De l'aide pour supprimer le virus rootkit
amine04
-
Narco!4 Messages postés 2446 Statut Contributeur -
Narco!4 Messages postés 2446 Statut Contributeur -
Bonjour,
ogfile of random's system information tool 1.06 (written by random/random)
Run by Ameni at 2009-08-02 13:06:15
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 65 GB (85%) free of 76 GB
Total RAM: 758 MB (50% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:06:29, on 02/08/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\Ameni\Bureau\RSIT.exe
C:\Program Files\trend micro\Ameni.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [cdoosoft] C:\DOCUME~1\Ameni\LOCALS~1\Temp\herss.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
--
End of file - 5871 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\User_Feed_Synchronization-{B09DB566-E43B-49F9-A7FD-79E8C222A648}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-08-01 41368]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-08-01 73728]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-06-29 14720000]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"AzMixerSel"=C:\Program Files\Realtek\InstallShield\AzMixerSel.exe [2005-04-29 45056]
"Mouse Suite 98 Daemon"=ICO.EXE []
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2005-06-29 94208]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2005-06-29 77824]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2005-06-29 114688]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-08-01 148888]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-08-01 98304]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-08-01 185896]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
"cdoosoft"=C:\DOCUME~1\Ameni\LOCALS~1\Temp\herss.exe [2009-08-01 106995]
C:\Documents and Settings\Ameni\Menu Démarrer\Programmes\Démarrage
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2005-06-29 131072]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{42b0abf0-7e89-11de-a1c4-806d6172696f}]
shell\AutoRun\command - C:\mqhnawe.bat
shell\open\command - C:\mqhnawe.bat
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fd23cb57-7ebd-11de-9fb5-0014a44fde76}]
shell\AutoRun\command - G:\rx.exe
shell\open\command - G:\rx.exe
======List of files/folders created in the last 1 months======
2009-08-02 13:06:16 ----D---- C:\Program Files\trend micro
2009-08-02 13:06:15 ----D---- C:\rsit
2009-08-02 12:54:03 ----RSH---- C:\mqhnawe.bat
2009-08-02 12:19:43 ----D---- C:\Program Files\epson
2009-08-02 12:19:40 ----A---- C:\WINDOWS\system32\escwiad.dll
2009-08-02 11:35:17 ----A---- C:\WINDOWS\system32\E_DCINST.DLL
2009-08-02 11:35:16 ----A---- C:\WINDOWS\system32\E_FLBBIE.DLL
2009-08-02 11:35:16 ----A---- C:\WINDOWS\system32\E_FD4BBIE.DLL
2009-08-02 11:33:52 ----D---- C:\Documents and Settings\All Users\Application Data\EPSON
2009-08-02 09:16:19 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2009-08-02 09:16:19 ----A---- C:\WINDOWS\system32\mucltui.dll
2009-08-01 19:30:10 ----RSH---- C:\rx.exe
2009-08-01 16:19:28 ----D---- C:\Documents and Settings\Ameni\Application Data\OpenOffice.org
2009-08-01 16:18:20 ----A---- C:\WINDOWS\system32\MFC71.dll
2009-08-01 16:18:20 ----A---- C:\WINDOWS\system32\aswBoot.exe
2009-08-01 16:18:15 ----D---- C:\Program Files\Alwil Software
2009-08-01 16:16:39 ----D---- C:\Program Files\Fichiers communs\xing shared
2009-08-01 16:16:31 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2009-08-01 16:16:22 ----A---- C:\WINDOWS\system32\pndx5032.dll
2009-08-01 16:16:22 ----A---- C:\WINDOWS\system32\pndx5016.dll
2009-08-01 16:16:20 ----A---- C:\WINDOWS\system32\pncrt.dll
2009-08-01 16:16:18 ----D---- C:\Program Files\Fichiers communs\Real
2009-08-01 16:16:17 ----D---- C:\Program Files\Real
2009-08-01 16:15:55 ----D---- C:\Program Files\WinRAR
2009-08-01 16:15:51 ----D---- C:\Documents and Settings\Ameni\Application Data\Real
2009-08-01 16:14:48 ----A---- C:\WINDOWS\unvise32qt.exe
2009-08-01 16:14:30 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer
2009-08-01 16:14:15 ----D---- C:\WINDOWS\system32\QuickTime
2009-08-01 16:14:13 ----D---- C:\Program Files\QuickTime
2009-08-01 16:14:08 ----D---- C:\Program Files\Apple Software Update
2009-08-01 16:14:08 ----D---- C:\Documents and Settings\All Users\Application Data\Apple
2009-08-01 16:13:56 ----D---- C:\Documents and Settings\All Users\Application Data\QuickTime
2009-08-01 16:13:28 ----A---- C:\WINDOWS\system32\pdfcmnnt.dll
2009-08-01 16:13:26 ----D---- C:\Program Files\PDFCreator
2009-08-01 16:13:26 ----A---- C:\WINDOWS\system32\VB6FR.DLL
2009-08-01 16:13:26 ----A---- C:\WINDOWS\system32\MSMPIDE.DLL
2009-08-01 16:13:26 ----A---- C:\WINDOWS\system32\MSCMCFR.DLL
2009-08-01 16:13:26 ----A---- C:\WINDOWS\system32\MSCC2FR.DLL
2009-08-01 16:12:57 ----D---- C:\Program Files\Microsoft Office
2009-08-01 16:11:47 ----D---- C:\Documents and Settings\Ameni\Application Data\Canneverbe_Limited
2009-08-01 16:11:30 ----D---- C:\Program Files\Gimp Pack Mode
2009-08-01 16:11:16 ----D---- C:\Program Files\CDBurnerXP
2009-08-01 16:09:17 ----D---- C:\Program Files\Fichiers communs\AVSMedia
2009-08-01 16:09:17 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2009-08-01 16:09:17 ----A---- C:\WINDOWS\system32\xvidcore.dll
2009-08-01 16:09:17 ----A---- C:\WINDOWS\system32\mpg4c32.dll
2009-08-01 16:09:17 ----A---- C:\WINDOWS\system32\mcdvd_32.dll
2009-08-01 16:09:17 ----A---- C:\WINDOWS\system32\divx.dll
2009-08-01 16:09:16 ----D---- C:\Program Files\AVSMedia
2009-08-01 16:09:16 ----A---- C:\WINDOWS\system32\msxml3a.dll
2009-08-01 16:09:16 ----A---- C:\WINDOWS\system32\msvcr70.dll
2009-08-01 16:09:16 ----A---- C:\WINDOWS\system32\msvcp70.dll
2009-08-01 16:09:16 ----A---- C:\WINDOWS\system32\mfc70.dll
2009-08-01 16:09:16 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2009-08-01 16:05:56 ----D---- C:\Program Files\OpenOffice.org 3
2009-08-01 16:04:42 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-08-01 16:04:23 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-08-01 16:04:23 ----D---- C:\Program Files\Adobe
2009-08-01 16:02:45 ----D---- C:\Documents and Settings\Ameni\Application Data\Macromedia
2009-08-01 16:02:20 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2009-08-01 16:02:20 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2009-08-01 16:02:19 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2009-08-01 16:02:19 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2009-08-01 16:02:19 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2009-08-01 16:02:18 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2009-08-01 16:02:17 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2009-08-01 16:02:17 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2009-08-01 16:02:17 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2009-08-01 16:02:16 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2009-08-01 16:02:16 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2009-08-01 16:02:16 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2009-08-01 16:02:15 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2009-08-01 16:02:15 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2009-08-01 16:02:14 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2009-08-01 16:02:14 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2009-08-01 16:02:13 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2009-08-01 16:02:13 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2009-08-01 16:02:13 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2009-08-01 16:02:12 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2009-08-01 16:02:11 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2009-08-01 16:02:11 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2009-08-01 16:02:11 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2009-08-01 16:02:10 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2009-08-01 16:02:09 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2009-08-01 16:02:09 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2009-08-01 16:02:07 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2009-08-01 16:02:04 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2009-08-01 16:02:02 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2009-08-01 16:01:59 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2009-08-01 16:01:55 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2009-08-01 16:01:55 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2009-08-01 16:01:53 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2009-08-01 16:01:52 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2009-08-01 16:01:49 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2009-08-01 16:01:49 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2009-08-01 16:01:49 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2009-08-01 16:01:48 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2009-08-01 16:01:47 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2009-08-01 16:01:47 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2009-08-01 16:01:45 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2009-08-01 16:01:40 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2009-08-01 16:01:40 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2009-08-01 16:01:38 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2009-08-01 16:01:38 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2009-08-01 16:01:33 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2009-08-01 16:01:29 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2009-08-01 16:01:26 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2009-08-01 16:01:22 ----D---- C:\Program Files\NOS
2009-08-01 16:01:22 ----D---- C:\Documents and Settings\All Users\Application Data\NOS
2009-08-01 16:01:22 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2009-08-01 16:01:22 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2009-08-01 16:01:20 ----A---- C:\WINDOWS\system32\javaws.exe
2009-08-01 16:01:20 ----A---- C:\WINDOWS\system32\javaw.exe
2009-08-01 16:01:20 ----A---- C:\WINDOWS\system32\java.exe
2009-08-01 16:01:20 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-08-01 16:01:11 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2009-08-01 16:01:08 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2009-08-01 16:01:05 ----D---- C:\Documents and Settings\Ameni\Application Data\Adobe
2009-08-01 16:01:02 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2009-08-01 16:01:01 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2009-08-01 16:01:00 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2009-08-01 16:01:00 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2009-08-01 16:00:59 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2009-08-01 16:00:58 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2009-08-01 16:00:57 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2009-08-01 16:00:56 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2009-08-01 16:00:54 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2009-08-01 16:00:50 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2009-08-01 16:00:39 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2009-08-01 16:00:36 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2009-08-01 16:00:36 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2009-08-01 16:00:36 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2009-08-01 16:00:36 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2009-08-01 16:00:35 ----D---- C:\Program Files\Java
