A l'aideTrojan Virtuamonde

Résolu
ginie -  
jacques.gache Messages postés 34829 Statut Contributeur sécurité -
Bonjour,
j'ai depuis plusieurs jours un trojan détecté par un scan complet de Spyware Doctor et malgré le redemarrage à la fin de l'analyse je n'arrive pas à m'en débarrasser ?
Il crée des fenêtres de pub et veux asbolument me faire télécharger un antivirus 2009 de Windows, du moins je crois.
Merci de me donner vos conseils car je ne sais plus quoi faire.
Configuration: Windows XP
Internet Explorer 7.0

20 réponses

Résumé de la discussion

Un utilisateur est confronté à un trojan détecté par Spyware Doctor sur Windows XP avec Internet Explorer 7, provoquant des fenêtres publicitaires et des tentatives d’inciter au téléchargement d’un antivirus. Des solutions proposées privilégient des outils de nettoyage spécifiques tels que SDFix et ToolBar-S&D, avec la génération d’un rapport HijackThis et la suppression des éléments détectés. En parallèle, il est recommandé de désactiver puis réactiver la restauration système pour éviter la remontée des points contaminés et d’utiliser HijackThis pour clarifier les éléments suspects. Enfin, certains retours suggèrent le démarrage en mode sans échec et l’exécution répétée des outils de désinfection, suivis d’un nouveau scan et du nettoyage des résidus.

Généré automatiquement par IA
sur la base des meilleures réponses
  1. totobetourne Messages postés 5677 Statut Membre 65
     
    il t en reste encore .

    on va passer cela.
    Télécharge ToolBar-S&D ( Merci à Eric_71, Angeldark, Sham_Rock et XmichouX )
    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

    lors du scan coupe ta connection internet.

    * Double-clique sur ToolBar-SD afin de lancer l'installation, un raccourci sera ajouté sur le Bureau.
    * Double-clique dessus pour démarrer l'outil; choisis la langue.
    * Sous Vista, faire un clic droit et "Exécuter en tant qu'administrateur" (Elévation des privilèges), puis -> Continuer.
    * Tape 2 puis sur la touche [Entrée] afin de lancer la suppression.
    * Patiente jusqu'à la fin de la recherche.
    * À la fin du scan, le rapport s'ouvrira dans le Bloc-notes.
    * Poste ce rapport, par copier/coller, dans ta prochaine réponse.
    * Le rapport se trouve également sous : C:\TB.txt
    1
    1. ginie222
       
      Bonsoir,

      et merci de vous occuper de mon problème également.
      Question : je suis sous XP, c'est le même procesus ?
      Faut il faire le scan en mode sans echec?

      Virginie
      0
    2. ginie222
       
      Voici le résultat du scan

      -----------\\ ToolBar S&D 1.2.8 XP/Vista

      Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
      X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 CPU T5500 @ 1.66GHz )
      BIOS : Phoenix NoteBIOS 4.0 Release 6.1
      USER : NINIE ( Administrator )
      BOOT : Normal boot
      Antivirus : avast! antivirus 4.8.1296 [VPS 090107-0] 4.8.1296 (Activated)
      Firewall : Norton Internet Worm Protection 2006 (Not Activated)
      C:\ (Local Disk) - NTFS - Total:55 Go (Free:20 Go)
      D:\ (Local Disk) - NTFS - Total:47 Go (Free:47 Go)
      E:\ (USB)
      F:\ (CD or DVD)

      "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
      Option : [2] ( 07/01/2009|22:05 )

      -----------\\ SUPPRESSION

      Supprime! - C:\Program Files\AskSBar\bar
      Supprime! - C:\Program Files\AskSBar

      -----------\\ Recherche de Fichiers / Dossiers ...


      -----------\\ [..\Internet Explorer\Main]

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
      "Start Page"="https://www.google.fr/?gws_rd=ssl"
      "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
      "Search Page"="https://www.google.com/?gws_rd=ssl"
      "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
      "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
      "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
      "Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"
      "Search Page"="https://www.google.com/?gws_rd=ssl"
      "Start Page"="https://www.msn.com/fr-fr/"


      --------------------\\ Recherche d'autres infections

      C:\WINDOWS\system32\TBabIRqr.ini
      C:\WINDOWS\system32\TBabIRqr.ini2
      [b]==> VUNDO <==/b




      1 - "C:\ToolBar SD\TB_1.txt" - 07/01/2009|22:08 - Option : [2]

      -----------\\ Fin du rapport a 22:08:06,82
      0
  2. jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 645
     
    tu fais la a et puis la b pour remettre la création des point de restauration en route car si tu ne fais pas la b tu n'aura plus de point qui se créront automatiquement 

    Après une désinfection il est utile de supprimer tous les points de restauration système de façon à ne pas remonter, par mégarde, un point de restauration infecté. 

Pour cela, il faut désactiver la restauration système (ce qui aura pour conséquence de supprimer tous les points de restauration existants) puis la réactiver juste après pour que Windows continue à faire des points de sauvegarde réguliers.
    1
  3. plopus Messages postés 49 Date d'inscription   Statut Contributeur sécurité Dernière intervention   293
     
    bonjour,

    Commence par telecharger hijackthis ici :
    http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis

    ouvre et choisit DO A SAN AND SAVE THE LOG et poste le rapport stp
    0
    1. ginie
       
      BONJOUR,

      c'est cela je pense :

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 13:29:41, on 04/01/2009
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16762)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
      C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\PMObserv.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\WINDOWS\eHome\ehRecvr.exe
      C:\WINDOWS\eHome\ehSched.exe
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
      C:\Program Files\Spyware Doctor\pctsAuxs.exe
      C:\Program Files\Spyware Doctor\pctsSvc.exe
      C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
      C:\Program Files\Spyware Doctor\pctsTray.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
      C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
      C:\WINDOWS\ehome\mcrdsvc.exe
      C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
      C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\QuickTime\qttask.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Microsoft ActiveSync\wcescomm.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\WINDOWS\system32\dllhost.exe
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: (no name) - {2f605cdc-54cc-4f94-9f05-cda08da12942} - C:\WINDOWS\system32\mejiyolo.dll (file missing)
      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
      O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
      O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
      O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
      O4 - HKLM\..\Run: [sodokimipu] Rundll32.exe "C:\WINDOWS\system32\tevaziva.dll",s
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [CPM5796bdc3] Rundll32.exe "c:\windows\system32\vahojezi.dll",a
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-19\..\Run: [sodokimipu] Rundll32.exe "C:\WINDOWS\system32\tevaziva.dll",s (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
      O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
      O8 - Extra context menu item: Ajouter un site de support RSS à VAIO Information FLOW - C:\Program Files\Sony\VAIO Information FLOW\aiesc.html
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Transfert par Image Converter 2 Plus - C:\Program Files\Sony\Image Converter 2\menu.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
      O14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.com/fr/
      O15 - Trusted Zone: *.sony-europe.com
      O15 - Trusted Zone: *.sonystyle-europe.com
      O15 - Trusted Zone: *.vaio-link.com
      O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
      O16 - DPF: {084DAC27-6FA3-4F55-9005-033F2F102F5C} (ITPPDiagIE Class) - http://data.jeuxclassiques.com/npwwg.cab
      O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
      O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
      O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://copainsdavant.linternaute.com/...
      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
      O16 - DPF: {74E4A24D-5224-4F05-8A41-99445E0FC22B} (GameHouse Games Player) - http://www.gamehouse.com/realarcade-webgames/gamehouse/gamehouseplayer.cab
      O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://theonils.spaces.live.com/PhotoUpload/MsnPUpld.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
      O16 - DPF: {FFFDF6F2-F7BC-4B90-B789-CB7BBDA13AD6} (CLaunchPrint Object) - http://photosmart.hpphoto.com/Download/HPeServicesLocalPrint.CAB
      O20 - AppInit_DLLs: karina.dat kukqya.dll cdrgiq.dll C:\WINDOWS\system32\juborafe.dll c:\windows\system32\vahojezi.dll
      O20 - Winlogon Notify: ddcCUlJy - ddcCUlJy.dll (file missing)
      O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\vahojezi.dll
      O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\vahojezi.dll
      O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
      O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 2\IcVzMon.exe
      O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
      O23 - Service: PMObserv - RICOH CO.,LTD. - C:\WINDOWS\system32\PMObserv.exe
      O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
      O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
      O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
      O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
      O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe
      O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
      O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
      O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
      O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
      O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
      O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
      O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
      O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
      O23 - Service: VAIO Cooporated Initialisation (VCI) - Sony Corporation - C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe
      O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
      O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
      O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
      0
  4. ginie
     
    Bonjour,

    voici le rapport que l'on me demande, et maintenant que dois je faire svp
    Merci

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 13:29:41, on 04/01/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16762)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\PMObserv.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\Program Files\Spyware Doctor\pctsAuxs.exe
    C:\Program Files\Spyware Doctor\pctsSvc.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\Program Files\Spyware Doctor\pctsTray.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
    C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
    C:\WINDOWS\ehome\mcrdsvc.exe
    C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
    C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\QuickTime\qttask.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Microsoft ActiveSync\wcescomm.exe
    C:\PROGRA~1\MI3AA1~1\rapimgr.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: (no name) - {2f605cdc-54cc-4f94-9f05-cda08da12942} - C:\WINDOWS\system32\mejiyolo.dll (file missing)
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
    O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
    O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
    O4 - HKLM\..\Run: [sodokimipu] Rundll32.exe "C:\WINDOWS\system32\tevaziva.dll",s
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [CPM5796bdc3] Rundll32.exe "c:\windows\system32\vahojezi.dll",a
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\Run: [sodokimipu] Rundll32.exe "C:\WINDOWS\system32\tevaziva.dll",s (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
    O8 - Extra context menu item: Ajouter un site de support RSS à VAIO Information FLOW - C:\Program Files\Sony\VAIO Information FLOW\aiesc.html
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Transfert par Image Converter 2 Plus - C:\Program Files\Sony\Image Converter 2\menu.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
    O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
    O14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.com/fr/
    O15 - Trusted Zone: *.sony-europe.com
    O15 - Trusted Zone: *.sonystyle-europe.com
    O15 - Trusted Zone: *.vaio-link.com
    O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
    O16 - DPF: {084DAC27-6FA3-4F55-9005-033F2F102F5C} (ITPPDiagIE Class) - http://data.jeuxclassiques.com/npwwg.cab
    O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
    O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
    O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - https://copainsdavant.linternaute.com/
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {74E4A24D-5224-4F05-8A41-99445E0FC22B} (GameHouse Games Player) - http://www.gamehouse.com/realarcade-webgames/gamehouse/gamehouseplayer.cab
    O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://theonils.spaces.live.com/PhotoUpload/MsnPUpld.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
    O16 - DPF: {FFFDF6F2-F7BC-4B90-B789-CB7BBDA13AD6} (CLaunchPrint Object) - http://photosmart.hpphoto.com/Download/HPeServicesLocalPrint.CAB
    O20 - AppInit_DLLs: karina.dat kukqya.dll cdrgiq.dll C:\WINDOWS\system32\juborafe.dll c:\windows\system32\vahojezi.dll
    O20 - Winlogon Notify: ddcCUlJy - ddcCUlJy.dll (file missing)
    O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\vahojezi.dll
    O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\vahojezi.dll
    O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 2\IcVzMon.exe
    O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: PMObserv - RICOH CO.,LTD. - C:\WINDOWS\system32\PMObserv.exe
    O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
    O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
    O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
    O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
    O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
    O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
    O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
    O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
    O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
    O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
    O23 - Service: VAIO Cooporated Initialisation (VCI) - Sony Corporation - C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe
    O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
    O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
    O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
    End of file - 14043 bytes
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 645
     
    bonjour, j'ai vu ton appel http://www.commentcamarche.net/forum/affich 10301169 virus et rapport hijackthis le mieux est de continuer ici , je vais donc si tu es d'accord te guider puisque tu t'impatientes tu fais ce qui suit dans l'ordre , tu poste les rapports dans l'ordre de leurs création , Merci

    sinon juste une question tu utilises quoi comme anti-virus en ce moment ????

    1) Télécharge ToolBar-S&D ( Merci à Eric_71, Angeldark, Sham_Rock et XmichouX )
    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

    Lances l'installation du programme en exécutant le fichier téléchargé.
    Double-clique maintenant sur le raccourci de Toolbar-S&D.
    Sélectionnes la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
    Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
    Postes le rapport généré. (C:\TB.txt)

    2)Suppression

    Relance Toolbar-S&D en double-cliquant sur le raccourci. Tape sur "2" puis valide en appuyant sur "Entrée".
    ! Ne ferme pas la fenêtre lors de la suppression !
    Un rapport sera généré, poste son contenu ici.

    NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
    Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
    Tape explorer puis valide.

    Aide en images: https://sites.google.com/site/toolbarsd/aideenimages

    3 ) Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
    http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
    Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec

    ------
    = Redémarre en mode Sans Échec (le démarrage peut prendre plusieurs minutes)
    Attention, pas d’accès à internet dans ce mode. Enregistre ou imprime les consignes.

    Relance le Pc et tapote la touche F8 ( ou F5 pour certains) , jusqu’à l’apparition des inscriptions avec choix de démarrage
    Avec les touches « flèches », sélectionne Mode sans échec ==> entrée ==>nom utilisateur habituel
    -------

    = Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
    = Appuie sur Y pour commencer le processus de nettoyage.
    = Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
    = Appuie sur une touche pour redémarrer le PC.
    = Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
    = Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
    = Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
    = Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
    = Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse

    TUTO: https://www.malekal.com/slenfbot-still-an-other-irc-bot/

    4) et puis tu posteras un nouveau hijackthis pour contrôle , Merci
    0
    1. ginie
       
      Bonjour Jacques,

      j'utilise PC Tools Spyware Doctor,
      donc je dois suivre tes consignes et te donner les rapports au fur et à mesure.
      C'est ça ?
      Avant tout, merci de ton aide !
      0
    2. ginie
       
      Lors de la recherche le message suivant reste afficher et il ne se passe plus rien !
      Recherche de Fichiers / Dossiers... SearchEssistant
      Est ce normal ?
      Que dois je faire maintenant, stp ?
      0
  7. totobetourne Messages postés 5677 Statut Membre 65
     
    bonjour

    suit les indications qu il t a donne.
    spyware doctor cela ne vaut pas la peine il ne t enlevera rien ou presque.
    tu en as des infections(ne t inquiete pas)
    0
  8. totobetourne Messages postés 5677 Statut Membre 65
     
    c est normal le scan dure un certain temps , pas plus de 20mn je pense, tout depend de l ordi aussi ,si il est assez ancien le temps augmente.
    0
    1. ginie
       
      Ok, je vais donc attendre, merci
      0
  9. jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 645
     
    bonjour, jusqu' a preuve du contraire si je ne me trompes pas PC Tools Spyware Doctor n'est pas un anti-virus mais un anti-spyware son dommaine d'intervention n'est pas le même
    0
    1. ginie
       
      Cela vous donne mon niveau de connaissances dans le domaine informatique !
      Que me conseillez vous donc comme antivirus, svp
      0
    2. ginie
       
      mon manque de savoir vous fais peur à ce point ! lol
      Plus de conseil ? et la recherche en est tjrs au même point !
      Au secours !!!
      0
  10. jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 645
     
    normalement lorsque tu as un outil qui travail il faut éviter de se servir du pc car avec certain outil tu pourrais planter le pc , si tu trouves que l'analyse de toolbar est bloqué ce qui me parrait bizarre tu l'arrêtes on fera autrement après et tu fais sdfix en mode sans echec
    0
    1. ginie
       
      je suis vraiment désolée mais qu'est ce que le mode sans echec ?
      0
  11. jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 645
     
    si tu suis la procédure donné pour sdfix tu as toute les explications je te remets la procédure pour sdfix et le démarrage en mode sans echec plus détaillée

    Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
    http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
    Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec

    ------
    pour redémarrer en mode sans échec : /!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\

    (attention : pas de connexion possible en mode sans échec , donc copies ou imprimes bien la manipe pour éviter les erreurs ...)

    .Cliques sur Démarrer
    .Cliques sur Arrêter
    .Sélectionnes Redémarrer et au redémarrage
    .Appuis sur la touche F8 ou F5 celon les marques de pc sans discontinuer "1 appuis seconde" dès qu'un écran de texte apparaît puis disparaît
    .Utilises les touches de direction pour sélectionner mode sans échec
    .puis appuis sur ENTRÉE
    .Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou une autre
    une fois démarré ne t'inquiette pas si les couleurs et les icônes ne sont pas comme d'abitude

    tuto:http://www.vista-xp.fr/forum/topic93.html
    -------

    = Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
    = Appuie sur Y pour commencer le processus de nettoyage.
    = Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
    = Appuie sur une touche pour redémarrer le PC.
    = Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
    = Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
    = Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
    = Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
    = Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse

    TUTO: https://www.malekal.com/slenfbot-still-an-other-irc-bot/
    0
  12. ginie
     
    voici le rapport que mon ordi a bien voulu me donner, toutes les étapes ne se sont pas déroulées commes décrites malgré de nombreux essai "au pied de la lettre" de vos infos détaillées.

    [b]System Report[/b]
    *************

    Run on 04/01/2009 at 18:12

    Microsoft Windows XP [version 5.1.2600]

    Current user is an administrator

    [b]Running Processes[/b]:

    \SystemRoot\System32\smss.exe [796]
    \??\C:\WINDOWS\system32\csrss.exe [864]
    \??\C:\WINDOWS\system32\winlogon.exe [888]
    C:\WINDOWS\system32\services.exe [940]
    C:\WINDOWS\system32\lsass.exe [952]
    C:\WINDOWS\system32\svchost.exe [1128]
    C:\WINDOWS\system32\svchost.exe [1200]
    C:\WINDOWS\System32\svchost.exe [1244]
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [1296]
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [1336]
    C:\WINDOWS\system32\svchost.exe [1380]
    C:\WINDOWS\system32\svchost.exe [1516]
    C:\WINDOWS\system32\PMObserv.exe [1820]
    C:\WINDOWS\system32\spoolsv.exe [1876]
    C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe [1996]
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2036]
    C:\Program Files\Bonjour\mDNSResponder.exe [148]
    C:\WINDOWS\eHome\ehRecvr.exe [196]
    C:\WINDOWS\eHome\ehSched.exe [252]
    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [312]
    C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe [488]
    C:\WINDOWS\system32\nvsvc32.exe [1152]
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [1272]
    C:\Program Files\Spyware Doctor\pctsAuxs.exe [1432]
    C:\Program Files\Spyware Doctor\pctsSvc.exe [1508]
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [3432]
    C:\Program Files\Spyware Doctor\pctsTray.exe [3440]
    C:\WINDOWS\system32\svchost.exe [3496]
    C:\WINDOWS\system32\svchost.exe [3556]
    C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [3612]
    C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [3728]
    C:\WINDOWS\ehome\mcrdsvc.exe [3892]
    C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [3972]
    C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe [4028]
    C:\WINDOWS\Explorer.EXE [3060]
    C:\Program Files\QuickTime\qttask.exe [3364]
    C:\WINDOWS\system32\ctfmon.exe [3548]
    C:\Program Files\Microsoft ActiveSync\wcescomm.exe [3768]
    C:\PROGRA~1\MI3AA1~1\rapimgr.exe [3880]
    C:\WINDOWS\system32\dllhost.exe [2560]
    C:\WINDOWS\System32\alg.exe [3048]
    C:\Program Files\Internet Explorer\iexplore.exe [784]

    [b]Drivers - Running[/b]:

    ACPI
    ACPIEC
    AegisP
    AFD
    ApfiltrService
    Arp1394
    atapi
    audstub
    Beep
    Cdfs
    Cdrom
    CmBatt
    Compbatt
    Disk
    DMICall
    E100B
    Fips
    FltMgr
    Ftdisk
    GEARAspiWDM
    Gpc
    HDAudBus
    HSFHWAZL
    HSF_DPV
    HTTP
    i8042prt
    IKFileSec
    IKSysFlt
    IKSysSec
    Imapi
    intelppm
    IpNat
    IPSec
    isapnp
    Kbdclass
    kmixer
    KSecDD
    mdmxsdk
    mnmdd
    Modem
    Mouclass
    MountMgr
    MRxDAV
    MRxSmb
    Msfs
    mssmbios
    Mup
    NDIS
    NdisTapi
    Ndisuio
    NdisWan
    NDProxy
    NetBIOS
    NetBT
    NIC1394
    Npfs
    Ntfs
    Null
    nv
    ohci1394
    PartMgr
    PCI
    PCIIde
    Pcmcia
    pctfw2
    PptpMiniport
    PSched
    Ptilink
    PxHelp20
    RasAcd
    Rasl2tp
    RasPppoe
    Raspti
    Rdbss
    RDPCDD
    rdpdr
    redbook
    s24trans
    SI3132
    SiFilter
    SiRemFil
    SNC
    SonyImgF
    sr
    Srv
    StarOpen
    STHDA
    swenum
    sysaudio
    Tcpip
    TermDD
    ti21sony
    tosporte
    Tosrfcom
    Update
    usbehci
    usbhub
    usbuhci
    usbvm321
    VgaSave
    VolSnap
    w39n51
    Wanarp
    wdmaud
    winachsf
    WS2IFSL

    [b]Drivers - Stopped[/b]:

    Abiosdsk
    abp480n5
    adpu160m
    aec
    Aha154x
    aic78u2
    aic78xx
    AliIde
    amsint
    asc
    asc3350p
    asc3550
    AsyncMac
    Atdisk
    Atmarpc
    bdpredir
    cbidf2k
    CCDECODE
    cd20xrnt
    Cdaudio
    Changer
    CmdIde
    Cpqarray
    dac960nt
    dmboot
    dmio
    dmload
    DMusic
    dpti2o
    drmkaud
    e1express
    Fastfat
    Fdc
    Flpydisk
    HidUsb
    hpn
    i2omgmt
    i2omp
    ini910u
    IntelIde
    Ip6Fw
    IpFilterDriver
    IpInIp
    IRENUM
    kbdhid
    lbrtfdc
    MHNDRV
    mouhid
    mraid35x
    MSKSSRV
    MSPCLOCK
    MSPQM
    MSTEE
    NABTSFEC
    NdisIP
    NwlnkFlt
    NwlnkFwd
    Parport
    ParVdm
    PCIDump
    PDCOMP
    PDFRAME
    PDRELI
    PDRFRAME
    perc2
    perc2hib
    Profos
    ql1080
    Ql10wnt
    ql12160
    ql1240
    ql1280
    RDPWD
    Secdrv
    Serial
    Sfloppy
    Simbad
    SLIP
    Sparrow
    splitter
    sscdbus
    sscdmdfl
    sscdmdm
    streamip
    swmidi
    symc810
    symc8xx
    SYMIDSCO
    sym_hi
    sym_u3
    TDPIPE
    TDTCP
    toshidpt
    TosIde
    Tosrfbd
    Tosrfbnp
    Tosrfhid
    tosrfnds
    TosRfSnd
    Tosrfusb
    Trufos
    Udfs
    ultra
    USBAAPL
    usbccgp
    usbprint
    usbscan
    USBSTOR
    usb_rndisx
    ViaIde
    wanatw
    wceusbsh
    WDICA
    WSTCODEC
    WudfPf
    WudfRd

    [b]Services - Running[/b]:

    AdobeActiveFileMonitor4.0
    ALG
    Apple
    AudioSrv
    BITS
    Bonjour
    COMSysApp
    CryptSvc
    DcomLaunch
    Dhcp
    Dnscache
    ehRecvr
    ehSched
    ERSvc
    Eventlog
    EventSystem
    EvtEng
    FastUserSwitchingCompatibility
    gusvc
    helpsvc
    HidServ
    lanmanserver
    lanmanworkstation
    LmHosts
    McrdSvc
    MSSQL$VAIO_VEDB
    Netman
    Nla
    NVSvc
    PlugPlay
    PMObserv
    PolicyAgent
    ProtectedStorage
    RasMan
    RegSrvc
    RemoteRegistry
    RpcSs
    S24EventMonitor
    SamSs
    Schedule
    sdAuxService
    sdCoreService
    SeaPort
    seclogon
    SENS
    SharedAccess
    ShellHWDetection
    Spooler
    srservice
    SSDPSRV
    stisvc
    TapiSrv
    TermService
    Themes
    TrkWks
    VAIO
    Vcsw
    VzCdbSvc
    VzFw
    W32Time
    WebClient
    winmgmt
    wscsvc
    WZCSVC

    [b]Services - Stopped[/b]:

    Alerter
    AppMgmt
    aspnet_state
    Browser
    CiSvc
    ClipSrv
    clr_optimization_v2.0.50727_32
    dmadmin
    dmserver
    Dot3svc
    EapHost
    hkmsvc
    HTTPFilter
    IDriverT
    Image
    ImapiService
    iPod
    Messenger
    MHN
    mnmsrvc
    MSCSPTISRV
    MSDTC
    MSIServer
    MSSQLServerADHelper
    napagent
    NetDDE
    NetDDEdsdm
    Netlogon
    NtLmSsp
    NtmsSvc
    ose
    PACSPTISVR
    RasAuto
    RDSessMgr
    RemoteAccess
    RpcLocator
    RSVP
    SCardSvr
    SonicStage
    SPTISRV
    SQLAgent$VAIO_VEDB
    SSScsiSV
    SwPrv
    SysmonLog
    TlntSvr
    upnphost
    UPS
    VAIO
    VAIOMediaPlatform-IntegratedServer-AppServer
    VAIOMediaPlatform-IntegratedServer-HTTP
    VAIOMediaPlatform-IntegratedServer-UPnP
    VAIOMediaPlatform-Mobile-Gateway
    VCI
    VSS
    WmdmPmSN
    Wmi
    WmiApSrv
    WMPNetworkSvc
    wuauserv
    WudfSvc
    xmlprov

    [b]Files Created/Modified - 60 Days[/b]:

    C:\

    4 Jan 2009 18:07:56 1 610 612 736 A.SH. "C:\pagefile.sys"
    25 Dec 2008 22:40:00 104 498 A.... "C:\raze.exe"
    20 Dec 2008 8:57:34 55 858 A.... "C:\reps.exe"
    26 Dec 2008 15:06:38 104 498 A.... "C:\win.exe"

