Pc vérolé et firefox qui deconne

Keii -  
Bonjour,

Mon pc est vérolé et depuis peu firefix déconne.
Ce dernier rame a fond et il faut cliquer plusieurs fois pour afficher une page

puis-je poster mon log Hijackthis svp?

Je suis sous windows XP, Media center edition, version 2002, SP2

merci
Configuration: Windows XP
Firefox 3.0.4

5 réponses

  1. jlpjlp Contributeur sécurité
    slt,

    Télécharge ici :

    http://images.malwareremoval.com/random/RSIT.exe

    random's system information tool (RSIT) par andom/random et sauvegarde-le sur le Bureau.

    Double-clique sur RSIT.exe afin de lancer RSIT.

    Clique Continue à l'écran Disclaimer.

    Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

    Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.

    Poste le contenu de log.txt (<<qui sera affiché)
    ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).

    NB : Les rapports sont sauvegardés dans le dossier C:\rsit
    0
    1. Keii
      Merci pour le tuyau.

      voici le log:

      Logfile of random's system information tool 1.05 (written by random/random)
      Run by Trinh at 2009-03-12 21:26:10
      Microsoft Windows XP Professionnel Service Pack 2
      System drive C: has 46 GB (58%) free of 78 GB
      Total RAM: 2047 MB (78% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 21:26:12, on 12/03/2009
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Dassault Systemes\B17\intel_a\code\bin\CATSysDemon.exe
      C:\WINDOWS\eHome\ehRecvr.exe
      C:\WINDOWS\eHome\ehSched.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\WINDOWS\system\msddll.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\ehome\ehtray.exe
      C:\Program Files\Eset\nod32kui.exe
      C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIABE.EXE
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
      C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
      C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
      C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
      C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\WINDOWS\system\svhost.exe
      C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
      C:\Program Files\Eset\nod32krn.exe
      C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\dllhost.exe
      C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
      C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe
      C:\WINDOWS\eHome\ehmsas.exe
      C:\WINDOWS\system\msile.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Documents and Settings\Trinh\Bureau\RSIT.exe
      C:\Program Files\trend micro\Trinh.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.generation-nt.com
      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/md5auth.srf?lc=1036
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\system.exe
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
      O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
      O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O2 - BHO: PicLens plug-in for Internet Explorer - {EAEE5C74-6D0D-4aca-9232-0DA4A7B866BA} - C:\Program Files\PicLensIE\PicLens.dll
      O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
      O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
      O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
      O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
      O4 - HKLM\..\Run: [EPSON Stylus D88 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIABE.EXE /P23 "EPSON Stylus D88 Series" /O5 "LPT1:" /M "Stylus D88"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
      O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
      O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -startup
      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: Launch PicLens - {3437D640-C91A-458f-89F5-B9095EA4C28B} - C:\Program Files\PicLensIE\PicLens.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=www.generation-nt.com
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
      O23 - Service: Backbone Service (BBDemon) - Dassault Systemes - C:\Program Files\Dassault Systemes\B17\intel_a\code\bin\CATSysDemon.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: msddll - Unknown owner - C:\WINDOWS\system\msddll.exe
      O23 - Service: microsoft install le (msile) - Unknown owner - C:\WINDOWS\system\msile.exe
      O23 - Service: Network Monitor service (MSNETDED) - Unknown owner - C:\WINDOWS\system\svhost.exe
      O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
      O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
      O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
      O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
      O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
      O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
      0
      1. jlpjlp Contributeur sécurité
        Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
        http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
        Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
        • Redémarre ton ordinateur
        • Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
        • A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
        • Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
        • Choisis ton compte.
        Déroule la liste des instructions ci-dessous :
        • Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
        • Appuie sur Y pour commencer le processus de nettoyage.
        • Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
        • Appuie sur une touche pour redémarrer le PC.
        • Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
        • Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
        • Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
        • Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
        • Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum

        _____________________________

        scan rapide avec malwarebyte et colle le rapport

        https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

        _______________________________

        remets un rapport RSIt

        a plus
        0
        1. keii
          merci

          voici le rapport

          [b]SDFix: Version 1.240 [/b]
          Run by Trinh on 17/03/2009 at 20:35

          Microsoft Windows XP [version 5.1.2600]
          Running From: C:\SDFix

          [b]Checking Services [/b]:

          Restoring Default Security Values
          Restoring Default Hosts File

          Rebooting

          [b]Checking Files [/b]:

          Trojan Files Found:

          C:\WINDOWS\system32\a.exe - Deleted
          C:\WINDOWS\system32\msvcrt2.dll - Deleted

          Removing Temp Files

          [b]ADS Check [/b]:

          [b]Final Check [/b]:

          catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
          Rootkit scan 2009-03-17 20:47:47
          Windows 5.1.2600 Service Pack 2 NTFS

          scanning hidden processes ...

          scanning hidden services & system hive ...

          scanning hidden registry entries ...