2009-08-01 16:00:35 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2009-08-01 16:00:34 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2009-08-01 16:00:33 ----D---- C:\WINDOWS\system32\Adobe
2009-08-01 16:00:33 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2009-08-01 16:00:32 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2009-08-01 16:00:28 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2009-08-01 15:59:33 ----D---- C:\Documents and Settings\Ameni\Application Data\Sun
2009-08-01 15:58:10 ----HD---- C:\WINDOWS\msdownld.tmp
2009-08-01 15:56:30 ----D---- C:\WINDOWS\Logs
2009-08-01 15:30:30 ----N---- C:\WINDOWS\system32\spmsg2.dll
2009-08-01 15:30:28 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2009-08-01 15:16:26 ----HDC---- C:\WINDOWS\$NtUninstallKB963093$
2009-08-01 15:14:51 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2009-08-01 15:14:45 ----HDC---- C:\WINDOWS\$NtUninstallKB959772_WM11$
2009-08-01 15:14:28 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2009-08-01 15:14:16 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-08-01 15:14:13 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2009-08-01 15:13:57 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP11$
2009-08-01 15:13:46 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2009-08-01 15:13:33 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2009-08-01 14:57:18 ----D---- C:\Program Files\Microsoft Silverlight
2009-08-01 14:51:59 ----D---- C:\WINDOWS\system32\XPSViewer
2009-08-01 14:51:54 ----D---- C:\Program Files\MSBuild
2009-08-01 14:51:52 ----D---- C:\WINDOWS\system32\en-US
2009-08-01 14:51:46 ----D---- C:\Program Files\Reference Assemblies
2009-08-01 14:51:18 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2009-08-01 14:51:18 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2009-08-01 14:51:18 ----N---- C:\WINDOWS\system32\prntvpt.dll
2009-08-01 14:47:55 ----HDC---- C:\WINDOWS\$NtUninstallbasecsp$
2009-08-01 14:47:32 ----SHD---- C:\RECYCLER
2009-08-01 14:47:20 ----D---- C:\Program Files\Microsoft
2009-08-01 14:47:02 ----D---- C:\Program Files\Windows Live SkyDrive
2009-08-01 14:46:37 ----D---- C:\Program Files\Windows Live
2009-08-01 14:41:01 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-08-01 14:40:28 ----D---- C:\Documents and Settings\Ameni\Application Data\Windows Desktop Search
2009-08-01 14:40:02 ----D---- C:\Program Files\Windows Desktop Search
2009-08-01 14:40:01 ----D---- C:\WINDOWS\system32\GroupPolicy
2009-08-01 14:39:50 ----HDC---- C:\WINDOWS\$NtUninstallKB940157$
2009-08-01 14:39:46 ----HDC---- C:\WINDOWS\$NtUninstallKB915800-v4$
2009-08-01 14:39:20 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-08-01 14:39:19 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2009-08-01 14:39:06 ----D---- C:\Program Files\Windows Media Connect 2
2009-08-01 14:38:52 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2009-08-01 14:38:17 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2009-08-01 14:37:58 ----D---- C:\WINDOWS\system32\LogFiles
2009-08-01 14:37:53 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2009-08-01 14:36:27 ----RSD---- C:\WINDOWS\assembly
2009-08-01 14:36:27 ----D---- C:\WINDOWS\Microsoft.NET
2009-08-01 14:36:26 ----D---- C:\WINDOWS\system32\URTTemp
2009-08-01 14:31:29 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2009-08-01 14:26:16 ----A---- C:\WINDOWS\system32\wpa.bak
2009-08-01 14:22:00 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-08-01 14:21:55 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-08-01 14:21:51 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-08-01 14:21:46 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-08-01 14:21:42 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-08-01 14:21:38 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2009-08-01 14:21:31 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2009-08-01 14:21:20 ----HDC---- C:\WINDOWS\$NtUninstallKB972260$
2009-08-01 14:21:14 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-08-01 14:21:11 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-08-01 14:21:06 ----HDC---- C:\WINDOWS\$NtUninstallKB973346$
2009-08-01 14:20:54 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-08-01 14:20:48 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-08-01 14:20:44 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2009-08-01 14:20:40 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-08-01 14:20:33 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-08-01 14:20:28 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-08-01 14:20:23 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-08-01 14:20:17 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-08-01 14:20:12 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-08-01 14:20:04 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-08-01 14:19:57 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-08-01 14:19:15 ----D---- C:\WINDOWS\ie8updates
2009-08-01 14:19:02 ----D---- C:\WINDOWS\WBEM
2009-08-01 14:17:32 ----HDC---- C:\WINDOWS\ie8
2009-08-01 14:15:31 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2009-08-01 14:15:26 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-08-01 14:15:20 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-08-01 14:15:15 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-08-01 14:15:10 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-08-01 14:14:21 ----A---- C:\WINDOWS\system32\igfxres.dll
2009-08-01 14:14:16 ----A---- C:\WINDOWS\system32\MRT.exe
2009-08-01 14:14:07 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-08-01 14:13:56 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-08-01 14:13:42 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-08-01 14:13:32 ----HDC---- C:\WINDOWS\$NtUninstallKB961371$
2009-08-01 14:13:26 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-08-01 14:13:20 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-08-01 14:13:10 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-08-01 14:08:16 ----HDC---- C:\WINDOWS\$NtUninstallKB835221WXP$
2009-08-01 14:07:38 ----A---- C:\WINDOWS\system32\WLANDLL.DLL
2009-08-01 14:07:37 ----A---- C:\WINDOWS\system32\AW32N50.DLL
2009-08-01 14:07:36 ----D---- C:\Program Files\LanExpress
2009-08-01 14:07:00 ----A---- C:\WINDOWS\system32\nvudisp.exe
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PMVAIO.DLL
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PMUNINST.EXE
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PMUNINNT.EXE
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PELZOOM.DLL
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PELWHEEL.DLL
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PELUTIL.DLL
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PELSETUP.DLL
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PELSCRLL.DLL
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PELPPM.DLL
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PELMICED.EXE
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PELHOOKS.DLL
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PELCOMM.DLL
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PELBDO.DLL
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\ICONSPY.EXE
2009-08-01 14:05:47 ----D---- C:\Program Files\CONEXANT
2009-08-01 14:03:53 ----D---- C:\WINDOWS\system32\PreInstall
2009-08-01 14:03:52 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-08-01 14:03:51 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-08-01 14:03:51 ----HD---- C:\WINDOWS\$hf_mig$
2009-08-01 13:14:59 ----A---- C:\WINDOWS\system32\h323log.txt
2009-08-01 13:11:42 ----A---- C:\WINDOWS\system32\usbui.dll
2009-08-01 13:10:31 ----A---- C:\WINDOWS\imsins.BAK
2009-08-01 13:10:28 ----SHD---- C:\WINDOWS\Installer
2009-08-01 13:10:28 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-08-01 13:10:27 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-08-01 13:10:27 ----A---- C:\WINDOWS\ODBCINST.INI
2009-08-01 13:10:22 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2009-08-01 13:10:21 ----RD---- C:\Program Files
2009-08-01 13:10:21 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-08-01 13:10:21 ----D---- C:\Program Files\Fichiers communs
2009-08-01 13:10:17 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-08-01 13:10:17 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-08-01 13:10:17 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-08-01 13:10:15 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-08-01 13:10:15 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-08-01 13:10:15 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-08-01 13:10:14 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-08-01 13:10:14 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-08-01 13:10:14 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-08-01 13:10:14 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-08-01 13:10:14 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-08-01 13:10:14 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-08-01 13:10:14 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-08-01 13:10:14 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-08-01 13:10:14 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-08-01 13:10:12 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-08-01 13:10:12 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-08-01 13:10:12 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-08-01 13:10:12 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-08-01 13:10:12 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-08-01 13:10:12 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-08-01 13:10:11 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-08-01 13:10:10 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-08-01 13:10:10 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-08-01 13:10:10 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-08-01 13:10:10 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-08-01 13:10:10 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdro.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2009-08-01 13:10:05 ----A---- C:\WINDOWS\system32\irclass.dll
2009-08-01 13:10:05 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-08-01 13:10:05 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-08-01 13:10:04 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-08-01 13:10:04 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-08-01 13:10:01 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-08-01 13:10:01 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-08-01 13:10:01 ----A---- C:\WINDOWS\system32\batt.dll