    C:\WINDOWS\

    4 Jan 2009 18:08:02 2 048 A.S.. "C:\WINDOWS\bootstat.dat"
    18 Dec 2008 23:12:38 38 574 ..SHR "C:\WINDOWS\fxstaller.exe"
    4 Dec 2008 10:53:26 27 A.... "C:\WINDOWS\SW_Win2000X24.DLL"
    20 Dec 2008 8:50:14 55 858 ..SHR "C:\WINDOWS\sysrest32.exe"
    26 Dec 2008 14:51:18 35 328 A.... "C:\WINDOWS\system32\awtsSlih.dll"
    23 Dec 2008 23:47:18 84 167 ..... "C:\WINDOWS\system32\bedamifu.dll"
    30 Dec 2008 9:11:48 85 126 ..... "C:\WINDOWS\system32\bosofifa.dll"
    26 Dec 2008 13:31:40 35 328 A.... "C:\WINDOWS\system32\byXRJApO.dll"
    18 Dec 2008 23:21:04 126 464 A.... "C:\WINDOWS\system32\caoooi.dll"
    26 Dec 2008 15:41:18 35 328 A.... "C:\WINDOWS\system32\cbXPfGxW.dll"
    26 Dec 2008 15:01:18 35 328 A.... "C:\WINDOWS\system32\cbXRKApQ.dll"
    4 Jan 2009 11:40:22 86 109 A.SH. "C:\WINDOWS\system32\dewuzeko.dll"
    20 Dec 2008 13:05:48 62 598 A.SH. "C:\WINDOWS\system32\digezuru.dll"
    26 Dec 2008 16:35:00 35 328 A.... "C:\WINDOWS\system32\efcCvVPJ.dll"
    26 Dec 2008 14:01:18 35 328 A.... "C:\WINDOWS\system32\fcccaywt.dll"
    26 Dec 2008 16:11:20 35 328 A.... "C:\WINDOWS\system32\fccYsrqR.dll"
    24 Dec 2008 23:48:06 98 070 A.SH. "C:\WINDOWS\system32\fegenope.dll"
    29 Dec 2008 9:11:38 98 976 A.SH. "C:\WINDOWS\system32\fezahoyu.dll"
    25 Dec 2008 21:34:08 253 592 A.... "C:\WINDOWS\system32\FNTCACHE.DAT"
    30 Dec 2008 21:11:56 61 707 A.SH. "C:\WINDOWS\system32\fofajivo.dll"
    22 Dec 2008 14:22:04 73 216 A.... "C:\WINDOWS\system32\fwsdseds.dll"
    27 Dec 2008 21:38:16 62 070 A.SH. "C:\WINDOWS\system32\gurohodo.dll"
    21 Dec 2008 14:18:12 85 287 ..... "C:\WINDOWS\system32\hagebuzi.dll"
    1 Jan 2009 23:24:42 98 085 A.SH. "C:\WINDOWS\system32\hezagivu.dll"
    26 Dec 2008 14:41:18 35 328 A.... "C:\WINDOWS\system32\hgGyVPGV.dll"
    22 Dec 2008 14:22:02 126 464 A.... "C:\WINDOWS\system32\hhukapvv.dll"
    23 Dec 2008 11:47:20 87 260 A.SH. "C:\WINDOWS\system32\hobolaku.dll"
    23 Dec 2008 23:47:18 97 974 A.SH. "C:\WINDOWS\system32\hovebipu.dll"
    26 Dec 2008 13:41:20 35 328 A.... "C:\WINDOWS\system32\iifebXrr.dll"
    26 Dec 2008 9:32:08 35 328 A.... "C:\WINDOWS\system32\iifgEvTJ.dll"
    18 Dec 2008 23:21:04 126 464 A.... "C:\WINDOWS\system32\ipfmyyca.dll"
    2 Jan 2009 11:24:44 99 052 A.SH. "C:\WINDOWS\system32\jagupodi.dll"
    26 Dec 2008 1:40:28 99 095 A.... "C:\WINDOWS\system32\jofaluju.dll"
    20 Dec 2008 13:05:48 83 090 ..... "C:\WINDOWS\system32\kekiyala.dll"
    26 Dec 2008 15:51:18 35 328 A.... "C:\WINDOWS\system32\kHAQggdE.dll"
    28 Dec 2008 10:38:30 99 030 A.SH. "C:\WINDOWS\system32\lelizomo.dll"
    21 Dec 2008 14:19:34 126 976 A.... "C:\WINDOWS\system32\lhfajllq.dll"
    26 Dec 2008 14:11:18 35 328 A.... "C:\WINDOWS\system32\ljJCrOgD.dll"
    27 Dec 2008 7:50:14 2 724 ..SH. "C:\WINDOWS\system32\madubiha.exe"
    24 Dec 2008 11:47:44 84 117 ..... "C:\WINDOWS\system32\misahavu.dll"
    20 Dec 2008 9:04:02 35 328 A.... "C:\WINDOWS\system32\mlJdBQKa.dll"
    19 Dec 2008 23:19:34 73 216 A.... "C:\WINDOWS\system32\modxhbee.dll"
    13 Dec 2008 7:37:56 3 593 216 A.... "C:\WINDOWS\system32\mshtml.dll"
    31 Dec 2008 23:45:42 99 135 A.... "C:\WINDOWS\system32\nelesoye.dll"
    26 Dec 2008 14:21:18 35 328 A.... "C:\WINDOWS\system32\opnkkhfF.dll"
    26 Dec 2008 15:21:18 35 328 A.... "C:\WINDOWS\system32\opnkllKA.dll"
    2 Jan 2009 13:16:04 71 070 A.... "C:\WINDOWS\system32\perfc009.dat"
    2 Jan 2009 13:16:04 87 160 A.... "C:\WINDOWS\system32\perfc00C.dat"
    2 Jan 2009 13:16:04 422 132 A.... "C:\WINDOWS\system32\perfh009.dat"
    2 Jan 2009 13:16:04 492 786 A.... "C:\WINDOWS\system32\perfh00C.dat"
    29 Dec 2008 21:11:48 62 644 A.SH. "C:\WINDOWS\system32\pewodaju.dll"
    26 Dec 2008 14:31:18 35 328 A.... "C:\WINDOWS\system32\pmnklMcD.dll"
    18 Dec 2008 23:29:28 35 328 A.... "C:\WINDOWS\system32\pmnoPGvw.dll"
    18 Dec 2008 23:15:54 35 328 A.... "C:\WINDOWS\system32\qoMeCvsq.dll"
    31 Dec 2008 10:58:42 99 069 A.SH. "C:\WINDOWS\system32\rarunuku.dll"
    1 Jan 2009 11:24:36 101 198 A.SH. "C:\WINDOWS\system32\rawijeku.dll"
    23 Dec 2008 23:47:18 61 535 A.SH. "C:\WINDOWS\system32\rejanote.dll"
    24 Dec 2008 23:48:04 84 542 ..... "C:\WINDOWS\system32\relereni.dll"
    24 Dec 2008 11:47:44 96 401 A.SH. "C:\WINDOWS\system32\rinapiza.dll"
    1 Jan 2009 11:24:34 83 716 ..... "C:\WINDOWS\system32\romemazu.dll"
    26 Dec 2008 13:01:44 35 328 A.... "C:\WINDOWS\system32\rqRjHyyy.dll"
    20 Dec 2008 8:50:54 35 328 A.... "C:\WINDOWS\system32\rqRLebXr.dll"
    30 Dec 2008 9:11:48 96 867 A.SH. "C:\WINDOWS\system32\savohofu.dll"
    25 Dec 2008 11:48:22 98 885 A.SH. "C:\WINDOWS\system32\sebimike.dll"
    26 Dec 2008 13:48:42 99 099 A.SH. "C:\WINDOWS\system32\silulawo.dll"
    2 Dec 2008 22:37:20 49 480 A.... "C:\WINDOWS\system32\sirenacm.dll"
    1 Jan 2009 23:24:42 86 260 ..... "C:\WINDOWS\system32\tipukuvu.dll"
    22 Dec 2008 22:31:20 94 906 A.SH. "C:\WINDOWS\system32\towozoha.dll"
    26 Dec 2008 9:26:30 35 328 A.... "C:\WINDOWS\system32\tuvSljjG.dll"
    26 Dec 2008 13:51:18 35 328 A.... "C:\WINDOWS\system32\tuvVOecY.dll"
    26 Dec 2008 16:21:20 35 328 A.... "C:\WINDOWS\system32\tuvWnkhe.dll"
    26 Dec 2008 15:31:18 35 328 A.... "C:\WINDOWS\system32\urqpqNDu.dll"
    4 Jan 2009 11:40:22 101 005 A.SH. "C:\WINDOWS\system32\vahojezi.dll"
    26 Dec 2008 16:01:18 35 328 A.... "C:\WINDOWS\system32\vtUlKCvt.dll"
    26 Dec 2008 16:45:02 35 328 A.... "C:\WINDOWS\system32\vtUmNDWN.dll"
    29 Dec 2008 9:11:36 87 324 ..... "C:\WINDOWS\system32\vufeguja.dll"
    26 Dec 2008 13:48:42 87 182 A.SH. "C:\WINDOWS\system32\webogori.dll"
    25 Dec 2008 11:48:20 84 564 ..... "C:\WINDOWS\system32\wovawuye.dll"
    26 Dec 2008 12:53:56 35 328 A.... "C:\WINDOWS\system32\wvULBqqN.dll"
    26 Dec 2008 13:11:18 35 328 A.... "C:\WINDOWS\system32\xxyaxXOi.dll"
    29 Dec 2008 21:11:48 97 345 A.SH. "C:\WINDOWS\system32\yapipije.dll"
    26 Dec 2008 15:11:20 35 328 A.... "C:\WINDOWS\system32\yaywWMdE.dll"
    23 Dec 2008 11:47:20 95 995 A.SH. "C:\WINDOWS\system32\yihazuso.dll"
    30 Dec 2008 21:11:54 100 976 A.SH. "C:\WINDOWS\system32\yirejame.dll"
    27 Dec 2008 21:38:16 99 052 A.SH. "C:\WINDOWS\system32\zagonibu.dll"
    3 Jan 2009 21:40:18 98 990 A.SH. "C:\WINDOWS\system32\zehuwabu.dll"
    2 Jan 2009 11:24:44 83 769 ..... "C:\WINDOWS\system32\zomotesa.dll"
    3 Jan 2009 22:04:36 67 072 A.... "C:\WINDOWS\system32\~.exe"
    4 Jan 2009 18:08:04 6 A..H. "C:\WINDOWS\Tasks\SA.DAT"
    31 Dec 2008 18:39:54 0 A.... "C:\WINDOWS\Temp\JET90A7.tmp"
    26 Dec 2008 9:30:34 0 A.... "C:\WINDOWS\Temp\JET9162.tmp"
    4 Jan 2009 18:08:12 0 A.... "C:\WINDOWS\Temp\JET9347.tmp"
    18 Dec 2008 20:53:08 0 A.... "C:\WINDOWS\Temp\JETAF4B.tmp"
    4 Dec 2008 20:38:50 0 A.... "C:\WINDOWS\Temp\JETBD25.tmp"
    4 Jan 2009 18:10:32 6 116 A.... "C:\WINDOWS\Temp\scs9.tmp"
    19 Dec 2008 12:00:06 0 A.... "C:\WINDOWS\Temp\tmp11.exe"
    19 Dec 2008 12:00:04 0 A.... "C:\WINDOWS\Temp\tmp11.tmp"
    21 Dec 2008 15:00:30 6 827 A.... "C:\WINDOWS\Temp\tmp3.exe"
    21 Dec 2008 15:00:02 0 A.... "C:\WINDOWS\Temp\tmp3.tmp"
    22 Dec 2008 16:00:06 0 A.... "C:\WINDOWS\Temp\tmp30.exe"
    22 Dec 2008 16:00:02 0 A.... "C:\WINDOWS\Temp\tmp30.tmp"
    20 Dec 2008 13:00:04 63 602 A.... "C:\WINDOWS\Temp\tmp4.exe"
    20 Dec 2008 13:00:02 0 A.... "C:\WINDOWS\Temp\tmp4.tmp"
    13 Dec 2008 7:37:56 3 593 216 A.... "C:\WINDOWS\system32\dllcache\mshtml.dll"
    7 Nov 2008 14:23:30 32 000 A.... "C:\WINDOWS\system32\drivers\usbaapl.sys"
    4 Jan 2009 11:13:10 16 384 A.... "C:\WINDOWS\Temp\Cookies\index.dat"
    2 Jan 2009 13:13:44 258 048 A.... "C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll"
    2 Jan 2009 13:13:44 114 176 A.... "C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll"
    4 Jan 2009 11:13:10 32 768 A.SH. "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\index.dat"
    4 Jan 2009 11:13:10 32 768 A.SH. "C:\WINDOWS\Temp\History\History.IE5\index.dat"

