Je pense etre infecter
mimi
-
mimi -
mimi -
Bonjour,voila depuis quelque temps j'ai plein de soucis sur mon pc comme page bleu puis redemarrage de mon pc,les pages internet qui se refeme seule puis aussi,il reconnais mon mp3 mais je ne peux pas y accéderet depuis aujourd'hui je n'ai plus axcès au poste de travail ni panneau de configuration.J'ai télécharger RSIT et voila le rapport:
Destroy\TeaTimer.exe
C:\Documents and Settings\myriam\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\myriam\Bureau\RSIT.exe
C:\Program Files\trend micro\myriam.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: Deenero - {66886C4D-B307-4ECA-A228-52CA9B9851A4} - C:\Program Files\Deenero\deenero_1,0,1,5.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Wallpaper] "C:\Program Files\Wallpaper\Wallpaper.exe" Starter
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\myriam\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
--
End of file - 4911 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Driver Robot.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
AskBar BHO - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-09-29 325000]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} - Ask Toolbar - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-09-29 325000]
{66886C4D-B307-4ECA-A228-52CA9B9851A4} - Deenero - C:\Program Files\Deenero\deenero_1,0,1,5.dll [2009-07-16 504512]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-06-14 7573504]
"UnlockerAssistant"=C:\Program Files\Unlocker\UnlockerAssistant.exe [2008-05-02 15872]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-07-21 16261632]
"nwiz"=nwiz.exe /install []
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"CloneCDTray"=C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [2009-01-30 57344]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]
"Wallpaper"=C:\Program Files\Wallpaper\Wallpaper.exe [2007-08-21 233472]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2006-03-02 15360]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]
C:\Documents and Settings\myriam\Menu Démarrer\Programmes\Démarrage
Notification de cadeaux MSN.lnk - C:\Documents and Settings\myriam\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="wbsys.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WB]
C:\Program Files\AlienGUIse\fastload.dll [2001-12-20 24576]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
IconPackager Repair - {1799460C-0BC8-4865-B9DF-4A36CD703FF0} - C:\Program Files\Stardock\Object Desktop\IconPackager\iprepair.dll [2009-01-28 70960]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\WINDOWS\system32\usmt\migwiz.exe"="C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Assistant Transfert de fichiers et de paramètres"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
======List of files/folders created in the last 3 months======
2009-08-01 18:12:22 ----D---- C:\Program Files\trend micro
2009-08-01 18:12:21 ----D---- C:\rsit
2009-08-01 15:36:32 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-08-01 15:36:32 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-08-01 14:13:48 ----HDC---- C:\WINDOWS\$NtUninstallKB935448$
2009-08-01 14:13:45 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2009-08-01 14:13:32 ----HDC---- C:\WINDOWS\$NtUninstallKB972260$
2009-08-01 14:13:26 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-08-01 14:13:21 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-08-01 14:13:17 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-08-01 14:13:09 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-08-01 11:59:09 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2009-08-01 11:58:22 ----HDC---- C:\WINDOWS\$NtUninstallKB926247$
2009-08-01 11:25:01 ----N---- C:\WINDOWS\system32\tzchange.exe
2009-07-31 21:26:34 ----SHD---- C:\Config.Msi
2009-07-31 21:24:35 ----D---- C:\94bfddd5d05dc52cc885f6db41
2009-07-31 20:57:17 ----D---- C:\Documents and Settings\myriam\Application Data\Malwarebytes
2009-07-31 20:57:11 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-07-31 20:57:11 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-07-31 12:44:26 ----D---- C:\Program Files\MP3 Player Utilities 4.09
2009-07-31 12:43:06 ----D---- C:\Program Files\MP3 Player Utilities
2009-07-31 12:42:11 ----RA---- C:\WINDOWS\PlaySnd.INI
2009-07-31 11:16:57 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-07-31 11:16:53 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-07-31 11:16:49 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-07-31 11:16:45 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-07-31 11:16:41 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-07-31 11:16:36 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-07-31 11:16:31 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-07-31 11:16:26 ----HDC---- C:\WINDOWS\$NtUninstallKB973346$
2009-07-31 11:15:39 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-07-31 11:15:29 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-07-31 11:15:23 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2009-07-31 11:15:19 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2009-07-31 11:15:04 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-07-31 11:14:57 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-07-31 11:14:44 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2009-07-31 11:14:18 ----HDC---- C:\WINDOWS\$NtUninstallKB959772_WM11$
2009-07-31 11:14:13 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-07-31 11:14:04 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-07-31 11:14:00 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-07-31 11:13:56 ----HDC---- C:\WINDOWS\$NtUninstallKB961371$
2009-07-31 11:13:52 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-07-31 11:13:48 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-07-31 11:13:38 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP11$
2009-07-31 11:12:52 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-07-31 11:12:48 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2009-07-30 11:32:51 ----D---- C:\WINDOWS\system32\NtmsData
2009-07-29 23:09:24 ----A---- C:\WINDOWS\ntbtlog.txt
2009-07-29 22:56:43 ----D---- C:\WINDOWS\Registration
2009-07-29 22:55:16 ----A---- C:\WINDOWS\system32\snmptrap.exe
2009-07-29 22:55:16 ----A---- C:\WINDOWS\system32\lprmon.dll
2009-07-29 22:55:16 ----A---- C:\WINDOWS\system32\lpdsvc.dll
2009-07-29 22:55:15 ----A---- C:\WINDOWS\system32\snmpmib.dll
2009-07-29 22:55:15 ----A---- C:\WINDOWS\system32\snmp.exe
2009-07-29 22:55:15 ----A---- C:\WINDOWS\system32\hostmib.dll
2009-07-29 22:55:15 ----A---- C:\WINDOWS\system32\evntwin.exe
2009-07-29 22:55:15 ----A---- C:\WINDOWS\system32\evntcmd.exe
2009-07-29 22:55:15 ----A---- C:\WINDOWS\system32\evntagnt.dll
2009-07-29 22:55:13 ----A---- C:\WINDOWS\system32\lmmib2.dll
2009-07-29 13:50:08 ----D---- C:\Documents and Settings\myriam\Application Data\Adobe
2009-07-29 11:31:53 ----D---- C:\WINDOWS\pss
2009-07-29 11:17:10 ----D---- C:\Documents and Settings\myriam\Application Data\Python-Eggs
2009-07-29 11:16:38 ----D---- C:\Program Files\Deenero
2009-07-29 11:15:46 ----D---- C:\Program Files\Moovida
2009-07-28 22:39:52 ----D---- C:\Program Files\Games
2009-07-28 22:33:44 ----D---- C:\WINDOWS\Magic Ball 4
2009-07-28 22:33:44 ----D---- C:\Program Files\Magic Ball 4
2009-07-28 22:33:32 ----A---- C:\WINDOWS\Magic Ball 4 Setup Log.txt
2009-07-28 22:15:31 ----D---- C:\Documents and Settings\myriam\Application Data\Wallpaper
2009-07-28 22:15:29 ----D---- C:\Program Files\Wallpaper
2009-07-28 15:30:24 ----D---- C:\Documents and Settings\myriam\Application Data\MagicBall4
2009-07-28 15:29:08 ----D---- C:\Program Files\Alawar
2009-07-28 15:19:51 ----D---- C:\WINDOWS\system32\3Planesoft
2009-07-28 15:19:51 ----D---- C:\Program Files\3Planesoft Screensaver Manager
2009-07-28 15:19:50 ----A---- C:\WINDOWS\system32\Valentine 3D Screensaver.exe
2009-07-28 15:19:49 ----D---- C:\Program Files\Valentine 3D Screensaver
2009-07-28 14:07:54 ----D---- C:\Program Files\SlySoft
2009-07-28 13:41:36 ----D---- C:\Documents and Settings\myriam\Application Data\Mozilla
2009-07-28 13:24:58 ----D---- C:\Documents and Settings\myriam\Application Data\vlc
2009-07-28 12:57:43 ----D---- C:\Documents and Settings\All Users\Application Data\Playrix Entertainment
2009-07-28 11:59:15 ----D---- C:\Documents and Settings\myriam\Application Data\Desktopicon
2009-07-28 11:59:14 ----D---- C:\Program Files\Unlocker
2009-07-28 11:05:40 ----D---- C:\Program Files\Fichiers communs\Stardock
2009-07-28 11:05:40 ----A---- C:\WINDOWS\wb.ini
2009-07-28 11:02:02 ----A---- C:\WINDOWS\_MSRSTRT.EXE
2009-07-28 10:52:14 ----D---- C:\Documents and Settings\myriam\Application Data\WinRAR
2009-07-28 10:52:00 ----D---- C:\Program Files\WinRAR
2009-07-28 10:20:56 ----HDC---- C:\Documents and Settings\All Users\Application Data\{B98A2B83-8BB0-42E7-AA1D-D6FA6E7C8F31}
2009-07-28 10:20:52 ----D---- C:\Program Files\Stardock
2009-07-27 20:35:17 ----D---- C:\WINDOWS\Call of Atlantis
2009-07-27 20:35:17 ----D---- C:\Program Files\Call of Atlantis
2009-07-27 20:35:00 ----A---- C:\WINDOWS\Call of Atlantis Setup Log.txt
2009-07-27 19:11:58 ----D---- C:\Program Files\VideoLAN
2009-07-27 17:09:06 ----D---- C:\Documents and Settings\myriam\Application Data\BitTorrent
2009-07-27 17:09:02 ----D---- C:\Program Files\BitTorrent
2009-07-27 17:04:51 ----D---- C:\Program Files\AskBarDis
2009-07-27 16:37:41 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
2009-07-27 16:37:33 ----D---- C:\Program Files\DAEMON Tools Toolbar
2009-07-27 16:37:31 ----D---- C:\Program Files\DAEMON Tools Lite
2009-07-27 16:32:35 ----D---- C:\Documents and Settings\myriam\Application Data\DAEMON Tools Lite
2009-07-27 16:08:40 ----D---- C:\Documents and Settings\myriam\Application Data\Macromedia
2009-07-27 16:04:51 ----D---- C:\Program Files\AlienGUIse
2009-07-27 16:04:51 ----A---- C:\WINDOWS\system32\wbsys.dll
2009-07-27 15:48:57 ----A---- C:\WINDOWS\system32\NeroCheck.exe
2009-07-27 15:47:26 ----D---- C:\Documents and Settings\All Users\Application Data\Ahead
2009-07-27 15:47:25 ----N---- C:\WINDOWS\system32\TwnLib4.dll
2009-07-27 15:47:24 ----N---- C:\WINDOWS\system32\ImagXRA7.dll
2009-07-27 15:47:23 ----N---- C:\WINDOWS\system32\ImagXR7.dll
2009-07-27 15:47:23 ----N---- C:\WINDOWS\system32\ImagXpr7.dll
2009-07-27 15:47:23 ----N---- C:\WINDOWS\system32\ImagX7.dll
2009-07-27 15:47:21 ----N---- C:\WINDOWS\system32\TwnLib20.dll
2009-07-27 15:47:21 ----N---- C:\WINDOWS\system32\picn20.dll
2009-07-27 15:47:19 ----D---- C:\Program Files\Fichiers communs\Ahead
2009-07-27 15:47:11 ----D---- C:\Program Files\Ahead
2009-07-27 13:58:54 ----D---- C:\WINDOWS\system32\Lang
2009-07-27 13:55:34 ----R---- C:\WINDOWS\system32\ChCfg.exe
2009-07-27 13:55:11 ----D---- C:\WINDOWS\system32\RTCOM
2009-07-27 13:55:07 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-07-27 13:54:40 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$
2009-07-27 13:54:37 ----RA---- C:\WINDOWS\SOUNDMAN.EXE
2009-07-27 13:54:37 ----RA---- C:\WINDOWS\SkyTel.exe
2009-07-27 13:54:36 ----RA---- C:\WINDOWS\RtlUpd.exe
2009-07-27 13:54:35 ----RA---- C:\WINDOWS\RTLCPL.EXE
2009-07-27 13:54:31 ----RA---- C:\WINDOWS\RTHDCPL.EXE
2009-07-27 13:54:31 ----RA---- C:\WINDOWS\MicCal.exe
2009-07-27 13:54:30 ----RA---- C:\WINDOWS\ALCMTR.EXE
2009-07-27 13:54:29 ----RA---- C:\WINDOWS\ALCWZRD.EXE
2009-07-27 13:54:29 ----D---- C:\Program Files\Realtek
2009-07-27 13:54:28 ----HD---- C:\Program Files\InstallShield Installation Information
2009-07-27 13:53:38 ----R---- C:\WINDOWS\RtlExUpd.dll
2009-07-27 13:21:23 ----HDC---- C:\WINDOWS\$NtUninstallKB926239$
2009-07-27 13:21:18 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2009-07-27 13:21:07 ----D---- C:\Program Files\Windows Media Connect 2
2009-07-27 13:21:00 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2009-07-27 13:20:36 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2009-07-27 13:20:25 ----D---- C:\WINDOWS\system32\LogFiles
2009-07-27 13:20:21 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2009-07-27 13:13:46 ----A---- C:\WINDOWS\system32\wpa.bak
2009-07-27 13:10:55 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-07-27 13:10:52 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-07-27 13:10:48 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-07-27 13:10:39 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-07-27 13:10:36 ----A---- C:\WINDOWS\system32\MRT.exe
2009-07-27 13:10:31 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-07-27 13:10:27 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-07-27 13:10:23 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-07-27 13:10:12 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-07-27 13:04:27 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2009-07-27 10:06:19 ----D---- C:\WINDOWS\system32\CatRoot_bak
2009-07-27 09:40:59 ----D---- C:\WINDOWS\system32\PreInstall
2009-07-27 09:40:57 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-07-27 09:40:34 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-07-27 09:34:48 ----A---- C:\WINDOWS\system32\muweb.dll
2009-07-27 09:34:48 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2009-07-27 09:34:48 ----A---- C:\WINDOWS\system32\mucltui.dll
2009-07-26 21:37:42 ----A---- C:\WINDOWS\IE4 Error Log.txt
2009-07-26 21:26:51 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2009-07-26 21:26:36 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-07-26 21:26:35 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2009-07-26 21:25:58 ----D---- C:\Program Files\Windows Live SkyDrive
2009-07-26 20:37:09 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-07-26 20:14:44 ----D---- C:\WINDOWS\SoftwareDistribution
2009-07-26 20:14:42 ----SD---- C:\WINDOWS\system32\Microsoft
2009-07-26 20:14:42 ----D---- C:\WINDOWS\Prefetch
2009-07-26 20:14:42 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-07-26 20:11:57 ----SHDC---- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2009-07-26 20:11:53 ----D---- C:\Program Files\Windows Live
