Processus "nom d'utilisateur suivie de .exe&q
Résolu
Stéphane
-
Lexx972 -
Lexx972 -
Bonjour,
Je rencontre un petit soucis et je ne trouve pas d'information sur internet.
J'ai un processus qui porte le nom d'utilisateur suivie de l'extension .exe qui se lance au démarage. Il est apparu après avoir installer UBCDwin et avoir créer une clé usb bootable...
Depuis ça, à chaque fois que j'insère ma clé usb, son icone devient sur d'un répertoire. Lorsque j'insère cette clé dans un autre ordinateur, il cause un problème de sécurité dans le service svhost. En analysant la clé je ne trouve aucun virus. Cependant, un utilisant un logiciel pour formater la clé il a retrouver ce même fichier nom d'utilisateur suivie de l'extension .exe sur ma clé.
Avez vous déjà eu ce problème ?
Je vous remercie par avance de votre aide.
Stéphane.
Je rencontre un petit soucis et je ne trouve pas d'information sur internet.
J'ai un processus qui porte le nom d'utilisateur suivie de l'extension .exe qui se lance au démarage. Il est apparu après avoir installer UBCDwin et avoir créer une clé usb bootable...
Depuis ça, à chaque fois que j'insère ma clé usb, son icone devient sur d'un répertoire. Lorsque j'insère cette clé dans un autre ordinateur, il cause un problème de sécurité dans le service svhost. En analysant la clé je ne trouve aucun virus. Cependant, un utilisant un logiciel pour formater la clé il a retrouver ce même fichier nom d'utilisateur suivie de l'extension .exe sur ma clé.
Avez vous déjà eu ce problème ?
Je vous remercie par avance de votre aide.
Stéphane.
10 réponses
-
voila le rapport :
############################## | FindyKill V6.005 |
# User : silotias (Administrateurs) # SILOTIAST
# Update on 11/07/09 by Chiquitine29 & C_XX
# Start at: 09:30:37 | 13/07/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Intel(R) Pentium(R) 4 CPU 3.20GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Disabled
# AV : ESET NOD32 Antivirus 3.0 3.0 [ Enabled | Updated ]
# A:\ # Lecteur de disquettes 3 ½ pouces
# C:\ # Disque fixe local # 74,52 Go (61,24 Go free) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Connexion réseau
# R:\ # Connexion réseau
# U:\ # Connexion réseau
# V:\ # Connexion réseau
# W:\ # Connexion réseau
# X:\ # Connexion réseau
# Y:\ # Connexion réseau
# Z:\ # Connexion réseau
############################## | Processus actifs |
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\lotus\notes\ntmulti.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Documents and Settings\silotias\silotias.exe
C:\Program Files\lotus\notes\framework\shared\eclipse\plugins\com.ibm.productivity.tools.base.app.win32_3.0.1.20080219-1901\soffice.exe
C:\Program Files\Kyocera Mita\FileUtility\NsCatCom.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
################## | Registre Startup |
R1 - HKCU\..\Main: "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
R1 - HKCU\..\Main: "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
R1 - HKCU\..\Main: "Start Page"="https://www.google.fr/?gws_rd=ssl"
F2 - HKLM\..\logon:"Userinit"="C:\\WINDOWS\\system32\\userinit.exe"
F2 - HKLM\..\logon:"DefaultUserName"="silotias"
F2 - HKLM\..\logon:"AltDefaultUserName"="silotias"
F2 - HKLM\..\logon:"LegalNoticeCaption"=""
F2 - HKLM\..\logon:"LegalNoticeText"=""
04 - HKLM\..\Run: ATIPTA="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
04 - HKLM\..\Run: SetRefresh=C:\Program Files\Compaq\SetRefresh\SetRefresh.exe
04 - HKLM\..\Run: Client Access Service="C:\Program Files\IBM\Client Access\cwbsvstr.exe"
04 - HKLM\..\Run: HPDJ Taskbar Utility=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
04 - HKLM\..\Run: HP Software Update="C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
04 - HKLM\..\Run: HP Component Manager="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
04 - HKLM\..\Run: DeviceDiscovery=C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
04 - HKLM\..\Run: Synchronization Manager=%SystemRoot%\system32\mobsync.exe /logon
04 - HKLM\..\Run: egui="C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
04 - HKLM\..\Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
04 - HKCU\..\Run: SODCPreLoad=C:\Program Files\lotus\notes\framework\shared\eclipse\plugins\com.ibm.productivity.tools.base.app.win32_3.0.1.20080219-1901\preload.exe C:\PROGRA~1\lotus\notes\data\WORKSP~1\.sodc\
04 - HKCU\..\Run: silotias=C:\Documents and Settings\silotias\silotias.exe
################## | Fichiers # Dossiers infectieux |
Présent ! C:\Documents and Settings\silotias\silotias.exe [de91fdae191bd615f6601926f0c358be]
################## | C:\Documents and Settings\silotias\Temporary Internet Files |
################## | All Drives ... |
################## | Registre # Clés Run infectieuses |
Présent ! HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "silotias"
################## | Registre # Mountpoints2 |
HKCU\..\..\Explorer\MountPoints2\{da903a49-a154-11dc-94ac-0019db2cb5db}
Shell\Auto\command =AdobeR.exe e
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
HKCU\..\..\Explorer\MountPoints2\{e780d21a-9cee-11dc-94a0-0019db2cb5db}
Shell\Auto\command =Start.exe
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Start.exe
################## | Etat / Services / Informations |
# Affichage des fichiers cachés : OK
# Mode sans echec : OK
# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 3 ( Good = 2 | Bad = 4 )
# Ip6Fw -> Start = 3 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )
################## | Cracks / Keygens / Serials |
################## | ! Fin du rapport # FindyKill V6.005 ! | -
-
Salut ,
▶ Télécharge random's system information tool (RSIT) et sauvegarde-le sur le Bureau.
• Double-clique sur RSIT.exe afin de lancer RSIT.
• Lis le contenu de l'écran Disclaimer puis clique sur Continue (si tu acceptes les conditions).
• Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
• Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.
• Poste le contenu de log.txt . -
Merci deton aide rapide.