2009-08-01 13:10:00 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-08-01 13:09:57 ----A---- C:\WINDOWS\system32\storprop.dll
2009-08-01 13:09:47 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2009-08-01 13:09:43 ----RA---- C:\WINDOWS\SET8.tmp
2009-08-01 13:09:40 ----RA---- C:\WINDOWS\SET4.tmp
2009-08-01 13:09:38 ----RA---- C:\WINDOWS\SET3.tmp
2009-08-01 13:09:29 ----D---- C:\WINDOWS\system32\CatRoot2
2009-08-01 13:09:29 ----D---- C:\WINDOWS\system32\CatRoot
2009-08-01 13:09:23 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-08-01 13:08:50 ----A---- C:\WINDOWS\setuplog.txt
2009-08-01 13:08:46 ----D---- C:\Documents and Settings
2009-08-01 13:08:12 ----ASH---- C:\boot.ini
2009-08-01 13:08:10 ----SHD---- C:\System Volume Information
2009-08-01 12:59:33 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-08-01 12:59:33 ----RD---- C:\WINDOWS\Web
2009-08-01 12:59:33 ----D---- C:\WINDOWS\WinSxS
2009-08-01 12:59:33 ----D---- C:\WINDOWS\twain_32
2009-08-01 12:59:33 ----D---- C:\WINDOWS\Temp
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\wbem
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\usmt
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\ShellExt
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\Setup
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\oobe
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\npp
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\mui
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\inetsrv
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\IME
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\icsxml
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\ias
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\fr-fr
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\fr
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\export
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\3com_dmi
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\3076
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\2052
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\1054
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\1042
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\1041
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\1037
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\1036
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\1033
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\1031
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\1028
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\1025
2009-08-01 12:59:33 ----D---- C:\WINDOWS\security
2009-08-01 12:59:33 ----D---- C:\WINDOWS\Resources
2009-08-01 12:59:33 ----D---- C:\WINDOWS\Provisioning
2009-08-01 12:59:33 ----D---- C:\WINDOWS\PeerNet
2009-08-01 12:59:33 ----D---- C:\WINDOWS\pchealth
2009-08-01 12:59:33 ----D---- C:\WINDOWS\Network Diagnostic
2009-08-01 12:59:33 ----D---- C:\WINDOWS\mui
2009-08-01 12:59:33 ----D---- C:\WINDOWS\msapps
2009-08-01 12:59:33 ----D---- C:\WINDOWS\msagent
2009-08-01 12:59:33 ----D---- C:\WINDOWS\Media
2009-08-01 12:59:33 ----D---- C:\WINDOWS\L2Schemas
2009-08-01 12:59:33 ----D---- C:\WINDOWS\java
2009-08-01 12:59:33 ----D---- C:\WINDOWS\ime
2009-08-01 12:59:33 ----D---- C:\WINDOWS\Driver Cache
2009-08-01 12:59:33 ----D---- C:\WINDOWS\Debug
2009-08-01 12:59:33 ----D---- C:\WINDOWS\Cursors
2009-08-01 12:59:33 ----D---- C:\WINDOWS\Connection Wizard
2009-08-01 12:59:33 ----D---- C:\WINDOWS\Config
2009-08-01 12:59:33 ----D---- C:\WINDOWS\AppPatch
2009-08-01 12:59:33 ----D---- C:\WINDOWS\addins
2009-08-01 12:59:32 ----RSD---- C:\WINDOWS\Fonts
2009-08-01 12:59:32 ----HD---- C:\WINDOWS\inf
2009-08-01 12:59:32 ----D---- C:\WINDOWS\system32\wins
2009-08-01 12:59:32 ----D---- C:\WINDOWS\system32\spool
2009-08-01 12:59:32 ----D---- C:\WINDOWS\system32\ras
2009-08-01 12:59:32 ----D---- C:\WINDOWS\system32\drivers
2009-08-01 12:59:32 ----D---- C:\WINDOWS\system32\dhcp
2009-08-01 12:59:32 ----D---- C:\WINDOWS\system32\config
2009-08-01 12:59:32 ----D---- C:\WINDOWS\system32
2009-08-01 12:59:32 ----D---- C:\WINDOWS\system
2009-08-01 12:59:32 ----D---- C:\WINDOWS\repair
2009-08-01 12:59:32 ----D---- C:\WINDOWS\Help
2009-08-01 12:59:32 ----D---- C:\WINDOWS
2009-08-01 12:14:34 ----D---- C:\WINDOWS\system32\Lang
2009-08-01 12:12:39 ----D---- C:\Program Files\Intel
2009-08-01 12:11:54 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-08-01 12:11:39 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-08-01 12:11:08 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-08-01 12:11:03 ----A---- C:\WINDOWS\ALCWZRD.EXE
2009-08-01 12:11:03 ----A---- C:\WINDOWS\ALCMTR.EXE
2009-08-01 12:10:59 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2009-08-01 12:10:59 ----A---- C:\WINDOWS\RTHDCPL.EXE
2009-08-01 12:10:59 ----A---- C:\WINDOWS\MicCal.exe
2009-08-01 12:10:58 ----D---- C:\WINDOWS\system32\RTCOM
2009-08-01 12:10:58 ----A---- C:\WINDOWS\system32\ChCfg.exe
2009-08-01 12:10:58 ----A---- C:\WINDOWS\RTLCPL.EXE
2009-08-01 12:10:55 ----HD---- C:\Program Files\InstallShield Installation Information
2009-08-01 12:10:55 ----D---- C:\Program Files\Realtek
2009-08-01 12:10:39 ----A---- C:\WINDOWS\RtlExUpd.dll
2009-08-01 12:10:36 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-08-01 12:08:00 ----A---- C:\WINDOWS\system32\mdmxsdk.dll
2009-08-01 12:08:00 ----A---- C:\WINDOWS\system32\hsfci015.dll
2009-08-01 12:07:57 ----A---- C:\WINDOWS\system32\Prounstl.exe
2009-08-01 12:07:57 ----A---- C:\WINDOWS\system32\IntelNic.dll
2009-08-01 12:07:57 ----A---- C:\WINDOWS\system32\e100bmsg.dll
2009-08-01 12:07:55 ----A---- C:\WINDOWS\system32\oemdspif.dll
2009-08-01 12:07:55 ----A---- C:\WINDOWS\system32\iglicd32.dll
2009-08-01 12:07:55 ----A---- C:\WINDOWS\system32\igldev32.dll
2009-08-01 12:07:55 ----A---- C:\WINDOWS\system32\igfxzoom.exe
2009-08-01 12:07:55 ----A---- C:\WINDOWS\system32\igfxtray.exe
2009-08-01 12:07:55 ----A---- C:\WINDOWS\system32\igfxsrvc.exe
2009-08-01 12:07:55 ----A---- C:\WINDOWS\system32\igfxsrvc.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\igfxress.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\igfxpph.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\igfxpers.exe
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\igfxext.exe
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\igfxexps.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\igfxdo.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\igfxdev.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\igfxcfg.exe
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\ialmrnt5.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\ialmrem.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\ialmdnt5.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\ialmdev5.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\ialmdd5.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\iAlmCoIn_v4333.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\hkcmd.exe
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\hccutils.dll
2009-08-01 12:07:52 ----D---- C:\Drivers
2009-08-01 11:32:47 ----D---- C:\Documents and Settings\Ameni\Application Data\Identities
2009-08-01 11:32:45 ----HD---- C:\Program Files\Uninstall Information
2009-08-01 11:32:38 ----ASH---- C:\Documents and Settings\Ameni\Application Data\desktop.ini
2009-08-01 11:32:37 ----SD---- C:\Documents and Settings\Ameni\Application Data\Microsoft
2009-08-01 11:31:42 ----D---- C:\WINDOWS\SoftwareDistribution
2009-08-01 11:31:40 ----D---- C:\WINDOWS\Prefetch
2009-08-01 11:31:37 ----SD---- C:\WINDOWS\system32\Microsoft
2009-08-01 11:31:37 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-08-01 11:26:59 ----D---- C:\WINDOWS\system32\xircom
2009-08-01 11:26:59 ----D---- C:\Program Files\xerox
2009-08-01 11:26:59 ----D---- C:\Program Files\microsoft frontpage
2009-08-01 11:26:47 ----A---- C:\WINDOWS\control.ini
2009-08-01 11:26:47 ----A---- C:\AUTOEXEC.BAT
2009-08-01 11:26:29 ----A---- C:\WINDOWS\OEWABLog.txt
2009-08-01 11:26:24 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-08-01 11:25:30 ----RD---- C:\WINDOWS\Offline Web Pages
2009-08-01 11:25:29 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-08-01 11:25:29 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-08-01 11:25:23 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-08-01 11:25:18 ----HD---- C:\Program Files\WindowsUpdate
2009-08-01 11:25:13 ----D---- C:\Program Files\Services en ligne
2009-08-01 11:24:52 ----D---- C:\WINDOWS\system32\DirectX
2009-08-01 11:24:45 ----A---- C:\WINDOWS\system32\atrace.dll
2009-08-01 11:24:42 ----A---- C:\WINDOWS\system32\desktop.ini
2009-08-01 11:24:42 ----A---- C:\WINDOWS\desktop.ini
2009-08-01 11:24:33 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-08-01 11:24:32 ----A---- C:\WINDOWS\system32\acctres.dll
2009-08-01 11:24:31 ----D---- C:\Program Files\Fichiers communs\Services
2009-08-01 11:24:28 ----SD---- C:\WINDOWS\Tasks
2009-08-01 11:24:28 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-08-01 11:24:26 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-08-01 11:24:21 ----D---- C:\WINDOWS\srchasst
2009-08-01 11:24:20 ----D---- C:\WINDOWS\system32\Macromed
2009-08-01 11:24:16 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-08-01 11:24:16 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-08-01 11:24:16 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-08-01 11:24:16 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-08-01 11:24:15 ----A---- C:\WINDOWS\system32\wups.dll
2009-08-01 11:24:15 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-08-01 11:24:15 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-08-01 11:24:15 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-08-01 11:24:15 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-08-01 11:24:15 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2009-08-01 11:24:15 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-08-01 11:24:15 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-08-01 11:24:14 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-08-01 11:24:14 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-08-01 11:24:09 ----D---- C:\Program Files\Movie Maker
2009-08-01 11:23:47 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-08-01 11:23:47 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-08-01 11:23:47 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-08-01 11:23:47 ----A---- C:\WINDOWS\system32\racpldlg.dll
2009-08-01 11:23:43 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-08-01 11:23:42 ----D---- C:\WINDOWS\system32\Restore
2009-08-01 11:23:42 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-08-01 11:23:42 ----A---- C:\WINDOWS\system32\fltMc.exe
2009-08-01 11:23:41 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-08-01 11:23:41 ----A---- C:\WINDOWS\system32\srclient.dll
2009-08-01 11:23:40 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2009-08-01 11:23:40 ----A---- C:\WINDOWS\system32\msconf.dll
