Mon PC est infecté

Question

Bonjour,

j'ai plein de virus sur mon PC, j'ai pas d'antivirus, j'avais antivir, mais  il se mettra plus à jour, je l'ai désintallé, mes clé USB sont infecté aussi, SVP que dois je faire?
j'essaie de telecharger  RSIT du lien : http://images.malwareremoval.com/random/RSIT.exe mais il m'affiche serveur introuvable!! y'a t il un autre lien? 

merci,

jlpjlp · Answer

slt . Ici Rsit  .

jacinthe87 · Answer

Voila ça marche:

Logfile of random's system information tool 1.06 (written by random/random)
Run by ASSIA at 2009-12-24 22:49:38
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 61 GB (80%) free of 76 GB
Total RAM: 503 MB (6% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:49:53, on 24/12/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlservr.exe
C:\oracle\ora92\bin\omtsreco.exe
C:\WINDOWS\SkyTel.EXE
C:\WINDOWS\system32\00THotkey.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe
C:\WINDOWS\system32\ctfmon.exe
C:\oracle\ora92\bin\agntsrvc.exe
C:\oracle\ora92\Apache\Apache\apache.exe
C:\WINDOWS\system32\cmd.exe
C:\oracle\ora92\BIN\TNSLSNR.exe
C:\oracle\ora92\bin\dbsnmp.exe
c:\oracle\ora92\bin\ORACLE.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\ThpSrv.exe
C:\oracle\ora92\Apache\Apache\apache.exe
C:\oracle\ora92\jdk\bin\java.exe
c:\oracle\ora92\bin\isqlplus
C:\oracle\ora92\jdk\bin\java.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\TOSHIBA\ConfigFree\CFXFER.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\ASSIA\Mes documents\setups\RSIT.exe
C:\Program Files	rend micro\ASSIA.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.bearshare.com/sidebar.html?src=ssb
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.bearshare.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [00THotkey] C:\WINDOWS\system32\00THotkey.exe
O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: OracleMTSRecoveryService - Oracle Corporation - C:\oracle\ora92\bin\omtsreco.exe
O23 - Service: OracleOraHome92Agent - Oracle Corporation - C:\oracle\ora92\bin\agntsrvc.exe
O23 - Service: OracleOraHome92ClientCache - Unknown owner - C:\oracle\ora92\BIN\ONRSD.EXE
O23 - Service: OracleOraHome92HTTPServer - Unknown owner - C:\oracle\ora92\Apache\Apache\apache.exe
O23 - Service: OracleOraHome92PagingServer - Unknown owner - C:\oracle\ora92/bin/pagntsrv.exe
O23 - Service: OracleOraHome92SNMPPeerEncapsulator - Unknown owner - C:\oracle\ora92\BIN\ENCSVC.EXE
O23 - Service: OracleOraHome92SNMPPeerMasterAgent - Unknown owner - C:\oracle\ora92\BIN\AGNTSVC.EXE
O23 - Service: OracleOraHome92TNSListener - Unknown owner - C:\oracle\ora92\BIN\TNSLSNR.exe
O23 - Service: OracleServiceORACLEDB - Oracle Corporation - c:\oracle\ora92\bin\ORACLE.EXE
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: TOSHIBA HDD Protection (Thpsrv) - TOSHIBA Corporation - C:\WINDOWS\system32\ThpSrv.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.1.36\bin\mysqld.exe