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher]
          "TracesProcessed"=dword:00000184

          scanning hidden files ...

          scan completed successfully
          hidden processes: 0
          hidden services: 0
          hidden files: 0

          [b]Remaining Services [/b]:

          Authorized Application Key Export:

          [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
          "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
          "C:\\Program Files\\Dassault Systemes\\B17\\intel_a\\code\\bin\\orbixd.exe"="C:\\Program Files\\Dassault Systemes\\B17\\intel_a\\code\\bin\\orbixd.exe:*:Enabled:orbixd"
          "C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
          "C:\\Program Files\\eChanblard\\emule.exe"="C:\\Program Files\\eChanblard\\emule.exe:*:Enabled:eChanblard"
          "C:\\Program Files\\Dassault Systemes\\B17\\intel_a\\code\\bin\\CNEXT.exe"="C:\\Program Files\\Dassault Systemes\\B17\\intel_a\\code\\bin\\CNEXT.exe:*:Enabled:CATIA"
          "C:\\WINDOWS\\system\\smsc32.exe"="C:\\WINDOWS\\system\\smsc32.exe:*:WinSpooler32"
          "C:\\WINDOWS\\system\\svhost.exe"="C:\\WINDOWS\\system\\svhost.exe:*:MSNETDED"
          "C:\\WINDOWS\\System32\\64.scr"="C:\\WINDOWS\\System32\\64.scr:*:msile"
          "C:\\WINDOWS\\TEMP\\44.exe"="C:\\WINDOWS\\TEMP\\44.exe:*:WindowsTelephony"
          "C:\\WINDOWS\\TEMP\\15.exe"="C:\\WINDOWS\\TEMP\\15.exe:*:WindowsTelephony"
          "C:\\WINDOWS\\TEMP\\74.exe"="C:\\WINDOWS\\TEMP\\74.exe:*:WindowsTelephony"
          "C:\\WINDOWS\\System32\\84.scr"="C:\\WINDOWS\\System32\\84.scr:*:msile"
          "C:\\WINDOWS\\System32\\78.scr"="C:\\WINDOWS\\System32\\78.scr:*:WindowsTelephony"
          "C:\\WINDOWS\\System32\\37.scr"="C:\\WINDOWS\\System32\\37.scr:*:msile"
          "C:\\WINDOWS\\System32\\62.scr"="C:\\WINDOWS\\System32\\62.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\66.scr"="C:\\WINDOWS\\System32\\66.scr:*:WindowsTelephony"
          "C:\\WINDOWS\\System32\\17.scr"="C:\\WINDOWS\\System32\\17.scr:*:MSNETDED"
          "C:\\WINDOWS\\System32\\51.scr"="C:\\WINDOWS\\System32\\51.scr:*:WindowsTelephony"
          "C:\\WINDOWS\\System32\\63.scr"="C:\\WINDOWS\\System32\\63.scr:*:WindowsTelephony"
          "C:\\WINDOWS\\System32\\88.scr"="C:\\WINDOWS\\System32\\88.scr:*:MSNETDED"
          "C:\\WINDOWS\\TEMP\\35.exe"="C:\\WINDOWS\\TEMP\\35.exe:*:WindowsTelephony"
          "C:\\WINDOWS\\System32\\52.scr"="C:\\WINDOWS\\System32\\52.scr:*:msile"
          "C:\\WINDOWS\\System32\\67.scr"="C:\\WINDOWS\\System32\\67.scr:*:MSNETDED"
          "C:\\WINDOWS\\System32\\27.scr"="C:\\WINDOWS\\System32\\27.scr:*:WindowsTelephony"
          "C:\\WINDOWS\\System32\\10.scr"="C:\\WINDOWS\\System32\\10.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\47.scr"="C:\\WINDOWS\\System32\\47.scr:*:WindowsTelephony"
          "C:\\WINDOWS\\System32\\74.scr"="C:\\WINDOWS\\System32\\74.scr:*:WindowsTelephony"
          "C:\\WINDOWS\\System32\\22.scr"="C:\\WINDOWS\\System32\\22.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\41.scr"="C:\\WINDOWS\\System32\\41.scr:*:msile"
          "C:\\WINDOWS\\System32\\85.scr"="C:\\WINDOWS\\System32\\85.scr:*:msile"
          "C:\\WINDOWS\\System32\\61.scr"="C:\\WINDOWS\\System32\\61.scr:*:msile"
          "C:\\WINDOWS\\System32\\30.scr"="C:\\WINDOWS\\System32\\30.scr:*:msile"
          "C:\\WINDOWS\\System32\\36.scr"="C:\\WINDOWS\\System32\\36.scr:*:WindowsTelephony"
          "C:\\WINDOWS\\System32\\80.scr"="C:\\WINDOWS\\System32\\80.scr:*:WindowsTelephony"
          "C:\\WINDOWS\\System32\\68.scr"="C:\\WINDOWS\\System32\\68.scr:*:MSNETDED"
          "C:\\WINDOWS\\System32\\40.scr"="C:\\WINDOWS\\System32\\40.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\87.scr"="C:\\WINDOWS\\System32\\87.scr:*:MSNETDED"
          "C:\\WINDOWS\\System32\\13.scr"="C:\\WINDOWS\\System32\\13.scr:*:msile"
          "C:\\WINDOWS\\System32\\58.scr"="C:\\WINDOWS\\System32\\58.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\48.scr"="C:\\WINDOWS\\System32\\48.scr:*:msile"
          "C:\\WINDOWS\\System32\\83.scr"="C:\\WINDOWS\\System32\\83.scr:*:msile"
