Sdra64.exe

slt,

Télécharge ici :

http://images.malwareremoval.com/random/RSIT.exe

random's system information tool (RSIT) par andom/random et sauvegarde-le sur le Bureau.

Double-clique sur RSIT.exe afin de lancer RSIT.

Clique Continue à l'écran Disclaimer.

Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.

Poste le contenu de log.txt (<<qui sera affiché)
ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).

NB : Les rapports sont sauvegardés dans le dossier C:\rsit

Bonjour jlpjlp ,

Merci pour ton aide et de ta rapidité !

Voici les rapports:

info.txt logfile of random's system information tool 1.06 2009-10-24 15:34:10

======Uninstall list======

-->MsiExec /X{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}
Addictive Drums-->C:\WINDOWS\unvise32.exe C:\Program Files\XLN Audio\Addictive Drums\uninstal.log
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Ad-Remover By C_XX-->"C:\Program Files\Ad-Remover\Uninstall ADR.exe"
AmpliTube Metal-->C:\Program Files\InstallShield Installation Information\{9EDEF5B1-B740-4DFF-AC16-E2428E1713E8}\setup.exe -runfromtemp -l0x0009 uninstall -removeonly
AmpliTube2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB6691DA-66D3-412E-9853-641CF7D0C35A}\Setup.exe" -l0x9 uninstall
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live ID-->MsiExec.exe /X{10A44844-4465-456E-8C97-80BDD4F68845}
BestPractice (remove only)-->"C:\Program Files\BestPractice\uninstall.exe"
BitDefender Total Security 2010-->MsiExec.exe /X{85E563C7-E45B-47AA-BF6D-34983C2BEEF8}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Classic Solitaire For Windows 2.0.1-->"C:\Program Files\ClassicSolitaire\unins000.exe"
dBpoweramp FLAC Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp FLAC Codec.dat
dBpoweramp m4a Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp m4a Codec.dat
dBpoweramp Monkeys Audio Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp Monkeys Audio Codec.dat
dBpoweramp Musepack Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp Musepack Codec.dat
dBpoweramp Music Converter-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp Music Converter.dat
dBpoweramp Ogg Vorbis Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp Ogg Vorbis Codec.dat
dBpoweramp WavPack Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp WavPack Codec.dat
dBpoweramp Windows Media Audio 10 Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp Windows Media Audio 10 Codec.dat
Diskeeper 2008 Pro Premier-->MsiExec.exe /X{4ECCF281-ED79-4EA7-AE89-5E39D3291C2A}
Driver Genius Professional Edition-->"C:\Program Files\Driver-Soft\DriverGenius\unins000.exe"
DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5.0.8.5-->"C:\Program Files\DVDFab 5\unins000.exe"
DX10-->C:\Program Files\Image-Line\DX10\uninstall.exe
Edison-->C:\Program Files\Image-Line\Edison\uninstall.exe
FL Studio 9-->C:\Program Files\Image-Line\FL Studio 9\uninstall.exe
Folder Size for Windows-->MsiExec.exe /I{FC8D21C8-7B29-4104-ADB0-FEE9CA1C7922}
Foxit Reader-->C:\Program Files\Foxit Software\Foxit Reader\Uninstall.exe
Guitar Pro 5.0-->"C:\Program Files\Guitar Pro 5\unins000.exe"
Hardcore-->C:\Program Files\Image-Line\Hardcore\uninstall.exe
Hercules Deluxe Optical Glass-->C:\Program Files\InstallShield Installation Information\{56298F72-C2CC-4FE5-ACEA-30C7A866BF4C}\setup.exe -runfromtemp -l0x040c -removeonly
HexDecCharEditor V 1.02-->"C:\WINDOWS\UNISTB32.EXE" /U "C:\Program Files\HexDecCharEditor V 1 02\UNINST.IS0" "C:\Program Files\HexDecCharEditor V 1 02\UNINST.IS1"
HijackThis 1.99.1-->C:\Documents and Settings\Xray25\Bureau\HijackThis.exe /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
IL Download Manager-->C:\Program Files\Image-Line\Downloader\uninstall.exe
IL DrumSynth Live-->C:\Program Files\Image-Line\IL DrumSynth Live\uninstall.exe
IL Gross Beat-->C:\Program Files\Image-Line\IL Gross Beat\uninstall.exe
IL Ogun-->C:\Program Files\Image-Line\IL Ogun\uninstall.exe
IL Slicex-->C:\Program Files\Image-Line\IL Slicex\uninstall.exe
ImgBurn-->"C:\Program Files\ImgBurn\uninstall.exe"
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
Java(TM) 6 Update 15-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216015FF}
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
K-Lite Codec Pack 5.2.6 (Full) BETA-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
Le Centre de Contrôle de Licences de Syncrosoft-->C:\PROGRA~1\SYNCRO~1\UNWISE.EXE C:\PROGRA~1\SYNCRO~1\INSTALL.LOG
Lupas Rename 2000 v5.0 Release-->"C:\Program Files\Lupas Rename 2000\unins000.exe"
Ma-Config.com-->MsiExec.exe /X{425FFD94-36BD-4933-881B-FE0B9DADF2B7}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Marvell Miniport Driver-->C:\Program Files\Marvell\Miniport Driver\Uninst.exe
Maxi Billard 3D-->C:\WINDOWS\unvise32.exe C:\Program Files\Micro Application\Maxi Billard 3D\uninstal.log
Maximus-->C:\Program Files\Image-Line\Maximus\uninstall.exe
MediaInfo 0.7.5.2-->C:\Program Files\MediaInfo\uninst.exe
MediaMonkey 3.0-->"C:\Program Files\MediaMonkey\unins000.exe"
Messenger Live Connector-->MsiExec.exe /I{0D959BD2-2BA9-418B-963B-7B4D1297C512}
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{72AD53CC-CCC0-3757-8480-9EE176866A7C}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA-->MsiExec.exe /I{0BD83598-C2EF-3343-847B-7D2E84599128}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7-->"C:\WINDOWS\$NtUninstallWdf01007$\spuninst\spuninst.exe"
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
Microsoft Office Live Add-in 1.4-->MsiExec.exe /I{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB974455)-->"C:\WINDOWS\ie7updates\KB974455-IE7\spuninst\spuninst.exe"
Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
Mise à jour Microsoft Office Outlook 2007 Help (KB963677)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {51EFB347-1F3D-4BAC-8B79-F056B904FE21}
Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
Mozilla Firefox (3.5.3)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (2.0.0.21)-->C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6 Service Pack 2 (KB954459)-->MsiExec.exe /I{97AA1F3C-DD64-4AA6-AEC5-F8F9F4CC21C5}
Native Instruments Service Center-->C:\PROGRA~1\NATIVE~1\SERVIC~1\UNWISE.EXE C:\PROGRA~1\NATIVE~1\SERVIC~1\INSTALL.LOG
NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
NVIDIA nView Desktop Manager-->C:\Program Files\NVIDIA Corporation\nView\nViewSetup.exe -uninstall
NVIDIA PhysX-->MsiExec.exe /X{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}
NVIDIA PureVideo Decoder-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{055FEF8E-4B86-400F-A5C6-8FAC0042DCD9}\setup.exe" -l0x40c -uninstall
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
PHASE 88 FireWire-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E65E51F4-09EF-4922-BE9A-342536604FAB}\setup.exe" -l0x40c anything
PoiZone-->C:\Program Files\Image-Line\PoiZone\uninstall.exe
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m -nrg2709
Registry Mechanic 8.0-->"C:\Program Files\Registry Mechanic\unins000.exe" /Log
Right Click Image Converter-->"C:\Program Files\Kristanix\Right Click Image Converter\uninstall.exe"
Rob Papen Albino 3-->C:\Program Files\VstPlugins\UninstalAlbino3.exe
Rob Papen Predator V1.1 b-->"C:\Program Files\vstplugins\unins000.exe"
RocketDock 1.3.5-->"C:\Program Files\RocketDock\unins000.exe"
Sacred 2-->MsiExec.exe /I{1023383E-D9F6-478C-A965-23A4657B3C9A}
Sakura-->C:\Program Files\Image-Line\Sakura\uninstall.exe
Sawer-->C:\Program Files\Image-Line\Sawer\uninstall.exe
Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB969679)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
Security Update for Microsoft Office Excel 2007 (KB969682)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780}
Security Update for Microsoft Office Outlook 2007 (KB972363)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {120BE9A0-9B09-4855-9E0C-7DEE45CB03C0}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Security Update for Microsoft Office Publisher 2007 (KB969693)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {7BE67088-1EB3-4569-8E75-DDAFBF61BC4E}
Security Update for Microsoft Office system 2007 (972581)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Security Update for Microsoft Office system 2007 (KB974234)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
Security Update for Microsoft Office Word 2007 (KB969604)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
SimSynth-->C:\Program Files\Image-Line\SimSynth\uninstall.exe
SnagIt 8-->MsiExec.exe /I{93699C3E-005E-4294-87CA-F5B7DE2CD687}
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Steinberg Cubase SX v3.1.1.944-->C:\PROGRA~1\STEINB~1\CUBASE~1\UNWISE.EXE C:\PROGRA~1\STEINB~1\CUBASE~1\INSTALL.LOG
Steinberg Hypersonic 2-->"C:\Program Files\VstPlugins\Hypersonic\Hypersonic Content\unins000.exe"
Steinberg Virtual Bassist 1.0.0-->"C:\Program Files\Vstplugins\Virtual Bassist\unins000.exe"
Sudoku-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB8D38CE-55A2-4EB8-8137-198D5C07D444}\SETUP.EXE" -l0x40c
Super Mahjong-->MsiExec.exe /I{8644D791-86EE-4797-85B1-421171B63999}
SyncroSoft Emu (Remove only)-->C:\Program Files\SyncroSoft\Pos\H2O\Uninst.exe
Sytrus-->C:\Program Files\Image-Line\Sytrus\uninstall.exe
Toxic Biohazard-->C:\Program Files\Image-Line\Toxic Biohazard\uninstall.exe
TuneUp Utilities 2009-->MsiExec.exe /I{55A29068-F2CE-456C-9148-C869879E2357}
Unlocker 1.8.5-->C:\Program Files\Unlocker\uninst.exe
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Update for Outlook 2007 Junk Email Filter (KB974810)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {C05FBAD5-A211-4E86-BB51-7E07B80C9233}
USB2.0 PC Camera-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{75438C0E-9925-412E-AD85-D0E71C6CE2ED}\Setup.exe" -l0x9
VLC media player 0.9.8a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
VSO CopyToDVD 4-->"C:\Program Files\VSO\unins000.exe"
Vuze-->C:\Program Files\Vuze\uninstall.exe
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
WinServices v2.1.2.1-->"C:\Program Files\WinTools\WinServices\unins000.exe"
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
Your Uninstaller! 2008 Version 6.0-->"C:\Program Files\Your Uninstaller 2008\unins000.exe"

