bonjours et bonne annee a vous .
après avoir télécharger un keyloger en pansent que c 'étais une mise a jours de flash player mon compte aion ce trouve pirater et un programme bot l'utilise .
j'ai trouver un dll qui c 'étais mi dans les programme de démarrage et l'ai supprimer j'aimerais savoir si y reste des trace de ce programme et si il a pas engendrer d'autre problèmes . merci voici une copie de l'adresse du programme après suppression .

le rapport malwayre na rien donner je vous poste les rapport DDS ci dessous

DDS (Ver_09-05-14.01) - NTFSx86
Run by Admin at 19:58:15,04 on 01/01/2010
Internet Explorer: 7.0.6002.18005 BrowserJavaVersion: 1.6.0_17
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3582.2661 [GMT 1]

AV: ESET Smart Security 3.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
SP: ESET Smart Security 3.0 *enabled* (Updated) {E5E70D32-0101-4B98-A4D6-D1D15C3BB448}
FW: Pare-feu personnel d'ESET *enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Windows\system32\mqsvc.exe
C:\Windows\System32\TUProgSt.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\mqtgsvc.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\rundll32.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Saitek\SD6\Software\ProfilerU.exe
C:\Program Files\Saitek\SD6\Software\SaiMfd.exe
C:\Program Files\n52te\razerhid.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\n52te\razertra.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\Admin\Downloads\dds.scr
C:\Windows\system32\conime.exe

============== Pseudo HJT Report ===============

BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [ccleaner] "c:\program files\ccleaner\CCleaner.exe" /AUTO
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [egui] "c:\program files\eset\eset smart security\egui.exe" /hide /waitservice
mRun: [ProfilerU] c:\program files\saitek\sd6\software\ProfilerU.exe
mRun: [SaiMfd] c:\program files\saitek\sd6\software\SaiMfd.exe
mRun: [Jomantha] c:\program files\n52te\razerhid.exe
mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\ipoint.exe"
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab

================= FIREFOX ===================

FF - ProfilePath - c:\users\admin\appdata\roaming\mozilla\firefox\profiles\yhwnz0c6.default\
FF - component: c:\users\admin\appdata\roaming\mozilla\firefox\profiles\yhwnz0c6.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll
FF - plugin: c:\users\admin\appdata\roaming\mozilla\firefox\profiles\yhwnz0c6.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}\plugins\nphardwaredetection.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\

---- FIREFOX POLICIES ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000

============= SERVICES / DRIVERS ===============

R2 ekrn;Eset Service;c:\program files\eset\eset smart security\ekrn.exe [2008-8-18 468224]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [2009-11-22 604488]
R3 JmtFltr;n52te;c:\windows\system32\drivers\JmtFltr.sys [2009-8-17 48896]
R3 vhidmini;Virtual Hid Device;c:\windows\system32\drivers\vhidmini.sys [2009-8-17 12672]
S3 FontCache;Service de cache de police Windows;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-21 21504]
S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2009-1-24 216232]
S3 Mo3Fltr;MMO Mouse;c:\windows\system32\drivers\Mo3Fltr.sys [2009-4-5 11136]
S3 SaiH80C1;SaiH80C1;c:\windows\system32\drivers\SaiH80C1.sys [2009-8-22 136320]

=============== Created Last 30 ================

2009-12-24 06:03 17,412 a------- c:\windows\system32\TUProgSt_20091224-050352.dmp
2009-12-09 00:18 24,064 a------- c:\windows\system32\nshhttp.dll
2009-12-09 00:18 411,648 a------- c:\windows\system32\drivers\http.sys
2009-12-09 00:18 30,720 a------- c:\windows\system32\httpapi.dll
2009-12-08 19:44 377,344 a------- c:\windows\system32\winhttp.dll
2009-12-08 19:44 834,048 a------- c:\windows\system32\wininet.dll
2009-12-08 19:44 78,336 a------- c:\windows\system32\ieencode.dll
2009-12-08 19:43 243,712 a------- c:\windows\system32\rastls.dll

==================== Find3M ====================

2010-01-01 19:57 669,328 a------- c:\windows\system32\perfh00C.dat
2010-01-01 19:57 123,350 a------- c:\windows\system32\perfc00C.dat
2009-12-30 14:55 38,224 a------- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-30 14:54 19,160 a------- c:\windows\system32\drivers\mbam.sys
2009-11-26 19:30 51,200 a------- c:\windows\inf\infpub.dat
2009-11-26 19:29 143,360 a------- c:\windows\inf\infstrng.dat
2009-11-26 19:29 86,016 a------- c:\windows\inf\infstor.dat
2009-11-22 13:29 604,488 a------- c:\windows\system32\TUProgSt.exe
2009-11-22 13:29 361,288 a------- c:\windows\system32\TuneUpDefragService.exe
2009-11-18 17:52 665,600 a------- c:\windows\inf\drvindex.dat
2009-11-16 12:25 17,224 a------- c:\windows\system32\authuitu.dll
2009-11-16 12:25 29,000 a------- c:\windows\system32\uxtuneup.dll
2009-11-02 20:42 195,456 -------- c:\windows\system32\MpSigStub.exe
2009-10-29 10:17 2,048 a------- c:\windows\system32\tzres.dll
2009-10-11 04:17 411,368 a------- c:\windows\system32\deploytk.dll
2009-10-08 22:08 555,520 a------- c:\windows\system32\UIAutomationCore.dll
2009-10-08 22:08 234,496 a------- c:\windows\system32\oleacc.dll
2009-10-08 22:07 4,096 a------- c:\windows\system32\oleaccrc.dll
2008-01-21 09:37 340,236 a------- c:\windows\inf\perflib\040c\perfi.dat
2008-01-21 09:37 340,236 a------- c:\windows\inf\perflib\040c\perfh.dat
2008-01-21 09:37 37,390 a------- c:\windows\inf\perflib\040c\perfd.dat
2008-01-21 09:37 37,390 a------- c:\windows\inf\perflib\040c\perfc.dat
2008-01-21 03:43 174 a--sh--- c:\program files\desktop.ini
2006-11-02 10:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 10:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 10:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 10:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat

============= FINISH: 19:58:52,04 ===============

et le rapport attach ci dessous

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-05-14.01)

Microsoft® Windows Vista™ Édition Familiale Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 12/03/2009 00:04:08
System Uptime: 01/01/2010 19:50:44 (0 hours ago)

Motherboard: ASUSTeK Computer INC. | | P5QL-ASUS-SE
Processor: Intel(R) Core(TM)2 Duo CPU E7400 @ 2.80GHz | LGA775 | 2800/266mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 98 GiB total, 43,749 GiB free.
D: is FIXED (NTFS) - 200 GiB total, 200,339 GiB free.
E: is CDROM (CDFS)

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP231: 31/12/2009 18:00:27 - Windows Update
RP232: 01/01/2010 08:56:09 - Point de contrôle planifié