Voila le contenu du fichier log :
Logfile of random's system information tool 1.06 (written by random/random)
Run by silotias at 2009-07-13 09:05:53
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 63 GB (82%) free of 76 GB
Total RAM: 894 MB (17% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:06:28, on 13/07/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\lotus\notes\ntmulti.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Documents and Settings\silotias\silotias.exe
C:\Program Files\lotus\notes\framework\shared\eclipse\plugins\com.ibm.productivity.tools.base.app.win32_3.0.1.20080219-1901\soffice.exe
C:\Program Files\Kyocera Mita\FileUtility\NsCatCom.exe
C:\Program Files\lotus\notes\framework\rcp\eclipse\plugins\com.ibm.rcp.base_6.1.2.200802211037\win32\x86\eclipse.exe
C:\Program Files\lotus\notes\framework\rcp\eclipse\plugins\com.ibm.rcp.j2se.win32.x86_1.5.0.SR6-200802211037\jre\bin\notes2w.exe
C:\Program Files\lotus\notes\nlnotes.exe
C:\PROGRA~1\IBM\CLIENT~1\Emulator\pcsws.exe
C:\Program Files\lotus\notes\ntaskldr.EXE
C:\Program Files\IBM\Client Access\Emulator\PCSCM.EXE
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\silotias\Bureau\RSIT.exe
C:\Program Files\trend micro\silotias.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.custom.oleane.com:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbit\orbitcth.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbit\GrabPro.dll
O3 - Toolbar: (no name) - {C17590D2-ECB4-4b15-8820-F58798DCC118} - (no file)
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SetRefresh] C:\Program Files\Compaq\SetRefresh\SetRefresh.exe
O4 - HKLM\..\Run: [Client Access Service] "C:\Program Files\IBM\Client Access\cwbsvstr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [SODCPreLoad] C:\Program Files\lotus\notes\framework\shared\eclipse\plugins\com.ibm.productivity.tools.base.app.win32_3.0.1.20080219-1901\preload.exe C:\PROGRA~1\lotus\notes\data\WORKSP~1\.sodc\
O4 - HKCU\..\Run: [silotias] C:\Documents and Settings\silotias\silotias.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Notes Minder.lnk = ?
O4 - Global Startup: Scanner File Utility.lnk = ?
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbit\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbit\orbitmxt.dll/204
O8 - Extra context menu item: &Webshots Photo Search - res://G:\Webshots\WSToolbar4IE.dll/MENUSEARCH.HTM
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbit\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbit\orbitmxt.dll/202
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_03\bin\npjpi150_03.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_03\bin\npjpi150_03.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://www.catalog.update.microsoft.com/ClientControl/en/x86/MuCatalogWebControl.cab?1218620865584
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = cilam.com
O17 - HKLM\Software\..\Telephony: DomainName = cilam.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = cilam.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = cilam.com
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Multi-user Cleanup Service - IBM Corp - C:\Program Files\lotus\notes\ntmulti.exe
-
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question -
de rien .
▶ Télécharge FindyKill sur ton bureau :
http://sd-1.archive-host.com/membres/up/127028005715545653/FindyKill.exe
! Déconnecte toi et ferme toutes applications en cours !
• Double clique sur "FindyKill.exe" pour lancer l'installation et laisse les paramètres d'instalation par défaut .
• Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...)
• Double-clique sur le raccourci FindyKill qui est sur ton bureau pour lancer l'outil .
• Au menu principal choisis l'option " F " pour français et tape sur [entrée] .
• Au second menu Choisis l'option " 1 " (recherche) et tape sur [entrée]
▶ Laisse travailler l'outil et ne touche à rien ...
--> Poste le rapport qui apparait à la fin , sur le forum ...
( le rapport est sauvegardé aussi sous C:\FindyKill.txt )
( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )
• Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
-
! Déconnecte toi et ferme toutes application en cours ( navigateur compris ) .
• Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...)
• Relance "FindyKill" : au menu principal choisis l'option " F " pour français et tape sur [entrée] .
• Au second menu choisis l'option 2 (suppression) et tape sur [entrée]
• Le pc va redémarrer automatiquement ...
▶ le programme va travailler , ne touche à rien ... , ton bureau ne sera pas accessible c est normal !
--> Poste le rapport qui apparait à la fin ( le rapport est sauvegardé aussi sous C:\FindyKill.txt )
/!\ Si le Bureau ne réapparait pas, presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tape explorer.exe et valide
-
Voila le rapport :
le processus n'est plus présent au démarrage, j'ai remis ma clé et pour l'instant l'icone n'a pas changé... je vais voir ce soir je vais mettre ma clé dans un autre pc voir s'il me refait le problème.
merci beaucoupe en tout cas.
############################## | FindyKill V6.005 |
# User : silotias (Administrateurs) # SILOTIAST
# Update on 11/07/09 by Chiquitine29 & C_XX
# Start at: 09:40:23 | 13/07/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Intel(R) Pentium(R) 4 CPU 3.20GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Disabled
# AV : ESET NOD32 Antivirus 3.0 3.0 [ Enabled | Updated ]
# A:\ # Lecteur de disquettes 3 ½ pouces
# C:\ # Disque fixe local # 74,52 Go (61,24 Go free) # NTFS
# D:\ # Disque CD-ROM
############################## | Processus actifs |
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\lotus\notes\ntmulti.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\userinit.exe
################## | Fichiers # Dossiers infectieux |
Supprimé ! "C:\Documents and Settings\silotias\silotias.exe"
################## | C:\Documents and Settings\silotias\Temporary Internet Files |
################## | All Drives ... |
################## | Autres ... |
################## | Registre # Clés Run infectieuses |
Supprimé ! HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "silotias"
################## | Registre # Mountpoints2 |
Supprimé ! HKCU\...\Explorer\MountPoints2\{da903a49-a154-11dc-94ac-0019db2cb5db}\Shell\Auto\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{e780d21a-9cee-11dc-94a0-0019db2cb5db}\Shell\Auto\Command
################## | Listing des fichiers présent |
[13/07/2009 06:39|--ahs----|212] - C:\boot.ini
[02/03/2006 06:00|-rahs----|4952] - C:\Bootfont.bin
[12/11/2008 13:06|--a------|3398266] - C:\das_install.exe
[13/07/2009 09:55|--a------|2421] - C:\FindyKill.txt
[27/04/2009 14:40|--a------|546] - C:\GesTab.ini
[?|?|?] - C:\hiberfil.sys
[13/07/2009 09:22|--a------|753261] - C:\hpfr3600.log
[11/12/2007 09:39|-rahs----|0] - C:\IO.SYS
[11/12/2007 09:39|-rahs----|0] - C:\MSDOS.SYS
[02/03/2006 06:00|-rahs----|47564] - C:\NTDETECT.COM
[20/08/2008 10:47|-rahs----|252240] - C:\ntldr
[?|?|?] - C:\pagefile.sys
[13/07/2009 08:00|--a------|1615732] - C:\ProcessExplorer.zip
[13/07/2009 07:04|--a------|4874] - C:\rapport.txt
[12/02/2009 07:21|--a------|89] - C:\revisaudit.ini
################## | Vaccination |
# C:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
################## | Etat / Services / Informations |
# Mode sans echec : OK
# Affichage des fichiers cachés : OK
# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 2 ( Good = 2 | Bad = 4 )
# Ip6Fw -> Start = 2 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )
################## | PEH ... |
################## | Cracks / Keygens / Serials |
################## | ! Fin du rapport # FindyKill V6.005 ! | -
-
merci encore en tout cas. Ca fait deux jours que je me battais avec ça...lol...
merci.