    C:\Program Files\

    20 Nov 2008 13:20:44 438 272 A.... "C:\Program Files\iTunes\CDDBControlApple.dll"
    20 Nov 2008 13:20:44 643 072 A.... "C:\Program Files\iTunes\iPodUpdaterExt.dll"
    20 Nov 2008 13:20:48 14 294 824 A.... "C:\Program Files\iTunes\iTunes.exe"
    20 Nov 2008 13:20:54 108 328 A.... "C:\Program Files\iTunes\iTunesAdmin.dll"
    20 Nov 2008 13:20:54 290 088 A.... "C:\Program Files\iTunes\iTunesHelper.exe"
    20 Nov 2008 13:20:56 132 392 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.dll"
    20 Nov 2008 13:20:56 283 136 A.... "C:\Program Files\iTunes\iTunesOutlookAddIn.dll"
    20 Nov 2008 13:20:56 172 544 A.... "C:\Program Files\iTunes\iTunesPhotoSupport.dll"
    9 Nov 2008 2:09:02 193 912 A.... "C:\Program Files\Microsoft Office Outlook Connector\MSNCONRC.DLL"
    9 Nov 2008 2:09:02 28 536 A.... "C:\Program Files\Microsoft Office Outlook Connector\MSOCPRC.DLL"
    9 Nov 2008 18:45:04 23 952 A.... "C:\Program Files\Microsoft Office Outlook Connector\OLCSTART.EXE"
    17 Dec 2008 2:54:20 1 247 600 A.... "C:\Program Files\Spyware Doctor\SDNetPlugin.dll"
    25 Dec 2008 22:14:56 104 498 ..SHR "C:\Program Files\Fichiers communs\System\run32dll.exe"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin5.dll"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin6.dll"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin7.dll"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll"
    20 Nov 2008 13:20:44 536 872 A.... "C:\Program Files\iPod\bin\iPodService.exe"
    20 Nov 2008 13:20:54 105 472 A.... "C:\Program Files\iTunes\iTunes.Resources\iTunes.dll"
    20 Nov 2008 13:21:02 103 936 A.... "C:\Program Files\iTunes\iTunes.Resources\iTunesRegistry.dll"
    20 Nov 2008 13:20:56 42 496 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\iTunesHelper.dll"
    20 Nov 2008 13:20:56 129 536 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\iTunesMiniPlayer.dll"
    20 Nov 2008 13:20:36 69 632 A.... "C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll"
    13 Nov 2008 9:33:54 65 896 A.... "C:\Program Files\Microsoft\Office Live\npOLW.dll"
    13 Nov 2008 9:33:54 97 128 A.... "C:\Program Files\Microsoft\Office Live\OfficeLiveSignIn.exe"
    13 Nov 2008 9:34:06 203 112 A.... "C:\Program Files\Microsoft\Office Live\OLConnector.dll"
    13 Nov 2008 9:34:06 128 360 A.... "C:\Program Files\Microsoft\Office Live\OLConnectorResources.dll"
    7 Nov 2008 12:37:46 14 265 A.... "C:\Program Files\Softinterface, Inc\Convert PDF To Image\unins000.dat"
    7 Nov 2008 12:37:18 664 057 A.... "C:\Program Files\Softinterface, Inc\Convert PDF To Image\unins000.exe"
    4 Jan 2009 13:26:30 396 288 A.... "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe"
    2 Dec 2008 21:09:50 532 840 A.... "C:\Program Files\Windows Live\Contacts\abssm.dll"
    2 Dec 2008 21:09:50 59 752 A.... "C:\Program Files\Windows Live\Contacts\conproxy.dll"
    2 Dec 2008 21:09:50 129 384 A.... "C:\Program Files\Windows Live\Contacts\consync.dll"
    2 Dec 2008 21:09:52 647 016 A.... "C:\Program Files\Windows Live\Contacts\contact.dll"
    2 Dec 2008 21:09:52 581 480 A.... "C:\Program Files\Windows Live\Contacts\lmcdata.dll"
    2 Dec 2008 21:09:52 27 496 A.... "C:\Program Files\Windows Live\Contacts\wlcomm.exe"
    2 Dec 2008 21:09:50 32 616 A.... "C:\Program Files\Windows Live\Contacts\wldlog.dll"
    2 Dec 2008 23:33:54 720 216 A.... "C:\Program Files\Windows Live\Installer\wlarp.exe"
    2 Dec 2008 23:31:46 373 592 A.... "C:\Program Files\Windows Live\Installer\wloobe.exe"
    2 Dec 2008 21:53:38 206 168 A.... "C:\Program Files\Windows Live\Installer\wlsres.dll"
    2 Dec 2008 22:37:58 165 192 A.... "C:\Program Files\Windows Live\Mail\ABImport.dll"
    2 Dec 2008 22:37:48 109 384 A.... "C:\Program Files\Windows Live\Mail\actorbas.dll"
    2 Dec 2008 22:37:46 103 752 A.... "C:\Program Files\Windows Live\Mail\adorner.dll"
    2 Dec 2008 22:38:16 192 328 A.... "C:\Program Files\Windows Live\Mail\aimg.dll"
    2 Dec 2008 22:38:10 176 456 A.... "C:\Program Files\Windows Live\Mail\alayout.dll"
    2 Dec 2008 22:37:42 89 416 A.... "C:\Program Files\Windows Live\Mail\canproxy.dll"
    2 Dec 2008 22:38:22 321 864 A.... "C:\Program Files\Windows Live\Mail\canvas.dll"
    2 Dec 2008 22:37:48 107 848 A.... "C:\Program Files\Windows Live\Mail\cnvsshrd.dll"
    2 Dec 2008 22:37:42 93 512 A.... "C:\Program Files\Windows Live\Mail\dgeneral.dll"
    2 Dec 2008 22:38:10 187 720 A.... "C:\Program Files\Windows Live\Mail\mailacct.dll"
    2 Dec 2008 22:38:50 791 368 A.... "C:\Program Files\Windows Live\Mail\mailcomm.dll"
    2 Dec 2008 22:37:44 102 728 A.... "C:\Program Files\Windows Live\Mail\mailimp.dll"
    2 Dec 2008 22:41:54 2 202 440 A.... "C:\Program Files\Windows Live\Mail\maillang.dll"
    2 Dec 2008 22:39:14 11 716 424 A.... "C:\Program Files\Windows Live\Mail\mailres2.dll"
    2 Dec 2008 22:37:54 131 912 A.... "C:\Program Files\Windows Live\Mail\mailrt2.dll"
    2 Dec 2008 22:38:56 2 744 648 A.... "C:\Program Files\Windows Live\Mail\msmail.dll"
    2 Dec 2008 22:37:16 18 760 A.... "C:\Program Files\Windows Live\Mail\piBase.dll"
    2 Dec 2008 22:37:50 121 160 A.... "C:\Program Files\Windows Live\Mail\piOrg.dll"
    2 Dec 2008 22:37:42 71 496 A.... "C:\Program Files\Windows Live\Mail\smapi.dll"
    20 Nov 2008 22:17:58 144 416 A.... "C:\Program Files\Windows Live\Mail\sqmapi.dll"
    2 Dec 2008 22:37:54 131 400 A.... "C:\Program Files\Windows Live\Mail\ucspell.dll"
    2 Dec 2008 22:37:46 104 264 A.... "C:\Program Files\Windows Live\Mail\uxcalendar.dll"
    2 Dec 2008 22:38:48 541 512 A.... "C:\Program Files\Windows Live\Mail\uxcontacts.dll"
    2 Dec 2008 22:38:54 2 392 392 A.... "C:\Program Files\Windows Live\Mail\uxcore.dll"
    2 Dec 2008 22:41:18 302 920 A.... "C:\Program Files\Windows Live\Mail\wab32res.dll"
    2 Dec 2008 22:38:20 315 720 A.... "C:\Program Files\Windows Live\Mail\wabapi.dll"
    2 Dec 2008 22:38:08 169 800 A.... "C:\Program Files\Windows Live\Mail\wcics.dll"
    2 Dec 2008 22:38:10 175 944 A.... "C:\Program Files\Windows Live\Mail\wcstore.dll"
    2 Dec 2008 22:37:24 22 856 A.... "C:\Program Files\Windows Live\Mail\wcstoreproxy.dll"
    2 Dec 2008 22:38:10 169 800 A.... "C:\Program Files\Windows Live\Mail\wcsync.dll"
    2 Dec 2008 22:37:42 49 992 A.... "C:\Program Files\Windows Live\Mail\wldcore.dll"
    2 Dec 2008 22:37:22 32 584 A.... "C:\Program Files\Windows Live\Mail\wldlog.dll"
    2 Dec 2008 22:41:16 115 016 A.... "C:\Program Files\Windows Live\Mail\wlmail.exe"
    20 Nov 2008 22:16:10 3 611 448 A.... "C:\Program Files\Windows Live\Mail\wlmfilter.dat"
    20 Nov 2008 22:16:10 454 048 A.... "C:\Program Files\Windows Live\Mail\wlmfilter.dll"
    2 Dec 2008 22:38:18 225 608 A.... "C:\Program Files\Windows Live\Messenger\liveNatTrav.dll"
    2 Dec 2008 22:38:48 554 824 A.... "C:\Program Files\Windows Live\Messenger\livetransport.dll"
    2 Dec 2008 22:37:44 62 280 A.... "C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll"
    2 Dec 2008 22:38:16 223 048 A.... "C:\Program Files\Windows Live\Messenger\msgsc.14.0.8050.1202.dll"
    2 Dec 2008 22:41:26 368 456 A.... "C:\Program Files\Windows Live\Messenger\msgslang.14.0.8050.1202.dll"
    2 Dec 2008 22:39:00 11 410 760 A.... "C:\Program Files\Windows Live\Messenger\msgsres.dll"
    2 Dec 2008 22:38:50 442 184 A.... "C:\Program Files\Windows Live\Messenger\msgswcam.dll"
    2 Dec 2008 22:41:56 3 882 312 A.... "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"
    14 Nov 2008 16:07:40 442 760 A.... "C:\Program Files\Windows Live\Messenger\msvs.exe"
    11 Nov 2008 15:06:44 51 624 A.... "C:\Program Files\Windows Live\Messenger\msvsui.dll"
    2 Dec 2008 22:38:48 424 776 A.... "C:\Program Files\Windows Live\Messenger\PresenceIM.dll"
    2 Dec 2008 22:37:40 56 136 A.... "C:\Program Files\Windows Live\Messenger\psmsong.14.0.8050.1202.dll"
    24 Nov 2008 22:28:06 6 153 552 A.... "C:\Program Files\Windows Live\Messenger\rtmpltfm.dll"
    20 Nov 2008 22:17:58 144 416 A.... "C:\Program Files\Windows Live\Messenger\sqmapi.dll"
    24 Nov 2008 22:28:06 4 752 200 A.... "C:\Program Files\Windows Live\Messenger\uccapi.dll"
    20 Nov 2008 22:17:02 639 824 A.... "C:\Program Files\Windows Live\Messenger\uccapires.dll"
    2 Dec 2008 22:37:46 104 264 A.... "C:\Program Files\Windows Live\Messenger\uxcalendar.dll"
    2 Dec 2008 22:38:48 541 512 A.... "C:\Program Files\Windows Live\Messenger\uxcontacts.dll"
    2 Dec 2008 22:38:54 2 392 392 A.... "C:\Program Files\Windows Live\Messenger\uxcore.dll"
    2 Dec 2008 22:38:48 439 624 A.... "C:\Program Files\Windows Live\Messenger\vvpltfrm.dll"
    2 Dec 2008 21:44:36 73 040 A.... "C:\Program Files\Windows Live\Messenger\wlchtc.dll"
    2 Dec 2008 21:44:52 582 992 A.... "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"
    2 Dec 2008 21:44:34 62 288 A.... "C:\Program Files\Windows Live\Messenger\wlcstart.exe"
    2 Dec 2008 21:44:52 876 880 A.... "C:\Program Files\Windows Live\Messenger\wlcui.dll"
    2 Dec 2008 21:44:42 76 112 A.... "C:\Program Files\Windows Live\Messenger\wlcuires.dll"
    2 Dec 2008 22:37:42 49 992 A.... "C:\Program Files\Windows Live\Messenger\wldcore.dll"
    2 Dec 2008 22:37:22 32 584 A.... "C:\Program Files\Windows Live\Messenger\wldlog.dll"
    20 Nov 2008 22:14:36 598 856 A.... "C:\Program Files\Windows Live\Messenger\wmaecdmort.dll"
    20 Nov 2008 22:14:36 1 565 480 A.... "C:\Program Files\Windows Live\Messenger\wmv9vcm.dll"
    4 Dec 2008 22:49:00 216 424 A.... "C:\Program Files\Windows Live\Photo Gallery\ImagingDevice.dll"
    4 Dec 2008 22:49:02 427 880 A.... "C:\Program Files\Windows Live\Photo Gallery\ImagingServices.dll"
    4 Dec 2008 22:48:52 128 872 A.... "C:\Program Files\Windows Live\Photo Gallery\MetadataSys.dll"
    4 Dec 2008 22:56:32 12 648 A.... "C:\Program Files\Windows Live\Photo Gallery\Microsoft.WindowsLive.PublishPlugins.dll"
    4 Dec 2008 22:49:04 2 149 224 A.... "C:\Program Files\Windows Live\Photo Gallery\MicrosoftEffects.dll"
    4 Dec 2008 22:48:52 14 696 A.... "C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll"
    4 Dec 2008 22:48:52 43 880 A.... "C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll"
    4 Dec 2008 22:56:32 98 664 A.... "C:\Program Files\Windows Live\Photo Gallery\PublishPluginsInterop.dll"
    5 Dec 2008 0:11:16 10 600 A.... "C:\Program Files\Windows Live\Photo Gallery\RegRes.dll"
    4 Dec 2008 22:48:52 141 160 A.... "C:\Program Files\Windows Live\Photo Gallery\sqmapi.dll"
    4 Dec 2008 22:48:52 104 296 A.... "C:\Program Files\Windows Live\Photo Gallery\UXCalendar.dll"
    4 Dec 2008 22:49:04 541 544 A.... "C:\Program Files\Windows Live\Photo Gallery\UXContacts.dll"
    4 Dec 2008 22:49:06 2 392 424 A.... "C:\Program Files\Windows Live\Photo Gallery\UXCore.dll"
    4 Dec 2008 22:49:04 621 416 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoLibraryDatabase.dll"
    5 Dec 2008 0:11:16 89 960 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoLibraryDuiResourcesLocalized.dll"
    4 Dec 2008 22:48:48 71 528 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoSqm.dll"
    4 Dec 2008 22:49:04 2 184 552 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoLibraryMain.dll"
    4 Dec 2008 22:49:06 9 254 760 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoLibraryDuiResources.dll"
    5 Dec 2008 0:11:16 1 812 328 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoLibraryResources.dll"
    4 Dec 2008 22:49:04 1 260 904 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoViewer.dll"
    4 Dec 2008 22:48:52 50 024 A.... "C:\Program Files\Windows Live\Photo Gallery\WLDCore.dll"
    4 Dec 2008 22:49:04 1 247 592 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoVoyager.dll"
    5 Dec 2008 0:11:16 549 224 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXAlbumDownloadWizard.exe"
    5 Dec 2008 0:11:16 281 960 A.... "C:\Program Files\Windows Live\Photo Gallery\wlxclip.dll"
    4 Dec 2008 22:48:56 191 336 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXDSPA.dll"
    4 Dec 2008 22:48:52 127 336 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXGrinderScheduler.dll"
    4 Dec 2008 22:48:52 79 208 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXImageTranscode.dll"
    5 Dec 2008 0:11:16 1 103 208 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXMediaPublishSubscribe.dll"
    5 Dec 2008 0:11:16 1 825 640 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcq.dll"
    4 Dec 2008 22:49:00 231 272 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe"
    4 Dec 2008 22:48:52 19 816 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoBase.dll"
    5 Dec 2008 0:11:16 139 112 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe"
    4 Dec 2008 22:48:52 83 304 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoCinematic.dll"
    4 Dec 2008 22:48:52 16 744 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGalleryRepair.exe"
    4 Dec 2008 22:48:52 80 232 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoClassic.dll"
    4 Dec 2008 22:49:04 750 952 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPipeline.dll"
    4 Dec 2008 22:49:04 732 008 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPipetran.dll"
    4 Dec 2008 22:48:52 18 280 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXQuickTimeControlHostPS.dll"
    4 Dec 2008 22:48:52 117 096 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXQuickTimeControlHost.exe"
    4 Dec 2008 22:48:52 51 048 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXQuickTimeShellExt.dll"
    5 Dec 2008 0:11:16 71 016 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXSendMail.dll"
    5 Dec 2008 0:11:16 508 776 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXSlideshow.dll"
    4 Dec 2008 22:48:52 81 768 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXThumbCache.dll"
    4 Dec 2008 22:48:50 142 184 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXVAFilt.dll"
    4 Dec 2008 22:49:02 521 064 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXVideoTrim.dll"
    5 Dec 2008 0:11:16 764 264 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXVideoAcquireWizard.exe"
    4 Dec 2008 22:48:52 69 480 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXVideoCameraAutoPlayManager.exe"
    1 Dec 2008 12:54:44 144 416 A.... "C:\Program Files\Windows Live\Sync\sqmapi.dll"
    2 Dec 2008 21:53:08 463 184 A.... "C:\Program Files\Windows Live\Sync\WindowsLiveSync.Resource.dll"
    2 Dec 2008 21:53:08 1 170 256 A.... "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"
    7 Nov 2008 8:15:58 144 416 A.... "C:\Program Files\Windows Live\Writer\sqmapi.dll"
    2 Dec 2008 21:54:26 97 112 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Client.dll"
    2 Dec 2008 21:54:24 953 176 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.CoreServices.dll"
    2 Dec 2008 21:54:26 64 344 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.FileDestinations.dll"
    2 Dec 2008 21:54:24 68 440 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.HtmlParser.dll"
    2 Dec 2008 21:53:34 346 968 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Localization.dll"
    2 Dec 2008 21:53:16 244 568 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.HtmlEditor.dll"
    2 Dec 2008 21:54:16 404 312 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Controls.dll"
    2 Dec 2008 21:50:16 129 880 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Interop.dll"
    2 Dec 2008 21:54:28 56 152 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Passport.dll"
    2 Dec 2008 21:50:18 166 744 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Interop.Mshtml.dll"
    2 Dec 2008 21:53:34 351 064 A.... "C:\Program Files\Windows Live\Writer\WindowsLiveLocal.WriterPlugin.dll"
    2 Dec 2008 21:50:18 113 496 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Mshtml.dll"
    2 Dec 2008 21:54:24 43 864 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Instrumentation.dll"
    2 Dec 2008 22:27:36 141 144 A.... "C:\Program Files\Windows Live\Writer\WindowsLiveWriter.Application.dll"
    2 Dec 2008 21:50:18 133 976 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Interop.SHDocVw.dll"
    2 Dec 2008 22:27:10 127 320 A.... "C:\Program Files\Windows Live\Writer\WindowsLiveWriter.Filter.dll"
    2 Dec 2008 21:54:28 56 152 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Extensibility.dll"
    2 Dec 2008 21:50:16 129 880 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.SpellChecker.dll"
    2 Dec 2008 21:54:26 3 140 440 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.PostEditor.dll"
    2 Dec 2008 21:54:28 52 056 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Api.dll"
    2 Dec 2008 21:54:26 101 208 A.... "C:\Program Files\Windows Live\Writer\WindowsLiveWriter.exe"
    2 Dec 2008 21:54:24 588 632 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.ApplicationFramework.dll"
    2 Dec 2008 21:53:34 334 680 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.BlogClient.dll"
    2 Dec 2008 21:54:26 72 536 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.BrowserControl.dll"
    2 Dec 2008 22:27:10 31 064 A.... "C:\Program Files\Windows Live\Writer\wlsqm.dll"
    2 Dec 2008 22:27:36 187 224 A.... "C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll"
    9 Nov 2008 19:20:18 82 808 A.... "C:\Program Files\Fichiers communs\Adobe\Updater5\AdobeUpdaterInstallMgr.exe"
    9 Nov 2008 19:21:14 2 356 088 A.... "C:\Program Files\Fichiers communs\Adobe\Updater5\AdobeUpdater.exe"
    20 Nov 2008 13:18:54 16 855 040 A.... "C:\Program Files\Fichiers communs\Apple\CoreFP\CoreFP.dll"
    18 Nov 2008 13:33:20 237 968 A.... "C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\HWDeviceLogin.dll"
    18 Nov 2008 13:33:20 96 144 A.... "C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\LogicalDevice.dll"
    18 Nov 2008 13:33:22 1 142 672 A.... "C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\msidcrl40.dll"
    18 Nov 2008 13:47:06 408 952 A.... "C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll"
    18 Nov 2008 13:55:24 118 672 A.... "C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe"
    2 Jan 2009 13:07:42 15 102 A.... "C:\Program Files\Fichiers communs\Windows Live\.cache\wlc7.tmp"
    20 Nov 2008 13:20:44 42 496 A.... "C:\Program Files\iPod\bin\iPodService.Resources\iPodService.dll"
    20 Nov 2008 13:21:00 112 128 A.... "C:\Program Files\iTunes\iTunes.Resources\da.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:00 120 320 A.... "C:\Program Files\iTunes\iTunes.Resources\de.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:20:54 110 592 A.... "C:\Program Files\iTunes\iTunes.Resources\en.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 117 248 A.... "C:\Program Files\iTunes\iTunes.Resources\es.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 111 616 A.... "C:\Program Files\iTunes\iTunes.Resources\fi.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 117 248 A.... "C:\Program Files\iTunes\iTunes.Resources\fr.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 115 200 A.... "C:\Program Files\iTunes\iTunes.Resources\it.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 110 592 A.... "C:\Program Files\iTunes\iTunes.Resources\ja.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 110 592 A.... "C:\Program Files\iTunes\iTunes.Resources\ko.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 112 640 A.... "C:\Program Files\iTunes\iTunes.Resources\nb.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 115 712 A.... "C:\Program Files\iTunes\iTunes.Resources\nl.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 113 152 A.... "C:\Program Files\iTunes\iTunes.Resources\pl.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:04 115 712 A.... "C:\Program Files\iTunes\iTunes.Resources\pt.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:04 117 248 A.... "C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:04 114 176 A.... "C:\Program Files\iTunes\iTunes.Resources\ru.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:04 111 616 A.... "C:\Program Files\iTunes\iTunes.Resources\sv.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:06 110 592 A.... "C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:08 110 592 A.... "C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\da.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\de.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:20:56 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\en.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\es.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\fi.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\fr.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\it.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\ja.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\ko.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\nb.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\nl.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\pl.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\pt.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\pt_PT.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\ru.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\sv.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\zh_CN.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\zh_TW.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\da.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\de.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:20:56 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\en.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\es.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\fi.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\fr.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\it.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\ja.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\ko.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\nb.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\nl.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\pl.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\pt.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\pt_PT.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\ru.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\sv.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\zh_CN.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\zh_TW.lproj\iTunesMiniPlayerLocalized.dll"
    4 Dec 2008 16:03:00 226 640 A.... "C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
    4 Dec 2008 16:03:00 166 752 A.... "C:\Program Files\Microsoft\Search Enhancement Pack\Search Box Extension\SRCHBXEX.DLL"
    4 Dec 2008 15:59:06 92 504 A.... "C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll"
    4 Dec 2008 16:03:00 142 160 A.... "C:\Program Files\Microsoft\Search Enhancement Pack\SeaShadow\SEASHADO.DLL"
    4 Jan 2009 11:31:56 15 462 A.... "C:\Program Files\Real\RealArcade\Html\quicklaunch_plus_myql.htm"
    16 Dec 2008 19:37:48 33 523 A.... "C:\Program Files\Real\RealArcade\Html\quicklaunch_plus_MyAccount.htm"
    24 Dec 2008 20:48:04 4 107 A.... "C:\Program Files\Real\RealArcade\Html\quicklaunch_plus_addgames.htm"
    4 Jan 2009 11:17:04 2 764 A.... "C:\Program Files\Real\RealArcade\Html\waittemp.htm"
    4 Nov 2008 23:24:20 2 617 998 A.... "C:\Program Files\Vuze\plugins\azemp\azemp_2.0.28.zip"
    3 Dec 2008 0:09:32 2 619 426 A.... "C:\Program Files\Vuze\plugins\azemp\azemp_2.0.32.zip"
    3 Dec 2008 0:09:32 5 472 734 A.... "C:\Program Files\Vuze\plugins\azemp\azmplay.exe"
    20 Nov 2008 22:16:08 277 A.... "C:\Program Files\Windows Live\Mail\Stationery\ArtDeco.htm"
    20 Nov 2008 22:16:08 562 A.... "C:\Program Files\Windows Live\Mail\Stationery\Bamboo.htm"
    20 Nov 2008 22:16:08 281 A.... "C:\Program Files\Windows Live\Mail\Stationery\BlueTiles.htm"
    20 Nov 2008 22:16:08 278 A.... "C:\Program Files\Windows Live\Mail\Stationery\Bubbles.htm"
    20 Nov 2008 22:16:08 277 A.... "C:\Program Files\Windows Live\Mail\Stationery\Cheddar.htm"
    20 Nov 2008 22:16:08 284 A.... "C:\Program Files\Windows Live\Mail\Stationery\ColorStripe.htm"
    20 Nov 2008 22:16:08 280 A.... "C:\Program Files\Windows Live\Mail\Stationery\Dinosaur.htm"
    20 Nov 2008 22:16:08 560 A.... "C:\Program Files\Windows Live\Mail\Stationery\Drawing.htm"
    20 Nov 2008 22:16:08 277 A.... "C:\Program Files\Windows Live\Mail\Stationery\Garden.htm"
    20 Nov 2008 22:16:08 284 A.... "C:\Program Files\Windows Live\Mail\Stationery\HandPrints.htm"
    20 Nov 2008 22:16:08 273 A.... "C:\Program Files\Windows Live\Mail\Stationery\LED.htm"
    20 Nov 2008 22:16:08 276 A.... "C:\Program Files\Windows Live\Mail\Stationery\Money.htm"
    20 Nov 2008 22:16:08 278 A.... "C:\Program Files\Windows Live\Mail\Stationery\Mosaic1.htm"
    20 Nov 2008 22:16:08 277 A.... "C:\Program Files\Windows Live\Mail\Stationery\Mosaic2.htm"
    20 Nov 2008 22:16:08 273 A.... "C:\Program Files\Windows Live\Mail\Stationery\Music.htm"
    20 Nov 2008 22:16:08 280 A.... "C:\Program Files\Windows Live\Mail\Stationery\Snowboard.htm"
    20 Nov 2008 22:16:08 282 A.... "C:\Program Files\Windows Live\Mail\Stationery\Southwest.htm"
    20 Nov 2008 22:16:08 283 A.... "C:\Program Files\Windows Live\Mail\Stationery\YellowTiles.htm"
    7 Nov 2008 8:11:46 551 232 A.... "C:\Program Files\Windows Live\Writer\Dictionaries\mssp3fr.dll"
    14 Nov 2008 23:45:08 625 528 A.... "C:\Program Files\Windows Live\Writer\Dictionaries\mssp7en.dll"
    2 Dec 2008 21:51:58 203 608 A.... "C:\Program Files\Windows Live\Writer\fr\WindowsLive.Writer.Localization.resources.dll"
    7 Nov 2008 8:12:04 4 337 A.... "C:\Program Files\Windows Live\Writer\html\map-preview.html"
    7 Nov 2008 8:12:04 12 014 A.... "C:\Program Files\Windows Live\Writer\html\map.html"
    7 Nov 2008 8:11:30 404 A.... "C:\Program Files\Windows Live\Writer\template\default.htm"
    7 Nov 2008 14:28:12 275 912 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileBackup.exe"
    7 Nov 2008 14:28:18 153 984 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceHelper.exe"
    7 Nov 2008 14:28:20 267 400 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileSync.exe"
    7 Nov 2008 14:28:16 132 424 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"
    7 Nov 2008 14:28:26 65 480 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncUIHandler.exe"
    7 Nov 2008 14:27:06 798 720 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\CFNetwork.dll"
    7 Nov 2008 14:23:36 1 194 248 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\CoreFoundation.dll"
    7 Nov 2008 14:28:28 46 056 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\defaults.exe"
    7 Nov 2008 14:23:38 135 544 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\DeviceLink.dll"
    7 Nov 2008 14:28:30 15 376 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\distnoted.exe"
    7 Nov 2008 14:28:32 19 064 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\EventFixer.exe"
    7 Nov 2008 14:23:40 2 800 850 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\Foundation.dll"
    7 Nov 2008 14:28:32 51 216 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\gconsync.exe"
    7 Nov 2008 14:23:40 656 801 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\GoogleContactSync.dll"
    7 Nov 2008 14:27:12 7 348 094 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\icudt36.dll"
    7 Nov 2008 14:27:12 863 707 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\icuin36.dll"
    7 Nov 2008 14:27:12 985 379 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\icuuc36.dll"
    7 Nov 2008 14:28:34 133 480 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\IESyncClient.exe"
    7 Nov 2008 14:24:08 1 011 634 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\ISSupport.dll"
    7 Nov 2008 14:24:14 1 200 128 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\iTunesMobileDevice.dll"
    7 Nov 2008 14:27:32 1 105 920 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\libeay32.dll"
    7 Nov 2008 14:27:30 645 738 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\libobjc.i386.A.dll"
    7 Nov 2008 14:27:26 1 029 774 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\libxml2.dll"
    7 Nov 2008 14:27:28 151 040 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\libxslt.dll"
    7 Nov 2008 14:30:24 236 920 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\MDCrashReportTool.exe"
    7 Nov 2008 14:24:12 319 922 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\MobileDevice.dll"
    7 Nov 2008 14:24:20 743 038 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\OutlookSyncClientHelper.dll"
    7 Nov 2008 14:30:30 95 560 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\OutlookSyncClient.exe"
    7 Nov 2008 14:24:16 110 592 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\OutlookChangeNotifierAddIn.dll"
    7 Nov 2008 14:30:32 109 496 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SafariSyncClient.exe"
    7 Nov 2008 14:27:36 400 896 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\sqlite3.dll"
    7 Nov 2008 14:27:32 262 144 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\ssleay32.dll"
    7 Nov 2008 14:30:34 28 472 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncDiagnostics.exe"
    7 Nov 2008 14:30:38 24 488 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\syncli.exe"
    7 Nov 2008 14:30:34 26 104 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncPlanObserver.exe"
    7 Nov 2008 14:26:34 1 441 693 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncServices.dll"
    7 Nov 2008 14:30:36 518 120 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncServer.exe"
    7 Nov 2008 14:26:34 187 307 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncServicesUI.dll"
    7 Nov 2008 14:27:18 34 141 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncUIHandler.dll"
    7 Nov 2008 14:27:16 233 472 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncUICore.dll"
    7 Nov 2008 14:30:40 1 097 528 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\upgradedb.exe"
    7 Nov 2008 14:30:40 150 864 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\WindowsContactsSync.exe"
    7 Nov 2008 14:30:42 100 800 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\WindowsMailSync.exe"
    7 Nov 2008 14:30:48 1 866 752 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\YahooSync.exe"
    7 Nov 2008 14:27:08 18 267 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\YSFileShim.dll"
    7 Nov 2008 14:27:38 60 416 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\zlib1.dll"
    7 Nov 2008 14:23:30 32 000 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\Drivers\usbaapl.sys"
    9 Nov 2008 18:45:04 2 456 952 A.... "C:\Program Files\Fichiers communs\System\MAPI\1036\MSNCON32.dll"
    9 Nov 2008 18:45:04 2 456 952 A.... "C:\Program Files\Fichiers communs\System\MSMAPI\1036\MSNCON32.DLL"
    25 Nov 2008 21:29:00 4 865 408 A.... "C:\Program Files\Fichiers communs\Windows Live\.cache\add529ed1c966a9\Silverlight.2.0.exe"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\da.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\de.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:20:44 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\en.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\es.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\fi.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\fr.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\it.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\ja.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\ko.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\nb.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\nl.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\pl.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Fi
    0
  13. ginie
     
    voici le rapport que mon ordi a bien voulu me donner, toutes les étapes ne se sont pas déroulées commes décrites malgré de nombreux essai "au pied de la lettre" de vos infos détaillées.

    [b]System Report[/b]
    *************

    Run on 04/01/2009 at 18:12

    Microsoft Windows XP [version 5.1.2600]

    Current user is an administrator

    [b]Running Processes[/b]:

    \SystemRoot\System32\smss.exe [796]
    \??\C:\WINDOWS\system32\csrss.exe [864]
    \??\C:\WINDOWS\system32\winlogon.exe [888]
    C:\WINDOWS\system32\services.exe [940]
    C:\WINDOWS\system32\lsass.exe [952]
    C:\WINDOWS\system32\svchost.exe [1128]
    C:\WINDOWS\system32\svchost.exe [1200]
    C:\WINDOWS\System32\svchost.exe [1244]
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [1296]
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [1336]
    C:\WINDOWS\system32\svchost.exe [1380]
    C:\WINDOWS\system32\svchost.exe [1516]
    C:\WINDOWS\system32\PMObserv.exe [1820]
    C:\WINDOWS\system32\spoolsv.exe [1876]
    C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe [1996]
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2036]
    C:\Program Files\Bonjour\mDNSResponder.exe [148]
    C:\WINDOWS\eHome\ehRecvr.exe [196]
    C:\WINDOWS\eHome\ehSched.exe [252]
    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [312]
    C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe [488]
    C:\WINDOWS\system32\nvsvc32.exe [1152]
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [1272]
    C:\Program Files\Spyware Doctor\pctsAuxs.exe [1432]
    C:\Program Files\Spyware Doctor\pctsSvc.exe [1508]
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [3432]
    C:\Program Files\Spyware Doctor\pctsTray.exe [3440]
    C:\WINDOWS\system32\svchost.exe [3496]
    C:\WINDOWS\system32\svchost.exe [3556]
    C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [3612]
    C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [3728]
    C:\WINDOWS\ehome\mcrdsvc.exe [3892]
    C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [3972]
    C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe [4028]
    C:\WINDOWS\Explorer.EXE [3060]
    C:\Program Files\QuickTime\qttask.exe [3364]
    C:\WINDOWS\system32\ctfmon.exe [3548]
    C:\Program Files\Microsoft ActiveSync\wcescomm.exe [3768]
    C:\PROGRA~1\MI3AA1~1\rapimgr.exe [3880]
    C:\WINDOWS\system32\dllhost.exe [2560]
    C:\WINDOWS\System32\alg.exe [3048]
    C:\Program Files\Internet Explorer\iexplore.exe [784]

    [b]Drivers - Running[/b]:

    ACPI
    ACPIEC
    AegisP
    AFD
    ApfiltrService
    Arp1394
    atapi
    audstub
    Beep
    Cdfs
    Cdrom
    CmBatt
    Compbatt
    Disk
    DMICall
    E100B
    Fips
    FltMgr
    Ftdisk
    GEARAspiWDM
    Gpc
    HDAudBus
    HSFHWAZL
    HSF_DPV
    HTTP
    i8042prt
    IKFileSec
    IKSysFlt
    IKSysSec
    Imapi
    intelppm
    IpNat
    IPSec
    isapnp
    Kbdclass
    kmixer
    KSecDD
    mdmxsdk
    mnmdd
    Modem
    Mouclass
    MountMgr
    MRxDAV
    MRxSmb
    Msfs
    mssmbios
    Mup
    NDIS
    NdisTapi
    Ndisuio
    NdisWan
    NDProxy
    NetBIOS
    NetBT
    NIC1394
    Npfs
    Ntfs
    Null
    nv
    ohci1394
    PartMgr
    PCI
    PCIIde
    Pcmcia
    pctfw2
    PptpMiniport
    PSched
    Ptilink
    PxHelp20
    RasAcd
    Rasl2tp
    RasPppoe
    Raspti
    Rdbss
    RDPCDD
    rdpdr
    redbook
    s24trans
    SI3132
    SiFilter
    SiRemFil
    SNC
    SonyImgF
    sr
    Srv
    StarOpen
    STHDA
    swenum
    sysaudio
    Tcpip
    TermDD
    ti21sony
    tosporte
    Tosrfcom
    Update
    usbehci
    usbhub
    usbuhci
    usbvm321
    VgaSave
    VolSnap
    w39n51
    Wanarp
    wdmaud
    winachsf
    WS2IFSL

    [b]Drivers - Stopped[/b]:

    Abiosdsk
    abp480n5
    adpu160m
    aec
    Aha154x
    aic78u2
    aic78xx
    AliIde
    amsint
    asc
    asc3350p
    asc3550
    AsyncMac
    Atdisk
    Atmarpc
    bdpredir
    cbidf2k
    CCDECODE
    cd20xrnt
    Cdaudio
    Changer
    CmdIde
    Cpqarray
    dac960nt
    dmboot
    dmio
    dmload
    DMusic
    dpti2o
    drmkaud
    e1express
    Fastfat
    Fdc
    Flpydisk
    HidUsb
    hpn
    i2omgmt
    i2omp
    ini910u
    IntelIde
    Ip6Fw
    IpFilterDriver
    IpInIp
    IRENUM
    kbdhid
    lbrtfdc
    MHNDRV
    mouhid
    mraid35x
    MSKSSRV
    MSPCLOCK
    MSPQM
    MSTEE
    NABTSFEC
    NdisIP
    NwlnkFlt
    NwlnkFwd
    Parport
    ParVdm
    PCIDump
    PDCOMP
    PDFRAME
    PDRELI
    PDRFRAME
    perc2
    perc2hib
    Profos
    ql1080
    Ql10wnt
    ql12160
    ql1240
    ql1280
    RDPWD
    Secdrv
    Serial
    Sfloppy
    Simbad
    SLIP
    Sparrow
    splitter
    sscdbus
    sscdmdfl
    sscdmdm
    streamip
    swmidi
    symc810
    symc8xx
    SYMIDSCO
    sym_hi
    sym_u3
    TDPIPE
    TDTCP
    toshidpt
    TosIde
    Tosrfbd
    Tosrfbnp
    Tosrfhid
    tosrfnds
    TosRfSnd
    Tosrfusb
    Trufos
    Udfs
    ultra
    USBAAPL
    usbccgp
    usbprint
    usbscan
    USBSTOR
    usb_rndisx
    ViaIde
    wanatw
    wceusbsh
    WDICA
    WSTCODEC
    WudfPf
    WudfRd

    [b]Services - Running[/b]:

    AdobeActiveFileMonitor4.0
    ALG
    Apple
    AudioSrv
    BITS
    Bonjour
    COMSysApp
    CryptSvc
    DcomLaunch
    Dhcp
    Dnscache
    ehRecvr
    ehSched
    ERSvc
    Eventlog
    EventSystem
    EvtEng
    FastUserSwitchingCompatibility
    gusvc
    helpsvc
    HidServ
    lanmanserver
    lanmanworkstation
    LmHosts
    McrdSvc
    MSSQL$VAIO_VEDB
    Netman
    Nla
    NVSvc
    PlugPlay
    PMObserv
    PolicyAgent
    ProtectedStorage
    RasMan
    RegSrvc
    RemoteRegistry
    RpcSs
    S24EventMonitor
    SamSs
    Schedule
    sdAuxService
    sdCoreService
    SeaPort
    seclogon
    SENS
    SharedAccess
    ShellHWDetection
    Spooler
    srservice
    SSDPSRV
    stisvc
    TapiSrv
    TermService
    Themes
    TrkWks
    VAIO
    Vcsw
    VzCdbSvc
    VzFw
    W32Time
    WebClient
    winmgmt
    wscsvc
    WZCSVC

