Generic Host Process for Win32 Services

mousarga Messages postés 79 Statut Membre -  
mousarga Messages postés 79 Statut Membre -
Bonjour,
je suis propriétaire d'un Cyber Café, mes machines affichent fréquement le message suivant:
Generic Host Process for Win32 Services
après la barre de langue de la machine chande de couleur et ensuite toute la barre du menu demarrer.
et tout d'un coup, je ne peux plus entrer dans mon par feu de windows aussi, mes cartes son ne fonctionne plus et au besoin, la machine affiche le message comme quoi, aucun peripheriques n'est installé
je precise que je suis sur windows xp sp2 ou sp3 selon les machines
merci d'avance
Configuration: Windows XP Internet Explorer 7.0

3 réponses

  1. plopus Messages postés 49 Date d'inscription   Statut Contributeur sécurité Dernière intervention   293
     
    Salut

    cela peut etre trés genant pour toi...

    Fait ceci sur la machine la plus touché par ce genre de probleme mais il faudra toutes les desinfecte et surement les deconnecté du reseau pour ne pas relancer les infections, si infections il y a...

    • Télécharge Random's System Information Tool (RSIT) de Random/Random, et enregistre le sur ton Bureau.
    http://images.malwareremoval.com/random/RSIT.exe
    • Double clique sur RSIT.exe pour lancer l'outil.
    • Clique sur "Continue" à l'écran Disclaimer.
    • Si l'outil HijackThis n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu s'il te le demande) et tu devras accepter la licence.
    • Une fois le scan terminé, deux rapports vont apparaître : poste les dans deux messages séparés stp
    0
    1. MOUSARGA
       
      Logfile of random's system information tool 1.06 (written by random/random)
      Run by AICHASTAR at 2009-07-14 15:32:23
      Microsoft Windows XP Professionnel Service Pack 3
      System drive C: has 19 GB (75%) free of 25 GB
      Total RAM: 254 MB (33% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 15:32:39, on 14/07/2009
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\Windows Desktop Search\WindowsSearch.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
      C:\Program Files\CDBurnerXP\NMSAccessU.exe
      C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\SearchIndexer.exe
      C:\Program Files\Cybera Server\cybserv.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\wscntfy.exe
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\WINDOWS\system32\SearchProtocolHost.exe
      C:\WINDOWS\system32\NOTEPAD.EXE
      C:\Documents and Settings\AICHASTAR\Bureau\RSIT.exe
      C:\Program Files\trend micro\AICHASTAR.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O4 - HKLM\..\Run: [OrderReminder] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
      O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
      O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      0
    2. MOUSARGA
       