Stéphane. -
Bonjour,
J'ai le même probleme que stéfane :s, j'ai un processus avec mon nom d'utilisateur suivi de exe, je met si dessous mon rapprt de RSIT comme on a dit a stefane, en espérant que la personne qui a aidé stephane va bien vouloir m'aider :). Merci d'avance :)
Logfile of random's system information tool 1.06 (written by random/random)
Run by J-Sébastien at 2009-08-07 16:18:40
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 3 GB (13%) free of 20 GB
Total RAM: 2047 MB (63% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:18:55, on 07/08/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Winamp\winampa.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Wallpaper\Wallpaper.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\DNA\btdna.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Documents and Settings\J-Sébastien\J-Sébastien.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
M:\J-SÉBAstieN.eXe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashQuick.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Java\jre6\bin\jucheck.exe
D:\Documents and Settings\J.Sébastien\Bureau\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\J-Sébastien.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: ShoppingReport - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - C:\Program Files\ShoppingReport\Bin\2.5.0\ShoppingReport.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Zango - {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - C:\Program Files\Zango\bin\10.3.85.0\HostIE.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Zango - {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - C:\Program Files\Zango\bin\10.3.85.0\HostIE.dll
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [OpenDNS Update] "C:\Program Files\OpenDNS U
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [Wallpaper] "C:\Program Files\Wallpaper\Wallpaper.exe" Starter
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe -autorun
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\J-Sébastien\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [J-Sébastien] C:\Documents and Settings\J-Sébastien\J-Sébastien.exe
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL
O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShoppingReport\Bin\2.5.0\ShoppingReport.dll
O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShoppingReport\Bin\2.5.0\ShoppingReport.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{D2DAD178-29BA-424C-9313-F0D191F54247}: NameServer = 208.67.222.222,208.67.220.220
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - G:\Nero 7\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
End of file - 10689 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2000478354-1303643608-839522115-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2000478354-1303643608-839522115-1003UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{100EB1FD-D03E-47FD-81F3-EE91287F9465}]
ShoppingReport - C:\Program Files\ShoppingReport\Bin\2.5.0\ShoppingReport.dll [2008-02-06 1173024]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-07-19 312928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}]
DriveLetterAccess - C:\WINDOWS\System32\DLA\DLASHX_W.DLL [2006-06-12 110652]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{90B8B761-DF2B-48AC-BBE0-BCC03A819B3B}]
Zango - C:\Program Files\Zango\bin\10.3.85.0\HostIE.dll [2009-05-27 554248]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
FDMIECookiesBHO Class - C:\Program Files\Free Download Manager\iefdm2.dll [2007-11-26 94208]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-08 35840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-08 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - Zango - C:\Program Files\Zango\bin\10.3.85.0\HostIE.dll [2009-05-27 554248]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2008-08-03 36352]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000]
"WinSys2"=C:\WINDOWS\system32\winsys2.exe [2008-01-17 208896]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [2008-08-14 30003200]
"ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2009-02-15 981384]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-05-11 49152]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-04-30 13750272]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-04-30 86016]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-08 148888]
"OpenDNS Update"=C:\Program Files\OpenDNS U []
"DLA"=C:\WINDOWS\System32\DLA\DLACTRLW.EXE [2006-06-12 127036]
"NeroFilterCheck"=C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-07-19 198160]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Wallpaper"=C:\Program Files\Wallpaper\Wallpaper.exe [2007-08-20 233472]
"SuperCopier2.exe"=C:\Program Files\SuperCopier2\SuperCopier2.exe [2006-07-07 1052672]
"Free Download Manager"=C:\Program Files\Free Download Manager\fdm.exe [2008-05-20 2474031]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
"BitTorrent DNA"=C:\Program Files\DNA\btdna.exe [2009-06-12 318272]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]
"Google Update"=C:\Documents and Settings\J-Sébastien\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-06-15 133104]
"Sony Ericsson PC Suite"=C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe [2009-04-01 409600]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe [2008-01-22 152872]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]
"J-Sébastien"=C:\Documents and Settings\J-Sébastien\J-Sébastien.exe [2009-08-04 40960]
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Démarrage rapide du logiciel HP Image Zone.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
InterVideo WinCinema Manager.lnk - C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"G:\Jeux\KONAMI\Pro Evolution Soccer 2009\pes2009.exe"="G:\Jeux\KONAMI\Pro Evolution Soccer 2009\pes2009.exe:*:Enabled:Pro Evolution Soccer 2009"
"C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"G:\Jeux\Ubisoft\Far Cry 2\bin\FarCry2.exe"="G:\Jeux\Ubisoft\Far Cry 2\bin\FarCry2.exe:*:Enabled:Far Cry 2"
"G:\Jeux\Ubisoft\Far Cry 2\bin\FC2Launcher.exe"="G:\Jeux\Ubisoft\Far Cry 2\bin\FC2Launcher.exe:*:Enabled:Far Cry 2 Updater"
"G:\Jeux\Ubisoft\Far Cry 2\bin\FC2Editor.exe"="G:\Jeux\Ubisoft\Far Cry 2\bin\FC2Editor.exe:*:Enabled:Editeur"
"G:\Jeux\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe"="G:\Jeux\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe:*:Enabled:Crysis_32"
"G:\Jeux\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe"="G:\Jeux\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32"
"G:\Jeux\Activision\Call of Duty - World at War\CoDWaW.exe"="G:\Jeux\Activision\Call of Duty - World at War\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"G:\Jeux\Activision\Call of Duty - World at War\CoDWaWmp.exe"="G:\Jeux\Activision\Call of Duty - World at War\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"G:\Jeux\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe"="G:\Jeux\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club"