          "C:\\WINDOWS\\System32\\76.scr"="C:\\WINDOWS\\System32\\76.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\45.scr"="C:\\WINDOWS\\System32\\45.scr:*:WindowsTelephony"
          "C:\\WINDOWS\\System32\\54.scr"="C:\\WINDOWS\\System32\\54.scr:*:msile"
          "C:\\WINDOWS\\System32\\56.scr"="C:\\WINDOWS\\System32\\56.scr:*:msile"
          "C:\\WINDOWS\\System32\\38.scr"="C:\\WINDOWS\\System32\\38.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\72.scr"="C:\\WINDOWS\\System32\\72.scr:*:msile"
          "C:\\WINDOWS\\System32\\75.scr"="C:\\WINDOWS\\System32\\75.scr:*:MSNETDED"
          "C:\\WINDOWS\\System32\\24.scr"="C:\\WINDOWS\\System32\\24.scr:*:WindowsTelephony"
          "C:\\WINDOWS\\System32\\50.scr"="C:\\WINDOWS\\System32\\50.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\14.scr"="C:\\WINDOWS\\System32\\14.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\86.scr"="C:\\WINDOWS\\System32\\86.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\04.scr"="C:\\WINDOWS\\System32\\04.scr:*:WindowsTelephony"
          "C:\\WINDOWS\\system32\\system.exe"="C:\\WINDOWS\\system32\\system.exe:*:Enabled:Mozillacorp"
          "C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe:*:Disabled:Windows Live Call"
          "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Disabled:Windows Live Messenger"
          "C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Disabled:Windows Messenger"
          "C:\\Program Files\\Windows Live\\Mail\\wlmail.exe"="C:\\Program Files\\Windows Live\\Mail\\wlmail.exe:*:Disabled:Windows Live Mail"
          "C:\\WINDOWS\\system\\msile.exe"="C:\\WINDOWS\\system\\msile.exe:*:msile"
          "C:\\WINDOWS\\System32\\21.scr"="C:\\WINDOWS\\System32\\21.scr:*:msile"
          "C:\\WINDOWS\\System32\\08.scr"="C:\\WINDOWS\\System32\\08.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\06.scr"="C:\\WINDOWS\\System32\\06.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\65.scr"="C:\\WINDOWS\\System32\\65.scr:*:msile"
          "C:\\WINDOWS\\System32\\00.scr"="C:\\WINDOWS\\System32\\00.scr:*:msile"
          "C:\\WINDOWS\\System32\\77.scr"="C:\\WINDOWS\\System32\\77.scr:*:msile"
          "C:\\WINDOWS\\System32\\73.scr"="C:\\WINDOWS\\System32\\73.scr:*:msile"
          "C:\\WINDOWS\\System32\\03.scr"="C:\\WINDOWS\\System32\\03.scr:*:MSNETDED"
          "C:\\WINDOWS\\System32\\33.scr"="C:\\WINDOWS\\System32\\33.scr:*:msile"
          "C:\\WINDOWS\\System32\\31.scr"="C:\\WINDOWS\\System32\\31.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\81.scr"="C:\\WINDOWS\\System32\\81.scr:*:msile"
          "C:\\WINDOWS\\System32\\05.scr"="C:\\WINDOWS\\System32\\05.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\26.scr"="C:\\WINDOWS\\System32\\26.scr:*:msile"
          "C:\\WINDOWS\\System32\\02.scr"="C:\\WINDOWS\\System32\\02.scr:*:msrsys"
          "C:\\WINDOWS\\system\\msrsys32.exe"="C:\\WINDOWS\\system\\msrsys32.exe:*:msrsys"
          "C:\\WINDOWS\\System32\\01.scr"="C:\\WINDOWS\\System32\\01.scr:*:msile"
          "C:\\WINDOWS\\System32\\07.scr"="C:\\WINDOWS\\System32\\07.scr:*:MSNETDED"
          "C:\\WINDOWS\\System32\\42.scr"="C:\\WINDOWS\\System32\\42.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\35.scr"="C:\\WINDOWS\\System32\\35.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\43.scr"="C:\\WINDOWS\\System32\\43.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\11.scr"="C:\\WINDOWS\\System32\\11.scr:*:msile"
          "C:\\WINDOWS\\System32\\34.scr"="C:\\WINDOWS\\System32\\34.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\23.scr"="C:\\WINDOWS\\System32\\23.scr:*:MSNETDED"
          "C:\\WINDOWS\\System32\\57.scr"="C:\\WINDOWS\\System32\\57.scr:*:msile"
          "C:\\WINDOWS\\System32\\20.scr"="C:\\WINDOWS\\System32\\20.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\16.scr"="C:\\WINDOWS\\System32\\16.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\55.scr"="C:\\WINDOWS\\System32\\55.scr:*:msile"
          "C:\\WINDOWS\\System32\\82.scr"="C:\\WINDOWS\\System32\\82.scr:*:msrsys"
          "C:\\WINDOWS\\System32\\32.scr"="C:\\WINDOWS\\System32\\32.scr:*:msrsys"
          "C:\\WINDOWS\\system\\msddll.exe"="C:\\WINDOWS\\system\\msddll.exe:*:Microsoft Enabled"