==== Installed Programs ======================

Adobe Flash Player 10 Plugin
Adobe Flash Player ActiveX
Aion
Archiveur WinRAR
CCleaner (remove only)
CleanUp!
Curse Client
ESET Smart Security
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Java(TM) 6 Update 17
Ma-Config.com
Malwarebytes' Anti-Malware
Microsoft .NET Framework 3.5 Language Pack SP1 - fra
Microsoft .NET Framework 3.5 SP1
Microsoft Application Error Reporting
Microsoft IntelliPoint 7.0
Module linguistique Microsoft .NET Framework 3.5 SP1- fra
Mozilla Firefox (3.0.16)
Mumble and Murmur
n52te Editor
NCsoft Launcher
NVIDIA Drivers
NVIDIA PhysX
Realtek 8169 8168 8101E 8102E Ethernet Driver
Saitek SD6 Programming Software 6.0.10.7
TeamSpeak 2 RC2
TuneUp Utilities 2009
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
World of Warcraft

==== End Of File ===========================

le rapport gmer ma donner que de breve donner peut etre est.ce normal !?
GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-01-01 20:47:02
Windows 6.0.6002 Service Pack 2
Running: gmer.exe; Driver: C:\Users\Admin\AppData\Local\Temp\ugldrpob.sys


---- Kernel code sections - GMER 1.0.15 ----

.text C:\Windows\system32\DRIVERS\nvlddmkm.sys section is writeable [0x8F004340, 0x40AA77, 0xE8000020]

---- User code sections - GMER 1.0.15 ----

.text C:\Program Files\ESET\ESET Smart Security\ekrn.exe[1844] kernel32.dll!SetUnhandledExceptionFilter 76E5A84F 4 Bytes [C2, 04, 00, 00]

---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\Ntfs \Ntfs eamon.sys (Amon monitor/ESET)
AttachedDevice \Driver\tdx \Device\Tcp epfwtdi.sys (Eset Personal Firewall TDI filter/ESET)
AttachedDevice \Driver\tdx \Device\Udp epfwtdi.sys (Eset Personal Firewall TDI filter/ESET)
AttachedDevice \Driver\tdx \Device\RawIp epfwtdi.sys (Eset Personal Firewall TDI filter/ESET)

---- EOF - GMER 1.0.15 ----
merci de votre aide je reste a l'ecoute pour de nouvelle execution a faire .
bonne annee a toutes l'equipe et meilleurs voeux.

Bonjour Yannthor et bonne année à toi.


Vois si tu peux changer tes mots de passe depuis un ordinateur qui est propre (pas le tien) en attendant de voir ce qu'on va peut être trouver.



Vu que tu es sous Vista, tous les outils que je vais te demander d'utiliser doivent être lancés via un clic droit sur l'icône du programme et sélectionne "exécuter en tant qu'administrateur".
DDS est bien, mais j'ai une préférence pour OTL

• Clique ici pour télécharger OTL (de Old Timer) sur ton bureau
  
• Ferme toutes tes fenêtres, puis double clique sur OTL.exe pour le lancer.
  
• Coche Lop Check et Purity check
  
• Sous Custom Scans (en bas), copie/colle ceci
  
  %SYSTEMDRIVE%\*.*
  %PROGRAMFILES%\*.*
  %PROGRAMFILES%\*.
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  netsvcs
  msconfig
  safebootminimal
  safebootnetwork
  activex
  drivers32
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
  
  
• Clique sur le bouton Run Scan en haut à gauche puis patiente quelques instants.
  
  
  
  • A la fin du scan, deux rapports s'ouvriront (OTL.Txt et Extras.Txt). Copie/colle ici l'ensemble des rapports.
  
  PS : Les rapport sont aussi enregistrés sur le bureau et sont longs, essaie de mettre un rapport par message (donc j'attends 2 messages en réponse)

Bonne journée

bonjours grosBébé et merci de t'occuper de mon problèmes pour ce qui est de mais MDP j'utilise le clavier virtuel OSK depuis hier n'ayant pas d'autre pc mais il on déjà changer tout mais mdp auprès de ncsoft donc je peut rein faire a part attendre que ncsoft règle ce problèmes .
grace a tune up utilities 2009 j'ai trouver un Dll chinois qui ce metter en route au démarrage j'ai fait supprimer mais je pense que ça doit pas être aussi facile donc voici les rapport demander.
Extras.txt

OTL Extras logfile created on: 02/01/2010 11:56:09 - Run 1
OTL by OldTimer - Version 3.1.20.1 Folder = C:\Users\Admin\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

3,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 76,00% Memory free
7,00 Gb Paging File | 6,00 Gb Available in Paging File | 88,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 97,66 Gb Total Space | 43,72 Gb Free Space | 44,77% Space Free | Partition Type: NTFS
Drive D: | 200,43 Gb Total Space | 200,34 Gb Free Space | 99,95% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: PC-DE-ADMIN
Current User Name: Admin
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.chm [@ = chm.file] -- "%SystemRoot%\hh.exe" %1
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] -- "%1" %*
chm.file [open] -- "%SystemRoot%\hh.exe" %1
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"AntiVirusDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1AB9051B-170F-4989-A9A8-049ADB374ACF}" = lport=48113 | protocol=17 | dir=in | name=maconfig_udp |
"{8AF68B4E-716E-4558-9E74-B6774D5C0756}" = lport=48113 | protocol=6 | dir=in | name=maconfig_tcp |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{86DF96E5-5EEB-4450-B08E-C44BB44EC62D}" = protocol=6 | dir=in | app=c:\program files\curse\curseclient.exe |
"{9A233832-B48D-4A7C-9960-49ADA16361AF}" = protocol=17 | dir=in | app=c:\program files\ma-config.com\maconfservice.exe |
"{BF4BE6D1-5BF4-4C89-B0E5-CB1426AF5EC0}" = protocol=6 | dir=in | app=c:\program files\ma-config.com\maconfservice.exe |
"{C996755B-128C-44A8-8DC5-7692FB68AB43}" = protocol=17 | dir=in | app=c:\program files\curse\curseclient.exe |
"TCP Query User{1DC3769D-0945-4FB6-913B-AD330C32C6D9}C:\users\public\games\world of warcraft\backgrounddownloader.exe" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\backgrounddownloader.exe |
"TCP Query User{50CBE574-11EA-4529-9EDD-0AA5AB498A97}C:\program files\curse\curseclient.exe" = protocol=6 | dir=in | app=c:\program files\curse\curseclient.exe |
"UDP Query User{1EF3C684-D65F-4282-8016-9C246196752E}C:\users\public\games\world of warcraft\backgrounddownloader.exe" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\backgrounddownloader.exe |
"UDP Query User{62A8B624-8F28-4371-9797-DD1D89F072F4}C:\program files\curse\curseclient.exe" = protocol=17 | dir=in | app=c:\program files\curse\curseclient.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0AC8162B-5175-41D7-B963-8307A40BD456}" = n52te Editor
"{26A24AE4-039D-4CA4-87B4-2F83216014FF}" = Java(TM) 6 Update 17
"{28B8BEE3-1F62-4FCC-A5A7-7641AAFC3BB5}" = Saitek SD6 Programming Software 6.0.10.7
"{36AD5C43-AE4C-4AA5-B85E-5F60BE4BD47E}" = ESET Smart Security
"{3E31821C-7917-367E-938E-E65FC413EA31}" = Microsoft .NET Framework 3.5 Language Pack SP1 - fra
"{401D441E-664B-4B88-9964-48AE4B0BB76E}" = Aion
"{55A29068-F2CE-456C-9148-C869879E2357}" = TuneUp Utilities 2009
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 8168 8101E 8102E Ethernet Driver
"{8AFB8FC4-3EBA-4C67-943F-CF43DB2180F1}" = Ma-Config.com
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{C9FB868B-2086-4EE2-BD4F-BFBA36B131F4}" = NCsoft Launcher
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DD1865F0-AD73-40FB-B23E-1822E02396FF}" = NVIDIA PhysX
"{EF71A531-5B6C-4B20-8D1E-E6379C7FB6D3}" = Microsoft IntelliPoint 7.0
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"CCleaner" = CCleaner (remove only)
"CleanUp!" = CleanUp!
"CurseClient" = Curse Client
"HijackThis" = HijackThis 2.0.2
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 3.5 Language Pack SP1 - fra" = Module linguistique Microsoft .NET Framework 3.5 SP1- fra
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.0.16)" = Mozilla Firefox (3.0.16)
"Mumble" = Mumble and Murmur
"NVIDIA Drivers" = NVIDIA Drivers
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"WinRAR archiver" = Archiveur WinRAR
"World of Warcraft" = World of Warcraft