2009-08-01 11:23:40 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-08-01 11:23:40 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-08-01 11:23:40 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-08-01 11:23:40 ----A---- C:\WINDOWS\system32\ils.dll
2009-08-01 11:23:36 ----D---- C:\Program Files\NetMeeting
2009-08-01 11:23:36 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-08-01 11:23:36 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-08-01 11:23:34 ----A---- C:\WINDOWS\system32\inetres.dll
2009-08-01 11:23:34 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-08-01 11:23:31 ----D---- C:\Program Files\Outlook Express
2009-08-01 11:23:31 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-08-01 11:23:31 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-08-01 11:23:31 ----A---- C:\WINDOWS\system32\mstask.dll
2009-08-01 11:23:30 ----A---- C:\WINDOWS\system32\isign32.dll
2009-08-01 11:23:30 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-08-01 11:23:30 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-08-01 11:23:30 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-08-01 11:23:23 ----D---- C:\Program Files\Fichiers communs\System
2009-08-01 11:23:14 ----D---- C:\Program Files\Internet Explorer
2009-08-01 11:22:58 ----D---- C:\Program Files\ComPlus Applications
2009-08-01 11:22:55 ----A---- C:\WINDOWS\vbaddin.ini
2009-08-01 11:22:55 ----A---- C:\WINDOWS\vb.ini
2009-08-01 11:22:48 ----D---- C:\WINDOWS\Registration
2009-08-01 11:22:08 ----D---- C:\Program Files\Windows Media Player
2009-08-01 11:22:08 ----D---- C:\Program Files\Online Services
2009-08-01 11:22:00 ----D---- C:\Program Files\Messenger
2009-08-01 11:21:55 ----D---- C:\Program Files\MSN Gaming Zone
2009-08-01 11:21:55 ----A---- C:\WINDOWS\system32\write.exe
2009-08-01 11:21:44 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-08-01 11:21:44 ----A---- C:\WINDOWS\system32\hticons.dll
2009-08-01 11:21:44 ----A---- C:\WINDOWS\system32\avwav.dll
2009-08-01 11:21:44 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-08-01 11:21:44 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-08-01 11:21:43 ----A---- C:\WINDOWS\system32\winchat.exe
2009-08-01 11:21:35 ----A---- C:\WINDOWS\system32\getuname.dll
2009-08-01 11:21:35 ----A---- C:\WINDOWS\system32\charmap.exe
2009-08-01 11:21:34 ----A---- C:\WINDOWS\system32\winmine.exe
2009-08-01 11:21:34 ----A---- C:\WINDOWS\system32\sol.exe
2009-08-01 11:21:34 ----A---- C:\WINDOWS\system32\calc.exe
2009-08-01 11:21:33 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-08-01 11:21:33 ----A---- C:\WINDOWS\system32\reset.exe
2009-08-01 11:21:33 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-08-01 11:21:33 ----A---- C:\WINDOWS\system32\freecell.exe
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\tskill.exe
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\tscon.exe
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\shadow.exe
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\regini.exe
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-08-01 11:21:31 ----A---- C:\WINDOWS\system32\msg.exe
2009-08-01 11:21:31 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-08-01 11:21:31 ----A---- C:\WINDOWS\system32\logoff.exe
2009-08-01 11:21:31 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-08-01 11:21:24 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-08-01 11:21:10 ----D---- C:\Program Files\MSN
2009-08-01 11:21:08 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-08-01 11:21:08 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-08-01 11:21:08 ----A---- C:\WINDOWS\system32\hypertrm.dll
2009-08-01 11:21:08 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-08-01 11:21:07 ----D---- C:\Program Files\Windows NT
2009-08-01 11:21:07 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-08-01 11:21:07 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-08-01 11:21:06 ----A---- C:\WINDOWS\system32\spider.exe
2009-08-01 11:21:05 ----A---- C:\WINDOWS\system32\tsgqec.dll
2009-08-01 11:21:05 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-08-01 11:21:04 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2009-08-01 11:21:04 ----A---- C:\WINDOWS\system32\aaclient.dll
2009-08-01 11:21:03 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-08-01 11:21:03 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-08-01 11:21:03 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-08-01 11:21:02 ----A---- C:\WINDOWS\system32\termsrv.dll
2009-08-01 11:21:02 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-08-01 11:21:02 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-08-01 11:21:02 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-08-01 11:21:02 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-08-01 11:21:01 ----D---- C:\WINDOWS\system32\MsDtc
2009-08-01 11:21:01 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-08-01 11:21:01 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-08-01 11:21:01 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-08-01 11:21:01 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-08-01 11:21:01 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-08-01 11:21:01 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-08-01 11:21:01 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-08-01 11:21:00 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-08-01 11:21:00 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-08-01 11:21:00 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-08-01 11:20:59 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-08-01 11:20:59 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-08-01 11:20:59 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-08-01 11:20:58 ----D---- C:\WINDOWS\system32\Com
2009-08-01 11:20:58 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-08-01 11:20:58 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-08-01 11:20:58 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-08-01 11:20:58 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-08-01 11:20:58 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-08-01 11:20:58 ----A---- C:\WINDOWS\system32\colbact.dll
2009-08-01 11:20:57 ----A---- C:\WINDOWS\system32\stclient.dll
2009-08-01 11:20:57 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-08-01 11:20:57 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-08-01 11:20:57 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-08-01 11:20:56 ----A---- C:\WINDOWS\system32\comuid.dll
2009-08-01 11:20:56 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-08-01 11:20:56 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-08-01 11:20:56 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-08-01 11:20:55 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-08-01 11:20:55 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-08-01 11:20:46 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-08-01 11:20:46 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-08-01 11:20:43 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-08-01 11:20:43 ----A---- C:\WINDOWS\system32\cmprops.dll
2009-07-21 08:52:22 ----A---- C:\WINDOWS\system32\msvcr71.dll
2009-07-21 08:52:22 ----A---- C:\WINDOWS\system32\msvcp71.dll
======List of files/folders modified in the last 1 months======
2009-08-01 14:39:11 ----A---- C:\WINDOWS\win.ini
2009-08-01 13:10:19 ----A---- C:\WINDOWS\system.ini
2009-07-19 18:45:00 ----A---- C:\WINDOWS\system32\ieframe.dll
2009-07-19 15:15:02 ----A---- C:\WINDOWS\system32\mshtml.dll
2009-07-18 18:03:49 ----A---- C:\WINDOWS\system32\shdocvw.dll
2009-07-03 18:57:51 ----N---- C:\WINDOWS\system32\occache.dll
2009-07-03 18:57:51 ----A---- C:\WINDOWS\system32\wininet.dll
2009-07-03 18:57:50 ----A---- C:\WINDOWS\system32\urlmon.dll
2009-07-03 18:57:46 ----N---- C:\WINDOWS\system32\jsproxy.dll
2009-07-03 18:57:46 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2009-07-03 18:57:46 ----A---- C:\WINDOWS\system32\msfeeds.dll
2009-07-03 18:57:46 ----A---- C:\WINDOWS\system32\iertutil.dll
2009-07-03 18:57:44 ----N---- C:\WINDOWS\system32\iepeers.dll
2009-07-03 18:57:41 ----N---- C:\WINDOWS\system32\iedkcs32.dll
2009-07-03 13:01:06 ----N---- C:\WINDOWS\system32\ie4uinit.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-17 13059]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 E100B;Intel(R) PRO Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2004-10-13 155648]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2005-05-23 1034752]
R3 HSFHWAZL;HSFHWAZL; C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys [2005-05-23 178048]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-06-29 1050140]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-06-29 3173888]
R3 LEX_AS_NIC_SERVICE_YNOS;LAN-Express AS IEEE 802.11g Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ExpasAG.sys [2005-02-10 456448]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 SNC;Périphérique de contrôle d'ordinateur portable Sony; C:\WINDOWS\system32\DRIVERS\SonyNC.sys [2001-08-17 20752]
R3 tifmsony;tifmsony; C:\WINDOWS\system32\drivers\tifmsony.sys [2005-06-10 76800]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-05-23 716288]
S3 AVPsys;AVPsys; \??\C:\WINDOWS\system32\drivers\cdaudio.sys []
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-08-01 152984]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-06-15 71096]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
ogfile of random's system information tool 1.06 (written by random/random)
Run by Ameni at 2009-08-02 13:06:15
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 65 GB (85%) free of 76 GB
Total RAM: 758 MB (50% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:06:29, on 02/08/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\Ameni\Bureau\RSIT.exe
C:\Program Files\trend micro\Ameni.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [cdoosoft] C:\DOCUME~1\Ameni\LOCALS~1\Temp\herss.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
--
End of file - 5871 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\User_Feed_Synchronization-{B09DB566-E43B-49F9-A7FD-79E8C222A648}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-08-01 41368]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-08-01 73728]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-06-29 14720000]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"AzMixerSel"=C:\Program Files\Realtek\InstallShield\AzMixerSel.exe [2005-04-29 45056]
"Mouse Suite 98 Daemon"=ICO.EXE []
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2005-06-29 94208]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2005-06-29 77824]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2005-06-29 114688]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-08-01 148888]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-08-01 98304]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-08-01 185896]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
"cdoosoft"=C:\DOCUME~1\Ameni\LOCALS~1\Temp\herss.exe [2009-08-01 106995]
