Virus trojan à supprimer

Bonjour,

1) quel programme te les décèle et où ?

2) c'est toi qui as mis ça :

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = computer-of-love
O17 - HKLM\Software\..\Telephony: DomainName = computer-of-love
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = computer-of-love
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = computer-of-love

3) Rends toi sur ce site :

https://www.virustotal.com/gui/

Clique sur parcourir et cherche ce fichier : C:\Windows\system32\shdocvw.exe

Clique sur Send File.

Un rapport va s'élaborer ligne à ligne.

Attends la fin. Il doit comprendre la taille du fichier envoyé.

Sauvegarde le rapport avec le bloc-note.

Copie le dans ta réponse.

Si VirusTotal indique que le fichier a déjà été analysé, cliquer sur le bouton Reanalyse le fichier maintenant

c'est hijackthis qui les décèle...
pour la deuxieme question, oui c'est moi qui ai mit ca... faut pas?

et voici le rapport : :s

a-squared 4.0.0.73 2009.01.06 -
AhnLab-V3 2009.1.5.3 2009.01.06 -
AntiVir 7.9.0.45 2009.01.05 TR/Dropper.Gen
Authentium 5.1.0.4 2009.01.05 -
Avast 4.8.1281.0 2009.01.05 -
AVG 8.0.0.199 2009.01.05 -
BitDefender 7.2 2009.01.06 -
CAT-QuickHeal 10.00 2009.01.06 -
ClamAV 0.94.1 2009.01.06 -
Comodo 878 2009.01.05 -
DrWeb 4.44.0.09170 2009.01.06 -
eTrust-Vet 31.6.6293 2009.01.06 -
Ewido 4.0 2008.12.31 -
F-Prot 4.4.4.56 2009.01.05 -
F-Secure 8.0.14470.0 2009.01.06 -
Fortinet 3.117.0.0 2009.01.06 -
GData 19 2009.01.06 -
Ikarus T3.1.1.45.0 2009.01.06 -
K7AntiVirus 7.10.576 2009.01.05 -
Kaspersky 7.0.0.125 2009.01.06 -
McAfee 5486 2009.01.05 -
McAfee+Artemis 5486 2009.01.05 -
Microsoft 1.4205 2009.01.06 -
NOD32 3741 2009.01.05 -
Norman 5.80.02 2009.01.02 W32/Malware.EXGC
Panda 9.0.0.4 2009.01.05 -
PCTools 4.4.2.0 2009.01.05 -
Prevx1 V2 2009.01.06 -
Rising 21.11.11.00 2009.01.06 -
SecureWeb-Gateway 6.7.6 2009.01.05 Trojan.Dropper.Gen
Sophos 4.37.0 2009.01.06 -
Sunbelt 3.2.1809.2 2008.12.22 -
Symantec 10 2009.01.06 -
TheHacker 6.3.1.4.205 2009.01.05 -
TrendMicro 8.700.0.1004 2009.01.06 -
VBA32 3.12.8.10 2009.01.05 -
ViRobot 2009.1.6.1545 2009.01.06 -
VirusBuster 4.5.11.0 2009.01.05 -
Information additionnelle
File size: 63494 bytes
MD5...: 41243e5f78b2228d61760eba64743b25
SHA1..: 5721847cba9ec698f9fdafcf5d9a3528c6a55bdd
SHA256: 431e361ebb59a6550f3bbef45e057052f352798280188738252aa4e063b6185d
SHA512: 49d175638fab10fea881dbd20997fa7c0e458cdc49632ed68ee69360bcf19092
bf2e8037a9b27dcda7ac88d886f6d35b4d3c30199301a5ecd3d77804f1afb7eb

ssdeep: 1536:+4leFZGZ+tfh0CdeH0hKaAO8SSY9rXeJKtptqb93ll:+nGEXdYHuJNSmXeA
tfW1l

PEiD..: Armadillo v1.71
TrID..: File type identification
Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x401a90
timedatestamp.....: 0x495054eb (Tue Dec 23 03:03:07 2008)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0xc1c 0xe00 5.71 77253574e0d58c18d56c59897ab62818
.rdata 0x2000 0x200 0x200 4.48 624c374834f4905c56a8b9a1bfdeb07a
.data 0x3000 0x23c 0x200 5.10 c99c37acb7904823e8b851d85b6d66c4
.rsrc 0x4000 0xe018 0xe206 7.99 02e7791adc4310cf31dc9e32e4d59af7

( 2 imports )
> KERNEL32.dll: GetProcAddress, LoadLibraryA, GetModuleHandleA, GetStartupInfoA
> MSVCRT.dll: exit, _acmdln, __getmainargs, _initterm, __setusermatherr, _XcptFilter, __p__commode, __p__fmode, __set_app_type, _except_handler3, _controlfp, _exit, _adjust_fdiv

( 0 exports )

CWSandbox info: <a href='http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=41243e5f78b2228d61760eba64743b25' target='_blank'>http://research.sunbelt-software.com/...

Re,

1) c'est hijackthis qui les décèle..

tu parles de ça :

O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe

Effacer à tout prix ! Spyware component related to DownloadWare and found in Program FilesKFH

et de ça :

O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe

Ce service (Boonty.exe) semble être méchant. This entry was classified from our visitors as bad.

2) Ouvre le gestionnaire des tâches par Ctrl Alt Suppr

Choisis l'onglet Processus

Fais un clic droit sur shdocvw.exe puis clique sur Terminer le processus. Ignore l'avertissement.

Relance HijackThis.

Choisis Do a scan only

Coche la case devant les lignes suivantes

O4 - HKLM\..\Run: [Windows Service Processor] shdocvw.exe
O4 - HKLM\..\RunServices: [Windows Service Processor] shdocvw.exe

Ferme toutes les fenêtres (hormis HijackThis), y compris ton navigateur.

Clique sur fix checked.

Ferme Hijackthis.

3) Fais redémarrer l'ordi et remets un rapport Hijackthis.

Re,

1) Télécharge OAD http://sosvirus.changelog.fr/OAD.exe
- Enregistre le sur ton Bureau

Clique droit sur le fichier OAD.exe et sur Propriétés, dans l'onglet Compatibilité, Cadre "Niveau de privilège" il faut cocher "Exécuter ce programme en tant qu'administrateur".

- nom de fichier à rechercher tape ou fais un copier coller de :

shdocvw

- Type de recherche : sélectionne l'option 6 puis valide [entree]

OAD va maintenant rechercher le fichier. Laisse le travailler jusqu'à ce qu'il en ai terminé.
Le rapport de recherche s'affichera automatiquement à dès qu'il en aura terminé.

- Fais un copier / coller de ce rapport dans ton prochain post.

Note importante : Suivant la taille des disques dur cette recherche peut prendre plusieurs minutes. Sois patient(e)

Clique droit sur le fichier OAD.exe et sur Propriétés, dans l'onglet Compatibilité, Cadre "Niveau de privilège" il faut cocher "Exécuter ce programme en tant qu'administrateur".

2) Télécharge ici :

http://images.malwareremoval.com/random/RSIT.exe

random's system information tool (RSIT) par random/random et sauvegarde-le sur le Bureau.

Double-clique sur RSIT.exe afin de lancer RSIT.

Lis le contenu de l'écran Disclaimer puis clique sur Continue (si tu acceptes les conditions).

Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.

Poste le contenu de log.txt (<<qui sera affiché)
.

NB : Les rapports sont sauvegardés dans le dossier C:\rsit

Re,

mets le rapport RSIT.

Pas la peine de chercher à mettre la totalité du rapport OAD.

Re,

je pourrais avoir les 200 (environ) dernières lignes du rapport RSIT ?

désolé j'avais mal regardé...