2009-07-26 20:11:45 ----D---- C:\Documents and Settings\All Users\Application Data\WLInstaller
2009-07-26 20:11:32 ----HD---- C:\WINDOWS\$hf_mig$
2009-07-26 20:11:25 ----D---- C:\Program Files\Microsoft Silverlight
2009-07-26 20:09:42 ----D---- C:\61e873a4e8b1e966472f
2009-07-26 20:05:48 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2009-07-26 20:05:47 ----RA---- C:\WINDOWS\SET65.tmp
2009-07-26 20:05:44 ----RA---- C:\WINDOWS\SET32.tmp
2009-07-26 20:05:41 ----RA---- C:\WINDOWS\SET24.tmp
2009-07-26 20:05:40 ----RA---- C:\WINDOWS\SET20.tmp
2009-07-26 20:05:18 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-07-26 20:04:05 ----RA---- C:\WINDOWS\SET5E.tmp
2009-07-26 20:04:00 ----RA---- C:\WINDOWS\SET29.tmp
2009-07-26 20:03:57 ----RA---- C:\WINDOWS\SET1D.tmp
2009-07-26 20:03:56 ----RA---- C:\WINDOWS\SET1A.tmp
2009-07-26 19:52:53 ----HDC---- C:\WINDOWS\$NtUninstallKB942288-v3$
2009-07-26 19:52:12 ----RA---- C:\WINDOWS\SET2C.tmp
2009-07-26 19:52:10 ----RA---- C:\WINDOWS\SET1F.tmp
2009-07-26 19:52:09 ----RA---- C:\WINDOWS\SET1C.tmp
2009-07-26 19:51:24 ----D---- C:\WINDOWS\Minidump
2009-07-26 19:43:38 ----SHD---- C:\RECYCLER
2009-07-26 19:41:59 ----A---- C:\WINDOWS\system32\h323log.txt
2009-07-26 19:39:18 ----A---- C:\WINDOWS\system32\usbui.dll
2009-07-26 19:38:14 ----A---- C:\WINDOWS\imsins.BAK
2009-07-26 19:38:12 ----SHD---- C:\WINDOWS\Installer
2009-07-26 19:38:12 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-07-26 19:38:11 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-07-26 19:38:11 ----A---- C:\WINDOWS\ODBCINST.INI
2009-07-26 19:38:08 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2009-07-26 19:38:07 ----RD---- C:\Program Files
2009-07-26 19:38:07 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-07-26 19:38:07 ----D---- C:\Program Files\Fichiers communs
2009-07-26 19:37:57 ----RA---- C:\WINDOWS\SET5D.tmp
2009-07-26 19:37:54 ----RA---- C:\WINDOWS\SET2A.tmp
2009-07-26 19:37:51 ----RA---- C:\WINDOWS\SET1E.tmp
2009-07-26 19:37:50 ----RA---- C:\WINDOWS\SET1B.tmp
2009-07-26 19:36:28 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-07-26 19:36:28 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-07-26 19:36:28 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-07-26 19:36:25 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-07-26 19:36:25 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-07-26 19:36:25 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-07-26 19:36:25 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-07-26 19:36:25 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-07-26 19:36:25 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-07-26 19:36:25 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-07-26 19:36:24 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-07-26 19:36:24 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-07-26 19:36:24 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-07-26 19:36:24 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-07-26 19:36:24 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-07-26 19:36:21 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-07-26 19:36:21 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-07-26 19:36:21 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-07-26 19:36:21 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-07-26 19:36:21 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-07-26 19:36:21 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-07-26 19:36:21 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-07-26 19:36:19 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-07-26 19:36:19 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-07-26 19:36:19 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-07-26 19:36:19 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-07-26 19:36:19 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdro.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2009-07-26 19:36:13 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-07-26 19:36:13 ----A---- C:\WINDOWS\system32\irclass.dll
2009-07-26 19:36:13 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-07-26 19:36:13 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-07-26 19:36:13 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-07-26 19:36:10 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-07-26 19:36:10 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-07-26 19:36:10 ----A---- C:\WINDOWS\system32\batt.dll
2009-07-26 19:36:09 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-07-26 19:36:08 ----A---- C:\WINDOWS\system32\storprop.dll
2009-07-26 19:35:59 ----RA---- C:\WINDOWS\SET25.tmp
2009-07-26 19:35:56 ----RA---- C:\WINDOWS\SET8.tmp
2009-07-26 19:35:53 ----RA---- C:\WINDOWS\SET4.tmp
2009-07-26 19:35:51 ----RA---- C:\WINDOWS\SET3.tmp
2009-07-26 19:35:45 ----D---- C:\WINDOWS\system32\CatRoot2
2009-07-26 19:35:45 ----D---- C:\WINDOWS\system32\CatRoot
2009-07-26 19:35:16 ----A---- C:\WINDOWS\setuplog.txt
2009-07-26 19:35:12 ----SHD---- C:\System Volume Information
2009-07-26 19:35:12 ----D---- C:\Documents and Settings
2009-07-26 19:34:28 ----SH---- C:\boot.ini
2009-07-26 19:33:17 ----D---- C:\Program Files\Mozilla Firefox
2009-07-26 19:27:18 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-07-26 19:27:18 ----RSD---- C:\WINDOWS\Fonts
2009-07-26 19:27:18 ----RD---- C:\WINDOWS\Web
2009-07-26 19:27:18 ----HD---- C:\WINDOWS\inf
2009-07-26 19:27:18 ----D---- C:\WINDOWS\WinSxS
2009-07-26 19:27:18 ----D---- C:\WINDOWS\twain_32
2009-07-26 19:27:18 ----D---- C:\WINDOWS\Temp
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\wins
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\wbem
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\usmt
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\spool
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\ShellExt
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\Setup
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\ras
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\oobe
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\npp
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\mui
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\inetsrv
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\IME
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\icsxml
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\ias
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\export
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\drivers
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\dhcp
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\config
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\3com_dmi
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\3076
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\2052
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\1054
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\1042
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\1041
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\1037
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\1036
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\1033
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\1031
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\1028
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\1025
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system
2009-07-26 19:27:18 ----D---- C:\WINDOWS\security
2009-07-26 19:27:18 ----D---- C:\WINDOWS\Resources
2009-07-26 19:27:18 ----D---- C:\WINDOWS\repair
2009-07-26 19:27:18 ----D---- C:\WINDOWS\Provisioning
2009-07-26 19:27:18 ----D---- C:\WINDOWS\PeerNet
2009-07-26 19:27:18 ----D---- C:\WINDOWS\pchealth
2009-07-26 19:27:18 ----D---- C:\WINDOWS\mui
2009-07-26 19:27:18 ----D---- C:\WINDOWS\msapps
2009-07-26 19:27:18 ----D---- C:\WINDOWS\msagent
2009-07-26 19:27:18 ----D---- C:\WINDOWS\Media
2009-07-26 19:27:18 ----D---- C:\WINDOWS\java
2009-07-26 19:27:18 ----D---- C:\WINDOWS\ime
2009-07-26 19:27:18 ----D---- C:\WINDOWS\Help
2009-07-26 19:27:18 ----D---- C:\WINDOWS\Driver Cache
2009-07-26 19:27:18 ----D---- C:\WINDOWS\Debug
2009-07-26 19:27:18 ----D---- C:\WINDOWS\Cursors
2009-07-26 19:27:18 ----D---- C:\WINDOWS\Connection Wizard
2009-07-26 19:27:18 ----D---- C:\WINDOWS\Config
2009-07-26 19:27:18 ----D---- C:\WINDOWS\AppPatch
2009-07-26 19:27:18 ----D---- C:\WINDOWS\addins
2009-07-26 19:27:18 ----AD---- C:\WINDOWS
2009-07-26 19:26:37 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-07-26 18:02:04 ----A---- C:\WINDOWS\system32\OLD2B0.tmp
2009-07-26 18:01:50 ----A---- C:\WINDOWS\system32\OLD28E.tmp
2009-07-26 18:01:50 ----A---- C:\WINDOWS\system32\OLD28C.tmp
2009-07-26 18:00:20 ----A---- C:\WINDOWS\system32\OLD19F.tmp
2009-07-26 18:00:10 ----D---- C:\WINDOWS\system32\xircom
2009-07-26 18:00:10 ----D---- C:\Program Files\xerox
2009-07-26 18:00:10 ----D---- C:\Program Files\microsoft frontpage
2009-07-26 18:00:01 ----A---- C:\WINDOWS\control.ini
2009-07-26 18:00:01 ----A---- C:\AUTOEXEC.BAT
2009-07-26 17:49:44 ----A---- C:\WINDOWS\OEWABLog.txt
2009-07-26 17:49:40 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-07-26 17:48:53 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-07-26 17:48:53 ----RD---- C:\WINDOWS\Offline Web Pages
2009-07-26 17:48:53 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-07-26 17:48:47 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-07-26 17:48:43 ----HD---- C:\Program Files\WindowsUpdate
2009-07-26 17:48:38 ----D---- C:\Program Files\Services en ligne
2009-07-26 17:48:20 ----D---- C:\WINDOWS\system32\DirectX
2009-07-26 17:46:02 ----A---- C:\WINDOWS\system32\atrace.dll
2009-07-26 17:46:00 ----A---- C:\WINDOWS\system32\desktop.ini
2009-07-26 17:46:00 ----A---- C:\WINDOWS\desktop.ini
2009-07-26 17:45:52 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-07-26 17:45:51 ----A---- C:\WINDOWS\system32\acctres.dll
2009-07-26 17:45:50 ----D---- C:\Program Files\Fichiers communs\Services
2009-07-26 17:45:47 ----SD---- C:\WINDOWS\Tasks
2009-07-26 17:45:47 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-07-26 17:45:46 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-07-26 17:45:42 ----D---- C:\WINDOWS\srchasst
2009-07-26 17:45:40 ----D---- C:\WINDOWS\system32\Macromed
2009-07-26 17:45:37 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-07-26 17:45:37 ----A---- C:\WINDOWS\system32\wups.dll
2009-07-26 17:45:37 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-07-26 17:45:37 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-07-26 17:45:37 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-07-26 17:45:37 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-07-26 17:45:36 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-07-26 17:45:36 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-07-26 17:45:36 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-07-26 17:45:36 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-07-26 17:45:36 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-07-26 17:45:36 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-07-26 17:45:36 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-07-26 17:45:31 ----D---- C:\Program Files\Movie Maker
2009-07-26 17:45:27 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-07-26 17:45:27 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-07-26 17:45:27 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-07-26 17:45:27 ----A---- C:\WINDOWS\system32\racpldlg.dll
2009-07-26 17:45:23 ----A---- C:\WINDOWS\system32\fltMc.exe
2009-07-26 17:45:23 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-07-26 17:45:22 ----D---- C:\WINDOWS\system32\Restore
2009-07-26 17:45:22 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-07-26 17:45:22 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-07-26 17:45:22 ----A---- C:\WINDOWS\system32\srclient.dll
2009-07-26 17:45:22 ----A---- C:\WINDOWS\system32\ils.dll
2009-07-26 17:45:21 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2009-07-26 17:45:21 ----A---- C:\WINDOWS\system32\msconf.dll
2009-07-26 17:45:21 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-07-26 17:45:21 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-07-26 17:45:21 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-07-26 17:45:18 ----D---- C:\Program Files\NetMeeting
2009-07-26 17:45:18 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-07-26 17:45:18 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-07-26 17:45:17 ----A---- C:\WINDOWS\system32\inetres.dll
2009-07-26 17:45:16 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-07-26 17:45:14 ----D---- C:\Program Files\Outlook Express
2009-07-26 17:45:14 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-07-26 17:45:14 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-07-26 17:45:14 ----A---- C:\WINDOWS\system32\mstask.dll
2009-07-26 17:45:14 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-07-26 17:45:13 ----A---- C:\WINDOWS\system32\isign32.dll
2009-07-26 17:45:13 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-07-26 17:45:13 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-07-26 17:45:06 ----D---- C:\Program Files\Fichiers communs\System
2009-07-26 17:45:05 ----D---- C:\Program Files\Internet Explorer
2009-07-26 17:44:50 ----D---- C:\Program Files\ComPlus Applications
2009-07-26 17:44:48 ----A---- C:\WINDOWS\vbaddin.ini
2009-07-26 17:44:48 ----A---- C:\WINDOWS\vb.ini
2009-07-26 17:44:13 ----D---- C:\Program Files\Windows Media Player
2009-07-26 17:44:13 ----D---- C:\Program Files\Online Services
2009-07-26 17:44:07 ----D---- C:\Program Files\Messenger
2009-07-26 17:44:02 ----D---- C:\Program Files\MSN Gaming Zone
2009-07-26 17:44:02 ----A---- C:\WINDOWS\system32\write.exe
2009-07-26 17:43:51 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-07-26 17:43:51 ----A---- C:\WINDOWS\system32\hticons.dll