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 31/12/2009 21:12:55 | Computer Name = PC-de-Admin | Source = Windows Search Service | ID = 3013
Description =

Error - 31/12/2009 21:12:57 | Computer Name = PC-de-Admin | Source = Windows Search Service | ID = 3013
Description =

Error - 31/12/2009 21:12:57 | Computer Name = PC-de-Admin | Source = Windows Search Service | ID = 3013
Description =

Error - 31/12/2009 21:12:57 | Computer Name = PC-de-Admin | Source = Windows Search Service | ID = 3013
Description =

Error - 31/12/2009 21:12:57 | Computer Name = PC-de-Admin | Source = Windows Search Service | ID = 3013
Description =

Error - 31/12/2009 21:12:57 | Computer Name = PC-de-Admin | Source = Windows Search Service | ID = 3013
Description =

Error - 31/12/2009 21:12:57 | Computer Name = PC-de-Admin | Source = Windows Search Service | ID = 3013
Description =

Error - 31/12/2009 21:12:57 | Computer Name = PC-de-Admin | Source = Windows Search Service | ID = 3013
Description =

Error - 31/12/2009 22:36:27 | Computer Name = PC-de-Admin | Source = Windows Search Service | ID = 3013
Description =

Error - 01/01/2010 15:06:37 | Computer Name = PC-de-Admin | Source = Perflib | ID = 1010
Description =

[ System Events ]
Error - 24/12/2009 08:40:39 | Computer Name = PC-de-Admin | Source = Service Control Manager | ID = 7026
Description =

Error - 26/12/2009 07:27:23 | Computer Name = PC-de-Admin | Source = Service Control Manager | ID = 7026
Description =

Error - 27/12/2009 06:31:50 | Computer Name = PC-de-Admin | Source = Service Control Manager | ID = 7026
Description =

Error - 28/12/2009 09:11:27 | Computer Name = PC-de-Admin | Source = Service Control Manager | ID = 7026
Description =

Error - 29/12/2009 10:28:38 | Computer Name = PC-de-Admin | Source = Service Control Manager | ID = 7026
Description =

Error - 30/12/2009 11:00:55 | Computer Name = PC-de-Admin | Source = Service Control Manager | ID = 7026
Description =

Error - 31/12/2009 11:43:35 | Computer Name = PC-de-Admin | Source = Service Control Manager | ID = 7026
Description =

Error - 01/01/2010 14:52:44 | Computer Name = PC-de-Admin | Source = Service Control Manager | ID = 7026
Description =

Error - 01/01/2010 22:02:47 | Computer Name = PC-de-Admin | Source = Service Control Manager | ID = 7026
Description =

Error - 02/01/2010 06:38:33 | Computer Name = PC-de-Admin | Source = Service Control Manager | ID = 7026
Description =

[ TuneUp Events ]
Error - 28/11/2009 12:18:43 | Computer Name = PC-de-Admin | Source = TuneUp Program Statistics | ID = 131840
Description = SQL Error: near "anti": syntax error; when executing SQL: INSERT INTO
ActiveApps (Started, Exe, ProcID, Resumed) VALUES ('2009-11-28 17:18:43', '\device\harddiskvolume1\program
files\malwarebytes' anti-malware\mbam.exe','4040',0)

Error - 27/12/2009 15:35:11 | Computer Name = PC-de-Admin | Source = TuneUp Program Statistics | ID = 131840
Description = SQL Error: near "anti": syntax error; when executing SQL: INSERT INTO
ActiveApps (Started, Exe, ProcID, Resumed) VALUES ('2009-12-27 20:35:11', '\device\harddiskvolume1\program
files\malwarebytes' anti-malware\mbam.exe','2872',0)

Error - 27/12/2009 15:35:31 | Computer Name = PC-de-Admin | Source = TuneUp Program Statistics | ID = 131840
Description = SQL Error: near "anti": syntax error; when executing SQL: INSERT INTO
ActiveApps (Started, Exe, ProcID, Resumed) VALUES ('2009-12-27 20:35:31', '\device\harddiskvolume1\programdata\malwarebytes\malwarebytes'
anti-malware\mbam-setup.exe','3268',0)

Error - 27/12/2009 15:35:36 | Computer Name = PC-de-Admin | Source = TuneUp Program Statistics | ID = 131840
Description = SQL Error: near "anti": syntax error; when executing SQL: INSERT INTO
ActiveApps (Started, Exe, ProcID, Resumed) VALUES ('2009-12-27 20:35:36', '\device\harddiskvolume1\program
files\malwarebytes' anti-malware\mbam.exe','3992',0)

Error - 31/12/2009 21:06:17 | Computer Name = PC-de-Admin | Source = TuneUp Program Statistics | ID = 131840
Description = SQL Error: near "anti": syntax error; when executing SQL: INSERT INTO
ActiveApps (Started, Exe, ProcID, Resumed) VALUES ('2010-01-01 02:06:17', '\device\harddiskvolume1\program
files\malwarebytes' anti-malware\mbam.exe','2368',0)

Error - 31/12/2009 21:13:28 | Computer Name = PC-de-Admin | Source = TuneUp Program Statistics | ID = 131840
Description = SQL Error: near "anti": syntax error; when executing SQL: INSERT INTO
ActiveApps (Started, Exe, ProcID, Resumed) VALUES ('2010-01-01 02:13:28', '\device\harddiskvolume1\program
files\malwarebytes' anti-malware\mbam.exe','3068',0)

