Voici, en premier, le rapport log.txt:
Logfile of random's system information tool 1.06 (written by random/random)
Run by Pauline at 2009-11-21 22:01:26
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
System drive C: has 143 GB (62%) free of 231 GB
Total RAM: 2046 MB (58% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:01:46, on 21/11/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Pauline\Desktop\RSIT.exe
C:\Users\Pauline\Downloads\Pauline.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.01net.com/telecharger/R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.01net.com/telecharger/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.01net.com/telecharger/R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (file missing)
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [HP Health Check Scheduler] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel -
res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
http://gfx2.hotmail.com/mail/w2/resourc ... dfr-fr.cabO16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/Me ... b56907.cabO18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
--
End of file - 9401 bytes
======Scheduled tasks folder======
C:\Windows\tasks\Ad-Aware Update (Weekly).job
C:\Windows\tasks\Google Software Updater.job
C:\Windows\tasks\User_Feed_Synchronization-{31724D3A-B342-438E-9171-989E91B6E38C}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2009-11-09 1475864]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-10-04 256112]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll [2009-10-06 762864]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2009-10-04 458736]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-10-04 256112]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"SMSERIAL"=C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2006-10-09 729088]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-01-13 827392]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-03-09 4390912]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2007-02-12 174872]
"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2007-04-23 176128]
"QlbCtrl"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2007-02-13 159744]
"HP Health Check Scheduler"=C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2007-03-12 50696]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2007-03-01 472776]
"WAWifiMessage"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe [2007-01-10 317128]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-01-05 413696]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2008-12-08 54576]
""= []
"NvSvc"=C:\Windows\system32\nvsvc.dll [2007-05-01 86016]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2007-05-01 8429568]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2007-05-01 81920]
"AVG9_TRAY"=C:\PROGRA~1\AVG\AVG9\avgtray.exe [2009-11-12 2020120]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Launcher"=C:\Windows\SMINST\launcher.exe [2006-11-07 44128]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2009-09-10 420176]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-01-26 68856]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="avgrsstx.dll"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3fca724c-cc1e-11dd-931c-001b24acc9fe}]
shell\AutoRun\command - G:\
shell\open\command - rundll32.exe .\desktop.dll,InstallM
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3fca7252-cc1e-11dd-931c-001b24acc9fe}]
shell\AutoRun\command - I:\
shell\open\command - rundll32.exe .\desktop.dll,InstallM
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{59dca3cf-6e36-11de-bd5f-001b24acc9fe}]
shell\AutoRun\command - G:\Toshiba\more4you.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5ec96d2e-bb66-11dd-a45d-001b24acc9fe}]
shell\AutoRun\command - .\Encryption Tool\MaxtorEncryption.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{633b5fac-0134-11de-9ca9-001b24acc9fe}]
shell\AutoRun\command - jix9a.bat
shell\explore\command - jix9a.bat
shell\open\command - jix9a.bat
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6853ee34-2810-11de-8b05-001b24acc9fe}]