--
End of file - 5699 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll [2005-11-10 184423]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"000StTHK"=C:\WINDOWS\system32\000StTHK.exe [2001-06-23 24576]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-04-24 1448960]
"00THotkey"=C:\WINDOWS\system32\00THotkey.exe [2006-05-18 253952]
"CFSServ.exe"=CFSServ.exe -NoClient []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-05 15360]
"ares"=C:\Program Files\Ares\Ares.exe [2009-02-03 1004544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGRSMMSG]
C:\WINDOWS\AGRSMMSG.exe [2006-03-04 88204]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
C:\WINDOWS\ALCMTR.EXE [2005-05-04 69632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CFSServ.exe]
CFSServ.exe -NoClient []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxhkcmd]
C:\WINDOWS\system32\hkcmd.exe [2006-03-23 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxpers]
C:\WINDOWS\system32\igfxpers.exe [2006-03-23 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxtray]
C:\WINDOWS\system32\igfxtray.exe [2006-03-23 94208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelWireless]
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe [2005-11-28 602182]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelZeroConfig]
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe [2005-12-05 667718]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LtMoh]
C:\Program Files\ltmoh\Ltmoh.exe [2006-03-04 184320]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NDSTray.exe]
NDSTray.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
C:\WINDOWS\RTHDCPL.EXE [2006-05-09 16207360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmoothView]
C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe [2005-05-17 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TFNF5]
C:\WINDOWS\system32\TFNF5.exe [2006-04-11 622592]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ThpSrv]
thpsrv /logon []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TosHKCW.exe]
C:\Program Files\TOSHIBA\Wireless Hotkey\TosHKCW.exe [2005-05-17 49152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TouchED]
C:\Program Files\TOSHIBA\TouchED\TouchED.Exe [2005-09-07 98304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TPSMain]
C:\WINDOWS\system32\TPSMain.exe [2006-05-19 299008]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TPSODDCtl]
C:\WINDOWS\system32\TPSODDCtl.exe [2006-05-19 102400]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Service Manager.lnk]
C:\PROGRA~1\MI6841~1\80\Tools\Binn\sqlmangr.exe [2000-08-06 69632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-03-23 139264]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Toshiba\ConfigFree\CFXFER.exe"="C:\Program Files\Toshiba\ConfigFree\CFXFER.exe:*:Enabled:ConfigFree SUMMIT Engine"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\WINDOWS\system32\javaw.exe"="C:\WINDOWS\system32\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\wamp\bin\apache\Apache2.2.11\bin\httpd.exe"="C:\wamp\bin\apache\Apache2.2.11\bin\httpd.exe:*:Enabled:Apache HTTP Server"
"C:\Program Files\BearShare Applications\BearShare\BearShare.exe"="C:\Program Files\BearShare Applications\BearShare\BearShare.exe:*:Enabled:BearShare"
"C:\Program Files\Ares\Ares.exe"="C:\Program Files\Ares\Ares.exe:*:Enabled:Ares p2p for windows"
"C:\Documents and Settings\ASSIA\Local Settings\Temp\OraInstall2009-12-20_10-34-48PM\jre\bin\javaw.exe"="C:\Documents and Settings\ASSIA\Local Settings\Temp\OraInstall2009-12-20_10-34-48PM\jre\bin\javaw.exe:*:Enabled:javaw"
"C:\oracle\ora92\Apache\Apache\Apache.exe"="C:\oracle\ora92\Apache\Apache\Apache.exe:*:Enabled:Apache"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{476fe164-eaf6-11de-a7e0-0018de6e9005}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE      .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{476fe16b-eaf6-11de-a7e0-0018de6e9005}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE      .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{476fe16c-eaf6-11de-a7e0-0018de6e9005}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE      .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{746aedf5-e3fa-11de-a7d6-0018de6e9005}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE      .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9791db6d-ea33-11de-a7df-0018de6e9005}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE      .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b4be00c2-e4a5-11de-a7d8-0018de6e9005}]
shell\AutoRun\command - E:\NOT\GLOW\eKn.exe
shell\open\command - E:\NOT\GLOW\eKn.exe


======File associations======

.js - edit - "C:\Program Files\Macromedia\Dreamweaver 8\dreamweaver.exe" "%1"