2009-07-26 17:43:51 ----A---- C:\WINDOWS\system32\avwav.dll
2009-07-26 17:43:51 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-07-26 17:43:51 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-07-26 17:43:50 ----A---- C:\WINDOWS\system32\winchat.exe
2009-07-26 17:43:42 ----A---- C:\WINDOWS\system32\getuname.dll
2009-07-26 17:43:42 ----A---- C:\WINDOWS\system32\charmap.exe
2009-07-26 17:43:41 ----A---- C:\WINDOWS\system32\winmine.exe
2009-07-26 17:43:41 ----A---- C:\WINDOWS\system32\sol.exe
2009-07-26 17:43:41 ----A---- C:\WINDOWS\system32\calc.exe
2009-07-26 17:43:40 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-07-26 17:43:40 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-07-26 17:43:40 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-07-26 17:43:40 ----A---- C:\WINDOWS\system32\tskill.exe
2009-07-26 17:43:40 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-07-26 17:43:40 ----A---- C:\WINDOWS\system32\tscon.exe
2009-07-26 17:43:40 ----A---- C:\WINDOWS\system32\reset.exe
2009-07-26 17:43:40 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-07-26 17:43:40 ----A---- C:\WINDOWS\system32\freecell.exe
2009-07-26 17:43:39 ----A---- C:\WINDOWS\system32\shadow.exe
2009-07-26 17:43:39 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-07-26 17:43:39 ----A---- C:\WINDOWS\system32\regini.exe
2009-07-26 17:43:39 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-07-26 17:43:39 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-07-26 17:43:39 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-07-26 17:43:39 ----A---- C:\WINDOWS\system32\msg.exe
2009-07-26 17:43:39 ----A---- C:\WINDOWS\system32\logoff.exe
2009-07-26 17:43:38 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-07-26 17:43:38 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-07-26 17:43:38 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-07-26 17:43:37 ----A---- C:\WINDOWS\system32\stclient.dll
2009-07-26 17:43:37 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-07-26 17:43:37 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-07-26 17:43:37 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-07-26 17:43:37 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-07-26 17:43:37 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-07-26 17:43:37 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-07-26 17:43:32 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-07-26 17:43:21 ----D---- C:\Program Files\MSN
2009-07-26 17:43:20 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-07-26 17:43:20 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-07-26 17:43:20 ----A---- C:\WINDOWS\system32\hypertrm.dll
2009-07-26 17:43:20 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-07-26 17:43:19 ----D---- C:\Program Files\Windows NT
2009-07-26 17:43:19 ----A---- C:\WINDOWS\system32\spider.exe
2009-07-26 17:43:19 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-07-26 17:43:19 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-07-26 17:43:18 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-07-26 17:43:17 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2009-07-26 17:43:17 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-07-26 17:43:17 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-07-26 17:43:17 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-07-26 17:43:17 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-07-26 17:43:17 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-07-26 17:43:17 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-07-26 17:43:17 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-07-26 17:43:16 ----D---- C:\WINDOWS\system32\MsDtc
2009-07-26 17:43:16 ----A---- C:\WINDOWS\system32\termsrv.dll
2009-07-26 17:43:16 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-07-26 17:43:16 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-07-26 17:43:16 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-07-26 17:43:16 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-07-26 17:43:16 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-07-26 17:43:16 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-07-26 17:43:16 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-07-26 17:43:15 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-07-26 17:43:15 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-07-26 17:43:15 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-07-26 17:43:15 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-07-26 17:43:14 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-07-26 17:43:14 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-07-26 17:43:13 ----D---- C:\WINDOWS\system32\Com
2009-07-26 17:43:13 ----A---- C:\WINDOWS\system32\colbact.dll
2009-07-26 17:43:13 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-07-26 17:43:13 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-07-26 17:43:13 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-07-26 17:43:13 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-07-26 17:43:12 ----A---- C:\WINDOWS\system32\comuid.dll
2009-07-26 17:43:12 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-07-26 17:43:11 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-07-26 17:43:05 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-07-26 17:43:05 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-07-26 17:43:04 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-07-26 17:43:04 ----A---- C:\WINDOWS\system32\cmprops.dll
2009-07-26 16:19:33 ----D---- C:\WINDOWS\nview
2009-07-26 16:19:33 ----A---- C:\WINDOWS\system32\nvudisp.exe
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco1ins.dll
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco1.dll
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco_l2052.dll
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco_l1046.dll
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco_l1042.dll
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco_l1041.dll
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco_l1040.dll
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco_l1036.dll
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco_l1034.dll
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco_l1031.dll
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco_l1028.dll
2009-07-26 16:15:37 ----RA---- C:\WINDOWS\system32\nvconrm.dll
2009-07-26 16:15:37 ----RA---- C:\WINDOWS\system32\bdco1ins.dll
2009-07-26 16:15:37 ----RA---- C:\WINDOWS\system32\bdco1.dll
2009-07-26 16:15:37 ----D---- C:\WINDOWS\NV264316.TMP
2009-07-26 16:15:37 ----A---- C:\WINDOWS\system32\nvunrm.exe
2009-07-26 16:15:33 ----RA---- C:\WINDOWS\system32\nvusmb.exe
2009-07-26 16:15:21 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-07-26 16:15:09 ----RA---- C:\WINDOWS\system32\NVUNINST.EXE
2009-07-26 16:14:59 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-07-26 15:45:30 ----D---- C:\Documents and Settings\myriam\Application Data\Identities
2009-07-26 15:45:29 ----HD---- C:\Program Files\Uninstall Information
2009-07-26 15:45:27 ----ASH---- C:\Documents and Settings\myriam\Application Data\desktop.ini
2009-07-26 15:45:26 ----SD---- C:\Documents and Settings\myriam\Application Data\Microsoft
======List of files/folders modified in the last 3 months======
2009-07-29 11:40:11 ----A---- C:\WINDOWS\win.ini
2009-07-29 11:40:11 ----A---- C:\WINDOWS\system.ini
2009-07-18 18:20:07 ----A---- C:\WINDOWS\system32\shdocvw.dll
2009-07-18 18:20:06 ----A---- C:\WINDOWS\system32\mshtml.dll
2009-06-26 18:18:51 ----A---- C:\WINDOWS\system32\wininet.dll
2009-06-26 18:18:50 ----A---- C:\WINDOWS\system32\urlmon.dll
2009-06-26 18:18:50 ----A---- C:\WINDOWS\system32\shlwapi.dll
2009-06-26 18:18:49 ----A---- C:\WINDOWS\system32\pngfilt.dll
2009-06-26 18:18:49 ----A---- C:\WINDOWS\system32\mstime.dll
2009-06-26 18:18:49 ----A---- C:\WINDOWS\system32\msrating.dll
2009-06-26 18:18:49 ----A---- C:\WINDOWS\system32\mshtmled.dll
2009-06-26 18:18:47 ----A---- C:\WINDOWS\system32\jsproxy.dll
2009-06-26 18:18:47 ----A---- C:\WINDOWS\system32\inseng.dll
2009-06-26 18:18:46 ----A---- C:\WINDOWS\system32\iepeers.dll
2009-06-26 18:18:46 ----A---- C:\WINDOWS\system32\ieencode.dll
2009-06-26 18:18:46 ----A---- C:\WINDOWS\system32\extmgr.dll
2009-06-26 18:18:46 ----A---- C:\WINDOWS\system32\dxtrans.dll
2009-06-26 18:18:46 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2009-06-26 18:18:46 ----A---- C:\WINDOWS\system32\danim.dll
2009-06-26 18:18:45 ----A---- C:\WINDOWS\system32\cdfview.dll
2009-06-26 18:18:45 ----A---- C:\WINDOWS\system32\browseui.dll
2009-06-23 05:53:22 ----A---- C:\WINDOWS\system32\xpsp3res.dll
2009-06-16 16:54:17 ----A---- C:\WINDOWS\system32\t2embed.dll
2009-06-16 16:54:17 ----A---- C:\WINDOWS\system32\fontsub.dll
2009-06-03 21:27:00 ----A---- C:\WINDOWS\system32\quartz.dll
2009-05-07 17:43:40 ----A---- C:\WINDOWS\system32\localspl.dll
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-02-17 24232]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2006-11-28 1161888]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2006-03-02 60800]
R3 CmBatt;Pilote d'adaptateur secteur Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2004-08-04 14080]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2007-02-16 34760]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-07-24 4353024]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2006-03-02 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-06-14 3660672]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-03-04 13056]
R3 nvsmu;nvsmu; C:\WINDOWS\system32\DRIVERS\nvsmu.sys [2006-03-06 11136]
R3 RT61;Ralink RT61 Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT61.sys [2006-08-02 384384]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2006-03-02 67584]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2006-03-02 26624]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2006-03-02 57600]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2006-03-02 17024]
S3 a3gxbsee;a3gxbsee; C:\WINDOWS\system32\drivers\a3gxbsee.sys []
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-03-04 34176]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\WINDOWS\system32\agrsmsvc.exe [2006-10-05 9216]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-06-14 143427]
R2 SNMP;Service SNMP; C:\WINDOWS\System32\snmp.exe [2006-11-21 33280]
S3 LPDSVC;Serveur d'impression TCP/IP; C:\WINDOWS\system32\tcpsvcs.exe [2006-03-02 19456]
S3 SNMPTRAP;Service d'interruption SNMP; C:\WINDOWS\System32\snmptrap.exe [2006-03-02 8704]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2006-03-02 14336]
S4 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
-----------------EOF-----------------
info.txt logfile of random's system information tool 1.06 2009-08-01 18:12:45
======Uninstall list======
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
3Planesoft Screensaver Manager 1.1-->"C:\Program Files\3Planesoft Screensaver Manager\unins000.exe"
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Agere Systems HDA Modem-->agrsmdel
AlienGUIse-->C:\PROGRA~1\ALIENG~1\thememgr.exe /uninstallwise
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Call of Atlantis-->"C:\WINDOWS\Call of Atlantis\uninstall.exe" "/U:C:\Program Files\Call of Atlantis\Uninstall\uninstall.xml"
CloneCD-->"C:\Program Files\SlySoft\CloneCD\ccd-uninst.exe" /D="C:\Program Files\SlySoft\CloneCD"
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB935448)-->"C:\WINDOWS\$NtUninstallKB935448$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB942288-v3)-->"C:\WINDOWS\$NtUninstallKB942288-v3$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
DAEMON Tools Toolbar-->C:\Program Files\DAEMON Tools Toolbar\uninst.exe
Deenero-->"C:\Program Files\Deenero\deenerosvr_1,0,1,5.exe" -ShowLightboxPage=uninstall
High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB926239)-->"C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe"
IconPackager-->"C:\Documents and Settings\All Users\Application Data\{B98A2B83-8BB0-42E7-AA1D-D6FA6E7C8F31}\IconPackager.exe" REMOVE=TRUE MODIFY=FALSE
IconPackager-->C:\Documents and Settings\All Users\Application Data\{B98A2B83-8BB0-42E7-AA1D-D6FA6E7C8F31}\IconPackager.exe
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Magic Ball 4-->"C:\WINDOWS\Magic Ball 4\uninstall.exe" "/U:C:\Program Files\Magic Ball 4\Uninstall\uninstall.xml"
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mise à jour de sécurité pour Windows XP (KB926247)-->"C:\WINDOWS\$NtUninstallKB926247$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB944338-v2)-->"C:\WINDOWS\$NtUninstallKB944338-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB972260)-->"C:\WINDOWS\$NtUninstallKB972260$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Moovida-->C:\Program Files\Moovida\uninstall-1.0.5.exe
Mozilla Firefox (3.5.1)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MP3 Player Utilities 4.09-->MsiExec.exe /I{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}
MP3 Player Utilities-->MsiExec.exe /I{5BBFB0E4-2250-49C3-A8A3-65BE2197D13B}
NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Theme Manager-->C:\PROGRA~1\ALIENG~1\thememgr.exe /uninstallwise
Unlocker 1.8.7-->C:\Program Files\Unlocker\uninst.exe
Valentine 3D Screensaver 1.0-->"C:\Program Files\Valentine 3D Screensaver\unins000.exe"
VLC media player 1.0.1-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Wallpaper-->C:\Program Files\Wallpaper\uninst.exe
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
======Hosts File======
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
======System event log======
Computer Name: MIMI-18C16AF15B
Event Code: 26
Message: Application popup : Windows - Fichier endommagé : Le fichier ou le répertoire C:\Documents and Settings\myriam\Local Settings\Historique\History.IE5\MSHist012009073120090801\index.dat est endommagé et illisible. Exécutez l'utilitaire CHKDSK.