Error - 31/12/2009 21:13:50 | Computer Name = PC-de-Admin | Source = TuneUp Program Statistics | ID = 131840
Description = SQL Error: near "anti": syntax error; when executing SQL: INSERT INTO
ActiveApps (Started, Exe, ProcID, Resumed) VALUES ('2010-01-01 02:13:50', '\device\harddiskvolume1\programdata\malwarebytes\malwarebytes'
anti-malware\mbam-setup.exe','1204',0)

Error - 31/12/2009 21:13:55 | Computer Name = PC-de-Admin | Source = TuneUp Program Statistics | ID = 131840
Description = SQL Error: near "anti": syntax error; when executing SQL: INSERT INTO
ActiveApps (Started, Exe, ProcID, Resumed) VALUES ('2010-01-01 02:13:55', '\device\harddiskvolume1\program
files\malwarebytes' anti-malware\mbam.exe','3556',0)

Error - 31/12/2009 21:14:46 | Computer Name = PC-de-Admin | Source = TuneUp Program Statistics | ID = 131840
Description = SQL Error: near "anti": syntax error; when executing SQL: INSERT INTO
ActiveApps (Started, Exe, ProcID, Resumed) VALUES ('2010-01-01 02:14:46', '\device\harddiskvolume1\program
files\malwarebytes' anti-malware\mbam.exe','452',0)

Error - 01/01/2010 02:15:51 | Computer Name = PC-de-Admin | Source = TuneUp Program Statistics | ID = 131840
Description = SQL Error: near "anti": syntax error; when executing SQL: INSERT INTO
ActiveApps (Started, Exe, ProcID, Resumed) VALUES ('2010-01-01 07:15:51', '\device\harddiskvolume1\program
files\malwarebytes' anti-malware\mbam.exe','3892',0)


< End of report >

voici le 2em rapport OTL.Txt
OTL logfile created on: 02/01/2010 11:56:09 - Run 1
OTL by OldTimer - Version 3.1.20.1 Folder = C:\Users\Admin\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

3,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 76,00% Memory free
7,00 Gb Paging File | 6,00 Gb Available in Paging File | 88,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 97,66 Gb Total Space | 43,72 Gb Free Space | 44,77% Space Free | Partition Type: NTFS
Drive D: | 200,43 Gb Total Space | 200,34 Gb Free Space | 99,95% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: PC-DE-ADMIN
Current User Name: Admin
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010/01/02 11:52:49 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Users\Admin\Desktop\OTL.exe
PRC - [2009/11/22 13:29:57 | 00,604,488 | ---- | M] (TuneUp Software) -- C:\Windows\System32\TUProgSt.exe
PRC - [2009/05/28 16:43:00 | 01,468,296 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft IntelliPoint\ipoint.exe
PRC - [2009/04/11 07:27:45 | 00,125,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mqtgsvc.exe
PRC - [2009/04/11 07:27:36 | 02,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009/03/27 23:03:00 | 00,207,392 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvvsvc.exe
PRC - [2008/08/18 12:25:10 | 00,468,224 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe
PRC - [2008/08/18 12:23:50 | 01,447,168 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe
PRC - [2008/01/21 03:25:33 | 00,202,240 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnscfg.exe
PRC - [2008/01/21 03:23:32 | 01,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe
PRC - [2007/12/12 10:58:30 | 00,163,840 | ---- | M] (Razer USA Ltd.) -- C:\Program Files\n52te\razerhid.exe
PRC - [2007/12/06 13:20:14 | 00,110,592 | ---- | M] () -- C:\Program Files\n52te\razertra.exe
PRC - [2007/10/02 09:10:46 | 00,131,072 | ---- | M] (Saitek) -- C:\Program Files\Saitek\SD6\Software\SaiMfd.exe
PRC - [2007/10/02 09:10:14 | 00,233,472 | ---- | M] (Saitek) -- C:\Program Files\Saitek\SD6\Software\ProfilerU.exe
PRC - [2006/11/02 13:35:27 | 00,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mqsvc.exe


========== Modules (SafeList) ==========

MOD - [2010/01/02 11:52:49 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Users\Admin\Desktop\OTL.exe
MOD - [2009/04/11 07:21:38 | 01,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - [2009/11/22 13:29:57 | 00,604,488 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\System32\TUProgSt.exe -- (TuneUp.ProgramStatisticsSvc)
SRV - [2009/11/22 13:29:54 | 00,361,288 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\Windows\System32\TuneUpDefragService.exe -- (TuneUp.Defrag)
SRV - [2009/11/16 12:25:48 | 00,029,000 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\System32\uxtuneup.dll -- (UxTuneUp)
SRV - [2009/09/25 02:27:04 | 00,793,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FntCache.dll -- (FontCache)
SRV - [2009/04/11 07:27:45 | 00,125,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\mqtgsvc.exe -- (MSMQTriggers)
SRV - [2009/03/27 23:03:00 | 00,207,392 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Windows\System32\nvvsvc.exe -- (nvsvc)
SRV - [2009/01/24 14:46:50 | 00,216,232 | ---- | M] (CybelSoft) [On_Demand | Stopped] -- C:\Program Files\ma-config.com\maconfservice.exe -- (maconfservice)
SRV - [2008/08/18 12:30:58 | 00,019,200 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv)
SRV - [2008/08/18 12:25:10 | 00,468,224 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn)
SRV - [2008/01/21 03:23:32 | 00,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
SRV - [2006/11/02 13:35:29 | 00,013,312 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\ehome\ehstart.dll -- (ehstart)
SRV - [2006/11/02 13:35:27 | 00,008,704 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\mqsvc.exe -- (MSMQ)