"G:\Jeux\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe"="G:\Jeux\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{38df2b9e-5b42-11de-854b-00248c35ea63}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL hp.Exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8b07e787-cafd-11de-82af-e3ba60a3cbb1}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL J-SÉBAstieN.eXe
======File associations======
.reg - open - "regedit.exe" "%1"
======List of files/folders created in the last 1 months======
2009-11-06 19:15:47 ----D---- C:\Documents and Settings\J-Sébastien\Application Data\Sun
2009-11-06 18:30:09 ----A---- C:\WINDOWS\system32\scedll.dll
2009-11-06 18:30:09 ----A---- C:\WINDOWS\system32\Rshx32_5.dll
2009-11-06 18:20:35 ----D---- C:\Program Files\Microsoft
2009-11-06 18:20:17 ----D---- C:\Program Files\Windows Live SkyDrive
2009-11-06 18:09:59 ----D---- C:\Program Files\Windows Live
2009-11-06 18:07:42 ----A---- C:\WINDOWS\system32\vsregexp.dll
2009-11-06 18:07:41 ----A---- C:\WINDOWS\system32\zlcommdb.dll
2009-11-06 18:07:41 ----A---- C:\WINDOWS\system32\zlcomm.dll
2009-11-06 18:07:39 ----A---- C:\WINDOWS\system32\vswmi.dll
2009-11-06 18:07:38 ----A---- C:\WINDOWS\system32\zpeng25.dll
2009-11-06 18:07:38 ----A---- C:\WINDOWS\system32\vsxml.dll
2009-11-06 18:07:37 ----D---- C:\WINDOWS\system32\ZoneLabs
2009-11-06 18:07:37 ----D---- C:\Program Files\Zone Labs
2009-11-06 18:07:37 ----A---- C:\WINDOWS\system32\vspubapi.dll
2009-11-06 18:07:37 ----A---- C:\WINDOWS\system32\vsmonapi.dll
2009-11-06 18:07:14 ----A---- C:\WINDOWS\system32\vsutil.dll
2009-11-06 18:07:14 ----A---- C:\WINDOWS\system32\vsinit.dll
2009-11-06 18:07:14 ----A---- C:\WINDOWS\system32\vsdata.dll
2009-11-06 18:07:12 ----D---- C:\WINDOWS\Internet Logs
2009-11-06 18:05:14 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-11-06 17:49:46 ----D---- C:\WINDOWS\Prefetch
2009-11-06 17:47:40 ----D---- C:\Documents and Settings\J-Sébastien\Application Data\GRETECH
2009-11-06 17:44:02 ----N---- C:\WINDOWS\system32\msxml6r.dll
2009-11-06 17:44:02 ----N---- C:\WINDOWS\system32\msxml6.dll
2009-11-06 17:43:56 ----N---- C:\WINDOWS\system32\smtpapi.dll
2009-11-06 17:43:56 ----N---- C:\WINDOWS\system32\rwnh.dll
2009-11-06 17:43:56 ----N---- C:\WINDOWS\system32\comsdupd.exe
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\eapsvc.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\eapqec.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\eappprxy.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\eapphost.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\eappgnui.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\eappcfg.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\eapolqec.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\dot3ui.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\dot3svc.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\dot3msm.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\dot3api.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\dimsroam.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\credssp.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\azroles.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\ativvaxx.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\ati3duag.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\ati2dvag.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\ati2cqag.dll
2009-11-06 17:43:55 ----N---- C:\WINDOWS\system32\aaclient.dll
2009-11-06 17:43:54 ----N---- C:\WINDOWS\system32\onex.dll
2009-11-06 17:43:54 ----N---- C:\WINDOWS\system32\napstat.exe
2009-11-06 17:43:54 ----N---- C:\WINDOWS\system32\napmontr.dll
2009-11-06 17:43:54 ----N---- C:\WINDOWS\system32\napipsec.dll
2009-11-06 17:43:54 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2009-11-06 17:43:54 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2009-11-06 17:43:54 ----N---- C:\WINDOWS\system32\mssha.dll
2009-11-06 17:43:54 ----N---- C:\WINDOWS\system32\mmcperf.exe
2009-11-06 17:43:54 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2009-11-06 17:43:54 ----N---- C:\WINDOWS\system32\mmcex.dll
2009-11-06 17:43:54 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2009-11-06 17:43:54 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2009-11-06 17:43:54 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2009-11-06 17:43:54 ----N---- C:\WINDOWS\system32\kmsvc.dll
2009-11-06 17:43:54 ----N---- C:\WINDOWS\system32\kbdpash.dll
2009-11-06 17:43:54 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2009-11-06 17:43:54 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2009-11-06 17:43:54 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2009-11-06 17:43:54 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\xpsp3res.dll
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\wmphoto.dll
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\wlanapi.dll
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\verclsid.exe
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\tspkg.dll
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\tsgqec.dll
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\slserv.exe
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\slrundll.exe
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\slgen.dll
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\slextspk.dll
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\slcoinst.dll
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\setupn.exe
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\s3gnb.dll
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\rasqec.dll
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\qutil.dll
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\qcliprov.dll
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\qagentrt.dll
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\qagent.dll
2009-11-06 17:43:53 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2009-11-06 17:43:53 ----A---- C:\WINDOWS\system32\tzchange.exe
2009-11-06 17:43:52 ----N---- C:\WINDOWS\slrundll.exe
2009-11-06 17:43:52 ----D---- C:\WINDOWS\system32\fr-fr
2009-11-06 17:43:52 ----D---- C:\WINDOWS\system32\fr
2009-11-06 17:43:52 ----D---- C:\WINDOWS\system32\bits
2009-11-06 17:43:52 ----D---- C:\WINDOWS\l2schemas
2009-11-06 17:43:52 ----A---- C:\WINDOWS\system32\xmllite.dll
2009-11-06 17:42:58 ----D---- C:\WINDOWS\ServicePackFiles
2009-11-06 17:41:55 ----D---- C:\WINDOWS\network diagnostic
2009-11-06 17:41:05 ----A---- C:\WINDOWS\002706_.tmp
2009-11-06 17:41:01 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-11-06 17:39:43 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2009-11-06 17:29:18 ----A---- C:\WINDOWS\system32\TweakUI.exe
2009-11-06 17:13:15 ----D---- C:\Documents and Settings\J-Sébastien\Application Data\Macromedia
2009-11-06 17:13:14 ----D---- C:\Documents and Settings\J-Sébastien\Application Data\Adobe
2009-11-06 16:56:59 ----D---- C:\Program Files\InterVideo
2009-11-06 16:56:30 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-11-06 16:56:10 ----RA---- C:\WINDOWS\system32\AsIO.dll
2009-11-06 16:56:07 ----D---- C:\Program Files\ASUS
2009-11-06 16:54:55 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-11-06 16:54:45 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-11-06 16:54:43 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$