      ======List of files/folders created in the last 1 months======

      2009-07-14 15:30:37 ----D---- C:\Program Files\trend micro
      2009-07-14 15:30:33 ----D---- C:\rsit
      2009-07-14 15:12:27 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\Canneverbe_Limited
      2009-07-14 14:21:55 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\dvdcss
      2009-07-14 10:07:56 ----D---- C:\WINDOWS\LastGood
      2009-07-14 09:00:43 ----D---- C:\WINDOWS\system32\PreInstall
      2009-07-14 09:00:38 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
      2009-07-13 21:57:16 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
      2009-07-13 21:50:53 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\Windows Search
      2009-07-13 21:50:23 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\Windows Desktop Search
      2009-07-13 21:49:40 ----D---- C:\WINDOWS\system32\GroupPolicy
      2009-07-13 21:49:40 ----D---- C:\Program Files\Windows Desktop Search
      2009-07-13 21:49:28 ----HDC---- C:\WINDOWS\$NtUninstallKB940157$
      2009-07-13 21:49:12 ----HDC---- C:\WINDOWS\$NtUninstallKB915800-v4$
      2009-07-13 21:35:49 ----A---- C:\WINDOWS\system32\wups2.dll
      2009-07-13 21:35:48 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
      2009-07-13 21:35:48 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
      2009-07-13 21:35:47 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
      2009-07-13 21:28:48 ----A---- C:\WINDOWS\NeroDigital.ini
      2009-07-13 21:25:22 ----D---- C:\Program Files\CDBurnerXP
      2009-07-13 21:11:25 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\Image Zone Express
      2009-07-13 21:08:54 ----RSD---- C:\WINDOWS\assembly
      2009-07-13 21:06:51 ----D---- C:\WINDOWS\Microsoft.NET
      2009-07-13 17:28:21 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\WinRAR
      2009-07-13 14:25:11 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
      2009-07-13 14:25:09 ----HD---- C:\WINDOWS\$hf_mig$
      2009-07-13 11:00:00 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\Macromedia
      2009-07-13 10:57:57 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\vlc
      2009-07-13 09:55:58 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\Adobe
      2009-07-13 09:53:44 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\U3
      2009-07-13 09:48:44 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\HP
      2009-07-13 08:21:25 ----A---- C:\WINDOWS\zip.exe
      2009-07-13 08:21:25 ----A---- C:\WINDOWS\SWXCACLS.exe
      2009-07-13 08:21:25 ----A---- C:\WINDOWS\SWSC.exe
      2009-07-13 08:21:25 ----A---- C:\WINDOWS\SWREG.exe
      2009-07-13 08:21:25 ----A---- C:\WINDOWS\sed.exe
      2009-07-13 08:21:25 ----A---- C:\WINDOWS\PEV.exe
      2009-07-13 08:21:25 ----A---- C:\WINDOWS\NIRCMD.exe
      2009-07-13 08:21:25 ----A---- C:\WINDOWS\grep.exe
      2009-07-13 08:21:15 ----D---- C:\WINDOWS\ERDNT
      2009-07-13 08:21:12 ----SD---- C:\ComboFix
      2009-07-13 08:21:11 ----A---- C:\WINDOWS\system32\CF25945.exe
      2009-07-13 08:20:40 ----D---- C:\Qoobox
      2009-07-13 08:02:37 ----D---- C:\WINDOWS\system32\SoftwareDistribution
      2009-07-13 08:01:00 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\Mozilla
      2009-07-12 22:06:30 ----A---- C:\WINDOWS\system32\h323log.txt
      2009-07-12 22:04:12 ----A---- C:\WINDOWS\system32\ksuser.dll
      2009-07-12 22:04:08 ----A---- C:\WINDOWS\system32\usbui.dll
      2009-07-12 22:03:58 ----A---- C:\WINDOWS\system32\i81xdnt5.dll
      2009-07-12 22:02:15 ----A---- C:\WINDOWS\imsins.BAK
      2009-07-12 22:02:12 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
      2009-07-12 22:02:11 ----SHD---- C:\WINDOWS\Installer
      2009-07-12 22:02:10 ----D---- C:\Program Files\Fichiers communs\ODBC
      2009-07-12 22:02:10 ----A---- C:\WINDOWS\ODBCINST.INI
      2009-07-12 22:02:05 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
      2009-07-12 22:02:04 ----RD---- C:\Program Files
      2009-07-12 22:02:04 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
      2009-07-12 22:02:04 ----D---- C:\Program Files\Fichiers communs
      2009-07-12 22:01:59 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
      2009-07-12 22:01:59 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
      2009-07-12 22:01:59 ----RA---- C:\WINDOWS\system32\kbdazel.dll
      2009-07-12 22:01:57 ----RA---- C:\WINDOWS\system32\kbdtat.dll
      2009-07-12 22:01:57 ----RA---- C:\WINDOWS\system32\kbdmon.dll
      2009-07-12 22:01:57 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
      2009-07-12 22:01:56 ----RA---- C:\WINDOWS\system32\kbdycc.dll
      2009-07-12 22:01:56 ----RA---- C:\WINDOWS\system32\kbduzb.dll
      2009-07-12 22:01:56 ----RA---- C:\WINDOWS\system32\kbdur.dll
      2009-07-12 22:01:56 ----RA---- C:\WINDOWS\system32\kbdru1.dll
      2009-07-12 22:01:56 ----RA---- C:\WINDOWS\system32\kbdru.dll
      2009-07-12 22:01:56 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
      2009-07-12 22:01:56 ----RA---- C:\WINDOWS\system32\kbdbu.dll
      2009-07-12 22:01:56 ----RA---- C:\WINDOWS\system32\kbdblr.dll
      2009-07-12 22:01:56 ----RA---- C:\WINDOWS\system32\kbdaze.dll
      2009-07-12 22:01:54 ----RA---- C:\WINDOWS\system32\kbdhept.dll
      2009-07-12 22:01:54 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
      2009-07-12 22:01:54 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
      2009-07-12 22:01:54 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
      2009-07-12 22:01:54 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
      2009-07-12 22:01:54 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
      2009-07-12 22:01:53 ----RA---- C:\WINDOWS\system32\kbdhe.dll
      2009-07-12 22:01:52 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
      2009-07-12 22:01:52 ----RA---- C:\WINDOWS\system32\kbdlt.dll
      2009-07-12 22:01:51 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
      2009-07-12 22:01:51 ----RA---- C:\WINDOWS\system32\kbdlv.dll
      2009-07-12 22:01:51 ----RA---- C:\WINDOWS\system32\kbdest.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdycl.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdsl.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdro.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdpl.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdhu.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdcz.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdcr.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
      2009-07-12 22:01:41 ----A---- C:\WINDOWS\system32\irclass.dll
      2009-07-12 22:01:41 ----A---- C:\WINDOWS\system32\dgsetup.dll
      2009-07-12 22:01:41 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
      2009-07-12 22:01:40 ----A---- C:\WINDOWS\system32\spxcoins.dll
      2009-07-12 22:01:40 ----A---- C:\WINDOWS\system32\EqnClass.Dll
      2009-07-12 22:01:37 ----N---- C:\WINDOWS\system32\CONFIG.TMP
      2009-07-12 22:01:37 ----A---- C:\WINDOWS\TASKMAN.EXE
      2009-07-12 22:01:37 ----A---- C:\WINDOWS\system32\batt.dll
      2009-07-12 22:01:36 ----A---- C:\WINDOWS\NOTEPAD.EXE
      2009-07-12 22:01:34 ----A---- C:\WINDOWS\system32\storprop.dll
      2009-07-12 22:01:23 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
      2009-07-12 22:01:15 ----RA---- C:\WINDOWS\SET8.tmp
      2009-07-12 22:01:11 ----RA---- C:\WINDOWS\SET4.tmp
      2009-07-12 22:01:08 ----RA---- C:\WINDOWS\SET3.tmp
      2009-07-12 22:01:01 ----D---- C:\WINDOWS\system32\CatRoot2
      2009-07-12 22:01:01 ----D---- C:\WINDOWS\system32\CatRoot
      2009-07-12 22:00:55 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
      2009-07-12 22:00:33 ----A---- C:\WINDOWS\setuplog.txt
      2009-07-12 22:00:28 ----SHD---- C:\System Volume Information
      2009-07-12 22:00:28 ----D---- C:\Documents and Settings
      2009-07-12 21:59:40 ----SH---- C:\boot.ini
      2009-07-12 21:56:08 ----D---- C:\Program Files\Nero
      2009-07-12 21:56:08 ----D---- C:\Program Files\Fichiers communs\Ahead
      2009-07-12 21:56:08 ----D---- C:\Documents and Settings\All Users\Application Data\Nero
      2009-07-12 21:54:37 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
      2009-07-12 21:54:35 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
      2009-07-12 21:53:55 ----RSHDC---- C:\WINDOWS\system32\dllcache
      2009-07-12 21:53:55 ----RSD---- C:\WINDOWS\Fonts
      2009-07-12 21:53:55 ----RD---- C:\WINDOWS\Web
      2009-07-12 21:53:55 ----HD---- C:\WINDOWS\inf
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\WinSxS
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\twain_32
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Temp
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\wins
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\wbem
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\usmt
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\spool
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\ShellExt
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\Setup
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\ras
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\oobe
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\npp
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\mui
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\inetsrv
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\IME
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\icsxml
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\ias
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\fr-fr
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\fr
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\export
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\drivers
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\dhcp
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\config
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\3com_dmi
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\3076
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\2052
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\1054
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\1042
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\1041
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\1037
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\1036
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\1033
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\1031
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\1028
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\1025
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\security
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Resources
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\repair
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Provisioning
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\PeerNet
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\pchealth
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Network Diagnostic
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\mui
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\msapps
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\msagent
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Media
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\L2Schemas
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\java
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\ime
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Help
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\ehome
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Driver Cache
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Debug
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Cursors
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Connection Wizard
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Config
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\AppPatch
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\addins
      2009-07-12 21:53:55 ----D---- C:\WINDOWS
      2009-07-12 21:52:31 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\CyberLink
      2009-07-12 21:52:27 ----D---- C:\Documents and Settings\All Users\Application Data\CyberLink
      2009-07-12 21:51:54 ----N---- C:\WINDOWS\system32\msxml3a.dll
      2009-07-12 21:50:02 ----D---- C:\Program Files\CyberLink
      2009-07-12 21:49:30 ----N---- C:\WINDOWS\system32\spmsg.dll
      2009-07-12 21:49:24 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
      2009-07-12 21:48:45 ----D---- C:\Program Files\Windows Media Connect 2
      2009-07-12 21:48:32 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
      2009-07-12 21:47:04 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
      2009-07-12 21:46:30 ----D---- C:\WINDOWS\system32\LogFiles
      2009-07-12 21:46:22 ----A---- C:\WINDOWS\system32\spupdsvc.exe
      2009-07-12 21:46:19 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
      2009-07-12 21:46:00 ----D---- C:\DFH
      2009-07-12 21:45:25 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
      2009-07-12 21:44:32 ----D---- C:\Program Files\ToniArts
      2009-07-12 21:44:31 ----HD---- C:\Program Files\InstallShield Installation Information
      2009-07-12 21:44:25 ----A---- C:\WINDOWS\system32\aswBoot.exe
      2009-07-12 21:44:20 ----D---- C:\Program Files\Alwil Software
      2009-07-12 21:43:43 ----D---- C:\Program Files\Intel Desktop Board
      2009-07-12 21:43:31 ----D---- C:\Program Files\Fichiers communs\InstallShield
      2009-07-12 21:43:19 ----SHD---- C:\RECYCLER
      2009-07-12 21:42:55 ----D---- C:\Program Files\Mozilla Firefox
      2009-07-12 21:41:39 ----DC---- C:\WINDOWS\system32\DRVSTORE
      2009-07-12 21:41:29 ----D---- C:\Program Files\MSN Messenger
      2009-07-12 21:38:55 ----RD---- C:\Program Files\Skype
      2009-07-12 21:38:45 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
      2009-07-12 21:37:03 ----D---- C:\Documents and Settings\All Users\Application Data\Cybera Server
      2009-07-12 21:37:00 ----D---- C:\Program Files\Cybera Server
      2009-07-12 21:36:24 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
      2009-07-12 21:35:54 ----D---- C:\Program Files\Fichiers communs\Adobe
      2009-07-12 21:35:54 ----D---- C:\Program Files\Adobe
      2009-07-12 21:31:53 ----D---- C:\WINDOWS\SHELLNEW
      2009-07-12 21:31:09 ----D---- C:\Program Files\Microsoft Office
      2009-07-12 21:31:07 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
      2009-07-12 21:30:41 ----RHD---- C:\MSOCache
      2009-07-12 21:30:29 ----D---- C:\Program Files\GRISOFT
      2009-07-12 21:29:44 ----D---- C:\Program Files\Spybot - Search & Destroy