======Security center information======

AV: BitDefender Antivirus
FW: BitDefender Pare-feu

======System event log======

Computer Name: ACBE5D1CA43A453
Event Code: 7036
Message: Le service Services Terminal Server est entré dans l'état : en cours d'exécution.

Record Number: 807
Source Name: Service Control Manager
Time Written: 20091017010827.000000+120
Event Type: Informations
User:

Computer Name: ACBE5D1CA43A453
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Services Terminal Server.

Record Number: 806
Source Name: Service Control Manager
Time Written: 20091017010827.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: ACBE5D1CA43A453
Event Code: 7036
Message: Le service Compatibilité avec le Changement rapide d'utilisateur est entré dans l'état : en cours d'exécution.

Record Number: 805
Source Name: Service Control Manager
Time Written: 20091017010827.000000+120
Event Type: Informations
User:

Computer Name: ACBE5D1CA43A453
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Compatibilité avec le Changement rapide d'utilisateur.

Record Number: 804
Source Name: Service Control Manager
Time Written: 20091017010827.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: ACBE5D1CA43A453
Event Code: 7036
Message: Le service Services Terminal Server est entré dans l'état : arrêté.

Record Number: 803
Source Name: Service Control Manager
Time Written: 20091017010827.000000+120
Event Type: Informations
User:

=====Application event log=====

Computer Name: ACBE5D1CA43A453
Event Code: 8
Message: Échec de la récupération de la mise à jour automatique du numéro de séquence de la liste racine tierce partie à partir de : <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> avec l'erreur : Cette connexion réseau n'existe pas.

Record Number: 378
Source Name: crypt32
Time Written: 20091016230248.000000+120
Event Type: erreur
User:

Computer Name: ACBE5D1CA43A453
Event Code: 8
Message: Échec de la récupération de la mise à jour automatique du numéro de séquence de la liste racine tierce partie à partir de : <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> avec l'erreur : Cette connexion réseau n'existe pas.

Record Number: 377
Source Name: crypt32
Time Written: 20091016230248.000000+120
Event Type: erreur
User:

Computer Name: ACBE5D1CA43A453
Event Code: 8
Message: Échec de la récupération de la mise à jour automatique du numéro de séquence de la liste racine tierce partie à partir de : <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> avec l'erreur : Cette connexion réseau n'existe pas.

Record Number: 376
Source Name: crypt32
Time Written: 20091016230248.000000+120
Event Type: erreur
User:

Computer Name: ACBE5D1CA43A453
Event Code: 8
Message: Échec de la récupération de la mise à jour automatique du numéro de séquence de la liste racine tierce partie à partir de : <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> avec l'erreur : Cette connexion réseau n'existe pas.

Record Number: 375
Source Name: crypt32
Time Written: 20091016230248.000000+120
Event Type: erreur
User:

Computer Name: ACBE5D1CA43A453
Event Code: 8
Message: Échec de la récupération de la mise à jour automatique du numéro de séquence de la liste racine tierce partie à partir de : <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> avec l'erreur : Cette connexion réseau n'existe pas.

Record Number: 374
Source Name: crypt32
Time Written: 20091016230248.000000+120
Event Type: erreur
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;%CommonProgramFiles%\Microsoft Shared\Windows Live;C:\WINDOWS\system32\WindowsPowerShell\v1.0;C:\PROGRA~1\DISKEE~1\DISKEE~1
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 23 Stepping 7, GenuineIntel
"PROCESSOR_REVISION"=1707
"NUMBER_OF_PROCESSORS"=4
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.PSC1