======List of files/folders created in the last 1 months======

2009-12-24 22:49:40 ----D---- C:\Program Files	rend micro
2009-12-24 22:49:38 ----D---- C:sit
2009-12-24 22:45:55 ----D---- C:\Program Files\Windows Live Safety Center
2009-12-24 20:30:31 ----SHD---- C:\Config.Msi
2009-12-24 18:11:31 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
2009-12-22 16:37:09 ----D---- C:\Program Files\Sybase
2009-12-22 16:37:09 ----D---- C:\Documents and Settings\All Users\Application Data\PowerAMC 12
2009-12-20 22:35:22 ----D---- C:\oracle
2009-12-20 22:35:17 ----D---- C:\Program Files\Oracle
2009-12-19 16:31:00 ----A---- C:\WINDOWS\iun6002.exe
2009-12-19 16:30:59 ----D---- C:\WINDOWS\system32\athan
2009-12-19 16:29:20 ----D---- C:\Program Files\Athan
2009-12-16 11:31:23 ----D---- C:\Documents and Settings\All Users\Application Data\Macromedia
2009-12-16 11:30:45 ----D---- C:\Program Files\Macromedia
2009-12-16 11:30:45 ----D---- C:\Program Files\Fichiers communs\Macromedia
2009-12-16 11:30:06 ----D---- C:\WINDOWS\Downloaded Installations
2009-12-15 22:27:15 ----D---- C:\Program Files\Ares
2009-12-15 10:43:10 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-15 10:40:03 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2009-12-14 12:44:58 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-12-14 12:44:45 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-12-14 12:44:37 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-12-14 12:44:25 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-12-14 12:41:10 ----HDC---- C:\WINDOWS\$NtUninstallKB935448$
2009-12-14 12:41:03 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2009-12-14 12:40:18 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2009-12-14 12:40:12 ----HDC---- C:\WINDOWS\$NtUninstallKB923723$
2009-12-14 12:38:19 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-14 12:38:04 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2009-12-14 12:36:34 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2009-12-14 12:34:35 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2009-12-14 12:29:59 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2009-12-14 12:29:49 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2009-12-14 12:29:20 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-12-14 12:29:08 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-12-14 12:28:49 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2009-12-14 12:28:30 ----HDC---- C:\WINDOWS\$NtUninstallKB925720$
2009-12-14 12:28:18 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-12-14 12:28:09 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2009-12-14 12:27:37 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2009-12-14 12:27:08 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-12-14 12:26:01 ----HDC---- C:\WINDOWS\$NtUninstallKB976325$
2009-12-14 12:24:15 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2009-12-14 12:23:20 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2009-12-14 12:23:10 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2009-12-14 12:22:35 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-12-14 12:16:29 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-12-14 12:16:18 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-12-14 12:15:33 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
2009-12-14 12:15:23 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-12-14 12:15:12 ----HDC---- C:\WINDOWS\$NtUninstallKB971032$
2009-12-14 12:15:03 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-12-14 12:14:57 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2009-12-14 12:14:48 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-12-14 12:14:40 ----HDC---- C:\WINDOWS\$NtUninstallKB975467_0$
2009-12-14 12:14:29 ----HDC---- C:\WINDOWS\$NtUninstallKB968389_0$