2008-12-23 00:14:45 ----A---- C:\Windows\system32\CompMgmtLauncher.exe
2008-12-23 00:14:45 ----A---- C:\Windows\system32\CompatUI.dll
2008-12-23 00:14:45 ----A---- C:\Windows\system32\cmipnpinstall.dll
2008-12-23 00:14:45 ----A---- C:\Windows\system32\cmifw.dll
2008-12-23 00:14:45 ----A---- C:\Windows\system32\cmicryptinstall.dll
2008-12-23 00:14:45 ----A---- C:\Windows\system32\cmdl32.exe
2008-12-23 00:14:45 ----A---- C:\Windows\system32\clfsw32.dll
2008-12-23 00:14:45 ----A---- C:\Windows\system32\clbcatq.dll
2008-12-23 00:14:45 ----A---- C:\Windows\system32\cipher.exe
2008-12-23 00:14:45 ----A---- C:\Windows\system32\cic.dll
2008-12-23 00:14:44 ----A---- C:\Windows\system32\consent.exe
2008-12-23 00:14:44 ----A---- C:\Windows\system32\conime.exe
2008-12-23 00:14:44 ----A---- C:\Windows\system32\comuid.dll
2008-12-23 00:14:44 ----A---- C:\Windows\system32\comsvcs.dll
2008-12-23 00:14:44 ----A---- C:\Windows\system32\comdlg32.dll
2008-12-23 00:14:44 ----A---- C:\Windows\system32\comctl32.dll
2008-12-23 00:14:44 ----A---- C:\Windows\system32\colorui.dll
2008-12-23 00:14:44 ----A---- C:\Windows\system32\COLORCNV.DLL
2008-12-23 00:14:44 ----A---- C:\Windows\system32\colbact.dll
2008-12-23 00:14:44 ----A---- C:\Windows\system32\cofiredm.dll
2008-12-23 00:14:44 ----A---- C:\Windows\system32\cmutil.dll
2008-12-23 00:14:44 ----A---- C:\Windows\system32\cmstplua.dll
2008-12-23 00:14:44 ----A---- C:\Windows\system32\cmstp.exe
2008-12-23 00:14:44 ----A---- C:\Windows\system32\cmpbk32.dll
2008-12-23 00:14:43 ----A---- C:\Windows\system32\els.dll
2008-12-23 00:14:42 ----A---- C:\Windows\system32\esentutl.exe
2008-12-23 00:14:42 ----A---- C:\Windows\system32\esentprf.dll
2008-12-23 00:14:42 ----A---- C:\Windows\system32\esent.dll
2008-12-23 00:14:42 ----A---- C:\Windows\system32\EncDump.dll
2008-12-23 00:14:42 ----A---- C:\Windows\system32\efsadu.dll
2008-12-23 00:14:42 ----A---- C:\Windows\system32\eapsvc.dll
2008-12-23 00:14:42 ----A---- C:\Windows\system32\EAPQEC.DLL
2008-12-23 00:14:42 ----A---- C:\Windows\system32\eappprxy.dll
2008-12-23 00:14:41 ----A---- C:\Windows\system32\fontsub.dll
2008-12-23 00:14:41 ----A---- C:\Windows\system32\fontext.dll
2008-12-23 00:14:41 ----A---- C:\Windows\system32\fmifs.dll
2008-12-23 00:14:41 ----A---- C:\Windows\system32\FirewallControlPanel.exe
2008-12-23 00:14:41 ----A---- C:\Windows\system32\FirewallAPI.dll
2008-12-23 00:14:41 ----A---- C:\Windows\system32\findstr.exe
2008-12-23 00:14:41 ----A---- C:\Windows\system32\findnetprinters.dll
2008-12-23 00:14:41 ----A---- C:\Windows\system32\filemgmt.dll
2008-12-23 00:14:41 ----A---- C:\Windows\system32\feclient.dll
2008-12-23 00:14:41 ----A---- C:\Windows\system32\fdWSD.dll
2008-12-23 00:14:41 ----A---- C:\Windows\system32\fdWCN.dll
2008-12-23 00:14:41 ----A---- C:\Windows\system32\fdSSDP.dll
2008-12-23 00:14:41 ----A---- C:\Windows\system32\fdPHost.dll
2008-12-23 00:14:41 ----A---- C:\Windows\system32\fdeploy.dll
2008-12-23 00:14:41 ----A---- C:\Windows\system32\fde.dll
2008-12-23 00:14:40 ----A---- C:\Windows\system32\f3ahvoas.dll
2008-12-23 00:14:40 ----A---- C:\Windows\system32\extrac32.exe
2008-12-23 00:14:40 ----A---- C:\Windows\system32\ExplorerFrame.dll
2008-12-23 00:14:40 ----A---- C:\Windows\system32\expand.exe
2008-12-23 00:14:40 ----A---- C:\Windows\system32\evr.dll
2008-12-23 00:14:40 ----A---- C:\Windows\system32\eventcls.dll
2008-12-23 00:14:40 ----A---- C:\Windows\system32\dpx.dll
2008-12-23 00:14:40 ----A---- C:\Windows\system32\dot3ui.dll
2008-12-23 00:14:40 ----A---- C:\Windows\system32\dot3svc.dll
2008-12-23 00:14:40 ----A---- C:\Windows\system32\dot3msm.dll
2008-12-23 00:14:40 ----A---- C:\Windows\system32\dot3gpui.dll
2008-12-23 00:14:40 ----A---- C:\Windows\system32\dot3gpclnt.dll
2008-12-23 00:14:40 ----A---- C:\Windows\system32\dot3dlg.dll
2008-12-23 00:14:40 ----A---- C:\Windows\system32\dot3cfg.dll
2008-12-23 00:14:40 ----A---- C:\Windows\system32\dot3api.dll
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dxgi.dll
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dxdiagn.dll
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dxdiag.exe
2008-12-23 00:14:39 ----A---- C:\Windows\system32\DWWIN.EXE
2008-12-23 00:14:39 ----A---- C:\Windows\system32\drmv2clt.dll
2008-12-23 00:14:39 ----A---- C:\Windows\system32\drmmgrtn.dll
2008-12-23 00:14:39 ----A---- C:\Windows\system32\driverquery.exe
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dps.dll
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dpnet.dll
2008-12-23 00:14:39 ----A---- C:\Windows\system32\DpiScaling.exe
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dpapimig.exe
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dnsrslvr.dll
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dnshc.dll
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dnscacheugc.exe
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dnsapi.dll
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dmvdsitf.dll
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dmutil.dll
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dmusic.dll
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dmsynth.dll
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dmscript.dll
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dmocx.dll
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dmloader.dll
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dmime.dll
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dmdskres2.dll
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dmdskmgr.dll
2008-12-23 00:14:39 ----A---- C:\Windows\system32\dmdlgs.dll
2008-12-23 00:14:38 ----A---- C:\Windows\system32\eapphost.dll
2008-12-23 00:14:38 ----A---- C:\Windows\system32\eappgnui.dll
2008-12-23 00:14:38 ----A---- C:\Windows\system32\eappcfg.dll
2008-12-23 00:14:38 ----A---- C:\Windows\system32\eapp3hst.dll
2008-12-23 00:14:38 ----A---- C:\Windows\system32\dxva2.dll
2008-12-23 00:14:38 ----A---- C:\Windows\system32\dxmasf.dll
2008-12-23 00:14:38 ----A---- C:\Windows\system32\dwmredir.dll
2008-12-23 00:14:38 ----A---- C:\Windows\system32\dwmapi.dll
2008-12-23 00:14:38 ----A---- C:\Windows\system32\dwm.exe
2008-12-23 00:14:38 ----A---- C:\Windows\system32\duser.dll
2008-12-23 00:14:38 ----A---- C:\Windows\system32\dsuiext.dll
2008-12-23 00:14:38 ----A---- C:\Windows\system32\dssenh.dll
2008-12-23 00:14:38 ----A---- C:\Windows\system32\dsprop.dll
2008-12-23 00:14:38 ----A---- C:\Windows\system32\dsound.dll
2008-12-23 00:14:38 ----A---- C:\Windows\system32\dskquoui.dll
2008-12-23 00:14:38 ----A---- C:\Windows\system32\dskquota.dll
2008-12-23 00:14:38 ----A---- C:\Windows\system32\dsdmo.dll
2008-12-23 00:14:38 ----A---- C:\Windows\system32\dsauth.dll
2008-12-23 00:14:38 ----A---- C:\Windows\system32\drvstore.dll
2008-12-23 00:14:38 ----A---- C:\Windows\system32\drvinst.exe
2008-12-23 00:14:37 ----A---- C:\Windows\system32\dssec.dll
2008-12-23 00:14:37 ----A---- C:\Windows\system32\dsquery.dll
2008-12-23 00:14:37 ----A---- C:\Windows\system32\authfwcfg.dll
2008-12-23 00:14:37 ----A---- C:\Windows\system32\AudioEng.dll
2008-12-23 00:14:37 ----A---- C:\Windows\system32\audiodg.exe
2008-12-23 00:14:37 ----A---- C:\Windows\system32\audiodev.dll
2008-12-23 00:14:37 ----A---- C:\Windows\system32\atmfd.dll
2008-12-23 00:14:37 ----A---- C:\Windows\system32\atl.dll
2008-12-23 00:14:37 ----A---- C:\Windows\system32\AtBroker.exe
2008-12-23 00:14:37 ----A---- C:\Windows\system32\at.exe
2008-12-23 00:14:36 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2008-12-23 00:14:36 ----A---- C:\Windows\system32\AuthFWGP.dll
2008-12-23 00:14:36 ----A---- C:\Windows\system32\auditpol.exe
2008-12-23 00:14:36 ----A---- C:\Windows\system32\audiosrv.dll
2008-12-23 00:14:36 ----A---- C:\Windows\system32\AudioSes.dll
2008-12-23 00:14:36 ----A---- C:\Windows\system32\AUDIOKSE.dll
2008-12-23 00:14:35 ----A---- C:\Windows\system32\bitsadmin.exe
2008-12-23 00:14:35 ----A---- C:\Windows\system32\BFE.DLL
2008-12-23 00:14:35 ----A---- C:\Windows\system32\bcdsrv.dll
2008-12-23 00:14:35 ----A---- C:\Windows\system32\bcdedit.exe
2008-12-23 00:14:35 ----A---- C:\Windows\system32\batt.dll
2008-12-23 00:14:35 ----A---- C:\Windows\system32\basesrv.dll
2008-12-23 00:14:35 ----A---- C:\Windows\system32\basecsp.dll
2008-12-23 00:14:35 ----A---- C:\Windows\bfsvc.exe
2008-12-23 00:14:34 ----A---- C:\Windows\system32\bcrypt.dll
2008-12-23 00:14:34 ----A---- C:\Windows\system32\bcdprov.dll
2008-12-23 00:14:34 ----A---- C:\Windows\system32\AzSqlExt.dll
2008-12-23 00:14:34 ----A---- C:\Windows\system32\azroleui.dll
2008-12-23 00:14:34 ----A---- C:\Windows\system32\azroles.dll
2008-12-23 00:14:34 ----A---- C:\Windows\system32\avrt.dll
2008-12-23 00:14:34 ----A---- C:\Windows\system32\avifil32.dll
2008-12-23 00:14:34 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2008-12-23 00:14:34 ----A---- C:\Windows\system32\AuxiliaryDisplayDriverLib.dll
2008-12-23 00:14:34 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2008-12-23 00:14:34 ----A---- C:\Windows\system32\AuxiliaryDisplayApi.dll
2008-12-23 00:14:34 ----A---- C:\Windows\system32\autoplay.dll
2008-12-23 00:14:34 ----A---- C:\Windows\system32\autofmt.exe
2008-12-23 00:14:34 ----A---- C:\Windows\system32\autoconv.exe
2008-12-23 00:14:34 ----A---- C:\Windows\system32\autochk.exe
2008-12-23 00:14:34 ----A---- C:\Windows\system32\authz.dll
2008-12-23 00:14:34 ----A---- C:\Windows\system32\authui.dll
2008-12-23 00:14:34 ----A---- C:\Windows\system32\ACW.exe
2008-12-23 00:14:34 ----A---- C:\Windows\system32\ActionQueue.dll
2008-12-23 00:14:33 ----A---- C:\Windows\system32\actxprxy.dll
2008-12-23 00:14:33 ----A---- C:\Windows\system32\activeds.dll
2008-12-23 00:14:33 ----A---- C:\Windows\system32\ActiveContentWizard.dll
2008-12-23 00:14:33 ----A---- C:\Windows\system32\aclui.dll
2008-12-23 00:14:33 ----A---- C:\Windows\system32\accessibilitycpl.dll
2008-12-23 00:14:33 ----A---- C:\Windows\system32\aaclient.dll
2008-12-23 00:14:32 ----A---- C:\Windows\system32\apss.dll
2008-12-23 00:14:32 ----A---- C:\Windows\system32\appinfo.dll
2008-12-23 00:14:32 ----A---- C:\Windows\system32\apphelp.dll
2008-12-23 00:14:32 ----A---- C:\Windows\system32\apircl.dll
2008-12-23 00:14:32 ----A---- C:\Windows\system32\apilogen.dll
2008-12-23 00:14:32 ----A---- C:\Windows\system32\apds.dll
2008-12-23 00:14:32 ----A---- C:\Windows\system32\amxread.dll
2008-12-23 00:14:32 ----A---- C:\Windows\system32\amstream.dll
2008-12-23 00:14:32 ----A---- C:\Windows\system32\advapi32.dll
2008-12-23 00:14:32 ----A---- C:\Windows\system32\adtschema.dll
2008-12-23 00:14:32 ----A---- C:\Windows\system32\adsnt.dll
2008-12-23 00:14:32 ----A---- C:\Windows\system32\adsmsext.dll
2008-12-23 00:14:32 ----A---- C:\Windows\system32\adsldpc.dll
2008-12-23 00:14:32 ----A---- C:\Windows\system32\adsldp.dll
2008-12-23 00:14:31 ----A---- C:\Windows\system32\catsrvut.dll
2008-12-23 00:14:31 ----A---- C:\Windows\system32\catsrv.dll
2008-12-23 00:14:31 ----A---- C:\Windows\system32\capisp.dll
2008-12-23 00:14:31 ----A---- C:\Windows\system32\cacls.exe
2008-12-23 00:14:31 ----A---- C:\Windows\system32\cabview.dll
2008-12-23 00:14:31 ----A---- C:\Windows\system32\cabinet.dll
2008-12-23 00:14:31 ----A---- C:\Windows\system32\btpanui.dll
2008-12-23 00:14:31 ----A---- C:\Windows\system32\alg.exe
2008-12-23 00:14:30 ----A---- C:\Windows\system32\certutil.exe
2008-12-23 00:14:30 ----A---- C:\Windows\system32\certreq.exe
2008-12-23 00:14:30 ----A---- C:\Windows\system32\certprop.dll
2008-12-23 00:14:30 ----A---- C:\Windows\system32\certmgr.dll
2008-12-23 00:14:30 ----A---- C:\Windows\system32\CertEnrollUI.dll
2008-12-23 00:14:30 ----A---- C:\Windows\system32\CertEnrollCtrl.exe
2008-12-23 00:14:30 ----A---- C:\Windows\system32\CertEnroll.dll
2008-12-23 00:14:30 ----A---- C:\Windows\system32\certcli.dll
2008-12-23 00:14:30 ----A---- C:\Windows\system32\bthci.dll
2008-12-23 00:14:30 ----A---- C:\Windows\system32\browseui.dll
2008-12-23 00:14:30 ----A---- C:\Windows\system32\browser.dll
2008-12-23 00:14:30 ----A---- C:\Windows\system32\bridgeunattend.exe
2008-12-23 00:14:30 ----A---- C:\Windows\system32\brcplsdw.dll
2008-12-23 00:14:30 ----A---- C:\Windows\system32\brcpl.dll
2008-12-23 00:14:30 ----A---- C:\Windows\system32\BOOTVID.DLL
2008-12-23 00:14:30 ----A---- C:\Windows\system32\bootstr.dll
2008-12-23 00:14:29 ----A---- C:\Windows\system32\cfgmgr32.dll
2008-12-23 00:14:29 ----A---- C:\Windows\system32\cfgbkend.dll
2008-12-23 00:14:29 ----A---- C:\Windows\system32\cewmdm.dll
2008-12-23 00:14:29 ----A---- C:\Windows\system32\cdosys.dll
2008-12-23 00:14:28 ----A---- C:\Windows\system32\bootcfg.exe
2008-12-23 00:14:28 ----A---- C:\Windows\system32\blackbox.dll
2008-12-23 00:14:28 ----A---- C:\Windows\system32\bitsigd.dll
2008-12-23 00:14:25 ----A---- C:\Windows\system32\IMJP10K.DLL
2008-12-23 00:14:24 ----A---- C:\Windows\system32\imapi2fs.dll
2008-12-23 00:14:24 ----A---- C:\Windows\system32\imapi2.dll
2008-12-23 00:14:24 ----A---- C:\Windows\system32\imapi.dll
2008-12-23 00:14:24 ----A---- C:\Windows\system32\imagesp1.dll
2008-12-23 00:14:24 ----A---- C:\Windows\system32\imagehlp.dll
2008-12-23 00:14:24 ----A---- C:\Windows\system32\IKEEXT.DLL
2008-12-23 00:14:23 ----A---- C:\Windows\system32\input.dll
2008-12-23 00:14:23 ----A---- C:\Windows\system32\InkEd.dll
2008-12-23 00:14:23 ----A---- C:\Windows\system32\InfDefaultInstall.exe
2008-12-23 00:14:23 ----A---- C:\Windows\system32\inetppui.dll
2008-12-23 00:14:23 ----A---- C:\Windows\system32\inetpp.dll
2008-12-23 00:14:23 ----A---- C:\Windows\system32\inetmib1.dll
2008-12-23 00:14:22 ----A---- C:\Windows\system32\infocardapi.dll
2008-12-23 00:14:22 ----A---- C:\Windows\system32\imm32.dll
2008-12-23 00:14:21 ----A---- C:\Windows\system32\icaapi.dll
2008-12-23 00:14:21 ----A---- C:\Windows\system32\iassvcs.dll
2008-12-23 00:14:21 ----A---- C:\Windows\system32\iassdo.dll
2008-12-23 00:14:21 ----A---- C:\Windows\system32\iassam.dll
2008-12-23 00:14:21 ----A---- C:\Windows\system32\iasrecst.dll
2008-12-23 00:14:21 ----A---- C:\Windows\system32\iasrad.dll
2008-12-23 00:14:21 ----A---- C:\Windows\system32\iaspolcy.dll
2008-12-23 00:14:21 ----A---- C:\Windows\system32\iasnap.dll
2008-12-23 00:14:21 ----A---- C:\Windows\system32\IasMigPlugin.dll
2008-12-23 00:14:21 ----A---- C:\Windows\system32\iashost.exe
2008-12-23 00:14:21 ----A---- C:\Windows\system32\iashlpr.dll
2008-12-23 00:14:21 ----A---- C:\Windows\system32\iasdatastore.dll
2008-12-23 00:14:21 ----A---- C:\Windows\system32\iasads.dll
2008-12-23 00:14:21 ----A---- C:\Windows\system32\iasacct.dll
2008-12-23 00:14:21 ----A---- C:\Windows\system32\ias.dll
2008-12-23 00:14:20 ----A---- C:\Windows\system32\ifsutil.dll
2008-12-23 00:14:20 ----A---- C:\Windows\system32\ifmon.dll
2008-12-23 00:14:20 ----A---- C:\Windows\system32\idndl.dll
2008-12-23 00:14:20 ----A---- C:\Windows\system32\icsunattend.exe
2008-12-23 00:14:20 ----A---- C:\Windows\system32\icsfiltr.dll
2008-12-23 00:14:20 ----A---- C:\Windows\system32\icm32.dll
2008-12-23 00:14:20 ----A---- C:\Windows\system32\icardagt.exe
2008-12-23 00:14:20 ----A---- C:\Windows\system32\httpapi.dll
2008-12-23 00:14:19 ----A---- C:\Windows\system32\icfupgd.dll
2008-12-23 00:14:19 ----A---- C:\Windows\system32\icardres.dll
2008-12-23 00:14:19 ----A---- C:\Windows\system32\icacls.exe
2008-12-23 00:14:19 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2008-12-23 00:14:19 ----A---- C:\Windows\system32\hlink.dll
2008-12-23 00:14:18 ----A---- C:\Windows\system32\hnetmon.dll
2008-12-23 00:14:18 ----A---- C:\Windows\system32\hnetcfg.dll