      2009-07-12 21:29:44 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
      2009-07-12 21:26:06 ----RA---- C:\WINDOWS\apptune1018.exe
      2009-07-12 21:25:59 ----RA---- C:\WINDOWS\system32\ZSPOOL.DLL
      2009-07-12 21:25:58 ----RA---- C:\WINDOWS\system32\ZTAG32.DLL
      2009-07-12 21:25:58 ----RA---- C:\WINDOWS\system32\zlm.dll
      2009-07-12 21:25:58 ----RA---- C:\WINDOWS\system32\zlhp1018.dll
      2009-07-12 21:25:58 ----RA---- C:\WINDOWS\system32\IMF32.DLL
      2009-07-12 21:25:57 ----RA---- C:\WINDOWS\system32\zshp1018.exe
      2009-07-12 21:25:57 ----RA---- C:\WINDOWS\system32\vshp1018.dll
      2009-07-12 21:25:56 ----D---- C:\Program Files\Hewlett-Packard
      2009-07-12 21:25:54 ----HD---- C:\Program Files\Zenographics
      2009-07-12 21:25:49 ----D---- C:\Documents and Settings\All Users\Application Data\HP
      2009-07-12 21:23:59 ----D---- C:\Program Files\Fichiers communs\HP
      2009-07-12 21:23:31 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\Identities
      2009-07-12 21:23:09 ----HD---- C:\Program Files\Uninstall Information
      2009-07-12 21:22:43 ----SD---- C:\Documents and Settings\AICHASTAR\Application Data\Microsoft
      2009-07-12 21:22:43 ----ASH---- C:\Documents and Settings\AICHASTAR\Application Data\desktop.ini
      2009-07-12 21:22:34 ----D---- C:\Program Files\WinRAR
      2009-07-12 21:21:45 ----D---- C:\WINDOWS\SoftwareDistribution
      2009-07-12 21:21:43 ----SD---- C:\WINDOWS\system32\Microsoft
      2009-07-12 21:21:43 ----D---- C:\WINDOWS\Prefetch
      2009-07-12 21:21:43 ----A---- C:\WINDOWS\SchedLgU.Txt
      2009-07-12 21:20:47 ----A---- C:\WINDOWS\system32\pdfcmnnt.dll
      2009-07-12 21:20:43 ----A---- C:\WINDOWS\system32\VB6FR.DLL
      2009-07-12 21:20:43 ----A---- C:\WINDOWS\system32\MSCMCFR.DLL
      2009-07-12 21:20:42 ----A---- C:\WINDOWS\system32\MSCC2FR.DLL
      2009-07-12 21:20:41 ----D---- C:\Program Files\PDFCreator
      2009-07-12 21:20:41 ----A---- C:\WINDOWS\system32\MSMPIDE.DLL
      2009-07-12 21:15:56 ----D---- C:\WINDOWS\system32\xircom
      2009-07-12 21:15:56 ----D---- C:\Program Files\xerox
      2009-07-12 21:15:56 ----D---- C:\Program Files\microsoft frontpage
      2009-07-12 21:15:03 ----A---- C:\WINDOWS\control.ini
      2009-07-12 21:15:03 ----A---- C:\AUTOEXEC.BAT
      2009-07-12 21:14:41 ----A---- C:\WINDOWS\OEWABLog.txt
      2009-07-12 21:14:35 ----A---- C:\WINDOWS\system32\mapi32.dll
      2009-07-12 21:13:30 ----D---- C:\Program Files\VideoLAN
      2009-07-12 21:13:00 ----SD---- C:\WINDOWS\Downloaded Program Files
      2009-07-12 21:13:00 ----RD---- C:\WINDOWS\Offline Web Pages
      2009-07-12 21:13:00 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
      2009-07-12 21:12:50 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
      2009-07-12 21:12:43 ----HD---- C:\Program Files\WindowsUpdate
      2009-07-12 21:12:38 ----D---- C:\Program Files\Services en ligne
      2009-07-12 21:12:10 ----D---- C:\WINDOWS\system32\DirectX
      2009-07-12 21:12:02 ----A---- C:\WINDOWS\system32\atrace.dll
      2009-07-12 21:11:59 ----A---- C:\WINDOWS\system32\desktop.ini
      2009-07-12 21:11:59 ----A---- C:\WINDOWS\desktop.ini
      2009-07-12 21:11:50 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
      2009-07-12 21:11:48 ----D---- C:\Program Files\Fichiers communs\Services
      2009-07-12 21:11:48 ----A---- C:\WINDOWS\system32\acctres.dll
      2009-07-12 21:11:44 ----SD---- C:\WINDOWS\Tasks
      2009-07-12 21:11:44 ----A---- C:\WINDOWS\system32\icfgnt5.dll
      2009-07-12 21:11:43 ----D---- C:\Program Files\Fichiers communs\MSSoap
      2009-07-12 21:11:37 ----D---- C:\WINDOWS\srchasst
      2009-07-12 21:11:35 ----D---- C:\WINDOWS\system32\Macromed
      2009-07-12 21:11:31 ----A---- C:\WINDOWS\system32\wuweb.dll
      2009-07-12 21:11:31 ----A---- C:\WINDOWS\system32\wucltui.dll
      2009-07-12 21:11:31 ----A---- C:\WINDOWS\system32\wuauserv.dll
      2009-07-12 21:11:31 ----A---- C:\WINDOWS\system32\wuaueng1.dll
      2009-07-12 21:11:30 ----A---- C:\WINDOWS\system32\wups.dll
      2009-07-12 21:11:30 ----A---- C:\WINDOWS\system32\wuaueng.dll
      2009-07-12 21:11:30 ----A---- C:\WINDOWS\system32\wuauclt1.exe
      2009-07-12 21:11:30 ----A---- C:\WINDOWS\system32\wuauclt.exe
      2009-07-12 21:11:30 ----A---- C:\WINDOWS\system32\wuapi.dll.wusetup.347734.bak
      2009-07-12 21:11:30 ----A---- C:\WINDOWS\system32\wuapi.dll
      2009-07-12 21:11:29 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
      2009-07-12 21:11:29 ----A---- C:\WINDOWS\system32\qmgr.dll
      2009-07-12 21:11:29 ----A---- C:\WINDOWS\system32\bitsprx4.dll
      2009-07-12 21:11:29 ----A---- C:\WINDOWS\system32\bitsprx3.dll
      2009-07-12 21:11:29 ----A---- C:\WINDOWS\system32\bitsprx2.dll
      2009-07-12 21:11:23 ----D---- C:\Program Files\Movie Maker
      2009-07-12 21:11:16 ----D---- C:\Program Files\Fichiers communs\Hewlett-Packard
      2009-07-12 21:10:57 ----A---- C:\WINDOWS\system32\safrslv.dll
      2009-07-12 21:10:57 ----A---- C:\WINDOWS\system32\safrdm.dll
      2009-07-12 21:10:57 ----A---- C:\WINDOWS\system32\safrcdlg.dll
      2009-07-12 21:10:57 ----A---- C:\WINDOWS\system32\racpldlg.dll
      2009-07-12 21:10:52 ----A---- C:\WINDOWS\system32\fltMc.exe
      2009-07-12 21:10:52 ----A---- C:\WINDOWS\system32\fltlib.dll
      2009-07-12 21:10:51 ----D---- C:\WINDOWS\system32\Restore
      2009-07-12 21:10:51 ----A---- C:\WINDOWS\system32\srsvc.dll
      2009-07-12 21:10:51 ----A---- C:\WINDOWS\system32\srrstr.dll
      2009-07-12 21:10:51 ----A---- C:\WINDOWS\system32\srclient.dll
      2009-07-12 21:10:50 ----A---- C:\WINDOWS\system32\isrdbg32.dll
      2009-07-12 21:10:50 ----A---- C:\WINDOWS\system32\ils.dll
      2009-07-12 21:10:49 ----A---- C:\WINDOWS\system32\nmmkcert.dll
      2009-07-12 21:10:49 ----A---- C:\WINDOWS\system32\msconf.dll
      2009-07-12 21:10:49 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
      2009-07-12 21:10:49 ----A---- C:\WINDOWS\system32\mnmdd.dll
      2009-07-12 21:10:45 ----D---- C:\Program Files\NetMeeting
      2009-07-12 21:10:45 ----A---- C:\WINDOWS\system32\msoert2.dll
      2009-07-12 21:10:45 ----A---- C:\WINDOWS\system32\msoeacct.dll
      2009-07-12 21:10:44 ----A---- C:\WINDOWS\system32\inetres.dll
      2009-07-12 21:10:43 ----A---- C:\WINDOWS\system32\inetcomm.dll
      2009-07-12 21:10:40 ----D---- C:\Program Files\Outlook Express
      2009-07-12 21:10:40 ----A---- C:\WINDOWS\system32\schedsvc.dll
      2009-07-12 21:10:40 ----A---- C:\WINDOWS\system32\mstinit.exe
      2009-07-12 21:10:40 ----A---- C:\WINDOWS\system32\mstask.dll
      2009-07-12 21:10:39 ----A---- C:\WINDOWS\system32\isign32.dll
      2009-07-12 21:10:39 ----A---- C:\WINDOWS\system32\inetcfg.dll
      2009-07-12 21:10:39 ----A---- C:\WINDOWS\system32\icwphbk.dll
      2009-07-12 21:10:39 ----A---- C:\WINDOWS\system32\icwdial.dll
      2009-07-12 21:10:31 ----D---- C:\Program Files\Fichiers communs\System
      2009-07-12 21:10:30 ----D---- C:\Program Files\Internet Explorer
      2009-07-12 21:09:36 ----A---- C:\WINDOWS\system32\HPZisn12.dll
      2009-07-12 21:09:36 ----A---- C:\WINDOWS\system32\HPZipt12.dll
      2009-07-12 21:09:36 ----A---- C:\WINDOWS\system32\HPZipr12.dll
      2009-07-12 21:09:36 ----A---- C:\WINDOWS\system32\HPZipm12.exe
      2009-07-12 21:09:36 ----A---- C:\WINDOWS\system32\HPZinw12.exe
      2009-07-12 21:09:36 ----A---- C:\WINDOWS\system32\HPZidr12.dll
      2009-07-12 21:09:35 ----A---- C:\WINDOWS\IsUninst.exe
      2009-07-12 21:09:18 ----D---- C:\Program Files\ComPlus Applications
      2009-07-12 21:09:16 ----A---- C:\WINDOWS\vbaddin.ini
      2009-07-12 21:09:16 ----A---- C:\WINDOWS\vb.ini
      2009-07-12 21:09:11 ----D---- C:\WINDOWS\Registration
      2009-07-12 21:09:02 ----D---- C:\Program Files\Windows Media Player
      2009-07-12 21:09:02 ----D---- C:\Program Files\Online Services
      2009-07-12 21:08:52 ----D---- C:\Program Files\Messenger
      2009-07-12 21:08:46 ----D---- C:\Program Files\MSN Gaming Zone
      2009-07-12 21:08:46 ----A---- C:\WINDOWS\system32\write.exe
      2009-07-12 21:08:33 ----A---- C:\WINDOWS\system32\sndvol32.exe
      2009-07-12 21:08:33 ----A---- C:\WINDOWS\system32\hticons.dll
      2009-07-12 21:08:32 ----A---- C:\WINDOWS\system32\avwav.dll
      2009-07-12 21:08:32 ----A---- C:\WINDOWS\system32\avtapi.dll
      2009-07-12 21:08:32 ----A---- C:\WINDOWS\system32\avmeter.dll
      2009-07-12 21:08:31 ----A---- C:\WINDOWS\system32\winchat.exe
      2009-07-12 21:08:22 ----A---- C:\WINDOWS\system32\getuname.dll
      2009-07-12 21:08:22 ----A---- C:\WINDOWS\system32\charmap.exe
      2009-07-12 21:08:21 ----A---- C:\WINDOWS\system32\sol.exe
      2009-07-12 21:08:21 ----A---- C:\WINDOWS\system32\calc.exe
      2009-07-12 21:08:20 ----A---- C:\WINDOWS\system32\winmine.exe
      2009-07-12 21:08:20 ----A---- C:\WINDOWS\system32\reset.exe
      2009-07-12 21:08:20 ----A---- C:\WINDOWS\system32\mshearts.exe
      2009-07-12 21:08:20 ----A---- C:\WINDOWS\system32\freecell.exe
      2009-07-12 21:08:19 ----A---- C:\WINDOWS\system32\usrlogon.cmd
      2009-07-12 21:08:19 ----A---- C:\WINDOWS\system32\tsshutdn.exe
      2009-07-12 21:08:19 ----A---- C:\WINDOWS\system32\tslabels.ini
      2009-07-12 21:08:19 ----A---- C:\WINDOWS\system32\tskill.exe
      2009-07-12 21:08:19 ----A---- C:\WINDOWS\system32\tsdiscon.exe
      2009-07-12 21:08:19 ----A---- C:\WINDOWS\system32\tscon.exe
      2009-07-12 21:08:19 ----A---- C:\WINDOWS\system32\shadow.exe
      2009-07-12 21:08:19 ----A---- C:\WINDOWS\system32\rwinsta.exe
      2009-07-12 21:08:19 ----A---- C:\WINDOWS\system32\regini.exe
      2009-07-12 21:08:18 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
      2009-07-12 21:08:18 ----A---- C:\WINDOWS\system32\qwinsta.exe
      2009-07-12 21:08:18 ----A---- C:\WINDOWS\system32\qappsrv.exe
      2009-07-12 21:08:18 ----A---- C:\WINDOWS\system32\msg.exe
      2009-07-12 21:08:18 ----A---- C:\WINDOWS\system32\msdtcprf.ini
      2009-07-12 21:08:18 ----A---- C:\WINDOWS\system32\logoff.exe
      2009-07-12 21:08:18 ----A---- C:\WINDOWS\system32\cdmodem.dll
      2009-07-12 21:08:09 ----A---- C:\WINDOWS\system32\wmimgmt.msc
      2009-07-12 21:07:54 ----D---- C:\Program Files\MSN
      2009-07-12 21:07:53 ----A---- C:\WINDOWS\system32\sndrec32.exe
      2009-07-12 21:07:53 ----A---- C:\WINDOWS\system32\accwiz.exe
      2009-07-12 21:07:52 ----A---- C:\WINDOWS\system32\mplay32.exe
      2009-07-12 21:07:52 ----A---- C:\WINDOWS\system32\hypertrm.dll
      2009-07-12 21:07:51 ----D---- C:\Program Files\Windows NT
      2009-07-12 21:07:51 ----A---- C:\WINDOWS\system32\mspaint.exe
      2009-07-12 21:07:51 ----A---- C:\WINDOWS\system32\clipbrd.exe
      2009-07-12 21:07:50 ----A---- C:\WINDOWS\system32\spider.exe
      2009-07-12 21:07:49 ----A---- C:\WINDOWS\system32\tsgqec.dll
      2009-07-12 21:07:49 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
      2009-07-12 21:07:49 ----A---- C:\WINDOWS\system32\rhttpaa.dll
      2009-07-12 21:07:48 ----A---- C:\WINDOWS\system32\aaclient.dll
      2009-07-12 21:07:47 ----A---- C:\WINDOWS\system32\remotepg.dll
      2009-07-12 21:07:47 ----A---- C:\WINDOWS\system32\mstscax.dll
      2009-07-12 21:07:47 ----A---- C:\WINDOWS\system32\mstsc.exe
      2009-07-12 21:07:46 ----A---- C:\WINDOWS\system32\termsrv.dll
      2009-07-12 21:07:46 ----A---- C:\WINDOWS\system32\sessmgr.exe
      2009-07-12 21:07:46 ----A---- C:\WINDOWS\system32\rdshost.exe
      2009-07-12 21:07:46 ----A---- C:\WINDOWS\system32\rdsaddin.exe
      2009-07-12 21:07:46 ----A---- C:\WINDOWS\system32\rdchost.dll
      2009-07-12 21:07:45 ----D---- C:\WINDOWS\system32\MsDtc
      2009-07-12 21:07:45 ----A---- C:\WINDOWS\system32\rdpwsx.dll
      2009-07-12 21:07:45 ----A---- C:\WINDOWS\system32\rdpsnd.dll
      2009-07-12 21:07:45 ----A---- C:\WINDOWS\system32\rdpclip.exe
      2009-07-12 21:07:45 ----A---- C:\WINDOWS\system32\qprocess.exe
      2009-07-12 21:07:45 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
      2009-07-12 21:07:45 ----A---- C:\WINDOWS\system32\icaapi.dll
      2009-07-12 21:07:45 ----A---- C:\WINDOWS\system32\cfgbkend.dll
      2009-07-12 21:07:44 ----A---- C:\WINDOWS\system32\xolehlp.dll
      2009-07-12 21:07:44 ----A---- C:\WINDOWS\system32\mtxoci.dll
      2009-07-12 21:07:44 ----A---- C:\WINDOWS\system32\msdtctm.dll
      2009-07-12 21:07:44 ----A---- C:\WINDOWS\system32\msdtcprx.dll
      2009-07-12 21:07:43 ----A---- C:\WINDOWS\system32\msdtclog.dll
      2009-07-12 21:07:43 ----A---- C:\WINDOWS\system32\msdtc.exe
      2009-07-12 21:07:42 ----D---- C:\WINDOWS\system32\Com
      2009-07-12 21:07:42 ----A---- C:\WINDOWS\system32\mtxlegih.dll
      2009-07-12 21:07:42 ----A---- C:\WINDOWS\system32\mtxex.dll
      2009-07-12 21:07:42 ----A---- C:\WINDOWS\system32\mtxdm.dll
      2009-07-12 21:07:42 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
      2009-07-12 21:07:41 ----A---- C:\WINDOWS\system32\stclient.dll
      2009-07-12 21:07:41 ----A---- C:\WINDOWS\system32\comrepl.dll
      2009-07-12 21:07:41 ----A---- C:\WINDOWS\system32\comaddin.dll
      2009-07-12 21:07:41 ----A---- C:\WINDOWS\system32\colbact.dll
      2009-07-12 21:07:41 ----A---- C:\WINDOWS\system32\clbcatex.dll
      2009-07-12 21:07:41 ----A---- C:\WINDOWS\system32\catsrvps.dll
      2009-07-12 21:07:40 ----A---- C:\WINDOWS\system32\catsrvut.dll
      2009-07-12 21:07:40 ----A---- C:\WINDOWS\system32\catsrv.dll
      2009-07-12 21:07:39 ----A---- C:\WINDOWS\system32\comuid.dll
      2009-07-12 21:07:39 ----A---- C:\WINDOWS\system32\comsvcs.dll
      2009-07-12 21:07:39 ----A---- C:\WINDOWS\system32\comsnap.dll
      2009-07-12 21:07:38 ----A---- C:\WINDOWS\system32\clbcatq.dll
      2009-07-12 21:07:29 ----A---- C:\WINDOWS\system32\servdeps.dll
      2009-07-12 21:07:29 ----A---- C:\WINDOWS\system32\mmfutil.dll
      2009-07-12 21:07:29 ----A---- C:\WINDOWS\system32\licwmi.dll
      2009-07-12 21:07:29 ----A---- C:\WINDOWS\system32\cmprops.dll
      2009-07-12 21:04:47 ----D---- C:\Program Files\HP
      2009-07-12 20:58:17 ----A---- C:\WINDOWS\system32\hpz3l43a.dll
      2009-07-12 20:58:15 ----RA---- C:\WINDOWS\system32\hpzids01.dll
      2009-07-12 20:57:32 ----RA---- C:\WINDOWS\system32\HPZc3212.dll
      2009-07-12 20:54:17 ----RA---- C:\WINDOWS\system32\hpovst09.dll
      2009-07-12 20:54:16 ----RA---- C:\WINDOWS\system32\hpotiop2.dll
      2009-07-12 20:54:15 ----RA---- C:\WINDOWS\system32\hpowiax2.dll
      2009-07-12 20:44:26 ----D---- C:\Program Files\Microsoft Works
      2009-07-12 20:42:41 ----D---- C:\Program Files\Microsoft Visual Studio
      2009-07-12 20:42:39 ----D---- C:\Program Files\Fichiers communs\DESIGNER