2009-12-14 12:14:03 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2009-12-13 13:18:50 ----A---- C:\WINDOWS\system32\ProSoftLK.dll
2009-12-13 13:18:50 ----A---- C:\WINDOWS\system32\MSVCRTD.DLL
2009-12-13 13:18:50 ----A---- C:\WINDOWS\system32\MSVCIRTD.DLL
2009-12-13 13:18:50 ----A---- C:\WINDOWS\system32\msrd2x35.dll
2009-12-13 13:18:50 ----A---- C:\WINDOWS\system32\msexcl35.dll
2009-12-13 13:18:50 ----A---- C:\WINDOWS\system32\MFCO42D.DLL
2009-12-13 13:18:50 ----A---- C:\WINDOWS\system32\MFCD42D.DLL
2009-12-13 13:18:50 ----A---- C:\WINDOWS\system32\MFC42D.DLL
2009-12-13 13:18:49 ----A---- C:\WINDOWS\system32\msjet35.dll
2009-12-13 13:18:48 ----D---- C:\Program Files\ProLog Software
2009-12-13 13:18:48 ----A---- C:\WINDOWS\system32\vbar332.dll
2009-12-13 13:18:48 ----A---- C:\WINDOWS\system32\msjter35.dll
2009-12-13 13:18:48 ----A---- C:\WINDOWS\system32\msjint35.dll
2009-12-13 10:49:19 ----D---- C:\WINDOWS\system32\CatRoot_bak
2009-12-13 10:48:44 ----D---- C:\Program Files\MSXML 4.0
2009-12-12 11:58:47 ----D---- C:\Program Files\Microsoft Synchronization Services
2009-12-12 11:58:46 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2009-12-12 11:54:26 ----D---- C:\Program Files\Microsoft Visual Studio 9.0
2009-12-12 11:53:51 ----D---- C:\Program Files\Microsoft SDKs
2009-12-12 11:51:41 ----N---- C:\WINDOWS\system32\spmsg2.dll
2009-12-12 11:51:35 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2009-12-12 11:51:11 ----D---- C:\WINDOWS\system32\fr-FR
2009-12-12 11:47:51 ----D---- C:\WINDOWS\system32\XPSViewer
2009-12-12 11:47:44 ----D---- C:\WINDOWS\system32\en-US
2009-12-12 11:47:36 ----D---- C:\Program Files\Reference Assemblies
2009-12-12 11:46:28 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2009-12-12 11:46:28 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2009-12-12 11:46:28 ----N---- C:\WINDOWS\system32\prntvpt.dll
2009-12-12 11:46:27 ----D---- C:\1bde3832f7ffeafa4022b74a
2009-12-12 11:43:03 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2009-12-12 11:42:56 ----D---- C:\Program Files\MSXML 6.0
2009-12-12 10:39:01 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-12-12 10:38:55 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2009-12-12 10:38:49 ----HDC---- C:\WINDOWS\$NtUninstallKB976098-v2$
2009-12-12 10:38:20 ----HDC---- C:\WINDOWS\$NtUninstallKB961371-v2$
2009-12-12 10:38:14 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-12-12 10:38:08 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2009-12-12 10:38:03 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2009-12-12 10:37:57 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-12-12 10:37:51 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2009-12-12 10:37:48 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2009-12-12 10:37:26 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2009-12-12 10:37:18 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-12-12 10:37:09 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2009-12-12 10:37:03 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2009-12-12 10:36:58 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2009-12-12 10:36:35 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-12-12 10:36:29 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-12-12 10:36:23 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-12-12 10:36:17 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-12-12 10:36:10 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-12 10:36:02 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-12-12 10:35:57 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-12 10:35:51 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2009-12-12 10:35:23 ----D---- C:\WINDOWS\ServicePackFiles
2009-12-12 10:35:21 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$