2008-12-23 00:14:18 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2008-12-23 00:14:17 ----A---- C:\Windows\system32\ftp.exe
2008-12-23 00:14:17 ----A---- C:\Windows\system32\fsutil.exe
2008-12-23 00:14:17 ----A---- C:\Windows\system32\fsmgmt.msc
2008-12-23 00:14:17 ----A---- C:\Windows\system32\framedyn.dll
2008-12-23 00:14:17 ----A---- C:\Windows\system32\framebuf.dll
2008-12-23 00:14:17 ----A---- C:\Windows\system32\fphc.dll
2008-12-23 00:14:16 ----A---- C:\Windows\system32\HelpPaneProxy.dll
2008-12-23 00:14:16 ----A---- C:\Windows\system32\hcrstco.dll
2008-12-23 00:14:16 ----A---- C:\Windows\system32\hbaapi.dll
2008-12-23 00:14:16 ----A---- C:\Windows\system32\GuidedHelp.dll
2008-12-23 00:14:16 ----A---- C:\Windows\system32\fwcfg.dll
2008-12-23 00:14:16 ----A---- C:\Windows\system32\fundisc.dll
2008-12-23 00:14:16 ----A---- C:\Windows\system32\framedynos.dll
2008-12-23 00:14:16 ----A---- C:\Windows\fveupdate.exe
2008-12-23 00:14:15 ----A---- C:\Windows\system32\getmac.exe
2008-12-23 00:14:15 ----A---- C:\Windows\system32\gatherWirelessInfo.vbs
2008-12-23 00:14:15 ----A---- C:\Windows\system32\gatherWiredInfo.vbs
2008-12-23 00:14:15 ----A---- C:\Windows\system32\gacinstall.dll
2008-12-23 00:14:15 ----A---- C:\Windows\HelpPane.exe
2008-12-23 00:14:14 ----A---- C:\Windows\system32\graftabl.com
2008-12-23 00:14:14 ----A---- C:\Windows\system32\gpupdate.exe
2008-12-23 00:14:14 ----A---- C:\Windows\system32\gpsvc.dll
2008-12-23 00:14:14 ----A---- C:\Windows\system32\gpresult.exe
2008-12-23 00:14:14 ----A---- C:\Windows\system32\gpedit.dll
2008-12-23 00:14:14 ----A---- C:\Windows\system32\gpapi.dll
2008-12-23 00:14:12 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll
2008-12-23 00:14:12 ----A---- C:\Windows\system32\WindowsAnytimeUpgrade.exe
2008-12-23 00:14:09 ----A---- C:\Windows\system32\wiaacmgr.exe
2008-12-23 00:14:09 ----A---- C:\Windows\system32\whealogr.dll
2008-12-23 00:14:08 ----A---- C:\Windows\system32\winusb.dll
2008-12-23 00:14:08 ----A---- C:\Windows\system32\wintrust.dll
2008-12-23 00:14:08 ----A---- C:\Windows\system32\winsta.dll
2008-12-23 00:14:08 ----A---- C:\Windows\system32\winsrv.dll
2008-12-23 00:14:08 ----A---- C:\Windows\system32\WINSRPC.DLL
2008-12-23 00:14:08 ----A---- C:\Windows\system32\WinSAT.exe
2008-12-23 00:14:08 ----A---- C:\Windows\system32\wiashext.dll
2008-12-23 00:14:08 ----A---- C:\Windows\system32\wiaservc.dll
2008-12-23 00:14:08 ----A---- C:\Windows\system32\wiascanprofiles.dll
2008-12-23 00:14:08 ----A---- C:\Windows\system32\wiarpc.dll
2008-12-23 00:14:08 ----A---- C:\Windows\system32\wiadss.dll
2008-12-23 00:14:08 ----A---- C:\Windows\system32\wiadefui.dll
2008-12-23 00:14:08 ----A---- C:\Windows\system32\wiaaut.dll
2008-12-23 00:14:08 ----A---- C:\Windows\system32\wfapigp.dll
2008-12-23 00:14:08 ----A---- C:\Windows\system32\wevtutil.exe
2008-12-23 00:14:08 ----A---- C:\Windows\system32\wevtsvc.dll
2008-12-23 00:14:08 ----A---- C:\Windows\system32\wevtfwd.dll
2008-12-23 00:14:07 ----A---- C:\Windows\system32\WLanConn.dll
2008-12-23 00:14:07 ----A---- C:\Windows\system32\wlancfg.dll
2008-12-23 00:14:07 ----A---- C:\Windows\system32\wlanapi.dll
2008-12-23 00:14:07 ----A---- C:\Windows\system32\wkssvc.dll
2008-12-23 00:14:07 ----A---- C:\Windows\system32\wisptis.exe
2008-12-23 00:14:07 ----A---- C:\Windows\system32\WinSCard.dll
2008-12-23 00:14:07 ----A---- C:\Windows\system32\WinSATAPI.dll
2008-12-23 00:14:07 ----A---- C:\Windows\system32\winrsmgr.dll
2008-12-23 00:14:07 ----A---- C:\Windows\system32\wininit.exe
2008-12-23 00:14:07 ----A---- C:\Windows\system32\winhttp.dll
2008-12-23 00:14:07 ----A---- C:\Windows\system32\winethc.dll
2008-12-23 00:14:06 ----A---- C:\Windows\system32\winrshost.exe
2008-12-23 00:14:06 ----A---- C:\Windows\system32\winrscmd.dll
2008-12-23 00:14:06 ----A---- C:\Windows\system32\winrs.exe
2008-12-23 00:14:06 ----A---- C:\Windows\system32\winrm.vbs
2008-12-23 00:14:06 ----A---- C:\Windows\system32\winnsi.dll
2008-12-23 00:14:06 ----A---- C:\Windows\system32\winmm.dll
2008-12-23 00:14:06 ----A---- C:\Windows\system32\winlogon.exe
2008-12-23 00:14:06 ----A---- C:\Windows\system32\wbemcomn.dll
2008-12-23 00:14:06 ----A---- C:\Windows\system32\wavemsp.dll
2008-12-23 00:14:06 ----A---- C:\Windows\system32\WavDest.dll
2008-12-23 00:14:06 ----A---- C:\Windows\system32\waitfor.exe
2008-12-23 00:14:06 ----A---- C:\Windows\system32\w32tm.exe
2008-12-23 00:14:06 ----A---- C:\Windows\system32\w32time.dll
2008-12-23 00:14:05 ----A---- C:\Windows\system32\WebClnt.dll
2008-12-23 00:14:05 ----A---- C:\Windows\system32\wdscore.dll
2008-12-23 00:14:05 ----A---- C:\Windows\system32\VSSVC.exe
2008-12-23 00:14:05 ----A---- C:\Windows\system32\vsstrace.dll
2008-12-23 00:14:05 ----A---- C:\Windows\system32\vssapi.dll
2008-12-23 00:14:05 ----A---- C:\Windows\system32\vssadmin.exe
2008-12-23 00:14:05 ----A---- C:\Windows\system32\vss_ps.dll
2008-12-23 00:14:04 ----A---- C:\Windows\system32\wevtapi.dll
2008-12-23 00:14:04 ----A---- C:\Windows\system32\wermgr.exe
2008-12-23 00:14:04 ----A---- C:\Windows\system32\WerFaultSecure.exe
2008-12-23 00:14:04 ----A---- C:\Windows\system32\WerFault.exe
2008-12-23 00:14:04 ----A---- C:\Windows\system32\werdiagcontroller.dll
2008-12-23 00:14:04 ----A---- C:\Windows\system32\wercplsupport.dll
2008-12-23 00:14:04 ----A---- C:\Windows\system32\wercon.exe
2008-12-23 00:14:04 ----A---- C:\Windows\system32\wer.dll
2008-12-23 00:14:04 ----A---- C:\Windows\system32\wecutil.exe
2008-12-23 00:14:04 ----A---- C:\Windows\system32\wecsvc.dll
2008-12-23 00:14:04 ----A---- C:\Windows\system32\wecapi.dll
2008-12-23 00:14:03 ----A---- C:\Windows\system32\wship6.dll
2008-12-23 00:14:03 ----A---- C:\Windows\system32\wshcon.dll
2008-12-23 00:14:03 ----A---- C:\Windows\system32\wsecedit.dll
2008-12-23 00:14:03 ----A---- C:\Windows\system32\WSDMon.dll
2008-12-23 00:14:03 ----A---- C:\Windows\system32\WSDApi.dll
2008-12-23 00:14:03 ----A---- C:\Windows\system32\wscsvc.dll
2008-12-23 00:14:03 ----A---- C:\Windows\system32\wscproxystub.dll
2008-12-23 00:14:03 ----A---- C:\Windows\system32\wscntfy.dll
2008-12-23 00:14:03 ----A---- C:\Windows\system32\wscmisetup.dll
2008-12-23 00:14:03 ----A---- C:\Windows\system32\wscisvif.dll
2008-12-23 00:14:03 ----A---- C:\Windows\system32\wscapi.dll
2008-12-23 00:14:03 ----A---- C:\Windows\system32\WpdConns.dll
2008-12-23 00:14:03 ----A---- C:\Windows\system32\wpdbusenum.dll
2008-12-23 00:14:03 ----A---- C:\Windows\system32\wdigest.dll
2008-12-23 00:14:03 ----A---- C:\Windows\system32\wdi.dll
2008-12-23 00:14:03 ----A---- C:\Windows\system32\wdc.dll
2008-12-23 00:14:03 ----A---- C:\Windows\system32\wcnwiz.dll
2008-12-23 00:14:03 ----A---- C:\Windows\system32\wcncsvc.dll
2008-12-23 00:14:02 ----A---- C:\Windows\system32\ws2_32.dll
2008-12-23 00:14:02 ----A---- C:\Windows\system32\wpnpinst.exe
2008-12-23 00:14:02 ----A---- C:\Windows\system32\wpdwcn.dll
2008-12-23 00:14:02 ----A---- C:\Windows\system32\WPDSp.dll
2008-12-23 00:14:02 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2008-12-23 00:14:02 ----A---- C:\Windows\system32\WPDShextAutoplay.exe
2008-12-23 00:14:02 ----A---- C:\Windows\system32\wpdshext.dll
2008-12-23 00:14:02 ----A---- C:\Windows\system32\WpdMtpUS.dll
2008-12-23 00:14:02 ----A---- C:\Windows\system32\WpdMtp.dll
2008-12-23 00:14:02 ----A---- C:\Windows\system32\wpd_ci.dll
2008-12-23 00:14:02 ----A---- C:\Windows\system32\wpcsvc.dll
2008-12-23 00:14:02 ----A---- C:\Windows\system32\wpclsp.dll
2008-12-23 00:14:02 ----A---- C:\Windows\system32\wpccpl.dll
2008-12-23 00:14:02 ----A---- C:\Windows\system32\wpcao.dll
2008-12-23 00:14:02 ----A---- C:\Windows\system32\Wpc.dll
2008-12-23 00:14:01 ----A---- C:\Windows\system32\XPSSHHDR.dll
2008-12-23 00:14:01 ----A---- C:\Windows\system32\xolehlp.dll
2008-12-23 00:14:01 ----A---- C:\Windows\system32\xmlprovi.dll
2008-12-23 00:14:01 ----A---- C:\Windows\system32\xmllite.dll
2008-12-23 00:14:01 ----A---- C:\Windows\system32\xcopy.exe
2008-12-23 00:14:01 ----A---- C:\Windows\system32\xactsrv.dll
2008-12-23 00:14:01 ----A---- C:\Windows\system32\wzcdlg.dll
2008-12-23 00:14:01 ----A---- C:\Windows\system32\wvc.dll
2008-12-23 00:14:01 ----A---- C:\Windows\system32\wusa.exe
2008-12-23 00:14:01 ----A---- C:\Windows\system32\WUDFx.dll
2008-12-23 00:14:01 ----A---- C:\Windows\system32\WUDFSvc.dll
2008-12-23 00:14:01 ----A---- C:\Windows\system32\WUDFPlatform.dll
2008-12-23 00:14:01 ----A---- C:\Windows\system32\wsqmcons.exe
2008-12-23 00:14:01 ----A---- C:\Windows\system32\wsock32.dll
2008-12-23 00:14:01 ----A---- C:\Windows\system32\wsnmp32.dll
2008-12-23 00:14:01 ----A---- C:\Windows\system32\WsmWmiPl.dll
2008-12-23 00:14:01 ----A---- C:\Windows\system32\WsmSvc.dll
2008-12-23 00:14:01 ----A---- C:\Windows\system32\WsmRes.dll
2008-12-23 00:14:00 ----A---- C:\Windows\system32\xwizards.dll
2008-12-23 00:14:00 ----A---- C:\Windows\system32\xpssvcs.dll
2008-12-23 00:14:00 ----A---- C:\Windows\system32\WUDFHost.exe
2008-12-23 00:14:00 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2008-12-23 00:14:00 ----A---- C:\Windows\system32\wtsapi32.dll
2008-12-23 00:14:00 ----A---- C:\Windows\system32\WsmProv.dll
2008-12-23 00:14:00 ----A---- C:\Windows\system32\WsmCl.dll
2008-12-23 00:14:00 ----A---- C:\Windows\system32\WsmAuto.dll
2008-12-23 00:14:00 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2008-12-23 00:14:00 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2008-12-23 00:14:00 ----A---- C:\Windows\system32\WSHTCPIP.DLL
2008-12-23 00:14:00 ----A---- C:\Windows\system32\wmicmiplugin.dll
2008-12-23 00:13:59 ----A---- C:\Windows\system32\wmidx.dll
2008-12-23 00:13:58 ----A---- C:\Windows\system32\wmdrmsdk.dll
2008-12-23 00:13:58 ----A---- C:\Windows\system32\wmdrmdev.dll
2008-12-23 00:13:58 ----A---- C:\Windows\system32\Wldap32.dll
2008-12-23 00:13:58 ----A---- C:\Windows\system32\wlanui.dll
2008-12-23 00:13:58 ----A---- C:\Windows\system32\wlansvc.dll
2008-12-23 00:13:58 ----A---- C:\Windows\system32\wlansec.dll
2008-12-23 00:13:58 ----A---- C:\Windows\system32\wlanpref.dll
2008-12-23 00:13:58 ----A---- C:\Windows\system32\wlanmsm.dll
2008-12-23 00:13:58 ----A---- C:\Windows\system32\WlanMmHC.dll
2008-12-23 00:13:58 ----A---- C:\Windows\system32\WlanMM.dll
2008-12-23 00:13:58 ----A---- C:\Windows\system32\wlanhlp.dll
2008-12-23 00:13:58 ----A---- C:\Windows\system32\WLanHC.dll
2008-12-23 00:13:58 ----A---- C:\Windows\system32\wlangpui.dll
2008-12-23 00:13:58 ----A---- C:\Windows\system32\wlanext.exe
2008-12-23 00:13:58 ----A---- C:\Windows\system32\wlandlg.dll
2008-12-23 00:13:57 ----A---- C:\Windows\system32\WMSPDMOE.DLL
2008-12-23 00:13:57 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2008-12-23 00:13:57 ----A---- C:\Windows\system32\wmpsrcwp.dll
2008-12-23 00:13:57 ----A---- C:\Windows\system32\wmpshell.dll
2008-12-23 00:13:57 ----A---- C:\Windows\system32\wmpmde.dll
2008-12-23 00:13:57 ----A---- C:\Windows\system32\wmdrmnet.dll
2008-12-23 00:13:57 ----A---- C:\Windows\system32\WMASF.DLL
2008-12-23 00:13:57 ----A---- C:\Windows\system32\WMADMOE.DLL
2008-12-23 00:13:57 ----A---- C:\Windows\system32\WMADMOD.DLL
2008-12-23 00:13:57 ----A---- C:\Windows\system32\wlgpclnt.dll
2008-12-23 00:13:56 ----A---- C:\Windows\system32\wow32.dll
2008-12-23 00:13:56 ----A---- C:\Windows\system32\WMVXENCD.DLL
2008-12-23 00:13:56 ----A---- C:\Windows\system32\WMVSENCD.DLL
2008-12-23 00:13:56 ----A---- C:\Windows\system32\WMVSDECD.DLL
2008-12-23 00:13:56 ----A---- C:\Windows\system32\WMVENCOD.DLL
2008-12-23 00:13:56 ----A---- C:\Windows\system32\wmvdspa.dll
2008-12-23 00:13:56 ----A---- C:\Windows\system32\WMVDECOD.DLL
2008-12-23 00:13:56 ----A---- C:\Windows\system32\wmploc.DLL
2008-12-23 00:13:55 ----A---- C:\Windows\system32\WMPhoto.dll
2008-12-23 00:13:55 ----A---- C:\Windows\system32\WMPEncEn.dll
2008-12-23 00:13:55 ----A---- C:\Windows\system32\wmpdxm.dll
2008-12-23 00:13:55 ----A---- C:\Windows\system32\wmiprop.dll
2008-12-23 00:13:54 ----A---- C:\Windows\system32\wmpcm.dll
2008-12-23 00:13:54 ----A---- C:\Windows\system32\wmp.dll
2008-12-23 00:13:53 ----A---- C:\Windows\system32\Tabbtn.dll
2008-12-23 00:13:53 ----A---- C:\Windows\system32\t2embed.dll
2008-12-23 00:13:53 ----A---- C:\Windows\system32\systeminfo.exe
2008-12-23 00:13:53 ----A---- C:\Windows\system32\systemcpl.dll
2008-12-23 00:13:49 ----A---- C:\Windows\system32\tdh.dll
2008-12-23 00:13:49 ----A---- C:\Windows\system32\tcpmon.ini
2008-12-23 00:13:49 ----A---- C:\Windows\system32\tcpmon.dll
2008-12-23 00:13:49 ----A---- C:\Windows\system32\tcpipcfg.dll
2008-12-23 00:13:49 ----A---- C:\Windows\system32\tbssvc.dll
2008-12-23 00:13:49 ----A---- C:\Windows\system32\tbs.dll
2008-12-23 00:13:49 ----A---- C:\Windows\system32\taskschd.dll
2008-12-23 00:13:49 ----A---- C:\Windows\system32\taskmgr.exe
2008-12-23 00:13:49 ----A---- C:\Windows\system32\tasklist.exe
2008-12-23 00:13:49 ----A---- C:\Windows\system32\taskkill.exe
2008-12-23 00:13:48 ----A---- C:\Windows\system32\taskeng.exe
2008-12-23 00:13:48 ----A---- C:\Windows\system32\taskcomp.dll
2008-12-23 00:13:48 ----A---- C:\Windows\system32\tapisrv.dll
2008-12-23 00:13:48 ----A---- C:\Windows\system32\TapiMigPlugin.dll
2008-12-23 00:13:48 ----A---- C:\Windows\system32\takeown.exe
2008-12-23 00:13:48 ----A---- C:\Windows\system32\tabcal.exe
2008-12-23 00:13:48 ----A---- C:\Windows\system32\TabbtnEx.dll
2008-12-23 00:13:48 ----A---- C:\Windows\system32\srrstr.dll
2008-12-23 00:13:48 ----A---- C:\Windows\system32\sqmapi.dll
2008-12-23 00:13:48 ----A---- C:\Windows\system32\sqlcese30.dll
2008-12-23 00:13:47 ----A---- C:\Windows\system32\sstpsvc.dll
2008-12-23 00:13:47 ----A---- C:\Windows\system32\SSShim.dll
2008-12-23 00:13:47 ----A---- C:\Windows\system32\ssdpsrv.dll
2008-12-23 00:13:47 ----A---- C:\Windows\system32\srwmi.dll
2008-12-23 00:13:47 ----A---- C:\Windows\system32\srvsvc.dll
2008-12-23 00:13:47 ----A---- C:\Windows\system32\sqlsrv32.dll
2008-12-23 00:13:47 ----A---- C:\Windows\system32\sqlceqp30.dll
2008-12-23 00:13:46 ----A---- C:\Windows\system32\SysFxUI.dll
2008-12-23 00:13:46 ----A---- C:\Windows\system32\syncui.dll
2008-12-23 00:13:46 ----A---- C:\Windows\system32\synceng.dll
2008-12-23 00:13:46 ----A---- C:\Windows\system32\SyncCenter.dll
2008-12-23 00:13:46 ----A---- C:\Windows\system32\sxstrace.exe
2008-12-23 00:13:46 ----A---- C:\Windows\system32\spwmp.dll
2008-12-23 00:13:46 ----A---- C:\Windows\system32\spwizres.dll
2008-12-23 00:13:46 ----A---- C:\Windows\system32\spwizimg.dll
2008-12-23 00:13:46 ----A---- C:\Windows\system32\spwizeng.dll
2008-12-23 00:13:46 ----A---- C:\Windows\system32\sppnp.dll
2008-12-23 00:13:46 ----A---- C:\Windows\system32\spopk.dll
2008-12-23 00:13:46 ----A---- C:\Windows\system32\spoolsv.exe
2008-12-23 00:13:46 ----A---- C:\Windows\system32\spoolss.dll
2008-12-23 00:13:46 ----A---- C:\Windows\system32\spbcd.dll
2008-12-23 00:13:46 ----A---- C:\Windows\system32\SoundRecorder.exe
2008-12-23 00:13:45 ----A---- C:\Windows\system32\syssetup.dll
2008-12-23 00:13:45 ----A---- C:\Windows\system32\sysmain.dll
2008-12-23 00:13:45 ----A---- C:\Windows\system32\syskey.exe
2008-12-23 00:13:45 ----A---- C:\Windows\system32\sxsstore.dll
2008-12-23 00:13:45 ----A---- C:\Windows\system32\sxs.dll
2008-12-23 00:13:45 ----A---- C:\Windows\system32\swprv.dll
2008-12-23 00:13:45 ----A---- C:\Windows\system32\svchost.exe
2008-12-23 00:13:45 ----A---- C:\Windows\system32\sud.dll
2008-12-23 00:13:45 ----A---- C:\Windows\system32\Storprop.dll
2008-12-23 00:13:45 ----A---- C:\Windows\system32\stobject.dll
2008-12-23 00:13:45 ----A---- C:\Windows\system32\sti_ci.dll
2008-12-23 00:13:44 ----A---- C:\Windows\system32\zipfldr.dll