      ======List of files/folders modified in the last 1 months======

      2009-07-12 21:48:59 ----A---- C:\WINDOWS\win.ini
      2009-07-12 21:46:16 ----A---- C:\WINDOWS\system.ini

      ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

      R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944]
      R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768]
      R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376]
      R1 AvgArCln;Avg Anti-Rootkit Clean Driver; C:\WINDOWS\System32\DRIVERS\AvgArCln.sys [2007-01-18 3968]
      R1 P3;Pilote processeur Intel Pentium III; C:\WINDOWS\system32\DRIVERS\p3.sys [2008-04-13 46848]
      R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
      R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032]
      R3 ac97intc;Service d'installation du pilote audio Intel(r) 82801 (WDM); C:\WINDOWS\system32\drivers\ac97intc.sys [2001-08-17 96256]
      R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152]
      R3 i81x;i81x; C:\WINDOWS\system32\DRIVERS\i81xnt5.sys [2008-04-13 161020]
      R3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-13 20992]
      R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
      R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
      S3 catchme;catchme; \??\C:\DOCUME~1\AICHAS~1\LOCALS~1\Temp\catchme.sys []
      S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-10-28 49664]
      S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-10-28 16496]
      S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-10-28 21568]
      S3 iAimFP0;iAimFP0; C:\WINDOWS\system32\DRIVERS\wADV01nt.sys [2008-04-13 12415]
      S3 iAimFP1;iAimFP1; C:\WINDOWS\system32\DRIVERS\wADV02NT.sys [2008-04-13 12127]
      S3 iAimFP2;iAimFP2; C:\WINDOWS\system32\DRIVERS\wADV05NT.sys [2008-04-13 11775]
      S3 iAimFP3;iAimFP3; C:\WINDOWS\system32\DRIVERS\wSiINTxx.sys [2008-04-13 12063]
      S3 iAimFP4;iAimFP4; C:\WINDOWS\system32\DRIVERS\wVchNTxx.sys [2008-04-13 19455]
      S3 iAimFP5;iAimFP5; C:\WINDOWS\system32\DRIVERS\wADV07nt.sys [2008-04-13 11807]
      S3 iAimFP6;iAimFP6; C:\WINDOWS\system32\DRIVERS\wADV08nt.sys [2008-04-13 11295]
      S3 iAimFP7;iAimFP7; C:\WINDOWS\system32\DRIVERS\wADV09nt.sys [2008-04-13 11871]
      S3 iAimTV0;iAimTV0; C:\WINDOWS\system32\DRIVERS\wATV01nt.sys [2008-04-13 29311]
      S3 iAimTV1;iAimTV1; C:\WINDOWS\system32\DRIVERS\wATV02NT.sys [2008-04-13 19551]
      S3 iAimTV3;iAimTV3; C:\WINDOWS\system32\DRIVERS\wATV04nt.sys [2008-04-13 33599]
      S3 iAimTV4;iAimTV4; C:\WINDOWS\system32\DRIVERS\wCh7xxNT.sys [2008-04-13 23615]
      S3 iAimTV5;iAimTV5; C:\WINDOWS\system32\DRIVERS\wATV10nt.sys [2008-04-13 25471]
      S3 iAimTV6;iAimTV6; C:\WINDOWS\system32\DRIVERS\wATV06nt.sys [2008-04-13 22271]
      S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
      S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
      S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
      S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
      S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
      S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

      ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

      R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
      R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
      R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-10-20 71096]
      R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2005-08-08 167936]
      R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
      R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
      R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
      S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2005-03-14 69632]
      S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
      S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
      S3 NMIndexingService;NMIndexingService; C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe [2007-05-08 271920]
      S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
      S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
      S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]
      S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
      S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]