-----------------EOF-----------------

Logfile of random's system information tool 1.06 (written by random/random)
Run by Xray25 at 2009-10-24 15:34:07
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 427 GB (90%) free of 477 GB
Total RAM: 3070 MB (78% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\Maintenance en 1 clic.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00C6482D-C502-44C8-8409-FCE54AD9C208}]
HelperObject Class - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll [2006-05-10 49152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live ID - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-18 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-18 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - StylerToolBar - C:\Program Files\styler\TB\StylerTB.dll [2006-05-02 102400]
{381FFDE8-2394-4f90-B10D-FC6124A40F8C} - BitDefender Toolbar - C:\Program Files\BitDefender\BitDefender 2010\IEToolbar.dll [2009-10-17 128832]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"UberIcon"=C:\Program Files\UberIcon\UberIcon Manager.exe [2006-07-17 122880]
"VisualTaskTips"=C:\Windows\System32\VisualTaskTips.exe [2004-08-28 36864]
"Vistadrv"=C:\WINDOWS\system32\Vistadrive\vsdrv.exe [2006-07-30 121089]
"TransBar"=C:\WINDOWS\system32\transbar.exe [2004-08-28 139264]
"Styler"=C:\Program Files\styler\Styler.exe [2006-05-03 307200]
"BitDefender Antiphishing Helper"=C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe [2009-10-17 71152]
"BDAgent"=C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe [2009-10-17 1114536]
"InitPulsar"=C:/Program Files/Scope/app/bin/sfp.exe -s []
"H2O"=C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe [2005-12-18 307200]
"CamserviceDeluxe2"=C:\Program Files\Hercules\Deluxe Optical Glass\Camservice.exe [2007-08-10 81920]
"FixCamera"=C:\WINDOWS\FixCamera.exe [2006-12-05 20480]
"tsnp2std"=C:\WINDOWS\tsnp2std.exe [2006-12-05 262144]
"snp2std"=C:\WINDOWS\vsnp2std.exe [2006-12-05 675840]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-18 149280]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2007-01-10 1235456]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-09-22 18749440]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2009-09-23 1657448]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-09-27 13918208]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-09-27 86016]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-09-10 1312080]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WIAWizardMenu"=C:\WINDOWS\system32\sti_ci.dll [2004-08-28 678912]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"PhaseFireWireService"=C:\Program Files\Fichiers communs\TerraTec\PhaseFW\common\PhaseFWService.exe [2007-04-13 110592]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2007-01-10 1235456]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-28 25088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-10-16 190976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2004-08-28 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoUserNameInStartMenu"=1
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