Record Number: 2439
Source Name: Application Popup
Time Written: 20090731113924.000000+120
Event Type: Informations
User:
Computer Name: MIMI-18C16AF15B
Event Code: 26
Message: Application popup : Windows - Fichier endommagé : Le fichier ou le répertoire C:\Documents and Settings\myriam\Local Settings\Historique\History.IE5\MSHist012009073120090801\index.dat est endommagé et illisible. Exécutez l'utilitaire CHKDSK.
Record Number: 2438
Source Name: Application Popup
Time Written: 20090731113924.000000+120
Event Type: Informations
User:
Computer Name: MIMI-18C16AF15B
Event Code: 26
Message: Application popup : Windows - Fichier endommagé : Le fichier ou le répertoire C:\Documents and Settings\myriam\Local Settings\Historique\History.IE5\MSHist012009073120090801\index.dat est endommagé et illisible. Exécutez l'utilitaire CHKDSK.
Record Number: 2437
Source Name: Application Popup
Time Written: 20090731113923.000000+120
Event Type: Informations
User:
Computer Name: MIMI-18C16AF15B
Event Code: 26
Message: Application popup : Windows - Fichier endommagé : Le fichier ou le répertoire C:\Documents and Settings\myriam\Local Settings\Historique\History.IE5\MSHist012009073120090801\index.dat est endommagé et illisible. Exécutez l'utilitaire CHKDSK.
Record Number: 2436
Source Name: Application Popup
Time Written: 20090731113923.000000+120
Event Type: Informations
User:
Computer Name: MIMI-18C16AF15B <
Destroy\TeaTimer.exe
C:\Documents and Settings\myriam\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\myriam\Bureau\RSIT.exe
C:\Program Files\trend micro\myriam.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: Deenero - {66886C4D-B307-4ECA-A228-52CA9B9851A4} - C:\Program Files\Deenero\deenero_1,0,1,5.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Wallpaper] "C:\Program Files\Wallpaper\Wallpaper.exe" Starter
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\myriam\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
--
End of file - 4911 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Driver Robot.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
AskBar BHO - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-09-29 325000]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} - Ask Toolbar - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-09-29 325000]
{66886C4D-B307-4ECA-A228-52CA9B9851A4} - Deenero - C:\Program Files\Deenero\deenero_1,0,1,5.dll [2009-07-16 504512]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-06-14 7573504]
"UnlockerAssistant"=C:\Program Files\Unlocker\UnlockerAssistant.exe [2008-05-02 15872]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-07-21 16261632]
"nwiz"=nwiz.exe /install []
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"CloneCDTray"=C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [2009-01-30 57344]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]
"Wallpaper"=C:\Program Files\Wallpaper\Wallpaper.exe [2007-08-21 233472]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2006-03-02 15360]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]
C:\Documents and Settings\myriam\Menu Démarrer\Programmes\Démarrage
Notification de cadeaux MSN.lnk - C:\Documents and Settings\myriam\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="wbsys.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WB]
C:\Program Files\AlienGUIse\fastload.dll [2001-12-20 24576]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
IconPackager Repair - {1799460C-0BC8-4865-B9DF-4A36CD703FF0} - C:\Program Files\Stardock\Object Desktop\IconPackager\iprepair.dll [2009-01-28 70960]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\WINDOWS\system32\usmt\migwiz.exe"="C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Assistant Transfert de fichiers et de paramètres"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
======List of files/folders created in the last 3 months======
2009-08-01 18:12:22 ----D---- C:\Program Files\trend micro
2009-08-01 18:12:21 ----D---- C:\rsit
2009-08-01 15:36:32 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-08-01 15:36:32 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-08-01 14:13:48 ----HDC---- C:\WINDOWS\$NtUninstallKB935448$
2009-08-01 14:13:45 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2009-08-01 14:13:32 ----HDC---- C:\WINDOWS\$NtUninstallKB972260$
2009-08-01 14:13:26 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-08-01 14:13:21 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-08-01 14:13:17 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-08-01 14:13:09 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-08-01 11:59:09 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2009-08-01 11:58:22 ----HDC---- C:\WINDOWS\$NtUninstallKB926247$
2009-08-01 11:25:01 ----N---- C:\WINDOWS\system32\tzchange.exe
2009-07-31 21:26:34 ----SHD---- C:\Config.Msi
2009-07-31 21:24:35 ----D---- C:\94bfddd5d05dc52cc885f6db41
2009-07-31 20:57:17 ----D---- C:\Documents and Settings\myriam\Application Data\Malwarebytes
2009-07-31 20:57:11 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-07-31 20:57:11 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-07-31 12:44:26 ----D---- C:\Program Files\MP3 Player Utilities 4.09
2009-07-31 12:43:06 ----D---- C:\Program Files\MP3 Player Utilities
2009-07-31 12:42:11 ----RA---- C:\WINDOWS\PlaySnd.INI
2009-07-31 11:16:57 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-07-31 11:16:53 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-07-31 11:16:49 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-07-31 11:16:45 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-07-31 11:16:41 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-07-31 11:16:36 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-07-31 11:16:31 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-07-31 11:16:26 ----HDC---- C:\WINDOWS\$NtUninstallKB973346$
2009-07-31 11:15:39 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-07-31 11:15:29 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-07-31 11:15:23 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2009-07-31 11:15:19 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2009-07-31 11:15:04 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-07-31 11:14:57 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-07-31 11:14:44 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2009-07-31 11:14:18 ----HDC---- C:\WINDOWS\$NtUninstallKB959772_WM11$
2009-07-31 11:14:13 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-07-31 11:14:04 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-07-31 11:14:00 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-07-31 11:13:56 ----HDC---- C:\WINDOWS\$NtUninstallKB961371$
2009-07-31 11:13:52 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-07-31 11:13:48 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-07-31 11:13:38 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP11$
2009-07-31 11:12:52 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-07-31 11:12:48 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2009-07-30 11:32:51 ----D---- C:\WINDOWS\system32\NtmsData
2009-07-29 23:09:24 ----A---- C:\WINDOWS\ntbtlog.txt
2009-07-29 22:56:43 ----D---- C:\WINDOWS\Registration
2009-07-29 22:55:16 ----A---- C:\WINDOWS\system32\snmptrap.exe
2009-07-29 22:55:16 ----A---- C:\WINDOWS\system32\lprmon.dll
2009-07-29 22:55:16 ----A---- C:\WINDOWS\system32\lpdsvc.dll
2009-07-29 22:55:15 ----A---- C:\WINDOWS\system32\snmpmib.dll
2009-07-29 22:55:15 ----A---- C:\WINDOWS\system32\snmp.exe
2009-07-29 22:55:15 ----A---- C:\WINDOWS\system32\hostmib.dll
2009-07-29 22:55:15 ----A---- C:\WINDOWS\system32\evntwin.exe
2009-07-29 22:55:15 ----A---- C:\WINDOWS\system32\evntcmd.exe
2009-07-29 22:55:15 ----A---- C:\WINDOWS\system32\evntagnt.dll
2009-07-29 22:55:13 ----A---- C:\WINDOWS\system32\lmmib2.dll
2009-07-29 13:50:08 ----D---- C:\Documents and Settings\myriam\Application Data\Adobe
2009-07-29 11:31:53 ----D---- C:\WINDOWS\pss
2009-07-29 11:17:10 ----D---- C:\Documents and Settings\myriam\Application Data\Python-Eggs
2009-07-29 11:16:38 ----D---- C:\Program Files\Deenero
2009-07-29 11:15:46 ----D---- C:\Program Files\Moovida
2009-07-28 22:39:52 ----D---- C:\Program Files\Games
2009-07-28 22:33:44 ----D---- C:\WINDOWS\Magic Ball 4
2009-07-28 22:33:44 ----D---- C:\Program Files\Magic Ball 4
2009-07-28 22:33:32 ----A---- C:\WINDOWS\Magic Ball 4 Setup Log.txt
2009-07-28 22:15:31 ----D---- C:\Documents and Settings\myriam\Application Data\Wallpaper
2009-07-28 22:15:29 ----D---- C:\Program Files\Wallpaper
2009-07-28 15:30:24 ----D---- C:\Documents and Settings\myriam\Application Data\MagicBall4
2009-07-28 15:29:08 ----D---- C:\Program Files\Alawar
2009-07-28 15:19:51 ----D---- C:\WINDOWS\system32\3Planesoft
2009-07-28 15:19:51 ----D---- C:\Program Files\3Planesoft Screensaver Manager
2009-07-28 15:19:50 ----A---- C:\WINDOWS\system32\Valentine 3D Screensaver.exe
2009-07-28 15:19:49 ----D---- C:\Program Files\Valentine 3D Screensaver
2009-07-28 14:07:54 ----D---- C:\Program Files\SlySoft
2009-07-28 13:41:36 ----D---- C:\Documents and Settings\myriam\Application Data\Mozilla
2009-07-28 13:24:58 ----D---- C:\Documents and Settings\myriam\Application Data\vlc
2009-07-28 12:57:43 ----D---- C:\Documents and Settings\All Users\Application Data\Playrix Entertainment
2009-07-28 11:59:15 ----D---- C:\Documents and Settings\myriam\Application Data\Desktopicon
2009-07-28 11:59:14 ----D---- C:\Program Files\Unlocker
2009-07-28 11:05:40 ----D---- C:\Program Files\Fichiers communs\Stardock
2009-07-28 11:05:40 ----A---- C:\WINDOWS\wb.ini
2009-07-28 11:02:02 ----A---- C:\WINDOWS\_MSRSTRT.EXE
2009-07-28 10:52:14 ----D---- C:\Documents and Settings\myriam\Application Data\WinRAR
2009-07-28 10:52:00 ----D---- C:\Program Files\WinRAR
2009-07-28 10:20:56 ----HDC---- C:\Documents and Settings\All Users\Application Data\{B98A2B83-8BB0-42E7-AA1D-D6FA6E7C8F31}
2009-07-28 10:20:52 ----D---- C:\Program Files\Stardock
2009-07-27 20:35:17 ----D---- C:\WINDOWS\Call of Atlantis
2009-07-27 20:35:17 ----D---- C:\Program Files\Call of Atlantis
2009-07-27 20:35:00 ----A---- C:\WINDOWS\Call of Atlantis Setup Log.txt
2009-07-27 19:11:58 ----D---- C:\Program Files\VideoLAN
2009-07-27 17:09:06 ----D---- C:\Documents and Settings\myriam\Application Data\BitTorrent
2009-07-27 17:09:02 ----D---- C:\Program Files\BitTorrent
2009-07-27 17:04:51 ----D---- C:\Program Files\AskBarDis
2009-07-27 16:37:41 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
2009-07-27 16:37:33 ----D---- C:\Program Files\DAEMON Tools Toolbar
2009-07-27 16:37:31 ----D---- C:\Program Files\DAEMON Tools Lite
2009-07-27 16:32:35 ----D---- C:\Documents and Settings\myriam\Application Data\DAEMON Tools Lite
2009-07-27 16:08:40 ----D---- C:\Documents and Settings\myriam\Application Data\Macromedia
2009-07-27 16:04:51 ----D---- C:\Program Files\AlienGUIse
2009-07-27 16:04:51 ----A---- C:\WINDOWS\system32\wbsys.dll
2009-07-27 15:48:57 ----A---- C:\WINDOWS\system32\NeroCheck.exe
2009-07-27 15:47:26 ----D---- C:\Documents and Settings\All Users\Application Data\Ahead
2009-07-27 15:47:25 ----N---- C:\WINDOWS\system32\TwnLib4.dll
2009-07-27 15:47:24 ----N---- C:\WINDOWS\system32\ImagXRA7.dll
2009-07-27 15:47:23 ----N---- C:\WINDOWS\system32\ImagXR7.dll
2009-07-27 15:47:23 ----N---- C:\WINDOWS\system32\ImagXpr7.dll
2009-07-27 15:47:23 ----N---- C:\WINDOWS\system32\ImagX7.dll
2009-07-27 15:47:21 ----N---- C:\WINDOWS\system32\TwnLib20.dll
2009-07-27 15:47:21 ----N---- C:\WINDOWS\system32\picn20.dll
2009-07-27 15:47:19 ----D---- C:\Program Files\Fichiers communs\Ahead
2009-07-27 15:47:11 ----D---- C:\Program Files\Ahead
2009-07-27 13:58:54 ----D---- C:\WINDOWS\system32\Lang
2009-07-27 13:55:34 ----R---- C:\WINDOWS\system32\ChCfg.exe
2009-07-27 13:55:11 ----D---- C:\WINDOWS\system32\RTCOM
2009-07-27 13:55:07 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-07-27 13:54:40 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$
2009-07-27 13:54:37 ----RA---- C:\WINDOWS\SOUNDMAN.EXE
2009-07-27 13:54:37 ----RA---- C:\WINDOWS\SkyTel.exe
2009-07-27 13:54:36 ----RA---- C:\WINDOWS\RtlUpd.exe
2009-07-27 13:54:35 ----RA---- C:\WINDOWS\RTLCPL.EXE
2009-07-27 13:54:31 ----RA---- C:\WINDOWS\RTHDCPL.EXE
2009-07-27 13:54:31 ----RA---- C:\WINDOWS\MicCal.exe