      -----------------EOF-----------------
      0
    3. MOUSARGA
       
      ======List of files/folders created in the last 1 months======

      2009-07-14 15:30:37 ----D---- C:\Program Files\trend micro
      2009-07-14 15:30:33 ----D---- C:\rsit
      2009-07-14 15:12:27 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\Canneverbe_Limited
      2009-07-14 14:21:55 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\dvdcss
      2009-07-14 10:07:56 ----D---- C:\WINDOWS\LastGood
      2009-07-14 09:00:43 ----D---- C:\WINDOWS\system32\PreInstall
      2009-07-14 09:00:38 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
      2009-07-13 21:57:16 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
      2009-07-13 21:50:53 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\Windows Search
      2009-07-13 21:50:23 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\Windows Desktop Search
      2009-07-13 21:49:40 ----D---- C:\WINDOWS\system32\GroupPolicy
      2009-07-13 21:49:40 ----D---- C:\Program Files\Windows Desktop Search
      2009-07-13 21:49:28 ----HDC---- C:\WINDOWS\$NtUninstallKB940157$
      2009-07-13 21:49:12 ----HDC---- C:\WINDOWS\$NtUninstallKB915800-v4$
      2009-07-13 21:35:49 ----A---- C:\WINDOWS\system32\wups2.dll
      2009-07-13 21:35:48 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
      2009-07-13 21:35:48 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
      2009-07-13 21:35:47 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
      2009-07-13 21:28:48 ----A---- C:\WINDOWS\NeroDigital.ini
      2009-07-13 21:25:22 ----D---- C:\Program Files\CDBurnerXP
      2009-07-13 21:11:25 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\Image Zone Express
      2009-07-13 21:08:54 ----RSD---- C:\WINDOWS\assembly
      2009-07-13 21:06:51 ----D---- C:\WINDOWS\Microsoft.NET
      2009-07-13 17:28:21 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\WinRAR
      2009-07-13 14:25:11 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
      2009-07-13 14:25:09 ----HD---- C:\WINDOWS\$hf_mig$
      2009-07-13 11:00:00 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\Macromedia
      2009-07-13 10:57:57 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\vlc
      2009-07-13 09:55:58 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\Adobe
      2009-07-13 09:53:44 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\U3
      2009-07-13 09:48:44 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\HP
      2009-07-13 08:21:25 ----A---- C:\WINDOWS\zip.exe
      2009-07-13 08:21:25 ----A---- C:\WINDOWS\SWXCACLS.exe
      2009-07-13 08:21:25 ----A---- C:\WINDOWS\SWSC.exe
      2009-07-13 08:21:25 ----A---- C:\WINDOWS\SWREG.exe
      2009-07-13 08:21:25 ----A---- C:\WINDOWS\sed.exe
      2009-07-13 08:21:25 ----A---- C:\WINDOWS\PEV.exe
      2009-07-13 08:21:25 ----A---- C:\WINDOWS\NIRCMD.exe
      2009-07-13 08:21:25 ----A---- C:\WINDOWS\grep.exe
      2009-07-13 08:21:15 ----D---- C:\WINDOWS\ERDNT
      2009-07-13 08:21:12 ----SD---- C:\ComboFix
      2009-07-13 08:21:11 ----A---- C:\WINDOWS\system32\CF25945.exe
      2009-07-13 08:20:40 ----D---- C:\Qoobox
      2009-07-13 08:02:37 ----D---- C:\WINDOWS\system32\SoftwareDistribution
      2009-07-13 08:01:00 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\Mozilla
      2009-07-12 22:06:30 ----A---- C:\WINDOWS\system32\h323log.txt
      2009-07-12 22:04:12 ----A---- C:\WINDOWS\system32\ksuser.dll
      2009-07-12 22:04:08 ----A---- C:\WINDOWS\system32\usbui.dll
      2009-07-12 22:03:58 ----A---- C:\WINDOWS\system32\i81xdnt5.dll
      2009-07-12 22:02:15 ----A---- C:\WINDOWS\imsins.BAK
      2009-07-12 22:02:12 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
      2009-07-12 22:02:11 ----SHD---- C:\WINDOWS\Installer
      2009-07-12 22:02:10 ----D---- C:\Program Files\Fichiers communs\ODBC
      2009-07-12 22:02:10 ----A---- C:\WINDOWS\ODBCINST.INI
      2009-07-12 22:02:05 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
      2009-07-12 22:02:04 ----RD---- C:\Program Files
      2009-07-12 22:02:04 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
      2009-07-12 22:02:04 ----D---- C:\Program Files\Fichiers communs
      2009-07-12 22:01:59 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
      2009-07-12 22:01:59 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
      2009-07-12 22:01:59 ----RA---- C:\WINDOWS\system32\kbdazel.dll
      2009-07-12 22:01:57 ----RA---- C:\WINDOWS\system32\kbdtat.dll
      2009-07-12 22:01:57 ----RA---- C:\WINDOWS\system32\kbdmon.dll
      2009-07-12 22:01:57 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
      2009-07-12 22:01:56 ----RA---- C:\WINDOWS\system32\kbdycc.dll
      2009-07-12 22:01:56 ----RA---- C:\WINDOWS\system32\kbduzb.dll
      2009-07-12 22:01:56 ----RA---- C:\WINDOWS\system32\kbdur.dll
      2009-07-12 22:01:56 ----RA---- C:\WINDOWS\system32\kbdru1.dll
      2009-07-12 22:01:56 ----RA---- C:\WINDOWS\system32\kbdru.dll
      2009-07-12 22:01:56 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
      2009-07-12 22:01:56 ----RA---- C:\WINDOWS\system32\kbdbu.dll
      2009-07-12 22:01:56 ----RA---- C:\WINDOWS\system32\kbdblr.dll
      2009-07-12 22:01:56 ----RA---- C:\WINDOWS\system32\kbdaze.dll
      2009-07-12 22:01:54 ----RA---- C:\WINDOWS\system32\kbdhept.dll
      2009-07-12 22:01:54 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
      2009-07-12 22:01:54 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
      2009-07-12 22:01:54 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
      2009-07-12 22:01:54 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
      2009-07-12 22:01:54 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
      2009-07-12 22:01:53 ----RA---- C:\WINDOWS\system32\kbdhe.dll
      2009-07-12 22:01:52 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
      2009-07-12 22:01:52 ----RA---- C:\WINDOWS\system32\kbdlt.dll
      2009-07-12 22:01:51 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
      2009-07-12 22:01:51 ----RA---- C:\WINDOWS\system32\kbdlv.dll
      2009-07-12 22:01:51 ----RA---- C:\WINDOWS\system32\kbdest.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdycl.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdsl.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdro.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdpl.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdhu.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdcz.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\kbdcr.dll
      2009-07-12 22:01:49 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
      2009-07-12 22:01:41 ----A---- C:\WINDOWS\system32\irclass.dll
      2009-07-12 22:01:41 ----A---- C:\WINDOWS\system32\dgsetup.dll
      2009-07-12 22:01:41 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
      2009-07-12 22:01:40 ----A---- C:\WINDOWS\system32\spxcoins.dll
      2009-07-12 22:01:40 ----A---- C:\WINDOWS\system32\EqnClass.Dll
      2009-07-12 22:01:37 ----N---- C:\WINDOWS\system32\CONFIG.TMP
      2009-07-12 22:01:37 ----A---- C:\WINDOWS\TASKMAN.EXE
      2009-07-12 22:01:37 ----A---- C:\WINDOWS\system32\batt.dll
      2009-07-12 22:01:36 ----A---- C:\WINDOWS\NOTEPAD.EXE
      2009-07-12 22:01:34 ----A---- C:\WINDOWS\system32\storprop.dll
      2009-07-12 22:01:23 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
      2009-07-12 22:01:15 ----RA---- C:\WINDOWS\SET8.tmp
      2009-07-12 22:01:11 ----RA---- C:\WINDOWS\SET4.tmp
      2009-07-12 22:01:08 ----RA---- C:\WINDOWS\SET3.tmp
      2009-07-12 22:01:01 ----D---- C:\WINDOWS\system32\CatRoot2
      2009-07-12 22:01:01 ----D---- C:\WINDOWS\system32\CatRoot
      2009-07-12 22:00:55 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
      2009-07-12 22:00:33 ----A---- C:\WINDOWS\setuplog.txt
      2009-07-12 22:00:28 ----SHD---- C:\System Volume Information
      2009-07-12 22:00:28 ----D---- C:\Documents and Settings
      2009-07-12 21:59:40 ----SH---- C:\boot.ini
      2009-07-12 21:56:08 ----D---- C:\Program Files\Nero
      2009-07-12 21:56:08 ----D---- C:\Program Files\Fichiers communs\Ahead
      2009-07-12 21:56:08 ----D---- C:\Documents and Settings\All Users\Application Data\Nero
      2009-07-12 21:54:37 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
      2009-07-12 21:54:35 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
      2009-07-12 21:53:55 ----RSHDC---- C:\WINDOWS\system32\dllcache
      2009-07-12 21:53:55 ----RSD---- C:\WINDOWS\Fonts
      2009-07-12 21:53:55 ----RD---- C:\WINDOWS\Web
      2009-07-12 21:53:55 ----HD---- C:\WINDOWS\inf
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\WinSxS
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\twain_32
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Temp
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\wins
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\wbem
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\usmt
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\spool
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\ShellExt
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\Setup
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\ras
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\oobe
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\npp
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\mui
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\inetsrv
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\IME
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\icsxml
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\ias
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\fr-fr
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\fr
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\export
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\drivers