======List of files/folders created in the last 1 months======

2009-10-24 15:34:07 ----D---- C:\rsit
2009-10-24 12:45:55 ----A---- C:\WINDOWS\ntbtlog.txt
2009-10-24 11:44:08 ----A---- C:\TB.txt
2009-10-24 11:43:43 ----D---- C:\ToolBar SD
2009-10-24 11:19:53 ----D---- C:\Program Files\Ad-Remover
2009-10-24 10:30:54 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-10-24 10:22:14 ----D---- C:\WINDOWS\temp
2009-10-24 10:22:12 ----A---- C:\log.txt
2009-10-24 10:22:12 ----A---- C:\ComboFix.txt
2009-10-24 09:41:42 ----D---- C:\Qoobox
2009-10-24 09:38:25 ----ASH---- C:\BOOT.BAK
2009-10-24 09:38:09 ----RASHD---- C:\cmdcons
2009-10-24 09:38:09 ----A---- C:\WINDOWS\UPGRADE.TXT
2009-10-24 09:38:07 ----D---- C:\WINDOWS\setup.pss
2009-10-24 09:37:46 ----D---- C:\WINDOWS\setupupd
2009-10-24 09:21:24 ----A---- C:\WINDOWS\system32\tmp.txt
2009-10-24 09:20:20 ----A---- C:\rapport.txt
2009-10-24 08:31:26 ----A---- C:\WINDOWS\wininit.ini
2009-10-24 08:11:58 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-10-24 08:09:19 ----D---- C:\Program Files\TeaTimer (Spybot - Search & Destroy)
2009-10-24 08:09:19 ----D---- C:\Program Files\SDHelper (Spybot - Search & Destroy)
2009-10-24 08:09:18 ----D---- C:\Program Files\Misc. Support Library (Spybot - Search & Destroy)
2009-10-24 08:09:18 ----D---- C:\Program Files\File Scanner Library (Spybot - Search & Destroy)
2009-10-24 08:07:08 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-10-24 06:28:58 ----A---- C:\WINDOWS\zip.exe
2009-10-24 06:28:58 ----A---- C:\WINDOWS\SWXCACLS.exe
2009-10-24 06:28:58 ----A---- C:\WINDOWS\SWSC.exe
2009-10-24 06:28:58 ----A---- C:\WINDOWS\SWREG.exe
2009-10-24 06:28:58 ----A---- C:\WINDOWS\sed.exe_RenameGenProc15755
2009-10-24 06:28:58 ----A---- C:\WINDOWS\PEV.exe
2009-10-24 06:28:58 ----A---- C:\WINDOWS\NIRCMD.exe
2009-10-24 06:28:58 ----A---- C:\WINDOWS\grep.exe_RenameGenProc15755
2009-10-24 06:28:37 ----D---- C:\WINDOWS\ERDNT
2009-10-24 06:15:35 ----D---- C:\GenProc
2009-10-24 05:24:56 ----D---- C:\Config.Msi
2009-10-24 04:45:03 ----D---- C:\WINDOWS\system32\CatRoot_bak
2009-10-24 04:40:52 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2009-10-24 04:40:52 ----A---- C:\WINDOWS\system32\mucltui.dll
2009-10-24 04:40:24 ----A---- C:\WINDOWS\system32\wmpns.dll
2009-10-24 04:39:19 ----D---- C:\WINDOWS\Prefetch
2009-10-24 02:31:17 ----D---- C:\WINDOWS\system32\appmgmt
2009-10-24 01:38:03 ----D---- C:\Documents and Settings\All Users\Application Data\NOS
2009-10-24 01:20:35 ----A---- C:\WINDOWS\system32\unrar.dll
2009-10-24 01:20:34 ----A---- C:\WINDOWS\avisplitter.ini
2009-10-24 01:20:33 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2009-10-24 01:20:33 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2009-10-24 01:20:33 ----A---- C:\WINDOWS\system32\xvidcore.dll
2009-10-24 01:20:31 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2009-10-24 01:20:31 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2009-10-24 01:20:30 ----D---- C:\Program Files\K-Lite Codec Pack
2009-10-23 21:52:38 ----D---- C:\Program Files\Microsoft Works
2009-10-23 21:52:26 ----D---- C:\Program Files\Microsoft Visual Studio
2009-10-23 21:52:26 ----D---- C:\Program Files\Fichiers communs\DESIGNER
2009-10-23 21:51:59 ----D---- C:\Program Files\Microsoft.NET
2009-10-23 21:49:51 ----D---- C:\WINDOWS\SHELLNEW
2009-10-23 21:49:37 ----D---- C:\Program Files\Microsoft Office
2009-10-23 21:49:37 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-10-22 12:43:21 ----N---- C:\WINDOWS\system32\spmsg2.dll
2009-10-22 12:43:20 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2009-10-22 10:52:00 ----A---- C:\WINDOWS\system32\Pbpr01sw.dll
2009-10-22 08:29:51 ----D---- C:\Program Files\Microsoft Games
2009-10-21 18:57:54 ----D---- C:\Documents and Settings\Xray25\Application Data\ImgBurn
2009-10-21 05:52:58 ----A---- C:\WINDOWS\system32\TuneUpDefragService.exe
2009-10-21 01:35:54 ----A---- C:\WINDOWS\SWPRODPB.INI
2009-10-21 01:31:53 ----A---- C:\WINDOWS\w32dasm8.ini
2009-10-21 01:29:51 ----D---- C:\Program Files\HexDecCharEditor V 1 02
2009-10-21 01:29:51 ----A---- C:\WINDOWS\UNISTB32.EXE
2009-10-19 02:55:21 ----D---- C:\Program Files\Games
2009-10-19 02:47:35 ----D---- C:\Program Files\ClassicSolitaire
2009-10-19 02:35:31 ----D---- C:\Program Files\SDLL
2009-10-19 02:04:05 ----D---- C:\WINDOWS\506DDFBE983F4BC384B865F423B2D798.TMP
2009-10-18 22:42:23 ----D---- C:\Program Files\Deep Silver
2009-10-18 21:21:10 ----RHD---- C:\Documents and Settings\Xray25\Application Data\SecuROM
2009-10-18 21:21:09 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2009-10-18 21:20:26 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2009-10-18 21:20:26 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2009-10-18 21:20:25 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2009-10-18 21:20:24 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2009-10-18 21:20:24 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2009-10-18 21:20:24 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2009-10-18 21:20:22 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2009-10-18 21:20:22 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2009-10-18 21:20:21 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2009-10-18 21:20:20 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2009-10-18 21:20:19 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2009-10-18 21:20:19 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2009-10-18 21:20:18 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2009-10-18 21:20:17 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2009-10-18 21:20:16 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2009-10-18 21:20:16 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2009-10-18 21:20:14 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2009-10-18 21:20:14 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2009-10-18 21:20:14 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2009-10-18 21:20:13 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2009-10-18 21:20:10 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2009-10-18 21:20:10 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2009-10-18 21:20:09 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2009-10-18 21:17:52 ----D---- C:\WINDOWS\Logs
2009-10-18 21:17:51 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2009-10-18 21:17:51 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2009-10-18 20:55:21 ----D---- C:\WINDOWS\95FC26FB19FD4A96BBB1B1062E8648F5.TMP
2009-10-18 07:29:27 ----N---- C:\WINDOWS\system32\spmsgXP_2k3.dll
2009-10-18 07:29:24 ----HDC---- C:\WINDOWS\$NtUninstallWdf01007$
2009-10-18 07:29:16 ----A---- C:\WINDOWS\system32\SynTPCo4.dll
2009-10-18 07:29:16 ----A---- C:\WINDOWS\system32\SynTPAPI.dll
2009-10-18 07:29:16 ----A---- C:\WINDOWS\system32\SynCtrl.dll
2009-10-18 07:29:16 ----A---- C:\WINDOWS\system32\SynCOM.dll
2009-10-18 07:29:15 ----A---- C:\WINDOWS\system32\WdfCoInstaller01007.dll
2009-10-18 07:27:43 ----A---- C:\WINDOWS\vncutil.exe
2009-10-18 07:27:42 ----A---- C:\WINDOWS\system32\RtkCoInstXP.dll
2009-10-18 07:27:42 ----A---- C:\WINDOWS\RtkAudioService.exe
2009-10-18 07:25:32 ----D---- C:\Program Files\Marvell
2009-10-18 07:21:11 ----A---- C:\WINDOWS\system32\CSVer.dll
2009-10-18 07:10:32 ----D---- C:\Mes drivers
2009-10-18 07:06:39 ----D---- C:\Program Files\Driver-Soft
2009-10-18 06:36:20 ----A---- C:\WINDOWS\system32\DSETUP.dll
2009-10-18 06:36:20 ----A---- C:\WINDOWS\system32\DolbyHph.dll
2009-10-18 06:36:20 ----A---- C:\WINDOWS\system32\atl71.dll
2009-10-18 06:03:26 ----D---- C:\WINDOWS\Sun
2009-10-18 05:51:55 ----D---- C:\Documents and Settings\Xray25\Application Data\Azureus
2009-10-18 05:51:55 ----D---- C:\Documents and Settings\All Users\Application Data\Azureus
2009-10-18 05:51:34 ----D---- C:\Program Files\Vuze
2009-10-18 05:50:09 ----A---- C:\WINDOWS\system32\javaws.exe
2009-10-18 05:50:09 ----A---- C:\WINDOWS\system32\javaw.exe
2009-10-18 05:50:09 ----A---- C:\WINDOWS\system32\java.exe
2009-10-18 05:50:09 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-10-18 05:49:56 ----D---- C:\Program Files\Java
2009-10-18 05:49:26 ----D---- C:\Documents and Settings\Xray25\Application Data\Sun
2009-10-18 03:23:15 ----D---- C:\Documents and Settings\Xray25\Application Data\dvdcss
2009-10-17 20:03:47 ----D---- C:\WINDOWS\system32\DLL to put in System32
2009-10-17 19:09:21 ----A---- C:\WINDOWS\LiveBilliards.INI
2009-10-17 17:35:59 ----A---- C:\WINDOWS\amcap.exe
2009-10-17 17:35:58 ----A---- C:\WINDOWS\WindowsXP-KB822603-x86.exe
2009-10-17 17:35:58 ----A---- C:\WINDOWS\FixCamera.exe
2009-10-17 17:35:54 ----A---- C:\WINDOWS\vsnp2std.exe
2009-10-17 17:35:54 ----A---- C:\WINDOWS\tsnp2std.exe
2009-10-17 17:35:54 ----A---- C:\WINDOWS\snp2std.ini
2009-10-17 17:35:50 ----A---- C:\WINDOWS\vsnp2std.dll
2009-10-17 17:35:50 ----A---- C:\WINDOWS\rsnp2std.dll
2009-10-17 17:35:49 ----D---- C:\Program Files\Fichiers communs\snp2std
2009-10-17 17:35:49 ----A---- C:\WINDOWS\system32\csnp2std.dll
2009-10-17 17:32:10 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2009-10-17 17:32:05 ----A---- C:\WINDOWS\system32\vsnpstd3.dll
2009-10-17 17:32:05 ----A---- C:\WINDOWS\system32\csnpstd3.dll
2009-10-17 17:32:05 ----A---- C:\WINDOWS\snpstd3.ini
2009-10-17 17:31:28 ----A---- C:\WINDOWS\ffmpeg.exe
2009-10-17 17:31:23 ----D---- C:\WINDOWS\system32\HWC HD
2009-10-17 17:31:22 ----D---- C:\Program Files\Hercules
2009-10-17 17:29:45 ----D---- C:\WINDOWS\Drivers