2009-07-27 13:54:30 ----RA---- C:\WINDOWS\ALCMTR.EXE
2009-07-27 13:54:29 ----RA---- C:\WINDOWS\ALCWZRD.EXE
2009-07-27 13:54:29 ----D---- C:\Program Files\Realtek
2009-07-27 13:54:28 ----HD---- C:\Program Files\InstallShield Installation Information
2009-07-27 13:53:38 ----R---- C:\WINDOWS\RtlExUpd.dll
2009-07-27 13:21:23 ----HDC---- C:\WINDOWS\$NtUninstallKB926239$
2009-07-27 13:21:18 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2009-07-27 13:21:07 ----D---- C:\Program Files\Windows Media Connect 2
2009-07-27 13:21:00 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2009-07-27 13:20:36 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2009-07-27 13:20:25 ----D---- C:\WINDOWS\system32\LogFiles
2009-07-27 13:20:21 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2009-07-27 13:13:46 ----A---- C:\WINDOWS\system32\wpa.bak
2009-07-27 13:10:55 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-07-27 13:10:52 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-07-27 13:10:48 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-07-27 13:10:39 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-07-27 13:10:36 ----A---- C:\WINDOWS\system32\MRT.exe
2009-07-27 13:10:31 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-07-27 13:10:27 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-07-27 13:10:23 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-07-27 13:10:12 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-07-27 13:04:27 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2009-07-27 10:06:19 ----D---- C:\WINDOWS\system32\CatRoot_bak
2009-07-27 09:40:59 ----D---- C:\WINDOWS\system32\PreInstall
2009-07-27 09:40:57 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-07-27 09:40:34 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-07-27 09:34:48 ----A---- C:\WINDOWS\system32\muweb.dll
2009-07-27 09:34:48 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2009-07-27 09:34:48 ----A---- C:\WINDOWS\system32\mucltui.dll
2009-07-26 21:37:42 ----A---- C:\WINDOWS\IE4 Error Log.txt
2009-07-26 21:26:51 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2009-07-26 21:26:36 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-07-26 21:26:35 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2009-07-26 21:25:58 ----D---- C:\Program Files\Windows Live SkyDrive
2009-07-26 20:37:09 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-07-26 20:14:44 ----D---- C:\WINDOWS\SoftwareDistribution
2009-07-26 20:14:42 ----SD---- C:\WINDOWS\system32\Microsoft
2009-07-26 20:14:42 ----D---- C:\WINDOWS\Prefetch
2009-07-26 20:14:42 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-07-26 20:11:57 ----SHDC---- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2009-07-26 20:11:53 ----D---- C:\Program Files\Windows Live
2009-07-26 20:11:45 ----D---- C:\Documents and Settings\All Users\Application Data\WLInstaller
2009-07-26 20:11:32 ----HD---- C:\WINDOWS\$hf_mig$
2009-07-26 20:11:25 ----D---- C:\Program Files\Microsoft Silverlight
2009-07-26 20:09:42 ----D---- C:\61e873a4e8b1e966472f
2009-07-26 20:05:48 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2009-07-26 20:05:47 ----RA---- C:\WINDOWS\SET65.tmp
2009-07-26 20:05:44 ----RA---- C:\WINDOWS\SET32.tmp
2009-07-26 20:05:41 ----RA---- C:\WINDOWS\SET24.tmp
2009-07-26 20:05:40 ----RA---- C:\WINDOWS\SET20.tmp
2009-07-26 20:05:18 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-07-26 20:04:05 ----RA---- C:\WINDOWS\SET5E.tmp
2009-07-26 20:04:00 ----RA---- C:\WINDOWS\SET29.tmp
2009-07-26 20:03:57 ----RA---- C:\WINDOWS\SET1D.tmp
2009-07-26 20:03:56 ----RA---- C:\WINDOWS\SET1A.tmp
2009-07-26 19:52:53 ----HDC---- C:\WINDOWS\$NtUninstallKB942288-v3$
2009-07-26 19:52:12 ----RA---- C:\WINDOWS\SET2C.tmp
2009-07-26 19:52:10 ----RA---- C:\WINDOWS\SET1F.tmp
2009-07-26 19:52:09 ----RA---- C:\WINDOWS\SET1C.tmp
2009-07-26 19:51:24 ----D---- C:\WINDOWS\Minidump
2009-07-26 19:43:38 ----SHD---- C:\RECYCLER
2009-07-26 19:41:59 ----A---- C:\WINDOWS\system32\h323log.txt
2009-07-26 19:39:18 ----A---- C:\WINDOWS\system32\usbui.dll
2009-07-26 19:38:14 ----A---- C:\WINDOWS\imsins.BAK
2009-07-26 19:38:12 ----SHD---- C:\WINDOWS\Installer
2009-07-26 19:38:12 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-07-26 19:38:11 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-07-26 19:38:11 ----A---- C:\WINDOWS\ODBCINST.INI
2009-07-26 19:38:08 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2009-07-26 19:38:07 ----RD---- C:\Program Files
2009-07-26 19:38:07 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-07-26 19:38:07 ----D---- C:\Program Files\Fichiers communs
2009-07-26 19:37:57 ----RA---- C:\WINDOWS\SET5D.tmp
2009-07-26 19:37:54 ----RA---- C:\WINDOWS\SET2A.tmp
2009-07-26 19:37:51 ----RA---- C:\WINDOWS\SET1E.tmp
2009-07-26 19:37:50 ----RA---- C:\WINDOWS\SET1B.tmp
2009-07-26 19:36:28 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-07-26 19:36:28 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-07-26 19:36:28 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-07-26 19:36:25 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-07-26 19:36:25 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-07-26 19:36:25 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-07-26 19:36:25 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-07-26 19:36:25 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-07-26 19:36:25 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-07-26 19:36:25 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-07-26 19:36:24 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-07-26 19:36:24 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-07-26 19:36:24 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-07-26 19:36:24 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-07-26 19:36:24 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-07-26 19:36:21 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-07-26 19:36:21 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-07-26 19:36:21 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-07-26 19:36:21 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-07-26 19:36:21 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-07-26 19:36:21 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-07-26 19:36:21 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-07-26 19:36:19 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-07-26 19:36:19 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-07-26 19:36:19 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-07-26 19:36:19 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-07-26 19:36:19 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdro.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2009-07-26 19:36:16 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2009-07-26 19:36:13 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-07-26 19:36:13 ----A---- C:\WINDOWS\system32\irclass.dll
2009-07-26 19:36:13 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-07-26 19:36:13 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-07-26 19:36:13 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-07-26 19:36:10 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-07-26 19:36:10 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-07-26 19:36:10 ----A---- C:\WINDOWS\system32\batt.dll
2009-07-26 19:36:09 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-07-26 19:36:08 ----A---- C:\WINDOWS\system32\storprop.dll
2009-07-26 19:35:59 ----RA---- C:\WINDOWS\SET25.tmp
2009-07-26 19:35:56 ----RA---- C:\WINDOWS\SET8.tmp
2009-07-26 19:35:53 ----RA---- C:\WINDOWS\SET4.tmp
2009-07-26 19:35:51 ----RA---- C:\WINDOWS\SET3.tmp
2009-07-26 19:35:45 ----D---- C:\WINDOWS\system32\CatRoot2
2009-07-26 19:35:45 ----D---- C:\WINDOWS\system32\CatRoot
2009-07-26 19:35:16 ----A---- C:\WINDOWS\setuplog.txt
2009-07-26 19:35:12 ----SHD---- C:\System Volume Information
2009-07-26 19:35:12 ----D---- C:\Documents and Settings
2009-07-26 19:34:28 ----SH---- C:\boot.ini
2009-07-26 19:33:17 ----D---- C:\Program Files\Mozilla Firefox
2009-07-26 19:27:18 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-07-26 19:27:18 ----RSD---- C:\WINDOWS\Fonts
2009-07-26 19:27:18 ----RD---- C:\WINDOWS\Web
2009-07-26 19:27:18 ----HD---- C:\WINDOWS\inf
2009-07-26 19:27:18 ----D---- C:\WINDOWS\WinSxS
2009-07-26 19:27:18 ----D---- C:\WINDOWS\twain_32
2009-07-26 19:27:18 ----D---- C:\WINDOWS\Temp
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\wins
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\wbem
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\usmt
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\spool
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\ShellExt
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\Setup
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\ras
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\oobe
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\npp
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\mui
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\inetsrv
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\IME
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\icsxml
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\ias
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\export
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\drivers
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\dhcp
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\config
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\3com_dmi
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\3076
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\2052
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\1054
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\1042
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\1041
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\1037
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\1036
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\1033
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\1031
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\1028
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32\1025
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system32
2009-07-26 19:27:18 ----D---- C:\WINDOWS\system
2009-07-26 19:27:18 ----D---- C:\WINDOWS\security
2009-07-26 19:27:18 ----D---- C:\WINDOWS\Resources
2009-07-26 19:27:18 ----D---- C:\WINDOWS\repair
2009-07-26 19:27:18 ----D---- C:\WINDOWS\Provisioning
2009-07-26 19:27:18 ----D---- C:\WINDOWS\PeerNet
2009-07-26 19:27:18 ----D---- C:\WINDOWS\pchealth
2009-07-26 19:27:18 ----D---- C:\WINDOWS\mui
2009-07-26 19:27:18 ----D---- C:\WINDOWS\msapps
2009-07-26 19:27:18 ----D---- C:\WINDOWS\msagent
2009-07-26 19:27:18 ----D---- C:\WINDOWS\Media
2009-07-26 19:27:18 ----D---- C:\WINDOWS\java
2009-07-26 19:27:18 ----D---- C:\WINDOWS\ime
2009-07-26 19:27:18 ----D---- C:\WINDOWS\Help
2009-07-26 19:27:18 ----D---- C:\WINDOWS\Driver Cache
2009-07-26 19:27:18 ----D---- C:\WINDOWS\Debug
2009-07-26 19:27:18 ----D---- C:\WINDOWS\Cursors
2009-07-26 19:27:18 ----D---- C:\WINDOWS\Connection Wizard
2009-07-26 19:27:18 ----D---- C:\WINDOWS\Config
2009-07-26 19:27:18 ----D---- C:\WINDOWS\AppPatch
2009-07-26 19:27:18 ----D---- C:\WINDOWS\addins
2009-07-26 19:27:18 ----AD---- C:\WINDOWS
2009-07-26 19:26:37 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-07-26 18:02:04 ----A---- C:\WINDOWS\system32\OLD2B0.tmp
2009-07-26 18:01:50 ----A---- C:\WINDOWS\system32\OLD28E.tmp
2009-07-26 18:01:50 ----A---- C:\WINDOWS\system32\OLD28C.tmp
2009-07-26 18:00:20 ----A---- C:\WINDOWS\system32\OLD19F.tmp
2009-07-26 18:00:10 ----D---- C:\WINDOWS\system32\xircom
2009-07-26 18:00:10 ----D---- C:\Program Files\xerox
2009-07-26 18:00:10 ----D---- C:\Program Files\microsoft frontpage
2009-07-26 18:00:01 ----A---- C:\WINDOWS\control.ini
2009-07-26 18:00:01 ----A---- C:\AUTOEXEC.BAT
2009-07-26 17:49:44 ----A---- C:\WINDOWS\OEWABLog.txt
2009-07-26 17:49:40 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-07-26 17:48:53 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-07-26 17:48:53 ----RD---- C:\WINDOWS\Offline Web Pages
2009-07-26 17:48:53 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-07-26 17:48:47 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-07-26 17:48:43 ----HD---- C:\Program Files\WindowsUpdate