          [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
          "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
          "C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe:*:Enabled:Windows Live Call"
          "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"

          [b]Remaining Files [/b]:

          File Backups: - C:\SDFix\backups\backups.zip

          [b]Files with Hidden Attributes [/b]:

          Mon 9 Mar 2009 1,048,576 ..SHR --- "C:\WINDOWS\system\msddll.exe"
          Tue 3 Mar 2009 41,987 ..SHR --- "C:\WINDOWS\system\msile.exe"
          Sat 7 Mar 2009 995,328 ..SHR --- "C:\WINDOWS\system\svhost.exe"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\101de6fc.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\102b5164.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1030d200.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\10366b08.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1039454e.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1074838.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\10794480.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\10c448cd.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\10d9908.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\10ec9795.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\114557be.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\11555e23.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\116b236.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\11931696.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\119c9ac8.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\11c1405c.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\11f5360.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\11fb9e6c.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\12210c.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\126fa8bc.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\1295c748.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\129eb87f.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\129f636.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\12c2e5.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1316ad1.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1333ed5c.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\134b69b0.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1361f49b.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\136b90.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\138c99e8.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\139441a9.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\13b10308.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\13ba84c.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\13de7b2e.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\13ec095a.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\1417265a.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\1418c39.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\141f6b7.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\142b3bee.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\143e37e8.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\144bb818.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\144f98.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\1462d535.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\14673abc.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\148a6887.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\14dd891e.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\14fc3c4.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\14fdb01.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\150778c5.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\153ad580.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\15412208.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\15452fa8.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\155d4b74.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\156641c2.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\15af2750.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\15f0098.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\160d281e.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\161d5ebe.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\163af3ea.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\165c8b32.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1664ae76.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\167329b0.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\168a592e.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\16c76580.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\16d8d2b0.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\170fbad0.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\17b9e61e.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\17c1b3a.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\17f0146.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\17fe75dc.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\180e452b.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\189c0490.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\18f3c612.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\18f8f058.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\19180525.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\193a1a14.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\195b707.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\195cc36.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\19ae3f58.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\19b6a80.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\1a0c6c90.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\1a3aa505.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1a87bb6c.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\1b25ef0.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1b32d0a0.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\1b472a0.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\1b554f4.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1baf1da0.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\1bba66f0.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\1c17d2c.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\1c3a9200.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1c451c0.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1c98b48.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\1cac4f0.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\1cd47566.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1cf05174.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1d0c20f0.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1d31e3d3.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1d3a880c.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1d58ca7c.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\1d6b9680.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\1db9a86e.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1dca6003.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\1dd05bda.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1de4678.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\1e391824.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1e48a770.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1f31fc9.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1fc4dbe9.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1fe6dfa2.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1febaa8.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\1feda75.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\20952afe.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\20ca8bec.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\20eea89c.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\219737d.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\219ae9c.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\21ae2ffa.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\21d070b5.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\21d8510.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\22554cc.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\2288bc6b.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\22a3e557.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\23442aa0.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\234cb574.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\235505a.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\2410740.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\241e1a37.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\24349574.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\248f150.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\24b3cf3c.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\24d9a406.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\24e2ef45.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\250987f8.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\25240ef6.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\25987764.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\25a0089b.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\25b239a0.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\25be65ee.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\25e3b591.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\25eab78e.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\26141af0.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\26286f0.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\26391fba.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\2673d212.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\26c4cb49.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\2715a7d0.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\2790fabc.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\27ac79e0.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\27de91cc.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\28111fc.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\287c740.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\287e450a.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\2889ead.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\295c6e00.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\296b52f7.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\298743e0.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\2a10d09a.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\2a1f8b4.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\2a5ea728.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\2abb29de.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\2b0db17.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\2b384768.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\2b53c84.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\2b7f2800.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\2bcfa46.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\2bfddc9.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\2c20b0d.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\2cb4820.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\2cb54fe.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\2cfdd41.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\2d544dd6.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\2e21f50.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\2e530e94.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\2eed33a0.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\2ef73f4.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\2f45a69c.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\2f6324b2.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\30ac59a.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\310144f0.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\3111000.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\338fe340.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\33fe4bd0.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\3400260.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\35928b11.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\36530bc0.