2009-10-17 17:12:08 ----D---- C:\Documents and Settings\Xray25\Application Data\Juce VST Host
2009-10-17 16:35:07 ----D---- C:\Program Files\Outsim
2009-10-17 16:33:45 ----D---- C:\Program Files\Image-Line
2009-10-17 07:23:45 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2009-10-17 07:23:44 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2009-10-17 07:23:44 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2009-10-17 07:23:44 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2009-10-17 07:23:43 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2009-10-17 07:23:43 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2009-10-17 07:23:42 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2009-10-17 07:23:42 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2009-10-17 07:23:41 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2009-10-17 07:23:41 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2009-10-17 07:23:40 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2009-10-17 07:23:38 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2009-10-17 07:23:38 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2009-10-17 07:23:36 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2009-10-17 07:23:35 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2009-10-17 07:23:34 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2009-10-17 07:23:34 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2009-10-17 07:23:33 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2009-10-17 07:23:33 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2009-10-17 07:23:33 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2009-10-17 07:23:32 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2009-10-17 07:23:32 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2009-10-17 07:23:32 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2009-10-17 07:23:31 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2009-10-17 07:23:31 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2009-10-17 07:23:22 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2009-10-17 07:23:22 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2009-10-17 07:23:22 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2009-10-17 07:23:21 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2009-10-17 07:23:20 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2009-10-17 07:23:19 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2009-10-17 07:23:19 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2009-10-17 07:23:18 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2009-10-17 07:23:18 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2009-10-17 07:23:16 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2009-10-17 07:23:11 ----D---- C:\WINDOWS\system32\DirectX
2009-10-17 05:59:12 ----D---- C:\Program Files\MediaMonkey
2009-10-17 05:45:26 ----D---- C:\Program Files\Microsoft
2009-10-17 05:45:05 ----D---- C:\Program Files\Windows Live SkyDrive
2009-10-17 05:41:32 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-10-17 05:39:47 ----D---- C:\Documents and Settings\Xray25\Application Data\Macromedia
2009-10-17 05:23:52 ----D---- C:\Sur le bureau
2009-10-17 04:41:58 ----D---- C:\Program Files\Fichiers communs\Native Instruments
2009-10-17 04:41:23 ----D---- C:\Program Files\Native Instruments
2009-10-17 04:27:52 ----D---- C:\Program Files\DigiDesign
2009-10-17 04:27:28 ----D---- C:\Program Files\IK Multimedia
2009-10-17 04:07:04 ----D---- C:\Documents and Settings\Xray25\Application Data\vlc
2009-10-17 03:54:21 ----D---- C:\Documents and Settings\Xray25\Application Data\Steinberg
2009-10-17 03:50:36 ----D---- C:\Program Files\Fichiers communs\Digidesign
2009-10-17 03:50:33 ----D---- C:\Program Files\XLN Audio
2009-10-17 03:45:49 ----A---- C:\WINDOWS\system32\rmbe3260.dll
2009-10-17 03:45:49 ----A---- C:\WINDOWS\system32\ra32sipr.dll
2009-10-17 03:45:49 ----A---- C:\WINDOWS\system32\ra32dnet.dll
2009-10-17 03:45:49 ----A---- C:\WINDOWS\system32\ra3228_8.dll
2009-10-17 03:45:49 ----A---- C:\WINDOWS\system32\ra3214_4.dll
2009-10-17 03:45:49 ----A---- C:\WINDOWS\system32\pngu3263.dll
2009-10-17 03:45:49 ----A---- C:\WINDOWS\system32\pneng50.dll
2009-10-17 03:45:49 ----A---- C:\WINDOWS\system32\pncrt.dll
2009-10-17 03:45:49 ----A---- C:\WINDOWS\system32\pnc3250.dll
2009-10-17 03:45:49 ----A---- C:\WINDOWS\system32\encdnet.dll
2009-10-17 03:45:49 ----A---- C:\WINDOWS\system32\decdnet.dll
2009-10-17 03:35:01 ----A---- C:\WINDOWS\system32\Synsopos.exe
2009-10-17 03:34:58 ----N---- C:\WINDOWS\system32\SynsoLChk.dll
2009-10-17 03:34:58 ----N---- C:\WINDOWS\system32\SYNSOACC.dll
2009-10-17 03:34:57 ----D---- C:\Program Files\Syncrosoft
2009-10-17 03:32:42 ----D---- C:\Program Files\Steinberg
2009-10-17 03:13:56 ----A---- C:\WINDOWS\unvise32.exe
2009-10-17 03:13:49 ----D---- C:\Program Files\Micro Application
2009-10-17 03:13:34 ----A---- C:\WINDOWS\NAVIGMA.INI
2009-10-17 03:06:59 ----D---- C:\Documents and Settings\Xray25\Application Data\AccurateRip
2009-10-17 03:06:58 ----A---- C:\WINDOWS\system32\SpoonUninstall.exe
2009-10-17 03:06:54 ----D---- C:\Program Files\Illustrate
2009-10-17 03:02:48 ----D---- C:\Program Files\DAEMON Tools Lite
2009-10-17 03:00:46 ----D---- C:\Documents and Settings\Xray25\Application Data\DAEMON Tools
2009-10-17 02:59:39 ----D---- C:\Program Files\DVDFab 5
2009-10-17 02:46:23 ----A---- C:\WINDOWS\system32\TUProgSt.exe
2009-10-17 02:46:20 ----D---- C:\Documents and Settings\Xray25\Application Data\TuneUp Software
2009-10-17 02:46:06 ----D---- C:\Documents and Settings\All Users\Application Data\TuneUp Software
2009-10-17 02:46:05 ----D---- C:\Program Files\TuneUp Utilities 2009
2009-10-17 02:45:50 ----SHD---- C:\Documents and Settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}
2009-10-17 02:42:19 ----D---- C:\Program Files\Guitar Pro 5
2009-10-17 02:41:17 ----D---- C:\Program Files\BestPractice
2009-10-17 02:38:02 ----A---- C:\WINDOWS\system32\STKIT432.DLL
2009-10-17 02:37:57 ----D---- C:\Program Files\Registry Mechanic
2009-10-17 02:33:59 ----D---- C:\Diskeeper
2009-10-17 02:16:45 ----D---- C:\Program Files\VstPlugins
2009-10-17 02:15:38 ----D---- C:\Program Files\Scope
2009-10-17 02:10:40 ----D---- C:\Program Files\VideoLAN
2009-10-17 02:10:01 ----D---- C:\Program Files\WinTools
2009-10-17 02:09:49 ----D---- C:\Program Files\Unlocker
2009-10-17 02:07:51 ----D---- C:\Documents and Settings\Xray25\Application Data\Malwarebytes
2009-10-17 02:07:46 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-10-17 02:07:46 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-10-17 02:07:18 ----D---- C:\Program Files\CCleaner
2009-10-17 02:02:20 ----D---- C:\Documents and Settings\Xray25\Application Data\Thunderbird
2009-10-17 02:02:16 ----D---- C:\Program Files\Mozilla Thunderbird
2009-10-17 02:00:43 ----D---- C:\Documents and Settings\All Users\Application Data\TechSmith
2009-10-17 02:00:40 ----D---- C:\Program Files\TechSmith
2009-10-17 01:56:52 ----D---- C:\Program Files\Kristanix
2009-10-17 01:55:44 ----D---- C:\Program Files\ImgBurn
2009-10-17 01:53:47 ----D---- C:\Documents and Settings\Xray25\Application Data\Vso
2009-10-17 01:53:47 ----A---- C:\Documents and Settings\Xray25\Application Data\ezpinst.exe
2009-10-17 01:53:40 ----D---- C:\Program Files\VSO
2009-10-17 01:52:48 ----D---- C:\Program Files\MediaInfo
2009-10-17 01:52:40 ----D---- C:\Program Files\Lupas Rename 2000
2009-10-17 01:48:07 ----D---- C:\Program Files\Foxit Software
2009-10-17 01:47:54 ----D---- C:\Program Files\FolderSize
2009-10-17 01:30:06 ----D---- C:\Documents and Settings\All Users\Application Data\Diskeeper Corporation
2009-10-17 01:30:05 ----D---- C:\Program Files\Diskeeper Corporation
2009-10-17 01:22:22 ----D---- C:\Program Files\RocketDock
2009-10-17 01:13:32 ----A---- C:\WINDOWS\system32\DICoInst.dll
2009-10-17 01:13:31 ----D---- C:\Program Files\TerraTec
2009-10-17 01:13:31 ----D---- C:\Program Files\Fichiers communs\TerraTec
2009-10-17 00:48:26 ----D---- C:\Documents and Settings\Xray25\Application Data\Corel
2009-10-17 00:48:21 ----D---- C:\Documents and Settings\All Users\Application Data\Corel
2009-10-17 00:46:29 ----D---- C:\Program Files\Fichiers communs\Corel
2009-10-17 00:43:43 ----D---- C:\Program Files\Corel
2009-10-17 00:43:41 ----D---- C:\Documents and Settings\Xray25\Application Data\InstallShield
2009-10-17 00:37:38 ----D---- C:\Program Files\Trend Micro
2009-10-16 23:02:58 ----D---- C:\WINDOWS\system32\AGEIA
2009-10-16 23:02:58 ----D---- C:\Program Files\AGEIA Technologies
2009-10-16 23:02:51 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2009-10-16 23:02:50 ----D---- C:\Documents and Settings\All Users\Application Data\NVIDIA Corporation
2009-10-16 23:02:42 ----D---- C:\Program Files\NVIDIA Corporation
2009-10-16 23:01:49 ----D---- C:\NVIDIA
2009-10-16 22:52:50 ----D---- C:\Program Files\ma-config.com
2009-10-16 22:52:50 ----D---- C:\Documents and Settings\All Users\Application Data\ma-config.com
2009-10-16 22:11:54 ----D---- C:\Documents and Settings\Xray25\Application Data\Mozilla
2009-10-16 22:11:47 ----D---- C:\Program Files\Mozilla Firefox
2009-10-16 22:07:19 ----D---- C:\Program Files\Microsoft Silverlight
2009-10-16 22:04:22 ----D---- C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
2009-10-16 22:03:56 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2009-10-16 21:57:58 ----D---- C:\Documents and Settings\Xray25\Application Data\WinRAR