2009-07-26 17:48:38 ----D---- C:\Program Files\Services en ligne
2009-07-26 17:48:20 ----D---- C:\WINDOWS\system32\DirectX
2009-07-26 17:46:02 ----A---- C:\WINDOWS\system32\atrace.dll
2009-07-26 17:46:00 ----A---- C:\WINDOWS\system32\desktop.ini
2009-07-26 17:46:00 ----A---- C:\WINDOWS\desktop.ini
2009-07-26 17:45:52 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-07-26 17:45:51 ----A---- C:\WINDOWS\system32\acctres.dll
2009-07-26 17:45:50 ----D---- C:\Program Files\Fichiers communs\Services
2009-07-26 17:45:47 ----SD---- C:\WINDOWS\Tasks
2009-07-26 17:45:47 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-07-26 17:45:46 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-07-26 17:45:42 ----D---- C:\WINDOWS\srchasst
2009-07-26 17:45:40 ----D---- C:\WINDOWS\system32\Macromed
2009-07-26 17:45:37 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-07-26 17:45:37 ----A---- C:\WINDOWS\system32\wups.dll
2009-07-26 17:45:37 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-07-26 17:45:37 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-07-26 17:45:37 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-07-26 17:45:37 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-07-26 17:45:36 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-07-26 17:45:36 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-07-26 17:45:36 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-07-26 17:45:36 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-07-26 17:45:36 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-07-26 17:45:36 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-07-26 17:45:36 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-07-26 17:45:31 ----D---- C:\Program Files\Movie Maker
2009-07-26 17:45:27 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-07-26 17:45:27 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-07-26 17:45:27 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-07-26 17:45:27 ----A---- C:\WINDOWS\system32\racpldlg.dll
2009-07-26 17:45:23 ----A---- C:\WINDOWS\system32\fltMc.exe
2009-07-26 17:45:23 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-07-26 17:45:22 ----D---- C:\WINDOWS\system32\Restore
2009-07-26 17:45:22 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-07-26 17:45:22 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-07-26 17:45:22 ----A---- C:\WINDOWS\system32\srclient.dll
2009-07-26 17:45:22 ----A---- C:\WINDOWS\system32\ils.dll
2009-07-26 17:45:21 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2009-07-26 17:45:21 ----A---- C:\WINDOWS\system32\msconf.dll
2009-07-26 17:45:21 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-07-26 17:45:21 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-07-26 17:45:21 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-07-26 17:45:18 ----D---- C:\Program Files\NetMeeting
2009-07-26 17:45:18 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-07-26 17:45:18 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-07-26 17:45:17 ----A---- C:\WINDOWS\system32\inetres.dll
2009-07-26 17:45:16 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-07-26 17:45:14 ----D---- C:\Program Files\Outlook Express
2009-07-26 17:45:14 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-07-26 17:45:14 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-07-26 17:45:14 ----A---- C:\WINDOWS\system32\mstask.dll
2009-07-26 17:45:14 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-07-26 17:45:13 ----A---- C:\WINDOWS\system32\isign32.dll
2009-07-26 17:45:13 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-07-26 17:45:13 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-07-26 17:45:06 ----D---- C:\Program Files\Fichiers communs\System
2009-07-26 17:45:05 ----D---- C:\Program Files\Internet Explorer
2009-07-26 17:44:50 ----D---- C:\Program Files\ComPlus Applications
2009-07-26 17:44:48 ----A---- C:\WINDOWS\vbaddin.ini
2009-07-26 17:44:48 ----A---- C:\WINDOWS\vb.ini
2009-07-26 17:44:13 ----D---- C:\Program Files\Windows Media Player
2009-07-26 17:44:13 ----D---- C:\Program Files\Online Services
2009-07-26 17:44:07 ----D---- C:\Program Files\Messenger
2009-07-26 17:44:02 ----D---- C:\Program Files\MSN Gaming Zone
2009-07-26 17:44:02 ----A---- C:\WINDOWS\system32\write.exe
2009-07-26 17:43:51 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-07-26 17:43:51 ----A---- C:\WINDOWS\system32\hticons.dll
2009-07-26 17:43:51 ----A---- C:\WINDOWS\system32\avwav.dll
2009-07-26 17:43:51 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-07-26 17:43:51 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-07-26 17:43:50 ----A---- C:\WINDOWS\system32\winchat.exe
2009-07-26 17:43:42 ----A---- C:\WINDOWS\system32\getuname.dll
2009-07-26 17:43:42 ----A---- C:\WINDOWS\system32\charmap.exe
2009-07-26 17:43:41 ----A---- C:\WINDOWS\system32\winmine.exe
2009-07-26 17:43:41 ----A---- C:\WINDOWS\system32\sol.exe
2009-07-26 17:43:41 ----A---- C:\WINDOWS\system32\calc.exe
2009-07-26 17:43:40 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-07-26 17:43:40 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-07-26 17:43:40 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-07-26 17:43:40 ----A---- C:\WINDOWS\system32\tskill.exe
2009-07-26 17:43:40 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-07-26 17:43:40 ----A---- C:\WINDOWS\system32\tscon.exe
2009-07-26 17:43:40 ----A---- C:\WINDOWS\system32\reset.exe
2009-07-26 17:43:40 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-07-26 17:43:40 ----A---- C:\WINDOWS\system32\freecell.exe
2009-07-26 17:43:39 ----A---- C:\WINDOWS\system32\shadow.exe
2009-07-26 17:43:39 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-07-26 17:43:39 ----A---- C:\WINDOWS\system32\regini.exe
2009-07-26 17:43:39 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-07-26 17:43:39 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-07-26 17:43:39 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-07-26 17:43:39 ----A---- C:\WINDOWS\system32\msg.exe
2009-07-26 17:43:39 ----A---- C:\WINDOWS\system32\logoff.exe
2009-07-26 17:43:38 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-07-26 17:43:38 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-07-26 17:43:38 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-07-26 17:43:37 ----A---- C:\WINDOWS\system32\stclient.dll
2009-07-26 17:43:37 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-07-26 17:43:37 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-07-26 17:43:37 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-07-26 17:43:37 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-07-26 17:43:37 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-07-26 17:43:37 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-07-26 17:43:32 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-07-26 17:43:21 ----D---- C:\Program Files\MSN
2009-07-26 17:43:20 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-07-26 17:43:20 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-07-26 17:43:20 ----A---- C:\WINDOWS\system32\hypertrm.dll
2009-07-26 17:43:20 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-07-26 17:43:19 ----D---- C:\Program Files\Windows NT
2009-07-26 17:43:19 ----A---- C:\WINDOWS\system32\spider.exe
2009-07-26 17:43:19 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-07-26 17:43:19 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-07-26 17:43:18 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-07-26 17:43:17 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2009-07-26 17:43:17 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-07-26 17:43:17 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-07-26 17:43:17 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-07-26 17:43:17 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-07-26 17:43:17 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-07-26 17:43:17 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-07-26 17:43:17 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-07-26 17:43:16 ----D---- C:\WINDOWS\system32\MsDtc
2009-07-26 17:43:16 ----A---- C:\WINDOWS\system32\termsrv.dll
2009-07-26 17:43:16 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-07-26 17:43:16 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-07-26 17:43:16 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-07-26 17:43:16 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-07-26 17:43:16 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-07-26 17:43:16 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-07-26 17:43:16 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-07-26 17:43:15 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-07-26 17:43:15 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-07-26 17:43:15 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-07-26 17:43:15 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-07-26 17:43:14 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-07-26 17:43:14 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-07-26 17:43:13 ----D---- C:\WINDOWS\system32\Com
2009-07-26 17:43:13 ----A---- C:\WINDOWS\system32\colbact.dll
2009-07-26 17:43:13 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-07-26 17:43:13 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-07-26 17:43:13 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-07-26 17:43:13 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-07-26 17:43:12 ----A---- C:\WINDOWS\system32\comuid.dll
2009-07-26 17:43:12 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-07-26 17:43:11 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-07-26 17:43:05 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-07-26 17:43:05 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-07-26 17:43:04 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-07-26 17:43:04 ----A---- C:\WINDOWS\system32\cmprops.dll
2009-07-26 16:19:33 ----D---- C:\WINDOWS\nview
2009-07-26 16:19:33 ----A---- C:\WINDOWS\system32\nvudisp.exe
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco1ins.dll
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco1.dll
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco_l2052.dll
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco_l1046.dll
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco_l1042.dll
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco_l1041.dll
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco_l1040.dll
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco_l1036.dll
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco_l1034.dll
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco_l1031.dll
2009-07-26 16:15:39 ----RA---- C:\WINDOWS\system32\fdco_l1028.dll
2009-07-26 16:15:37 ----RA---- C:\WINDOWS\system32\nvconrm.dll
2009-07-26 16:15:37 ----RA---- C:\WINDOWS\system32\bdco1ins.dll
2009-07-26 16:15:37 ----RA---- C:\WINDOWS\system32\bdco1.dll
2009-07-26 16:15:37 ----D---- C:\WINDOWS\NV264316.TMP
2009-07-26 16:15:37 ----A---- C:\WINDOWS\system32\nvunrm.exe
2009-07-26 16:15:33 ----RA---- C:\WINDOWS\system32\nvusmb.exe
2009-07-26 16:15:21 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-07-26 16:15:09 ----RA---- C:\WINDOWS\system32\NVUNINST.EXE
2009-07-26 16:14:59 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-07-26 15:45:30 ----D---- C:\Documents and Settings\myriam\Application Data\Identities
2009-07-26 15:45:29 ----HD---- C:\Program Files\Uninstall Information
2009-07-26 15:45:27 ----ASH---- C:\Documents and Settings\myriam\Application Data\desktop.ini
2009-07-26 15:45:26 ----SD---- C:\Documents and Settings\myriam\Application Data\Microsoft
======List of files/folders modified in the last 3 months======
2009-07-29 11:40:11 ----A---- C:\WINDOWS\win.ini
2009-07-29 11:40:11 ----A---- C:\WINDOWS\system.ini
2009-07-18 18:20:07 ----A---- C:\WINDOWS\system32\shdocvw.dll
2009-07-18 18:20:06 ----A---- C:\WINDOWS\system32\mshtml.dll
2009-06-26 18:18:51 ----A---- C:\WINDOWS\system32\wininet.dll
2009-06-26 18:18:50 ----A---- C:\WINDOWS\system32\urlmon.dll
2009-06-26 18:18:50 ----A---- C:\WINDOWS\system32\shlwapi.dll
2009-06-26 18:18:49 ----A---- C:\WINDOWS\system32\pngfilt.dll
2009-06-26 18:18:49 ----A---- C:\WINDOWS\system32\mstime.dll
2009-06-26 18:18:49 ----A---- C:\WINDOWS\system32\msrating.dll