C:\Documents and Settings\Ameni\Menu Démarrer\Programmes\Démarrage
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2005-06-29 131072]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{42b0abf0-7e89-11de-a1c4-806d6172696f}]
shell\AutoRun\command - C:\mqhnawe.bat
shell\open\command - C:\mqhnawe.bat
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fd23cb57-7ebd-11de-9fb5-0014a44fde76}]
shell\AutoRun\command - G:\rx.exe
shell\open\command - G:\rx.exe
======List of files/folders created in the last 1 months======
2009-08-02 13:06:16 ----D---- C:\Program Files\trend micro
2009-08-02 13:06:15 ----D---- C:\rsit
2009-08-02 12:54:03 ----RSH---- C:\mqhnawe.bat
2009-08-02 12:19:43 ----D---- C:\Program Files\epson
2009-08-02 12:19:40 ----A---- C:\WINDOWS\system32\escwiad.dll
2009-08-02 11:35:17 ----A---- C:\WINDOWS\system32\E_DCINST.DLL
2009-08-02 11:35:16 ----A---- C:\WINDOWS\system32\E_FLBBIE.DLL
2009-08-02 11:35:16 ----A---- C:\WINDOWS\system32\E_FD4BBIE.DLL
2009-08-02 11:33:52 ----D---- C:\Documents and Settings\All Users\Application Data\EPSON
2009-08-02 09:16:19 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2009-08-02 09:16:19 ----A---- C:\WINDOWS\system32\mucltui.dll
2009-08-01 19:30:10 ----RSH---- C:\rx.exe
2009-08-01 16:19:28 ----D---- C:\Documents and Settings\Ameni\Application Data\OpenOffice.org
2009-08-01 16:18:20 ----A---- C:\WINDOWS\system32\MFC71.dll
2009-08-01 16:18:20 ----A---- C:\WINDOWS\system32\aswBoot.exe
2009-08-01 16:18:15 ----D---- C:\Program Files\Alwil Software
2009-08-01 16:16:39 ----D---- C:\Program Files\Fichiers communs\xing shared
2009-08-01 16:16:31 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2009-08-01 16:16:22 ----A---- C:\WINDOWS\system32\pndx5032.dll
2009-08-01 16:16:22 ----A---- C:\WINDOWS\system32\pndx5016.dll
2009-08-01 16:16:20 ----A---- C:\WINDOWS\system32\pncrt.dll
2009-08-01 16:16:18 ----D---- C:\Program Files\Fichiers communs\Real
2009-08-01 16:16:17 ----D---- C:\Program Files\Real
2009-08-01 16:15:55 ----D---- C:\Program Files\WinRAR
2009-08-01 16:15:51 ----D---- C:\Documents and Settings\Ameni\Application Data\Real
2009-08-01 16:14:48 ----A---- C:\WINDOWS\unvise32qt.exe
2009-08-01 16:14:30 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer
2009-08-01 16:14:15 ----D---- C:\WINDOWS\system32\QuickTime
2009-08-01 16:14:13 ----D---- C:\Program Files\QuickTime
2009-08-01 16:14:08 ----D---- C:\Program Files\Apple Software Update
2009-08-01 16:14:08 ----D---- C:\Documents and Settings\All Users\Application Data\Apple
2009-08-01 16:13:56 ----D---- C:\Documents and Settings\All Users\Application Data\QuickTime
2009-08-01 16:13:28 ----A---- C:\WINDOWS\system32\pdfcmnnt.dll
2009-08-01 16:13:26 ----D---- C:\Program Files\PDFCreator
2009-08-01 16:13:26 ----A---- C:\WINDOWS\system32\VB6FR.DLL
2009-08-01 16:13:26 ----A---- C:\WINDOWS\system32\MSMPIDE.DLL
2009-08-01 16:13:26 ----A---- C:\WINDOWS\system32\MSCMCFR.DLL
2009-08-01 16:13:26 ----A---- C:\WINDOWS\system32\MSCC2FR.DLL
2009-08-01 16:12:57 ----D---- C:\Program Files\Microsoft Office
2009-08-01 16:11:47 ----D---- C:\Documents and Settings\Ameni\Application Data\Canneverbe_Limited
2009-08-01 16:11:30 ----D---- C:\Program Files\Gimp Pack Mode
2009-08-01 16:11:16 ----D---- C:\Program Files\CDBurnerXP
2009-08-01 16:09:17 ----D---- C:\Program Files\Fichiers communs\AVSMedia
2009-08-01 16:09:17 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2009-08-01 16:09:17 ----A---- C:\WINDOWS\system32\xvidcore.dll
2009-08-01 16:09:17 ----A---- C:\WINDOWS\system32\mpg4c32.dll
2009-08-01 16:09:17 ----A---- C:\WINDOWS\system32\mcdvd_32.dll
2009-08-01 16:09:17 ----A---- C:\WINDOWS\system32\divx.dll
2009-08-01 16:09:16 ----D---- C:\Program Files\AVSMedia
2009-08-01 16:09:16 ----A---- C:\WINDOWS\system32\msxml3a.dll
2009-08-01 16:09:16 ----A---- C:\WINDOWS\system32\msvcr70.dll
2009-08-01 16:09:16 ----A---- C:\WINDOWS\system32\msvcp70.dll
2009-08-01 16:09:16 ----A---- C:\WINDOWS\system32\mfc70.dll
2009-08-01 16:09:16 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2009-08-01 16:05:56 ----D---- C:\Program Files\OpenOffice.org 3
2009-08-01 16:04:42 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-08-01 16:04:23 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-08-01 16:04:23 ----D---- C:\Program Files\Adobe
2009-08-01 16:02:45 ----D---- C:\Documents and Settings\Ameni\Application Data\Macromedia
2009-08-01 16:02:20 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2009-08-01 16:02:20 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2009-08-01 16:02:19 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2009-08-01 16:02:19 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2009-08-01 16:02:19 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2009-08-01 16:02:18 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2009-08-01 16:02:17 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2009-08-01 16:02:17 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2009-08-01 16:02:17 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2009-08-01 16:02:16 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2009-08-01 16:02:16 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2009-08-01 16:02:16 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2009-08-01 16:02:15 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2009-08-01 16:02:15 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2009-08-01 16:02:14 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2009-08-01 16:02:14 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2009-08-01 16:02:13 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2009-08-01 16:02:13 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2009-08-01 16:02:13 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2009-08-01 16:02:12 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2009-08-01 16:02:11 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2009-08-01 16:02:11 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2009-08-01 16:02:11 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2009-08-01 16:02:10 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2009-08-01 16:02:09 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2009-08-01 16:02:09 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2009-08-01 16:02:07 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2009-08-01 16:02:04 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2009-08-01 16:02:02 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2009-08-01 16:01:59 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2009-08-01 16:01:55 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2009-08-01 16:01:55 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2009-08-01 16:01:53 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2009-08-01 16:01:52 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2009-08-01 16:01:49 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2009-08-01 16:01:49 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2009-08-01 16:01:49 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2009-08-01 16:01:48 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2009-08-01 16:01:47 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2009-08-01 16:01:47 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2009-08-01 16:01:45 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2009-08-01 16:01:40 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2009-08-01 16:01:40 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2009-08-01 16:01:38 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2009-08-01 16:01:38 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2009-08-01 16:01:33 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2009-08-01 16:01:29 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2009-08-01 16:01:26 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2009-08-01 16:01:22 ----D---- C:\Program Files\NOS
2009-08-01 16:01:22 ----D---- C:\Documents and Settings\All Users\Application Data\NOS
2009-08-01 16:01:22 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2009-08-01 16:01:22 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2009-08-01 16:01:20 ----A---- C:\WINDOWS\system32\javaws.exe
2009-08-01 16:01:20 ----A---- C:\WINDOWS\system32\javaw.exe
2009-08-01 16:01:20 ----A---- C:\WINDOWS\system32\java.exe
2009-08-01 16:01:20 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-08-01 16:01:11 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2009-08-01 16:01:08 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2009-08-01 16:01:05 ----D---- C:\Documents and Settings\Ameni\Application Data\Adobe
2009-08-01 16:01:02 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2009-08-01 16:01:01 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2009-08-01 16:01:00 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2009-08-01 16:01:00 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2009-08-01 16:00:59 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2009-08-01 16:00:58 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2009-08-01 16:00:57 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2009-08-01 16:00:56 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2009-08-01 16:00:54 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2009-08-01 16:00:50 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2009-08-01 16:00:39 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2009-08-01 16:00:36 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2009-08-01 16:00:36 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2009-08-01 16:00:36 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2009-08-01 16:00:36 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2009-08-01 16:00:35 ----D---- C:\Program Files\Java
2009-08-01 16:00:35 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2009-08-01 16:00:34 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2009-08-01 16:00:33 ----D---- C:\WINDOWS\system32\Adobe
2009-08-01 16:00:33 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2009-08-01 16:00:32 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2009-08-01 16:00:28 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2009-08-01 15:59:33 ----D---- C:\Documents and Settings\Ameni\Application Data\Sun
2009-08-01 15:58:10 ----HD---- C:\WINDOWS\msdownld.tmp
2009-08-01 15:56:30 ----D---- C:\WINDOWS\Logs
2009-08-01 15:30:30 ----N---- C:\WINDOWS\system32\spmsg2.dll
2009-08-01 15:30:28 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2009-08-01 15:16:26 ----HDC---- C:\WINDOWS\$NtUninstallKB963093$
2009-08-01 15:14:51 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2009-08-01 15:14:45 ----HDC---- C:\WINDOWS\$NtUninstallKB959772_WM11$
2009-08-01 15:14:28 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2009-08-01 15:14:16 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-08-01 15:14:13 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2009-08-01 15:13:57 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP11$