2009-10-16 21:38:01 ----D---- C:\WINDOWS\ie7updates
2009-10-16 21:31:51 ----D---- C:\WINDOWS\system32\XPSViewer
2009-10-16 21:31:49 ----D---- C:\Program Files\MSBuild
2009-10-16 21:31:48 ----D---- C:\WINDOWS\system32\en-US
2009-10-16 21:31:44 ----D---- C:\Program Files\Reference Assemblies
2009-10-16 21:31:12 ----N---- C:\WINDOWS\system32\prntvpt.dll
2009-10-16 21:31:11 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2009-10-16 21:31:11 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2009-10-16 21:27:11 ----D---- C:\WINDOWS\nview
2009-10-16 21:27:11 ----A---- C:\WINDOWS\system32\nvuninst.exe
2009-10-16 21:27:11 ----A---- C:\WINDOWS\system32\nvudisp.exe
2009-10-16 21:26:15 ----D---- C:\WINDOWS\system32\windowspowershell
2009-10-16 21:16:09 ----A---- C:\WINDOWS\system32\h323log.txt
2009-10-16 21:15:29 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-10-16 21:13:32 ----A---- C:\WINDOWS\system32\usbui.dll
2009-10-16 21:12:18 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-10-16 21:12:17 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-10-16 21:12:17 ----A---- C:\WINDOWS\ODBCINST.INI
2009-10-16 21:12:14 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2009-10-16 21:12:14 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-10-16 21:12:14 ----D---- C:\Program Files\Fichiers communs
2009-10-16 21:12:14 ----D---- C:\Program Files
2009-10-16 21:12:12 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-10-16 21:12:12 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-10-16 21:12:12 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-10-16 21:12:09 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-10-16 21:12:09 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-10-16 21:12:09 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-10-16 21:12:09 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-10-16 21:12:09 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-10-16 21:12:09 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-10-16 21:12:09 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-10-16 21:12:09 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-10-16 21:12:09 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-10-16 21:12:09 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-10-16 21:12:08 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-10-16 21:12:08 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-10-16 21:12:06 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-10-16 21:12:06 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-10-16 21:12:06 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-10-16 21:12:06 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-10-16 21:12:06 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-10-16 21:12:06 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-10-16 21:12:06 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-10-16 21:12:04 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-10-16 21:12:04 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-10-16 21:12:04 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-10-16 21:12:04 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-10-16 21:12:03 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-10-16 21:12:01 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2009-10-16 21:12:01 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2009-10-16 21:12:01 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2009-10-16 21:12:01 ----RA---- C:\WINDOWS\system32\kbdro.dll
2009-10-16 21:12:01 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2009-10-16 21:12:01 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2009-10-16 21:12:01 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2009-10-16 21:12:01 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2009-10-16 21:12:01 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2009-10-16 21:12:01 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2009-10-16 21:12:01 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2009-10-16 21:12:01 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2009-10-16 21:12:01 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2009-10-16 21:11:55 ----A---- C:\WINDOWS\system32\irclass.dll
2009-10-16 21:11:55 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-10-16 21:11:55 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-10-16 21:11:54 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-10-16 21:11:54 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-10-16 21:11:52 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-10-16 21:11:51 ----A---- C:\WINDOWS\system32\batt.dll
2009-10-16 21:11:51 ----A---- C:\WINDOWS\notepad.exe
2009-10-16 21:11:50 ----A---- C:\WINDOWS\system32\storprop.dll
2009-10-16 21:11:45 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2009-10-16 21:09:57 ----D---- C:\WINDOWS\system32\CatRoot2
2009-10-16 21:09:57 ----D---- C:\WINDOWS\system32\CatRoot
2009-10-16 21:09:51 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-10-16 21:09:36 ----SHD---- C:\System Volume Information
2009-10-16 21:09:36 ----D---- C:\Documents and Settings
2009-10-16 21:08:39 ----RASH---- C:\boot.ini
2009-10-16 21:07:58 ----D---- C:\WINDOWS\system32\Lang
2009-10-16 21:05:33 ----SHD---- C:\WINDOWS\Installer
2009-10-16 21:05:33 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-10-16 21:05:33 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-10-16 21:05:33 ----RSD---- C:\WINDOWS\Fonts
2009-10-16 21:05:33 ----HD---- C:\WINDOWS\inf
2009-10-16 21:05:33 ----D---- C:\WINDOWS\WinSxS
2009-10-16 21:05:33 ----D---- C:\WINDOWS\Web
2009-10-16 21:05:33 ----D---- C:\WINDOWS\WBEM
2009-10-16 21:05:33 ----D---- C:\WINDOWS\twain_32
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\wins
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\wbem
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\usmt
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\spool
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\ShellExt
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\Setup
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\ras
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\PreInstall
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\oobe
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\npp
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\mui
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\inetsrv
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\IME
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\icsxml
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\ias
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\fr-fr
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\export
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\en
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\drivers
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\dhcp
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\config
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\3com_dmi
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\3076
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\2052
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\1054
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\1042
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\1041
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\1037
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\1036
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\1033
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\1031
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\1028
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32\1025
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system32
2009-10-16 21:05:33 ----D---- C:\WINDOWS\system
2009-10-16 21:05:33 ----D---- C:\WINDOWS\security
2009-10-16 21:05:33 ----D---- C:\WINDOWS\Resources
2009-10-16 21:05:33 ----D---- C:\WINDOWS\repair
2009-10-16 21:05:33 ----D---- C:\WINDOWS\Provisioning
2009-10-16 21:05:33 ----D---- C:\WINDOWS\PeerNet
2009-10-16 21:05:33 ----D---- C:\WINDOWS\pchealth
2009-10-16 21:05:33 ----D---- C:\WINDOWS\Offline Web Pages
2009-10-16 21:05:33 ----D---- C:\WINDOWS\NLDRV
2009-10-16 21:05:33 ----D---- C:\WINDOWS\Network Diagnostic
2009-10-16 21:05:33 ----D---- C:\WINDOWS\mui
2009-10-16 21:05:33 ----D---- C:\WINDOWS\msapps
2009-10-16 21:05:33 ----D---- C:\WINDOWS\msagent
2009-10-16 21:05:33 ----D---- C:\WINDOWS\Media
2009-10-16 21:05:33 ----D---- C:\WINDOWS\java
2009-10-16 21:05:33 ----D---- C:\WINDOWS\ime
2009-10-16 21:05:33 ----D---- C:\WINDOWS\Help
2009-10-16 21:05:33 ----D---- C:\WINDOWS\Driver Cache
2009-10-16 21:05:33 ----D---- C:\WINDOWS\Debug
2009-10-16 21:05:33 ----D---- C:\WINDOWS\Cursors
2009-10-16 21:05:33 ----D---- C:\WINDOWS\Connection Wizard
2009-10-16 21:05:33 ----D---- C:\WINDOWS\Config
2009-10-16 21:05:33 ----D---- C:\WINDOWS\AppPatch
2009-10-16 21:05:33 ----D---- C:\WINDOWS\addins
2009-10-16 21:05:33 ----D---- C:\WINDOWS
2009-10-16 21:03:19 ----SHD---- C:\RECYCLER
2009-10-16 21:00:17 ----D---- C:\Documents and Settings\Xray25\Application Data\URSoft
2009-10-16 21:00:16 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-10-16 21:00:13 ----D---- C:\Program Files\Your Uninstaller 2008
2009-10-16 20:54:09 ----D---- C:\WINDOWS\system32\fr
2009-10-16 20:54:09 ----D---- C:\WINDOWS\system32\bits
2009-10-16 20:54:09 ----D---- C:\WINDOWS\l2schemas
2009-10-16 20:54:09 ----D---- C:\Program Files\msn
2009-10-16 20:51:00 ----N