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\36a3ae98.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\37155eb.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\372e7c.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\3735423.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\378b038.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\37baa9c0.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\37dc238.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\383f460c.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\38e6a770.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\39a46c8.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\39fa4ae.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\3a1718d8.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\3a27158.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\3b273fe.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\3b31510.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\3ba88c50.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\3bc9d57.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\3ca53c0.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\3d7cd5c.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\3e82642.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\3fcd520.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\3ff8513.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\420534c.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\42997a7.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\43a6fb9.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\44b3a68.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\44e07c2.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\4633cf0.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\46d1870.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\4ab0b26.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\4c778ca.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\4d6df48.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\4d9bef8.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\4e09716.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\4e943ac.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\4f1092e.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\4ff5336.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\51a1993.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\52c9453.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\541d66c.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\5556701.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\55a1c9.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\569ed26.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\56fc6a4.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\56fff7f.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\580c96.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\584772c.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\58ab6e0.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\5998bde.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\59e1299.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\5ad270.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\5c03888.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\5e4bec8.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\5e4e5b8.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\5eae9c6.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\5f3e573.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\62062a4.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\6340600.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\6398e4b.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\6492b4.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\64b514.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\6654de0.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\669b97a.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\677b720.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\6a0c79d.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\6a293f9.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\6ad706.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\6bcc598.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\6d2397a.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\6e06b8c.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\6e57a48.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\6e8af93.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\7087d99.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\7271454.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\72eb733.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\736fa64.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\74f5d18.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\76a55ba.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\7860b70.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\79810d2.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\798f4ae.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\79b3876.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\7a0d8d6.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\7c16d.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\7cb46a0.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\7ea6800.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\8071b08.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\8090646.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\825e21c.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\84d0142.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\8551ace.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\8559aa0.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\87ce123.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\87fa2e4.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\89a7324.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\8a69834.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\8e180b6.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\8ee03d9.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\8f86cdb.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\8fc117d.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\90bfa30.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\91ad6f0.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\91de8.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\93f95d2.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\952ca5d.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\9585719.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\977c9ca.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\978000.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\986af74.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\9993d4.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\9a8a9d0.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\9ba28da.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\9cf8c9f.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\9d0a568.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\9d8a04a.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\9f79aa6.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\a0024e.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\a10e9d8.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\a19511f.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\a1f0208.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\a3396e0.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\a3bd914.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\a4fb8cf.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\a50c9d8.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\a5507f0.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\aa0fb26.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\ad4756c.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\adfbe5a.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\b3fa2eb.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\b63f478.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\b918d30.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\b940c33.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\b9500f8.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\b9eb450.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\bc216a8.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\bce5a6c.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\bdd2640.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\bdf9a54.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\c0cb032.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\c2616c4.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\c55139a.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\c5edb48.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\c6190ec.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\c6e9977.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\c7a8470.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\c82f338.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\cad2017.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\cb98b48.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\cc91b.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\cfa25a0.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\cfcdf4a.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\d30b12e.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\d331478.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\d341636.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\d401ed0.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\d6462ac.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\d67249e.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\d6d3cf1.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\d720fdb.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\d7862d8.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\d7a3327.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\d8bac9c.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\d8ec355.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\d9e12de.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\dae3280.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\db4d40.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\dcdb594.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\dfb9810.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\e1a193c.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\e48ab0e.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\e527506.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\e6fa3de.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\e74ba80.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\eb0b8.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\ec4612c.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\ed56ce8.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\edb1f1a.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\ef8137c.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\efe1e8.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\f0921a8.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\f68401e.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\f74054e.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\f7c3d3a.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\f8d051c.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\fe12dc.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\fe4deca.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\fea19f8.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\ff29202.dll"
          Tue 10 Aug 2004 82,944 ...H. --- "C:\WINDOWS\system32\ff5e8.dll"
          Tue 10 Aug 2004 1,689,088 ...H. --- "C:\WINDOWS\system32\ffad7c0.dll"
          Thu 15 May 2008 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
          Sun 1 Feb 2009 11,656 ..SH. --- "C:\WINDOWS\system32\drivers\sysdrv32.sys"
          Wed 4 Mar 2009 626,176 ...H. --- "C:\Documents and Settings\Luan\Bureau\MECAVENIR\Travaux r‚alis‚s Entreprises\~WRL0624.tmp"
          Wed 31 Oct 2007 129,536 A..H. --- "C:\Documents and Settings\Luan\Bureau\Paprasse Taff\Coco!!!\Rapport de Stage1\~WRL1164.tmp"