shell\AutoRun\command - G:\LaunchU3.exe -a
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a160e5e5-d51f-11dc-80bd-001b24acc9fe}]
shell\AutoRun\command - H:\LaunchU3.exe -a
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2009-11-21 22:01:26 ----D---- C:\rsit
2009-11-21 19:54:00 ----D---- C:\Users\Pauline\AppData\Roaming\Malwarebytes
2009-11-21 19:53:53 ----D---- C:\ProgramData\Malwarebytes
2009-11-21 19:53:53 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-11-13 16:27:52 ----A---- C:\Windows\system32\WSDApi.dll
2009-11-13 16:22:17 ----A---- C:\Windows\system32\wups2.dll
2009-11-13 16:22:17 ----A---- C:\Windows\system32\wucltux.dll
2009-11-13 16:22:17 ----A---- C:\Windows\system32\wuaueng.dll
2009-11-13 16:22:17 ----A---- C:\Windows\system32\wuauclt.exe
2009-11-13 16:21:30 ----A---- C:\Windows\system32\wups.dll
2009-11-13 16:21:30 ----A---- C:\Windows\system32\wudriver.dll
2009-11-13 16:21:30 ----A---- C:\Windows\system32\wuapi.dll
2009-11-13 16:21:23 ----A---- C:\Windows\system32\wuwebv.dll
2009-11-13 16:21:23 ----A---- C:\Windows\system32\wuapp.exe
2009-11-13 08:40:53 ----D---- C:\Program Files\Windows Portable Devices
2009-11-12 23:06:20 ----A---- C:\Windows\system32\UIAnimation.dll
2009-11-12 23:06:19 ----A---- C:\Windows\system32\UIRibbonRes.dll
2009-11-12 23:06:19 ----A---- C:\Windows\system32\UIRibbon.dll
2009-11-12 23:05:51 ----A---- C:\Windows\system32\WMPhoto.dll
2009-11-12 23:05:50 ----A---- C:\Windows\system32\XpsRasterService.dll
2009-11-12 23:05:50 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2009-11-12 23:05:50 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-11-12 23:05:50 ----A---- C:\Windows\system32\d3d10warp.dll
2009-11-12 23:05:50 ----A---- C:\Windows\system32\d2d1.dll
2009-11-12 23:05:50 ----A---- C:\Windows\system32\cdd.dll
2009-11-12 23:05:49 ----A---- C:\Windows\system32\xpsservices.dll
2009-11-12 23:05:49 ----A---- C:\Windows\system32\XpsPrint.dll
2009-11-12 23:05:49 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2009-11-12 23:05:49 ----A---- C:\Windows\system32\WindowsCodecs.dll
2009-11-12 23:05:49 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-11-12 23:05:49 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2009-11-12 23:05:49 ----A---- C:\Windows\system32\OpcServices.dll
2009-11-12 23:05:49 ----A---- C:\Windows\system32\FntCache.dll
2009-11-12 23:05:49 ----A---- C:\Windows\system32\dxdiagn.dll
2009-11-12 23:05:49 ----A---- C:\Windows\system32\dxdiag.exe
2009-11-12 23:05:49 ----A---- C:\Windows\system32\DWrite.dll
2009-11-12 23:05:49 ----A---- C:\Windows\system32\d3d10level9.dll
2009-11-12 23:05:49 ----A---- C:\Windows\system32\d3d10core.dll
2009-11-12 23:05:48 ----A---- C:\Windows\system32\dxgi.dll
2009-11-12 23:05:48 ----A---- C:\Windows\system32\d3d11.dll
2009-11-12 23:05:48 ----A---- C:\Windows\system32\d3d10_1core.dll
2009-11-12 23:05:48 ----A---- C:\Windows\system32\d3d10_1.dll
2009-11-12 23:05:48 ----A---- C:\Windows\system32\d3d10.dll
2009-11-12 23:05:24 ----A---- C:\Windows\system32\WPDShextAutoplay.exe
2009-11-12 23:05:24 ----A---- C:\Windows\system32\wpdbusenum.dll
2009-11-12 23:05:24 ----A---- C:\Windows\system32\BthMtpContextHandler.dll
2009-11-12 23:05:22 ----A---- C:\Windows\system32\PortableDeviceConnectApi.dll
2009-11-12 23:05:20 ----A---- C:\Windows\system32\wpdshext.dll
2009-11-12 23:05:20 ----A---- C:\Windows\system32\WpdMtpUS.dll
2009-11-12 23:05:20 ----A---- C:\Windows\system32\WpdConns.dll
2009-11-12 23:05:20 ----A---- C:\Windows\system32\wpd_ci.dll
2009-11-12 23:05:19 ----A---- C:\Windows\system32\WPDSp.dll
2009-11-12 23:05:19 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2009-11-12 23:05:19 ----A---- C:\Windows\system32\WpdMtp.dll
2009-11-12 23:05:19 ----A---- C:\Windows\system32\PortableDeviceWMDRM.dll
2009-11-12 23:05:19 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2009-11-12 23:05:19 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2009-11-12 23:05:19 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2009-11-12 23:04:03 ----A---- C:\Windows\system32\oleaccrc.dll
2009-11-12 23:04:01 ----A---- C:\Windows\system32\UIAutomationCore.dll