2009-12-12 10:35:12 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2009-12-12 10:35:06 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-12-12 10:34:54 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-12-11 22:10:18 ----D---- C:\Documents and Settings\ASSIA\Application Data\WinRAR
2009-12-11 17:14:24 ----N---- C:\WINDOWS\system32	zchange.exe
2009-12-11 15:13:35 ----D---- C:\wamp
2009-12-11 12:35:13 ----HDC---- C:\WINDOWS\$NtUninstallKB973525$
2009-12-10 12:53:45 ----D---- C:\WINDOWS\system32\PreInstall
2009-12-10 12:53:44 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-12-10 12:53:42 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-12-09 23:03:30 ----HD---- C:\WINDOWS\system32\GroupPolicy
2009-12-09 19:24:32 ----D---- C:\WINDOWS\SxsCaPendDel
2009-12-09 19:23:07 ----D---- C:\Program Files\Microsoft
2009-12-09 19:22:48 ----D---- C:\Program Files\Windows Live SkyDrive
2009-12-09 19:22:20 ----D---- C:\Program Files\Windows Live
2009-12-09 13:11:52 ----A---- C:\WINDOWS\system32\muweb.dll
2009-12-09 13:11:52 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2009-12-09 13:11:51 ----A---- C:\WINDOWS\system32\mucltui.dll
2009-12-09 08:07:13 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-12-08 22:27:26 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-12-08 22:11:35 ----D---- C:\Documents and Settings\ASSIA\Application Data\Mozilla
2009-12-08 17:30:16 ----D---- C:\Program Files\Mozilla Firefox
2009-12-08 13:33:13 ----D---- C:\WINDOWS\pss
2009-12-08 13:11:40 ----D---- C:\Documents and Settings\ASSIA\Application Data\Macromedia
2009-12-08 13:09:29 ----D---- C:\Program Files\WinRAR
2009-12-08 13:05:02 ----A---- C:\WINDOWS\system32\msrpjt40.dll
2009-12-08 13:04:56 ----A---- C:\WINDOWS\system32\insrepim.exe
2009-12-08 13:04:14 ----A---- C:\WINDOWS\system32\mdt2fw95.dll
2009-12-08 13:03:41 ----A---- C:\WINDOWS\system32
twdblib.DLL
2009-12-08 13:03:33 ----A---- C:\WINDOWS\system32\DBmsSHRn.dll
2009-12-08 13:03:33 ----A---- C:\WINDOWS\system32\dbmslpcn.dll
2009-12-08 13:02:42 ----A---- C:\WINDOWS\IsUninst.exe
2009-12-08 13:02:30 ----D---- C:\Program Files\Microsoft SQL Server
2009-12-08 12:20:10 ----D---- C:\Program Files\Microsoft Works
2009-12-08 12:19:56 ----D---- C:\Program Files\MSBuild
2009-12-08 12:19:37 ----D---- C:\Program Files\Microsoft Visual Studio
2009-12-08 12:19:36 ----D---- C:\Program Files\Fichiers communs\DESIGNER
2009-12-08 12:18:24 ----D---- C:\Program Files\Microsoft.NET
2009-12-08 12:14:43 ----D---- C:\WINDOWS\SHELLNEW
2009-12-08 12:14:23 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-12-08 12:13:57 ----RHD---- C:\MSOCache
2009-12-07 22:43:42 ----SHD---- C:\RECYCLER
2009-12-07 22:33:14 ----D---- C:\WINDOWS\system32\appmgmt
2009-12-07 22:30:16 ----A---- C:\WINDOWS\system32\wmpns.dll
2009-12-07 22:30:15 ----HD---- C:\Program Files\Uninstall Information
2009-12-07 22:29:47 ----A---- C:\WINDOWS\system32esults.txt
2009-12-07 22:29:25 ----D---- C:\Documents and Settings\All Users\Application Data\Intel
2009-12-07 22:29:13 ----D---- C:\Documents and Settings\ASSIA\Application Data\Intel
2009-12-07 22:29:04 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-12-07 22:28:38 ----D---- C:\Documents and Settings\ASSIA\Application Data\Identities
2009-12-07 22:28:38 ----D---- C:\Documents and Settings\ASSIA\Application Data\Adobe
2009-12-07 22:28:38 ----ASH---- C:\Documents and Settings\ASSIA\Application Data\desktop.ini
2009-12-07 22:28:37 ----SD---- C:\Documents and Settings\ASSIA\Application Data\Microsoft
2009-12-07 22:28:37 ----D---- C:\Documents and Settings\ASSIA\Application Data	oshiba
2009-12-07 22:28:37 ----D---- C:\Documents and Settings\ASSIA\Application Data\Sonic
2009-12-07 22:28:14 ----A---- C:\WINDOWS\system32\RtlCPAPI.dll
2009-12-07 22:27:51 ----A---- C:\WINDOWS\Alcmtr.exe