2009-11-06 16:54:25 ----N---- C:\WINDOWS\system32\difxapi.dll
2009-11-06 16:54:25 ----D---- C:\Program Files\VIA
2009-11-06 16:53:54 ----RA---- C:\WINDOWS\system32\RtNicProp32.dll
2009-11-06 16:53:46 ----D---- C:\WINDOWS\OPTIONS
2009-11-06 16:53:46 ----D---- C:\Program Files\Realtek
2009-11-06 16:53:45 ----HD---- C:\Program Files\InstallShield Installation Information
2009-11-06 16:53:37 ----D---- C:\Documents and Settings\J-Sébastien\Application Data\InstallShield
2009-11-06 16:53:05 ----A---- C:\WINDOWS\Ascd_tmp.ini
2009-11-06 16:46:53 ----D---- C:\WINDOWS\nview
2009-11-06 16:46:53 ----A---- C:\WINDOWS\system32\nvudisp.exe
2009-11-06 16:46:51 ----RA---- C:\WINDOWS\system32\smdll.dll
2009-11-06 16:46:51 ----RA---- C:\WINDOWS\system32\MadCHook.dll
2009-11-06 16:46:50 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2009-11-06 16:46:49 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2009-11-06 16:46:48 ----RA---- C:\WINDOWS\system32\msvcr80.dll
2009-11-06 16:46:48 ----RA---- C:\WINDOWS\system32\HookMAp.dll
2009-11-06 16:46:48 ----RA---- C:\WINDOWS\system32\Auxiliary.dll
2009-11-06 16:46:47 ----RA---- C:\WINDOWS\system32\WinSys2.exe
2009-11-06 16:46:47 ----RA---- C:\WINDOWS\system32\HookShield.dll
2009-11-06 16:46:46 ----RA---- C:\WINDOWS\system32\msicpl.dll
2009-11-06 16:45:51 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2009-11-06 16:45:40 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-11-06 15:54:56 ----A---- C:\WINDOWS\system32\MSVCP71.dll
2009-11-06 15:54:56 ----A---- C:\WINDOWS\system32\aswBoot.exe
2009-11-06 15:54:55 ----D---- C:\Program Files\Alwil Software
2009-11-06 15:53:34 ----D---- C:\Documents and Settings\J-Sébastien\Application Data\DAEMON Tools Pro
2009-11-06 15:53:34 ----D---- C:\Documents and Settings\J-Sébastien\Application Data\DAEMON Tools
2009-11-06 15:52:53 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
2009-11-06 15:51:05 ----D---- C:\Documents and Settings\J-Sébastien\Application Data\DAEMON Tools Lite
2009-11-06 15:47:33 ----SHD---- C:\RECYCLER
2009-11-06 14:15:48 ----A---- C:\WINDOWS\system32\h323log.txt
2009-11-06 14:14:45 ----A---- C:\WINDOWS\system32\usbui.dll
2009-11-06 14:13:59 ----A---- C:\WINDOWS\imsins.BAK
2009-11-06 14:13:57 ----SHD---- C:\WINDOWS\Installer
2009-11-06 14:13:57 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-11-06 14:13:56 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-11-06 14:13:56 ----A---- C:\WINDOWS\ODBCINST.INI
2009-11-06 14:13:53 ----RD---- C:\Program Files
2009-11-06 14:13:53 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2009-11-06 14:13:53 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-11-06 14:13:53 ----D---- C:\Program Files\Fichiers communs
2009-11-06 14:13:51 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-11-06 14:13:50 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-11-06 14:13:50 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-11-06 14:13:48 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-11-06 14:13:48 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-11-06 14:13:48 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-11-06 14:13:48 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-11-06 14:13:48 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-11-06 14:13:48 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-11-06 14:13:48 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-11-06 14:13:48 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-11-06 14:13:48 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-11-06 14:13:48 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-11-06 14:13:48 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-11-06 14:13:48 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-11-06 14:13:45 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-11-06 14:13:45 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-11-06 14:13:45 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-11-06 14:13:45 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-11-06 14:13:45 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-11-06 14:13:45 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-11-06 14:13:45 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-11-06 14:13:44 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-11-06 14:13:44 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-11-06 14:13:44 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-11-06 14:13:44 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-11-06 14:13:44 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-11-06 14:13:41 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2009-11-06 14:13:41 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2009-11-06 14:13:41 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2009-11-06 14:13:41 ----RA---- C:\WINDOWS\system32\kbdro.dll
2009-11-06 14:13:41 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2009-11-06 14:13:41 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2009-11-06 14:13:41 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2009-11-06 14:13:41 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2009-11-06 14:13:41 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2009-11-06 14:13:41 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2009-11-06 14:13:41 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2009-11-06 14:13:41 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2009-11-06 14:13:41 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2009-11-06 14:13:39 ----A---- C:\WINDOWS\system32\irclass.dll
2009-11-06 14:13:39 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-11-06 14:13:39 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-11-06 14:13:38 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-11-06 14:13:38 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-11-06 14:13:36 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-11-06 14:13:36 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-11-06 14:13:35 ----A---- C:\WINDOWS\system32\batt.dll
2009-11-06 14:13:35 ----A---- C:\WINDOWS\notepad.exe
2009-11-06 14:13:33 ----A---- C:\WINDOWS\system32\storprop.dll
2009-11-06 14:13:28 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2009-11-06 14:11:46 ----RA---- C:\WINDOWS\SET8.tmp
2009-11-06 14:11:44 ----RA---- C:\WINDOWS\SET4.tmp
2009-11-06 14:11:43 ----RA---- C:\WINDOWS\SET3.tmp
2009-11-06 14:11:39 ----D---- C:\WINDOWS\system32\CatRoot2
2009-11-06 14:11:39 ----D---- C:\WINDOWS\system32\CatRoot
2009-11-06 14:11:33 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-11-06 14:11:14 ----A---- C:\WINDOWS\setuplog.txt
2009-11-06 14:11:12 ----SHD---- C:\System Volume Information
2009-11-06 14:11:12 ----D---- C:\Documents and Settings
2009-11-06 14:10:41 ----SH---- C:\boot.ini
2009-11-06 14:09:39 ----D---- C:\Documents and Settings\J-Sébastien\Application Data\Mozilla
2009-11-06 14:09:27 ----D---- C:\Program Files\GRETECH
2009-11-06 14:07:20 ----D---- C:\Documents and Settings\J-Sébastien\Application Data\Free Download Manager
2009-11-06 14:07:16 ----D---- C:\Program Files\Free Download Manager
2009-11-06 14:07:16 ----D---- C:\Documents and Settings\All Users\Application Data\FreeDownloadManager.ORG