2009-11-12 23:04:01 ----A---- C:\Windows\system32\oleacc.dll
2009-11-04 23:37:41 ----D---- C:\Users\Pauline\AppData\Roaming\OpenOffice.org
2009-11-04 23:28:28 ----D---- C:\Program Files\OpenOffice.org 3
2009-11-04 13:36:31 ----HD---- C:\$AVG
2009-11-04 13:34:39 ----D---- C:\ProgramData\avg9
2009-11-03 17:26:36 ----A---- C:\Windows\system32\mshtml.dll
2009-10-29 18:10:34 ----A---- C:\Windows\system32\wmp.dll
2009-10-29 18:10:26 ----A---- C:\Windows\system32\unregmp2.exe
2009-10-29 18:10:25 ----A---- C:\Windows\system32\wmploc.DLL
======List of files/folders modified in the last 1 months======
2009-11-21 22:01:18 ----D---- C:\Windows\Temp
2009-11-21 19:53:55 ----D---- C:\Windows\system32\drivers
2009-11-21 19:53:53 ----RD---- C:\Program Files
2009-11-21 19:53:53 ----HD---- C:\ProgramData
2009-11-21 19:38:49 ----D---- C:\Windows\Tasks
2009-11-21 19:37:00 ----D---- C:\Windows\SMINST
2009-11-21 11:54:16 ----D---- C:\ProgramData\Spybot - Search & Destroy
2009-11-21 11:54:15 ----D---- C:\Windows\Debug
2009-11-21 11:54:15 ----D---- C:\Windows
2009-11-21 09:59:34 ----D---- C:\ProgramData\Google Updater
2009-11-18 21:41:41 ----D---- C:\Users\Pauline\AppData\Roaming\Skype
2009-11-18 19:46:27 ----D---- C:\Users\Pauline\AppData\Roaming\skypePM
2009-11-16 08:20:04 ----D---- C:\Windows\winsxs
2009-11-15 23:49:32 ----D---- C:\Windows\system32\catroot
2009-11-15 23:49:31 ----D---- C:\Windows\system32\catroot2
2009-11-15 23:46:16 ----D---- C:\Windows\System32
2009-11-15 23:46:16 ----D---- C:\Program Files\Windows Mail
2009-11-15 19:49:49 ----D---- C:\Windows\rescache
2009-11-15 19:44:43 ----SHD---- C:\Windows\Installer
2009-11-15 19:44:27 ----A---- C:\Windows\win.ini
2009-11-15 19:36:18 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-11-15 19:36:17 ----D---- C:\Windows\inf
2009-11-15 19:35:19 ----SHD---- C:\System Volume Information
2009-11-15 19:26:09 ----D---- C:\Windows\system32\fr-FR
2009-11-13 08:46:30 ----D---- C:\Windows\system32\Tasks
2009-11-13 08:40:53 ----D---- C:\Windows\system32\wbem
2009-11-13 08:40:50 ----D---- C:\Windows\system32\zh-TW
2009-11-13 08:40:50 ----D---- C:\Windows\system32\zh-HK
2009-11-13 08:40:50 ----D---- C:\Windows\system32\zh-CN
2009-11-13 08:40:50 ----D---- C:\Windows\system32\uk-UA
2009-11-13 08:40:50 ----D---- C:\Windows\system32\tr-TR
2009-11-13 08:40:50 ----D---- C:\Windows\system32\th-TH
2009-11-13 08:40:50 ----D---- C:\Windows\system32\sv-SE
2009-11-13 08:40:50 ----D---- C:\Windows\system32\sr-Latn-CS
2009-11-13 08:40:50 ----D---- C:\Windows\system32\sl-SI
2009-11-13 08:40:50 ----D---- C:\Windows\system32\sk-SK
2009-11-13 08:40:50 ----D---- C:\Windows\system32\ru-RU
2009-11-13 08:40:50 ----D---- C:\Windows\system32\ro-RO
2009-11-13 08:40:50 ----D---- C:\Windows\system32\pt-PT
2009-11-13 08:40:50 ----D---- C:\Windows\system32\pt-BR
2009-11-13 08:40:50 ----D---- C:\Windows\system32\pl-PL
2009-11-13 08:40:50 ----D---- C:\Windows\system32\nl-NL
2009-11-13 08:40:50 ----D---- C:\Windows\system32\nb-NO
2009-11-13 08:40:50 ----D---- C:\Windows\system32\lv-LV
2009-11-13 08:40:50 ----D---- C:\Windows\system32\lt-LT
2009-11-13 08:40:50 ----D---- C:\Windows\system32\ko-KR
2009-11-13 08:40:50 ----D---- C:\Windows\system32\ja-JP
2009-11-13 08:40:50 ----D---- C:\Windows\system32\it-IT
2009-11-13 08:40:50 ----D---- C:\Windows\system32\hu-HU
2009-11-13 08:40:50 ----D---- C:\Windows\system32\hr-HR
2009-11-13 08:40:50 ----D---- C:\Windows\system32\he-IL
2009-11-13 08:40:50 ----D---- C:\Windows\system32\fi-FI
2009-11-13 08:40:50 ----D---- C:\Windows\system32\et-EE
2009-11-13 08:40:50 ----D---- C:\Windows\system32\es-ES
2009-11-13 08:40:50 ----D---- C:\Windows\system32\en-US
2009-11-13 08:40:50 ----D---- C:\Windows\system32\el-GR
2009-11-13 08:40:50 ----D---- C:\Windows\system32\de-DE
2009-11-13 08:40:50 ----D---- C:\Windows\system32\da-DK
2009-11-13 08:40:50 ----D---- C:\Windows\system32\cs-CZ
2009-11-13 08:40:50 ----D---- C:\Windows\system32\bg-BG
2009-11-13 08:40:50 ----D---- C:\Windows\system32\ar-SA
2009-11-12 11:58:02 ----D---- C:\Windows\system32\config
2009-11-12 11:57:41 ----D---- C:\Windows\system32\spool
2009-11-12 11:57:41 ----D---- C:\Windows\system32\Msdtc