======List of files/folders modified in the last 1 months======

2009-12-24 22:49:45 ----D---- C:\WINDOWS\Prefetch
2009-12-24 22:49:40 ----RD---- C:\Program Files
2009-12-24 20:44:04 ----D---- C:\WINDOWS\system32
2009-12-24 20:43:45 ----D---- C:\WINDOWS
2009-12-24 20:42:05 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-12-24 20:31:50 ----D---- C:\WINDOWS\system32\drivers
2009-12-24 20:31:26 ----HD---- C:\WINDOWS\inf
2009-12-24 20:31:17 ----D---- C:\WINDOWS\Temp
2009-12-24 20:30:28 ----SHD---- C:\WINDOWS\Installer
2009-12-24 20:26:52 ----D---- C:\WINDOWS\system32\CatRoot2
2009-12-22 16:37:19 ----HD---- C:\Program Files\InstallShield Installation Information
2009-12-16 11:09:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-16 11:01:43 ----SHD---- C:\System Volume Information
2009-12-16 11:01:43 ----D---- C:\WINDOWS\system32\Restore
2009-12-15 13:13:32 ----A---- C:\WINDOWS\ODBC.INI
2009-12-15 10:43:15 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-15 10:41:53 ----RSD---- C:\WINDOWS\assembly
2009-12-15 10:40:12 ----A---- C:\WINDOWS\imsins.BAK
2009-12-15 10:35:20 ----SD---- C:\WINDOWS\Tasks
2009-12-15 10:33:35 ----D---- C:\WINDOWS\system32\wbem
2009-12-15 10:33:35 ----D---- C:\WINDOWS\system32\Setup
2009-12-15 10:33:34 ----D---- C:\WINDOWS\AppPatch
2009-12-14 22:52:32 ----D---- C:\WINDOWS\Microsoft.NET
2009-12-14 12:44:57 ----HD---- C:\WINDOWS\$hf_mig$
2009-12-14 12:43:26 ----D---- C:\WINDOWS\WinSxS
2009-12-14 12:36:29 ----D---- C:\WINDOWS\system32\CatRoot
2009-12-14 12:26:19 ----D---- C:\Program Files\Internet Explorer
2009-12-14 12:23:13 ----D---- C:\Program Files\Outlook Express
2009-12-14 12:21:07 ----A---- C:\WINDOWS\win.ini
2009-12-14 12:19:31 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-12-13 15:21:06 ----D---- C:\Documents and Settings
2009-12-13 14:22:59 ----RASH---- C:\boot.ini
2009-12-13 14:22:59 ----A---- C:\WINDOWS\system.ini
2009-12-13 10:49:19 ----D---- C:\WINDOWS\Debug
2009-12-12 11:58:56 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-12-12 11:47:43 ----RSD---- C:\WINDOWS\Fonts
2009-12-12 11:47:07 ----D---- C:\WINDOWS\system32\spool
2009-12-12 10:39:03 ----D---- C:\Program Files\Messenger
2009-12-09 08:07:20 ----D---- C:\WINDOWS\SoftwareDistribution
2009-12-09 08:07:17 ----D---- C:\WINDOWS\Help
2009-12-08 22:27:26 ----D---- C:\Program Files\Fichiers communs
2009-12-08 12:19:42 ----D---- C:\Program Files\Microsoft Office
2009-12-08 12:14:54 ----D---- C:\Program Files\Fichiers communs\System
2009-12-08 12:10:28 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
2009-12-08 12:10:27 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2009-12-08 12:10:25 ----D---- C:\Program Files\Symantec
2009-12-08 07:21:43 ----D---- C:\WINDOWS\system32\mui
2009-12-08 07:21:31 ----D---- C:\WINDOWS\system32\MsDtc
2009-12-08 07:21:23 ----D---- C:\WINDOWS\system32\Macromed
2009-12-08 07:21:16 ----D---- C:\WINDOWS\system32\IME