2009-11-06 14:06:41 ----D---- C:\Program Files\Foxit Software
2009-11-06 14:05:41 ----D---- C:\Documents and Settings\J-Sébastien\Application Data\DivX
2009-11-06 14:05:08 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-11-06 14:05:08 ----RSD---- C:\WINDOWS\Fonts
2009-11-06 14:05:08 ----RD---- C:\WINDOWS\Web
2009-11-06 14:05:08 ----HD---- C:\WINDOWS\inf
2009-11-06 14:05:08 ----D---- C:\WINDOWS\WinSxS
2009-11-06 14:05:08 ----D---- C:\WINDOWS\twain_32
2009-11-06 14:05:08 ----D---- C:\WINDOWS\Temp
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\wins
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\wbem
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\usmt
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\spool
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\ShellExt
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\Setup
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\ras
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\oobe
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\npp
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\mui
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\inetsrv
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\IME
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\icsxml
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\ias
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\export
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\drivers
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\dhcp
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\config
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\3com_dmi
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\3076
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\2052
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\1054
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\1042
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\1041
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\1037
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\1036
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\1033
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\1031
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\1028
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32\1025
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system32
2009-11-06 14:05:08 ----D---- C:\WINDOWS\system
2009-11-06 14:05:08 ----D---- C:\WINDOWS\security
2009-11-06 14:05:08 ----D---- C:\WINDOWS\Resources
2009-11-06 14:05:08 ----D---- C:\WINDOWS\repair
2009-11-06 14:05:08 ----D---- C:\WINDOWS\Provisioning
2009-11-06 14:05:08 ----D---- C:\WINDOWS\PeerNet
2009-11-06 14:05:08 ----D---- C:\WINDOWS\pchealth
2009-11-06 14:05:08 ----D---- C:\WINDOWS\mui
2009-11-06 14:05:08 ----D---- C:\WINDOWS\msapps
2009-11-06 14:05:08 ----D---- C:\WINDOWS\msagent
2009-11-06 14:05:08 ----D---- C:\WINDOWS\Media
2009-11-06 14:05:08 ----D---- C:\WINDOWS\java
2009-11-06 14:05:08 ----D---- C:\WINDOWS\ime
2009-11-06 14:05:08 ----D---- C:\WINDOWS\Help
2009-11-06 14:05:08 ----D---- C:\WINDOWS\ehome
2009-11-06 14:05:08 ----D---- C:\WINDOWS\Driver Cache
2009-11-06 14:05:08 ----D---- C:\WINDOWS\Debug
2009-11-06 14:05:08 ----D---- C:\WINDOWS\Cursors
2009-11-06 14:05:08 ----D---- C:\WINDOWS\Connection Wizard
2009-11-06 14:05:08 ----D---- C:\WINDOWS\Config
2009-11-06 14:05:08 ----D---- C:\WINDOWS\AppPatch
2009-11-06 14:05:08 ----D---- C:\WINDOWS\addins
2009-11-06 14:05:08 ----D---- C:\WINDOWS
2009-11-06 14:05:00 ----D---- C:\Program Files\Personal Media Manager
2009-11-06 14:04:30 ----A---- C:\WINDOWS\system32\unrar.dll
2009-11-06 14:04:29 ----A---- C:\WINDOWS\avisplitter.ini
2009-11-06 14:04:28 ----A---- C:\WINDOWS\system32\xvidcore.dll
2009-11-06 14:04:27 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2009-11-06 14:04:26 ----D---- C:\Program Files\K-Lite Codec Pack
2009-11-06 14:04:26 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2009-11-06 14:04:26 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2009-11-06 14:03:37 ----D---- C:\Program Files\AviSynth 2.5
2009-11-06 14:03:01 ----D---- C:\Program Files\m4ng
2009-11-06 14:02:45 ----D---- C:\Program Files\Media Player Classic
2009-11-06 14:02:30 ----D---- C:\Program Files\Mozilla Firefox
2009-11-06 14:02:06 ----D---- C:\Program Files\mp3DirectCut
2009-11-06 14:01:46 ----A---- C:\WINDOWS\system32\MSVCRTD.DLL
2009-11-06 14:01:46 ----A---- C:\WINDOWS\system32\MSVCP60D.DLL
2009-11-06 14:01:44 ----AC---- C:\WINDOWS\system32\VB6STKIT.DLL
2009-11-06 14:01:44 ----A---- C:\WINDOWS\system32\TABCTFR.DLL
2009-11-06 14:01:44 ----A---- C:\WINDOWS\system32\msvcr71.dll
2009-11-06 14:01:44 ----A---- C:\WINDOWS\system32\MSCMCFR.DLL
2009-11-06 14:01:44 ----A---- C:\WINDOWS\system32\Mscc2fr.dll
2009-11-06 14:01:44 ----A---- C:\WINDOWS\system32\lame_enc.dll
2009-11-06 14:01:44 ----A---- C:\WINDOWS\system32\inetfr.DLL
2009-11-06 14:01:44 ----A---- C:\WINDOWS\system32\CMDLGFR.DLL
2009-11-06 14:01:44 ----A---- C:\WINDOWS\system32\AudPlayer.dll
2009-11-06 14:01:44 ----A---- C:\WINDOWS\system32\AudioVisu.dll
2009-11-06 14:01:44 ----A---- C:\WINDOWS\system32\AudioRecord.dll
2009-11-06 14:01:44 ----A---- C:\WINDOWS\system32\AudioInfos.dll
2009-11-06 14:01:44 ----A---- C:\WINDOWS\system32\AudFile.dll
2009-11-06 14:01:44 ----A---- C:\WINDOWS\system32\AudDisplay.dll
2009-11-06 14:01:44 ----A---- C:\WINDOWS\system32\AudDesign.dll
2009-11-06 14:01:43 ----D---- C:\Program Files\Free Audio Pack
2009-11-06 14:01:43 ----A---- C:\WINDOWS\system32\MFC71.dll
2009-11-06 14:01:03 ----D---- C:\Program Files\SuperCopier2
2009-11-06 14:00:48 ----D---- C:\Program Files\VSO
2009-11-06 14:00:38 ----D---- C:\Documents and Settings\J-Sébastien\Application Data\Desktopicon
2009-11-06 14:00:23 ----D---- C:\Documents and Settings\J-Sébastien\Application Data\Wallpaper
2009-11-06 14:00:21 ----D---- C:\Program Files\Wallpaper
2009-11-06 13:59:56 ----N---- C:\WINDOWS\system32\pxinsi64.exe
2009-11-06 13:59:56 ----N---- C:\WINDOWS\system32\pxcpyi64.exe
2009-11-06 13:59:38 ----D---- C:\Program Files\DivX
2009-11-06 13:58:50 ----D---- C:\Program Files\CCleaner
2009-11-06 13:57:47 ----D---- C:\Program Files\Yacc
2009-11-06 13:54:27 ----D---- C:\Program Files\WinRAR
2009-11-06 13:54:07 ----N---- C:\WINDOWS\system32\vxblock.dll
2009-11-06 13:54:07 ----N---- C:\WINDOWS\system32\pxwave.dll
2009-11-06 13:54:07 ----N---- C:\WINDOWS\system32\pxsfs.dll
2009-11-06 13:54:07 ----N---- C:\WINDOWS\system32\pxmas.dll
2009-11-06 13:54:07 ----N---- C:\WINDOWS\system32\pxinsa64.exe
2009-11-06 13:54:07 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2009-11-06 13:54:07 ----N---- C:\WINDOWS\system32\pxdrv.dll
2009-11-06 13:54:07 ----N---- C:\WINDOWS\system32\pxcpya64.exe
2009-11-06 13:54:07 ----N---- C:\WINDOWS\system32\pxafs.dll
2009-11-06 13:54:07 ----N---- C:\WINDOWS\system32\px.dll
2009-11-06 13:54:04 ----D---- C:\Program Files\Winamp
2009-11-06 13:54:04 ----D---- C:\Documents and Settings\J-Sébastien\Application Data\Winamp
2009-11-06 13:25:21 ----D---- C:\Documents and Settings\J-Sébastien\Application Data\Identities
2009-11-06 13:25:20 ----HD---- C:\Program Files\Uninstall Information
2009-11-06 13:25:11 ----ASH---- C:\Documents and Settings\J-Sébastien\Application Data\desktop.ini