2008-12-23 00:13:44 ----A---- C:\Windows\system32\xwtpw32.dll
2008-12-23 00:13:44 ----A---- C:\Windows\system32\usp10.dll
2008-12-23 00:13:44 ----A---- C:\Windows\system32\userinit.exe
2008-12-23 00:13:44 ----A---- C:\Windows\system32\userenv.dll
2008-12-23 00:13:44 ----A---- C:\Windows\system32\usercpl.dll
2008-12-23 00:13:44 ----A---- C:\Windows\system32\user32.dll
2008-12-23 00:13:44 ----A---- C:\Windows\system32\usbui.dll
2008-12-23 00:13:44 ----A---- C:\Windows\system32\usbperf.dll
2008-12-23 00:13:44 ----A---- C:\Windows\system32\usbmon.dll
2008-12-23 00:13:44 ----A---- C:\Windows\system32\upnphost.dll
2008-12-23 00:13:44 ----A---- C:\Windows\system32\upnpcont.exe
2008-12-23 00:13:44 ----A---- C:\Windows\system32\upnp.dll
2008-12-23 00:13:44 ----A---- C:\Windows\system32\untfs.dll
2008-12-23 00:13:43 ----A---- C:\Windows\system32\VIDRESZR.DLL
2008-12-23 00:13:43 ----A---- C:\Windows\system32\vga64k.dll
2008-12-23 00:13:43 ----A---- C:\Windows\system32\vga256.dll
2008-12-23 00:13:43 ----A---- C:\Windows\system32\vga.dll
2008-12-23 00:13:42 ----A---- C:\Windows\system32\vfwwdm32.dll
2008-12-23 00:13:42 ----A---- C:\Windows\system32\version.dll
2008-12-23 00:13:42 ----A---- C:\Windows\system32\verifier.exe
2008-12-23 00:13:42 ----A---- C:\Windows\system32\verifier.dll
2008-12-23 00:13:42 ----A---- C:\Windows\system32\vdsutil.dll
2008-12-23 00:13:42 ----A---- C:\Windows\system32\vdsldr.exe
2008-12-23 00:13:42 ----A---- C:\Windows\system32\vdsdyn.dll
2008-12-23 00:13:42 ----A---- C:\Windows\system32\vdsbas.dll
2008-12-23 00:13:42 ----A---- C:\Windows\system32\vds_ps.dll
2008-12-23 00:13:42 ----A---- C:\Windows\system32\vds.exe
2008-12-23 00:13:42 ----A---- C:\Windows\system32\vdmredir.dll
2008-12-23 00:13:42 ----A---- C:\Windows\system32\vdmdbg.dll
2008-12-23 00:13:42 ----A---- C:\Windows\system32\VAN.dll
2008-12-23 00:13:42 ----A---- C:\Windows\system32\uxtheme.dll
2008-12-23 00:13:42 ----A---- C:\Windows\system32\uxsms.dll
2008-12-23 00:13:42 ----A---- C:\Windows\system32\uudf.dll
2008-12-23 00:13:42 ----A---- C:\Windows\system32\Utilman.exe
2008-12-23 00:13:42 ----A---- C:\Windows\system32\utildll.dll
2008-12-23 00:13:42 ----A---- C:\Windows\system32\TSpkg.dll
2008-12-23 00:13:42 ----A---- C:\Windows\system32\trkwks.dll
2008-12-23 00:13:42 ----A---- C:\Windows\system32\tracerpt.exe
2008-12-23 00:13:42 ----A---- C:\Windows\system32\TpmInit.exe
2008-12-23 00:13:42 ----A---- C:\Windows\system32\TMM.dll
2008-12-23 00:13:41 ----A---- C:\Windows\system32\umb.dll
2008-12-23 00:13:41 ----A---- C:\Windows\system32\ulib.dll
2008-12-23 00:13:41 ----A---- C:\Windows\system32\UIHub.dll
2008-12-23 00:13:41 ----A---- C:\Windows\system32\TSTheme.exe
2008-12-23 00:13:41 ----A---- C:\Windows\system32\tsgqec.dll
2008-12-23 00:13:41 ----A---- C:\Windows\system32\tsddd.dll
2008-12-23 00:13:41 ----A---- C:\Windows\system32\tscupgrd.exe
2008-12-23 00:13:41 ----A---- C:\Windows\system32\TimeDateMUICallback.dll
2008-12-23 00:13:41 ----A---- C:\Windows\system32\thumbcache.dll
2008-12-23 00:13:41 ----A---- C:\Windows\system32\themeui.dll
2008-12-23 00:13:41 ----A---- C:\Windows\system32\themecpl.dll
2008-12-23 00:13:41 ----A---- C:\Windows\system32\termsrv.dll
2008-12-23 00:13:41 ----A---- C:\Windows\system32\termmgr.dll
2008-12-23 00:13:40 ----A---- C:\Windows\system32\unregmp2.exe
2008-12-23 00:13:40 ----A---- C:\Windows\system32\unlodctr.exe
2008-12-23 00:13:40 ----A---- C:\Windows\system32\unbcl.dll
2008-12-23 00:13:40 ----A---- C:\Windows\system32\unattendedjoin.exe
2008-12-23 00:13:40 ----A---- C:\Windows\system32\unattend.dll
2008-12-23 00:13:40 ----A---- C:\Windows\system32\umpnpmgr.dll
2008-12-23 00:13:40 ----A---- C:\Windows\system32\UIAutomationCore.dll
2008-12-23 00:13:40 ----A---- C:\Windows\system32\UI0Detect.exe
2008-12-23 00:13:40 ----A---- C:\Windows\system32\ufat.dll
2008-12-23 00:13:40 ----A---- C:\Windows\system32\uexfat.dll
2008-12-23 00:13:40 ----A---- C:\Windows\system32\uDWM.dll
2008-12-23 00:13:40 ----A---- C:\Windows\system32\ucsvc.exe
2008-12-23 00:13:40 ----A---- C:\Windows\system32\txfw32.dll
2008-12-23 00:13:40 ----A---- C:\Windows\system32\txflog.dll
2008-12-23 00:13:40 ----A---- C:\Windows\system32\TsWpfWrp.exe
2008-12-23 00:11:26 ----A---- C:\Windows\system32\cbsra.exe
2008-12-22 23:39:56 ----D---- C:\Program Files\Acronis
2008-12-22 23:31:49 ----D---- C:\Program Files\Microsoft Silverlight
2008-12-22 23:28:22 ----D---- C:\ProgramData\Messenger Plus!
2008-12-22 21:37:35 ----A---- C:\Windows\system32\winipsec.dll
2008-12-22 21:37:35 ----A---- C:\Windows\system32\polstore.dll
2008-12-22 21:37:35 ----A---- C:\Windows\system32\IPSECSVC.DLL
2008-12-22 21:37:35 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2008-12-22 21:35:24 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2008-12-22 21:35:23 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2008-12-22 21:35:23 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2008-12-22 21:29:05 ----A---- C:\Windows\system32\psisdecd.dll
2008-12-22 21:29:05 ----A---- C:\Windows\system32\EncDec.dll
2008-12-22 21:24:29 ----A---- C:\Windows\system32\gdi32.dll
2008-12-22 21:19:05 ----A---- C:\Windows\system32\Apphlpdm.dll
2008-12-22 21:19:02 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2008-12-22 21:19:02 ----A---- C:\Windows\system32\gameux.dll
2008-12-22 21:18:04 ----A---- C:\Windows\system32\wmpeffects.dll
2008-12-22 21:16:17 ----A---- C:\Windows\system32\msxml3.dll
2008-12-22 21:16:16 ----A---- C:\Windows\system32\msxml3r.dll
2008-12-22 21:12:36 ----A---- C:\Windows\system32\netapi32.dll
2008-12-22 21:11:36 ----A---- C:\Windows\system32\tzres.dll
2008-12-22 21:09:27 ----A---- C:\Windows\system32\shell32.dll
2008-12-22 21:05:21 ----RSH---- C:\Windows\system32\shdocvw.exe
2008-12-22 21:05:21 ----A---- C:\Windows\explorer.exe
2008-12-22 20:59:26 ----A---- C:\Windows\system32\NlsLexicons0046.dll
2008-12-22 20:59:26 ----A---- C:\Windows\system32\NlsLexicons0045.dll
2008-12-22 20:59:25 ----A---- C:\Windows\system32\NlsLexicons0049.dll
2008-12-22 20:59:25 ----A---- C:\Windows\system32\NlsLexicons0047.dll
2008-12-22 20:59:25 ----A---- C:\Windows\system32\NlsLexicons0039.dll
2008-12-22 20:59:25 ----A---- C:\Windows\system32\NlsLexicons0020.dll
2008-12-22 20:59:24 ----A---- C:\Windows\system32\NlsLexicons0022.dll
2008-12-22 20:59:24 ----A---- C:\Windows\system32\NlsLexicons0021.dll
2008-12-22 20:59:23 ----A---- C:\Windows\system32\NlsLexicons0026.dll
2008-12-22 20:59:23 ----A---- C:\Windows\system32\NlsLexicons0024.dll
2008-12-22 20:59:22 ----A---- C:\Windows\system32\NlsLexicons0027.dll
2008-12-22 20:59:21 ----A---- C:\Windows\system32\NlsLexicons0010.dll
2008-12-22 20:59:20 ----A---- C:\Windows\system32\NlsLexicons0013.dll
2008-12-22 20:59:20 ----A---- C:\Windows\system32\NlsLexicons0011.dll
2008-12-22 20:59:19 ----A---- C:\Windows\system32\NlsLexicons0019.dll
2008-12-22 20:59:19 ----A---- C:\Windows\system32\NlsLexicons0018.dll
2008-12-22 20:59:18 ----A---- C:\Windows\system32\NlsLexicons0003.dll
2008-12-22 20:59:18 ----A---- C:\Windows\system32\NlsLexicons0002.dll
2008-12-22 20:59:18 ----A---- C:\Windows\system32\NlsLexicons0001.dll
2008-12-22 20:59:17 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2008-12-22 20:59:17 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2008-12-22 20:59:16 ----A---- C:\Windows\system32\NlsLexicons004b.dll
2008-12-22 20:59:16 ----A---- C:\Windows\system32\NlsLexicons004a.dll
2008-12-22 20:59:15 ----A---- C:\Windows\system32\NlsLexicons004e.dll
2008-12-22 20:59:15 ----A---- C:\Windows\system32\NlsLexicons004c.dll
2008-12-22 20:59:14 ----A---- C:\Windows\system32\NlsLexicons003e.dll
2008-12-22 20:59:14 ----A---- C:\Windows\system32\NlsLexicons002a.dll
2008-12-22 20:59:13 ----A---- C:\Windows\system32\NlsLexicons001b.dll
2008-12-22 20:59:13 ----A---- C:\Windows\system32\NlsLexicons001a.dll
2008-12-22 20:59:12 ----A---- C:\Windows\system32\NlsLexicons001d.dll
2008-12-22 20:59:12 ----A---- C:\Windows\system32\NlsLexicons000a.dll
2008-12-22 20:59:11 ----A---- C:\Windows\system32\NlsLexicons000d.dll
2008-12-22 20:59:11 ----A---- C:\Windows\system32\NlsLexicons000c.dll
2008-12-22 20:59:10 ----A---- C:\Windows\system32\NlsLexicons0414.dll
2008-12-22 20:59:10 ----A---- C:\Windows\system32\NlsLexicons000f.dll
2008-12-22 20:59:09 ----A---- C:\Windows\system32\NlsLexicons081a.dll
2008-12-22 20:59:09 ----A---- C:\Windows\system32\NlsLexicons0816.dll
2008-12-22 20:59:09 ----A---- C:\Windows\system32\NlsLexicons0416.dll
2008-12-22 20:59:08 ----A---- C:\Windows\system32\NlsModels0011.dll
2008-12-22 20:59:08 ----A---- C:\Windows\system32\NlsData0045.dll
2008-12-22 20:59:07 ----A---- C:\Windows\system32\NlsData0049.dll
2008-12-22 20:59:07 ----A---- C:\Windows\system32\NlsData0047.dll
2008-12-22 20:59:07 ----A---- C:\Windows\system32\NlsData0046.dll
2008-12-22 20:59:07 ----A---- C:\Windows\system32\NlsData0039.dll
2008-12-22 20:59:06 ----A---- C:\Windows\system32\NlsData0026.dll
2008-12-22 20:59:06 ----A---- C:\Windows\system32\NlsData0024.dll
2008-12-22 20:59:06 ----A---- C:\Windows\system32\NlsData0022.dll
2008-12-22 20:59:06 ----A---- C:\Windows\system32\NlsData0021.dll
2008-12-22 20:59:06 ----A---- C:\Windows\system32\NlsData0020.dll
2008-12-22 20:59:05 ----A---- C:\Windows\system32\NlsData0027.dll
2008-12-22 20:59:04 ----A---- C:\Windows\system32\NlsData0011.dll
2008-12-22 20:59:04 ----A---- C:\Windows\system32\NlsData0010.dll
2008-12-22 20:59:03 ----A---- C:\Windows\system32\NlsData0018.dll
2008-12-22 20:59:03 ----A---- C:\Windows\system32\NlsData0013.dll
2008-12-22 20:59:03 ----A---- C:\Windows\system32\NlsData0000.dll
2008-12-22 20:59:02 ----A---- C:\Windows\system32\NlsData0019.dll
2008-12-22 20:59:02 ----A---- C:\Windows\system32\NlsData0003.dll
2008-12-22 20:59:02 ----A---- C:\Windows\system32\NlsData0002.dll
2008-12-22 20:59:02 ----A---- C:\Windows\system32\NlsData0001.dll
2008-12-22 20:59:01 ----A---- C:\Windows\system32\NlsData004a.dll
2008-12-22 20:59:01 ----A---- C:\Windows\system32\NlsData0009.dll
2008-12-22 20:59:01 ----A---- C:\Windows\system32\NlsData0007.dll
2008-12-22 20:59:00 ----A---- C:\Windows\system32\NlsData004e.dll
2008-12-22 20:59:00 ----A---- C:\Windows\system32\NlsData004c.dll
2008-12-22 20:59:00 ----A---- C:\Windows\system32\NlsData004b.dll
2008-12-22 20:59:00 ----A---- C:\Windows\system32\NlsData003e.dll
2008-12-22 20:58:59 ----A---- C:\Windows\system32\NlsData002a.dll
2008-12-22 20:58:59 ----A---- C:\Windows\system32\NlsData001b.dll
2008-12-22 20:58:59 ----A---- C:\Windows\system32\NlsData001a.dll
2008-12-22 20:58:57 ----A---- C:\Windows\system32\NlsData001d.dll
2008-12-22 20:58:57 ----A---- C:\Windows\system32\NlsData000c.dll
2008-12-22 20:58:57 ----A---- C:\Windows\system32\NlsData000a.dll
2008-12-22 20:58:56 ----A---- C:\Windows\system32\NlsData000f.dll
2008-12-22 20:58:56 ----A---- C:\Windows\system32\NlsData000d.dll
2008-12-22 20:58:55 ----A---- C:\Windows\system32\NlsData0416.dll
2008-12-22 20:58:55 ----A---- C:\Windows\system32\NlsData0414.dll
2008-12-22 20:58:55 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2008-12-22 20:58:54 ----A---- C:\Windows\system32\NlsLexicons0c1a.dll
2008-12-22 20:58:54 ----A---- C:\Windows\system32\NlsData081a.dll
2008-12-22 20:58:54 ----A---- C:\Windows\system32\NlsData0816.dll
2008-12-22 20:58:53 ----A---- C:\Windows\system32\NlsData0c1a.dll
2008-12-22 20:56:11 ----A---- C:\Windows\system32\kbd106n.dll
2008-12-22 20:56:07 ----A---- C:\Windows\system32\winresume.exe
2008-12-22 20:56:07 ----A---- C:\Windows\system32\winload.exe
2008-12-22 20:56:07 ----A---- C:\Windows\system32\srdelayed.exe
2008-12-22 20:56:07 ----A---- C:\Windows\system32\srcore.dll
2008-12-22 20:56:07 ----A---- C:\Windows\system32\srclient.dll
2008-12-22 20:56:07 ----A---- C:\Windows\system32\rstrui.exe
2008-12-22 20:56:06 ----A---- C:\Windows\system32\setbcdlocale.dll
2008-12-22 20:56:06 ----A---- C:\Windows\system32\kd1394.dll
2008-12-22 20:56:06 ----A---- C:\Windows\system32\ci.dll
2008-12-22 20:52:26 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2008-12-22 20:52:25 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2008-12-22 20:52:25 ----A---- C:\Windows\system32\WindowsCodecs.dll
2008-12-22 20:50:37 ----A---- C:\Windows\system32\win32spl.dll
2008-12-22 20:50:37 ----A---- C:\Windows\system32\printcom.dll
2008-12-22 20:50:20 ----A---- C:\Windows\system32\wshrm.dll
2008-12-22 20:49:07 ----A---- C:\Windows\system32\rrinstaller.exe
2008-12-22 20:49:07 ----A---- C:\Windows\system32\mfps.dll
2008-12-22 20:49:07 ----A---- C:\Windows\system32\mfpmp.exe
2008-12-22 20:49:07 ----A---- C:\Windows\system32\mferror.dll
2008-12-22 20:49:07 ----A---- C:\Windows\system32\mf.dll
2008-12-22 20:49:06 ----A---- C:\Windows\system32\WMVCORE.DLL
2008-12-22 20:49:06 ----A---- C:\Windows\system32\WMNetMgr.dll
2008-12-22 20:49:06 ----A---- C:\Windows\system32\logagent.exe
2008-12-22 20:48:06 ----A---- C:\Windows\system32\INETRES.dll
2008-12-22 20:48:06 ----A---- C:\Windows\system32\inetcomm.dll
2008-12-22 20:47:46 ----A---- C:\Windows\system32\connect.dll
2008-12-22 20:47:09 ----A---- C:\Windows\system32\quartz.dll
2008-12-22 20:46:31 ----D---- C:\Program Files\MSXML 4.0
2008-12-22 20:46:00 ----A---- C:\Windows\system32\ntoskrnl.exe
2008-12-22 20:46:00 ----A---- C:\Windows\system32\ntkrnlpa.exe
2008-12-22 20:45:30 ----A---- C:\Windows\system32\msxml6r.dll
2008-12-22 20:45:30 ----A---- C:\Windows\system32\msxml6.dll
2008-12-22 20:23:48 ----D---- C:\Program Files\Messenger Plus! Live
2008-12-22 20:18:32 ----D---- C:\Program Files\Microsoft
2008-12-22 20:18:04 ----D---- C:\Program Files\Windows Live SkyDrive
2008-12-22 20:08:18 ----D---- C:\Program Files\Windows Live
2008-12-22 20:06:21 ----D---- C:\Windows\PCHEALTH
2008-12-22 19:46:04 ----D---- C:\Program Files\Common Files\Windows Live
2008-12-22 19:44:54 ----A---- C:\Windows\system32\wups2.dll
2008-12-22 19:44:54 ----A---- C:\Windows\system32\wucltux.dll
2008-12-22 19:44:54 ----A---- C:\Windows\system32\wuaueng.dll
2008-12-22 19:44:54 ----A---- C:\Windows\system32\wuauclt.exe
2008-12-22 19:43:53 ----A---- C:\Windows\system32\wudriver.dll
2008-12-22 19:43:52 ----A---- C:\Windows\system32\wups.dll
2008-12-22 19:43:52 ----A---- C:\Windows\system32\wuapi.dll
2008-12-22 19:43:01 ----A---- C:\Windows\system32\wuwebv.dll
2008-12-22 19:43:00 ----A---- C:\Windows\system32\wuapp.exe
2008-12-22 19:02:38 ----D---- C:\Users\Utilisateur\AppData\Roaming\Google
2008-12-22 11:26:19 ----D---- C:\Windows\Minidump
2008-12-21 16:09:29 ----D---- C:\Users\Utilisateur\AppData\Roaming\Adobe
2008-12-21 16:08:58 ----D---- C:\Users\Utilisateur\AppData\Roaming\Identities
2008-12-21 16:05:43 ----D---- C:\Users\Utilisateur\AppData\Roaming\Macromedia
2008-12-21 16:04:11 ----D---- C:\Users\Utilisateur\AppData\Roaming\Hewlett-Packard
2008-12-21 16:02:01 ----SD---- C:\Users\Utilisateur\AppData\Roaming\Microsoft
2008-12-21 16:02:01 ----D---- C:\Users\Utilisateur\AppData\Roaming\Media Center Programs
2008-12-21 15:58:27 ----SHD---- C:\ProgramData\Modèles
2008-12-21 15:58:27 ----SHD---- C:\ProgramData\Menu Démarrer
2008-12-21 15:58:27 ----SHD---- C:\ProgramData\Favoris
2008-12-21 15:58:27 ----SHD---- C:\ProgramData\Documents
2008-12-21 15:58:27 ----SHD---- C:\ProgramData\Bureau
2008-12-21 15:58:27 ----SHD---- C:\ProgramData\Application Data
2008-12-21 15:58:27 ----SHD---- C:\Program Files\Fichiers communs
2008-12-21 15:58:27 ----SHD---- C:\Documents and Settings
2008-12-21 14:53:42 ----D---- C:\Windows\SoftwareDistribution
2008-12-21 14:52:19 ----SHD---- C:\System Volume Information
2008-12-21 14:50:02 ----D---- C:\Windows\Prefetch