========== Driver Services (SafeList) ==========

DRV - [2009/05/28 16:43:02 | 00,030,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\point32k.sys -- (Point32)
DRV - [2009/03/27 23:03:00 | 07,738,816 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2009/01/24 15:18:00 | 00,014,336 | ---- | M] (CybelSoft) [Kernel | On_Demand | Stopped] -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys -- (driverhardwarev2)
DRV - [2008/08/18 12:27:42 | 00,054,280 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\epfwtdi.sys -- (epfwtdi)
DRV - [2008/08/18 12:27:40 | 00,030,728 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\epfwndis.sys -- (Epfwndis)
DRV - [2008/08/18 12:27:36 | 00,071,688 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\epfw.sys -- (epfw)
DRV - [2008/08/18 12:19:26 | 00,053,256 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\easdrv.sys -- (easdrv)
DRV - [2008/08/18 12:18:26 | 00,039,944 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\eamon.sys -- (eamon)
DRV - [2008/08/06 09:26:08 | 00,124,928 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2008/04/15 08:05:58 | 00,011,136 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Mo3Fltr.sys -- (Mo3Fltr)
DRV - [2008/01/21 03:25:19 | 00,126,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mqac.sys -- (MQAC)
DRV - [2008/01/21 03:23:27 | 00,386,616 | ---- | M] (LSI Corporation, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasr.sys -- (MegaSR)
DRV - [2008/01/21 03:23:27 | 00,149,560 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320)
DRV - [2008/01/21 03:23:27 | 00,031,288 | ---- | M] (LSI Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas)
DRV - [2008/01/21 03:23:26 | 00,101,432 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m)
DRV - [2008/01/21 03:23:26 | 00,074,808 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4)
DRV - [2008/01/21 03:23:26 | 00,040,504 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs)
DRV - [2008/01/21 03:23:25 | 00,300,600 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci)
DRV - [2008/01/21 03:23:25 | 00,089,656 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS)
DRV - [2008/01/21 03:23:24 | 01,122,360 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300)
DRV - [2008/01/21 03:23:24 | 00,118,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel(R)
DRV - [2008/01/21 03:23:24 | 00,079,928 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas)
DRV - [2008/01/21 03:23:23 | 00,235,064 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV)
DRV - [2008/01/21 03:23:23 | 00,130,616 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid)
DRV - [2008/01/21 03:23:23 | 00,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2)
DRV - [2008/01/21 03:23:23 | 00,096,312 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI)
DRV - [2008/01/21 03:23:23 | 00,096,312 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC)
DRV - [2008/01/21 03:23:23 | 00,079,416 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc)
DRV - [2008/01/21 03:23:22 | 00,342,584 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor)
DRV - [2008/01/21 03:23:21 | 00,422,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx)
DRV - [2008/01/21 03:23:21 | 00,102,968 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid)
DRV - [2008/01/21 03:23:21 | 00,045,112 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor)
DRV - [2008/01/21 03:23:20 | 00,238,648 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci)
DRV - [2008/01/21 03:23:00 | 00,020,024 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide)
DRV - [2008/01/21 03:23:00 | 00,019,000 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide)
DRV - [2008/01/21 03:23:00 | 00,017,464 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide)
DRV - [2007/10/05 03:19:24 | 00,035,200 | ---- | M] (Saitek) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SaiBus.sys -- (SaiNtBus)
DRV - [2007/10/05 03:19:24 | 00,014,080 | ---- | M] (Saitek) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SaiMini.sys -- (SaiMini)
DRV - [2007/10/05 03:19:14 | 00,136,320 | ---- | M] (Saitek) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\SaiH80C1.sys -- (SaiH80C1)
DRV - [2007/09/27 13:46:12 | 00,048,896 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\JmtFltr.sys -- (JmtFltr)
DRV - [2007/09/19 16:01:06 | 00,012,672 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vhidmini.sys -- (vhidmini)
DRV - [2006/11/02 10:50:35 | 00,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx)
DRV - [2006/11/02 10:50:35 | 00,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata)
DRV - [2006/11/02 10:50:19 | 00,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960)
DRV - [2006/11/02 10:50:17 | 00,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp)
DRV - [2006/11/02 10:50:11 | 00,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx)
DRV - [2006/11/02 10:50:09 | 00,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid)
DRV - [2006/11/02 10:50:07 | 00,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi)
DRV - [2006/11/02 10:50:05 | 00,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx)
DRV - [2006/11/02 10:50:03 | 00,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3)
DRV - [2006/11/02 10:49:59 | 00,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x)
DRV - [2006/11/02 10:49:56 | 00,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi)
DRV - [2006/11/02 09:25:24 | 00,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM)
DRV - [2006/11/02 09:24:47 | 00,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer)
DRV - [2006/11/02 09:24:46 | 00,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp)
DRV - [2006/11/02 09:24:45 | 00,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo)
DRV - [2006/11/02 09:24:44 | 00,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm)
DRV - [2006/11/02 09:24:44 | 00,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm)
DRV - [2006/11/02 08:36:50 | 00,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi)
DRV - [2006/11/02 07:37:21 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\secdrv.sys -- (secdrv)
DRV - [2006/10/18 06:44:48 | 00,007,680 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.1
FF - prefs.js..extensions.enabledItems: {bb628310-0ab7-11db-9cd8-0800200c9a66}:3.1.1.1


FF - HKLM\software\mozilla\Mozilla Firefox 3.0.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009/12/20 13:42:09 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009/12/20 13:42:09 | 00,000,000 | ---D | M]

[2009/03/12 17:20:53 | 00,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\mozilla\Extensions
[2010/01/01 17:50:39 | 00,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\mozilla\Firefox\Profiles\yhwnz0c6.default\extensions
[2009/03/14 00:51:32 | 00,000,000 | ---D | M] (No name found) -- C:\Users\Admin\AppData\Roaming\mozilla\Firefox\Profiles\yhwnz0c6.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}
[2009/07/15 17:30:53 | 00,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Admin\AppData\Roaming\mozilla\Firefox\Profiles\yhwnz0c6.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2009/12/23 03:27:00 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2009/08/10 22:46:05 | 00,001,516 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-france.xml
[2009/08/10 22:46:05 | 00,000,757 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-france.xml
[2009/08/10 22:46:05 | 00,000,748 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\MediaDICO-fr.xml
[2009/08/10 22:46:05 | 00,001,426 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fr.xml
[2009/08/10 22:46:06 | 00,000,652 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-france.xml

O1 HOSTS File: (761 bytes) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4 - HKLM..\Run: [IntelliPoint] C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Jomantha] C:\Program Files\n52te\razerhid.exe (Razer USA Ltd.)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [ProfilerU] C:\Program Files\Saitek\SD6\Software\ProfilerU.exe (Saitek)
O4 - HKLM..\Run: [SaiMfd] C:\Program Files\Saitek\SD6\Software\SaiMfd.exe (Saitek)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [ccleaner] C:\Program Files\CCleaner\CCleaner.exe (Piriform Ltd)
O4 - HKCU..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (Microsoft Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 22:43:36 | 00,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*

NetSvcs: UxTuneUp - C:\Windows\System32\uxtuneup.dll (TuneUp Software)
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias [2008/01/21 03:34:27 | 00,000,000 | ---D | M]
NetSvcs: Irmon - C:\Windows\System32\irmon.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found


SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SafeBootNet: WudfPf - Driver
SafeBootNet: WudfRd - Driver
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lhacm - C:\Windows\System32\lhacm.acm (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)

========== Files/Folders - Created Within 30 Days ==========

[2010/01/02 11:52:46 | 00,513,536 | ---- | C] (OldTimer Tools) -- C:\Users\Admin\Desktop\OTL.exe
[2009/12/23 03:30:49 | 00,000,000 | ---D | C] -- C:\Users\Admin\Documents\My Aion
[2009/12/23 03:26:59 | 00,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe
[2009/12/23 03:26:59 | 00,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe
[2009/12/23 03:26:59 | 00,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe
[2009/12/09 00:18:22 | 00,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nshhttp.dll
[2009/12/09 00:18:20 | 00,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\httpapi.dll
[2009/12/08 19:44:11 | 00,180,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2009/12/08 19:44:09 | 00,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieencode.dll
[2009/12/08 19:44:08 | 00,380,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2009/12/08 19:43:54 | 00,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rastls.dll