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\dhcp
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\config
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\3com_dmi
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\3076
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\2052
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\1054
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\1042
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\1041
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\1037
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\1036
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\1033
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\1031
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\1028
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32\1025
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system32
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\system
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\security
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Resources
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\repair
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Provisioning
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\PeerNet
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\pchealth
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Network Diagnostic
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\mui
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\msapps
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\msagent
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Media
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\L2Schemas
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\java
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\ime
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Help
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\ehome
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Driver Cache
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Debug
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Cursors
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Connection Wizard
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\Config
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\AppPatch
      2009-07-12 21:53:55 ----D---- C:\WINDOWS\addins
      2009-07-12 21:53:55 ----D---- C:\WINDOWS
      2009-07-12 21:52:31 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\CyberLink
      2009-07-12 21:52:27 ----D---- C:\Documents and Settings\All Users\Application Data\CyberLink
      2009-07-12 21:51:54 ----N---- C:\WINDOWS\system32\msxml3a.dll
      2009-07-12 21:50:02 ----D---- C:\Program Files\CyberLink
      2009-07-12 21:49:30 ----N---- C:\WINDOWS\system32\spmsg.dll
      2009-07-12 21:49:24 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
      2009-07-12 21:48:45 ----D---- C:\Program Files\Windows Media Connect 2
      2009-07-12 21:48:32 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
      2009-07-12 21:47:04 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
      2009-07-12 21:46:30 ----D---- C:\WINDOWS\system32\LogFiles
      2009-07-12 21:46:22 ----A---- C:\WINDOWS\system32\spupdsvc.exe
      2009-07-12 21:46:19 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
      2009-07-12 21:46:00 ----D---- C:\DFH
      2009-07-12 21:45:25 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
      2009-07-12 21:44:32 ----D---- C:\Program Files\ToniArts
      2009-07-12 21:44:31 ----HD---- C:\Program Files\InstallShield Installation Information
      2009-07-12 21:44:25 ----A---- C:\WINDOWS\system32\aswBoot.exe
      2009-07-12 21:44:20 ----D---- C:\Program Files\Alwil Software
      2009-07-12 21:43:43 ----D---- C:\Program Files\Intel Desktop Board
      2009-07-12 21:43:31 ----D---- C:\Program Files\Fichiers communs\InstallShield
      2009-07-12 21:43:19 ----SHD---- C:\RECYCLER
      2009-07-12 21:42:55 ----D---- C:\Program Files\Mozilla Firefox
      2009-07-12 21:41:39 ----DC---- C:\WINDOWS\system32\DRVSTORE
      2009-07-12 21:41:29 ----D---- C:\Program Files\MSN Messenger
      2009-07-12 21:38:55 ----RD---- C:\Program Files\Skype
      2009-07-12 21:38:45 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
      2009-07-12 21:37:03 ----D---- C:\Documents and Settings\All Users\Application Data\Cybera Server
      2009-07-12 21:37:00 ----D---- C:\Program Files\Cybera Server
      2009-07-12 21:36:24 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
      2009-07-12 21:35:54 ----D---- C:\Program Files\Fichiers communs\Adobe
      2009-07-12 21:35:54 ----D---- C:\Program Files\Adobe
      2009-07-12 21:31:53 ----D---- C:\WINDOWS\SHELLNEW
      2009-07-12 21:31:09 ----D---- C:\Program Files\Microsoft Office
      2009-07-12 21:31:07 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
      2009-07-12 21:30:41 ----RHD---- C:\MSOCache
      2009-07-12 21:30:29 ----D---- C:\Program Files\GRISOFT
      2009-07-12 21:29:44 ----D---- C:\Program Files\Spybot - Search & Destroy
      2009-07-12 21:29:44 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
      2009-07-12 21:26:06 ----RA---- C:\WINDOWS\apptune1018.exe
      2009-07-12 21:25:59 ----RA---- C:\WINDOWS\system32\ZSPOOL.DLL
      2009-07-12 21:25:58 ----RA---- C:\WINDOWS\system32\ZTAG32.DLL
      2009-07-12 21:25:58 ----RA---- C:\WINDOWS\system32\zlm.dll
      2009-07-12 21:25:58 ----RA---- C:\WINDOWS\system32\zlhp1018.dll
      2009-07-12 21:25:58 ----RA---- C:\WINDOWS\system32\IMF32.DLL
      2009-07-12 21:25:57 ----RA---- C:\WINDOWS\system32\zshp1018.exe
      2009-07-12 21:25:57 ----RA---- C:\WINDOWS\system32\vshp1018.dll
      2009-07-12 21:25:56 ----D---- C:\Program Files\Hewlett-Packard
      2009-07-12 21:25:54 ----HD---- C:\Program Files\Zenographics
      2009-07-12 21:25:49 ----D---- C:\Documents and Settings\All Users\Application Data\HP
      2009-07-12 21:23:59 ----D---- C:\Program Files\Fichiers communs\HP
      2009-07-12 21:23:31 ----D---- C:\Documents and Settings\AICHASTAR\Application Data\Identities
      2009-07-12 21:23:09 ----HD---- C:\Program Files\Uninstall Information
      2009-07-12 21:22:43 ----SD---- C:\Documents and Settings\AICHASTAR\Application Data\Microsoft
      2009-07-12 21:22:43 ----ASH---- C:\Documents and Settings\AICHASTAR\Application Data\desktop.ini
      2009-07-12 21:22:34 ----D---- C:\Program Files\WinRAR
      2009-07-12 21:21:45 ----D---- C:\WINDOWS\SoftwareDistribution
      2009-07-12 21:21:43 ----SD---- C:\WINDOWS\system32\Microsoft
      2009-07-12 21:21:43 ----D---- C:\WINDOWS\Prefetch
      2009-07-12 21:21:43 ----A---- C:\WINDOWS\SchedLgU.Txt
      2009-07-12 21:20:47 ----A---- C:\WINDOWS\system32\pdfcmnnt.dll
      2009-07-12 21:20:43 ----A---- C:\WINDOWS\system32\VB6FR.DLL
      2009-07-12 21:20:43 ----A---- C:\WINDOWS\system32\MSCMCFR.DLL
      2009-07-12 21:20:42 ----A---- C:\WINDOWS\system32\MSCC2FR.DLL
      2009-07-12 21:20:41 ----D---- C:\Program Files\PDFCreator
      2009-07-12 21:20:41 ----A---- C:\WINDOWS\system32\MSMPIDE.DLL
      2009-07-12 21:15:56 ----D---- C:\WINDOWS\system32\xircom
      2009-07-12 21:15:56 ----D---- C:\Program Files\xerox
      2009-07-12 21:15:56 ----D---- C:\Program Files\microsoft frontpage
      2009-07-12 21:15:03 ----A---- C:\WINDOWS\control.ini
      2009-07-12 21:15:03 ----A---- C:\AUTOEXEC.BAT
      2009-07-12 21:14:41 ----A---- C:\WINDOWS\OEWABLog.txt
      2009-07-12 21:14:35 ----A---- C:\WINDOWS\system32\mapi32.dll
      2009-07-12 21:13:30 ----D---- C:\Program Files\VideoLAN
      2009-07-12 21:13:00 ----SD---- C:\WINDOWS\Downloaded Program Files
      2009-07-12 21:13:00 ----RD---- C:\WINDOWS\Offline Web Pages
      2009-07-12 21:13:00 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
      2009-07-12 21:12:50 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
      2009-07-12 21:12:43 ----HD---- C:\Program Files\WindowsUpdate
      2009-07-12 21:12:38 ----D---- C:\Program Files\Services en ligne
      2009-07-12 21:12:10 ----D---- C:\WINDOWS\system32\DirectX
      2009-07-12 21:12:02 ----A---- C:\WINDOWS\system32\atrace.dll
      2009-07-12 21:11:59 ----A---- C:\WINDOWS\system32\desktop.ini
      2009-07-12 21:11:59 ----A---- C:\WINDOWS\desktop.ini
      2009-07-12 21:11:50 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
      2009-07-12 21:11:48 ----D---- C:\Program Files\Fichiers communs\Services
      2009-07-12 21:11:48 ----A---- C:\WINDOWS\system32\acctres.dll
      2009-07-12 21:11:44 ----SD---- C:\WINDOWS\Tasks
      2009-07-12 21:11:44 ----A---- C:\WINDOWS\system32\icfgnt5.dll
      2009-07-12 21:11:43 ----D---- C:\Program Files\Fichiers communs\MSSoap
      2009-07-12 21:11:37 ----D---- C:\WINDOWS\srchasst
      2009-07-12 21:11:35 ----D---- C:\WINDOWS\system32\Macromed
      2009-07-12 21:11:31 ----A---- C:\WINDOWS\system32\wuweb.dll
      2009-07-12 21:11:31 ----A---- C:\WINDOWS\system32\wucltui.dll
      2009-07-12 21:11:31 ----A---- C:\WINDOWS\system32\wuauserv.dll
      2009-07-12 21:11:31 ----A---- C:\WINDOWS\system32\wuaueng1.dll
      2009-07-12 21:11:30 ----A---- C:\WINDOWS\system32\wups.dll
      2009-07-12 21:11:30 ----A---- C:\WINDOWS\system32\wuaueng.dll
      2009-07-12 21:11:30 ----A---- C:\WINDOWS\system32\wuauclt1.exe
      2009-07-12 21:11:30 ----A---- C:\WINDOWS\system32\wuauclt.exe
      2009-07-12 21:11:30 ----A---- C:\WINDOWS\system32\wuapi.dll.wusetup.347734.bak
      2009-07-12 21:11:30 ----A---- C:\WINDOWS\system32\wuapi.dll
      2009-07-12 21:11:29 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
      2009-07-12 21:11:29 ----A---- C:\WINDOWS\system32\qmgr.dll
      2009-07-12 21:11:29 ----A---- C:\WINDOWS\system32\bitsprx4.dll
      2009-07-12 21:11:29 ----A---- C:\WINDOWS\system32\bitsprx3.dll
      2009-07-12 21:11:29 ----A---- C:\WINDOWS\system32\bitsprx2.dll