2009-11-12 11:57:39 ----D---- C:\Windows\registration
2009-11-12 11:52:10 ----D---- C:\Windows\system32\LogFiles
2009-11-10 23:14:58 ----D---- C:\Program Files\Java
2009-11-10 23:14:57 ----D---- C:\Program Files\Common Files
2009-11-08 11:42:03 ----D---- C:\Windows\Prefetch
2009-11-08 11:13:20 ----D---- C:\Program Files\Mozilla Firefox
2009-11-05 18:36:21 ----A---- C:\Windows\system32\mrt.exe
2009-11-04 23:30:01 ----RSD---- C:\Windows\assembly
2009-11-04 23:28:58 ----RSD---- C:\Windows\Fonts
2009-11-04 13:36:09 ----A---- C:\Windows\system32\avgrsstx.dll
2009-11-04 13:34:41 ----D---- C:\Program Files\AVG
2009-11-04 13:33:53 ----D---- C:\Program Files\Common Files\microsoft shared
2009-10-30 11:43:56 ----D---- C:\Program Files\Internet Explorer
2009-10-30 11:43:45 ----D---- C:\Program Files\Windows Media Player
2009-10-22 08:50:06 ----D---- C:\Windows\Microsoft.NET
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\Windows\System32\Drivers\avgldx86.sys [2009-11-04 333192]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\Windows\System32\Drivers\avgmfx86.sys [2009-11-04 28424]
R1 AvgTdiX;AVG Free8 Network Redirector; C:\Windows\System32\Drivers\avgtdix.sys [2009-11-09 360584]
R1 eabfiltr;eabfiltr; C:\Windows\system32\DRIVERS\eabfiltr.sys [2006-11-30 8192]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-02-24 39936]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-01-23 42496]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-01-23 37376]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-19 14208]
R3 HBtnKey;HBtnKey; C:\Windows\system32\DRIVERS\cpqbttn.sys [2006-06-28 9472]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-03-12 1747936]
R3 NETw4v32;Pilote de carte Intel(R) Wireless WiFi Link pour Windows Vista 32 bits; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-03-01 2216448]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2007-05-01 7495968]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-03-05 76288]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-10-09 981504]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-01-13 181432]
R3 usbvideo;Périphérique vidéo USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-19 134016]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-19 11264]
S3 BCM43XV;Pilote de la carte réseau extensible Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-02 464384]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 E100B;Pilote de carte Intel (R) PRO; C:\Windows\system32\DRIVERS\e100b325.sys [2006-11-02 163328]
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2006-11-02 987648]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2006-10-19 1380864]
S3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver; C:\Windows\system32\DRIVERS\ManyCam.sys []
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2008-11-07 32000]
S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 winachsf;winachsf; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2006-11-02 654336]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-11-07 132424]
R2 avg9wd;AVG Free WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2009-11-04 285392]
R2 CLCapSvc;CyberLink Background Capture Service (CBCS); C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe [2007-04-23 262243]
R2 CLSched;CyberLink Task Scheduler (CTS); C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe [2007-04-23 106593]
R2 HP Health Check Service;HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2007-03-14 62984]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2006-05-02 135168]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2007-02-12 355096]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-12-14 61440]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-04 183280]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-03-24 654848]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 RoxMediaDB9;RoxMediaDB9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2007-02-12 880640]
S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2007-02-17 74656]
-----------------EOF-----------------