007-01-08 19:01:14 17408 --a------ C:\WINDOWS\system32\corpol.dll
2007-01-08 19:00:48 124928 --a------ C:\WINDOWS\system32\advpack.dll
2007-01-08 18:08:14 56832 --a------ C:\WINDOWS\system32\ie4uinit.exe
2007-01-08 18:08:10 13824 --a------ C:\WINDOWS\system32\ieudinit.exe
2006-12-20 19:29:38 1021504 --a------ C:\WINDOWS\system32\vete.dll
2006-12-19 22:49:47 135168 --a------ C:\WINDOWS\system32\shsvcs.dll
2006-12-19 19:17:50 334336 --a------ C:\WINDOWS\system32\wiaservc.dll
-- Registry Dump ---------------------------------------------------------------
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"SynTPEnh"="C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe"
"Zone Labs Client"="\"C:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe\""
"snpstd3"="C:\\WINDOWS\\vsnpstd3.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Update Service"="C:\\PROGRA~1\\FICHIE~1\\TEKNUM~1\\update.exe /startup"
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
"Skype"="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\" /nosplash /minimized"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"ATIPTA"="C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe"
"Raccourci vers la page des propriétés de High Definition Audio"="HDAShCut.exe"
"HP Component Manager"="\"C:\\Program Files\\HP\\hpcoretech\\hpcmpmgr.exe\""
"HP Software Update"="C:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe"
"SMSERIAL"="sm56hlpr.exe"
"PCSuiteTrayApplication"="C:\\PROGRA~1\\Nokia\\NOKIAP~1\\LAUNCH~1.EXE -startup"
"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"
"AlcWzrd"="ALCWZRD.EXE"
"SoundMan"="SOUNDMAN.EXE"
"LVCOMSX"="C:\\WINDOWS\\system32\\LVCOMSX.EXE"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_09\\bin\\jusched.exe\""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"QveCtl2Tray"="C:\\Program Files\\Philips\\Sound Agent 2\\mc500cpl.exe"
"Alcmtr"="ALCMTR.EXE"
"NeroFilterCheck"="C:\\Program Files\\Fichiers communs\\Ahead\\Lib\\NeroCheck.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=dword:00000000
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0
WudfServiceGroup REG_MULTI_SZ WUDFSvc\0\0
HKLM\software\Microsoft\Windows NT\CurrentVersion\Svchost *netsvcs*
UxTuneUp
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b45a689d-2ee0-11db-a162-0013cef1caab}]
-- End of ComboScan: finished at 2007-03-11 at 00:44:25
------------------------
ComboScan v20070306.20 run by BERNARDO on 2007-03-11 at 00:40:13
Supplementary logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------
-- System Information ----------------------------------------------------------
Microsoft Windows XP Édition familiale (build 2600) SP 2.0
Architecture: X86; Language: French
CPU 0: Intel(R) Pentium(R) M processor 1.60GHz
Percentage of Memory in Use: 48%
Physical Memory (total/avail): 1023.36 MiB / 524.15 MiB
Pagefile Memory (total/avail): 2459.82 MiB / 2148.64 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1976.47 MiB
C: is Fixed (NTFS) - 74.53 GiB total, 34.41 GiB free.
D: is CDROM (No Media)
-- Security Center -------------------------------------------------------------
AUOptions is set to notify before download.
Windows Internal Firewall is disabled.
FirstRunDisabled is set.
FW: ZoneAlarm Security Suite Firewall v6.5.737.000 (Zone Labs, Inc.)
AV: ZoneAlarm Security Suite Antivirus v6.5.737.000 (Zone Labs, Inc.)
-- Environment Variables -------------------------------------------------------
ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\BERNARDO\Application Data
CLASSPATH=.;C:\Program Files\Java\jre1.5.0_09\lib\ext\QTJava.zip
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Fichiers communs
COMPUTERNAME=NOM-54A0EBD2CC3
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\BERNARDO