========== Files - Modified Within 30 Days ==========

[2010/01/02 11:55:39 | 01,048,576 | ---- | M] () -- C:\Users\Admin\NTUSER.DAT
[2010/01/02 11:52:49 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Users\Admin\Desktop\OTL.exe
[2010/01/02 11:43:06 | 01,470,810 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2010/01/02 11:43:06 | 00,669,328 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2010/01/02 11:43:06 | 00,586,980 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010/01/02 11:43:06 | 00,123,350 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2010/01/02 11:43:06 | 00,101,052 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010/01/02 11:42:45 | 00,000,530 | ---- | M] () -- C:\Windows\tasks\Maintenance en 1 clic.job
[2010/01/02 11:36:52 | 00,003,712 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/01/02 11:36:52 | 00,003,712 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/01/02 11:36:48 | 00,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010/01/02 11:36:47 | 00,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010/01/02 11:36:44 | 37,571,70688 | -HS- | M] () -- C:\hiberfil.sys
[2010/01/02 05:52:53 | 00,524,288 | -HS- | M] () -- C:\Users\Admin\NTUSER.DAT{785120df-c577-11de-af21-002354f30e40}.TMContainer00000000000000000001.regtrans-ms
[2010/01/02 05:52:53 | 00,065,536 | -HS- | M] () -- C:\Users\Admin\NTUSER.DAT{785120df-c577-11de-af21-002354f30e40}.TM.blf
[2010/01/01 23:50:04 | 02,931,401 | -H-- | M] () -- C:\Users\Admin\AppData\Local\IconCache.db
[2010/01/01 19:20:07 | 00,284,915 | ---- | M] () -- C:\Users\Admin\Desktop\gmer.zip
[2010/01/01 07:13:17 | 00,000,399 | ---- | M] () -- C:\Users\Admin\Documents\aionmemo_27ecb8cf.dat
[2009/12/30 14:55:24 | 00,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2009/12/30 14:54:58 | 00,019,160 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2009/12/24 06:03:53 | 00,017,412 | ---- | M] () -- C:\Windows\System32\TUProgSt_20091224-050352.dmp
[2009/12/23 22:38:23 | 00,000,809 | ---- | M] () -- C:\Users\Public\Desktop\World of Warcraft.lnk
[2009/12/21 13:55:38 | 00,000,793 | ---- | M] () -- C:\Users\Public\Desktop\Mumble (Backwards Compatible).lnk
[2009/12/21 13:55:38 | 00,000,776 | ---- | M] () -- C:\Users\Public\Desktop\Mumble.lnk
[2009/12/21 13:53:31 | 12,852,912 | ---- | M] () -- C:\Users\Admin\Desktop\Mumble-1.2.0.exe
[2009/12/15 11:24:48 | 00,293,376 | ---- | M] () -- C:\Users\Admin\Desktop\gmer.exe
[2009/12/12 11:44:41 | 00,000,680 | ---- | M] () -- C:\Users\Admin\AppData\Local\d3d9caps.dat

========== Files Created - No Company Name ==========

[2010/01/01 19:54:08 | 00,293,376 | ---- | C] () -- C:\Users\Admin\Desktop\gmer.exe
[2010/01/01 19:20:06 | 00,284,915 | ---- | C] () -- C:\Users\Admin\Desktop\gmer.zip
[2009/12/24 06:03:52 | 00,017,412 | ---- | C] () -- C:\Windows\System32\TUProgSt_20091224-050352.dmp
[2009/12/21 13:55:38 | 00,000,793 | ---- | C] () -- C:\Users\Public\Desktop\Mumble (Backwards Compatible).lnk
[2009/12/21 13:55:38 | 00,000,776 | ---- | C] () -- C:\Users\Public\Desktop\Mumble.lnk
[2009/12/21 13:51:48 | 12,852,912 | ---- | C] () -- C:\Users\Admin\Desktop\Mumble-1.2.0.exe
[2009/08/22 16:46:16 | 01,589,248 | ---- | C] () -- C:\Windows\System32\SaiC80C1.Dll
[2009/08/22 16:46:16 | 00,008,704 | ---- | C] () -- C:\Windows\System32\SaiC80C1_0C.dll
[2009/08/22 16:46:16 | 00,008,192 | ---- | C] () -- C:\Windows\System32\SaiC80C1_10.dll
[2009/08/22 16:46:16 | 00,008,192 | ---- | C] () -- C:\Windows\System32\SaiC80C1_0A.dll
[2009/08/22 16:46:16 | 00,008,192 | ---- | C] () -- C:\Windows\System32\SaiC80C1_07.dll
[2009/08/22 16:46:16 | 00,007,680 | ---- | C] () -- C:\Windows\System32\SaiC80C1_09.dll
[2009/08/22 16:46:16 | 00,007,168 | ---- | C] () -- C:\Windows\System32\SaiC80C1_0402.dll
[2009/08/22 16:46:16 | 00,005,632 | ---- | C] () -- C:\Windows\System32\SaiC80C1_11.dll
[2009/08/17 22:43:04 | 00,048,896 | ---- | C] () -- C:\Windows\System32\drivers\JmtFltr.sys
[2009/07/26 04:23:22 | 00,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009/04/15 16:56:58 | 00,006,656 | ---- | C] () -- C:\Users\Admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/04/05 19:21:27 | 00,011,136 | ---- | C] () -- C:\Windows\System32\drivers\Mo3Fltr.sys
[2009/03/12 16:08:13 | 00,001,746 | ---- | C] () -- C:\Windows\Language_trs.ini
[2009/03/12 16:07:13 | 00,007,680 | ---- | C] () -- C:\Windows\System32\drivers\ASACPI.sys
[2009/03/12 16:07:09 | 00,022,668 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
[2009/03/12 16:05:10 | 00,229,376 | ---- | C] () -- C:\Windows\System32\HookMap.dll
[2009/03/12 16:05:10 | 00,184,320 | ---- | C] () -- C:\Windows\System32\HookShield.dll
[2009/03/12 16:05:10 | 00,134,504 | ---- | C] () -- C:\Windows\System32\smdll.dll
[2009/03/12 16:05:10 | 00,036,200 | ---- | C] () -- C:\Windows\System32\Auxiliary.dll
[2009/03/12 01:31:36 | 00,000,680 | ---- | C] () -- C:\Users\Admin\AppData\Local\d3d9caps.dat
[2008/10/07 09:13:30 | 00,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll
[2008/10/07 09:13:22 | 00,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2008/10/07 09:13:20 | 00,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll
[2008/10/07 09:13:20 | 00,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll
[2008/10/07 09:13:20 | 00,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2008/10/07 09:13:20 | 00,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll
[2008/10/07 09:13:20 | 00,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll
[2008/10/07 09:13:20 | 00,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll
[2008/10/07 09:13:20 | 00,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll
[2008/10/07 09:13:20 | 00,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll
[2007/12/28 08:22:04 | 00,010,296 | ---- | C] () -- C:\Windows\System32\drivers\ASUSHWIO.SYS
[2006/11/02 13:35:32 | 00,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 08:40:29 | 00,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini

========== LOP Check ==========

[2009/10/12 16:28:18 | 00,000,000 | -HSD | M] -- C:\Users\Admin\AppData\Roaming\.#
[2009/03/12 20:58:46 | 00,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Acreon
[2009/03/12 17:20:12 | 00,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\ESET
[2010/01/01 21:11:32 | 00,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Mumble
[2009/07/15 17:13:08 | 00,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\TuneUp Software
[2010/01/02 11:42:45 | 00,000,530 | ---- | M] () -- C:\Windows\Tasks\Maintenance en 1 clic.job
[2010/01/02 05:52:54 | 00,032,562 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< >

< %SYSTEMDRIVE%\*.* >
[2006/09/18 22:43:36 | 00,000,024 | ---- | M] () -- C:\autoexec.bat
[2009/04/11 07:36:36 | 00,333,257 | RHS- | M] () -- C:\bootmgr
[2009/03/11 23:59:55 | 00,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK
[2006/09/18 22:43:37 | 00,000,010 | ---- | M] () -- C:\config.sys
[2010/01/02 11:36:44 | 37,571,70688 | -HS- | M] () -- C:\hiberfil.sys
[2010/01/02 11:36:43 | 40,707,76832 | -HS- | M] () -- C:\pagefile.sys

< %PROGRAMFILES%\*.* >
[2008/01/21 03:43:21 | 00,000,174 | -HS- | M] () -- C:\Program Files\desktop.ini

< %PROGRAMFILES%\*. >
[2009/03/13 20:04:55 | 00,000,000 | ---D | M] -- C:\Program Files\AGEIA Technologies
[2009/03/12 17:48:58 | 00,000,000 | ---D | M] -- C:\Program Files\CCleaner
[2009/03/12 17:52:13 | 00,000,000 | ---D | M] -- C:\Program Files\CleanUp!
[2009/11/26 19:55:30 | 00,000,000 | ---D | M] -- C:\Program Files\Common Files
[2009/07/31 15:47:42 | 00,000,000 | ---D | M] -- C:\Program Files\Curse
[2009/03/12 17:19:19 | 00,000,000 | ---D | M] -- C:\Program Files\ESET
[2009/03/12 01:30:08 | 00,000,000 | -HSD | M] -- C:\Program Files\Fichiers communs
[2009/11/26 19:54:48 | 00,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2009/03/12 16:08:27 | 00,000,000 | ---D | M] -- C:\Program Files\Intel
[2009/07/26 04:35:53 | 00,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2009/12/23 03:26:57 | 00,000,000 | ---D | M] -- C:\Program Files\Java
[2009/03/14 00:51:29 | 00,000,000 | ---D | M] -- C:\Program Files\ma-config.com
[2010/01/01 02:13:53 | 00,000,000 | ---D | M] -- C:\Program Files\Malwarebytes' Anti-Malware
[2006/11/02 13:37:34 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft Games
[2009/08/23 17:24:26 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft IntelliPoint
[2009/07/26 04:35:53 | 00,000,000 | ---D | M] -- C:\Program Files\Movie Maker
[2010/01/01 02:14:12 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
[2006/11/02 13:37:34 | 00,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2009/12/21 13:59:00 | 00,000,000 | ---D | M] -- C:\Program Files\Mumble
[2009/08/23 03:13:47 | 00,000,000 | ---D | M] -- C:\Program Files\n52te
[2009/10/12 16:31:52 | 00,000,000 | ---D | M] -- C:\Program Files\NCsoft
[2009/03/12 16:13:03 | 00,000,000 | ---D | M] -- C:\Program Files\Realtek
[2006/11/02 13:37:34 | 00,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2009/08/22 16:51:33 | 00,000,000 | ---D | M] -- C:\Program Files\Saitek
[2009/03/12 18:02:31 | 00,000,000 | ---D | M] -- C:\Program Files\Teamspeak2_RC2
[2009/07/14 18:24:13 | 00,000,000 | ---D | M] -- C:\Program Files\trend micro
[2009/11/22 13:29:52 | 00,000,000 | ---D | M] -- C:\Program Files\TuneUp Utilities 2009
[2006/11/02 14:01:55 | 00,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
[2009/07/26 04:35:53 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Calendar
[2009/07/26 04:35:53 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Collaboration
[2009/07/26 04:35:51 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Defender
[2009/07/26 04:35:53 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Journal
[2009/12/09 18:30:28 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Mail
[2009/10/28 18:13:27 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2009/03/12 01:30:08 | 00,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2009/07/26 04:35:52 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Photo Gallery
[2009/11/18 17:53:04 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Portable Devices
[2009/07/26 04:35:53 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Sidebar
[2009/03/12 21:03:14 | 00,000,000 | ---D | M] -- C:\Program Files\WinRAR

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2009/10/12 16:28:18 | 00,000,000 | -HSD | M] -- C:\Users\Admin\AppData\Roaming\.#
[2009/03/12 20:58:46 | 00,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Acreon
[2009/03/12 18:25:18 | 00,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Adobe
[2009/03/12 17:20:12 | 00,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\ESET
[2009/03/12 01:31:39 | 00,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Identities
[2009/03/12 16:12:58 | 00,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\InstallShield
[2009/03/12 18:25:18 | 00,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Macromedia
[2009/06/02 17:19:00 | 00,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Malwarebytes
[2006/11/02 13:37:34 | 00,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Media Center Programs
[2009/10/12 16:46:18 | 00,000,000 | --SD | M] -- C:\Users\Admin\AppData\Roaming\Microsoft
[2009/03/12 17:20:53 | 00,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Mozilla
[2010/01/01 21:11:32 | 00,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Mumble
[2009/03/12 18:02:39 | 00,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\teamspeak2
[2009/07/15 17:13:08 | 00,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\TuneUp Software
[2009/03/12 21:03:52 | 00,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\WinRAR

< %APPDATA%\*.exe /s >
[2009/03/12 21:04:06 | 00,272,384 | ---- | M] () -- C:\Users\Admin\AppData\Roaming\Acreon\WowMatrix\Modules\curl.exe

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2009-12-17 18:09:06
< End of report >

Re


Hum rien de néfaste à première vue.

Une petite vérif :

Clique ici pour télécharger SystemLook (de jpshortstuff) sur ton bureau (autre lien)

• Double clique sur SystemLook pour le lancer
  
• Copie le texte qui se trouve dans l'encadré ci-dessous et colle le dans la fenêtre de texte de SystemLook.
  