      2009-07-12 21:11:23 ----D---- C:\Program Files\Movie Maker
      2009-07-12 21:11:16 ----D---- C:\Program Files\Fichiers communs\Hewlett-Packard
      2009-07-12 21:10:57 ----A---- C:\WINDOWS\system32\safrslv.dll
      2009-07-12 21:10:57 ----A---- C:\WINDOWS\system32\safrdm.dll
      2009-07-12 21:10:57 ----A---- C:\WINDOWS\system32\safrcdlg.dll
      2009-07-12 21:10:57 ----A---- C:\WINDOWS\system32\racpldlg.dll
      2009-07-12 21:10:52 ----A---- C:\WINDOWS\system32\fltMc.exe
      2009-07-12 21:10:52 ----A---- C:\WINDOWS\system32\fltlib.dll
      2009-07-12 21:10:51 ----D---- C:\WINDOWS\system32\Restore
      2009-07-12 21:10:51 ----A---- C:\WINDOWS\system32\srsvc.dll
      2009-07-12 21:10:51 ----A---- C:\WINDOWS\system32\srrstr.dll
      2009-07-12 21:10:51 ----A---- C:\WINDOWS\system32\srclient.dll
      2009-07-12 21:10:50 ----A---- C:\WINDOWS\system32\isrdbg32.dll
      2009-07-12 21:10:50 ----A---- C:\WINDOWS\system32\ils.dll
      2009-07-12 21:10:49 ----A---- C:\WINDOWS\system32\nmmkcert.dll
      2009-07-12 21:10:49 ----A---- C:\WINDOWS\system32\msconf.dll
      2009-07-12 21:10:49 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
      2009-07-12 21:10:49 ----A---- C:\WINDOWS\system32\mnmdd.dll
      2009-07-12 21:10:45 ----D---- C:\Program Files\NetMeeting
      2009-07-12 21:10:45 ----A---- C:\WINDOWS\system32\msoert2.dll
      2009-07-12 21:10:45 ----A---- C:\WINDOWS\system32\msoeacct.dll
      2009-07-12 21:10:44 ----A---- C:\WINDOWS\system32\inetres.dll
      2009-07-12 21:10:43 ----A---- C:\WINDOWS\system32\inetcomm.dll
      2009-07-12 21:10:40 ----D---- C:\Program Files\Outlook Express
      2009-07-12 21:10:40 ----A---- C:\WINDOWS\system32\schedsvc.dll
      2009-07-12 21:10:40 ----A---- C:\WINDOWS\system32\mstinit.exe
      2009-07-12 21:10:40 ----A---- C:\WINDOWS\system32\mstask.dll
      2009-07-12 21:10:39 ----A---- C:\WINDOWS\system32\isign32.dll
      2009-07-12 21:10:39 ----A---- C:\WINDOWS\system32\inetcfg.dll
      2009-07-12 21:10:39 ----A---- C:\WINDOWS\system32\icwphbk.dll
      2009-07-12 21:10:39 ----A---- C:\WINDOWS\system32\icwdial.dll
      2009-07-12 21:10:31 ----D---- C:\Program Files\Fichiers communs\System
      2009-07-12 21:10:30 ----D---- C:\Program Files\Internet Explorer
      2009-07-12 21:09:36 ----A---- C:\WINDOWS\system32\HPZisn12.dll
      2009-07-12 21:09:36 ----A---- C:\WINDOWS\system32\HPZipt12.dll
      2009-07-12 21:09:36 ----A---- C:\WINDOWS\system32\HPZipr12.dll
      2009-07-12 21:09:36 ----A---- C:\WINDOWS\system32\HPZipm12.exe
      2009-07-12 21:09:36 ----A---- C:\WINDOWS\system32\HPZinw12.exe
      2009-07-12 21:09:36 ----A---- C:\WINDOWS\system32\HPZidr12.dll
      2009-07-12 21:09:35 ----A---- C:\WINDOWS\IsUninst.exe
      2009-07-12 21:09:18 ----D---- C:\Program Files\ComPlus Applications
      2009-07-12 21:09:16 ----A---- C:\WINDOWS\vbaddin.ini
      2009-07-12 21:09:16 ----A---- C:\WINDOWS\vb.ini
      2009-07-12 21:09:11 ----D---- C:\WINDOWS\Registration
      2009-07-12 21:09:02 ----D---- C:\Program Files\Windows Media Player
      2009-07-12 21:09:02 ----D---- C:\Program Files\Online Services
      2009-07-12 21:08:52 ----D---- C:\Program Files\Messenger
      2009-07-12 21:08:46 ----D---- C:\Program Files\MSN Gaming Zone
      2009-07-12 21:08:46 ----A---- C:\WINDOWS\system32\write.exe
      2009-07-12 21:08:33 ----A---- C:\WINDOWS\system32\sndvol32.exe
      2009-07-12 21:08:33 ----A---- C:\WINDOWS\system32\hticons.dll
      2009-07-12 21:08:32 ----A---- C:\WINDOWS\system32\avwav.dll
      2009-07-12 21:08:32 ----A---- C:\WINDOWS\system32\avtapi.dll
      2009-07-12 21:08:32 ----A---- C:\WINDOWS\system32\avmeter.dll
      2009-07-12 21:08:31 ----A---- C:\WINDOWS\system32\winchat.exe
      2009-07-12 21:08:22 ----A---- C:\WINDOWS\system32\getuname.dll
      2009-07-12 21:08:22 ----A---- C:\WINDOWS\system32\charmap.exe
      2009-07-12 21:08:21 ----A---- C:\WINDOWS\system32\sol.exe
      2009-07-12 21:08:21 ----A---- C:\WINDOWS\system32\calc.exe
      2009-07-12 21:08:20 ----A---- C:\WINDOWS\system32\winmine.exe
      2009-07-12 21:08:20 ----A---- C:\WINDOWS\system32\reset.exe
      2009-07-12 21:08:20 ----A---- C:\WINDOWS\system32\mshearts.exe
      2009-07-12 21:08:20 ----A---- C:\WINDOWS\system32\freecell.exe
      2009-07-12 21:08:19 ----A---- C:\WINDOWS\system32\usrlogon.cmd
      2009-07-12 21:08:19 ----A---- C:\WINDOWS\system32\tsshutdn.exe
      2009-07-12 21:08:19 ----A---- C:\WINDOWS\system32\tslabels.ini
      2009-07-12 21:08:19 ----A---- C:\WINDOWS\system32\tskill.exe
      2009-07-12 21:08:19 ----A---- C:\WINDOWS\system32\tsdiscon.exe
      2009-07-12 21:08:19 ----A---- C:\WINDOWS\system32\tscon.exe
      2009-07-12 21:08:19 ----A---- C:\WINDOWS\system32\shadow.exe
      2009-07-12 21:08:19 ----A---- C:\WINDOWS\system32\rwinsta.exe
      2009-07-12 21:08:19 ----A---- C:\WINDOWS\system32\regini.exe
      2009-07-12 21:08:18 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
      2009-07-12 21:08:18 ----A---- C:\WINDOWS\system32\qwinsta.exe
      2009-07-12 21:08:18 ----A---- C:\WINDOWS\system32\qappsrv.exe
      2009-07-12 21:08:18 ----A---- C:\WINDOWS\system32\msg.exe
      2009-07-12 21:08:18 ----A---- C:\WINDOWS\system32\msdtcprf.ini
      2009-07-12 21:08:18 ----A---- C:\WINDOWS\system32\logoff.exe
      2009-07-12 21:08:18 ----A---- C:\WINDOWS\system32\cdmodem.dll
      2009-07-12 21:08:09 ----A---- C:\WINDOWS\system32\wmimgmt.msc
      2009-07-12 21:07:54 ----D---- C:\Program Files\MSN
      2009-07-12 21:07:53 ----A---- C:\WINDOWS\system32\sndrec32.exe
      2009-07-12 21:07:53 ----A---- C:\WINDOWS\system32\accwiz.exe
      2009-07-12 21:07:52 ----A---- C:\WINDOWS\system32\mplay32.exe
      2009-07-12 21:07:52 ----A---- C:\WINDOWS\system32\hypertrm.dll
      2009-07-12 21:07:51 ----D---- C:\Program Files\Windows NT
      2009-07-12 21:07:51 ----A---- C:\WINDOWS\system32\mspaint.exe
      2009-07-12 21:07:51 ----A---- C:\WINDOWS\system32\clipbrd.exe
      2009-07-12 21:07:50 ----A---- C:\WINDOWS\system32\spider.exe
      2009-07-12 21:07:49 ----A---- C:\WINDOWS\system32\tsgqec.dll
      2009-07-12 21:07:49 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
      2009-07-12 21:07:49 ----A---- C:\WINDOWS\system32\rhttpaa.dll
      2009-07-12 21:07:48 ----A---- C:\WINDOWS\system32\aaclient.dll
      2009-07-12 21:07:47 ----A---- C:\WINDOWS\system32\remotepg.dll
      2009-07-12 21:07:47 ----A---- C:\WINDOWS\system32\mstscax.dll
      2009-07-12 21:07:47 ----A---- C:\WINDOWS\system32\mstsc.exe
      2009-07-12 21:07:46 ----A---- C:\WINDOWS\system32\termsrv.dll
      2009-07-12 21:07:46 ----A---- C:\WINDOWS\system32\sessmgr.exe
      2009-07-12 21:07:46 ----A---- C:\WINDOWS\system32\rdshost.exe
      2009-07-12 21:07:46 ----A---- C:\WINDOWS\system32\rdsaddin.exe
      2009-07-12 21:07:46 ----A---- C:\WINDOWS\system32\rdchost.dll
      2009-07-12 21:07:45 ----D---- C:\WINDOWS\system32\MsDtc
      2009-07-12 21:07:45 ----A---- C:\WINDOWS\system32\rdpwsx.dll
      2009-07-12 21:07:45 ----A---- C:\WINDOWS\system32\rdpsnd.dll
      2009-07-12 21:07:45 ----A---- C:\WINDOWS\system32\rdpclip.exe
      2009-07-12 21:07:45 ----A---- C:\WINDOWS\system32\qprocess.exe
      2009-07-12 21:07:45 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
      2009-07-12 21:07:45 ----A---- C:\WINDOWS\system32\icaapi.dll
      2009-07-12 21:07:45 ----A---- C:\WINDOWS\system32\cfgbkend.dll
      2009-07-12 21:07:44 ----A---- C:\WINDOWS\system32\xolehlp.dll
      2009-07-12 21:07:44 ----A---- C:\WINDOWS\system32\mtxoci.dll
      2009-07-12 21:07:44 ----A---- C:\WINDOWS\system32\msdtctm.dll
      2009-07-12 21:07:44 ----A---- C:\WINDOWS\system32\msdtcprx.dll
      2009-07-12 21:07:43 ----A---- C:\WINDOWS\system32\msdtclog.dll
      2009-07-12 21:07:43 ----A---- C:\WINDOWS\system32\msdtc.exe
      2009-07-12 21:07:42 ----D---- C:\WINDOWS\system32\Com
      2009-07-12 21:07:42 ----A---- C:\WINDOWS\system32\mtxlegih.dll
      2009-07-12 21:07:42 ----A---- C:\WINDOWS\system32\mtxex.dll
      2009-07-12 21:07:42 ----A---- C:\WINDOWS\system32\mtxdm.dll
      2009-07-12 21:07:42 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
      2009-07-12 21:07:41 ----A---- C:\WINDOWS\system32\stclient.dll
      2009-07-12 21:07:41 ----A---- C:\WINDOWS\system32\comrepl.dll
      2009-07-12 21:07:41 ----A---- C:\WINDOWS\system32\comaddin.dll
      2009-07-12 21:07:41 ----A---- C:\WINDOWS\system32\colbact.dll
      2009-07-12 21:07:41 ----A---- C:\WINDOWS\system32\clbcatex.dll
      2009-07-12 21:07:41 ----A---- C:\WINDOWS\system32\catsrvps.dll
      2009-07-12 21:07:40 ----A---- C:\WINDOWS\system32\catsrvut.dll
      2009-07-12 21:07:40 ----A---- C:\WINDOWS\system32\catsrv.dll
      2009-07-12 21:07:39 ----A---- C:\WINDOWS\system32\comuid.dll
      2009-07-12 21:07:39 ----A---- C:\WINDOWS\system32\comsvcs.dll
      2009-07-12 21:07:39 ----A---- C:\WINDOWS\system32\comsnap.dll
      2009-07-12 21:07:38 ----A---- C:\WINDOWS\system32\clbcatq.dll
      2009-07-12 21:07:29 ----A---- C:\WINDOWS\system32\servdeps.dll
      2009-07-12 21:07:29 ----A---- C:\WINDOWS\system32\mmfutil.dll
      2009-07-12 21:07:29 ----A---- C:\WINDOWS\system32\licwmi.dll
      2009-07-12 21:07:29 ----A---- C:\WINDOWS\system32\cmprops.dll
      2009-07-12 21:04:47 ----D---- C:\Program Files\HP
      2009-07-12 20:58:17 ----A---- C:\WINDOWS\system32\hpz3l43a.dll
      2009-07-12 20:58:15 ----RA---- C:\WINDOWS\system32\hpzids01.dll
      2009-07-12 20:57:32 ----RA---- C:\WINDOWS\system32\HPZc3212.dll
      2009-07-12 20:54:17 ----RA---- C:\WINDOWS\system32\hpovst09.dll
      2009-07-12 20:54:16 ----RA---- C:\WINDOWS\system32\hpotiop2.dll
      2009-07-12 20:54:15 ----RA---- C:\WINDOWS\system32\hpowiax2.dll
      2009-07-12 20:44:26 ----D---- C:\Program Files\Microsoft Works
      2009-07-12 20:42:41 ----D---- C:\Program Files\Microsoft Visual Studio
      2009-07-12 20:42:39 ----D---- C:\Program Files\Fichiers communs\DESIGNER