2009-08-01 15:13:46 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2009-08-01 15:13:33 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2009-08-01 14:57:18 ----D---- C:\Program Files\Microsoft Silverlight
2009-08-01 14:51:59 ----D---- C:\WINDOWS\system32\XPSViewer
2009-08-01 14:51:54 ----D---- C:\Program Files\MSBuild
2009-08-01 14:51:52 ----D---- C:\WINDOWS\system32\en-US
2009-08-01 14:51:46 ----D---- C:\Program Files\Reference Assemblies
2009-08-01 14:51:18 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2009-08-01 14:51:18 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2009-08-01 14:51:18 ----N---- C:\WINDOWS\system32\prntvpt.dll
2009-08-01 14:47:55 ----HDC---- C:\WINDOWS\$NtUninstallbasecsp$
2009-08-01 14:47:32 ----SHD---- C:\RECYCLER
2009-08-01 14:47:20 ----D---- C:\Program Files\Microsoft
2009-08-01 14:47:02 ----D---- C:\Program Files\Windows Live SkyDrive
2009-08-01 14:46:37 ----D---- C:\Program Files\Windows Live
2009-08-01 14:41:01 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-08-01 14:40:28 ----D---- C:\Documents and Settings\Ameni\Application Data\Windows Desktop Search
2009-08-01 14:40:02 ----D---- C:\Program Files\Windows Desktop Search
2009-08-01 14:40:01 ----D---- C:\WINDOWS\system32\GroupPolicy
2009-08-01 14:39:50 ----HDC---- C:\WINDOWS\$NtUninstallKB940157$
2009-08-01 14:39:46 ----HDC---- C:\WINDOWS\$NtUninstallKB915800-v4$
2009-08-01 14:39:20 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-08-01 14:39:19 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2009-08-01 14:39:06 ----D---- C:\Program Files\Windows Media Connect 2
2009-08-01 14:38:52 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2009-08-01 14:38:17 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2009-08-01 14:37:58 ----D---- C:\WINDOWS\system32\LogFiles
2009-08-01 14:37:53 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2009-08-01 14:36:27 ----RSD---- C:\WINDOWS\assembly
2009-08-01 14:36:27 ----D---- C:\WINDOWS\Microsoft.NET
2009-08-01 14:36:26 ----D---- C:\WINDOWS\system32\URTTemp
2009-08-01 14:31:29 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2009-08-01 14:26:16 ----A---- C:\WINDOWS\system32\wpa.bak
2009-08-01 14:22:00 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-08-01 14:21:55 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-08-01 14:21:51 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-08-01 14:21:46 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-08-01 14:21:42 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-08-01 14:21:38 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2009-08-01 14:21:31 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2009-08-01 14:21:20 ----HDC---- C:\WINDOWS\$NtUninstallKB972260$
2009-08-01 14:21:14 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-08-01 14:21:11 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-08-01 14:21:06 ----HDC---- C:\WINDOWS\$NtUninstallKB973346$
2009-08-01 14:20:54 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-08-01 14:20:48 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-08-01 14:20:44 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2009-08-01 14:20:40 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-08-01 14:20:33 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-08-01 14:20:28 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-08-01 14:20:23 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-08-01 14:20:17 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-08-01 14:20:12 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-08-01 14:20:04 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-08-01 14:19:57 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-08-01 14:19:15 ----D---- C:\WINDOWS\ie8updates
2009-08-01 14:19:02 ----D---- C:\WINDOWS\WBEM
2009-08-01 14:17:32 ----HDC---- C:\WINDOWS\ie8
2009-08-01 14:15:31 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2009-08-01 14:15:26 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-08-01 14:15:20 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-08-01 14:15:15 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-08-01 14:15:10 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-08-01 14:14:21 ----A---- C:\WINDOWS\system32\igfxres.dll
2009-08-01 14:14:16 ----A---- C:\WINDOWS\system32\MRT.exe
2009-08-01 14:14:07 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-08-01 14:13:56 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-08-01 14:13:42 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-08-01 14:13:32 ----HDC---- C:\WINDOWS\$NtUninstallKB961371$
2009-08-01 14:13:26 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-08-01 14:13:20 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-08-01 14:13:10 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-08-01 14:08:16 ----HDC---- C:\WINDOWS\$NtUninstallKB835221WXP$
2009-08-01 14:07:38 ----A---- C:\WINDOWS\system32\WLANDLL.DLL
2009-08-01 14:07:37 ----A---- C:\WINDOWS\system32\AW32N50.DLL
2009-08-01 14:07:36 ----D---- C:\Program Files\LanExpress
2009-08-01 14:07:00 ----A---- C:\WINDOWS\system32\nvudisp.exe
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PMVAIO.DLL
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PMUNINST.EXE
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PMUNINNT.EXE
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PELZOOM.DLL
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PELWHEEL.DLL
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PELUTIL.DLL
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PELSETUP.DLL
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PELSCRLL.DLL
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PELPPM.DLL
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PELMICED.EXE
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PELHOOKS.DLL
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PELCOMM.DLL
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\PELBDO.DLL
2009-08-01 14:06:33 ----A---- C:\WINDOWS\system32\ICONSPY.EXE
2009-08-01 14:05:47 ----D---- C:\Program Files\CONEXANT
2009-08-01 14:03:53 ----D---- C:\WINDOWS\system32\PreInstall
2009-08-01 14:03:52 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-08-01 14:03:51 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-08-01 14:03:51 ----HD---- C:\WINDOWS\$hf_mig$
2009-08-01 13:14:59 ----A---- C:\WINDOWS\system32\h323log.txt
2009-08-01 13:11:42 ----A---- C:\WINDOWS\system32\usbui.dll
2009-08-01 13:10:31 ----A---- C:\WINDOWS\imsins.BAK
2009-08-01 13:10:28 ----SHD---- C:\WINDOWS\Installer
2009-08-01 13:10:28 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-08-01 13:10:27 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-08-01 13:10:27 ----A---- C:\WINDOWS\ODBCINST.INI
2009-08-01 13:10:22 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2009-08-01 13:10:21 ----RD---- C:\Program Files
2009-08-01 13:10:21 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-08-01 13:10:21 ----D---- C:\Program Files\Fichiers communs
2009-08-01 13:10:17 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-08-01 13:10:17 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-08-01 13:10:17 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-08-01 13:10:15 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-08-01 13:10:15 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-08-01 13:10:15 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-08-01 13:10:14 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-08-01 13:10:14 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-08-01 13:10:14 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-08-01 13:10:14 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-08-01 13:10:14 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-08-01 13:10:14 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-08-01 13:10:14 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-08-01 13:10:14 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-08-01 13:10:14 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-08-01 13:10:12 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-08-01 13:10:12 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-08-01 13:10:12 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-08-01 13:10:12 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-08-01 13:10:12 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-08-01 13:10:12 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-08-01 13:10:11 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-08-01 13:10:10 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-08-01 13:10:10 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-08-01 13:10:10 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-08-01 13:10:10 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-08-01 13:10:10 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdro.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2009-08-01 13:10:08 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2009-08-01 13:10:05 ----A---- C:\WINDOWS\system32\irclass.dll
2009-08-01 13:10:05 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-08-01 13:10:05 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-08-01 13:10:04 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-08-01 13:10:04 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-08-01 13:10:01 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-08-01 13:10:01 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-08-01 13:10:01 ----A---- C:\WINDOWS\system32\batt.dll
2009-08-01 13:10:00 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-08-01 13:09:57 ----A---- C:\WINDOWS\system32\storprop.dll
2009-08-01 13:09:47 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2009-08-01 13:09:43 ----RA---- C:\WINDOWS\SET8.tmp
2009-08-01 13:09:40 ----RA---- C:\WINDOWS\SET4.tmp
2009-08-01 13:09:38 ----RA---- C:\WINDOWS\SET3.tmp
2009-08-01 13:09:29 ----D---- C:\WINDOWS\system32\CatRoot2
2009-08-01 13:09:29 ----D---- C:\WINDOWS\system32\CatRoot
2009-08-01 13:09:23 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-08-01 13:08:50 ----A---- C:\WINDOWS\setuplog.txt
2009-08-01 13:08:46 ----D---- C:\Documents and Settings
2009-08-01 13:08:12 ----ASH---- C:\boot.ini
2009-08-01 13:08:10 ----SHD---- C:\System Volume Information
2009-08-01 12:59:33 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-08-01 12:59:33 ----RD---- C:\WINDOWS\Web
2009-08-01 12:59:33 ----D---- C:\WINDOWS\WinSxS
2009-08-01 12:59:33 ----D---- C:\WINDOWS\twain_32
2009-08-01 12:59:33 ----D---- C:\WINDOWS\Temp
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\wbem
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\usmt
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\ShellExt
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\Setup
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\oobe
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\npp
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\mui
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\inetsrv
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\IME
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\icsxml
