Logfile of random's system information tool (written by random/random)
Run by renard at
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 26 GB (17%) free of GB
Total RAM: MB (65% free)

Logfile of Trend Micro HijackThis v
Scan saved at , on 09/03/
Platform: Windows XP SP3 (WinNT )
MSIE: Internet Explorer v ()
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\bringdadabeer.com
C:\WINDOWS\system32\bringdadabeer.com
C:\WINDOWS\system32\bringdadabeer.com
C:\WINDOWS\system32\bringdadabeer.com
C:\WINDOWS\system32\bringdadabeer.com
C:\WINDOWS\System32\bringdadabeer.com
C:\WINDOWS\system32\bringdadabeer.com
C:\Program Files\Avira\AntiVir PersonalEdition Classic\bringdadabeer.com
C:\Program Files\Google\Update\bringdadabeer.com
C:\WINDOWS\bringdadabeer.com
C:\Program Files\Medion Home Cinema XL II\PowerCinema\bringdadabeer.com
C:\Program Files\Avira\AntiVir PersonalEdition Classic\bringdadabeer.com
C:\WINDOWS\System32\bringdadabeer.com
C:\Program Files\Unlocker\bringdadabeer.com
C:\Program Files\CDBurnerXP\bringdadabeer.com
C:\PROGRA~1\COMMON~1\X10\Common\bringdadabeer.com
C:\WINDOWS\System32\bringdadabeer.com
C:\Program Files\Java\jre6\bin\bringdadabeer.com
C:\Program Files\Mozilla Firefox\bringdadabeer.com
C:\WINDOWS\system32\rundllexe
C:\WINDOWS\system32\bringdadabeer.com
C:\Documents and Settings\renard\Bureau\bringdadabeer.com
C:\Program Files\trend micro\bringdadabeer.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = bringdadabeer.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = bringdadabeer.com?LinkId=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = bringdadabeer.com?LinkId=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = bringdadabeer.com?LinkId=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = bringdadabeer.com?LinkId=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {E9F-C8DDB87DB7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\bringdadabeer.com
O2 - BHO: AcroIEHelperStub - {18DFC-E8ADAFAC2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\bringdadabeer.com
O2 - BHO: Spybot-S&D IE Protection - {FDDF} - C:\PROGRA~1\SPYBOT~1\bringdadabeer.com
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {DCABF-8ECCC6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\bringdadabeer.com
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBCAb-BCC25C1CA9} - C:\Program Files\Java\jre6\bin\bringdadabeer.com
O2 - BHO: Google Gears Helper - {E0FEFEFBFAE-BACA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\\bringdadabeer.com
O2 - BHO: JQSIEStartDetectorImpl - {E7E6FCE-4CBCEABFEF69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\bringdadabeer.com
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Medion Home Cinema XL II\PowerCinema\bringdadabeer.com"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader \Reader\bringdadabeer.com"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\bringdadabeer.com" -atboottime
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\bringdadabeer.com"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\bringdadabeer.com" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\bringdadabeer.com"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\bringdadabeer.com /install /silent
O4 - HKUS\S\..\Run: [bringdadabeer.com] C:\WINDOWS\System32\bringdadabeer.com (User 'SERVICE LOCAL')
O4 - HKUS\S\..\Run: [bringdadabeer.com] C:\WINDOWS\System32\bringdadabeer.com (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\bringdadabeer.com
O9 - Extra button: (no name) - {09C04DABEBC-BBEE-B25EACF5} - C:\Program Files\Google\Google Gears\Internet Explorer\\bringdadabeer.com
O9 - Extra 'Tools' menuitem: Paramètres de Google &Gears - {09C04DABEBC-BBEE-B25EACF5} - C:\Program Files\Google\Google Gears\Internet Explorer\\bringdadabeer.com
O9 - Extra button: (no name) - {85d1ffdc9a66} - C:\WINDOWS\bringdadabeer.com
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1ffdc9a66} - C:\WINDOWS\bringdadabeer.com
O9 - Extra button: (no name) - {DFBAFC4-ACAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\bringdadabeer.com
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFBAFC4-ACAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\bringdadabeer.com
O9 - Extra button: (no name) - {e2e2dddb7-f2ba} - C:\WINDOWS\Network Diagnostic\bringdadabeer.com
O9 - Extra 'Tools' menuitem: @bringdadabeer.com, - {e2e2dddb7-f2ba} - C:\WINDOWS\Network Diagnostic\bringdadabeer.com
O9 - Extra button: Messenger - {FB5FFd2-BB9EC04F} - C:\Program Files\Messenger\bringdadabeer.com
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5FFd2-BB9EC04F} - C:\Program Files\Messenger\bringdadabeer.com
O15 - Trusted Zone: bringdadabeer.com
O15 - Trusted Zone: bringdadabeer.com
O16 - DPF: {CABE-4BA7BBBFE9A1} (ewidoOnlineScan Control) - bringdadabeer.com
O16 - DPF: {B3CF-7F8DDFDAEE} - bringdadabeer.com bringdadabeer.com
O16 - DPF: {5D86DDB5-BDFB-9E9E-DF4EE} (BDSCANONLINE Control) - bringdadabeer.com bringdadabeer.com
O16 - DPF: {5EDB-4DA9-BFBEC0EC} (Windows Live Safety Center Base Module) - bringdadabeer.com secab
O16 - DPF: {74D05DD4-BDCDC04F9A3B61} (HouseCall Control) - bringdadabeer.com scancab
O16 - DPF: {7F8CADAAF22B} (ICSScanner Class) - bringdadabeer.com cab
O16 - DPF: {80DDB8ECB72F-FDEA} (AvxScanOnline Control) - bringdadabeer.com
O16 - DPF: {BB21FFEC9-BF9DBD30C9AE9} (a-squared Scanner) - bringdadabeer.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{A8D70DBA3BB34BAB}: NameServer = ,
O17 - HKLM\System\CCS\Services\Tcpip\..\{FCFD-A6FAEC9}: NameServer = ,
O18 - Protocol: skype4com - {FFC8BBDFFC7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~bringdadabeer.com
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\bringdadabeer.com
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\bringdadabeer.com
O23 - Service: Google Update Service (gupdate1cb89b52e) (gupdate1cb89b52e) - Google Inc. - C:\Program Files\Google\Update\bringdadabeer.com
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\bringdadabeer.com
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\bringdadabeer.com
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\bringdadabeer.com
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\bringdadabeer.com