      ======List of files/folders modified in the last 1 months======

      2009-07-12 21:48:59 ----A---- C:\WINDOWS\win.ini
      2009-07-12 21:46:16 ----A---- C:\WINDOWS\system.ini

      ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

      R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944]
      R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768]
      R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376]
      R1 AvgArCln;Avg Anti-Rootkit Clean Driver; C:\WINDOWS\System32\DRIVERS\AvgArCln.sys [2007-01-18 3968]
      R1 P3;Pilote processeur Intel Pentium III; C:\WINDOWS\system32\DRIVERS\p3.sys [2008-04-13 46848]
      R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
      R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032]
      R3 ac97intc;Service d'installation du pilote audio Intel(r) 82801 (WDM); C:\WINDOWS\system32\drivers\ac97intc.sys [2001-08-17 96256]
      R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152]
      R3 i81x;i81x; C:\WINDOWS\system32\DRIVERS\i81xnt5.sys [2008-04-13 161020]
      R3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-13 20992]
      R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
      R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
      S3 catchme;catchme; \??\C:\DOCUME~1\AICHAS~1\LOCALS~1\Temp\catchme.sys []
      S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-10-28 49664]
      S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-10-28 16496]
      S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-10-28 21568]
      S3 iAimFP0;iAimFP0; C:\WINDOWS\system32\DRIVERS\wADV01nt.sys [2008-04-13 12415]
      S3 iAimFP1;iAimFP1; C:\WINDOWS\system32\DRIVERS\wADV02NT.sys [2008-04-13 12127]
      S3 iAimFP2;iAimFP2; C:\WINDOWS\system32\DRIVERS\wADV05NT.sys [2008-04-13 11775]
      S3 iAimFP3;iAimFP3; C:\WINDOWS\system32\DRIVERS\wSiINTxx.sys [2008-04-13 12063]
      S3 iAimFP4;iAimFP4; C:\WINDOWS\system32\DRIVERS\wVchNTxx.sys [2008-04-13 19455]
      S3 iAimFP5;iAimFP5; C:\WINDOWS\system32\DRIVERS\wADV07nt.sys [2008-04-13 11807]
      S3 iAimFP6;iAimFP6; C:\WINDOWS\system32\DRIVERS\wADV08nt.sys [2008-04-13 11295]
      S3 iAimFP7;iAimFP7; C:\WINDOWS\system32\DRIVERS\wADV09nt.sys [2008-04-13 11871]
      S3 iAimTV0;iAimTV0; C:\WINDOWS\system32\DRIVERS\wATV01nt.sys [2008-04-13 29311]
      S3 iAimTV1;iAimTV1; C:\WINDOWS\system32\DRIVERS\wATV02NT.sys [2008-04-13 19551]
      S3 iAimTV3;iAimTV3; C:\WINDOWS\system32\DRIVERS\wATV04nt.sys [2008-04-13 33599]
      S3 iAimTV4;iAimTV4; C:\WINDOWS\system32\DRIVERS\wCh7xxNT.sys [2008-04-13 23615]
      S3 iAimTV5;iAimTV5; C:\WINDOWS\system32\DRIVERS\wATV10nt.sys [2008-04-13 25471]
      S3 iAimTV6;iAimTV6; C:\WINDOWS\system32\DRIVERS\wATV06nt.sys [2008-04-13 22271]
      S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
      S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
      S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
      S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
      S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
      S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

      ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

      R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
      R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
      R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-10-20 71096]
      R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2005-08-08 167936]
      R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
      R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
      R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
      S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2005-03-14 69632]
      S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
      S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
      S3 NMIndexingService;NMIndexingService; C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe [2007-05-08 271920]
      S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
      S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
      S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]
      S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
      S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]

      -----------------EOF-----------------
      0
  2. plopus Messages postés 49 Date d'inscription   Statut Contributeur sécurité Dernière intervention   293
     
    salut

    ton rapport est bien, mise a part internet explorer 6 c'est du suicide....

    passe a IE8 https://support.microsoft.com/fr-fr/allproducts

    affiche les dossier caché a l'aide de ceci :
    http://www.commentcamarche.net/faq/sujet 825 afficher les extensions et les fichiers caches sous windows

    clic ici et clic sur parcourir et va chercher les fichier ci dessous un par un et fait les analyser et poste le rapport AVEC EN ENTETE le nom des fichiers

    C:\WINDOWS\zip.exe
    C:\WINDOWS\apptune1018.exe
    C:\WINDOWS\system32\zlhp1018.dll
    C:\WINDOWS\system32\zshp1018.exe
    C:\WINDOWS\system32\vshp1018.dll
    C:\WINDOWS\system32\wuapi.dll.wusetup.347734.bak
    C:\WINDOWS\system32\hpz3l43a.dll

    ensuite

    Fais un scan en ligne Kaspersky :

    • Désactive ton antivirus
    • Fais un scan en ligne ici https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
    • Clique sur "Kaspersky Online Scanner Cliquez-ici"
    • Lis le texte d'information, puis clique sur « J'accepte »
    • Si une fenêtre te demande t'exécuter un programme, accepte
    • Une fois la mise à jour téléchargée, choisis "Poste de travail" pour le scan.
    • A la fin de l'analyse, clique sur « Enregistrer rapport » et poste le dans ta prochaine réponse.

    Tutoriel illustré : http://www.commentcamarche.net/faq/sujet 17751 scanner en ligne avec kaspersky

    puis

    * Télécharge Malwarebytes
    http://www.commentcamarche.net/telecharger/telecharger 34055379 malwarebytes
    * Fais la mise à jour du logiciel (elle se fait normalement à l'installation)
    * Lance une analyse complète en cliquant sur "Exécuter un examen complet"
    * Sélectionnes les disques que tu veux analyser et cliques sur "Lancer l'examen"
    * L'analyse peut durer un bon moment.....
    * Une fois l'analyse terminée, cliques sur "OK" puis sur "Afficher les résultats"
    * Vérifies que tout est bien coché et cliques sur "Supprimer la sélection" => et ensuite sur "OK"
    * Un rapport va s'ouvrir dans le bloc note... Fais un copié/collé du rapport dans ta prochaine réponse sur le forum

    * Il se pourrait que certains fichiers devront être supprimés au redémarrage du PC... Faites le en cliquant sur "oui" à la question posée
    0
    1. mousarga Messages postés 79 Statut Membre
       
      Merci de votre disponibilité, j'ai reçu à corriger mon problème en installant les mises à jour de Windows
      0
  3. plopus Messages postés 49 Date d'inscription   Statut Contributeur sécurité Dernière intervention   293
     
    salut

    ok

    mais en controle tu devrais quand meme faire les 2 scans proposé
    @+
    0
    1. mousarga Messages postés 79 Statut Membre
       
      je vous promet ça
      0