Télécharger OAD (Outil d'Aide au Diagnostic) < http://sosvirus.changelog.fr/OAD.exe >
→ Enregistre-le sur ton bureau
→ Lancer 'OAD.exe' en faisant un double clique sur le fichier
→ Saisir la valeur recherchée -> ' sdra64 ' ( fait un copier/coller )
→ Type de recherche : sélectionner l'option 6 puis valide [entrée]
→ OAD va maintenant rechercher le fichier.
→ Laisse-le travailler jusqu'à ce qu'il en ait terminé.
→ Suivant la taille des disques durs, cette recherche peut prendre plusieurs minutes.

___________________

• Télécharge et installe
http://pagesperso-orange.fr/NosTools/Chiquitine29/UsbFix.exe
https://www.androidworld.fr/

par Chiquitine29

(!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectées sans les ouvrir

• Double clic sur le raccourci UsbFix présent sur ton bureau .

• Au menu principal choisis l'option " F " pour français et tape sur [entrée] .

• Au second menu Choisis l'option " 1 " (recherche) et tape sur [entrée]

• Laisse travailler l'outil.

• Ensuite poste le rapport UsbFix.txt qui apparaitra.

• Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

• Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

• Tuto : http://pagesperso-orange.fr/NosTools/usbfix.html

Voici les rapports :

24/10/2009 ---- 15:56:37,84

----------------------------------
§§§§§§ [sdra64.exe] §§§§§§
----------------------------------
[X] Registre
[ ] Fichier (rapide)
[ ] Fichier (disque systeme)
[X] Fichier (complete)

********************
[Registre]
********************

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,C:\\WINDOWS\\system32\\sdra64.exe,"

*******************
[Fichier]
*******************

c:\Qoobox\Quarantine\C\WINDOWS\system32\sdra64.exe.vir

*********************
[Même date]
*********************

C:\Ad-Report-SCAN[1].log
C:\boot.ini
C:\cmdcons
C:\ComboFix.txt
C:\Config.Msi
C:\GenProc
C:\log.txt
C:\pagefile.sys
C:\Program
C:\Qoobox
C:\rapport.txt
C:\rsit
C:\TB.txt
C:\ToolBar
C:\WINDOWS
C:\WINDOWS\.
C:\WINDOWS\..
C:\WINDOWS\$hf_mig$
C:\WINDOWS\0.log
C:\WINDOWS\addins
C:\WINDOWS\AppPatch
C:\WINDOWS\assembly
C:\WINDOWS\bootstat.dat
C:\WINDOWS\Downloaded
C:\WINDOWS\EHome
C:\WINDOWS\ERDNT
C:\WINDOWS\Fonts
C:\WINDOWS\Help
C:\WINDOWS\ime
C:\WINDOWS\inf
C:\WINDOWS\Installer
C:\WINDOWS\l2schemas
C:\WINDOWS\Media
C:\WINDOWS\msagent
C:\WINDOWS\Network
C:\WINDOWS\ntbtlog.txt
C:\WINDOWS\PeerNet
C:\WINDOWS\Prefetch
C:\WINDOWS\SchedLgU.Txt
C:\WINDOWS\setup.pss
C:\WINDOWS\setupupd
C:\WINDOWS\srchasst
C:\WINDOWS\Sti_Trace.log
C:\WINDOWS\system
C:\WINDOWS\system.ini
C:\WINDOWS\system32
C:\WINDOWS\Tasks
C:\WINDOWS\temp
C:\WINDOWS\UPGRADE.TXT
C:\WINDOWS\wiadebug.log
C:\WINDOWS\wiaservc.log
C:\WINDOWS\WindowsUpdate.log
C:\WINDOWS\wininit.ini
C:\WINDOWS\WinSxS
C:\WINDOWS\system32\.
C:\WINDOWS\system32\..
C:\WINDOWS\system32\amcompat.tlb
C:\WINDOWS\system32\appmgmt
C:\WINDOWS\system32\bits
C:\WINDOWS\system32\CatRoot
C:\WINDOWS\system32\CatRoot2
C:\WINDOWS\system32\CatRoot_bak
C:\WINDOWS\system32\Com
C:\WINDOWS\system32\config
C:\WINDOWS\system32\d3d9caps.dat
C:\WINDOWS\system32\dllcache
C:\WINDOWS\system32\drivers
C:\WINDOWS\system32\FNTCACHE.DAT
C:\WINDOWS\system32\fr
C:\WINDOWS\system32\fr-fr
C:\WINDOWS\system32\inetsrv
C:\WINDOWS\system32\KGyGaAvL.sys
C:\WINDOWS\system32\mapisvc.inf
C:\WINDOWS\system32\npp
C:\WINDOWS\system32\nscompat.tlb
C:\WINDOWS\system32\NvApps.xml
C:\WINDOWS\system32\oobe
C:\WINDOWS\system32\perfc009.dat
C:\WINDOWS\system32\perfc00C.dat
C:\WINDOWS\system32\perfh009.dat
C:\WINDOWS\system32\perfh00C.dat
C:\WINDOWS\system32\PerfStringBackup.INI
C:\WINDOWS\system32\Restore
C:\WINDOWS\system32\rezumatenoi.dat
C:\WINDOWS\system32\RTCOM
C:\WINDOWS\system32\Setup
C:\WINDOWS\system32\spdwnwxp.log
C:\WINDOWS\system32\tmp.txt
C:\WINDOWS\system32\user_gensett.xml
C:\WINDOWS\system32\usmt
C:\WINDOWS\system32\wbem
C:\WINDOWS\system32\wpa.dbl
C:\WINDOWS\system32\drivers\.
C:\WINDOWS\system32\drivers\..
C:\WINDOWS\system32\drivers\etc

----------------------------------
§§§§§ Fin Rapport §§§§§
----------------------------------

############################## | UsbFix V6.044 |

User : Xray25 (Administrateurs) # ACBE5D1CA43A453
Update on 22/10/2009 by Chiquitine29, C_XX & Chimay8
Start at: 16:02:42 | 24/10/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Processeur Intel Pentium III
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 7.0.5730.11
Windows Firewall Status : Disabled
AV : BitDefender Antivirus 13.0.16 [ Enabled | Updated ]
FW : BitDefender Pare-feu[ Enabled ]13.0.16

C:\ -> Disque fixe local # 465,75 Go (417,07 Go free) # NTFS
D:\ -> Disque fixe local # 298,08 Go (122,14 Go free) [Slave] # NTFS
E:\ -> Disque fixe local # 189,92 Go (57,55 Go free) [Slave 2] # NTFS
F:\ -> Disque CD-ROM
G:\ -> Disque CD-ROM
H:\ -> Disque amovible