2009-11-06 13:25:10 ----SD---- C:\Documents and Settings\J-Sébastien\Application Data\Microsoft
2009-11-06 13:24:12 ----D---- C:\WINDOWS\SoftwareDistribution
2009-11-06 13:24:10 ----SD---- C:\WINDOWS\system32\Microsoft
2009-11-06 13:24:10 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-11-06 13:21:21 ----D---- C:\WINDOWS\system32\xircom
2009-11-06 13:21:21 ----D---- C:\Program Files\xerox
2009-11-06 13:21:21 ----D---- C:\Program Files\microsoft frontpage
2009-11-06 13:21:04 ----A---- C:\WINDOWS\control.ini
2009-11-06 13:21:04 ----A---- C:\AUTOEXEC.BAT
2009-11-06 13:20:57 ----A---- C:\WINDOWS\OEWABLog.txt
2009-11-06 13:20:55 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-11-06 13:20:21 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-11-06 13:20:21 ----RD---- C:\WINDOWS\Offline Web Pages
2009-11-06 13:20:21 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-11-06 13:20:18 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-11-06 13:20:15 ----HD---- C:\Program Files\WindowsUpdate
2009-11-06 13:20:12 ----D---- C:\Program Files\Services en ligne
2009-11-06 13:19:55 ----D---- C:\WINDOWS\system32\DirectX
2009-11-06 13:19:32 ----A---- C:\WINDOWS\system32\atrace.dll
2009-11-06 13:19:29 ----A---- C:\WINDOWS\system32\desktop.ini
2009-11-06 13:19:29 ----A---- C:\WINDOWS\desktop.ini
2009-11-06 13:19:22 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-11-06 13:19:20 ----D---- C:\Program Files\Fichiers communs\Services
2009-11-06 13:19:20 ----A---- C:\WINDOWS\system32\acctres.dll
2009-11-06 13:19:16 ----SD---- C:\WINDOWS\Tasks
2009-11-06 13:19:16 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-11-06 13:19:15 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-11-06 13:19:11 ----D---- C:\WINDOWS\srchasst
2009-11-06 13:19:10 ----D---- C:\WINDOWS\system32\Macromed
2009-11-06 13:19:07 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-11-06 13:19:07 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-11-06 13:19:06 ----A---- C:\WINDOWS\system32\wups.dll
2009-11-06 13:19:06 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-11-06 13:19:06 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-11-06 13:19:06 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-11-06 13:19:05 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-11-06 13:19:05 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-11-06 13:19:05 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-11-06 13:19:05 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-11-06 13:19:05 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-11-06 13:19:05 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-11-06 13:19:05 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-11-06 13:19:01 ----D---- C:\Program Files\Movie Maker
2009-11-06 13:18:54 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-11-06 13:18:54 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-11-06 13:18:54 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-11-06 13:18:54 ----A---- C:\WINDOWS\system32\racpldlg.dll
2009-11-06 13:18:49 ----A---- C:\WINDOWS\system32\fltmc.exe
2009-11-06 13:18:49 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-11-06 13:18:48 ----D---- C:\WINDOWS\system32\Restore
2009-11-06 13:18:48 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-11-06 13:18:48 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-11-06 13:18:48 ----A---- C:\WINDOWS\system32\srclient.dll
2009-11-06 13:18:47 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2009-11-06 13:18:47 ----A---- C:\WINDOWS\system32\msconf.dll
2009-11-06 13:18:47 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-11-06 13:18:47 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-11-06 13:18:47 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-11-06 13:18:47 ----A---- C:\WINDOWS\system32\ils.dll
2009-11-06 13:18:44 ----D---- C:\Program Files\NetMeeting
2009-11-06 13:18:43 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-11-06 13:18:43 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-11-06 13:18:42 ----A---- C:\WINDOWS\system32\inetres.dll
2009-11-06 13:18:42 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-11-06 13:18:40 ----D---- C:\Program Files\Outlook Express
2009-11-06 13:18:40 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-11-06 13:18:40 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-11-06 13:18:40 ----A---- C:\WINDOWS\system32\mstask.dll
2009-11-06 13:18:39 ----A---- C:\WINDOWS\system32\isign32.dll
2009-11-06 13:18:39 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-11-06 13:18:39 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-11-06 13:18:39 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-11-06 13:18:32 ----D---- C:\Program Files\Fichiers communs\System
2009-11-06 13:18:31 ----D---- C:\Program Files\Internet Explorer
2009-11-06 13:18:09 ----D---- C:\Program Files\ComPlus Applications
2009-11-06 13:18:07 ----A---- C:\WINDOWS\vbaddin.ini
2009-11-06 13:18:07 ----A---- C:\WINDOWS\vb.ini
2009-11-06 13:18:04 ----D---- C:\WINDOWS\Registration
2009-11-06 13:17:58 ----D---- C:\Program Files\Windows Media Player
2009-11-06 13:17:58 ----D---- C:\Program Files\Online Services
2009-11-06 13:17:54 ----D---- C:\Program Files\Messenger
2009-11-06 13:17:49 ----D---- C:\Program Files\MSN Gaming Zone
2009-11-06 13:17:49 ----A---- C:\WINDOWS\system32\write.exe
2009-11-06 13:17:28 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-11-06 13:17:28 ----A---- C:\WINDOWS\system32\hticons.dll
2009-11-06 13:17:27 ----A---- C:\WINDOWS\system32\avwav.dll
2009-11-06 13:17:27 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-11-06 13:17:27 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-11-06 13:17:26 ----A---- C:\WINDOWS\system32\winchat.exe
2009-11-06 13:17:14 ----A---- C:\WINDOWS\system32\getuname.dll
2009-11-06 13:17:14 ----A---- C:\WINDOWS\system32\charmap.exe
2009-11-06 13:17:14 ----A---- C:\WINDOWS\system32\calc.exe
2009-11-06 13:17:13 ----A---- C:\WINDOWS\system32\winmine.exe
2009-11-06 13:17:13 ----A---- C:\WINDOWS\system32\sol.exe
2009-11-06 13:17:13 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-11-06 13:17:12 ----A---- C:\WINDOWS\system32\freecell.exe
2009-11-06 13:17:11 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-11-06 13:17:11 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-11-06 13:17:11 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-11-06 13:17:11 ----A---- C:\WINDOWS\system32\tskill.exe
2009-11-06 13:17:11 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-11-06 13:17:11 ----A---- C:\WINDOWS\system32\tscon.exe
2009-11-06 13:17:11 ----A---- C:\WINDOWS\system32\shadow.exe
2009-11-06 13:17:11 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-11-06 13:17:11 ----A---- C:\WINDOWS\system32\reset.exe
2009-11-06 13:17:10 ----A---- C:\WINDOWS\system32\regini.exe
2009-11-06 13:17:10 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-11-06 13:17:10 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-11-06 13:17:10 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-11-06 13:17:10 ----A---- C:\WINDOWS\system32\msg.exe
2009-11-06 13:17:10 ----A---- C:\WINDOWS\system32\logoff.exe