2009-06-26 18:18:49 ----A---- C:\WINDOWS\system32\mshtmled.dll
2009-06-26 18:18:47 ----A---- C:\WINDOWS\system32\jsproxy.dll
2009-06-26 18:18:47 ----A---- C:\WINDOWS\system32\inseng.dll
2009-06-26 18:18:46 ----A---- C:\WINDOWS\system32\iepeers.dll
2009-06-26 18:18:46 ----A---- C:\WINDOWS\system32\ieencode.dll
2009-06-26 18:18:46 ----A---- C:\WINDOWS\system32\extmgr.dll
2009-06-26 18:18:46 ----A---- C:\WINDOWS\system32\dxtrans.dll
2009-06-26 18:18:46 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2009-06-26 18:18:46 ----A---- C:\WINDOWS\system32\danim.dll
2009-06-26 18:18:45 ----A---- C:\WINDOWS\system32\cdfview.dll
2009-06-26 18:18:45 ----A---- C:\WINDOWS\system32\browseui.dll
2009-06-23 05:53:22 ----A---- C:\WINDOWS\system32\xpsp3res.dll
2009-06-16 16:54:17 ----A---- C:\WINDOWS\system32\t2embed.dll
2009-06-16 16:54:17 ----A---- C:\WINDOWS\system32\fontsub.dll
2009-06-03 21:27:00 ----A---- C:\WINDOWS\system32\quartz.dll
2009-05-07 17:43:40 ----A---- C:\WINDOWS\system32\localspl.dll
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-02-17 24232]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2006-11-28 1161888]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2006-03-02 60800]
R3 CmBatt;Pilote d'adaptateur secteur Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2004-08-04 14080]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2007-02-16 34760]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-07-24 4353024]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2006-03-02 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-06-14 3660672]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-03-04 13056]
R3 nvsmu;nvsmu; C:\WINDOWS\system32\DRIVERS\nvsmu.sys [2006-03-06 11136]
R3 RT61;Ralink RT61 Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT61.sys [2006-08-02 384384]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2006-03-02 67584]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2006-03-02 26624]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2006-03-02 57600]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2006-03-02 17024]
S3 a3gxbsee;a3gxbsee; C:\WINDOWS\system32\drivers\a3gxbsee.sys []
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-03-04 34176]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\WINDOWS\system32\agrsmsvc.exe [2006-10-05 9216]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-06-14 143427]
R2 SNMP;Service SNMP; C:\WINDOWS\System32\snmp.exe [2006-11-21 33280]
S3 LPDSVC;Serveur d'impression TCP/IP; C:\WINDOWS\system32\tcpsvcs.exe [2006-03-02 19456]
S3 SNMPTRAP;Service d'interruption SNMP; C:\WINDOWS\System32\snmptrap.exe [2006-03-02 8704]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2006-03-02 14336]
S4 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
-----------------EOF-----------------
info.txt logfile of random's system information tool 1.06 2009-08-01 18:12:45
======Uninstall list======
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
3Planesoft Screensaver Manager 1.1-->"C:\Program Files\3Planesoft Screensaver Manager\unins000.exe"
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Agere Systems HDA Modem-->agrsmdel
AlienGUIse-->C:\PROGRA~1\ALIENG~1\thememgr.exe /uninstallwise
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Call of Atlantis-->"C:\WINDOWS\Call of Atlantis\uninstall.exe" "/U:C:\Program Files\Call of Atlantis\Uninstall\uninstall.xml"
CloneCD-->"C:\Program Files\SlySoft\CloneCD\ccd-uninst.exe" /D="C:\Program Files\SlySoft\CloneCD"
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB935448)-->"C:\WINDOWS\$NtUninstallKB935448$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB942288-v3)-->"C:\WINDOWS\$NtUninstallKB942288-v3$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
DAEMON Tools Toolbar-->C:\Program Files\DAEMON Tools Toolbar\uninst.exe
Deenero-->"C:\Program Files\Deenero\deenerosvr_1,0,1,5.exe" -ShowLightboxPage=uninstall
High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB926239)-->"C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe"
IconPackager-->"C:\Documents and Settings\All Users\Application Data\{B98A2B83-8BB0-42E7-AA1D-D6FA6E7C8F31}\IconPackager.exe" REMOVE=TRUE MODIFY=FALSE
IconPackager-->C:\Documents and Settings\All Users\Application Data\{B98A2B83-8BB0-42E7-AA1D-D6FA6E7C8F31}\IconPackager.exe
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Magic Ball 4-->"C:\WINDOWS\Magic Ball 4\uninstall.exe" "/U:C:\Program Files\Magic Ball 4\Uninstall\uninstall.xml"
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mise à jour de sécurité pour Windows XP (KB926247)-->"C:\WINDOWS\$NtUninstallKB926247$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB944338-v2)-->"C:\WINDOWS\$NtUninstallKB944338-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB972260)-->"C:\WINDOWS\$NtUninstallKB972260$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Moovida-->C:\Program Files\Moovida\uninstall-1.0.5.exe
Mozilla Firefox (3.5.1)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MP3 Player Utilities 4.09-->MsiExec.exe /I{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}
MP3 Player Utilities-->MsiExec.exe /I{5BBFB0E4-2250-49C3-A8A3-65BE2197D13B}
NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Theme Manager-->C:\PROGRA~1\ALIENG~1\thememgr.exe /uninstallwise
Unlocker 1.8.7-->C:\Program Files\Unlocker\uninst.exe
Valentine 3D Screensaver 1.0-->"C:\Program Files\Valentine 3D Screensaver\unins000.exe"
VLC media player 1.0.1-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Wallpaper-->C:\Program Files\Wallpaper\uninst.exe
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
======Hosts File======
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
======System event log======
Computer Name: MIMI-18C16AF15B
Event Code: 26
Message: Application popup : Windows - Fichier endommagé : Le fichier ou le répertoire C:\Documents and Settings\myriam\Local Settings\Historique\History.IE5\MSHist012009073120090801\index.dat est endommagé et illisible. Exécutez l'utilitaire CHKDSK.
Record Number: 2439
Source Name: Application Popup
Time Written: 20090731113924.000000+120
Event Type: Informations
User:
Computer Name: MIMI-18C16AF15B
Event Code: 26
Message: Application popup : Windows - Fichier endommagé : Le fichier ou le répertoire C:\Documents and Settings\myriam\Local Settings\Historique\History.IE5\MSHist012009073120090801\index.dat est endommagé et illisible. Exécutez l'utilitaire CHKDSK.
Record Number: 2438
Source Name: Application Popup
Time Written: 20090731113924.000000+120
Event Type: Informations
User:
Computer Name: MIMI-18C16AF15B
Event Code: 26
Message: Application popup : Windows - Fichier endommagé : Le fichier ou le répertoire C:\Documents and Settings\myriam\Local Settings\Historique\History.IE5\MSHist012009073120090801\index.dat est endommagé et illisible. Exécutez l'utilitaire CHKDSK.
Record Number: 2437
Source Name: Application Popup
Time Written: 20090731113923.000000+120
Event Type: Informations
User:
Computer Name: MIMI-18C16AF15B
Event Code: 26
Message: Application popup : Windows - Fichier endommagé : Le fichier ou le répertoire C:\Documents and Settings\myriam\Local Settings\Historique\History.IE5\MSHist012009073120090801\index.dat est endommagé et illisible. Exécutez l'utilitaire CHKDSK.
Record Number: 2436
Source Name: Application Popup
Time Written: 20090731113923.000000+120
Event Type: Informations
User:
Computer Name: MIMI-18C16AF15B <
A voir également:
- Je pense etre infecter
- Suis-je infecté par un trojan ? ✓ - Forum Virus
- Un virus venant d'une clée usb peut il infecter ma ps3 ? - Forum PS3
- Je suis infecté par un Trojan.Win32.KillAV.rf ✓ - Forum Virus
- N'acceptez pas n'importe quelle invitation Zoom ou Teams, des pirates s'en servent pour vous infecter - Guide
- Je suis infecté par Trojan:Win32/Skeeyah.A!rfn ✓ - Forum Virus
10 réponses
j'ai ete obligé de tout recommencer car mon pc a redemarrer comme d'habitude
ben j'ai fais les manip et voila le rapport hijackthis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:42:57, on 02/08/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Wallpaper\Wallpaper.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\myriam\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\trend micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Deenero - {66886C4D-B307-4ECA-A228-52CA9B9851A4} - C:\Program Files\Deenero\deenero_1,0,1,5.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Wallpaper] "C:\Program Files\Wallpaper\Wallpaper.exe" Starter
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\myriam\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
ben j'ai fais les manip et voila le rapport hijackthis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:42:57, on 02/08/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Wallpaper\Wallpaper.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\myriam\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\trend micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Deenero - {66886C4D-B307-4ECA-A228-52CA9B9851A4} - C:\Program Files\Deenero\deenero_1,0,1,5.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Wallpaper] "C:\Program Files\Wallpaper\Wallpaper.exe" Starter
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\myriam\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
-----------\\ ToolBar S&D 1.2.8 XP/Vista
( : )
USER : myriam ( Administrator )
comment j'ai pas acces au poste de travail j'ai fait une autre analyse
"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 02/08/2009|12:34 )
-----------\\ Recherche de Fichiers / Dossiers ...
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.msn.com/fr-fr"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Bar"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q="
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="https://www.msn.com/fr-fr/"
"Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm"
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\myriam\Application Data\BitTorrent\Stardock IconPackager v4.0+crack-Nope.torrent
1 - "C:\ToolBar SD\TB_1.txt" - 02/08/2009|11:36 - Option : [2]
2 - "C:\ToolBar SD\TB_2.txt" - 02/08/2009|12:35 - Option : [2]
-----------\\ Fin du rapport a 12:35:18,42
( : )
USER : myriam ( Administrator )
comment j'ai pas acces au poste de travail j'ai fait une autre analyse
"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 02/08/2009|12:34 )
-----------\\ Recherche de Fichiers / Dossiers ...
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.msn.com/fr-fr"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Bar"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q="
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="https://www.msn.com/fr-fr/"
"Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm"
--------------------\\ Recherche d'autres infections
--------------------\\ Cracks & Keygens ..
C:\DOCUME~1\myriam\Application Data\BitTorrent\Stardock IconPackager v4.0+crack-Nope.torrent
1 - "C:\ToolBar SD\TB_1.txt" - 02/08/2009|11:36 - Option : [2]
2 - "C:\ToolBar SD\TB_2.txt" - 02/08/2009|12:35 - Option : [2]
-----------\\ Fin du rapport a 12:35:18,42
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
[*] Télécharge combofix (sUBs) http://download.bleepingcomputer.com/sUBs/ComboFix.exe sur ton Bureau
[*] Double clique combofix.exe et suis les instructions.
[*] Installe la console de récupération si proposé et continue.
[*] Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.
NOTE : Le rapport se trouve également ici : C:\Combofix.txt
[*] Double clique combofix.exe et suis les instructions.
[*] Installe la console de récupération si proposé et continue.
[*] Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.
NOTE : Le rapport se trouve également ici : C:\Combofix.txt
* Télécharge Catchme http://www2.gmer.net/catchme.exe de Przemyslaw Gmerek sur ton Bureau.
* Double clique sur catchme.exe (le .exe n'est pas forcément visible) afin de le lancer.
* Lorsque la recherche sera terminée, poste le rapport catchme.log dans ta prochaine réponse. (Ce rapport est sur ton bureau.)
* Double clique sur catchme.exe (le .exe n'est pas forcément visible) afin de le lancer.
* Lorsque la recherche sera terminée, poste le rapport catchme.log dans ta prochaine réponse. (Ce rapport est sur ton bureau.)