2009-12-08 07:21:13 ----D---- C:\WINDOWS\system32\icsxml
2009-12-08 07:21:12 ----D---- C:\WINDOWS\system32\ias
2009-12-08 07:20:50 ----D---- C:\WINDOWS\system32\DirectX
2009-12-08 07:20:39 ----D---- C:\WINDOWS\system32\Com
2009-12-08 07:20:31 ----D---- C:\WINDOWS\system32\1036
2009-12-08 07:20:31 ----D---- C:\WINDOWS\system32\1033
2009-12-08 07:20:31 ----D---- C:\WINDOWS\system
2009-12-08 07:20:17 ----D---- C:\WINDOWS\Resources
2009-12-08 07:19:55 ----D---- C:\WINDOWS\PeerNet
2009-12-08 07:19:45 ----RD---- C:\WINDOWS\Offline Web Pages
2009-12-08 07:19:45 ----D---- C:\WINDOWS\Options
2009-12-08 07:19:40 ----D---- C:\WINDOWS\msapps
2009-12-08 07:19:23 ----D---- C:\WINDOWS\java
2009-12-08 07:18:10 ----D---- C:\WINDOWS\ime
2009-12-08 07:16:35 ----D---- C:\WINDOWS\ehome
2009-12-08 07:15:37 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-12-08 07:15:13 ----HDC---- C:\WINDOWS\$NtUninstallKB912945$
2009-12-08 07:15:05 ----HDC---- C:\WINDOWS\$NtUninstallKB912919$
2009-12-08 07:15:05 ----HDC---- C:\WINDOWS\$NtUninstallKB910728$
2009-12-08 07:15:04 ----HDC---- C:\WINDOWS\$NtUninstallKB910437$
2009-12-08 07:15:04 ----HDC---- C:\WINDOWS\$NtUninstallKB908519$
2009-12-08 07:15:03 ----HDC---- C:\WINDOWS\$NtUninstallKB905915$
2009-12-08 07:14:59 ----HDC---- C:\WINDOWS\$NtUninstallKB905749$
2009-12-08 07:14:58 ----HDC---- C:\WINDOWS\$NtUninstallKB905414$
2009-12-08 07:14:58 ----HDC---- C:\WINDOWS\$NtUninstallKB904706$
2009-12-08 07:14:57 ----HDC---- C:\WINDOWS\$NtUninstallKB902400$
2009-12-08 07:14:52 ----HDC---- C:\WINDOWS\$NtUninstallKB901214$
2009-12-08 07:14:51 ----HDC---- C:\WINDOWS\$NtUninstallKB901017$
2009-12-08 07:14:51 ----HDC---- C:\WINDOWS\$NtUninstallKB900725$
2009-12-08 07:14:47 ----HDC---- C:\WINDOWS\$NtUninstallKB899591$
2009-12-08 07:14:47 ----HDC---- C:\WINDOWS\$NtUninstallKB899588$
2009-12-08 07:14:47 ----HDC---- C:\WINDOWS\$NtUninstallKB899587$
2009-12-08 07:14:46 ----HDC---- C:\WINDOWS\$NtUninstallKB898458$
2009-12-08 07:14:46 ----HDC---- C:\WINDOWS\$NtUninstallKB896428$
2009-12-08 07:14:45 ----HDC---- C:\WINDOWS\$NtUninstallKB896424$
2009-12-08 07:14:44 ----HDC---- C:\WINDOWS\$NtUninstallKB896423$
2009-12-08 07:14:44 ----HDC---- C:\WINDOWS\$NtUninstallKB896422$
2009-12-08 07:14:44 ----HDC---- C:\WINDOWS\$NtUninstallKB896358$
2009-12-08 07:14:43 ----HDC---- C:\WINDOWS\$NtUninstallKB896256$
2009-12-08 07:14:41 ----HDC---- C:\WINDOWS\$NtUninstallKB896243$
2009-12-08 07:14:41 ----HDC---- C:\WINDOWS\$NtUninstallKB895200$
2009-12-08 07:14:38 ----HDC---- C:\WINDOWS\$NtUninstallKB894871$
2009-12-08 07:14:38 ----HDC---- C:\WINDOWS\$NtUninstallKB894391_0$
2009-12-08 07:14:37 ----HDC---- C:\WINDOWS\$NtUninstallKB894391$
2009-12-08 07:14:35 ----HDC---- C:\WINDOWS\$NtUninstallKB893756$
2009-12-08 07:14:35 ----HDC---- C:\WINDOWS\$NtUninstallKB893357$
2009-12-08 07:14:34 ----HDC---- C:\WINDOWS\$NtUninstallKB893066$