======List of files/folders modified in the last 1 months======

2009-01-06 13:35:17 ----D---- C:\Windows\Temp
2009-01-06 13:04:18 ----D---- C:\Windows\System32
2009-01-06 13:04:18 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-01-06 13:04:17 ----D---- C:\Windows\inf
2009-01-06 13:00:37 ----D---- C:\Windows\system32\drivers
2009-01-06 12:48:28 ----SHD---- C:\Windows\Installer
2009-01-06 12:48:28 ----D---- C:\ProgramData\Google
2009-01-06 12:48:28 ----D---- C:\Program Files\Google
2009-01-05 18:51:33 ----RD---- C:\Program Files
2009-01-05 18:50:50 ----HD---- C:\ProgramData
2009-01-05 12:07:00 ----RSD---- C:\Windows\assembly
2009-01-05 12:05:08 ----D---- C:\Windows\winsxs
2009-01-05 12:03:40 ----D---- C:\Program Files\Common Files\microsoft shared
2009-01-05 11:30:57 ----D---- C:\ProgramData\Symantec
2009-01-05 11:30:56 ----D---- C:\Program Files\Common Files\Symantec Shared
2009-01-04 17:09:44 ----D---- C:\Program Files\Microsoft Works
2009-01-04 17:09:13 ----D---- C:\Program Files\Microsoft Office
2009-01-04 17:09:07 ----D---- C:\Program Files\Common Files
2009-01-04 17:08:50 ----RSD---- C:\Windows\Fonts
2009-01-04 17:08:38 ----SD---- C:\ProgramData\Microsoft
2009-01-04 17:06:52 ----D---- C:\Windows\ShellNew
2009-01-04 10:54:38 ----D---- C:\WINDOWS
2009-01-02 19:58:42 ----D---- C:\Program Files\Common Files\Adobe
2009-01-02 19:58:37 ----D---- C:\ProgramData\Adobe
2009-01-02 10:48:16 ----D---- C:\Windows\system32\Tasks
2009-01-02 10:44:10 ----D---- C:\Windows\Tasks
2009-01-02 10:40:18 ----D---- C:\Windows\Debug
2008-12-31 18:23:43 ----D---- C:\Windows\system32\catroot2
2008-12-30 18:42:41 ----D---- C:\Windows\system32\WDI
2008-12-28 19:30:08 ----D---- C:\Windows\system32\NDF
2008-12-25 11:35:47 ----SD---- C:\Windows\Downloaded Program Files
2008-12-25 10:27:32 ----D---- C:\Windows\ModemLogs
2008-12-25 10:06:42 ----HD---- C:\Program Files\InstallShield Installation Information
2008-12-25 10:06:16 ----D---- C:\Windows\system32\catroot
2008-12-24 19:29:37 ----D---- C:\Windows\rescache
2008-12-24 18:48:56 ----D---- C:\Windows\system32\fr-FR
2008-12-24 18:48:56 ----D---- C:\Windows\PolicyDefinitions
2008-12-23 21:00:19 ----D---- C:\Windows\Logs
2008-12-23 18:28:45 ----D---- C:\Windows\system32\LogFiles
2008-12-23 01:25:42 ----D---- C:\Program Files\Internet Explorer
2008-12-23 01:25:41 ----D---- C:\Windows\system32\migration
2008-12-23 01:25:41 ----D---- C:\Windows\system32\en-US
2008-12-23 01:25:24 ----D---- C:\Windows\Microsoft.NET
2008-12-23 01:13:38 ----SHD---- C:\boot
2008-12-23 01:13:37 ----ASH---- C:\Program Files\desktop.ini
2008-12-23 01:03:53 ----D---- C:\Program Files\Windows Calendar
2008-12-23 01:03:52 ----D---- C:\Program Files\Windows Sidebar
2008-12-23 01:03:51 ----D---- C:\Program Files\Movie Maker
2008-12-23 01:03:49 ----D---- C:\Program Files\Windows Mail
2008-12-23 01:03:48 ----D---- C:\Program Files\Windows Media Player
2008-12-23 01:03:47 ----D---- C:\Program Files\Windows Collaboration
2008-12-23 01:03:46 ----D---- C:\Program Files\Windows Journal
2008-12-23 01:03:45 ----D---- C:\Program Files\Windows Photo Gallery
2008-12-23 01:03:33 ----D---- C:\Program Files\Windows Defender
2008-12-23 01:03:33 ----D---- C:\Program Files\Common Files\System
2008-12-23 01:03:32 ----D---- C:\Windows\servicing
2008-12-23 01:03:31 ----D---- C:\Windows\ehome
2008-12-23 01:03:10 ----D---- C:\Windows\MSAgent
2008-12-23 01:03:08 ----D---- C:\Windows\L2Schemas
2008-12-23 01:03:08 ----D---- C:\Windows\IME
2008-12-23 01:03:08 ----D---- C:\Windows\DigitalLocker
2008-12-23 01:03:06 ----D---- C:\Windows\system32\XPSViewer
2008-12-23 01:03:06 ----D---- C:\Windows\system32\ko-KR
2008-12-23 01:03:06 ----D---- C:\Windows\system32\da-DK
2008-12-23 01:03:06 ----D---- C:\Windows\system32\com
2008-12-23 01:03:05 ----D---- C:\Windows\system32\it-IT
2008-12-23 01:03:05 ----D---- C:\Windows\system32\de-DE
2008-12-23 01:03:04 ----D---- C:\Windows\system32\oobe
2008-12-23 01:03:04 ----D---- C:\Windows\system32\el-GR
2008-12-23 01:03:02 ----D---- C:\Windows\system32\sysprep
2008-12-23 01:03:02 ----D---- C:\Windows\system32\fr
2008-12-23 01:02:54 ----D---- C:\Windows\system32\AdvancedInstallers
2008-12-23 01:02:53 ----D---- C:\Windows\system32\ru-RU
2008-12-23 01:02:53 ----D---- C:\Windows\system32\ias
2008-12-23 01:02:37 ----D---- C:\Windows\system32\sv-SE
2008-12-23 01:02:37 ----D---- C:\Windows\system32\he-IL
2008-12-23 01:02:36 ----D---- C:\Windows\system32\SLUI
2008-12-23 01:02:36 ----D---- C:\Windows\system32\setup
2008-12-23 01:02:36 ----D---- C:\Windows\system32\pt-PT
2008-12-23 01:02:36 ----D---- C:\Windows\system32\hu-HU
2008-12-23 01:02:36 ----D---- C:\Windows\system32\fi-FI
2008-12-23 01:02:36 ----D---- C:\Windows\system32\cs-CZ
2008-12-23 01:02:33 ----D---- C:\Windows\system32\zh-CN
2008-12-23 01:02:33 ----D---- C:\Windows\system32\manifeststore
2008-12-23 01:02:32 ----D---- C:\Windows\system32\zh-TW
2008-12-23 01:02:32 ----D---- C:\Windows\system32\pl-PL
2008-12-23 01:02:32 ----D---- C:\Windows\system32\ja-JP
2008-12-23 01:02:32 ----D---- C:\Windows\system32\es-ES
2008-12-23 01:02:31 ----D---- C:\Windows\system32\ro-RO
2008-12-23 01:02:26 ----D---- C:\Windows\system32\tr-TR
2008-12-23 01:02:25 ----D---- C:\Windows\system32\wbem
2008-12-23 01:02:20 ----D---- C:\Windows\system32\nl-NL
2008-12-23 01:02:20 ----D---- C:\Windows\system32\nb-NO
2008-12-23 01:02:20 ----D---- C:\Windows\system32\ar-SA
2008-12-23 01:02:14 ----D---- C:\Windows\system32\migwiz
2008-12-23 01:02:12 ----D---- C:\Windows\system32\pt-BR
2008-12-23 01:00:07 ----D---- C:\Windows\AppPatch
2008-12-23 00:59:59 ----D---- C:\Windows\Boot
2008-12-23 00:59:54 ----D---- C:\Windows\system32\Boot
2008-12-23 00:40:17 ----A---- C:\Windows\system32\ifxcardm.dll
2008-12-23 00:40:12 ----A---- C:\Windows\system32\axaltocm.dll
2008-12-22 23:18:48 ----D---- C:\Windows\system32\ras
2008-12-22 23:18:48 ----D---- C:\Windows\system32\icsxml
2008-12-21 16:09:13 ----SHD---- C:\$RECYCLE.BIN
2008-12-21 16:08:40 ----HD---- C:\System.sav
2008-12-21 16:08:40 ----D---- C:\SwSetup
2008-12-21 16:07:02 ----D---- C:\Windows\system32\restore
2008-12-21 16:05:51 ----D---- C:\Windows\system
2008-12-21 16:02:01 ----RD---- C:\Users
2008-12-21 15:58:27 ----D---- C:\Program Files\Windows NT
2008-12-21 15:46:53 ----D---- C:\Windows\SMINST
2008-12-21 14:56:28 ----D---- C:\Windows\panther
2008-12-09 15:24:38 ----A---- C:\Windows\system32\mrt.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2008-11-26 23152]
R1 aswSP;avast! Self Protection; C:\Windows\system32\drivers\aswSP.sys [2008-11-26 111184]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2008-11-26 50864]
R1 eabfiltr;eabfiltr; C:\Windows\system32\DRIVERS\eabfiltr.sys [2006-06-28 8192]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [2008-12-17 371248]
R1 IKSysFlt;System Filter Driver; C:\Windows\system32\drivers\iksysflt.sys [2008-08-25 66952]
R1 IKSysSec;System Security Driver; C:\Windows\system32\drivers\iksyssec.sys [2008-08-25 81288]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\DRIVERS\aswFsBlk.sys [2008-11-26 20560]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\DRIVERS\aswMonFlt.sys [2008-11-26 51792]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-20 12672]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2006-11-15 32256]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2006-11-15 43520]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2006-11-15 37376]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2006-08-05 8192]
R3 BCM43XX;Pilote pour carte réseau Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-17 534016]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-18 14208]
R3 HBtnKey;HBtnKey; C:\Windows\system32\DRIVERS\cpqbttn.sys [2006-06-28 9472]
R3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDART.sys [2006-11-18 145920]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2006-10-19 986624]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2006-10-19 206848]
R3 NVENETFD;Pilote du contrôleur de réseau NVIDIA nForce; C:\Windows\system32\DRIVERS\nvm60x32.sys [2006-11-02 429056]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2006-12-07 4456416]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2006-09-15 11520]
R3 s3017bus;Sony Ericsson Device 3017 driver (WDM); C:\Windows\system32\DRIVERS\s3017bus.sys [2007-12-10 83880]
R3 s3017mdfl;Sony Ericsson Device 3017 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s3017mdfl.sys [2007-12-10 15016]
R3 s3017mdm;Sony Ericsson Device 3017 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s3017mdm.sys [2007-12-10 110632]
R3 s3017mgmt;Sony Ericsson Device 3017 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s3017mgmt.sys [2007-12-10 104616]
R3 s3017obex;Sony Ericsson Device 3017 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s3017obex.sys [2007-12-10 100648]
R3 s3017unic;Sony Ericsson Device 3017 USB Ethernet Emulation SEMC3017 (WDM); C:\Windows\system32\DRIVERS\s3017unic.sys [2007-12-10 110120]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-18 88576]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2006-11-15 179256]
R3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-18 134016]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2006-10-19 659968]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-18 11264]
R3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-18 39936]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-18 83328]
S3 BCM43XV;Pilote de la carte réseau extensible Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-17 534016]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]
S3 E100B;Pilote de carte Intel (R) PRO; C:\Windows\system32\DRIVERS\e100b325.sys [2006-11-02 163328]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2006-10-19 1380864]
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]
S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]
S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]
S3 R5U870FLx86;R5U870 UVC Lower Filter ; C:\Windows\System32\Drivers\R5U870FLx86.sys [2006-10-19 73344]
S3 R5U870FUx86;R5U870 UVC Upper Filter ; C:\Windows\System32\Drivers\R5U870FUx86.sys [2006-10-19 43904]
S3 s3017nd5;Sony Ericsson Device 3017 USB Ethernet Emulation SEMC3017 (NDIS); C:\Windows\system32\DRIVERS\s3017nd5.sys [2007-12-10 25512]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 a2AntiMalware;a-squared Anti-Malware Service; C:\Program Files\a-squared Anti-Malware\a2service.exe [2008-12-14 419448]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2008-11-26 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2008-11-26 155160]
R2 CLCapSvc;CyberLink Background Capture Service (CBCS); C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe [2006-11-24 270431]
R2 CLSched;CyberLink Task Scheduler (CTS); C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe [2006-11-24 118877]
R2 HP Health Check Service;HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2006-12-04 58984]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2006-05-02 135168]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-10-19 61440]
R2 sdAuxService;PC Tools Auxiliary Service; C:\P