2009-11-06 13:17:09 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-11-06 13:17:09 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-11-06 13:17:07 ----A---- C:\WINDOWS\system32\stclient.dll
2009-11-06 13:17:07 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-11-06 13:17:07 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-11-06 13:17:07 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-11-06 13:17:07 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-11-06 13:17:07 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-11-06 13:17:07 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-11-06 13:17:07 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-11-06 13:16:57 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-11-06 13:16:44 ----D---- C:\Program Files\MSN
2009-11-06 13:16:44 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-11-06 13:16:43 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-11-06 13:16:43 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-11-06 13:16:43 ----A---- C:\WINDOWS\system32\hypertrm.dll
2009-11-06 13:16:42 ----D---- C:\Program Files\Windows NT
2009-11-06 13:16:42 ----A---- C:\WINDOWS\system32\spider.exe
2009-11-06 13:16:42 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-11-06 13:16:42 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-11-06 13:16:41 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-11-06 13:16:40 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2009-11-06 13:16:40 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-11-06 13:16:40 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-11-06 13:16:40 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-11-06 13:16:40 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-11-06 13:16:40 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-11-06 13:16:40 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-11-06 13:16:40 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-11-06 13:16:39 ----A---- C:\WINDOWS\system32\termsrv.dll
2009-11-06 13:16:39 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-11-06 13:16:39 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-11-06 13:16:39 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-11-06 13:16:39 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-11-06 13:16:39 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-11-06 13:16:39 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-11-06 13:16:38 ----D---- C:\WINDOWS\system32\MsDtc
2009-11-06 13:16:38 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-11-06 13:16:38 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-11-06 13:16:38 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-11-06 13:16:38 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-11-06 13:16:38 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-11-06 13:16:37 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-11-06 13:16:37 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-11-06 13:16:36 ----D---- C:\WINDOWS\system32\Com
2009-11-06 13:16:36 ----A---- C:\WINDOWS\system32\colbact.dll
2009-11-06 13:16:36 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-11-06 13:16:36 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-11-06 13:16:36 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-11-06 13:16:36 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-11-06 13:16:35 ----A---- C:\WINDOWS\system32\comuid.dll
2009-11-06 13:16:35 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-11-06 13:16:35 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-11-06 13:16:28 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-11-06 13:16:28 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-11-06 13:16:28 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-11-06 13:16:27 ----A---- C:\WINDOWS\system32\cmprops.dll
2009-08-07 16:18:41 ----D---- C:\Program Files\trend micro
2009-08-07 16:18:40 ----D---- C:\rsit
2009-08-07 13:34:33 ----D---- C:\Embedded
2009-08-05 12:11:46 ----D---- C:\Program Files\DAEMON Tools Toolbar
2009-08-05 12:11:43 ----D---- C:\Program Files\DAEMON Tools Lite
2009-07-28 12:27:48 ----D---- C:\Documents and Settings\J-Sébastien\Application Data\dvdcss
2009-07-28 12:27:45 ----D---- C:\Documents and Settings\J-Sébastien\Application Data\vlc
2009-07-28 12:27:02 ----D---- C:\Program Files\VideoLAN
2009-07-28 12:21:17 ----A---- C:\WINDOWS\system32\pthreadGC2.dll
2009-07-28 12:04:01 ----D---- C:\Program Files\JDownloader 0.6.193
2009-07-19 03:59:40 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2009-07-19 03:59:40 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2009-07-19 03:59:39 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2009-07-19 03:59:38 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2009-07-19 03:59:38 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2009-07-19 03:59:38 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2009-07-19 03:59:37 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2009-07-19 03:59:36 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2009-07-19 03:59:36 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2009-07-19 03:59:35 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2009-07-19 03:59:35 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2009-07-19 03:59:35 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2009-07-19 03:59:33 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2009-07-19 03:59:31 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2009-07-19 02:31:25 ----D---- C:\Program Files\Fichiers communs\xing shared
2009-07-19 02:31:21 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2009-07-19 02:31:14 ----A---- C:\WINDOWS\system32\pndx5032.dll
2009-07-19 02:31:14 ----A---- C:\WINDOWS\system32\pndx5016.dll
2009-07-19 02:31:13 ----D---- C:\Program Files\Real
2009-07-19 02:31:12 ----A---- C:\WINDOWS\system32\pncrt.dll
2009-07-19 02:31:10 ----D---- C:\Program Files\Fichiers communs\Real
2009-07-19 02:31:09 ----D---- C:\Documents and Settings\J-Sébastien\Application Data\Real
2009-07-17 04:23:51 ----D---- C:\WINDOWS\ie8updates
2009-07-16 03:40:05 ----D---- C:\Program Files\802.11 Wireless LAN
2009-07-16 03:39:48 ----D---- C:\WINDOWS\Downloaded Installations
2009-07-16 03:13:36 ----D---- C:\WINDOWS\WBEM
2009-07-16 03:12:13 ----HDC---- C:\WINDOWS\ie8
2009-07-16 03:05:14 ----HDC---- C:\WINDOWS\$NtUninstallKB973346$
2009-07-16 03:05:10 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-07-16 03:04:37 ----HDC---- C:\WINDOWS\$NtUninstallKB961371$
2009-07-15 08:28:01 ----D---- C:\Program Files\VDOWNLOADER
2009-07-13 15:48:24 ----A---- C:\WINDOWS\system32\i420vfw.dll
2009-07-13 15:48:24 ----A---- C:\WINDOWS\system32\AVSredirect.dll
2009-07-13 15:48:24 ----A---- C:\WINDOWS\MOTA113.exe
2009-07-13 15:48:23 ----A---- C:\WINDOWS\x2.64.exe
2009-07-13 15:48:23 ----A---- C:\WINDOWS\system32\x.264.exe
2009-07-13 15:48:23 ----A---- C:\WINDOWS\meta4.exe
2009-07-13 15:48:16 ----RSH---- C:\WINDOWS\system32\nbDX.dll
2009-07-13 15:48:16 ----RSH---- C:\WINDOWS\system32\msfDX.dll
2009-07-13 15:48:16 ----RSH---- C:\WINDOWS\system32\flvDX.dll
2009-07-13 15:48:09 ----D---- C:\Program Files\eRightSoft
2009-07-13 14:32:09 ----D---- C:\Program Files\VirtualDJ
2009-07-13 03:17:19 ----A---- C:\WINDOWS\Ne