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-02 17:30:34
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ovfsthciqxerxuscnqrlluqhesiymspdulksib]
"start"=dword:00000001
"type"=dword:00000001
"group"="file system"
"imagepath"=str(2):"\systemroot\system32\drivers\ovfsthfoceqdytlidwyjgnmtalkjormnrbatef.sys"
"inst"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ovfsthciqxerxuscnqrlluqhesiymspdulksib\main]
"ver"="icv310309"
"cid"="01"
"bid"="4233065711-746137067-1004336348-839522115"
"aid"="303642"
"sid"="209"
"feed"=hex:22,64,78,36,3c,2e,3b,29,39,3b,3b,3a,04,4f,01,0c,09,65
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ovfsthciqxerxuscnqrlluqhesiymspdulksib\modules]
"ovfsth.dll"="\systemroot\system32\ovfsthemkbyjxvitleqpdyavppqxtqfoobdthq.dll"
"ovfsth.sys"="\systemroot\system32\drivers\ovfsthfoceqdytlidwyjgnmtalkjormnrbatef.sys"
"ovfsthlog.dat"="\systemroot\system32\ovfsthdivpobprvfvlvpjfimrxyusynhipdpbj.dat"
"ovfsthwi.dll"="\systemroot\system32\ovfsthweedhnmnxusqqiloobmeorfqtvigjvqi.dll"
"ovfsthff.dll"="\systemroot\system32\ovfsthlhwxwwovcvkngxvhynvvtfsghljqfvdm.dll"
"ovfsth.dat"="\systemroot\system32\ovfsthbftiqqornmaviwexvexjwbeevntalkdr.dat"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ovfsthvpvfqyxeoqsnqdwsavblxtlwbxtfgriy]
"start"=dword:00000001
"type"=dword:00000001
"group"="file system"
"imagepath"=str(2):"\systemroot\system32\drivers\ovfsthqdifppmdtiqbftfvkbmgwcrfmatptiqp.sys"
"inst"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ovfsthvpvfqyxeoqsnqdwsavblxtlwbxtfgriy\main]
"ver"="icv310309"
"cid"="01"
"bid"="4233065711-746137067-1004336348-839522115"
"aid"="303642"
"sid"="209"
"feed"=hex:22,64,78,36,3c,2e,3b,29,39,3b,3b,3a,04,4f,01,0c,09,65
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ovfsthvpvfqyxeoqsnqdwsavblxtlwbxtfgriy\modules]
"ovfsth.dll"="\systemroot\system32\ovfsthmmhavsbsdujappyfffbyhhfmoieeptkr.dll"
"ovfsth.sys"="\systemroot\system32\drivers\ovfsthqdifppmdtiqbftfvkbmgwcrfmatptiqp.sys"
"ovfsthlog.dat"="\systemroot\system32\ovfsthdwbpjwwdvtfnertixingnpamyosqidaw.dat"
"ovfsthwi.dll"="\systemroot\system32\ovfsthihhxyawucbbnbmxdkvpptqhhppymefnb.dll"
"ovfsthff.dll"="\systemroot\system32\ovfsthtwgvdjcvhopqqxcndnogrduwnvmujkgm.dll"
"ovfsth.dat"="\systemroot\system32\ovfsthnrljsvxyexeionvxbxnbgkwrqngqslke.dat"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"hdf12"=hex:cf,51,ab,41,ab,38,5a,7a,7e,af,5e,b4,a4,cc,89,58,b4,59,03,3c,0e,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001]
"a0"=hex:20,01,00,00,7b,7e,a1,aa,76,53,07,a4,ff,30,e0,db,9d,2c,3b,13,ad,..
"hdf12"=hex:20,e4,97,8c,23,3c,7c,48,d5,b0,ef,cf,a6,92,2e,ce,98,58,1f,19,3e,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0]
"hdf12"=hex:56,73,3f,20,4a,74,f7,5b,fc,61,f4,f1,e7,b8,b1,b1,ef,27,9c,13,92,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"hdf12"=hex:cf,51,ab,41,ab,38,5a,7a,7e,af,5e,b4,a4,cc,89,58,b4,59,03,3c,0e,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001]
"a0"=hex:20,01,00,00,7b,7e,a1,aa,76,53,07,a4,ff,30,e0,db,9d,2c,3b,13,ad,..
"hdf12"=hex:20,e4,97,8c,23,3c,7c,48,d5,b0,ef,cf,a6,92,2e,ce,98,58,1f,19,3e,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0]
"hdf12"=hex:56,73,3f,20,4a,74,f7,5b,fc,61,f4,f1,e7,b8,b1,b1,ef,27,9c,13,92,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"hdf12"=hex:cf,51,ab,41,ab,38,5a,7a,7e,af,5e,b4,a4,cc,89,58,b4,59,03,3c,0e,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001]
"a0"=hex:20,01,00,00,7b,7e,a1,aa,76,53,07,a4,ff,30,e0,db,9d,2c,3b,13,ad,..
"hdf12"=hex:20,e4,97,8c,23,3c,7c,48,d5,b0,ef,cf,a6,92,2e,ce,98,58,1f,19,3e,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0]
"hdf12"=hex:56,73,3f,20,4a,74,f7,5b,fc,61,f4,f1,e7,b8,b1,b1,ef,27,9c,13,92,..
voici le rapport:
scanning hidden registry entries ...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"DeviceNotSelectedTimeout"="15"
"GDIProcessHandleQuota"=dword:00002710
"Spooler"="yes"
"swapdisk"=""
"TransmissionRetryTimeout"="90"
"USERProcessHandleQuota"=dword:00002710
"AppInit_DLLs"="C:\WINDOWS\system32\wbsys.dll"
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0
Rootkit scan 2009-08-02 17:30:34
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ovfsthciqxerxuscnqrlluqhesiymspdulksib]
"start"=dword:00000001
"type"=dword:00000001
"group"="file system"
"imagepath"=str(2):"\systemroot\system32\drivers\ovfsthfoceqdytlidwyjgnmtalkjormnrbatef.sys"
"inst"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ovfsthciqxerxuscnqrlluqhesiymspdulksib\main]
"ver"="icv310309"
"cid"="01"
"bid"="4233065711-746137067-1004336348-839522115"
"aid"="303642"
"sid"="209"
"feed"=hex:22,64,78,36,3c,2e,3b,29,39,3b,3b,3a,04,4f,01,0c,09,65
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ovfsthciqxerxuscnqrlluqhesiymspdulksib\modules]
"ovfsth.dll"="\systemroot\system32\ovfsthemkbyjxvitleqpdyavppqxtqfoobdthq.dll"
"ovfsth.sys"="\systemroot\system32\drivers\ovfsthfoceqdytlidwyjgnmtalkjormnrbatef.sys"
"ovfsthlog.dat"="\systemroot\system32\ovfsthdivpobprvfvlvpjfimrxyusynhipdpbj.dat"
"ovfsthwi.dll"="\systemroot\system32\ovfsthweedhnmnxusqqiloobmeorfqtvigjvqi.dll"
"ovfsthff.dll"="\systemroot\system32\ovfsthlhwxwwovcvkngxvhynvvtfsghljqfvdm.dll"
"ovfsth.dat"="\systemroot\system32\ovfsthbftiqqornmaviwexvexjwbeevntalkdr.dat"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ovfsthvpvfqyxeoqsnqdwsavblxtlwbxtfgriy]
"start"=dword:00000001
"type"=dword:00000001
"group"="file system"
"imagepath"=str(2):"\systemroot\system32\drivers\ovfsthqdifppmdtiqbftfvkbmgwcrfmatptiqp.sys"
"inst"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ovfsthvpvfqyxeoqsnqdwsavblxtlwbxtfgriy\main]
"ver"="icv310309"
"cid"="01"
"bid"="4233065711-746137067-1004336348-839522115"
"aid"="303642"
"sid"="209"
"feed"=hex:22,64,78,36,3c,2e,3b,29,39,3b,3b,3a,04,4f,01,0c,09,65
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ovfsthvpvfqyxeoqsnqdwsavblxtlwbxtfgriy\modules]
"ovfsth.dll"="\systemroot\system32\ovfsthmmhavsbsdujappyfffbyhhfmoieeptkr.dll"
"ovfsth.sys"="\systemroot\system32\drivers\ovfsthqdifppmdtiqbftfvkbmgwcrfmatptiqp.sys"
"ovfsthlog.dat"="\systemroot\system32\ovfsthdwbpjwwdvtfnertixingnpamyosqidaw.dat"
"ovfsthwi.dll"="\systemroot\system32\ovfsthihhxyawucbbnbmxdkvpptqhhppymefnb.dll"
"ovfsthff.dll"="\systemroot\system32\ovfsthtwgvdjcvhopqqxcndnogrduwnvmujkgm.dll"
"ovfsth.dat"="\systemroot\system32\ovfsthnrljsvxyexeionvxbxnbgkwrqngqslke.dat"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"hdf12"=hex:cf,51,ab,41,ab,38,5a,7a,7e,af,5e,b4,a4,cc,89,58,b4,59,03,3c,0e,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001]
"a0"=hex:20,01,00,00,7b,7e,a1,aa,76,53,07,a4,ff,30,e0,db,9d,2c,3b,13,ad,..
"hdf12"=hex:20,e4,97,8c,23,3c,7c,48,d5,b0,ef,cf,a6,92,2e,ce,98,58,1f,19,3e,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0]
"hdf12"=hex:56,73,3f,20,4a,74,f7,5b,fc,61,f4,f1,e7,b8,b1,b1,ef,27,9c,13,92,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"hdf12"=hex:cf,51,ab,41,ab,38,5a,7a,7e,af,5e,b4,a4,cc,89,58,b4,59,03,3c,0e,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001]
"a0"=hex:20,01,00,00,7b,7e,a1,aa,76,53,07,a4,ff,30,e0,db,9d,2c,3b,13,ad,..
"hdf12"=hex:20,e4,97,8c,23,3c,7c,48,d5,b0,ef,cf,a6,92,2e,ce,98,58,1f,19,3e,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0]
"hdf12"=hex:56,73,3f,20,4a,74,f7,5b,fc,61,f4,f1,e7,b8,b1,b1,ef,27,9c,13,92,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"hdf12"=hex:cf,51,ab,41,ab,38,5a,7a,7e,af,5e,b4,a4,cc,89,58,b4,59,03,3c,0e,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001]
"a0"=hex:20,01,00,00,7b,7e,a1,aa,76,53,07,a4,ff,30,e0,db,9d,2c,3b,13,ad,..
"hdf12"=hex:20,e4,97,8c,23,3c,7c,48,d5,b0,ef,cf,a6,92,2e,ce,98,58,1f,19,3e,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0]
"hdf12"=hex:56,73,3f,20,4a,74,f7,5b,fc,61,f4,f1,e7,b8,b1,b1,ef,27,9c,13,92,..
voici le rapport:
scanning hidden registry entries ...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"DeviceNotSelectedTimeout"="15"
"GDIProcessHandleQuota"=dword:00002710
"Spooler"="yes"
"swapdisk"=""
"TransmissionRetryTimeout"="90"
"USERProcessHandleQuota"=dword:00002710
"AppInit_DLLs"="C:\WINDOWS\system32\wbsys.dll"
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0
ok
démarre en mode sans echec avec prise en charge reseau
[*] Télécharge combofix (sUBs) http://download.bleepingcomputer.com/sUBs/ComboFix.exe sur ton Bureau
[*] Double clique combofix.exe et suis les instructions.
[*] Installe la console de récupération si proposé et continue.
[*] Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.
NOTE : Le rapport se trouve également ici : C:\Combofix.txt
démarre en mode sans echec avec prise en charge reseau
[*] Télécharge combofix (sUBs) http://download.bleepingcomputer.com/sUBs/ComboFix.exe sur ton Bureau
[*] Double clique combofix.exe et suis les instructions.
[*] Installe la console de récupération si proposé et continue.
[*] Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.
NOTE : Le rapport se trouve également ici : C:\Combofix.txt
Rapport GenProc 2.610 [1] - 01/08/2009 à 18:36:22
@ Windows XP Service Pack 2 - Mode normal
@ Mozilla Firefox (3.5.1) [Navigateur par défaut]
~~ ECHEC DU TELECHARGEMENT DE MBR.EXE ~~
Il est impératif de désactiver le résident TeaTimer de Spybot pendant l'ensemble des manipulations qui vont suivre. Aide Tea-Timer : http://ww11.genproc.com/spybot/spybot.html
Dans CCleaner, clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures" ; par la suite, laisse-le avec ses réglages par défaut. C'est tout.
# Etape 1/ Télécharge :
- Toolbar-S&D https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2 (Team IDN) sur ton Bureau.
# Etape 2/
Lance Toolbar-S&D situé sur le Bureau. Tape sur "2" puis valide en appuyant sur "Entrée". Ne ferme pas la fenêtre lors de la suppression.
# Etape 3/
Lance CCleaner : "Nettoyeur"/"lancer le nettoyage" et c'est tout.
# Etape 4/
Redémarre normalement et poste, dans la même réponse :
- Le contenu du rapport TB.txt situé dans C:\ ;
- Un nouveau rapport HijackThis http://forum.telecharger.01net.com/forum/high-tech/PRODUITS/Questions-techniques/hijackthis-version-install-sujet_199100_1.htm ;
- Un nouveau rapport GenProc ;
Précise les difficultés que tu as eu (ce que tu n'as pas pu faire...) ainsi que l'évolution de la situation.
~~ Arguments de la procédure ~~
# Détections [1] GenProc 2.610 01/08/2009 à 18:37:49
Toolbar:le 01/08/2009 à 18:38:15 "C:\Program Files\AskBarDis"
----------------------------------------------------------------------
Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
----------------------------------------------------------------------
~~ Fin à 18:38:28 ~~