Re,

on va continuer comme ça :

) Imprime ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.

2) Télécharge Malwarebytes' Anti-Malware (MBAM) et enregistre le sur ton Bureau à partir de ce lien :

https://download.cnet.com/Malwarebytes/3000-8022_4-10804572.html

3) A la fin du téléchargement, ferme toutes les fenêtres et programmes, y compris celui-ci.

4) Double-clique sur l'icône Download_mbam-setup.exe sur ton bureau pour démarrer le programme d'installation.

5) Pendant l'installation, suis les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet). N'apporte aucune modification aux réglages par défaut et, en fin d'installation, vérifie que les options Update Malwarebytes' Anti-Malware et Launch Malwarebytes' Anti-Malware sont cochées.

6) MBAM démarrera automatiquement et enverra un message demandant à mettre à jour le programme avant de lancer une analyse. Comme MBAM se met automatiquement à jour en fin d'installation, clique sur OK pour fermer la boîte de dialogue. La fenêtre principale de MBAM s'affiche :

7) Dans l'onglet analyse, vérifie que "Exécuter une analyse rapide" est coché et clique sur le bouton Rechercher pour démarrer l'analyse.

8) MBAM analyse ton ordinateur. L'analyse peut prendre un certain temps. Il suffit de vérifier de temps en temps son avancement.

9) A la fin de l'analyse, un message s'affiche indiquant la fin de l'analyse. Clique sur OK pour poursuivre.

10) Si des malwares ont été détectés, leur liste s'affiche.
En cliquant sur Suppression (?) , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

11) MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Ferme le Bloc-notes. (Le rapport peut être retrouvé sous l'onglet Rapports/logs)

12) Ferme MBAM en cliquant sur Quitter.

13) Poste le rapport dans ta réponse

Re,

alors fais ceci :

On va utiliser ComboFix.exe. Rends toi sur cette page web pour obtenir les liens de téléchargement, ainsi que des instructions pour exécuter l'outil:

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

* Vérifie que tu as fermé/désactivé tous les programmes anti-virus, anti-malware ou anti-spyware afin qu'ils n'interfèrent pas avec le travail de ComboFix.

Envoie le contenu de C:\ComboFix.txt dans ta prochaine réponse afin que je l'examine.

ComboFix 09-01-06.02 - Utilisateur 2009-01-07 17:54:12.1 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.1918.1031 [GMT 1:00]
Lancé depuis: c:\users\Utilisateur\Desktop\ComboFix.exe
* Un nouveau point de restauration a été créé
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_Boonty Games

((((((((((((((((((((((((((((( Fichiers créés du 2008-12-07 au 2009-01-07 ))))))))))))))))))))))))))))))))))))
.

2009-01-07 11:40 . 2009-01-07 11:40 <REP> d-------- c:\users\Utilisateur\AppData\Roaming\Malwarebytes
2009-01-07 11:40 . 2009-01-07 11:40 <REP> d-------- c:\users\All Users\Malwarebytes
2009-01-07 11:40 . 2009-01-07 11:40 <REP> d-------- c:\programdata\Malwarebytes
2009-01-07 11:40 . 2009-01-07 11:40 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
2009-01-07 11:40 . 2009-01-04 18:38 38,496 --a------ c:\windows\System32\drivers\mbamswissarmy.sys
2009-01-07 11:40 . 2009-01-04 18:38 15,504 --a------ c:\windows\System32\drivers\mbam.sys
2009-01-06 23:57 . 2009-01-06 23:57 <REP> d-------- c:\users\All Users\NVIDIA
2009-01-06 23:57 . 2009-01-06 23:57 <REP> d-------- c:\programdata\NVIDIA
2009-01-06 23:52 . 2009-01-07 11:03 42,514 --a------ c:\users\All Users\nvModes.dat
2009-01-06 23:52 . 2009-01-07 11:03 42,514 --a------ c:\programdata\nvModes.dat
2009-01-06 23:52 . 2007-01-03 11:20 1,732 --a------ c:\windows\System32\drivers\nvphy.bin
2009-01-06 13:35 . 2009-01-06 13:35 <REP> d-------- C:\rsit
2009-01-05 18:51 . 2009-01-05 18:52 <REP> d-------- c:\program files\a-squared Anti-Malware
2009-01-05 18:50 . 2009-01-06 22:56 <REP> d-------- c:\users\All Users\Spybot - Search & Destroy
2009-01-05 18:50 . 2009-01-06 22:56 <REP> d-------- c:\programdata\Spybot - Search & Destroy
2009-01-05 18:50 . 2009-01-05 18:51 <REP> d-------- c:\program files\Spybot - Search & Destroy
2009-01-05 16:23 . 2009-01-05 16:23 <REP> d-------- c:\users\Utilisateur\AppData\Roaming\PC Tools
2009-01-05 16:23 . 2009-01-07 18:01 <REP> d-a------ c:\users\All Users\TEMP
2009-01-05 16:23 . 2009-01-07 18:01 <REP> d-a------ c:\programdata\TEMP
2009-01-05 16:23 . 2009-01-07 11:26 <REP> d-------- c:\program files\Spyware Doctor
2009-01-05 16:23 . 2008-08-25 12:36 81,288 --a------ c:\windows\System32\drivers\iksyssec.sys
2009-01-05 16:23 . 2008-08-25 12:36 66,952 --a------ c:\windows\System32\drivers\iksysflt.sys
2009-01-05 16:23 . 2008-08-25 12:36 40,840 --a------ c:\windows\System32\drivers\ikfilesec.sys
2009-01-05 16:23 . 2008-06-02 16:19 29,576 --a------ c:\windows\System32\drivers\kcom.sys
2009-01-05 13:38 . 2009-01-05 15:52 <REP> d-------- c:\users\Utilisateur\AppData\Roaming\vlc
2009-01-05 13:37 . 2009-01-05 13:37 <REP> d-------- c:\program files\VideoLAN
2009-01-05 13:28 . 2009-01-05 13:28 <REP> d-------- c:\program files\Matroska Playback Pack
2009-01-05 13:23 . 2009-01-05 13:23 <REP> d-------- c:\users\Utilisateur\AppData\Roaming\Media Player Classic
2009-01-05 13:23 . 2009-01-05 13:23 <REP> d-------- c:\program files\Media Player Classic
2009-01-05 13:18 . 2009-01-05 13:18 <REP> d-------- c:\users\Utilisateur\AppData\Roaming\CyberLink
2009-01-04 17:08 . 2009-01-04 17:08 <REP> d-------- c:\program files\Microsoft.NET
2009-01-04 17:05 . 2009-01-05 12:09 <REP> d-------- c:\users\All Users\Microsoft Help
2009-01-04 17:05 . 2009-01-05 12:09 <REP> d-------- c:\programdata\Microsoft Help
2009-01-04 17:03 . 2009-01-04 17:03 <REP> dr-h----- C:\MSOCache
2009-01-04 16:40 . 2009-01-04 16:40 <REP> d-------- c:\users\Utilisateur\AppData\Roaming\Template
2009-01-04 16:40 . 2009-01-04 16:40 0 --a------ c:\users\Utilisateur\AppData\Roaming\wklnhst.dat
2009-01-03 18:49 . 2009-01-03 18:49 <REP> d--h----- c:\windows\Icons
2009-01-03 18:03 . 2009-01-03 18:03 <REP> d-------- c:\program files\Trend Micro
2009-01-02 10:44 . 2009-01-02 10:44 <REP> d-------- c:\users\Utilisateur\AppData\Roaming\TuneUp Software
2009-01-02 10:44 . 2009-01-02 10:44 603,904 --a------ c:\windows\System32\TUProgSt.exe
2009-01-02 10:44 . 2009-01-02 10:44 360,192 --a------ c:\windows\System32\TuneUpDefragService.exe
2009-01-02 10:44 . 2008-12-11 13:31 27,904 --a------ c:\windows\System32\uxtuneup.dll
2009-01-02 10:44 . 2008-12-11 13:31 17,152 --a------ c:\windows\System32\authuitu.dll
2009-01-02 10:43 . 2009-01-02 10:43 <REP> d-------- c:\users\All Users\TuneUp Software
2009-01-02 10:43 . 2009-01-02 10:43 <REP> d--hs---- c:\users\All Users\{55A29068-F2CE-456C-9148-C869879E2357}
2009-01-02 10:43 . 2009-01-02 10:43 <REP> d-------- c:\programdata\TuneUp Software
2009-01-02 10:43 . 2009-01-02 10:43 <REP> d--hs---- c:\programdata\{55A29068-F2CE-456C-9148-C869879E2357}
2009-01-02 10:43 . 2009-01-02 10:44 <REP> d-------- c:\program files\TuneUp Utilities 2009
2009-01-02 10:33 . 2009-01-02 10:33 <REP> d-------- c:\program files\CCleaner
2009-01-01 13:24 . 2008-11-26 18:17 51,792 --a------ c:\windows\System32\drivers\aswMonFlt.sys
2009-01-01 12:26 . 2009-01-01 12:26 <REP> d-------- c:\program files\Alwil Software
2009-01-01 12:15 . 2009-01-01 12:15 2 --a------ C:\339834068
2009-01-01 12:14 . 2009-01-01 12:14 108,336 --a------ c:\windows\System32\mswinsck.ocx
2008-12-28 15:40 . 2008-12-28 15:40 <REP> d-------- c:\users\Utilisateur\AppData\Roaming\HP
2008-12-28 15:40 . 2008-12-28 15:40 <REP> d-------- c:\users\All Users\HP
2008-12-28 15:40 . 2008-12-28 15:40 <REP> d-------- c:\programdata\HP
2008-12-25 11:31 . 2008-12-25 11:31 <REP> d-------- c:\users\All Users\BOONTY
2008-12-25 11:31 . 2008-12-25 11:31 <REP> d-------- c:\programdata\BOONTY
2008-12-25 11:30 . 2008-12-25 11:30 <REP> d-------- C:\Boonty
2008-12-25 10:28 . 2008-12-25 10:28 0 --ah----- c:\windows\System32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
2008-12-25 10:06 . 2008-12-25 10:06 <REP> d-------- c:\users\All Users\BVRP Software
2008-12-25 10:06 . 2008-12-25 10:06 <REP> d-------- c:\programdata\BVRP Software
2008-12-25 10:06 . 2008-12-25 10:08 <REP> d-------- c:\program files\Avanquest update
2008-12-25 10:02 . 2008-12-25 10:02 <REP> d-------- c:\users\Utilisateur\AppData\Roaming\InstallShield
2008-12-25 10:02 . 2008-12-25 10:02 <REP> d-------- c:\users\All Users\Sony Ericsson
2008-12-25 10:02 . 2008-12-25 10:02 <REP> d-------- c:\programdata\Sony Ericsson
2008-12-25 10:02 . 2008-12-25 10:02 <REP> d-------- c:\program files\Sony Ericsson
2008-12-25 10:02 . 2007-12-10 14:22 110,632 --a------ c:\windows\System32\drivers\s3017mdm.sys
2008-12-25 10:02 . 2007-12-10 14:22 110,120 --a------ c:\windows\System32\drivers\s3017unic.sys
2008-12-25 10:02 . 2007-12-10 14:22 104,616 --a------ c:\windows\System32\drivers\s3017mgmt.sys
2008-12-25 10:02 . 2007-12-10 14:22 100,648 --a------ c:\windows\System32\drivers\s3017obex.sys
2008-12-25 10:02 . 2007-12-10 14:22 83,880 --a------ c:\windows\System32\drivers\s3017bus.sys
2008-12-25 10:02 . 2007-12-10 14:22 25,512 --a------ c:\windows\System32\drivers\s3017nd5.sys
2008-12-25 10:02 . 2007-12-10 14:22 15,016 --a------ c:\windows\System32\drivers\s3017mdfl.sys
2008-12-25 10:02 . 2007-12-10 14:22 12,200 --a------ c:\windows\System32\drivers\s3017whnt.sys
2008-12-25 10:02 . 2007-12-10 14:22 12,200 --a------ c:\windows\System32\drivers\s3017wh.sys
2008-12-25 10:02 . 2007-12-10 14:22 12,200 --a------ c:\windows\System32\drivers\s3017cmnt.sys
2008-12-25 10:02 . 2007-12-10 14:22 12,200 --a------ c:\windows\System32\drivers\s3017cm.sys
2008-12-25 10:02 . 2007-12-10 14:22 10,792 --a------ c:\windows\System32\drivers\s3017cr.sys
2008-12-24 22:45 . 2008-12-24 22:45 1,390,730 --a------ c:\windows\System32\AutoPartNt.exe
2008-12-24 22:45 . 2008-12-24 22:46 1,024 --a------ c:\windows\System32\AutoPartNt.let
2008-12-24 22:34 . 2008-12-24 22:34 <REP> d-------- c:\program files\Common Files\Acronis
2008-12-24 19:19 . 2008-12-24 19:19 <REP> d-------- c:\users\All Users\Acronis
2008-12-24 19:19 . 2008-12-24 19:19 <REP> d-------- c:\programdata\Acronis
2008-12-23 22:08 . 2008-12-23 22:08 0 --ah----- c:\windows\System32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2008-12-23 20:08 . 2009-01-05 16:36 <REP> d-------- c:\users\Utilisateur\AppData\Roaming\Azureus
2008-12-23 20:08 . 2008-12-23 20:08 <REP> d-------- c:\users\All Users\Azureus
2008-12-23 20:08 . 2008-12-23 20:08 <REP> d-------- c:\programdata\Azureus
2008-12-23 20:08 . 2008-12-23 20:08 <REP> d-------- c:\program files\Vuze
2008-12-23 01:20 . 2008-08-22 10:57 156,160 --a------ c:\windows\System32\msls31.dll
2008-12-23 01:20 . 2008-08-22 11:06 72,704 --a------ c:\windows\System32\admparse.dll
2008-12-23 01:20 . 2008-08-22 11:04 66,560 --a------ c:\windows\System32\tdc.ocx
2008-12-23 01:20 . 2008-08-22 11:04 48,128 --a------ c:\windows\System32\mshtmler.dll
2008-12-23 01:20 . 2008-08-22 11:07 18,944 --a------ c:\windows\System32\corpol.dll
2008-12-23 00:59 . 2008-12-23 00:59 <REP> d-------- C:\PerfLogs
2008-12-23 00:32 . 2008-12-23 00:09 152,576 --a------ c:\windows\System32\SPWizUI.dll
2008-12-23 00:32 . 2008-12-23 00:09 47,560 --a------ c:\windows\System32\SPReview.exe
2008-12-23 00:17 . 2008-01-18 23:33 193,024 --a------ c:\windows\System32\recdisc.exe
2008-12-23 00:17 . 2008-01-18 23:36 6,656 --a------ c:\windows\System32\sdspres.dll
2008-12-23 00:16 . 2008-01-18 23:33 599,552 --a------ c:\windows\System32\vsp1cln.exe
2008-12-23 00:16 . 2008-01-18 23:36 142,336 --a------ c:\windows\System32\spp.dll
2008-12-23 00:16 . 2008-01-18 23:36 28,160 --a------ c:\windows\System32\sxproxy.dll
2008-12-23 00:14 . 2008-01-18 23:38 4,595,712 --a------ c:\windows\System32\AuthFWSnapin.dll
2008-12-23 00:11 . 2008-01-18 23:33 44,032 --a------ c:\windows\System32\cbsra.exe
2008-12-23 00:09 . 2008-12-23 00:34 196,608 --a------ c:\windows\SPInstall.etl
2008-12-22 23:40 . 2008-12-24 22:35 114,048 --a------ c:\windows\System32\drivers\snapman.sys
2008-12-22 23:39 . 2008-12-22 23:39 <REP> d-------- c:\program files\Acronis
2008-12-22 23:31 . 2008-12-22 23:31 <REP> d-------- c:\program files\Microsoft Silverlight
2008-12-22 23:28 . 2008-12-22 23:28 <REP> d-------- c:\users\All Users\Messenger Plus!
2008-12-22 23:28 . 2008-12-22 23:28 <REP> d-------- c:\programdata\Messenger Plus!
2008-12-22 21:37 . 2008-12-22 21:37 361,984 --a------ c:\windows\System32\IPSECSVC.DLL
2008-12-22 21:37 . 2008-12-22 21:37 272,896 --a------ c:\windows\System32\polstore.dll
2008-12-22 21:37 . 2008-12-22 21:37 61,440 --a------ c:\windows\System32\winipsec.dll
2008-12-22 21:37 . 2008-12-22 21:37 28,672 --a------ c:\windows\System32\FwRemoteSvr.dll
2008-12-22 21:36 . 2008-12-22 21:36 1,820 --a------ c:\windows\System32\rasctrnm.h
2008-12-22 21:35 . 2008-12-22 21:35 241,152 --a------ c:\windows\System32\PortableDeviceApi.dll
2008-12-22 21:35 . 2008-12-22 21:35 160,768 --a------ c:\windows\System32\PortableDeviceTypes.dll
2008-12-22 21:35 . 2008-12-22 21:35 94,720 --a------ c:\windows\System32\PortableDeviceClassExtension.dll
2008-12-22 21:29 . 2008-12-22 21:29 428,544 --a------ c:\windows\System32\EncDec.dll
2008-12-22 21:29 . 2008-12-22 21:29 293,376 --a------ c:\windows\System32\psisdecd.dll
2008-12-22 21:29 . 2008-12-22 21:29 217,088 --a------ c:\windows\System32\psisrndr.ax
2008-12-22 21:29 . 2008-12-22 21:29 177,664 --a------ c:\windows\System32\mpg2splt.ax
2008-12-22 21:29 . 2008-12-22 21:29 80,896 --a------ c:\windows\System32\MSNP.ax
2008-12-22 21:29 . 2008-12-22 21:29 69,632 --a------ c:\windows\System32\Mpeg2Data.ax
2008-12-22 21:29 . 2008-12-22 21:29 57,856 --a------ c:\windows\System32\MSDvbNP.ax