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\ias
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\fr-fr
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\fr
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\export
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\3com_dmi
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\3076
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\2052
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\1054
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\1042
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\1041
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\1037
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\1036
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\1033
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\1031
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\1028
2009-08-01 12:59:33 ----D---- C:\WINDOWS\system32\1025
2009-08-01 12:59:33 ----D---- C:\WINDOWS\security
2009-08-01 12:59:33 ----D---- C:\WINDOWS\Resources
2009-08-01 12:59:33 ----D---- C:\WINDOWS\Provisioning
2009-08-01 12:59:33 ----D---- C:\WINDOWS\PeerNet
2009-08-01 12:59:33 ----D---- C:\WINDOWS\pchealth
2009-08-01 12:59:33 ----D---- C:\WINDOWS\Network Diagnostic
2009-08-01 12:59:33 ----D---- C:\WINDOWS\mui
2009-08-01 12:59:33 ----D---- C:\WINDOWS\msapps
2009-08-01 12:59:33 ----D---- C:\WINDOWS\msagent
2009-08-01 12:59:33 ----D---- C:\WINDOWS\Media
2009-08-01 12:59:33 ----D---- C:\WINDOWS\L2Schemas
2009-08-01 12:59:33 ----D---- C:\WINDOWS\java
2009-08-01 12:59:33 ----D---- C:\WINDOWS\ime
2009-08-01 12:59:33 ----D---- C:\WINDOWS\Driver Cache
2009-08-01 12:59:33 ----D---- C:\WINDOWS\Debug
2009-08-01 12:59:33 ----D---- C:\WINDOWS\Cursors
2009-08-01 12:59:33 ----D---- C:\WINDOWS\Connection Wizard
2009-08-01 12:59:33 ----D---- C:\WINDOWS\Config
2009-08-01 12:59:33 ----D---- C:\WINDOWS\AppPatch
2009-08-01 12:59:33 ----D---- C:\WINDOWS\addins
2009-08-01 12:59:32 ----RSD---- C:\WINDOWS\Fonts
2009-08-01 12:59:32 ----HD---- C:\WINDOWS\inf
2009-08-01 12:59:32 ----D---- C:\WINDOWS\system32\wins
2009-08-01 12:59:32 ----D---- C:\WINDOWS\system32\spool
2009-08-01 12:59:32 ----D---- C:\WINDOWS\system32\ras
2009-08-01 12:59:32 ----D---- C:\WINDOWS\system32\drivers
2009-08-01 12:59:32 ----D---- C:\WINDOWS\system32\dhcp
2009-08-01 12:59:32 ----D---- C:\WINDOWS\system32\config
2009-08-01 12:59:32 ----D---- C:\WINDOWS\system32
2009-08-01 12:59:32 ----D---- C:\WINDOWS\system
2009-08-01 12:59:32 ----D---- C:\WINDOWS\repair
2009-08-01 12:59:32 ----D---- C:\WINDOWS\Help
2009-08-01 12:59:32 ----D---- C:\WINDOWS
2009-08-01 12:14:34 ----D---- C:\WINDOWS\system32\Lang
2009-08-01 12:12:39 ----D---- C:\Program Files\Intel
2009-08-01 12:11:54 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-08-01 12:11:39 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-08-01 12:11:08 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-08-01 12:11:03 ----A---- C:\WINDOWS\ALCWZRD.EXE
2009-08-01 12:11:03 ----A---- C:\WINDOWS\ALCMTR.EXE
2009-08-01 12:10:59 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2009-08-01 12:10:59 ----A---- C:\WINDOWS\RTHDCPL.EXE
2009-08-01 12:10:59 ----A---- C:\WINDOWS\MicCal.exe
2009-08-01 12:10:58 ----D---- C:\WINDOWS\system32\RTCOM
2009-08-01 12:10:58 ----A---- C:\WINDOWS\system32\ChCfg.exe
2009-08-01 12:10:58 ----A---- C:\WINDOWS\RTLCPL.EXE
2009-08-01 12:10:55 ----HD---- C:\Program Files\InstallShield Installation Information
2009-08-01 12:10:55 ----D---- C:\Program Files\Realtek
2009-08-01 12:10:39 ----A---- C:\WINDOWS\RtlExUpd.dll
2009-08-01 12:10:36 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-08-01 12:08:00 ----A---- C:\WINDOWS\system32\mdmxsdk.dll
2009-08-01 12:08:00 ----A---- C:\WINDOWS\system32\hsfci015.dll
2009-08-01 12:07:57 ----A---- C:\WINDOWS\system32\Prounstl.exe
2009-08-01 12:07:57 ----A---- C:\WINDOWS\system32\IntelNic.dll
2009-08-01 12:07:57 ----A---- C:\WINDOWS\system32\e100bmsg.dll
2009-08-01 12:07:55 ----A---- C:\WINDOWS\system32\oemdspif.dll
2009-08-01 12:07:55 ----A---- C:\WINDOWS\system32\iglicd32.dll
2009-08-01 12:07:55 ----A---- C:\WINDOWS\system32\igldev32.dll
2009-08-01 12:07:55 ----A---- C:\WINDOWS\system32\igfxzoom.exe
2009-08-01 12:07:55 ----A---- C:\WINDOWS\system32\igfxtray.exe
2009-08-01 12:07:55 ----A---- C:\WINDOWS\system32\igfxsrvc.exe
2009-08-01 12:07:55 ----A---- C:\WINDOWS\system32\igfxsrvc.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\igfxress.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\igfxpph.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\igfxpers.exe
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\igfxext.exe
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\igfxexps.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\igfxdo.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\igfxdev.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\igfxcfg.exe
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\ialmrnt5.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\ialmrem.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\ialmdnt5.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\ialmdev5.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\ialmdd5.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\iAlmCoIn_v4333.dll
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\hkcmd.exe
2009-08-01 12:07:54 ----A---- C:\WINDOWS\system32\hccutils.dll
2009-08-01 12:07:52 ----D---- C:\Drivers
2009-08-01 11:32:47 ----D---- C:\Documents and Settings\Ameni\Application Data\Identities
2009-08-01 11:32:45 ----HD---- C:\Program Files\Uninstall Information
2009-08-01 11:32:38 ----ASH---- C:\Documents and Settings\Ameni\Application Data\desktop.ini
2009-08-01 11:32:37 ----SD---- C:\Documents and Settings\Ameni\Application Data\Microsoft
2009-08-01 11:31:42 ----D---- C:\WINDOWS\SoftwareDistribution
2009-08-01 11:31:40 ----D---- C:\WINDOWS\Prefetch
2009-08-01 11:31:37 ----SD---- C:\WINDOWS\system32\Microsoft
2009-08-01 11:31:37 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-08-01 11:26:59 ----D---- C:\WINDOWS\system32\xircom
2009-08-01 11:26:59 ----D---- C:\Program Files\xerox
2009-08-01 11:26:59 ----D---- C:\Program Files\microsoft frontpage
2009-08-01 11:26:47 ----A---- C:\WINDOWS\control.ini
2009-08-01 11:26:47 ----A---- C:\AUTOEXEC.BAT
2009-08-01 11:26:29 ----A---- C:\WINDOWS\OEWABLog.txt
2009-08-01 11:26:24 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-08-01 11:25:30 ----RD---- C:\WINDOWS\Offline Web Pages
2009-08-01 11:25:29 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-08-01 11:25:29 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-08-01 11:25:23 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-08-01 11:25:18 ----HD---- C:\Program Files\WindowsUpdate
2009-08-01 11:25:13 ----D---- C:\Program Files\Services en ligne
2009-08-01 11:24:52 ----D---- C:\WINDOWS\system32\DirectX
2009-08-01 11:24:45 ----A---- C:\WINDOWS\system32\atrace.dll
2009-08-01 11:24:42 ----A---- C:\WINDOWS\system32\desktop.ini
2009-08-01 11:24:42 ----A---- C:\WINDOWS\desktop.ini
2009-08-01 11:24:33 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-08-01 11:24:32 ----A---- C:\WINDOWS\system32\acctres.dll
2009-08-01 11:24:31 ----D---- C:\Program Files\Fichiers communs\Services
2009-08-01 11:24:28 ----SD---- C:\WINDOWS\Tasks
2009-08-01 11:24:28 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-08-01 11:24:26 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-08-01 11:24:21 ----D---- C:\WINDOWS\srchasst
2009-08-01 11:24:20 ----D---- C:\WINDOWS\system32\Macromed
2009-08-01 11:24:16 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-08-01 11:24:16 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-08-01 11:24:16 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-08-01 11:24:16 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-08-01 11:24:15 ----A---- C:\WINDOWS\system32\wups.dll
2009-08-01 11:24:15 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-08-01 11:24:15 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-08-01 11:24:15 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-08-01 11:24:15 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-08-01 11:24:15 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2009-08-01 11:24:15 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-08-01 11:24:15 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-08-01 11:24:14 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-08-01 11:24:14 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-08-01 11:24:09 ----D---- C:\Program Files\Movie Maker
2009-08-01 11:23:47 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-08-01 11:23:47 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-08-01 11:23:47 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-08-01 11:23:47 ----A---- C:\WINDOWS\system32\racpldlg.dll
2009-08-01 11:23:43 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-08-01 11:23:42 ----D---- C:\WINDOWS\system32\Restore
2009-08-01 11:23:42 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-08-01 11:23:42 ----A---- C:\WINDOWS\system32\fltMc.exe
2009-08-01 11:23:41 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-08-01 11:23:41 ----A---- C:\WINDOWS\system32\srclient.dll
2009-08-01 11:23:40 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2009-08-01 11:23:40 ----A---- C:\WINDOWS\system32\msconf.dll
2009-08-01 11:23:40 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-08-01 11:23:40 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-08-01 11:23:40 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-08-01 11:23:40 ----A---- C:\WINDOWS\system32\ils.dll
2009-08-01 11:23:36 ----D---- C:\Program Files\NetMeeting
2009-08-01 11:23:36 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-08-01 11:23:36 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-08-01 11:23:34 ----A---- C:\WINDOWS\system32\inetres.dll
2009-08-01 11:23:34 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-08-01 11:23:31 ----D---- C:\Program Files\Outlook Express
2009-08-01 11:23:31 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-08-01 11:23:31 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-08-01 11:23:31 ----A---- C:\WINDOWS\system32\mstask.dll
2009-08-01 11:23:30 ----A---- C:\WINDOWS\system32\isign32.dll
2009-08-01 11:23:30 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-08-01 11:23:30 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-08-01 11:23:30 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-08-01 11:23:23 ----D---- C:\Program Files\Fichiers communs\System
2009-08-01 11:23:14 ----D---- C:\Program Files\Internet Explorer
2009-08-01 11:22:58 ----D---- C:\Program Files\ComPlus Applications
2009-08-01 11:22:55 ----A---- C:\WINDOWS\vbaddin.ini
2009-08-01 11:22:55 ----A---- C:\WINDOWS\vb.ini
2009-08-01 11:22:48 ----D---- C:\WINDOWS\Registration
2009-08-01 11:22:08 ----D---- C:\Program Files\Windows Media Player
2009-08-01 11:22:08 ----D---- C:\Program Files\Online Services
2009-08-01 11:22:00 ----D---- C:\Program Files\Messenger