    [b]Services - Stopped[/b]:

    Alerter
    AppMgmt
    aspnet_state
    Browser
    CiSvc
    ClipSrv
    clr_optimization_v2.0.50727_32
    dmadmin
    dmserver
    Dot3svc
    EapHost
    hkmsvc
    HTTPFilter
    IDriverT
    Image
    ImapiService
    iPod
    Messenger
    MHN
    mnmsrvc
    MSCSPTISRV
    MSDTC
    MSIServer
    MSSQLServerADHelper
    napagent
    NetDDE
    NetDDEdsdm
    Netlogon
    NtLmSsp
    NtmsSvc
    ose
    PACSPTISVR
    RasAuto
    RDSessMgr
    RemoteAccess
    RpcLocator
    RSVP
    SCardSvr
    SonicStage
    SPTISRV
    SQLAgent$VAIO_VEDB
    SSScsiSV
    SwPrv
    SysmonLog
    TlntSvr
    upnphost
    UPS
    VAIO
    VAIOMediaPlatform-IntegratedServer-AppServer
    VAIOMediaPlatform-IntegratedServer-HTTP
    VAIOMediaPlatform-IntegratedServer-UPnP
    VAIOMediaPlatform-Mobile-Gateway
    VCI
    VSS
    WmdmPmSN
    Wmi
    WmiApSrv
    WMPNetworkSvc
    wuauserv
    WudfSvc
    xmlprov

    [b]Files Created/Modified - 60 Days[/b]:

    C:\

    4 Jan 2009 18:07:56 1 610 612 736 A.SH. "C:\pagefile.sys"
    25 Dec 2008 22:40:00 104 498 A.... "C:\raze.exe"
    20 Dec 2008 8:57:34 55 858 A.... "C:\reps.exe"
    26 Dec 2008 15:06:38 104 498 A.... "C:\win.exe"

    C:\WINDOWS\

    4 Jan 2009 18:08:02 2 048 A.S.. "C:\WINDOWS\bootstat.dat"
    18 Dec 2008 23:12:38 38 574 ..SHR "C:\WINDOWS\fxstaller.exe"
    4 Dec 2008 10:53:26 27 A.... "C:\WINDOWS\SW_Win2000X24.DLL"
    20 Dec 2008 8:50:14 55 858 ..SHR "C:\WINDOWS\sysrest32.exe"
    26 Dec 2008 14:51:18 35 328 A.... "C:\WINDOWS\system32\awtsSlih.dll"
    23 Dec 2008 23:47:18 84 167 ..... "C:\WINDOWS\system32\bedamifu.dll"
    30 Dec 2008 9:11:48 85 126 ..... "C:\WINDOWS\system32\bosofifa.dll"
    26 Dec 2008 13:31:40 35 328 A.... "C:\WINDOWS\system32\byXRJApO.dll"
    18 Dec 2008 23:21:04 126 464 A.... "C:\WINDOWS\system32\caoooi.dll"
    26 Dec 2008 15:41:18 35 328 A.... "C:\WINDOWS\system32\cbXPfGxW.dll"
    26 Dec 2008 15:01:18 35 328 A.... "C:\WINDOWS\system32\cbXRKApQ.dll"
    4 Jan 2009 11:40:22 86 109 A.SH. "C:\WINDOWS\system32\dewuzeko.dll"
    20 Dec 2008 13:05:48 62 598 A.SH. "C:\WINDOWS\system32\digezuru.dll"
    26 Dec 2008 16:35:00 35 328 A.... "C:\WINDOWS\system32\efcCvVPJ.dll"
    26 Dec 2008 14:01:18 35 328 A.... "C:\WINDOWS\system32\fcccaywt.dll"
    26 Dec 2008 16:11:20 35 328 A.... "C:\WINDOWS\system32\fccYsrqR.dll"
    24 Dec 2008 23:48:06 98 070 A.SH. "C:\WINDOWS\system32\fegenope.dll"
    29 Dec 2008 9:11:38 98 976 A.SH. "C:\WINDOWS\system32\fezahoyu.dll"
    25 Dec 2008 21:34:08 253 592 A.... "C:\WINDOWS\system32\FNTCACHE.DAT"
    30 Dec 2008 21:11:56 61 707 A.SH. "C:\WINDOWS\system32\fofajivo.dll"
    22 Dec 2008 14:22:04 73 216 A.... "C:\WINDOWS\system32\fwsdseds.dll"
    27 Dec 2008 21:38:16 62 070 A.SH. "C:\WINDOWS\system32\gurohodo.dll"
    21 Dec 2008 14:18:12 85 287 ..... "C:\WINDOWS\system32\hagebuzi.dll"
    1 Jan 2009 23:24:42 98 085 A.SH. "C:\WINDOWS\system32\hezagivu.dll"
    26 Dec 2008 14:41:18 35 328 A.... "C:\WINDOWS\system32\hgGyVPGV.dll"
    22 Dec 2008 14:22:02 126 464 A.... "C:\WINDOWS\system32\hhukapvv.dll"
    23 Dec 2008 11:47:20 87 260 A.SH. "C:\WINDOWS\system32\hobolaku.dll"
    23 Dec 2008 23:47:18 97 974 A.SH. "C:\WINDOWS\system32\hovebipu.dll"
    26 Dec 2008 13:41:20 35 328 A.... "C:\WINDOWS\system32\iifebXrr.dll"
    26 Dec 2008 9:32:08 35 328 A.... "C:\WINDOWS\system32\iifgEvTJ.dll"
    18 Dec 2008 23:21:04 126 464 A.... "C:\WINDOWS\system32\ipfmyyca.dll"
    2 Jan 2009 11:24:44 99 052 A.SH. "C:\WINDOWS\system32\jagupodi.dll"
    26 Dec 2008 1:40:28 99 095 A.... "C:\WINDOWS\system32\jofaluju.dll"
    20 Dec 2008 13:05:48 83 090 ..... "C:\WINDOWS\system32\kekiyala.dll"
    26 Dec 2008 15:51:18 35 328 A.... "C:\WINDOWS\system32\kHAQggdE.dll"
    28 Dec 2008 10:38:30 99 030 A.SH. "C:\WINDOWS\system32\lelizomo.dll"
    21 Dec 2008 14:19:34 126 976 A.... "C:\WINDOWS\system32\lhfajllq.dll"
    26 Dec 2008 14:11:18 35 328 A.... "C:\WINDOWS\system32\ljJCrOgD.dll"
    27 Dec 2008 7:50:14 2 724 ..SH. "C:\WINDOWS\system32\madubiha.exe"
    24 Dec 2008 11:47:44 84 117 ..... "C:\WINDOWS\system32\misahavu.dll"
    20 Dec 2008 9:04:02 35 328 A.... "C:\WINDOWS\system32\mlJdBQKa.dll"
    19 Dec 2008 23:19:34 73 216 A.... "C:\WINDOWS\system32\modxhbee.dll"
    13 Dec 2008 7:37:56 3 593 216 A.... "C:\WINDOWS\system32\mshtml.dll"
    31 Dec 2008 23:45:42 99 135 A.... "C:\WINDOWS\system32\nelesoye.dll"
    26 Dec 2008 14:21:18 35 328 A.... "C:\WINDOWS\system32\opnkkhfF.dll"
    26 Dec 2008 15:21:18 35 328 A.... "C:\WINDOWS\system32\opnkllKA.dll"
    2 Jan 2009 13:16:04 71 070 A.... "C:\WINDOWS\system32\perfc009.dat"
    2 Jan 2009 13:16:04 87 160 A.... "C:\WINDOWS\system32\perfc00C.dat"
    2 Jan 2009 13:16:04 422 132 A.... "C:\WINDOWS\system32\perfh009.dat"
    2 Jan 2009 13:16:04 492 786 A.... "C:\WINDOWS\system32\perfh00C.dat"
    29 Dec 2008 21:11:48 62 644 A.SH. "C:\WINDOWS\system32\pewodaju.dll"
    26 Dec 2008 14:31:18 35 328 A.... "C:\WINDOWS\system32\pmnklMcD.dll"
    18 Dec 2008 23:29:28 35 328 A.... "C:\WINDOWS\system32\pmnoPGvw.dll"
    18 Dec 2008 23:15:54 35 328 A.... "C:\WINDOWS\system32\qoMeCvsq.dll"
    31 Dec 2008 10:58:42 99 069 A.SH. "C:\WINDOWS\system32\rarunuku.dll"
    1 Jan 2009 11:24:36 101 198 A.SH. "C:\WINDOWS\system32\rawijeku.dll"
    23 Dec 2008 23:47:18 61 535 A.SH. "C:\WINDOWS\system32\rejanote.dll"
    24 Dec 2008 23:48:04 84 542 ..... "C:\WINDOWS\system32\relereni.dll"
    24 Dec 2008 11:47:44 96 401 A.SH. "C:\WINDOWS\system32\rinapiza.dll"
    1 Jan 2009 11:24:34 83 716 ..... "C:\WINDOWS\system32\romemazu.dll"
    26 Dec 2008 13:01:44 35 328 A.... "C:\WINDOWS\system32\rqRjHyyy.dll"
    20 Dec 2008 8:50:54 35 328 A.... "C:\WINDOWS\system32\rqRLebXr.dll"
    30 Dec 2008 9:11:48 96 867 A.SH. "C:\WINDOWS\system32\savohofu.dll"
    25 Dec 2008 11:48:22 98 885 A.SH. "C:\WINDOWS\system32\sebimike.dll"
    26 Dec 2008 13:48:42 99 099 A.SH. "C:\WINDOWS\system32\silulawo.dll"
    2 Dec 2008 22:37:20 49 480 A.... "C:\WINDOWS\system32\sirenacm.dll"
    1 Jan 2009 23:24:42 86 260 ..... "C:\WINDOWS\system32\tipukuvu.dll"
    22 Dec 2008 22:31:20 94 906 A.SH. "C:\WINDOWS\system32\towozoha.dll"
    26 Dec 2008 9:26:30 35 328 A.... "C:\WINDOWS\system32\tuvSljjG.dll"
    26 Dec 2008 13:51:18 35 328 A.... "C:\WINDOWS\system32\tuvVOecY.dll"
    26 Dec 2008 16:21:20 35 328 A.... "C:\WINDOWS\system32\tuvWnkhe.dll"
    26 Dec 2008 15:31:18 35 328 A.... "C:\WINDOWS\system32\urqpqNDu.dll"
    4 Jan 2009 11:40:22 101 005 A.SH. "C:\WINDOWS\system32\vahojezi.dll"
    26 Dec 2008 16:01:18 35 328 A.... "C:\WINDOWS\system32\vtUlKCvt.dll"
    26 Dec 2008 16:45:02 35 328 A.... "C:\WINDOWS\system32\vtUmNDWN.dll"
    29 Dec 2008 9:11:36 87 324 ..... "C:\WINDOWS\system32\vufeguja.dll"
    26 Dec 2008 13:48:42 87 182 A.SH. "C:\WINDOWS\system32\webogori.dll"
    25 Dec 2008 11:48:20 84 564 ..... "C:\WINDOWS\system32\wovawuye.dll"
    26 Dec 2008 12:53:56 35 328 A.... "C:\WINDOWS\system32\wvULBqqN.dll"
    26 Dec 2008 13:11:18 35 328 A.... "C:\WINDOWS\system32\xxyaxXOi.dll"
    29 Dec 2008 21:11:48 97 345 A.SH. "C:\WINDOWS\system32\yapipije.dll"
    26 Dec 2008 15:11:20 35 328 A.... "C:\WINDOWS\system32\yaywWMdE.dll"
    23 Dec 2008 11:47:20 95 995 A.SH. "C:\WINDOWS\system32\yihazuso.dll"
    30 Dec 2008 21:11:54 100 976 A.SH. "C:\WINDOWS\system32\yirejame.dll"
    27 Dec 2008 21:38:16 99 052 A.SH. "C:\WINDOWS\system32\zagonibu.dll"
    3 Jan 2009 21:40:18 98 990 A.SH. "C:\WINDOWS\system32\zehuwabu.dll"
    2 Jan 2009 11:24:44 83 769 ..... "C:\WINDOWS\system32\zomotesa.dll"
    3 Jan 2009 22:04:36 67 072 A.... "C:\WINDOWS\system32\~.exe"
    4 Jan 2009 18:08:04 6 A..H. "C:\WINDOWS\Tasks\SA.DAT"
    31 Dec 2008 18:39:54 0 A.... "C:\WINDOWS\Temp\JET90A7.tmp"
    26 Dec 2008 9:30:34 0 A.... "C:\WINDOWS\Temp\JET9162.tmp"
    4 Jan 2009 18:08:12 0 A.... "C:\WINDOWS\Temp\JET9347.tmp"
    18 Dec 2008 20:53:08 0 A.... "C:\WINDOWS\Temp\JETAF4B.tmp"
    4 Dec 2008 20:38:50 0 A.... "C:\WINDOWS\Temp\JETBD25.tmp"
    4 Jan 2009 18:10:32 6 116 A.... "C:\WINDOWS\Temp\scs9.tmp"
    19 Dec 2008 12:00:06 0 A.... "C:\WINDOWS\Temp\tmp11.exe"
    19 Dec 2008 12:00:04 0 A.... "C:\WINDOWS\Temp\tmp11.tmp"
    21 Dec 2008 15:00:30 6 827 A.... "C:\WINDOWS\Temp\tmp3.exe"
    21 Dec 2008 15:00:02 0 A.... "C:\WINDOWS\Temp\tmp3.tmp"
    22 Dec 2008 16:00:06 0 A.... "C:\WINDOWS\Temp\tmp30.exe"
    22 Dec 2008 16:00:02 0 A.... "C:\WINDOWS\Temp\tmp30.tmp"
    20 Dec 2008 13:00:04 63 602 A.... "C:\WINDOWS\Temp\tmp4.exe"
    20 Dec 2008 13:00:02 0 A.... "C:\WINDOWS\Temp\tmp4.tmp"
    13 Dec 2008 7:37:56 3 593 216 A.... "C:\WINDOWS\system32\dllcache\mshtml.dll"
    7 Nov 2008 14:23:30 32 000 A.... "C:\WINDOWS\system32\drivers\usbaapl.sys"
    4 Jan 2009 11:13:10 16 384 A.... "C:\WINDOWS\Temp\Cookies\index.dat"
    2 Jan 2009 13:13:44 258 048 A.... "C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll"
    2 Jan 2009 13:13:44 114 176 A.... "C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll"
    4 Jan 2009 11:13:10 32 768 A.SH. "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\index.dat"
    4 Jan 2009 11:13:10 32 768 A.SH. "C:\WINDOWS\Temp\History\History.IE5\index.dat"