  Citation:

  :dir C:\Users\Admin\AppData\Roaming\.#

  
  
• Clique sur le bouton Look pour lancer le scan
  
• A la fin, poste le rapport qui apparaitra dans le bloc note (le rapport se trouve aussi ici sur ton bureau sous le nom SystemLook.txt

Note: Le scan peut être plus ou moins long.

bonjours,
voici le rapport donc a premier vu en suppriment le dll j'aurais supprimer le keyloger?
voici le rapport et merci encore.
SystemLook v1.0 by jpshortstuff (29.08.09)
Log created at 13:30 on 03/01/2010 by Admin (Administrator - Elevation successful)

========== dir ==========

C:\Users\Admin\AppData\Roaming\.# - Parameters: "(none)"

---Files---
None found.

---Folders---
None found.

-=End Of File=-

Re

yannthor a écrit:

voici le rapport donc a premier vu en suppriment le dll j'aurais supprimer le keyloger?

Difficile de répondre pour l'instant, je ne trouve pas grand chose sur cette dll.


Un scan en ligne me permettrait peut être d'avoir un autre point de vue. On commence par un petit nettoyage pour supprimer les fichiers superflus et gagner un peu de temps sur ce scan.


Etape 1

Télécharge TFC (clique ici) (de Old Timer) sur le bureau

• TFC va fermer toutes tes fenêtres, je te conseille d'enregistrer ton travail puis de les fermer par toi même pour éviter de perdre ton travail
  
• Double clique sur TFC.exe pour le lancer
  
• Clique sur le bouton Start et patiente quelques instants.
  
• Une fois le nettoyage terminé, ton pc va redémarrer. S'il ne le fait pas, redémarre le toi même pour terminer le nettoyage

Etape 2

• Lance Malwarebyte et mets à jour la base de définition (onglet mise à jour -> recherche de mise à jour).
  
• Choisi Exécuter un examen rapide puis Rechercher
  
• Laisse l'analyse se faire (cela peut durer longtemps).
  
• A la fin, vérifie que les éléments trouvés soient cochés (dans "Résultat de l'examen").
  
• Puis clique sur Supprimer la sélection en bas.
  
• Un redémarrage peut être nécessaire.

Un rapport va s'afficher, enregistre-le sur ton bureau. Sinon, après le démarrage, il se trouvera dans Rapports/logs[/list]
Et poste le rapport svp

Une aide à l'utilisation ici


Etape 3

Rends toi sur kaspersky online scanner (clique ici)

• Clique sur Accept en bas pour installer le programme.
  
• Ferme toutes tes fenêtres et désactive tes logiciels de sécurité.
  
• Clique sur exécuter pour lancer le programme.
  Patiente le temps de la mise à jour ...
  
• Clique sur my computer sous scan (à gauche)
  Patiente le temps du scan.
  
• Dès que c'est fini, clique sur Report... à gauche, puis clique sur save report...

Sauvegarde le rapport sous le nom kaspersky.txt et copie/colle son contenu ici svp.
Réactive ton antivirus.

ps : n'utilise pas ton pc le temps du scan.

Une aide en image ici

Yannthor j'ai édité mon précédent message pour rajouter Malwarebyte, tu peux l'utiliser avant ou après kaspersky, ça ne porte pas à conséquence.

Bonne fin de journée

re
j'ai bien lancer firefox en administrateur ; mais la base de donner a mis 1h30 a ce télécharger et pas entièrement ensuite un rapport ma indiquer que le téléchargement avez échouer et qu'il faillais redémarrer window j'ai relancer kasperly .mais je désire savoir si cela est normal que ca prenne autant de temps a télécharger une base de donner de 80327 KB ?
merci

Re


C'est vrai que ça fait long, mais il arrive que parfois ça prenne du temps, beaucoup de temps.

Si tu ne t'en sors pas avec Kaspersky (si il replante ou autre), vois avec Panda ActiveScan
http://www.pandasecurity.com/activescan/index/?track=1&Lang=fr-FR&IdPais=69

++

voila le scan est fini et rien a signaler ^^
je l'ai mi sous le nom de rapport dans bureau mais window le trouve pas

Re

Ok, si Kaspersky n'a rien trouvé, on peut se passer du rapport. Par contre, que donne Malwarebyte ?

re
pareil pour Malwarebyte rien trouver mais d'après certain amis IG ce genre de programme n'est pas encore répertorier dans les base de donner ils sont crée manuellement par des chinois qui tout les jours change leur façons de proceder afin de hacker les compte ncsoft depuis la campagne de Ncsoft qui a bannis déjà plus de 35 000 de leur compte de goldsceller et de bot sur leur dernier jeux aion.
d'ailleurs dans le programme de suppression de programme indésirable de tune up sous la DLL on pouvais voir dans écriture chinoise .
j'aurais peut être du ne pas le supprimer de suite afin d'avoir des traces plus précise mais je n'y est pas penser .
.Sinon j'utilise eset smart security qui a nod 32 et sur firewall intégrer a premier vu celui ci n'est pas très efficace je me demande si je ne devrais pas le désactiver et installer Zone alarm a la place et surtout si je le fait cela ne va t'il pas interférer avec le reste de mon anti virus étant donner qu'il sont lie ?

Re


On enlève les outils que tu as installés.


Double clique sur OTL.exe et clique sur le bouton CleanUp.
OTL va supprimer tous les logiciels qu'on a utilisés et faire redémarrer ton ordinateur.


Supprime tous les logiciels que je t'ai demandés d'installer qui ne seraient pas partis avec OTL ainsi que les différents rapports.


Conserve Malwarebyte et utilise le régulièrement, c'est un antimalware "grand public"

"""""""""""""""""""""""""""""""""""""""""""""

Désactive puis réactive l'utilitaire de restauration du système pour repartir sur une base saine.

"""""""""""""""""""""""""""""""""""""""""""""

Un petit logiciel sympathique qui te permettra de garder un oeil sur différents éléments de ton système : WinPatrol
http://www.winpatrol.com/download.html

"""""""""""""""""""""""""""""""""""""""""""""

Les rapport me semblent propres, mais je ne peux pas t'assurer que le pc est "propre" : une fois qu'un pc a été infecté puis désinfecté, personne ne peut te garantir que ton pc est à nouveau propre et sans danger.

Je n'ai jamais utilisé le firewall d'ESET, qu'est ce qui te fait dire qu'il n'est pas efficace ?


Bonne soirée

ben juste qu'il ne ma pas averti qu'une Dll inconnu envoyer des information a une adresse Ip que je n'ai pas accepter ! mais ça aurais peut être été pareil avec un autres par feu . merci pour tout et meilleurs vœux

Re


J'ai été faire un tour sur le forum officiel, il semble qu'il y ait eu quelques victimes
http://fr.aiononline.com/forums/general/view?articleID=8500&&category=103&notice_category=103


Re bonne année et bon jeu sur aion

Le sujet semble résolu, je le verrouille. Si pour une raison ou une autre, vous avez besoin de le réouvrir, faites en la demande par MP en précisant la raison et le lien vers ce sujet. Ceci ne s'applique qu'à yannthor. Pour les autres, créez votre propre sujet svp.