2009-08-01 11:21:55 ----D---- C:\Program Files\MSN Gaming Zone
2009-08-01 11:21:55 ----A---- C:\WINDOWS\system32\write.exe
2009-08-01 11:21:44 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-08-01 11:21:44 ----A---- C:\WINDOWS\system32\hticons.dll
2009-08-01 11:21:44 ----A---- C:\WINDOWS\system32\avwav.dll
2009-08-01 11:21:44 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-08-01 11:21:44 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-08-01 11:21:43 ----A---- C:\WINDOWS\system32\winchat.exe
2009-08-01 11:21:35 ----A---- C:\WINDOWS\system32\getuname.dll
2009-08-01 11:21:35 ----A---- C:\WINDOWS\system32\charmap.exe
2009-08-01 11:21:34 ----A---- C:\WINDOWS\system32\winmine.exe
2009-08-01 11:21:34 ----A---- C:\WINDOWS\system32\sol.exe
2009-08-01 11:21:34 ----A---- C:\WINDOWS\system32\calc.exe
2009-08-01 11:21:33 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-08-01 11:21:33 ----A---- C:\WINDOWS\system32\reset.exe
2009-08-01 11:21:33 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-08-01 11:21:33 ----A---- C:\WINDOWS\system32\freecell.exe
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\tskill.exe
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\tscon.exe
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\shadow.exe
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\regini.exe
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-08-01 11:21:32 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-08-01 11:21:31 ----A---- C:\WINDOWS\system32\msg.exe
2009-08-01 11:21:31 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-08-01 11:21:31 ----A---- C:\WINDOWS\system32\logoff.exe
2009-08-01 11:21:31 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-08-01 11:21:24 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-08-01 11:21:10 ----D---- C:\Program Files\MSN
2009-08-01 11:21:08 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-08-01 11:21:08 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-08-01 11:21:08 ----A---- C:\WINDOWS\system32\hypertrm.dll
2009-08-01 11:21:08 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-08-01 11:21:07 ----D---- C:\Program Files\Windows NT
2009-08-01 11:21:07 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-08-01 11:21:07 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-08-01 11:21:06 ----A---- C:\WINDOWS\system32\spider.exe
2009-08-01 11:21:05 ----A---- C:\WINDOWS\system32\tsgqec.dll
2009-08-01 11:21:05 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-08-01 11:21:04 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2009-08-01 11:21:04 ----A---- C:\WINDOWS\system32\aaclient.dll
2009-08-01 11:21:03 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-08-01 11:21:03 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-08-01 11:21:03 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-08-01 11:21:02 ----A---- C:\WINDOWS\system32\termsrv.dll
2009-08-01 11:21:02 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-08-01 11:21:02 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-08-01 11:21:02 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-08-01 11:21:02 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-08-01 11:21:01 ----D---- C:\WINDOWS\system32\MsDtc
2009-08-01 11:21:01 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-08-01 11:21:01 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-08-01 11:21:01 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-08-01 11:21:01 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-08-01 11:21:01 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-08-01 11:21:01 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-08-01 11:21:01 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-08-01 11:21:00 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-08-01 11:21:00 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-08-01 11:21:00 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-08-01 11:20:59 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-08-01 11:20:59 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-08-01 11:20:59 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-08-01 11:20:58 ----D---- C:\WINDOWS\system32\Com
2009-08-01 11:20:58 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-08-01 11:20:58 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-08-01 11:20:58 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-08-01 11:20:58 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-08-01 11:20:58 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-08-01 11:20:58 ----A---- C:\WINDOWS\system32\colbact.dll
2009-08-01 11:20:57 ----A---- C:\WINDOWS\system32\stclient.dll
2009-08-01 11:20:57 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-08-01 11:20:57 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-08-01 11:20:57 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-08-01 11:20:56 ----A---- C:\WINDOWS\system32\comuid.dll
2009-08-01 11:20:56 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-08-01 11:20:56 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-08-01 11:20:56 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-08-01 11:20:55 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-08-01 11:20:55 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-08-01 11:20:46 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-08-01 11:20:46 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-08-01 11:20:43 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-08-01 11:20:43 ----A---- C:\WINDOWS\system32\cmprops.dll
2009-07-21 08:52:22 ----A---- C:\WINDOWS\system32\msvcr71.dll
2009-07-21 08:52:22 ----A---- C:\WINDOWS\system32\msvcp71.dll
======List of files/folders modified in the last 1 months======
2009-08-01 14:39:11 ----A---- C:\WINDOWS\win.ini
2009-08-01 13:10:19 ----A---- C:\WINDOWS\system.ini
2009-07-19 18:45:00 ----A---- C:\WINDOWS\system32\ieframe.dll
2009-07-19 15:15:02 ----A---- C:\WINDOWS\system32\mshtml.dll
2009-07-18 18:03:49 ----A---- C:\WINDOWS\system32\shdocvw.dll
2009-07-03 18:57:51 ----N---- C:\WINDOWS\system32\occache.dll
2009-07-03 18:57:51 ----A---- C:\WINDOWS\system32\wininet.dll
2009-07-03 18:57:50 ----A---- C:\WINDOWS\system32\urlmon.dll
2009-07-03 18:57:46 ----N---- C:\WINDOWS\system32\jsproxy.dll
2009-07-03 18:57:46 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2009-07-03 18:57:46 ----A---- C:\WINDOWS\system32\msfeeds.dll
2009-07-03 18:57:46 ----A---- C:\WINDOWS\system32\iertutil.dll
2009-07-03 18:57:44 ----N---- C:\WINDOWS\system32\iepeers.dll
2009-07-03 18:57:41 ----N---- C:\WINDOWS\system32\iedkcs32.dll
2009-07-03 13:01:06 ----N---- C:\WINDOWS\system32\ie4uinit.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-17 13059]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 E100B;Intel(R) PRO Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2004-10-13 155648]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2005-05-23 1034752]
R3 HSFHWAZL;HSFHWAZL; C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys [2005-05-23 178048]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-06-29 1050140]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-06-29 3173888]
R3 LEX_AS_NIC_SERVICE_YNOS;LAN-Express AS IEEE 802.11g Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ExpasAG.sys [2005-02-10 456448]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 SNC;Périphérique de contrôle d'ordinateur portable Sony; C:\WINDOWS\system32\DRIVERS\SonyNC.sys [2001-08-17 20752]
R3 tifmsony;tifmsony; C:\WINDOWS\system32\drivers\tifmsony.sys [2005-06-10 76800]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-05-23 716288]
S3 AVPsys;AVPsys; \??\C:\WINDOWS\system32\drivers\cdaudio.sys []
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-08-01 152984]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-06-15 71096]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
Configuration: Windows XP Internet Explorer 7.0
A voir également:
- De l'aide pour supprimer le virus rootkit
- Supprimer rond bleu whatsapp - Guide
- Impossible de supprimer une page word - Guide
- Supprimer le fichier hiberfil.sys - Guide
- Supprimer liste déroulante excel - Guide
- Virus mcafee - Accueil - Piratage
2 réponses
Salut,
/!\ N'entreprends rien avec le PC sans mon autorisation et suis à la lettre les procédures qui vont suivre .
Prends bien connaisance de l'ensemble de ces procédures avant de te lancer .
Si tu as un quelconque prb n' hésite pas à m'en faire part ( évite les prises de décision hasardeuses ) .
Ne pas utiliser ce PC autrement que pour venir ici poursuivre la désinfection .
infection par support amovible ...
commence par ceci :
Télécharge UsbFix ( de C_XX, Chimay8 & Chiquitine29 ) sur ton bureau :
> http://sd-1.archive-host.com/membres/up/127028005715545653/UsbFix.exe
! Déconnecte toi d'internet et ferme toutes applications en cours !
--> Double-clique sur l' .exe pour lancer l'installation de l'outil ( ne touche pas aux paramètres d'installe ) .
Impératif :
Branche toutes tes unités externes à ton PC (clé USB, DD externe, flash disk, lecteur MP3,carte SD, etc...) succeptibles d'avoir été infectés ( mais sans les ouvrir ! ) .
# Double clique sur le raccourci UsbFix présent sur ton bureau pour lancer l'outil.
# Choisis l' option 1 ( Recherche )
# Laisse travailler l'outil et ne touche à rien pendant le scan .
# Une fois terminé, poste le rapport UsbFix.txt qui apparaitra.
Le rapport est en outre sauvegardé à la racine du disque maitre ( C:\UsbFix.txt ).
( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )
Note :
"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
Site de l'auteur > http://pagesperso-orange.fr/NosTools/usbfix.html
/!\ N'entreprends rien avec le PC sans mon autorisation et suis à la lettre les procédures qui vont suivre .
Prends bien connaisance de l'ensemble de ces procédures avant de te lancer .
Si tu as un quelconque prb n' hésite pas à m'en faire part ( évite les prises de décision hasardeuses ) .
Ne pas utiliser ce PC autrement que pour venir ici poursuivre la désinfection .
infection par support amovible ...
commence par ceci :
Télécharge UsbFix ( de C_XX, Chimay8 & Chiquitine29 ) sur ton bureau :
> http://sd-1.archive-host.com/membres/up/127028005715545653/UsbFix.exe
! Déconnecte toi d'internet et ferme toutes applications en cours !
--> Double-clique sur l' .exe pour lancer l'installation de l'outil ( ne touche pas aux paramètres d'installe ) .
Impératif :
Branche toutes tes unités externes à ton PC (clé USB, DD externe, flash disk, lecteur MP3,carte SD, etc...) succeptibles d'avoir été infectés ( mais sans les ouvrir ! ) .
# Double clique sur le raccourci UsbFix présent sur ton bureau pour lancer l'outil.
# Choisis l' option 1 ( Recherche )
# Laisse travailler l'outil et ne touche à rien pendant le scan .
# Une fois terminé, poste le rapport UsbFix.txt qui apparaitra.
Le rapport est en outre sauvegardé à la racine du disque maitre ( C:\UsbFix.txt ).
( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )
Note :
"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
Site de l'auteur > http://pagesperso-orange.fr/NosTools/usbfix.html