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-06 11:48 --------- d-----w c:\program files\Google
2009-01-05 10:30 --------- d-----w c:\programdata\Symantec
2009-01-05 10:30 --------- d-----w c:\program files\Common Files\Symantec Shared
2009-01-04 16:09 --------- d-----w c:\program files\Microsoft Works
2009-01-02 18:58 --------- d-----w c:\program files\Common Files\Adobe
2008-12-25 09:06 --------- d--h--w c:\program files\InstallShield Installation Information
2008-12-23 00:13 174 --sha-w c:\program files\desktop.ini
2008-12-23 00:03 --------- d-----w c:\program files\Windows Sidebar
2008-12-23 00:03 --------- d-----w c:\program files\Windows Photo Gallery
2008-12-23 00:03 --------- d-----w c:\program files\Windows Mail
2008-12-23 00:03 --------- d-----w c:\program files\Windows Journal
2008-12-23 00:03 --------- d-----w c:\program files\Windows Defender
2008-12-23 00:03 --------- d-----w c:\program files\Windows Collaboration
2008-12-23 00:03 --------- d-----w c:\program files\Windows Calendar
2008-12-22 23:40 82,432 ----a-w c:\windows\System32\axaltocm.dll
2008-12-22 23:40 101,888 ----a-w c:\windows\System32\ifxcardm.dll
2008-12-22 20:19 541,696 ----a-w c:\windows\AppPatch\AcLayers.dll
2008-12-22 20:19 52,736 ----a-w c:\windows\AppPatch\iebrshim.dll
2008-12-22 20:19 460,288 ----a-w c:\windows\AppPatch\AcSpecfc.dll
2008-12-22 20:19 2,560 ----a-w c:\windows\AppPatch\AcRes.dll
2008-12-22 20:19 2,154,496 ----a-w c:\windows\AppPatch\AcGenral.dll
2008-12-22 20:19 173,056 ----a-w c:\windows\AppPatch\AcXtrnal.dll
2008-12-22 19:58 801,280 ----a-w c:\windows\System32\NaturalLanguage6.dll
2008-12-22 19:58 6,917,120 ----a-w c:\windows\System32\NlsLexicons0c1a.dll
2008-12-22 19:58 4,495,360 ----a-w c:\windows\System32\NlsData0816.dll
2008-12-22 19:58 4,495,360 ----a-w c:\windows\System32\NlsData0416.dll
2008-12-22 19:58 4,495,360 ----a-w c:\windows\System32\NlsData0414.dll
2008-12-22 19:58 4,495,360 ----a-w c:\windows\System32\NlsData001d.dll
2008-12-22 19:58 2,643,456 ----a-w c:\windows\System32\NlsData000c.dll
2008-12-22 19:58 2,342,912 ----a-w c:\windows\System32\NlsData000d.dll
2008-12-22 19:58 1,965,056 ----a-w c:\windows\System32\NlsData0c1a.dll
2008-12-22 19:58 1,965,056 ----a-w c:\windows\System32\NlsData081a.dll
2008-12-22 19:58 1,965,056 ----a-w c:\windows\System32\NlsData001b.dll
2008-12-22 19:58 1,965,056 ----a-w c:\windows\System32\NlsData001a.dll
2008-12-22 19:58 1,965,056 ----a-w c:\windows\System32\NlsData000f.dll
2008-12-21 14:58 --------- d-sh--w c:\programdata\Modèles
2008-12-21 14:58 --------- d-sh--w c:\programdata\Menu Démarrer
2008-12-21 14:58 --------- d-sh--w c:\programdata\Favoris
2008-12-21 14:58 --------- d-sh--w c:\programdata\Documents
2008-12-21 14:58 --------- d-sh--w c:\programdata\Bureau
2008-12-21 14:58 --------- d-sh--w c:\programdata\Application Data
2008-12-21 14:58 --------- d-sh--w c:\program files\Fichiers communs
2008-12-02 21:37 49,480 ----a-w c:\windows\System32\sirenacm.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-18 125952]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-07-07 2156368]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2008-12-02 3882312]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-01-06 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-03-28 1045800]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2006-12-02 167936]
"QlbCtrl"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2006-11-06 159744]
"WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2006-10-18 317152]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2006-10-18 472800]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-26 81000]
"ISTray"="c:\program files\Spyware Doctor\pctsTray.exe" [2008-08-25 1168264]
"a-squared"="c:\program files\a-squared Anti-Malware\a2guard.exe" [2008-12-14 2782352]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-12-04 13556256]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-12-04 92704]
"Windows Service Processor"="shdocvw.exe" [2008-12-22 c:\windows\System32\shdocvw.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"Windows Service Processor"="shdocvw.exe" [2008-12-22 c:\windows\System32\shdocvw.exe]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"WindowsWelcomeCenter"=rundll32.exe oobefldr.dll,ShowWelcomeCenter
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" /background

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"HP Software Update"=c:\program files\Hp\HP Software Update\HPWuSchd2.exe
"HP Health Check Scheduler"=c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0\bin\jusched.exe"
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{99A15342-19AD-4E5C-A919-38CF73877D4A}"= UDP:c:\program files\HP\QuickPlay\QP.exe:QP
"{F0A27DAD-A71E-436D-BC91-D7848825ACEF}"= TCP:c:\program files\HP\QuickPlay\QP.exe:QP
"TCP Query User{69ED9FA7-8AA4-4793-A6B3-F90DCBD03832}c:\\program files\\vuze\\azureus.exe"= UDP:c:\program files\vuze\azureus.exe:Azureus
"UDP Query User{7ECEE20F-5190-472F-89A0-3A93D41B2518}c:\\program files\\vuze\\azureus.exe"= TCP:c:\program files\vuze\azureus.exe:Azureus
"{1AA62717-FC4C-4AFF-B59C-2DEAB15ADB6B}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{F42E53CE-3A69-4030-86F2-02719AD51ED8}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"TCP Query User{67EFBFC0-DD8F-4B5E-A860-CD03F351AD76}c:\\program files\\vuze\\azureus.exe"= UDP:c:\program files\vuze\azureus.exe:Azureus
"UDP Query User{FA4FB1C9-21F5-47C4-B93D-CA9E983D629F}c:\\program files\\vuze\\azureus.exe"= TCP:c:\program files\vuze\azureus.exe:Azureus

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"$Œ¨vx@öv"= $Œ¨vx@öv:*:Enabled:Windows Service Processor

R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [2009-01-01 111184]
R4 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [2009-01-01 20560]
R4 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [2009-01-01 51792]
R4 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [2009-01-05 356920]
R4 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\System32\TUProgSt.exe [2009-01-02 603904]
S3 R5U870FLx86;R5U870 UVC Lower Filter ;c:\windows\System32\drivers\R5U870FLx86.sys [2006-10-19 73344]
S3 R5U870FUx86;R5U870 UVC Upper Filter ;c:\windows\System32\drivers\R5U870FUx86.sys [2006-10-19 43904]
S3 s3017bus;Sony Ericsson Device 3017 driver (WDM);c:\windows\System32\drivers\s3017bus.sys [2008-12-25 83880]
S3 s3017mdfl;Sony Ericsson Device 3017 USB WMC Modem Filter;c:\windows\System32\drivers\s3017mdfl.sys [2008-12-25 15016]
S3 s3017mdm;Sony Ericsson Device 3017 USB WMC Modem Driver;c:\windows\System32\drivers\s3017mdm.sys [2008-12-25 110632]
S3 s3017mgmt;Sony Ericsson Device 3017 USB WMC Device Management Drivers (WDM);c:\windows\System32\drivers\s3017mgmt.sys [2008-12-25 104616]
S3 s3017nd5;Sony Ericsson Device 3017 USB Ethernet Emulation SEMC3017 (NDIS);c:\windows\System32\drivers\s3017nd5.sys [2008-12-25 25512]
S3 s3017obex;Sony Ericsson Device 3017 USB WMC OBEX Interface;c:\windows\System32\drivers\s3017obex.sys [2008-12-25 100648]
S3 s3017unic;Sony Ericsson Device 3017 USB Ethernet Emulation SEMC3017 (WDM);c:\windows\System32\drivers\s3017unic.sys [2008-12-25 110120]
S4 AcronisOSSReinstallSvc;Acronis OS Selector Reinstall Service;c:\program files\Common Files\Acronis\Partition Suite\oss_reinstall_svc.exe [2007-03-09 2235793]