    C:\Program Files\

    20 Nov 2008 13:20:44 438 272 A.... "C:\Program Files\iTunes\CDDBControlApple.dll"
    20 Nov 2008 13:20:44 643 072 A.... "C:\Program Files\iTunes\iPodUpdaterExt.dll"
    20 Nov 2008 13:20:48 14 294 824 A.... "C:\Program Files\iTunes\iTunes.exe"
    20 Nov 2008 13:20:54 108 328 A.... "C:\Program Files\iTunes\iTunesAdmin.dll"
    20 Nov 2008 13:20:54 290 088 A.... "C:\Program Files\iTunes\iTunesHelper.exe"
    20 Nov 2008 13:20:56 132 392 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.dll"
    20 Nov 2008 13:20:56 283 136 A.... "C:\Program Files\iTunes\iTunesOutlookAddIn.dll"
    20 Nov 2008 13:20:56 172 544 A.... "C:\Program Files\iTunes\iTunesPhotoSupport.dll"
    9 Nov 2008 2:09:02 193 912 A.... "C:\Program Files\Microsoft Office Outlook Connector\MSNCONRC.DLL"
    9 Nov 2008 2:09:02 28 536 A.... "C:\Program Files\Microsoft Office Outlook Connector\MSOCPRC.DLL"
    9 Nov 2008 18:45:04 23 952 A.... "C:\Program Files\Microsoft Office Outlook Connector\OLCSTART.EXE"
    17 Dec 2008 2:54:20 1 247 600 A.... "C:\Program Files\Spyware Doctor\SDNetPlugin.dll"
    25 Dec 2008 22:14:56 104 498 ..SHR "C:\Program Files\Fichiers communs\System\run32dll.exe"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin5.dll"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin6.dll"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin7.dll"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll"
    20 Nov 2008 13:20:44 536 872 A.... "C:\Program Files\iPod\bin\iPodService.exe"
    20 Nov 2008 13:20:54 105 472 A.... "C:\Program Files\iTunes\iTunes.Resources\iTunes.dll"
    20 Nov 2008 13:21:02 103 936 A.... "C:\Program Files\iTunes\iTunes.Resources\iTunesRegistry.dll"
    20 Nov 2008 13:20:56 42 496 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\iTunesHelper.dll"
    20 Nov 2008 13:20:56 129 536 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\iTunesMiniPlayer.dll"
    20 Nov 2008 13:20:36 69 632 A.... "C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll"
    13 Nov 2008 9:33:54 65 896 A.... "C:\Program Files\Microsoft\Office Live\npOLW.dll"
    13 Nov 2008 9:33:54 97 128 A.... "C:\Program Files\Microsoft\Office Live\OfficeLiveSignIn.exe"
    13 Nov 2008 9:34:06 203 112 A.... "C:\Program Files\Microsoft\Office Live\OLConnector.dll"
    13 Nov 2008 9:34:06 128 360 A.... "C:\Program Files\Microsoft\Office Live\OLConnectorResources.dll"
    7 Nov 2008 12:37:46 14 265 A.... "C:\Program Files\Softinterface, Inc\Convert PDF To Image\unins000.dat"
    7 Nov 2008 12:37:18 664 057 A.... "C:\Program Files\Softinterface, Inc\Convert PDF To Image\unins000.exe"
    4 Jan 2009 13:26:30 396 288 A.... "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe"
    2 Dec 2008 21:09:50 532 840 A.... "C:\Program Files\Windows Live\Contacts\abssm.dll"
    2 Dec 2008 21:09:50 59 752 A.... "C:\Program Files\Windows Live\Contacts\conproxy.dll"
    2 Dec 2008 21:09:50 129 384 A.... "C:\Program Files\Windows Live\Contacts\consync.dll"
    2 Dec 2008 21:09:52 647 016 A.... "C:\Program Files\Windows Live\Contacts\contact.dll"
    2 Dec 2008 21:09:52 581 480 A.... "C:\Program Files\Windows Live\Contacts\lmcdata.dll"
    2 Dec 2008 21:09:52 27 496 A.... "C:\Program Files\Windows Live\Contacts\wlcomm.exe"
    2 Dec 2008 21:09:50 32 616 A.... "C:\Program Files\Windows Live\Contacts\wldlog.dll"
    2 Dec 2008 23:33:54 720 216 A.... "C:\Program Files\Windows Live\Installer\wlarp.exe"
    2 Dec 2008 23:31:46 373 592 A.... "C:\Program Files\Windows Live\Installer\wloobe.exe"
    2 Dec 2008 21:53:38 206 168 A.... "C:\Program Files\Windows Live\Installer\wlsres.dll"
    2 Dec 2008 22:37:58 165 192 A.... "C:\Program Files\Windows Live\Mail\ABImport.dll"
    2 Dec 2008 22:37:48 109 384 A.... "C:\Program Files\Windows Live\Mail\actorbas.dll"
    2 Dec 2008 22:37:46 103 752 A.... "C:\Program Files\Windows Live\Mail\adorner.dll"
    2 Dec 2008 22:38:16 192 328 A.... "C:\Program Files\Windows Live\Mail\aimg.dll"
    2 Dec 2008 22:38:10 176 456 A.... "C:\Program Files\Windows Live\Mail\alayout.dll"
    2 Dec 2008 22:37:42 89 416 A.... "C:\Program Files\Windows Live\Mail\canproxy.dll"
    2 Dec 2008 22:38:22 321 864 A.... "C:\Program Files\Windows Live\Mail\canvas.dll"
    2 Dec 2008 22:37:48 107 848 A.... "C:\Program Files\Windows Live\Mail\cnvsshrd.dll"
    2 Dec 2008 22:37:42 93 512 A.... "C:\Program Files\Windows Live\Mail\dgeneral.dll"
    2 Dec 2008 22:38:10 187 720 A.... "C:\Program Files\Windows Live\Mail\mailacct.dll"
    2 Dec 2008 22:38:50 791 368 A.... "C:\Program Files\Windows Live\Mail\mailcomm.dll"
    2 Dec 2008 22:37:44 102 728 A.... "C:\Program Files\Windows Live\Mail\mailimp.dll"
    2 Dec 2008 22:41:54 2 202 440 A.... "C:\Program Files\Windows Live\Mail\maillang.dll"
    2 Dec 2008 22:39:14 11 716 424 A.... "C:\Program Files\Windows Live\Mail\mailres2.dll"
    2 Dec 2008 22:37:54 131 912 A.... "C:\Program Files\Windows Live\Mail\mailrt2.dll"
    2 Dec 2008 22:38:56 2 744 648 A.... "C:\Program Files\Windows Live\Mail\msmail.dll"
    2 Dec 2008 22:37:16 18 760 A.... "C:\Program Files\Windows Live\Mail\piBase.dll"
    2 Dec 2008 22:37:50 121 160 A.... "C:\Program Files\Windows Live\Mail\piOrg.dll"
    2 Dec 2008 22:37:42 71 496 A.... "C:\Program Files\Windows Live\Mail\smapi.dll"
    20 Nov 2008 22:17:58 144 416 A.... "C:\Program Files\Windows Live\Mail\sqmapi.dll"
    2 Dec 2008 22:37:54 131 400 A.... "C:\Program Files\Windows Live\Mail\ucspell.dll"
    2 Dec 2008 22:37:46 104 264 A.... "C:\Program Files\Windows Live\Mail\uxcalendar.dll"
    2 Dec 2008 22:38:48 541 512 A.... "C:\Program Files\Windows Live\Mail\uxcontacts.dll"
    2 Dec 2008 22:38:54 2 392 392 A.... "C:\Program Files\Windows Live\Mail\uxcore.dll"
    2 Dec 2008 22:41:18 302 920 A.... "C:\Program Files\Windows Live\Mail\wab32res.dll"
    2 Dec 2008 22:38:20 315 720 A.... "C:\Program Files\Windows Live\Mail\wabapi.dll"
    2 Dec 2008 22:38:08 169 800 A.... "C:\Program Files\Windows Live\Mail\wcics.dll"
    2 Dec 2008 22:38:10 175 944 A.... "C:\Program Files\Windows Live\Mail\wcstore.dll"
    2 Dec 2008 22:37:24 22 856 A.... "C:\Program Files\Windows Live\Mail\wcstoreproxy.dll"
    2 Dec 2008 22:38:10 169 800 A.... "C:\Program Files\Windows Live\Mail\wcsync.dll"
    2 Dec 2008 22:37:42 49 992 A.... "C:\Program Files\Windows Live\Mail\wldcore.dll"
    2 Dec 2008 22:37:22 32 584 A.... "C:\Program Files\Windows Live\Mail\wldlog.dll"
    2 Dec 2008 22:41:16 115 016 A.... "C:\Program Files\Windows Live\Mail\wlmail.exe"
    20 Nov 2008 22:16:10 3 611 448 A.... "C:\Program Files\Windows Live\Mail\wlmfilter.dat"
    20 Nov 2008 22:16:10 454 048 A.... "C:\Program Files\Windows Live\Mail\wlmfilter.dll"
    2 Dec 2008 22:38:18 225 608 A.... "C:\Program Files\Windows Live\Messenger\liveNatTrav.dll"
    2 Dec 2008 22:38:48 554 824 A.... "C:\Program Files\Windows Live\Messenger\livetransport.dll"
    2 Dec 2008 22:37:44 62 280 A.... "C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll"
    2 Dec 2008 22:38:16 223 048 A.... "C:\Program Files\Windows Live\Messenger\msgsc.14.0.8050.1202.dll"
    2 Dec 2008 22:41:26 368 456 A.... "C:\Program Files\Windows Live\Messenger\msgslang.14.0.8050.1202.dll"
    2 Dec 2008 22:39:00 11 410 760 A.... "C:\Program Files\Windows Live\Messenger\msgsres.dll"
    2 Dec 2008 22:38:50 442 184 A.... "C:\Program Files\Windows Live\Messenger\msgswcam.dll"
    2 Dec 2008 22:41:56 3 882 312 A.... "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"
    14 Nov 2008 16:07:40 442 760 A.... "C:\Program Files\Windows Live\Messenger\msvs.exe"
    11 Nov 2008 15:06:44 51 624 A.... "C:\Program Files\Windows Live\Messenger\msvsui.dll"
    2 Dec 2008 22:38:48 424 776 A.... "C:\Program Files\Windows Live\Messenger\PresenceIM.dll"
    2 Dec 2008 22:37:40 56 136 A.... "C:\Program Files\Windows Live\Messenger\psmsong.14.0.8050.1202.dll"
    24 Nov 2008 22:28:06 6 153 552 A.... "C:\Program Files\Windows Live\Messenger\rtmpltfm.dll"
    20 Nov 2008 22:17:58 144 416 A.... "C:\Program Files\Windows Live\Messenger\sqmapi.dll"
    24 Nov 2008 22:28:06 4 752 200 A.... "C:\Program Files\Windows Live\Messenger\uccapi.dll"
    20 Nov 2008 22:17:02 639 824 A.... "C:\Program Files\Windows Live\Messenger\uccapires.dll"
    2 Dec 2008 22:37:46 104 264 A.... "C:\Program Files\Windows Live\Messenger\uxcalendar.dll"
    2 Dec 2008 22:38:48 541 512 A.... "C:\Program Files\Windows Live\Messenger\uxcontacts.dll"
    2 Dec 2008 22:38:54 2 392 392 A.... "C:\Program Files\Windows Live\Messenger\uxcore.dll"
    2 Dec 2008 22:38:48 439 624 A.... "C:\Program Files\Windows Live\Messenger\vvpltfrm.dll"
    2 Dec 2008 21:44:36 73 040 A.... "C:\Program Files\Windows Live\Messenger\wlchtc.dll"
    2 Dec 2008 21:44:52 582 992 A.... "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"
    2 Dec 2008 21:44:34 62 288 A.... "C:\Program Files\Windows Live\Messenger\wlcstart.exe"
    2 Dec 2008 21:44:52 876 880 A.... "C:\Program Files\Windows Live\Messenger\wlcui.dll"
    2 Dec 2008 21:44:42 76 112 A.... "C:\Program Files\Windows Live\Messenger\wlcuires.dll"
    2 Dec 2008 22:37:42 49 992 A.... "C:\Program Files\Windows Live\Messenger\wldcore.dll"
    2 Dec 2008 22:37:22 32 584 A.... "C:\Program Files\Windows Live\Messenger\wldlog.dll"
    20 Nov 2008 22:14:36 598 856 A.... "C:\Program Files\Windows Live\Messenger\wmaecdmort.dll"
    20 Nov 2008 22:14:36 1 565 480 A.... "C:\Program Files\Windows Live\Messenger\wmv9vcm.dll"
    4 Dec 2008 22:49:00 216 424 A.... "C:\Program Files\Windows Live\Photo Gallery\ImagingDevice.dll"
    4 Dec 2008 22:49:02 427 880 A.... "C:\Program Files\Windows Live\Photo Gallery\ImagingServices.dll"
    4 Dec 2008 22:48:52 128 872 A.... "C:\Program Files\Windows Live\Photo Gallery\MetadataSys.dll"
    4 Dec 2008 22:56:32 12 648 A.... "C:\Program Files\Windows Live\Photo Gallery\Microsoft.WindowsLive.PublishPlugins.dll"
    4 Dec 2008 22:49:04 2 149 224 A.... "C:\Program Files\Windows Live\Photo Gallery\MicrosoftEffects.dll"
    4 Dec 2008 22:48:52 14 696 A.... "C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll"
    4 Dec 2008 22:48:52 43 880 A.... "C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll"
    4 Dec 2008 22:56:32 98 664 A.... "C:\Program Files\Windows Live\Photo Gallery\PublishPluginsInterop.dll"
    5 Dec 2008 0:11:16 10 600 A.... "C:\Program Files\Windows Live\Photo Gallery\RegRes.dll"
    4 Dec 2008 22:48:52 141 160 A.... "C:\Program Files\Windows Live\Photo Gallery\sqmapi.dll"
    4 Dec 2008 22:48:52 104 296 A.... "C:\Program Files\Windows Live\Photo Gallery\UXCalendar.dll"
    4 Dec 2008 22:49:04 541 544 A.... "C:\Program Files\Windows Live\Photo Gallery\UXContacts.dll"
    4 Dec 2008 22:49:06 2 392 424 A.... "C:\Program Files\Windows Live\Photo Gallery\UXCore.dll"
    4 Dec 2008 22:49:04 621 416 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoLibraryDatabase.dll"
    5 Dec 2008 0:11:16 89 960 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoLibraryDuiResourcesLocalized.dll"
    4 Dec 2008 22:48:48 71 528 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoSqm.dll"
    4 Dec 2008 22:49:04 2 184 552 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoLibraryMain.dll"
    4 Dec 2008 22:49:06 9 254 760 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoLibraryDuiResources.dll"
    5 Dec 2008 0:11:16 1 812 328 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoLibraryResources.dll"
    4 Dec 2008 22:49:04 1 260 904 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoViewer.dll"
    4 Dec 2008 22:48:52 50 024 A.... "C:\Program Files\Windows Live\Photo Gallery\WLDCore.dll"
    4 Dec 2008 22:49:04 1 247 592 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoVoyager.dll"
    5 Dec 2008 0:11:16 549 224 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXAlbumDownloadWizard.exe"
    5 Dec 2008 0:11:16 281 960 A.... "C:\Program Files\Windows Live\Photo Gallery\wlxclip.dll"
    4 Dec 2008 22:48:56 191 336 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXDSPA.dll"
    4 Dec 2008 22:48:52 127 336 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXGrinderScheduler.dll"
    4 Dec 2008 22:48:52 79 208 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXImageTranscode.dll"
    5 Dec 2008 0:11:16 1 103 208 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXMediaPublishSubscribe.dll"
    5 Dec 2008 0:11:16 1 825 640 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcq.dll"
    4 Dec 2008 22:49:00 231 272 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe"
    4 Dec 2008 22:48:52 19 816 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoBase.dll"
    5 Dec 2008 0:11:16 139 112 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe"
    4 Dec 2008 22:48:52 83 304 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoCinematic.dll"
    4 Dec 2008 22:48:52 16 744 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGalleryRepair.exe"
    4 Dec 2008 22:48:52 80 232 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoClassic.dll"
    4 Dec 2008 22:49:04 750 952 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPipeline.dll"
    4 Dec 2008 22:49:04 732 008 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPipetran.dll"
    4 Dec 2008 22:48:52 18 280 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXQuickTimeControlHostPS.dll"
    4 Dec 2008 22:48:52 117 096 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXQuickTimeControlHost.exe"
    4 Dec 2008 22:48:52 51 048 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXQuickTimeShellExt.dll"
    5 Dec 2008 0:11:16 71 016 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXSendMail.dll"
    5 Dec 2008 0:11:16 508 776 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXSlideshow.dll"
    4 Dec 2008 22:48:52 81 768 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXThumbCache.dll"
    4 Dec 2008 22:48:50 142 184 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXVAFilt.dll"
    4 Dec 2008 22:49:02 521 064 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXVideoTrim.dll"
    5 Dec 2008 0:11:16 764 264 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXVideoAcquireWizard.exe"
    4 Dec 2008 22:48:52 69 480 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXVideoCameraAutoPlayManager.exe"
    1 Dec 2008 12:54:44 144 416 A.... "C:\Program Files\Windows Live\Sync\sqmapi.dll"
    2 Dec 2008 21:53:08 463 184 A.... "C:\Program Files\Windows Live\Sync\WindowsLiveSync.Resource.dll"
    2 Dec 2008 21:53:08 1 170 256 A.... "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"
    7 Nov 2008 8:15:58 144 416 A.... "C:\Program Files\Windows Live\Writer\sqmapi.dll"
    2 Dec 2008 21:54:26 97 112 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Client.dll"
    2 Dec 2008 21:54:24 953 176 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.CoreServices.dll"
    2 Dec 2008 21:54:26 64 344 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.FileDestinations.dll"
    2 Dec 2008 21:54:24 68 440 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.HtmlParser.dll"
    2 Dec 2008 21:53:34 346 968 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Localization.dll"
    2 Dec 2008 21:53:16 244 568 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.HtmlEditor.dll"
    2 Dec 2008 21:54:16 404 312 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Controls.dll"
    2 Dec 2008 21:50:16 129 880 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Interop.dll"
    2 Dec 2008 21:54:28 56 152 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Passport.dll"
    2 Dec 2008 21:50:18 166 744 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Interop.Mshtml.dll"
    2 Dec 2008 21:53:34 351 064 A.... "C:\Program Files\Windows Live\Writer\WindowsLiveLocal.WriterPlugin.dll"
    2 Dec 2008 21:50:18 113 496 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Mshtml.dll"
    2 Dec 2008 21:54:24 43 864 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Instrumentation.dll"
    2 Dec 2008 22:27:36 141 144 A.... "C:\Program Files\Windows Live\Writer\WindowsLiveWriter.Application.dll"
    2 Dec 2008 21:50:18 133 976 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Interop.SHDocVw.dll"
    2 Dec 2008 22:27:10 127 320 A.... "C:\Program Files\Windows Live\Writer\WindowsLiveWriter.Filter.dll"
    2 Dec 2008 21:54:28 56 152 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Extensibility.dll"
    2 Dec 2008 21:50:16 129 880 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.SpellChecker.dll"
    2 Dec 2008 21:54:26 3 140 440 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.PostEditor.dll"
    2 Dec 2008 21:54:28 52 056 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Api.dll"
    2 Dec 2008 21:54:26 101 208 A.... "C:\Program Files\Windows Live\Writer\WindowsLiveWriter.exe"
    2 Dec 2008 21:54:24 588 632 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.ApplicationFramework.dll"
    2 Dec 2008 21:53:34 334 680 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.BlogClient.dll"
    2 Dec 2008 21:54:26 72 536 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.BrowserControl.dll"
    2 Dec 2008 22:27:10 31 064 A.... "C:\Program Files\Windows Live\Writer\wlsqm.dll"
    2 Dec 2008 22:27:36 187 224 A.... "C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll"
    9 Nov 2008 19:20:18 82 808 A.... "C:\Program Files\Fichiers communs\Adobe\Updater5\AdobeUpdaterInstallMgr.exe"
    9 Nov 2008 19:21:14 2 356 088 A.... "C:\Program Files\Fichiers communs\Adobe\Updater5\AdobeUpdater.exe"
    20 Nov 2008 13:18:54 16 855 040 A.... "C:\Program Files\Fichiers communs\Apple\CoreFP\CoreFP.dll"
    18 Nov 2008 13:33:20 237 968 A.... "C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\HWDeviceLogin.dll"
    18 Nov 2008 13:33:20 96 144 A.... "C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\LogicalDevice.dll"
    18 Nov 2008 13:33:22 1 142 672 A.... "C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\msidcrl40.dll"
    18 Nov 2008 13:47:06 408 952 A.... "C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll"
    18 Nov 2008 13:55:24 118 672 A.... "C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe"
    2 Jan 2009 13:07:42 15 102 A.... "C:\Program Files\Fichiers communs\Windows Live\.cache\wlc7.tmp"
    20 Nov 2008 13:20:44 42 496 A.... "C:\Program Files\iPod\bin\iPodService.Resources\iPodService.dll"
    20 Nov 2008 13:21:00 112 128 A.... "C:\Program Files\iTunes\iTunes.Resources\da.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:00 120 320 A.... "C:\Program Files\iTunes\iTunes.Resources\de.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:20:54 110 592 A.... "C:\Program Files\iTunes\iTunes.Resources\en.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 117 248 A.... "C:\Program Files\iTunes\iTunes.Resources\es.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 111 616 A.... "C:\Program Files\iTunes\iTunes.Resources\fi.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 117 248 A.... "C:\Program Files\iTunes\iTunes.Resources\fr.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 115 200 A.... "C:\Program Files\iTunes\iTunes.Resources\it.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 110 592 A.... "C:\Program Files\iTunes\iTunes.Resources\ja.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 110 592 A.... "C:\Program Files\iTunes\iTunes.Resources\ko.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 112 640 A.... "C:\Program Files\iTunes\iTunes.Resources\nb.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 115 712 A.... "C:\Program Files\iTunes\iTunes.Resources\nl.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 113 152 A.... "C:\Program Files\iTunes\iTunes.Resources\pl.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:04 115 712 A.... "C:\Program Files\iTunes\iTunes.Resources\pt.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:04 117 248 A.... "C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:04 114 176 A.... "C:\Program Files\iTunes\iTunes.Resources\ru.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:04 111 616 A.... "C:\Program Files\iTunes\iTunes.Resources\sv.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:06 110 592 A.... "C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:08 110 592 A.... "C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\da.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\de.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:20:56 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\en.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\es.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\fi.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\fr.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\it.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\ja.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\ko.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\nb.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\nl.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\pl.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\pt.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\pt_PT.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\ru.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\sv.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\zh_CN.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\zh_TW.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\da.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\de.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:20:56 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\en.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\es.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\fi.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\fr.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\it.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\ja.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\ko.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\nb.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\nl.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\pl.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\pt.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\pt_PT.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\ru.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\sv.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\zh_CN.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\zh_TW.lproj\iTunesMiniPlayerLocalized.dll"
    4 Dec 2008 16:03:00 226 640 A.... "C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
    4 Dec 2008 16:03:00 166 752 A.... "C:\Program Files\Microsoft\Search Enhancement Pack\Search Box Extension\SRCHBXEX.DLL"
    4 Dec 2008 15:59:06 92 504 A.... "C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll"
    4 Dec 2008 16:03:00 142 160 A.... "C:\Program Files\Microsoft\Search Enhancement Pack\SeaShadow\SEASHADO.DLL"
    4 Jan 2009 11:31:56 15 462 A.... "C:\Program Files\Real\RealArcade\Html\quicklaunch_plus_myql.htm"
    16 Dec 2008 19:37:48 33 523 A.... "C:\Program Files\Real\RealArcade\Html\quicklaunch_plus_MyAccount.htm"
    24 Dec 2008 20:48:04 4 107 A.... "C:\Program Files\Real\RealArcade\Html\quicklaunch_plus_addgames.htm"
    4 Jan 2009 11:17:04 2 764 A.... "C:\Program Files\Real\RealArcade\Html\waittemp.htm"
    4 Nov 2008 23:24:20 2 617 998 A.... "C:\Program Files\Vuze\plugins\azemp\azemp_2.0.28.zip"
    3 Dec 2008 0:09:32 2 619 426 A.... "C:\Program Files\Vuze\plugins\azemp\azemp_2.0.32.zip"
    3 Dec 2008 0:09:32 5 472 734 A.... "C:\Program Files\Vuze\plugins\azemp\azmplay.exe"
    20 Nov 2008 22:16:08 277 A.... "C:\Program Files\Windows Live\Mail\Stationery\ArtDeco.htm"
    20 Nov 2008 22:16:08 562 A.... "C:\Program Files\Windows Live\Mail\Stationery\Bamboo.htm"
    20 Nov 2008 22:16:08 281 A.... "C:\Program Files\Windows Live\Mail\Stationery\BlueTiles.htm"
    20 Nov 2008 22:16:08 278 A.... "C:\Program Files\Windows Live\Mail\Stationery\Bubbles.htm"
    20 Nov 2008 22:16:08 277 A.... "C:\Program Files\Windows Live\Mail\Stationery\Cheddar.htm"
    20 Nov 2008 22:16:08 284 A.... "C:\Program Files\Windows Live\Mail\Stationery\ColorStripe.htm"
    20 Nov 2008 22:16:08 280 A.... "C:\Program Files\Windows Live\Mail\Stationery\Dinosaur.htm"
    20 Nov 2008 22:16:08 560 A.... "C:\Program Files\Windows Live\Mail\Stationery\Drawing.htm"
    20 Nov 2008 22:16:08 277 A.... "C:\Program Files\Windows Live\Mail\Stationery\Garden.htm"
    20 Nov 2008 22:16:08 284 A.... "C:\Program Files\Windows Live\Mail\Stationery\HandPrints.htm"
    20 Nov 2008 22:16:08 273 A.... "C:\Program Files\Windows Live\Mail\Stationery\LED.htm"
    20 Nov 2008 22:16:08 276 A.... "C:\Program Files\Windows Live\Mail\Stationery\Money.htm"
    20 Nov 2008 22:16:08 278 A.... "C:\Program Files\Windows Live\Mail\Stationery\Mosaic1.htm"
    20 Nov 2008 22:16:08 277 A.... "C:\Program Files\Windows Live\Mail\Stationery\Mosaic2.htm"
    20 Nov 2008 22:16:08 273 A.... "C:\Program Files\Windows Live\Mail\Stationery\Music.htm"
    20 Nov 2008 22:16:08 280 A.... "C:\Program Files\Windows Live\Mail\Stationery\Snowboard.htm"
    20 Nov 2008 22:16:08 282 A.... "C:\Program Files\Windows Live\Mail\Stationery\Southwest.htm"
    20 Nov 2008 22:16:08 283 A.... "C:\Program Files\Windows Live\Mail\Stationery\YellowTiles.htm"
    7 Nov 2008 8:11:46 551 232 A.... "C:\Program Files\Windows Live\Writer\Dictionaries\mssp3fr.dll"
    14 Nov 2008 23:45:08 625 528 A.... "C:\Program Files\Windows Live\Writer\Dictionaries\mssp7en.dll"
    2 Dec 2008 21:51:58 203 608 A.... "C:\Program Files\Windows Live\Writer\fr\WindowsLive.Writer.Localization.resources.dll"
    7 Nov 2008 8:12:04 4 337 A.... "C:\Program Files\Windows Live\Writer\html\map-preview.html"
    7 Nov 2008 8:12:04 12 014 A.... "C:\Program Files\Windows Live\Writer\html\map.html"
    7 Nov 2008 8:11:30 404 A.... "C:\Program Files\Windows Live\Writer\template\default.htm"
    7 Nov 2008 14:28:12 275 912 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileBackup.exe"
    7 Nov 2008 14:28:18 153 984 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceHelper.exe"
    7 Nov 2008 14:28:20 267 400 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileSync.exe"
    7 Nov 2008 14:28:16 132 424 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"
    7 Nov 2008 14:28:26 65 480 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncUIHandler.exe"
    7 Nov 2008 14:27:06 798 720 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\CFNetwork.dll"
    7 Nov 2008 14:23:36 1 194 248 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\CoreFoundation.dll"
    7 Nov 2008 14:28:28 46 056 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\defaults.exe"
    7 Nov 2008 14:23:38 135 544 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\DeviceLink.dll"
    7 Nov 2008 14:28:30 15 376 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\distnoted.exe"
    7 Nov 2008 14:28:32 19 064 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\EventFixer.exe"
    7 Nov 2008 14:23:40 2 800 850 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\Foundation.dll"
    7 Nov 2008 14:28:32 51 216 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\gconsync.exe"
    7 Nov 2008 14:23:40 656 801 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\GoogleContactSync.dll"
    7 Nov 2008 14:27:12 7 348 094 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\icudt36.dll"
    7 Nov 2008 14:27:12 863 707 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\icuin36.dll"
    7 Nov 2008 14:27:12 985 379 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\icuuc36.dll"
    7 Nov 2008 14:28:34 133 480 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\IESyncClient.exe"
    7 Nov 2008 14:24:08 1 011 634 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\ISSupport.dll"
    7 Nov 2008 14:24:14 1 200 128 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\iTunesMobileDevice.dll"
    7 Nov 2008 14:27:32 1 105 920 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\libeay32.dll"
    7 Nov 2008 14:27:30 645 738 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\libobjc.i386.A.dll"
    7 Nov 2008 14:27:26 1 029 774 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\libxml2.dll"
    7 Nov 2008 14:27:28 151 040 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\libxslt.dll"
    7 Nov 2008 14:30:24 236 920 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\MDCrashReportTool.exe"
    7 Nov 2008 14:24:12 319 922 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\MobileDevice.dll"
    7 Nov 2008 14:24:20 743 038 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\OutlookSyncClientHelper.dll"
    7 Nov 2008 14:30:30 95 560 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\OutlookSyncClient.exe"
    7 Nov 2008 14:24:16 110 592 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\OutlookChangeNotifierAddIn.dll"
    7 Nov 2008 14:30:32 109 496 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SafariSyncClient.exe"
    7 Nov 2008 14:27:36 400 896 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\sqlite3.dll"
    7 Nov 2008 14:27:32 262 144 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\ssleay32.dll"
    7 Nov 2008 14:30:34 28 472 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncDiagnostics.exe"
    7 Nov 2008 14:30:38 24 488 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\syncli.exe"
    7 Nov 2008 14:30:34 26 104 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncPlanObserver.exe"
    7 Nov 2008 14:26:34 1 441 693 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncServices.dll"
    7 Nov 2008 14:30:36 518 120 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncServer.exe"
    7 Nov 2008 14:26:34 187 307 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncServicesUI.dll"
    7 Nov 2008 14:27:18 34 141 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncUIHandler.dll"
    7 Nov 2008 14:27:16 233 472 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncUICore.dll"
    7 Nov 2008 14:30:40 1 097 528 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\upgradedb.exe"
    7 Nov 2008 14:30:40 150 864 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\WindowsContactsSync.exe"
    7 Nov 2008 14:30:42 100 800 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\WindowsMailSync.exe"
    7 Nov 2008 14:30:48 1 866 752 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\YahooSync.exe"
    7 Nov 2008 14:27:08 18 267 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\YSFileShim.dll"
    7 Nov 2008 14:27:38 60 416 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\zlib1.dll"
    7 Nov 2008 14:23:30 32 000 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\Drivers\usbaapl.sys"
    9 Nov 2008 18:45:04 2 456 952 A.... "C:\Program Files\Fichiers communs\System\MAPI\1036\MSNCON32.dll"
    9 Nov 2008 18:45:04 2 456 952 A.... "C:\Program Files\Fichiers communs\System\MSMAPI\1036\MSNCON32.DLL"
    25 Nov 2008 21:29:00 4 865 408 A.... "C:\Program Files\Fichiers communs\Windows Live\.cache\add529ed1c966a9\Silverlight.2.0.exe"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\da.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\de.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:20:44 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\en.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\es.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\fi.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\fr.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\it.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\ja.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\ko.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\nb.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\nl.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\pl.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Fi
    0
  14. ginie
     
    voici le rapport que mon ordi a bien voulu me donner, toutes les étapes ne se sont pas déroulées commes décrites malgré de nombreux essai "au pied de la lettre" de vos infos détaillées.

    [b]System Report[/b]
    *************

    Run on 04/01/2009 at 18:12

    Microsoft Windows XP [version 5.1.2600]

    Current user is an administrator

    [b]Running Processes[/b]:

    \SystemRoot\System32\smss.exe [796]
    \??\C:\WINDOWS\system32\csrss.exe [864]
    \??\C:\WINDOWS\system32\winlogon.exe [888]
    C:\WINDOWS\system32\services.exe [940]
    C:\WINDOWS\system32\lsass.exe [952]
    C:\WINDOWS\system32\svchost.exe [1128]
    C:\WINDOWS\system32\svchost.exe [1200]
    C:\WINDOWS\System32\svchost.exe [1244]
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [1296]
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [1336]
    C:\WINDOWS\system32\svchost.exe [1380]
    C:\WINDOWS\system32\svchost.exe [1516]
    C:\WINDOWS\system32\PMObserv.exe [1820]
    C:\WINDOWS\system32\spoolsv.exe [1876]
    C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe [1996]
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2036]
    C:\Program Files\Bonjour\mDNSResponder.exe [148]
    C:\WINDOWS\eHome\ehRecvr.exe [196]
    C:\WINDOWS\eHome\ehSched.exe [252]
    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [312]
    C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe [488]
    C:\WINDOWS\system32\nvsvc32.exe [1152]
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [1272]
    C:\Program Files\Spyware Doctor\pctsAuxs.exe [1432]
    C:\Program Files\Spyware Doctor\pctsSvc.exe [1508]
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [3432]
    C:\Program Files\Spyware Doctor\pctsTray.exe [3440]
    C:\WINDOWS\system32\svchost.exe [3496]
    C:\WINDOWS\system32\svchost.exe [3556]
    C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [3612]
    C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [3728]
    C:\WINDOWS\ehome\mcrdsvc.exe [3892]
    C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [3972]
    C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe [4028]
    C:\WINDOWS\Explorer.EXE [3060]
    C:\Program Files\QuickTime\qttask.exe [3364]
    C:\WINDOWS\system32\ctfmon.exe [3548]
    C:\Program Files\Microsoft ActiveSync\wcescomm.exe [3768]
    C:\PROGRA~1\MI3AA1~1\rapimgr.exe [3880]
    C:\WINDOWS\system32\dllhost.exe [2560]
    C:\WINDOWS\System32\alg.exe [3048]
    C:\Program Files\Internet Explorer\iexplore.exe [784]

    [b]Drivers - Running[/b]:

    ACPI
    ACPIEC
    AegisP
    AFD
    ApfiltrService
    Arp1394
    atapi
    audstub
    Beep
    Cdfs
    Cdrom
    CmBatt
    Compbatt
    Disk
    DMICall
    E100B
    Fips
    FltMgr
    Ftdisk
    GEARAspiWDM
    Gpc
    HDAudBus
    HSFHWAZL
    HSF_DPV
    HTTP
    i8042prt
    IKFileSec
    IKSysFlt
    IKSysSec
    Imapi
    intelppm
    IpNat
    IPSec
    isapnp
    Kbdclass
    kmixer
    KSecDD
    mdmxsdk
    mnmdd
    Modem
    Mouclass
    MountMgr
    MRxDAV
    MRxSmb
    Msfs
    mssmbios
    Mup
    NDIS
    NdisTapi
    Ndisuio
    NdisWan
    NDProxy
    NetBIOS
    NetBT
    NIC1394
    Npfs
    Ntfs
    Null
    nv
    ohci1394
    PartMgr
    PCI
    PCIIde
    Pcmcia
    pctfw2
    PptpMiniport
    PSched
    Ptilink
    PxHelp20
    RasAcd
    Rasl2tp
    RasPppoe
    Raspti
    Rdbss
    RDPCDD
    rdpdr
    redbook
    s24trans
    SI3132
    SiFilter
    SiRemFil
    SNC
    SonyImgF
    sr
    Srv
    StarOpen
    STHDA
    swenum
    sysaudio
    Tcpip
    TermDD
    ti21sony
    tosporte
    Tosrfcom
    Update
    usbehci
    usbhub
    usbuhci
    usbvm321
    VgaSave
    VolSnap
    w39n51
    Wanarp
    wdmaud
    winachsf
    WS2IFSL

    [b]Drivers - Stopped[/b]:

    Abiosdsk
    abp480n5
    adpu160m
    aec
    Aha154x
    aic78u2
    aic78xx
    AliIde
    amsint
    asc
    asc3350p
    asc3550
    AsyncMac
    Atdisk
    Atmarpc
    bdpredir
    cbidf2k
    CCDECODE
    cd20xrnt
    Cdaudio
    Changer
    CmdIde
    Cpqarray
    dac960nt
    dmboot
    dmio
    dmload
    DMusic
    dpti2o
    drmkaud
    e1express
    Fastfat
    Fdc
    Flpydisk
    HidUsb
    hpn
    i2omgmt
    i2omp
    ini910u
    IntelIde
    Ip6Fw
    IpFilterDriver
    IpInIp
    IRENUM
    kbdhid
    lbrtfdc
    MHNDRV
    mouhid
    mraid35x
    MSKSSRV
    MSPCLOCK
    MSPQM
    MSTEE
    NABTSFEC
    NdisIP
    NwlnkFlt
    NwlnkFwd
    Parport
    ParVdm
    PCIDump
    PDCOMP
    PDFRAME
    PDRELI
    PDRFRAME
    perc2
    perc2hib
    Profos
    ql1080
    Ql10wnt
    ql12160
    ql1240
    ql1280
    RDPWD
    Secdrv
    Serial
    Sfloppy
    Simbad
    SLIP
    Sparrow
    splitter
    sscdbus
    sscdmdfl
    sscdmdm
    streamip
    swmidi
    symc810
    symc8xx
    SYMIDSCO
    sym_hi
    sym_u3
    TDPIPE
    TDTCP
    toshidpt
    TosIde
    Tosrfbd
    Tosrfbnp
    Tosrfhid
    tosrfnds
    TosRfSnd
    Tosrfusb
    Trufos
    Udfs
    ultra
    USBAAPL
    usbccgp
    usbprint
    usbscan
    USBSTOR
    usb_rndisx
    ViaIde
    wanatw
    wceusbsh
    WDICA
    WSTCODEC
    WudfPf
    WudfRd

    [b]Services - Running[/b]:

    AdobeActiveFileMonitor4.0
    ALG
    Apple
    AudioSrv
    BITS
    Bonjour
    COMSysApp
    CryptSvc
    DcomLaunch
    Dhcp
    Dnscache
    ehRecvr
    ehSched
    ERSvc
    Eventlog
    EventSystem
    EvtEng
    FastUserSwitchingCompatibility
    gusvc
    helpsvc
    HidServ
    lanmanserver
    lanmanworkstation
    LmHosts
    McrdSvc
    MSSQL$VAIO_VEDB
    Netman
    Nla
    NVSvc
    PlugPlay
    PMObserv
    PolicyAgent
    ProtectedStorage
    RasMan
    RegSrvc
    RemoteRegistry
    RpcSs
    S24EventMonitor
    SamSs
    Schedule
    sdAuxService
    sdCoreService
    SeaPort
    seclogon
    SENS
    SharedAccess
    ShellHWDetection
    Spooler
    srservice
    SSDPSRV
    stisvc
    TapiSrv
    TermService
    Themes
    TrkWks
    VAIO
    Vcsw
    VzCdbSvc
    VzFw
    W32Time
    WebClient
    winmgmt
    wscsvc
    WZCSVC

    [b]Services - Stopped[/b]:

    Alerter
    AppMgmt
    aspnet_state
    Browser
    CiSvc
    ClipSrv
    clr_optimization_v2.0.50727_32
    dmadmin
    dmserver
    Dot3svc
    EapHost
    hkmsvc
    HTTPFilter
    IDriverT
    Image
    ImapiService
    iPod
    Messenger
    MHN
    mnmsrvc
    MSCSPTISRV
    MSDTC
    MSIServer
    MSSQLServerADHelper
    napagent
    NetDDE
    NetDDEdsdm
    Netlogon
    NtLmSsp
    NtmsSvc
    ose
    PACSPTISVR
    RasAuto
    RDSessMgr
    RemoteAccess
    RpcLocator
    RSVP
    SCardSvr
    SonicStage
    SPTISRV
    SQLAgent$VAIO_VEDB
    SSScsiSV
    SwPrv
    SysmonLog
    TlntSvr
    upnphost
    UPS
    VAIO
    VAIOMediaPlatform-IntegratedServer-AppServer
    VAIOMediaPlatform-IntegratedServer-HTTP
    VAIOMediaPlatform-IntegratedServer-UPnP
    VAIOMediaPlatform-Mobile-Gateway
    VCI
    VSS
    WmdmPmSN
    Wmi
    WmiApSrv
    WMPNetworkSvc
    wuauserv
    WudfSvc
    xmlprov

    [b]Files Created/Modified - 60 Days[/b]:

    C:\

    4 Jan 2009 18:07:56 1 610 612 736 A.SH. "C:\pagefile.sys"
    25 Dec 2008 22:40:00 104 498 A.... "C:\raze.exe"
    20 Dec 2008 8:57:34 55 858 A.... "C:\reps.exe"
    26 Dec 2008 15:06:38 104 498 A.... "C:\win.exe"

    C:\WINDOWS\

    4 Jan 2009 18:08:02 2 048 A.S.. "C:\WINDOWS\bootstat.dat"
    18 Dec 2008 23:12:38 38 574 ..SHR "C:\WINDOWS\fxstaller.exe"
    4 Dec 2008 10:53:26 27 A.... "C:\WINDOWS\SW_Win2000X24.DLL"
    20 Dec 2008 8:50:14 55 858 ..SHR "C:\WINDOWS\sysrest32.exe"
    26 Dec 2008 14:51:18 35 328 A.... "C:\WINDOWS\system32\awtsSlih.dll"
    23 Dec 2008 23:47:18 84 167 ..... "C:\WINDOWS\system32\bedamifu.dll"
    30 Dec 2008 9:11:48 85 126 ..... "C:\WINDOWS\system32\bosofifa.dll"
    26 Dec 2008 13:31:40 35 328 A.... "C:\WINDOWS\system32\byXRJApO.dll"
    18 Dec 2008 23:21:04 126 464 A.... "C:\WINDOWS\system32\caoooi.dll"
    26 Dec 2008 15:41:18 35 328 A.... "C:\WINDOWS\system32\cbXPfGxW.dll"
    26 Dec 2008 15:01:18 35 328 A.... "C:\WINDOWS\system32\cbXRKApQ.dll"
    4 Jan 2009 11:40:22 86 109 A.SH. "C:\WINDOWS\system32\dewuzeko.dll"
    20 Dec 2008 13:05:48 62 598 A.SH. "C:\WINDOWS\system32\digezuru.dll"
    26 Dec 2008 16:35:00 35 328 A.... "C:\WINDOWS\system32\efcCvVPJ.dll"
    26 Dec 2008 14:01:18 35 328 A.... "C:\WINDOWS\system32\fcccaywt.dll"
    26 Dec 2008 16:11:20 35 328 A.... "C:\WINDOWS\system32\fccYsrqR.dll"
    24 Dec 2008 23:48:06 98 070 A.SH. "C:\WINDOWS\system32\fegenope.dll"
    29 Dec 2008 9:11:38 98 976 A.SH. "C:\WINDOWS\system32\fezahoyu.dll"
    25 Dec 2008 21:34:08 253 592 A.... "C:\WINDOWS\system32\FNTCACHE.DAT"
    30 Dec 2008 21:11:56 61 707 A.SH. "C:\WINDOWS\system32\fofajivo.dll"
    22 Dec 2008 14:22:04 73 216 A.... "C:\WINDOWS\system32\fwsdseds.dll"
    27 Dec 2008 21:38:16 62 070 A.SH. "C:\WINDOWS\system32\gurohodo.dll"
    21 Dec 2008 14:18:12 85 287 ..... "C:\WINDOWS\system32\hagebuzi.dll"
    1 Jan 2009 23:24:42 98 085 A.SH. "C:\WINDOWS\system32\hezagivu.dll"
    26 Dec 2008 14:41:18 35 328 A.... "C:\WINDOWS\system32\hgGyVPGV.dll"
    22 Dec 2008 14:22:02 126 464 A.... "C:\WINDOWS\system32\hhukapvv.dll"
    23 Dec 2008 11:47:20 87 260 A.SH. "C:\WINDOWS\system32\hobolaku.dll"
    23 Dec 2008 23:47:18 97 974 A.SH. "C:\WINDOWS\system32\hovebipu.dll"
    26 Dec 2008 13:41:20 35 328 A.... "C:\WINDOWS\system32\iifebXrr.dll"
    26 Dec 2008 9:32:08 35 328 A.... "C:\WINDOWS\system32\iifgEvTJ.dll"
    18 Dec 2008 23:21:04 126 464 A.... "C:\WINDOWS\system32\ipfmyyca.dll"
    2 Jan 2009 11:24:44 99 052 A.SH. "C:\WINDOWS\system32\jagupodi.dll"
    26 Dec 2008 1:40:28 99 095 A.... "C:\WINDOWS\system32\jofaluju.dll"
    20 Dec 2008 13:05:48 83 090 ..... "C:\WINDOWS\system32\kekiyala.dll"
    26 Dec 2008 15:51:18 35 328 A.... "C:\WINDOWS\system32\kHAQggdE.dll"
    28 Dec 2008 10:38:30 99 030 A.SH. "C:\WINDOWS\system32\lelizomo.dll"
    21 Dec 2008 14:19:34 126 976 A.... "C:\WINDOWS\system32\lhfajllq.dll"
    26 Dec 2008 14:11:18 35 328 A.... "C:\WINDOWS\system32\ljJCrOgD.dll"
    27 Dec 2008 7:50:14 2 724 ..SH. "C:\WINDOWS\system32\madubiha.exe"
    24 Dec 2008 11:47:44 84 117 ..... "C:\WINDOWS\system32\misahavu.dll"
    20 Dec 2008 9:04:02 35 328 A.... "C:\WINDOWS\system32\mlJdBQKa.dll"
    19 Dec 2008 23:19:34 73 216 A.... "C:\WINDOWS\system32\modxhbee.dll"
    13 Dec 2008 7:37:56 3 593 216 A.... "C:\WINDOWS\system32\mshtml.dll"
    31 Dec 2008 23:45:42 99 135 A.... "C:\WINDOWS\system32\nelesoye.dll"
    26 Dec 2008 14:21:18 35 328 A.... "C:\WINDOWS\system32\opnkkhfF.dll"
    26 Dec 2008 15:21:18 35 328 A.... "C:\WINDOWS\system32\opnkllKA.dll"
    2 Jan 2009 13:16:04 71 070 A.... "C:\WINDOWS\system32\perfc009.dat"
    2 Jan 2009 13:16:04 87 160 A.... "C:\WINDOWS\system32\perfc00C.dat"
    2 Jan 2009 13:16:04 422 132 A.... "C:\WINDOWS\system32\perfh009.dat"
    2 Jan 2009 13:16:04 492 786 A.... "C:\WINDOWS\system32\perfh00C.dat"
    29 Dec 2008 21:11:48 62 644 A.SH. "C:\WINDOWS\system32\pewodaju.dll"
    26 Dec 2008 14:31:18 35 328 A.... "C:\WINDOWS\system32\pmnklMcD.dll"
    18 Dec 2008 23:29:28 35 328 A.... "C:\WINDOWS\system32\pmnoPGvw.dll"
    18 Dec 2008 23:15:54 35 328 A.... "C:\WINDOWS\system32\qoMeCvsq.dll"
    31 Dec 2008 10:58:42 99 069 A.SH. "C:\WINDOWS\system32\rarunuku.dll"
    1 Jan 2009 11:24:36 101 198 A.SH. "C:\WINDOWS\system32\rawijeku.dll"
    23 Dec 2008 23:47:18 61 535 A.SH. "C:\WINDOWS\system32\rejanote.dll"
    24 Dec 2008 23:48:04 84 542 ..... "C:\WINDOWS\system32\relereni.dll"
    24 Dec 2008 11:47:44 96 401 A.SH. "C:\WINDOWS\system32\rinapiza.dll"
    1 Jan 2009 11:24:34 83 716 ..... "C:\WINDOWS\system32\romemazu.dll"
    26 Dec 2008 13:01:44 35 328 A.... "C:\WINDOWS\system32\rqRjHyyy.dll"
    20 Dec 2008 8:50:54 35 328 A.... "C:\WINDOWS\system32\rqRLebXr.dll"
    30 Dec 2008 9:11:48 96 867 A.SH. "C:\WINDOWS\system32\savohofu.dll"
    25 Dec 2008 11:48:22 98 885 A.SH. "C:\WINDOWS\system32\sebimike.dll"
    26 Dec 2008 13:48:42 99 099 A.SH. "C:\WINDOWS\system32\silulawo.dll"
    2 Dec 2008 22:37:20 49 480 A.... "C:\WINDOWS\system32\sirenacm.dll"
    1 Jan 2009 23:24:42 86 260 ..... "C:\WINDOWS\system32\tipukuvu.dll"
    22 Dec 2008 22:31:20 94 906 A.SH. "C:\WINDOWS\system32\towozoha.dll"
    26 Dec 2008 9:26:30 35 328 A.... "C:\WINDOWS\system32\tuvSljjG.dll"
    26 Dec 2008 13:51:18 35 328 A.... "C:\WINDOWS\system32\tuvVOecY.dll"
    26 Dec 2008 16:21:20 35 328 A.... "C:\WINDOWS\system32\tuvWnkhe.dll"
    26 Dec 2008 15:31:18 35 328 A.... "C:\WINDOWS\system32\urqpqNDu.dll"
    4 Jan 2009 11:40:22 101 005 A.SH. "C:\WINDOWS\system32\vahojezi.dll"
    26 Dec 2008 16:01:18 35 328 A.... "C:\WINDOWS\system32\vtUlKCvt.dll"
    26 Dec 2008 16:45:02 35 328 A.... "C:\WINDOWS\system32\vtUmNDWN.dll"
    29 Dec 2008 9:11:36 87 324 ..... "C:\WINDOWS\system32\vufeguja.dll"
    26 Dec 2008 13:48:42 87 182 A.SH. "C:\WINDOWS\system32\webogori.dll"
    25 Dec 2008 11:48:20 84 564 ..... "C:\WINDOWS\system32\wovawuye.dll"
    26 Dec 2008 12:53:56 35 328 A.... "C:\WINDOWS\system32\wvULBqqN.dll"
    26 Dec 2008 13:11:18 35 328 A.... "C:\WINDOWS\system32\xxyaxXOi.dll"
    29 Dec 2008 21:11:48 97 345 A.SH. "C:\WINDOWS\system32\yapipije.dll"
    26 Dec 2008 15:11:20 35 328 A.... "C:\WINDOWS\system32\yaywWMdE.dll"
    23 Dec 2008 11:47:20 95 995 A.SH. "C:\WINDOWS\system32\yihazuso.dll"
    30 Dec 2008 21:11:54 100 976 A.SH. "C:\WINDOWS\system32\yirejame.dll"
    27 Dec 2008 21:38:16 99 052 A.SH. "C:\WINDOWS\system32\zagonibu.dll"
    3 Jan 2009 21:40:18 98 990 A.SH. "C:\WINDOWS\system32\zehuwabu.dll"
    2 Jan 2009 11:24:44 83 769 ..... "C:\WINDOWS\system32\zomotesa.dll"
    3 Jan 2009 22:04:36 67 072 A.... "C:\WINDOWS\system32\~.exe"
    4 Jan 2009 18:08:04 6 A..H. "C:\WINDOWS\Tasks\SA.DAT"
    31 Dec 2008 18:39:54 0 A.... "C:\WINDOWS\Temp\JET90A7.tmp"
    26 Dec 2008 9:30:34 0 A.... "C:\WINDOWS\Temp\JET9162.tmp"
    4 Jan 2009 18:08:12 0 A.... "C:\WINDOWS\Temp\JET9347.tmp"
    18 Dec 2008 20:53:08 0 A.... "C:\WINDOWS\Temp\JETAF4B.tmp"
    4 Dec 2008 20:38:50 0 A.... "C:\WINDOWS\Temp\JETBD25.tmp"
    4 Jan 2009 18:10:32 6 116 A.... "C:\WINDOWS\Temp\scs9.tmp"
    19 Dec 2008 12:00:06 0 A.... "C:\WINDOWS\Temp\tmp11.exe"
    19 Dec 2008 12:00:04 0 A.... "C:\WINDOWS\Temp\tmp11.tmp"
    21 Dec 2008 15:00:30 6 827 A.... "C:\WINDOWS\Temp\tmp3.exe"
    21 Dec 2008 15:00:02 0 A.... "C:\WINDOWS\Temp\tmp3.tmp"
    22 Dec 2008 16:00:06 0 A.... "C:\WINDOWS\Temp\tmp30.exe"
    22 Dec 2008 16:00:02 0 A.... "C:\WINDOWS\Temp\tmp30.tmp"
    20 Dec 2008 13:00:04 63 602 A.... "C:\WINDOWS\Temp\tmp4.exe"
    20 Dec 2008 13:00:02 0 A.... "C:\WINDOWS\Temp\tmp4.tmp"
    13 Dec 2008 7:37:56 3 593 216 A.... "C:\WINDOWS\system32\dllcache\mshtml.dll"
    7 Nov 2008 14:23:30 32 000 A.... "C:\WINDOWS\system32\drivers\usbaapl.sys"
    4 Jan 2009 11:13:10 16 384 A.... "C:\WINDOWS\Temp\Cookies\index.dat"
    2 Jan 2009 13:13:44 258 048 A.... "C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll"
    2 Jan 2009 13:13:44 114 176 A.... "C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll"
    4 Jan 2009 11:13:10 32 768 A.SH. "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\index.dat"
    4 Jan 2009 11:13:10 32 768 A.SH. "C:\WINDOWS\Temp\History\History.IE5\index.dat"