############################## | Processus actifs |

C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\UberIcon\UberIcon Manager.exe
C:\Program Files\styler\Styler.exe
C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe
C:\Program Files\Scope\app\bin\sfp.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
C:\Program Files\Hercules\Deluxe Optical Glass\Camservice.exe
C:\WINDOWS\FixCamera.exe
C:\WINDOWS\tsnp2std.exe
C:\WINDOWS\vsnp2std.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Fichiers communs\TerraTec\PhaseFW\common\PhaseFWService.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\FolderSize\FolderSizeSvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## | Fichiers # Dossiers infectieux |

################## | Registre # Clés Run infectieuses |

[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableRegistryTools"
[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDrives"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDrives"

################## | Registre # Mountpoints2 |

################## | Suspect | https://www.virustotal.com/gui/ |

C:\WINDOWS\System32\drivers\SkyNET.sys

################## | Cracks / Keygens / Serials |

"E:\Images jeux\Doom 3 Fr\Crack\Doom3.exe"
17/11/2006 08:25 |Size 5427200 |Crc32 ae52b677 |Md5 bb23c474e30335ed2ab41fe1237505ba

"E:\Jeux\Oblivion.The.Elder.Scrolls.4.FR + crack. By Azzuro\Crack\Oblivion.exe"
17/11/2006 22:14 |Size 7158784 |Crc32 29b0a292 |Md5 87bf3ed14c00f0a8669ec361adb472dc

################## | ! Fin du rapport # UsbFix V6.044 ! |

J'ai trouvé ceci , si ça peut t'aider :

http://www.avira.com/fr/threats/section/fulldetails/id_vir/4543/tr_spy.zbot.9164.1.html

Je reste dispo , je ne quitte pas.

Aucune progression malgré mes recherches, toujours en attente,
Bonne nuit!

ok vire le dossier quarantine . Il est situé dans c puis qoobox. Ensuite colle un rapport avec usbfix option 2 ( nettoyage ) . Puis remets un rapport malwarebyte (analyse rapidé)

Bonjour jlpjlp,

############################## | UsbFix V6.044 |

User : Xray25 (Administrateurs) # ACBE5D1CA43A453
Update on 22/10/2009 by Chiquitine29, C_XX & Chimay8
Start at: 23:23:15 | 26/10/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Processeur Intel Pentium III
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 7.0.5730.11
Windows Firewall Status : Disabled
AV : BitDefender Antivirus 13.0.16 [ (!) Disabled | Updated ]
FW : BitDefender Pare-feu[ Enabled ]13.0.16

C:\ -> Disque fixe local # 465,75 Go (423,49 Go free) # NTFS
F:\ -> Disque CD-ROM
G:\ -> Disque CD-ROM
H:\ -> Disque amovible

############################## | Processus actifs |

C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\FolderSize\FolderSizeSvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## | Fichiers # Dossiers infectieux |

################## | Registre # Clés Run infectieuses |

Supprimé ! [HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableRegistryTools"
Supprimé ! [HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDrives"
Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDrives"

################## | Registre # Mountpoints2 |

################## | Listing des fichiers présent |

[16/10/2009 18:20|--a------|0] C:\AUTOEXEC.BAT
[16/10/2009 18:16|--ahs----|212] C:\BOOT.BAK
[24/10/2009 08:38|-rahs----|293] C:\boot.ini
[28/08/2001 14:00|-rahs----|4952] C:\Bootfont.bin
[13/04/2008 11:32|-r-hs----|263504] C:\cmldr
[16/10/2009 18:20|--a------|0] C:\CONFIG.SYS
[16/10/2009 18:20|-rahs----|0] C:\IO.SYS
[16/10/2009 18:20|-rahs----|0] C:\MSDOS.SYS
[13/04/2008 09:43|-rahs----|47564] C:\NTDETECT.COM
[13/04/2008 11:31|-rahs----|252240] C:\ntldr
[?|?|?] C:\pagefile.sys
[26/10/2009 23:24|--a------|2793] C:\UsbFix.txt

################## | Vaccination |

# C:\autorun.inf -> Folder created by UsbFix.

################## | Suspect | https://www.virustotal.com/gui/ |

C:\WINDOWS\System32\drivers\SkyNET.sys

################## | Cracks / Keygens / Serials |

"C:\Program Files\BitDefender\BitDefender 2010\uninstall_patch.exe"
13/05/2009 17:57 |Size 309122 |Crc32 9ea0401d |Md5 b1c18523903068282fbf409e1ef479fa

################## | ! Fin du rapport # UsbFix V6.044 ! |

Malwarebytes' Anti-Malware 1.41
Version de la base de données: 3023
Windows 5.1.2600 Service Pack 2

26/10/2009 23:48:11
mbam-log-2009-10-26 (23-48-06).txt

Type de recherche: Examen rapide
Eléments examinés: 95684
Temps écoulé: 2 minute(s), 55 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 4
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 3
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 3

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) -> No action taken.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) -> No action taken.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) -> No action taken.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) -> No action taken.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\UID (Malware.Trace) -> No action taken.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.FakeAlert) -> Data: c:\windows\system32\sdra64.exe -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.FakeAlert) -> Data: system32\sdra64.exe -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Hijack.Userinit) -> Bad: (C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\sdra64.exe,) Good: (Userinit.exe) -> No action taken.

Dossier(s) infecté(s):
C:\WINDOWS\system32\lowsec (Stolen.data) -> No action taken.

Fichier(s) infecté(s):
C:\WINDOWS\system32\lowsec\local.ds (Stolen.data) -> No action taken.
C:\WINDOWS\system32\lowsec\user.ds (Stolen.data) -> No action taken.
C:\WINDOWS\system32\sdra64.exe (Trojan.FakeAlert) -> No action taken.

No action taken.

tu es sûr de tout virer ? avec malwarebyte?

__________________

puis colle un rapport combofix

et comme je suis occupé un rapport DR WEB cureit
https://www.commentcamarche.net/telecharger/securite/7749-dr-web-cureit/

Bonjour jlpjlp et a tous !

Problème résolu, finalement j'ai formaté , réinstallé et du coup plus de problème !

Juste une derniere question : J'ai Bitdefender 2010 total security qui possède (sois disant) un anti-spyware. Dois-je installer un logiciel de surveillance en parallèle ? genre spyware doctor ou autre ? et est ce que ces logiciels ne créer pas de conflit avec Bitdefender ?

Encore 1000 fois merci pour votre aide !

Fred.

ok

tu peux mettre en complement de bitdefender CCLEANER pour effacer les traces du net

et malwarebyte antimalware en version gratuite pour chercher des espion

et vaccine ton pc avec usbfix pour éviter les infections par les supports externes (puis vire usbfix)

En fait je voulais parler de logiciels s'ouvrant en tache de fond au démarrage du pc , qui surveille en permanence l'intrusion de spywares et malwares.

usbfix exécuté et effacé.

En fait je voulais parler de logiciels s'ouvrant en tache de fond au démarrage du pc , qui surveille en permanence l'intrusion de spywares et malwares.

non pas besoin cela ralentirait le pc sans avoir de gain d'efficacité !

Ok,

Et encore merci pour ton aide !
Bonne continuation et au plaisir !!

Bonsoir,

j'ai moi aussi eu un problème avec le Cheval de troie "sdra64.exe",

Pour tout ceux qui aurai le même problème, allez voir ce lien: "https://forums.commentcamarche.net/forum/affich-15092482-comment-supprimer-un-processus#3"