--- Other Services/Drivers In Memory ---

*Deregistered* - mchInjDrv

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3278e38f-cf66-11dd-a3a8-806e6f6e6963}]
\shell\AutoRun\command - E:\Start.exe
.
Contenu du dossier 'Tâches planifiées'

2009-01-07 c:\windows\Tasks\Maintenance en 1 clic.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-12-12 15:04]

2009-01-07 c:\windows\Tasks\User_Feed_Synchronization-{BC15957C-856C-4294-8592-9A47F1994B75}.job
- c:\windows\system32\msfeedssync.exe [2008-08-22 11:05]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=FR_FR&c=71&bd=Pavilion&pf=laptop
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-07 18:01:31
Windows 6.0.6001 Service Pack 1 NTFS

detected NTDLL code modification:
ZwClose

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'Explorer.exe'(4568)
c:\windows\System32\msxml3.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\System32\nvvsvc.exe
c:\windows\System32\audiodg.exe
c:\windows\System32\rundll32.exe
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\program files\a-squared Anti-Malware\a2service.exe
c:\program files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Spyware Doctor\pctsSvc.exe
c:\windows\System32\drivers\XAudio.exe
c:\program files\HP\QuickPlay\Kernel\TV\CLSched.exe
c:\program files\Hewlett-Packard\Shared\hpqwmiex.exe
c:\program files\Alwil Software\Avast4\ashMaiSv.exe
c:\program files\Alwil Software\Avast4\ashWebSv.exe
c:\windows\System32\conime.exe
c:\program files\Alwil Software\Avast4\ashDisp.exe
c:\windows\System32\rundll32.exe
c:\windows\ehome\ehmsas.exe
c:\progra~1\HEWLET~1\Shared\HPQTOA~1.EXE
c:\program files\Windows Media Player\wmpnscfg.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\Synaptics\SynTP\SynTPHelper.exe
c:\program files\Hewlett-Packard\HP Health Check\HPHC_Service.exe
.
**************************************************************************
.
Heure de fin: 2009-01-07 18:07:41 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-01-07 17:06:07

Avant-CF: 43 035 607 040 octets libres
Après-CF: 42,561,544,192 octets libres

321 --- E O F --- 2009-01-06 22:52:58

Re,

Rends toi sur ce site :

https://www.virustotal.com/gui/

Clique sur parcourir et cherche ce fichier : c:\WINDOWS\winsxs\x86_microsoft-windows-shdocvw_31bf3856ad364e35_6.0.6001.18000_none_e774ed850be62dd0\shdocvw.dll

Clique sur Send File.

Un rapport va s'élaborer ligne à ligne.

Attends la fin. Il doit comprendre la taille du fichier envoyé.

Sauvegarde le rapport avec le bloc-note.

Copie le dans ta réponse.

Si VirusTotal indique que le fichier a déjà été analysé, cliquer sur le bouton Reanalyse le fichier maintenant

File size: 1067520 bytes
MD5...: 86b89709bdfc7a59d566590cc30cdbb1
SHA1..: aa2fa1674d9a281d33c88f8d242357b13dde888b
SHA256: d462611aa108d46166cce71430f9500b9eaedd1b52f2144bea34e689c9b41315
SHA512: c41766d3aeef5446fe4b1a9f74cfe5ac0eb58653307f541018427ec896676079
d8a2832fd17d98d8c7f6c6f80bb2d9971f6fd9982c51af80602422e8b5e433c7

ssdeep: 12288:MdKGHCO9r8LkY/YERoeDszyl48pvZ/uqPWbbwWRHsz6CIr5xu6m9sm:9/L
dwUoopZGqELRq5Ilk

PEiD..: -
TrID..: File type identification
DirectShow filter (47.4%)
Windows OCX File (29.1%)
Win32 EXE PECompact compressed (generic) (9.7%)
Win32 Executable MS Visual C++ (generic) (8.8%)
Win32 Executable Generic (2.0%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x711d5af9
timedatestamp.....: 0x4791a756 (Sat Jan 19 07:31:34 2008)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x56fac 0x57000 6.50 f092958fe9f883f624650b09f724f885
.data 0x58000 0x15b0 0x1400 2.89 bf3c2036be91b46340db8705be910f92
.rsrc 0x5a000 0xa80f8 0xa8200 5.41 2ea71a8dfe71cc1a03a2651c1d4b6197
.reloc 0x103000 0x3ee0 0x4000 6.65 0c7bb1334257b6e5dfacc7d494cd56ea

( 7 imports )
> SHELL32.dll: DragQueryFileW, -, SHBindToFolderIDListParentEx, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, SHChangeNotify, SHSetTemporaryPropertyForItem, SHBindToFolderIDListParent, -, -, -, SHCreateShellItemArrayFromDataObject, -, SHGetIconOverlayIndexW, SHCreateItemWithParent, -, SHBrowseForFolderW, SHFileOperationW, -, SHGetPathFromIDListW, SHBindToParent, -, -, -, SHGetSpecialFolderLocation, SHCreateItemFromIDList, SHCreateShellItemArrayFromIDLists, SHGetTemporaryPropertyForItem, -, -, -, -, -, ShellExecuteW, ExtractIconExW, SHGetFileInfoW, -, -, SHGetSpecialFolderPathW, -, -, SHBindToObject, -, -, SHParseDisplayName, -, -, ShellExecuteExW, -, -, -, SHEvaluateSystemCommandTemplate
> SHLWAPI.dll: SHSetValueW, -, -, -, SHDeleteKeyW, -, StrTrimW, PathStripToRootW, PathIsUNCServerShareW, -, -, PathAppendW, -, PathFindFileNameW, PathFindExtensionW, -, -, StrCmpIW, -, -, StrPBrkW, -, GetMenuPosFromID, -, PathIsRelativeW, -, -, -, StrRetToStrW, -, -, -, PathIsUNCW, -, -, PathRemoveFileSpecW, -, -, -, -, PathIsContentTypeW, UrlUnescapeW, HashData, -, UrlCanonicalizeW, PathCombineW, UrlCreateFromPathW, UrlApplySchemeW, SHEnumValueW, -, UrlGetPartW, PathCreateFromUrlAlloc, -, PathCanonicalizeW, -, -, -, SHCreateShellPalette, -, -, PathGetDriveNumberW, -, -, -, -, -, StrRetToBufW, -, -, -, SHQueryValueExW, -, -, -, SHOpenRegStream2W, -, StrToIntW, UrlCombineW, PathIsURLW, -, -, -, -, UrlGetLocationW, StrCmpW, SHRegGetValueW, StrCmpNW, -, StrChrW, SHGetValueW, PathUndecorateW, AssocIsDangerous, -, PathParseIconLocationW, AssocGetPerceivedType, -, -, -, -, -, -, -, SHStrDupW, -, -, -, -, -, -, -, -, -, -, -, -, PathCreateFromUrlW, -, -, -, StrStrW, StrCmpNIW, StrStrIW, StrDupW, -, -, -, StrFormatByteSizeW, AssocQueryStringW
> msvcrt.dll: _adjust_fdiv, _amsg_exit, _initterm, _XcptFilter, _wcsicmp, memmove, memcpy, realloc, free, malloc, memset, _vsnwprintf, _except_handler4_common
> KERNEL32.dll: GetCurrentDirectoryW, CreateProcessW, GetSystemTimeAsFileTime, QueryPerformanceCounter, CreateMutexW, LocalReAlloc, ResetEvent, GlobalSize, CreateJobObjectW, AssignProcessToJobObject, ResumeThread, GetProcessId, CreateIoCompletionPort, SetInformationJobObject, GetQueuedCompletionStatus, DeactivateActCtx, ActivateActCtx, ReleaseActCtx, CreateActCtxW, CompareStringW, DelayLoadFailureHook, GlobalLock, GlobalUnlock, GetUserDefaultUILanguage, InterlockedExchange, GetLocaleInfoW, LoadLibraryA, InterlockedCompareExchange, WideCharToMultiByte, GetCurrentProcessId, OpenMutexA, SetEvent, WaitForSingleObject, TerminateThread, lstrcmpA, DisableThreadLibraryCalls, TlsAlloc, TlsFree, HeapFree, GetProcessHeap, HeapAlloc, SetLastError, RaiseException, GetCurrentProcess, FlushInstructionCache, GlobalFree, GetVersionExA, lstrcmpiW, GetTempPathW, lstrcmpW, CreateEventW, GetCurrentThreadId, CreateThread, GetUserDefaultLCID, GetThreadUILanguage, GetSystemDefaultLCID, lstrlenA, MultiByteToWideChar, FormatMessageW, GetModuleFileNameW, GlobalAlloc, GetModuleHandleW, LocalFree, LocalAlloc, GetTickCount, HeapDestroy, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, InitializeCriticalSection, VirtualQuery, GetSystemInfo, VirtualAlloc, VirtualProtect, GetVersionExW, InterlockedDecrement, CloseHandle, GetProcAddress, lstrlenW, FreeLibrary, GetLastError, GetSystemDirectoryW, LoadLibraryW, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, Sleep, VirtualFree, InterlockedIncrement
> GDI32.dll: GetLayout, SelectObject, GetTextExtentPoint32W, SetBkColor, SetTextColor, CreateFontIndirectW, CreateRectRgnIndirect, CreatePalette, DeleteObject, GetStockObject, SelectPalette, RealizePalette, GetObjectW, GetPaletteEntries, SetPaletteEntries, LPtoDP, SaveDC, SetMapMode, SetWindowOrgEx, SetViewportOrgEx, DeleteDC, RestoreDC, CreateDCW, ExtTextOutW, GetDeviceCaps
> USER32.dll: GetCapture, GetFocus, IsWindowVisible, LoadStringW, EndMenu, MapWindowPoints, EnableWindow, GetDlgItem, DestroyIcon, GetDoubleClickTime, SendDlgItemMessageW, LoadIconW, SetWindowTextW, CheckDlgButton, IsDlgButtonChecked, SetWindowPlacement, GetWindowPlacement, IntersectRect, OffsetRect, GetLastActivePopup, IsCharAlphaNumericW, MessageBoxW, CharUpperW, GetSystemMetrics, SystemParametersInfoA, GetWindowTextW, CreatePopupMenu, EqualRect, DrawIconEx, GetSysColor, SetClipboardViewer, ChangeClipboardChain, MoveWindow, ScreenToClient, WindowFromPoint, GetCursorPos, RegisterClassExW, wsprintfW, GetClassInfoExW, SetWindowRgn, DrawTextW, GetKeyState, IsChild, CreateWindowExW, LoadImageW, SystemParametersInfoW, DestroyMenu, IsRectEmpty, GetAsyncKeyState, SetMenuDefaultItem, EnableMenuItem, DeleteMenu, TrackPopupMenu, GetMenuDefaultItem, GetMessagePos, SetRectEmpty, CopyRect, EndPaint, BeginPaint, GetDlgCtrlID, EnumWindows, GetWindowThreadProcessId, IsHungAppWindow, GetForegroundWindow, GetActiveWindow, FindWindowW, RegisterClipboardFormatW, CharNextW, DispatchMessageW, TranslateMessage, SendMessageTimeoutW, PeekMessageW, GetMenuItemInfoW, GetMenuItemCount, RemoveMenu, GetMonitorInfoW, MonitorFromRect, PostQuitMessage, MsgWaitForMultipleObjects, GetClassNameW, GetKeyboardLayout, MonitorFromWindow, GetShellWindow, InsertMenuW, GetMenuStringW, GetMenuItemID, ActivateKeyboardLayout, DrawTextExW, GetWindowDC, RegisterWindowMessageW, SetWindowPos, KillTimer, SetRect, GetClientRect, SetForegroundWindow, ShowWindow, LoadCursorW, SetCursor, GetParent, SetFocus, IsWindowEnabled, SetTimer, GetWindowRect, GetWindowLongA, SendMessageW, PostMessageW, GetAncestor, IsIconic, InvalidateRect, DestroyAcceleratorTable, DestroyWindow, DefWindowProcW, GetDC, CallWindowProcW, UnionRect, PtInRect, IsWindow, GetWindowLongW, EndDialog, SetWindowLongW, SetDlgItemTextW, CreateDialogParamW, DialogBoxParamW, ReleaseDC
> ADVAPI32.dll: TraceMessage, RegQueryInfoKeyW, RegEnumValueW, RegDeleteValueW, RegQueryValueW, EventRegister, EventUnregister, UnregisterTraceGuids, RegisterTraceGuidsW, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, GetUserNameW, RegEnumKeyW, RegQueryValueExW, RegCreateKeyExW, RegSetValueExW, RegDeleteKeyW, RegOpenKeyExW, EventEnabled, EventWrite, RegCloseKey

( 24 exports )
AddUrlToFavorites, DllCanUnloadNow, DllGetClassObject, DllGetVersion, DllRegisterWindowClasses, DoAddToFavDlg, DoAddToFavDlgW, DoFileDownload, DoFileDownloadEx, DoOrganizeFavDlg, DoOrganizeFavDlgW, DoPrivacyDlg, HlinkFindFrame, HlinkFrameNavigate, HlinkFrameNavigateNHL, ImportPrivacySettings, OpenURL, SHAddSubscribeFavorite, SHGetIDispatchForFolder, SetQueryNetSessionCount, SetShellOfflineState, SoftwareUpdateMessageBox, URLQualifyA, URLQualifyW

Re,

il manque la liste des résultats des détections par les antivirus.

oui mais comme je n'avai rien vu de spécial, je me suis dit que ca ne valai pas la peine... désolé

AhnLab-V3 2008.12.12.2 2008.12.13 -
AntiVir 7.9.0.45 2008.12.12 -
Authentium 5.1.0.4 2008.12.12 -
Avast 4.8.1281.0 2008.12.12 -
AVG 8.0.0.199 2008.12.13 -
BitDefender 7.2 2008.12.13 -
CAT-QuickHeal 10.00 2008.12.12 -
ClamAV 0.94.1 2008.12.13 -
Comodo 741 2008.12.12 -
DrWeb 4.44.0.09170 2008.12.13 -
eSafe 7.0.17.0 2008.12.11 -
eTrust-Vet 31.6.6258 2008.12.12 -
Ewido 4.0 2008.12.13 -
F-Prot 4.4.4.56 2008.12.12 -
F-Secure 8.0.14332.0 2008.12.13 -
Fortinet 3.117.0.0 2008.12.13 -
GData 19 2008.12.13 -
Ikarus T3.1.1.45.0 2008.12.13 -
K7AntiVirus 7.10.552 2008.12.12 -
Kaspersky 7.0.0.125 2008.12.13 -
McAfee 5462 2008.12.13 -
McAfee+Artemis 5462 2008.12.13 -
Microsoft 1.4205 2008.12.13 -
NOD32 3688 2008.12.12 -
Norman 5.80.02 2008.12.12 -
Panda 9.0.0.4 2008.12.13 -
PCTools 4.4.2.0 2008.12.13 -
Prevx1 V2 2008.12.13 -
Rising 21.07.52.00 2008.12.13 -
SecureWeb-Gateway 6.7.6 2008.12.12 -
Sophos 4.36.0 2008.12.13 -
Sunbelt 3.2.1801.2 2008.12.11 -
Symantec 10 2008.12.13 -
TheHacker 6.3.1.2.186 2008.12.12 -
TrendMicro 8.700.0.1004 2008.12.12 -
VBA32 3.12.8.10 2008.12.12 -
ViRobot 2008.12.12.1515 2008.12.12 -
VirusBuster 4.5.11.0 2008.12.12 -

Re,

ces fichiers C:\Windows\system32\shdocvw.exe et similaires

continuent de me poser problème.

Ouvre ce lien :

https://www.broadcom.com/

enregistre toi et soumets le fichier ci-dessus.

Donne le rapport ou sa référence.

=========================

euh... qu'est ce que je fait?

" The submitted file is not detected. "

Re,

euh .....

tu réessayes.