          [b]Finished![/b]
          0
          2. jlpjlp Contributeur sécurité
            scan rapide avec malwarebyte et colle le rapport

            https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

            _______________________________

            mets a jour firefox
            _______________________________

            mettre a jour internet explorer
            https://www.01net.com/telecharger/windows/Internet/navigateur/fiches/33081.html

            mettre à jour adobe reader
            https://acrobat.adobe.com/fr/fr/acrobat/pdf-reader.html

            Mettre a jour java:
            https://javara.fr.malavida.com/

            Télécharge JavaRa.zip de Paul 'Prm753' McLain et Fred de Vries.
            Décompresse le fichier sur ton bureau (clique droit > Extraire tout.)
            Double-clique sur le répertoire JavaRa obtenu.
            Puis double-clique sur le fichier JavaRa.exe (le .exe peut ne pas s'afficher)
            Clique sur Search For Updates.
            Sélectionne Update Using jucheck.exe puis clique sur Search.
            Autorise le processus à se connecter s'il te le demande, clique sur Install et suis les instructions d'installation. Cela prendra quelques minutes.
            Quand l'installation est terminée, revient à l'écran de JavaRa et clique sur Remove Older Versions.
            Clique sur Oui pour confirmer. L'outil va travailler, clique ensuite sur Ok, puis une deuxième fois sur Ok.
            Un rapport va s'ouvrir, copie-colle le dans ta prochaine réponse.
            Note : le rapport se trouve aussi à la racine de la partition système, en général C:\ sous le nom JavaRa.log
            (c:\JavaRa.log)
            Ferme l'application.

            si cela ne fonctionne pas

            https://www.java.com/fr/download/windows_manual.jsp?locale=fr&host=www.java.com:80

            tu peux désinstaller les vieilles versions.

            _____________________

            remets un rapport RSIt

            a plus
            0