    C:\Program Files\

    20 Nov 2008 13:20:44 438 272 A.... "C:\Program Files\iTunes\CDDBControlApple.dll"
    20 Nov 2008 13:20:44 643 072 A.... "C:\Program Files\iTunes\iPodUpdaterExt.dll"
    20 Nov 2008 13:20:48 14 294 824 A.... "C:\Program Files\iTunes\iTunes.exe"
    20 Nov 2008 13:20:54 108 328 A.... "C:\Program Files\iTunes\iTunesAdmin.dll"
    20 Nov 2008 13:20:54 290 088 A.... "C:\Program Files\iTunes\iTunesHelper.exe"
    20 Nov 2008 13:20:56 132 392 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.dll"
    20 Nov 2008 13:20:56 283 136 A.... "C:\Program Files\iTunes\iTunesOutlookAddIn.dll"
    20 Nov 2008 13:20:56 172 544 A.... "C:\Program Files\iTunes\iTunesPhotoSupport.dll"
    9 Nov 2008 2:09:02 193 912 A.... "C:\Program Files\Microsoft Office Outlook Connector\MSNCONRC.DLL"
    9 Nov 2008 2:09:02 28 536 A.... "C:\Program Files\Microsoft Office Outlook Connector\MSOCPRC.DLL"
    9 Nov 2008 18:45:04 23 952 A.... "C:\Program Files\Microsoft Office Outlook Connector\OLCSTART.EXE"
    17 Dec 2008 2:54:20 1 247 600 A.... "C:\Program Files\Spyware Doctor\SDNetPlugin.dll"
    25 Dec 2008 22:14:56 104 498 ..SHR "C:\Program Files\Fichiers communs\System\run32dll.exe"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin5.dll"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin6.dll"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin7.dll"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll"
    14 Dec 2008 16:59:34 143 360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll"
    20 Nov 2008 13:20:44 536 872 A.... "C:\Program Files\iPod\bin\iPodService.exe"
    20 Nov 2008 13:20:54 105 472 A.... "C:\Program Files\iTunes\iTunes.Resources\iTunes.dll"
    20 Nov 2008 13:21:02 103 936 A.... "C:\Program Files\iTunes\iTunes.Resources\iTunesRegistry.dll"
    20 Nov 2008 13:20:56 42 496 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\iTunesHelper.dll"
    20 Nov 2008 13:20:56 129 536 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\iTunesMiniPlayer.dll"
    20 Nov 2008 13:20:36 69 632 A.... "C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll"
    13 Nov 2008 9:33:54 65 896 A.... "C:\Program Files\Microsoft\Office Live\npOLW.dll"
    13 Nov 2008 9:33:54 97 128 A.... "C:\Program Files\Microsoft\Office Live\OfficeLiveSignIn.exe"
    13 Nov 2008 9:34:06 203 112 A.... "C:\Program Files\Microsoft\Office Live\OLConnector.dll"
    13 Nov 2008 9:34:06 128 360 A.... "C:\Program Files\Microsoft\Office Live\OLConnectorResources.dll"
    7 Nov 2008 12:37:46 14 265 A.... "C:\Program Files\Softinterface, Inc\Convert PDF To Image\unins000.dat"
    7 Nov 2008 12:37:18 664 057 A.... "C:\Program Files\Softinterface, Inc\Convert PDF To Image\unins000.exe"
    4 Jan 2009 13:26:30 396 288 A.... "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe"
    2 Dec 2008 21:09:50 532 840 A.... "C:\Program Files\Windows Live\Contacts\abssm.dll"
    2 Dec 2008 21:09:50 59 752 A.... "C:\Program Files\Windows Live\Contacts\conproxy.dll"
    2 Dec 2008 21:09:50 129 384 A.... "C:\Program Files\Windows Live\Contacts\consync.dll"
    2 Dec 2008 21:09:52 647 016 A.... "C:\Program Files\Windows Live\Contacts\contact.dll"
    2 Dec 2008 21:09:52 581 480 A.... "C:\Program Files\Windows Live\Contacts\lmcdata.dll"
    2 Dec 2008 21:09:52 27 496 A.... "C:\Program Files\Windows Live\Contacts\wlcomm.exe"
    2 Dec 2008 21:09:50 32 616 A.... "C:\Program Files\Windows Live\Contacts\wldlog.dll"
    2 Dec 2008 23:33:54 720 216 A.... "C:\Program Files\Windows Live\Installer\wlarp.exe"
    2 Dec 2008 23:31:46 373 592 A.... "C:\Program Files\Windows Live\Installer\wloobe.exe"
    2 Dec 2008 21:53:38 206 168 A.... "C:\Program Files\Windows Live\Installer\wlsres.dll"
    2 Dec 2008 22:37:58 165 192 A.... "C:\Program Files\Windows Live\Mail\ABImport.dll"
    2 Dec 2008 22:37:48 109 384 A.... "C:\Program Files\Windows Live\Mail\actorbas.dll"
    2 Dec 2008 22:37:46 103 752 A.... "C:\Program Files\Windows Live\Mail\adorner.dll"
    2 Dec 2008 22:38:16 192 328 A.... "C:\Program Files\Windows Live\Mail\aimg.dll"
    2 Dec 2008 22:38:10 176 456 A.... "C:\Program Files\Windows Live\Mail\alayout.dll"
    2 Dec 2008 22:37:42 89 416 A.... "C:\Program Files\Windows Live\Mail\canproxy.dll"
    2 Dec 2008 22:38:22 321 864 A.... "C:\Program Files\Windows Live\Mail\canvas.dll"
    2 Dec 2008 22:37:48 107 848 A.... "C:\Program Files\Windows Live\Mail\cnvsshrd.dll"
    2 Dec 2008 22:37:42 93 512 A.... "C:\Program Files\Windows Live\Mail\dgeneral.dll"
    2 Dec 2008 22:38:10 187 720 A.... "C:\Program Files\Windows Live\Mail\mailacct.dll"
    2 Dec 2008 22:38:50 791 368 A.... "C:\Program Files\Windows Live\Mail\mailcomm.dll"
    2 Dec 2008 22:37:44 102 728 A.... "C:\Program Files\Windows Live\Mail\mailimp.dll"
    2 Dec 2008 22:41:54 2 202 440 A.... "C:\Program Files\Windows Live\Mail\maillang.dll"
    2 Dec 2008 22:39:14 11 716 424 A.... "C:\Program Files\Windows Live\Mail\mailres2.dll"
    2 Dec 2008 22:37:54 131 912 A.... "C:\Program Files\Windows Live\Mail\mailrt2.dll"
    2 Dec 2008 22:38:56 2 744 648 A.... "C:\Program Files\Windows Live\Mail\msmail.dll"
    2 Dec 2008 22:37:16 18 760 A.... "C:\Program Files\Windows Live\Mail\piBase.dll"
    2 Dec 2008 22:37:50 121 160 A.... "C:\Program Files\Windows Live\Mail\piOrg.dll"
    2 Dec 2008 22:37:42 71 496 A.... "C:\Program Files\Windows Live\Mail\smapi.dll"
    20 Nov 2008 22:17:58 144 416 A.... "C:\Program Files\Windows Live\Mail\sqmapi.dll"
    2 Dec 2008 22:37:54 131 400 A.... "C:\Program Files\Windows Live\Mail\ucspell.dll"
    2 Dec 2008 22:37:46 104 264 A.... "C:\Program Files\Windows Live\Mail\uxcalendar.dll"
    2 Dec 2008 22:38:48 541 512 A.... "C:\Program Files\Windows Live\Mail\uxcontacts.dll"
    2 Dec 2008 22:38:54 2 392 392 A.... "C:\Program Files\Windows Live\Mail\uxcore.dll"
    2 Dec 2008 22:41:18 302 920 A.... "C:\Program Files\Windows Live\Mail\wab32res.dll"
    2 Dec 2008 22:38:20 315 720 A.... "C:\Program Files\Windows Live\Mail\wabapi.dll"
    2 Dec 2008 22:38:08 169 800 A.... "C:\Program Files\Windows Live\Mail\wcics.dll"
    2 Dec 2008 22:38:10 175 944 A.... "C:\Program Files\Windows Live\Mail\wcstore.dll"
    2 Dec 2008 22:37:24 22 856 A.... "C:\Program Files\Windows Live\Mail\wcstoreproxy.dll"
    2 Dec 2008 22:38:10 169 800 A.... "C:\Program Files\Windows Live\Mail\wcsync.dll"
    2 Dec 2008 22:37:42 49 992 A.... "C:\Program Files\Windows Live\Mail\wldcore.dll"
    2 Dec 2008 22:37:22 32 584 A.... "C:\Program Files\Windows Live\Mail\wldlog.dll"
    2 Dec 2008 22:41:16 115 016 A.... "C:\Program Files\Windows Live\Mail\wlmail.exe"
    20 Nov 2008 22:16:10 3 611 448 A.... "C:\Program Files\Windows Live\Mail\wlmfilter.dat"
    20 Nov 2008 22:16:10 454 048 A.... "C:\Program Files\Windows Live\Mail\wlmfilter.dll"
    2 Dec 2008 22:38:18 225 608 A.... "C:\Program Files\Windows Live\Messenger\liveNatTrav.dll"
    2 Dec 2008 22:38:48 554 824 A.... "C:\Program Files\Windows Live\Messenger\livetransport.dll"
    2 Dec 2008 22:37:44 62 280 A.... "C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll"
    2 Dec 2008 22:38:16 223 048 A.... "C:\Program Files\Windows Live\Messenger\msgsc.14.0.8050.1202.dll"
    2 Dec 2008 22:41:26 368 456 A.... "C:\Program Files\Windows Live\Messenger\msgslang.14.0.8050.1202.dll"
    2 Dec 2008 22:39:00 11 410 760 A.... "C:\Program Files\Windows Live\Messenger\msgsres.dll"
    2 Dec 2008 22:38:50 442 184 A.... "C:\Program Files\Windows Live\Messenger\msgswcam.dll"
    2 Dec 2008 22:41:56 3 882 312 A.... "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"
    14 Nov 2008 16:07:40 442 760 A.... "C:\Program Files\Windows Live\Messenger\msvs.exe"
    11 Nov 2008 15:06:44 51 624 A.... "C:\Program Files\Windows Live\Messenger\msvsui.dll"
    2 Dec 2008 22:38:48 424 776 A.... "C:\Program Files\Windows Live\Messenger\PresenceIM.dll"
    2 Dec 2008 22:37:40 56 136 A.... "C:\Program Files\Windows Live\Messenger\psmsong.14.0.8050.1202.dll"
    24 Nov 2008 22:28:06 6 153 552 A.... "C:\Program Files\Windows Live\Messenger\rtmpltfm.dll"
    20 Nov 2008 22:17:58 144 416 A.... "C:\Program Files\Windows Live\Messenger\sqmapi.dll"
    24 Nov 2008 22:28:06 4 752 200 A.... "C:\Program Files\Windows Live\Messenger\uccapi.dll"
    20 Nov 2008 22:17:02 639 824 A.... "C:\Program Files\Windows Live\Messenger\uccapires.dll"
    2 Dec 2008 22:37:46 104 264 A.... "C:\Program Files\Windows Live\Messenger\uxcalendar.dll"
    2 Dec 2008 22:38:48 541 512 A.... "C:\Program Files\Windows Live\Messenger\uxcontacts.dll"
    2 Dec 2008 22:38:54 2 392 392 A.... "C:\Program Files\Windows Live\Messenger\uxcore.dll"
    2 Dec 2008 22:38:48 439 624 A.... "C:\Program Files\Windows Live\Messenger\vvpltfrm.dll"
    2 Dec 2008 21:44:36 73 040 A.... "C:\Program Files\Windows Live\Messenger\wlchtc.dll"
    2 Dec 2008 21:44:52 582 992 A.... "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"
    2 Dec 2008 21:44:34 62 288 A.... "C:\Program Files\Windows Live\Messenger\wlcstart.exe"
    2 Dec 2008 21:44:52 876 880 A.... "C:\Program Files\Windows Live\Messenger\wlcui.dll"
    2 Dec 2008 21:44:42 76 112 A.... "C:\Program Files\Windows Live\Messenger\wlcuires.dll"
    2 Dec 2008 22:37:42 49 992 A.... "C:\Program Files\Windows Live\Messenger\wldcore.dll"
    2 Dec 2008 22:37:22 32 584 A.... "C:\Program Files\Windows Live\Messenger\wldlog.dll"
    20 Nov 2008 22:14:36 598 856 A.... "C:\Program Files\Windows Live\Messenger\wmaecdmort.dll"
    20 Nov 2008 22:14:36 1 565 480 A.... "C:\Program Files\Windows Live\Messenger\wmv9vcm.dll"
    4 Dec 2008 22:49:00 216 424 A.... "C:\Program Files\Windows Live\Photo Gallery\ImagingDevice.dll"
    4 Dec 2008 22:49:02 427 880 A.... "C:\Program Files\Windows Live\Photo Gallery\ImagingServices.dll"
    4 Dec 2008 22:48:52 128 872 A.... "C:\Program Files\Windows Live\Photo Gallery\MetadataSys.dll"
    4 Dec 2008 22:56:32 12 648 A.... "C:\Program Files\Windows Live\Photo Gallery\Microsoft.WindowsLive.PublishPlugins.dll"
    4 Dec 2008 22:49:04 2 149 224 A.... "C:\Program Files\Windows Live\Photo Gallery\MicrosoftEffects.dll"
    4 Dec 2008 22:48:52 14 696 A.... "C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll"
    4 Dec 2008 22:48:52 43 880 A.... "C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll"
    4 Dec 2008 22:56:32 98 664 A.... "C:\Program Files\Windows Live\Photo Gallery\PublishPluginsInterop.dll"
    5 Dec 2008 0:11:16 10 600 A.... "C:\Program Files\Windows Live\Photo Gallery\RegRes.dll"
    4 Dec 2008 22:48:52 141 160 A.... "C:\Program Files\Windows Live\Photo Gallery\sqmapi.dll"
    4 Dec 2008 22:48:52 104 296 A.... "C:\Program Files\Windows Live\Photo Gallery\UXCalendar.dll"
    4 Dec 2008 22:49:04 541 544 A.... "C:\Program Files\Windows Live\Photo Gallery\UXContacts.dll"
    4 Dec 2008 22:49:06 2 392 424 A.... "C:\Program Files\Windows Live\Photo Gallery\UXCore.dll"
    4 Dec 2008 22:49:04 621 416 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoLibraryDatabase.dll"
    5 Dec 2008 0:11:16 89 960 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoLibraryDuiResourcesLocalized.dll"
    4 Dec 2008 22:48:48 71 528 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoSqm.dll"
    4 Dec 2008 22:49:04 2 184 552 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoLibraryMain.dll"
    4 Dec 2008 22:49:06 9 254 760 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoLibraryDuiResources.dll"
    5 Dec 2008 0:11:16 1 812 328 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoLibraryResources.dll"
    4 Dec 2008 22:49:04 1 260 904 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoViewer.dll"
    4 Dec 2008 22:48:52 50 024 A.... "C:\Program Files\Windows Live\Photo Gallery\WLDCore.dll"
    4 Dec 2008 22:49:04 1 247 592 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoVoyager.dll"
    5 Dec 2008 0:11:16 549 224 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXAlbumDownloadWizard.exe"
    5 Dec 2008 0:11:16 281 960 A.... "C:\Program Files\Windows Live\Photo Gallery\wlxclip.dll"
    4 Dec 2008 22:48:56 191 336 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXDSPA.dll"
    4 Dec 2008 22:48:52 127 336 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXGrinderScheduler.dll"
    4 Dec 2008 22:48:52 79 208 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXImageTranscode.dll"
    5 Dec 2008 0:11:16 1 103 208 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXMediaPublishSubscribe.dll"
    5 Dec 2008 0:11:16 1 825 640 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcq.dll"
    4 Dec 2008 22:49:00 231 272 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe"
    4 Dec 2008 22:48:52 19 816 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoBase.dll"
    5 Dec 2008 0:11:16 139 112 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe"
    4 Dec 2008 22:48:52 83 304 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoCinematic.dll"
    4 Dec 2008 22:48:52 16 744 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGalleryRepair.exe"
    4 Dec 2008 22:48:52 80 232 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPhotoClassic.dll"
    4 Dec 2008 22:49:04 750 952 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPipeline.dll"
    4 Dec 2008 22:49:04 732 008 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXPipetran.dll"
    4 Dec 2008 22:48:52 18 280 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXQuickTimeControlHostPS.dll"
    4 Dec 2008 22:48:52 117 096 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXQuickTimeControlHost.exe"
    4 Dec 2008 22:48:52 51 048 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXQuickTimeShellExt.dll"
    5 Dec 2008 0:11:16 71 016 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXSendMail.dll"
    5 Dec 2008 0:11:16 508 776 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXSlideshow.dll"
    4 Dec 2008 22:48:52 81 768 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXThumbCache.dll"
    4 Dec 2008 22:48:50 142 184 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXVAFilt.dll"
    4 Dec 2008 22:49:02 521 064 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXVideoTrim.dll"
    5 Dec 2008 0:11:16 764 264 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXVideoAcquireWizard.exe"
    4 Dec 2008 22:48:52 69 480 A.... "C:\Program Files\Windows Live\Photo Gallery\WLXVideoCameraAutoPlayManager.exe"
    1 Dec 2008 12:54:44 144 416 A.... "C:\Program Files\Windows Live\Sync\sqmapi.dll"
    2 Dec 2008 21:53:08 463 184 A.... "C:\Program Files\Windows Live\Sync\WindowsLiveSync.Resource.dll"
    2 Dec 2008 21:53:08 1 170 256 A.... "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"
    7 Nov 2008 8:15:58 144 416 A.... "C:\Program Files\Windows Live\Writer\sqmapi.dll"
    2 Dec 2008 21:54:26 97 112 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Client.dll"
    2 Dec 2008 21:54:24 953 176 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.CoreServices.dll"
    2 Dec 2008 21:54:26 64 344 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.FileDestinations.dll"
    2 Dec 2008 21:54:24 68 440 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.HtmlParser.dll"
    2 Dec 2008 21:53:34 346 968 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Localization.dll"
    2 Dec 2008 21:53:16 244 568 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.HtmlEditor.dll"
    2 Dec 2008 21:54:16 404 312 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Controls.dll"
    2 Dec 2008 21:50:16 129 880 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Interop.dll"
    2 Dec 2008 21:54:28 56 152 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Passport.dll"
    2 Dec 2008 21:50:18 166 744 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Interop.Mshtml.dll"
    2 Dec 2008 21:53:34 351 064 A.... "C:\Program Files\Windows Live\Writer\WindowsLiveLocal.WriterPlugin.dll"
    2 Dec 2008 21:50:18 113 496 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Mshtml.dll"
    2 Dec 2008 21:54:24 43 864 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Instrumentation.dll"
    2 Dec 2008 22:27:36 141 144 A.... "C:\Program Files\Windows Live\Writer\WindowsLiveWriter.Application.dll"
    2 Dec 2008 21:50:18 133 976 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Interop.SHDocVw.dll"
    2 Dec 2008 22:27:10 127 320 A.... "C:\Program Files\Windows Live\Writer\WindowsLiveWriter.Filter.dll"
    2 Dec 2008 21:54:28 56 152 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Extensibility.dll"
    2 Dec 2008 21:50:16 129 880 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.SpellChecker.dll"
    2 Dec 2008 21:54:26 3 140 440 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.PostEditor.dll"
    2 Dec 2008 21:54:28 52 056 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.Api.dll"
    2 Dec 2008 21:54:26 101 208 A.... "C:\Program Files\Windows Live\Writer\WindowsLiveWriter.exe"
    2 Dec 2008 21:54:24 588 632 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.ApplicationFramework.dll"
    2 Dec 2008 21:53:34 334 680 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.BlogClient.dll"
    2 Dec 2008 21:54:26 72 536 A.... "C:\Program Files\Windows Live\Writer\WindowsLive.Writer.BrowserControl.dll"
    2 Dec 2008 22:27:10 31 064 A.... "C:\Program Files\Windows Live\Writer\wlsqm.dll"
    2 Dec 2008 22:27:36 187 224 A.... "C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll"
    9 Nov 2008 19:20:18 82 808 A.... "C:\Program Files\Fichiers communs\Adobe\Updater5\AdobeUpdaterInstallMgr.exe"
    9 Nov 2008 19:21:14 2 356 088 A.... "C:\Program Files\Fichiers communs\Adobe\Updater5\AdobeUpdater.exe"
    20 Nov 2008 13:18:54 16 855 040 A.... "C:\Program Files\Fichiers communs\Apple\CoreFP\CoreFP.dll"
    18 Nov 2008 13:33:20 237 968 A.... "C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\HWDeviceLogin.dll"
    18 Nov 2008 13:33:20 96 144 A.... "C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\LogicalDevice.dll"
    18 Nov 2008 13:33:22 1 142 672 A.... "C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\msidcrl40.dll"
    18 Nov 2008 13:47:06 408 952 A.... "C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll"
    18 Nov 2008 13:55:24 118 672 A.... "C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe"
    2 Jan 2009 13:07:42 15 102 A.... "C:\Program Files\Fichiers communs\Windows Live\.cache\wlc7.tmp"
    20 Nov 2008 13:20:44 42 496 A.... "C:\Program Files\iPod\bin\iPodService.Resources\iPodService.dll"
    20 Nov 2008 13:21:00 112 128 A.... "C:\Program Files\iTunes\iTunes.Resources\da.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:00 120 320 A.... "C:\Program Files\iTunes\iTunes.Resources\de.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:20:54 110 592 A.... "C:\Program Files\iTunes\iTunes.Resources\en.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 117 248 A.... "C:\Program Files\iTunes\iTunes.Resources\es.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 111 616 A.... "C:\Program Files\iTunes\iTunes.Resources\fi.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 117 248 A.... "C:\Program Files\iTunes\iTunes.Resources\fr.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 115 200 A.... "C:\Program Files\iTunes\iTunes.Resources\it.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 110 592 A.... "C:\Program Files\iTunes\iTunes.Resources\ja.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 110 592 A.... "C:\Program Files\iTunes\iTunes.Resources\ko.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 112 640 A.... "C:\Program Files\iTunes\iTunes.Resources\nb.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 115 712 A.... "C:\Program Files\iTunes\iTunes.Resources\nl.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:02 113 152 A.... "C:\Program Files\iTunes\iTunes.Resources\pl.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:04 115 712 A.... "C:\Program Files\iTunes\iTunes.Resources\pt.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:04 117 248 A.... "C:\Program Files\iTunes\iTunes.Resources\pt_PT.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:04 114 176 A.... "C:\Program Files\iTunes\iTunes.Resources\ru.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:04 111 616 A.... "C:\Program Files\iTunes\iTunes.Resources\sv.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:06 110 592 A.... "C:\Program Files\iTunes\iTunes.Resources\zh_CN.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:08 110 592 A.... "C:\Program Files\iTunes\iTunes.Resources\zh_TW.lproj\iTunesLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\da.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\de.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:20:56 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\en.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\es.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\fi.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\fr.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\it.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\ja.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\ko.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\nb.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\nl.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\pl.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\pt.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\pt_PT.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\ru.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\sv.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\zh_CN.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 520 A.... "C:\Program Files\iTunes\iTunesHelper.Resources\zh_TW.lproj\iTunesHelperLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\da.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\de.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:20:56 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\en.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\es.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\fi.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\fr.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\it.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\ja.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\ko.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\nb.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\nl.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\pl.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\pt.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\pt_PT.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\ru.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\sv.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\zh_CN.lproj\iTunesMiniPlayerLocalized.dll"
    20 Nov 2008 13:21:08 43 008 A.... "C:\Program Files\iTunes\iTunesMiniPlayer.Resources\zh_TW.lproj\iTunesMiniPlayerLocalized.dll"
    4 Dec 2008 16:03:00 226 640 A.... "C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
    4 Dec 2008 16:03:00 166 752 A.... "C:\Program Files\Microsoft\Search Enhancement Pack\Search Box Extension\SRCHBXEX.DLL"
    4 Dec 2008 15:59:06 92 504 A.... "C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll"
    4 Dec 2008 16:03:00 142 160 A.... "C:\Program Files\Microsoft\Search Enhancement Pack\SeaShadow\SEASHADO.DLL"
    4 Jan 2009 11:31:56 15 462 A.... "C:\Program Files\Real\RealArcade\Html\quicklaunch_plus_myql.htm"
    16 Dec 2008 19:37:48 33 523 A.... "C:\Program Files\Real\RealArcade\Html\quicklaunch_plus_MyAccount.htm"
    24 Dec 2008 20:48:04 4 107 A.... "C:\Program Files\Real\RealArcade\Html\quicklaunch_plus_addgames.htm"
    4 Jan 2009 11:17:04 2 764 A.... "C:\Program Files\Real\RealArcade\Html\waittemp.htm"
    4 Nov 2008 23:24:20 2 617 998 A.... "C:\Program Files\Vuze\plugins\azemp\azemp_2.0.28.zip"
    3 Dec 2008 0:09:32 2 619 426 A.... "C:\Program Files\Vuze\plugins\azemp\azemp_2.0.32.zip"
    3 Dec 2008 0:09:32 5 472 734 A.... "C:\Program Files\Vuze\plugins\azemp\azmplay.exe"
    20 Nov 2008 22:16:08 277 A.... "C:\Program Files\Windows Live\Mail\Stationery\ArtDeco.htm"
    20 Nov 2008 22:16:08 562 A.... "C:\Program Files\Windows Live\Mail\Stationery\Bamboo.htm"
    20 Nov 2008 22:16:08 281 A.... "C:\Program Files\Windows Live\Mail\Stationery\BlueTiles.htm"
    20 Nov 2008 22:16:08 278 A.... "C:\Program Files\Windows Live\Mail\Stationery\Bubbles.htm"
    20 Nov 2008 22:16:08 277 A.... "C:\Program Files\Windows Live\Mail\Stationery\Cheddar.htm"
    20 Nov 2008 22:16:08 284 A.... "C:\Program Files\Windows Live\Mail\Stationery\ColorStripe.htm"
    20 Nov 2008 22:16:08 280 A.... "C:\Program Files\Windows Live\Mail\Stationery\Dinosaur.htm"
    20 Nov 2008 22:16:08 560 A.... "C:\Program Files\Windows Live\Mail\Stationery\Drawing.htm"
    20 Nov 2008 22:16:08 277 A.... "C:\Program Files\Windows Live\Mail\Stationery\Garden.htm"
    20 Nov 2008 22:16:08 284 A.... "C:\Program Files\Windows Live\Mail\Stationery\HandPrints.htm"
    20 Nov 2008 22:16:08 273 A.... "C:\Program Files\Windows Live\Mail\Stationery\LED.htm"
    20 Nov 2008 22:16:08 276 A.... "C:\Program Files\Windows Live\Mail\Stationery\Money.htm"
    20 Nov 2008 22:16:08 278 A.... "C:\Program Files\Windows Live\Mail\Stationery\Mosaic1.htm"
    20 Nov 2008 22:16:08 277 A.... "C:\Program Files\Windows Live\Mail\Stationery\Mosaic2.htm"
    20 Nov 2008 22:16:08 273 A.... "C:\Program Files\Windows Live\Mail\Stationery\Music.htm"
    20 Nov 2008 22:16:08 280 A.... "C:\Program Files\Windows Live\Mail\Stationery\Snowboard.htm"
    20 Nov 2008 22:16:08 282 A.... "C:\Program Files\Windows Live\Mail\Stationery\Southwest.htm"
    20 Nov 2008 22:16:08 283 A.... "C:\Program Files\Windows Live\Mail\Stationery\YellowTiles.htm"
    7 Nov 2008 8:11:46 551 232 A.... "C:\Program Files\Windows Live\Writer\Dictionaries\mssp3fr.dll"
    14 Nov 2008 23:45:08 625 528 A.... "C:\Program Files\Windows Live\Writer\Dictionaries\mssp7en.dll"
    2 Dec 2008 21:51:58 203 608 A.... "C:\Program Files\Windows Live\Writer\fr\WindowsLive.Writer.Localization.resources.dll"
    7 Nov 2008 8:12:04 4 337 A.... "C:\Program Files\Windows Live\Writer\html\map-preview.html"
    7 Nov 2008 8:12:04 12 014 A.... "C:\Program Files\Windows Live\Writer\html\map.html"
    7 Nov 2008 8:11:30 404 A.... "C:\Program Files\Windows Live\Writer\template\default.htm"
    7 Nov 2008 14:28:12 275 912 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileBackup.exe"
    7 Nov 2008 14:28:18 153 984 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceHelper.exe"
    7 Nov 2008 14:28:20 267 400 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileSync.exe"
    7 Nov 2008 14:28:16 132 424 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"
    7 Nov 2008 14:28:26 65 480 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncUIHandler.exe"
    7 Nov 2008 14:27:06 798 720 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\CFNetwork.dll"
    7 Nov 2008 14:23:36 1 194 248 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\CoreFoundation.dll"
    7 Nov 2008 14:28:28 46 056 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\defaults.exe"
    7 Nov 2008 14:23:38 135 544 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\DeviceLink.dll"
    7 Nov 2008 14:28:30 15 376 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\distnoted.exe"
    7 Nov 2008 14:28:32 19 064 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\EventFixer.exe"
    7 Nov 2008 14:23:40 2 800 850 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\Foundation.dll"
    7 Nov 2008 14:28:32 51 216 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\gconsync.exe"
    7 Nov 2008 14:23:40 656 801 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\GoogleContactSync.dll"
    7 Nov 2008 14:27:12 7 348 094 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\icudt36.dll"
    7 Nov 2008 14:27:12 863 707 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\icuin36.dll"
    7 Nov 2008 14:27:12 985 379 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\icuuc36.dll"
    7 Nov 2008 14:28:34 133 480 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\IESyncClient.exe"
    7 Nov 2008 14:24:08 1 011 634 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\ISSupport.dll"
    7 Nov 2008 14:24:14 1 200 128 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\iTunesMobileDevice.dll"
    7 Nov 2008 14:27:32 1 105 920 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\libeay32.dll"
    7 Nov 2008 14:27:30 645 738 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\libobjc.i386.A.dll"
    7 Nov 2008 14:27:26 1 029 774 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\libxml2.dll"
    7 Nov 2008 14:27:28 151 040 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\libxslt.dll"
    7 Nov 2008 14:30:24 236 920 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\MDCrashReportTool.exe"
    7 Nov 2008 14:24:12 319 922 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\MobileDevice.dll"
    7 Nov 2008 14:24:20 743 038 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\OutlookSyncClientHelper.dll"
    7 Nov 2008 14:30:30 95 560 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\OutlookSyncClient.exe"
    7 Nov 2008 14:24:16 110 592 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\OutlookChangeNotifierAddIn.dll"
    7 Nov 2008 14:30:32 109 496 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SafariSyncClient.exe"
    7 Nov 2008 14:27:36 400 896 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\sqlite3.dll"
    7 Nov 2008 14:27:32 262 144 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\ssleay32.dll"
    7 Nov 2008 14:30:34 28 472 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncDiagnostics.exe"
    7 Nov 2008 14:30:38 24 488 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\syncli.exe"
    7 Nov 2008 14:30:34 26 104 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncPlanObserver.exe"
    7 Nov 2008 14:26:34 1 441 693 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncServices.dll"
    7 Nov 2008 14:30:36 518 120 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncServer.exe"
    7 Nov 2008 14:26:34 187 307 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncServicesUI.dll"
    7 Nov 2008 14:27:18 34 141 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncUIHandler.dll"
    7 Nov 2008 14:27:16 233 472 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\SyncUICore.dll"
    7 Nov 2008 14:30:40 1 097 528 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\upgradedb.exe"
    7 Nov 2008 14:30:40 150 864 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\WindowsContactsSync.exe"
    7 Nov 2008 14:30:42 100 800 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\WindowsMailSync.exe"
    7 Nov 2008 14:30:48 1 866 752 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\YahooSync.exe"
    7 Nov 2008 14:27:08 18 267 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\YSFileShim.dll"
    7 Nov 2008 14:27:38 60 416 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\zlib1.dll"
    7 Nov 2008 14:23:30 32 000 A.... "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\Drivers\usbaapl.sys"
    9 Nov 2008 18:45:04 2 456 952 A.... "C:\Program Files\Fichiers communs\System\MAPI\1036\MSNCON32.dll"
    9 Nov 2008 18:45:04 2 456 952 A.... "C:\Program Files\Fichiers communs\System\MSMAPI\1036\MSNCON32.DLL"
    25 Nov 2008 21:29:00 4 865 408 A.... "C:\Program Files\Fichiers communs\Windows Live\.cache\add529ed1c966a9\Silverlight.2.0.exe"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\da.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\de.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:20:44 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\en.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\es.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\fi.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\fr.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\it.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\ja.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\ko.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\nb.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\nl.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Files\iPod\bin\iPodService.Resources\pl.lproj\iPodServiceLocalized.dll"
    20 Nov 2008 13:21:00 43 520 A.... "C:\Program Fi
    0
  15. jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 645
     
    ok si tuènavais mis un hijackthis comme demander après sdfix cela aurait été simpa mais pas grave on vera après la tu me passes malwarebytes en mode sans echec , tu poste le rappoert suivi ce coup la d'un nouveau hijackthis et vu l'heure on refait le point demain soir OK , merci

    tu passeras malwarebytes en mode sans echec car c'est comme cela qu'il est le plus efficasse , tu suis bien la procédure et fait bien attention de bien cliquer sur supprimer la sélection en fin de l'examem complet , et sois patient car il dure près de 2 heures des fois plus alors laisses le travailler et postes le rapport , Merci

    Télécharge Malwarebytes' Anti-Malware: https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

    . sur la page cliques sur Télécharger Malwarebyte's Anti-Malware
    . enregistres le sur le bureau
    . Double cliques sur le fichier téléchargé pour lancer le processus d'installation.
    . Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
    . si le pare-feu demande l'autorisation de se connecter pour malwarebytes, acceptes
    . Une fois la mise à jour terminée,fermes Malwarebytes
    . redemarres en mode sans échec pour savoir comment au cas ou tu ne saurrais pas regarde plus bas
    . une fois en mode sans echec tu double-cliques sur l'icône de malwarebytes
    . une fois ouvert rend-toi dans l'onglet, Recherche
    . Sélectionnes Exécuter un examen complet
    . Cliques sur Rechercher
    . Le scan démarre.
    . A la fin de l'analyse, un message s'affiche :
    L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
    . Cliques sur Ok pour poursuivre.
    . Si des malwares ont été détectés, cliques sur Afficher les résultats
    . Sélectionnes tout (ou laisses cochés)

    . cliques sur Supprimer la sélection

    . Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
    . Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
    . redemarre le pc
    . une fois redémarré en mode normal double-cliques sur malwarebytes
    . rends toi dans l'onglet rapport/log
    . tu cliques dessus pour l'afficher une fois affiché
    . tu cliques sur edition en haut du boc notes,et puis sur sélectionner tous
    . tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
    . tu cliques droit dans le cadre de la reponse et coller

    Si tu as besoin d'aide regarde ces tutoriels :
    https://forum.pcastuces.com/malwarebytes_antimalwares___tutoriel-f31s3.htm
    https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

    (attention : pas de connexion possible en mode sans échec , donc copies ou imprimes bien la manipe
    pour éviter les erreurs ...)

    pour redémarrer en mode sans échec : /!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\

    . Cliques sur Démarrer
    . Cliques sur Arrêter
    . Sélectionnes Redémarrer et au redémarrage
    . Appuis sur la touche F8 sans discontinuer "1 appuis seconde" dès qu'un écran de texte apparaît puis disparaît
    . Utilises les touches de direction pour sélectionner mode sans échec
    . puis appuis sur ENTRÉE des fois cela peut prendre plusieurs minute entre la validation et l'affichage
    . Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou une autre
    une fois démarré ne t'inquiette pas si les couleurs et les icônes ne sont pas comme d'abitude

    tuto:http://www.vista-xp.fr/forum/topic93.html
    0
    1. ginie
       
      Bonsoir Jacques,

      je mets en route la dernière procédure "à la lettre, d'ailleurs MERCI pour la clareté !
      et je poste le rapport.
      On voit ça demain soir si c possible pour vous

      Virginie
      0
  16. jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 645
     
    bonjour, ok pas de problème je serais la demain soir @+
    0
    1. ginie222
       
      Bonjour Jacques,

      j'ai effectué l'opération en 2 fois et voici les rapports.
      Bonne journée


      Malwarebytes' Anti-Malware 1.32
      Version de la base de données: 1619
      Windows 5.1.2600 Service Pack 3

      06/01/2009 08:01:23
      mbam-log-2009-01-06 (08-01-23).txt

      Type de recherche: Examen complet (C:\|D:\|)
      Eléments examinés: 18224
      Temps écoulé: 2 minute(s), 24 second(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 2
      Clé(s) du Registre infectée(s): 7
      Valeur(s) du Registre infectée(s): 7
      Elément(s) de données du Registre infecté(s): 5
      Dossier(s) infecté(s): 0
      Fichier(s) infecté(s): 32

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      C:\WINDOWS\system32\juborafe.dll (Trojan.Vundo.H) -> Delete on reboot.
      c:\WINDOWS\system32\vahojezi.dll (Trojan.Vundo.H) -> Delete on reboot.