--
End of file - bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
C:\WINDOWS\tasks\bringdadabeer.com
C:\WINDOWS\tasks\bringdadabeer.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E9F-C8DDB87DB7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\bringdadabeer.com [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DFC-E8ADAFAC2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\bringdadabeer.com [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDDF}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\bringdadabeer.com [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DCABF-8ECCC6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\bringdadabeer.com [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBCAb-BCC25C1CA9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\bringdadabeer.com [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E0FEFEFBFAE-BACA7E3FB53}]
Google Gears Helper - C:\Program Files\Google\Google Gears\Internet Explorer\\bringdadabeer.com [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6FCE-4CBCEABFEF69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\bringdadabeer.com [ ]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PCMService"=C:\Program Files\Medion Home Cinema XL II\PowerCinema\bringdadabeer.com [ ]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader \Reader\bringdadabeer.com [ ]
"QuickTime Task"=C:\Program Files\QuickTime\bringdadabeer.com [ ]
"UnlockerAssistant"=C:\Program Files\Unlocker\bringdadabeer.com [ ]
"avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\bringdadabeer.com [ ]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\bringdadabeer.com [ ]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\bringdadabeer.com [ ]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader \Reader\bringdadabeer.com []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\bringdadabeer.com [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAABA-9A4CBDDDB5} - C:\WINDOWS\system32\bringdadabeer.com [ ]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=bringdadabeer.com, bringdadabeer.com, bringdadabeer.com, bringdadabeer.com,

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bringdadabeer.com]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveTypeAutoRun"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\bringdadabeer.com"="%windir%\system32\bringdadabeer.com:*:enabled:@bringdadabeer.com,"
"C:\Program Files\Windows Live\Messenger\bringdadabeer.com"="C:\Program Files\Windows Live\Messenger\bringdadabeer.com:*:Enabled:Windows Live Messenger"
"C:\Program Files\VideoLAN\VLC\bringdadabeer.com"="C:\Program Files\VideoLAN\VLC\bringdadabeer.com:*:Enabled:VLC media player"
"C:\Program Files\HomePlayer\bringdadabeer.com"="C:\Program Files\HomePlayer\bringdadabeer.com:*:Enabled:HomePlayer"
"C:\Program Files\HomePlayer\VLC\bringdadabeer.com"="C:\Program Files\HomePlayer\VLC\bringdadabeer.com:*:Enabled:VLC HomePlayer"
"C:\Program Files\Mozilla Firefox\bringdadabeer.com"="C:\Program Files\Mozilla Firefox\bringdadabeer.com:*:Enabled:Firefox"