      Clé(s) du Registre infectée(s):
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2f605cdc-54cc-4f94-9f05-cda08da12942} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\CLSID\{2f605cdc-54cc-4f94-9f05-cda08da12942} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\CLSID\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{09f1adac-76d8-4d0f-99a5-5c907dadb988} (Rogue.Multiple) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6fd31ed6-7c94-4bbc-8e95-f927f4d3a949} (Adware.180Solutions) -> Quarantined and deleted successfully.

      Valeur(s) du Registre infectée(s):
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sodokimipu (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cpm5796bdc3 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ssodl (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{07aa283a-43d7-4cbe-a064-32a21112d94d} (Adware.Zango) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.Shopping.Report) -> Quarantined and deleted successfully.

      Elément(s) de données du Registre infecté(s):
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: c:\windows\system32\juborafe.dll -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\juborafe.dll -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: system32\juborafe.dll -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: c:\windows\system32\vahojezi.dll -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: system32\vahojezi.dll -> Quarantined and deleted successfully.

      Dossier(s) infecté(s):
      (Aucun élément nuisible détecté)

      Fichier(s) infecté(s):
      C:\WINDOWS\system32\bedamifu.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\ufimadeb.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\dewuzeko.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\okezuwed.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\fwsdseds.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\sdesdswf.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\hagebuzi.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\izubegah.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\hobolaku.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\ukaloboh.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\kekiyala.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\alayikek.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\misahavu.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\uvahasim.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\modxhbee.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\eebhxdom.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\relereni.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\inereler.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\romemazu.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\uzamemor.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\tipukuvu.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\uvukupit.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\webogori.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\irogobew.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\wovawuye.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\eyuwavow.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\zomotesa.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\asetomoz.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\tevaziva.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      c:\WINDOWS\system32\vahojezi.dll (Trojan.Vundo.H) -> Delete on reboot.
      C:\WINDOWS\system32\juborafe.dll (Trojan.Vundo.H) -> Delete on reboot.
      C:\reps.exe (Backdoor.Bot) -> Quarantined and deleted successfully.

      --------------------------------------------------------------------------------------

      Malwarebytes' Anti-Malware 1.32
      Version de la base de données: 1625
      Windows 5.1.2600 Service Pack 3

      07/01/2009 08:31:15
      mbam-log-2009-01-07 (08-31-15).txt

      Type de recherche: Examen complet (C:\|D:\|)
      Eléments examinés: 169955
      Temps écoulé: 3 hour(s), 21 minute(s), 37 second(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 0
      Clé(s) du Registre infectée(s): 9
      Valeur(s) du Registre infectée(s): 2
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 0
      Fichier(s) infecté(s): 74

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Clé(s) du Registre infectée(s):
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\instkey (Trojan.Vundo) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Information Center (Trojan.Zlob) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\multimediaControls.chl (Trojan.Zlob) -> Quarantined and deleted successfully.

      Valeur(s) du Registre infectée(s):
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.securewebinfo.com (Trojan.Zlob) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.safetyincludes.com (Trojan.Zlob) -> Quarantined and deleted successfully.

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      (Aucun élément nuisible détecté)

      Fichier(s) infecté(s):
      C:\Documents and Settings\NINIE\Application Data\Adobe\Manager.exe (Trojan.Agent) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP516\A0103590.dll (Trojan.Agent) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP527\A0105921.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP528\A0107963.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP528\A0107964.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP528\A0107966.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP528\A0107967.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP530\A0109382.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP530\A0113402.exe (Rogue.Antivirus2009) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP532\A0113430.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP533\A0115462.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP533\A0115483.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP538\A0117036.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP538\A0117037.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP538\A0117038.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP538\A0117071.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP538\A0117105.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP538\A0117111.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP538\A0117113.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP538\A0117115.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP538\A0117117.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP538\A0117119.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP538\A0117121.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP538\A0117127.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP538\A0117129.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\System Volume Information\_restore{EB28BED7-E992-43BC-A71F-3A6065392E9A}\RP538\A0117134.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
      C:\WINDOWS\sysrest32.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\awtsSlih.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\byXRJApO.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\caoooi.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\cbXPfGxW.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\cbXRKApQ.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\efcCvVPJ.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\fcccaywt.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\fccYsrqR.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\fegenope.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\hgGyVPGV.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\hovebipu.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\iifebXrr.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\iifgEvTJ.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\ipfmyyca.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\jofaluju.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\kHAQggdE.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\lelizomo.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\lhfajllq.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\ljJCrOgD.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\mlJdBQKa.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\opnkkhfF.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\opnkllKA.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\pmnklMcD.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\pmnoPGvw.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\qoMeCvsq.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\rinapiza.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\rqRjHyyy.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\rqRLebXr.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\sebimike.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\silulawo.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\towozoha.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\tuvSljjG.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\tuvVOecY.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\tuvWnkhe.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\urqpqNDu.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\vtUlKCvt.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\vtUmNDWN.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\wvULBqqN.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\xxyaxXOi.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\yapipije.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\yaywWMdE.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\yihazuso.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\zagonibu.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\win.exe (Trojan.Agent) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\rawijeku.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\guyuzera.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
      C:\RECYCLER\run32dll.exe (Heuristics.Malware) -> Quarantined and deleted successfully.
      0
  17. jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 645
     
    bonjour, peux tu mettre un nouveau hijackthis pour contrôle , Merci
    0
    1. ginie222
       
      Alors docteur,

      il va mieux mon ordi ? lol

      @ +

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 18:33:31, on 07/01/2009
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16762)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
      C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\PMObserv.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\WINDOWS\eHome\ehRecvr.exe
      C:\WINDOWS\eHome\ehSched.exe
      C:\Program Files\Spyware Doctor\pctsTray.exe
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Microsoft ActiveSync\wcescomm.exe
      C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
      C:\Program Files\Spyware Doctor\pctsAuxs.exe
      C:\Program Files\Spyware Doctor\pctsSvc.exe
      C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
      C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
      C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
      C:\WINDOWS\ehome\mcrdsvc.exe
      C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\dllhost.exe
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fichiers communs\Adobe\Updater5\AdobeUpdater.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
      O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
      O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
      O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-19\..\Run: [sodokimipu] Rundll32.exe "C:\WINDOWS\system32\tevaziva.dll",s (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
      O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
      O8 - Extra context menu item: Ajouter un site de support RSS à VAIO Information FLOW - C:\Program Files\Sony\VAIO Information FLOW\aiesc.html
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Transfert par Image Converter 2 Plus - C:\Program Files\Sony\Image Converter 2\menu.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
      O14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.com/fr/
      O15 - Trusted Zone: *.sony-europe.com
      O15 - Trusted Zone: *.sonystyle-europe.com
      O15 - Trusted Zone: *.vaio-link.com
      O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
      O16 - DPF: {084DAC27-6FA3-4F55-9005-033F2F102F5C} (ITPPDiagIE Class) - http://data.jeuxclassiques.com/npwwg.cab
      O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
      O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
      O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://copainsdavant.linternaute.com/...
      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
      O16 - DPF: {74E4A24D-5224-4F05-8A41-99445E0FC22B} (GameHouse Games Player) - http://www.gamehouse.com/realarcade-webgames/gamehouse/gamehouseplayer.cab
      O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://theonils.spaces.live.com/PhotoUpload/MsnPUpld.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
      O16 - DPF: {FFFDF6F2-F7BC-4B90-B789-CB7BBDA13AD6} (CLaunchPrint Object) - http://photosmart.hpphoto.com/Download/HPeServicesLocalPrint.CAB
      O20 - AppInit_DLLs: karina.dat kukqya.dll cdrgiq.dll
      O20 - Winlogon Notify: ddcCUlJy - ddcCUlJy.dll (file missing)
      O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
      O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 2\IcVzMon.exe
      O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
      O23 - Service: PMObserv - RICOH CO.,LTD. - C:\WINDOWS\system32\PMObserv.exe
      O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
      O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
      O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
      O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
      O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe
      O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
      O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
      O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
      O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
      O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
      O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
      O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
      O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
      O23 - Service: VAIO Cooporated Initialisation (VCI) - Sony Corporation - C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe
      O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
      O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
      O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
      0
  18. jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 645
     
    ginie 222 bonjour , fais comme demande totobetourne, tu suis ce qui est expliqué pas besion de mode sans echec
    0
    1. ginie222
       
      Oh bonsoir Jacques,

      Ok, je fais ça et je poste le rapport

      Merci et @ +
      0
    2. ginie222
       
      -----------\\ ToolBar S&D 1.2.8 XP/Vista

      Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
      X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 CPU T5500 @ 1.66GHz )
      BIOS : Phoenix NoteBIOS 4.0 Release 6.1
      USER : NINIE ( Administrator )
      BOOT : Normal boot
      Antivirus : avast! antivirus 4.8.1296 [VPS 090107-0] 4.8.1296 (Activated)
      Firewall : Norton Internet Worm Protection 2006 (Not Activated)
      C:\ (Local Disk) - NTFS - Total:55 Go (Free:20 Go)
      D:\ (Local Disk) - NTFS - Total:47 Go (Free:47 Go)
      E:\ (USB)
      F:\ (CD or DVD)

      "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
      Option : [2] ( 07/01/2009|22:05 )

      -----------\\ SUPPRESSION

      Supprime! - C:\Program Files\AskSBar\bar
      Supprime! - C:\Program Files\AskSBar

      -----------\\ Recherche de Fichiers / Dossiers ...


      -----------\\ [..\Internet Explorer\Main]

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
      "Start Page"="https://www.google.fr/?gws_rd=ssl"
      "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
      "Search Page"="https://www.google.com/?gws_rd=ssl"
      "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
      "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
      "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
      "Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"
      "Search Page"="https://www.google.com/?gws_rd=ssl"
      "Start Page"="https://www.msn.com/fr-fr/"


      --------------------\\ Recherche d'autres infections

      C:\WINDOWS\system32\TBabIRqr.ini
      C:\WINDOWS\system32\TBabIRqr.ini2
      [b]==> VUNDO <==/b




      1 - "C:\ToolBar SD\TB_1.txt" - 07/01/2009|22:08 - Option : [2]

      -----------\\ Fin du rapport a 22:08:06,82
      0
  19. jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 645
     
    tu peux remettre un nouveau hijackthis, merci
    0
    1. ginie222
       
      le voilà !

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 22:20:00, on 07/01/2009
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16762)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
      C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\PMObserv.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\WINDOWS\eHome\ehRecvr.exe
      C:\WINDOWS\eHome\ehSched.exe
      C:\Program Files\Spyware Doctor\pctsTray.exe
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Microsoft ActiveSync\wcescomm.exe
      C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
      C:\Program Files\Spyware Doctor\pctsAuxs.exe
      C:\Program Files\Spyware Doctor\pctsSvc.exe
      C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
      C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
      C:\WINDOWS\ehome\mcrdsvc.exe
      C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
      C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\dllhost.exe
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - Default URLSearchHook is missing
      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
      O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
      O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-19\..\Run: [sodokimipu] Rundll32.exe "C:\WINDOWS\system32\tevaziva.dll",s (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
      O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
      O8 - Extra context menu item: Ajouter un site de support RSS à VAIO Information FLOW - C:\Program Files\Sony\VAIO Information FLOW\aiesc.html
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Transfert par Image Converter 2 Plus - C:\Program Files\Sony\Image Converter 2\menu.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
      O14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.com/fr/
      O15 - Trusted Zone: *.sony-europe.com
      O15 - Trusted Zone: *.sonystyle-europe.com
      O15 - Trusted Zone: *.vaio-link.com
      O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
      O16 - DPF: {084DAC27-6FA3-4F55-9005-033F2F102F5C} (ITPPDiagIE Class) - http://data.jeuxclassiques.com/npwwg.cab
      O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
      O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
      O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://copainsdavant.linternaute.com/...
      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
      O16 - DPF: {74E4A24D-5224-4F05-8A41-99445E0FC22B} (GameHouse Games Player) - http://www.gamehouse.com/realarcade-webgames/gamehouse/gamehouseplayer.cab
      O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://theonils.spaces.live.com/PhotoUpload/MsnPUpld.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
      O16 - DPF: {FFFDF6F2-F7BC-4B90-B789-CB7BBDA13AD6} (CLaunchPrint Object) - http://photosmart.hpphoto.com/Download/HPeServicesLocalPrint.CAB
      O20 - AppInit_DLLs: karina.dat kukqya.dll cdrgiq.dll
      O20 - Winlogon Notify: ddcCUlJy - ddcCUlJy.dll (file missing)
      O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
      O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 2\IcVzMon.exe
      O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
      O23 - Service: PMObserv - RICOH CO.,LTD. - C:\WINDOWS\system32\PMObserv.exe
      O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
      O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
      O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
      O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
      O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe
      O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
      O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
      O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
      O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
      O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
      O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
      O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
      O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
      O23 - Service: VAIO Cooporated Initialisation (VCI) - Sony Corporation - C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe
      O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
      O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
      O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
      0
  20. jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 645
     
    ok normalement pour moi c'est bon on vas finir le nettoyage tu fais les 7 choses qui suivent dans l'ordre, Merci et tu viens me revoir pour que l'on fasse le point sur tes protections @+

    1) Tu relances hijackthis comme expliqué pour Fixer les lignes

    .Tu fermes tout les programmes ouverts y compris le navigateur. sauf ton anti-virus et pare-feux
    .Lances HijackThis
    .Cliques sur "Do a system scan only"
    .Tu coches les lignes suivantes :
    R3 - Default URLSearchHook is missing
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKUS\S-1-5-19\..\Run: [sodokimipu] Rundll32.exe "C:\WINDOWS\system32\tevaziva.dll",s (User 'SERVICE LOCAL')
    O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
    O20 - AppInit_DLLs: karina.dat kukqya.dll cdrgiq.dll
    O20 - Winlogon Notify: ddcCUlJy - ddcCUlJy.dll (file missing)

    .Tu cliques sur "Fix Checked"
    .Tu fermes HijackThis

    des expliquations en images : http://pagesperso-orange.fr/rginformatique/section%20virus/demohijack.htm

    2) Tu désinstalles les outils utilisés avec Toolscleaner2 lui tu le supprimeras de sur le bureau manuellement ainsi que le rapport généré qui est dans ton disque dur système sous le nom de " TCleaner "

    Télécharge toolscleaner sur ton Bureau : http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner

    . Double-cliques sur ToolsCleaner2 "l'as de carreau" et laisse le travailler
    . Cliques sur Recherche et laisse le scan se terminer. attention ça peut parraitre long
    . Cliques sur Suppression pour finaliser.
    . Tu peux, si tu le souhaites, te servir des Options facultatives.
    . Clique sur Quitter, pour que le rapport puisse se créer.
    . Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta réponse

    3) mets java à jour : https://www.java.com/fr/download/manual.jsp et désinstalles l'ancienne version
    sinon aide toi de ceci pour les mise à jour https://www.malekal.com/maintenir-java-adobe-reader-et-le-player-flash-a-jour/
    ou
    désinstalles ta version actuel et installes cette version http://www.commentcamarche.net/telecharger/telecharger 34055318 java runtime environment

    4) fais une analyse de vulnérabilité pour voir si tu n'aurais pas d'autre mises à jour à faire que nous n'avons pas vu sur hijackthis : https://www.malekal.com/tester-la-vulnerabilite-de-son-systeme-2/

    5) ouvres malwarebytes et vides la quarantaine

    6) Redémarres le PC et passes Ccleaner avec ces réglages LA

    télécharge Ccleaner à partir de cette adresses

    .enregistres le sur le bureau
    .double-cliques sur le fichier pour lancer l'installation
    .sur la fenêtre de l'installation langage bien choisir français et OK
    .cliques sur suivant
    .lis la licence et j'accepte
    .cliques sur suivant
    .la tu ne gardes de coché que mettre un raccourci sur le bureau et puis contrôler automatiquement les mises à jour de Ccleaner
    .cliques sur intaller
    .cliques sur fermer
    .double-cliques sur l'icône de Ccleaner pour l'ouvrir
    .une fois ouvert tu cliques sur option et puis avancé
    .tu décoches effacer uniquement les fichiers, du dossier temp de windows plus vieux que 48 heures
    .cliques sur nettoyeur
    .cliques sur windows et dans la colonne avancé
    .cochesla première case vieilles données du perfetch que celle-la ce qui te donnes la case vielles données du perfetch et la case avancé qui c'est coché automatiquement mais que celle-la
    .cliques sur analyse une fois l'analyse terminé
    .cliques sur lancer le nettoyage et sur la demande de confirmation OK il vas falloir que tu le refasses une autre fois une fois fini vériffis en appuiant de nouveau sur analyse pour être sur qu'il n'y est plus rien
    .cliques maintenant sur registre et puis sur rechercher les erreurs
    .laisses tout cochées et cliques sur réparrer les erreurs sélectionnées
    .il te demande de sauvegarder OUI
    .tu lui donnes un nom pour pouvoir la retrouver et enregistre
    .cliques sur corriger toutes les erreurs sélectionnées et sur la demande de confirmation OK
    .il supprime et fermer tu vériffis en relancant rechercher les erreurs
    .tu retournes dans option et tu recoches la case effacer uniquement les fichiers, du dossier temp de windows plus vieux que 48 heures et sur nettoyeur, windows sous avancé tu décoches la première case vieilles données du perfetch
    .tu peux fermer Ccleaner

    et pour mieux le connaire : https://jesses.pagesperso-orange.fr/Docs/Logiciels/CCleaner.htm

    7) Supprimer les anciens points de restauration pour supprimer ce qui peut être dedans C:\System Volume Information\_restore

    (a) Désactiver la Restauration du système

    cliques sur Démarrer
    Cliques droit sur Poste de travail
    cliques sur Propriétés
    Cliques sur l'onglet Restauration du système
    Coches Désactiver la Restauration du système sur tous les lecteurs
    Cliques sur Appliquer, Lorsque le message de confirmation apparaît,
    cliques sur Oui.
    Cliques sur OK.

    (b) Activer la Restauration du système

    cliques sur Démarrer
    Cliques droit sur Poste de travail
    cliques sur Propriétés
    Cliques sur l'onglet Restauration du système
    Décoches Désactiver la Restauration du système sur tous les lecteurs
    Cliques sur Appliquer, Lorsque le message de confirmation apparaît,
    cliques sur Oui.
    Cliques sur OK.

    0
    1. ginie222
       
      je suis vraiment impressionnée, mais pour mon info personnelle, comment fait t on pour retenir tout ce language informatique, pour moi c'est comme connaïtre une langue compliquée, que vous comprenez et parlez !
      Désolée, je m'égard !
      Donc, si je saisi un peu, l'exécution dans les règles de ce procésus va rendre un ordi "tout propre et performant" ou je me trompe complétement ?
      Dans tout les cas, merci beaucoup de cette aide précieuse !
      Une dernière question et je ne vous ennuie pas plus longtemps :
      Dans l'étape 7, je dois supprimer les anciens points de restauration puis vous me parlez de 2 possibilités, mais laquelle me conseillez vous ? a ou b

      Je vous souhaite une bonne nuit Jacques,
      et vous tiens informé !

      Virginie
      0
    2. ginie222
       
      Bonsoir Jacques,

      j'ai effectué toutes les étapes et voici les rapports, alors grace à vous on peut cocher résolu ou pas ?
      Merci encore

      [ Rapport ToolsCleaner version 2.3.0 (par A.Rothstein & dj QUIOU) ]

      -->- Recherche:

      C:\TB.txt: trouvé !
      C:\SDFIX: trouvé !
      C:\Toolbar SD: trouvé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
      C:\Documents and Settings\NINIE\Bureau\HijackThis.lnk: trouvé !
      C:\Documents and Settings\NINIE\Bureau\HJTInstall.exe: trouvé !
      C:\Program Files\Trend Micro\HijackThis: trouvé !
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
      C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
      C:\SDFix\SystemReport.txt: trouvé !

      ---------------------------------
      -->- Suppression:

      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
      C:\Documents and Settings\NINIE\Bureau\HijackThis.lnk: supprimé !
      C:\Documents and Settings\NINIE\Bureau\HJTInstall.exe: supprimé !
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
      C:\TB.txt: supprimé !
      C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
      C:\SDFix\SystemReport.txt: supprimé !
      C:\SDFIX: supprimé !
      C:\Toolbar SD: supprimé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
      C:\Program Files\Trend Micro\HijackThis: supprimé !

      Rapport HijackThis

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 22:58:37, on 08/01/2009
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16762)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
      C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\PMObserv.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\WINDOWS\eHome\ehRecvr.exe
      C:\WINDOWS\eHome\ehSched.exe
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
      C:\Program Files\Spyware Doctor\pctsTray.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Microsoft ActiveSync\wcescomm.exe
      C:\PROGRA~1\MI3AA1~1\rapimgr.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
      C:\Program Files\Spyware Doctor\pctsAuxs.exe
      C:\Program Files\Spyware Doctor\pctsSvc.exe
      C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
      C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
      C:\WINDOWS\ehome\mcrdsvc.exe
      C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
      C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\dllhost.exe
      C:\WINDOWS\system32\wbem\wmiapsrv.exe
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
      O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
      O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
      O8 - Extra context menu item: Ajouter un site de support RSS à VAIO Information FLOW - C:\Program Files\Sony\VAIO Information FLOW\aiesc.html
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Transfert par Image Converter 2 Plus - C:\Program Files\Sony\Image Converter 2\menu.htm
      O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.com/fr/
      O15 - Trusted Zone: *.sony-europe.com
      O15 - Trusted Zone: *.sonystyle-europe.com
      O15 - Trusted Zone: *.vaio-link.com
      O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
      O16 - DPF: {084DAC27-6FA3-4F55-9005-033F2F102F5C} (ITPPDiagIE Class) - http://data.jeuxclassiques.com/npwwg.cab
      O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} - http://www3.snapfish.fr/SnapfishActivia.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
      O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
      O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} - http://copainsdavant.linternaute.com/...
      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
      O16 - DPF: {74E4A24D-5224-4F05-8A41-99445E0FC22B} - http://www.gamehouse.com/realarcade-webgames/gamehouse/gamehouseplayer.cab
      O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} - http://theonils.spaces.live.com/PhotoUpload/MsnPUpld.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
      O16 - DPF: {FFFDF6F2-F7BC-4B90-B789-CB7BBDA13AD6} (CLaunchPrint Object) - http://photosmart.hpphoto.com/Download/HPeServicesLocalPrint.CAB
      O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
      O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 2\IcVzMon.exe
      O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
      O23 - Service: PMObserv - RICOH CO.,LTD. - C:\WINDOWS\system32\PMObserv.exe
      O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
      O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
      O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
      O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
      O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe
      O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
      O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
      O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
      O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
      O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
      O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
      O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
      O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
      O23 - Service: VAIO Cooporated Initialisation (VCI) - Sony Corporation - C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe
      O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
      O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
      O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
      0
  21. jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 645
     
    bonjour, oui le problème est résolu , mais si tu veux mon avis concernant tes protections tu n'as pas les plus performantes dans les gratuits comme anti-virus tu devrais mettre antivir avec spyware terminator ou sinon AVG8 free qui lui as un anti-spyware incorporé d'origine, et quelque soit ton chois même si tu préfère garder ce que tu as met un pare-feu autre que celui de windows qui n'est pas très puissant tu peux mettre sois zone alarme ou kério , et puis je te conseil d'utiliser en complément de tout cela malwarebytes que tu lanceras régulièrement mais toujours faire la mise à jour avant, et puis utilise ccleaner en fonction nettoyeur à chaque arrêt du pc ou plus simplement comme moi sur les 5 pc de la maison ou je l'ai mis en automatique , et je l'utilise sur le registre après chaque désinstallation de programmes

    @+
    0