2009-12-08 07:14:34 ----HDC---- C:\WINDOWS\$NtUninstallKB893056$
2009-12-08 07:14:33 ----HDC---- C:\WINDOWS\$NtUninstallKB891781$
2009-12-08 07:14:33 ----HDC---- C:\WINDOWS\$NtUninstallKB890859$
2009-12-08 07:14:33 ----HDC---- C:\WINDOWS\$NtUninstallKB890175$
2009-12-08 07:14:32 ----HDC---- C:\WINDOWS\$NtUninstallKB890046_0$
2009-12-08 07:14:32 ----HDC---- C:\WINDOWS\$NtUninstallKB890046$
2009-12-08 07:14:32 ----HDC---- C:\WINDOWS\$NtUninstallKB889673$
2009-12-08 07:14:32 ----HDC---- C:\WINDOWS\$NtUninstallKB888622$
2009-12-08 07:14:32 ----HDC---- C:\WINDOWS\$NtUninstallKB888302$
2009-12-08 07:14:32 ----HDC---- C:\WINDOWS\$NtUninstallKB888113$
2009-12-08 07:14:31 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$
2009-12-08 07:14:31 ----HDC---- C:\WINDOWS\$NtUninstallKB887472$
2009-12-08 07:14:31 ----HDC---- C:\WINDOWS\$NtUninstallKB886185$
2009-12-08 07:14:31 ----HDC---- C:\WINDOWS\$NtUninstallKB885855$
2009-12-08 07:14:30 ----HDC---- C:\WINDOWS\$NtUninstallKB885836$
2009-12-08 07:14:30 ----HDC---- C:\WINDOWS\$NtUninstallKB885835$
2009-12-08 07:14:30 ----HDC---- C:\WINDOWS\$NtUninstallKB885250$
2009-12-08 07:14:30 ----HDC---- C:\WINDOWS\$NtUninstallKB873339$
2009-12-08 07:14:29 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2009-12-08 07:13:57 ----D---- C:\VALUEADD
2009-12-08 07:13:52 ----D---- C:\ToolsCD
2009-12-08 07:07:51 ----D---- C:\SUPPORT
2009-12-08 07:07:51 ----D---- C:\Program Files\xerox
2009-12-08 07:07:50 ----D---- C:\Program Files\Windows NT
2009-12-08 07:07:49 ----D---- C:\Program Files\Windows Media Player
2009-12-08 07:07:08 ----D---- C:\Program Files\Services en ligne
2009-12-08 07:06:56 ----D---- C:\Program Files\Online Services
2009-12-08 07:06:55 ----AD---- C:\Program Files\Offre Wanadoo
2009-12-08 07:06:14 ----D---- C:\Program Files\NetMeeting
2009-12-08 07:06:11 ----D---- C:\Program Files\MSN Gaming Zone
2009-12-08 07:05:59 ----D---- C:\Program Files\MSN
2009-12-08 07:05:59 ----D---- C:\Program Files\Movie Maker
2009-12-08 07:05:44 ----D---- C:\Program Files\microsoft frontpage
2009-12-08 07:05:43 ----D---- C:\Program Files\ltmoh
2009-12-08 07:05:21 ----D---- C:\Program Files\Java
2009-12-08 07:05:14 ----D---- C:\Program Files\InterVideo
2009-12-08 07:03:41 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2009-12-08 07:03:41 ----D---- C:\Program Files\Fichiers communs\Services
2009-12-08 07:03:41 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-12-08 07:03:41 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-12-08 07:03:09 ----D---- C:\Program Files\Fichiers communs\Java
2009-12-08 07:03:06 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-12-08 07:02:11 ----D---- C:\Program Files\Adobe
2009-12-08 07:00:56 ----D---- C:\I386
2009-12-08 06:55:13 ----D---- C:\Documents and Settings\All Users\Application Data\SBSI
2009-12-08 00:50:19 ----D---- C:\Program Files\Sonic
2009-12-07 22:42:34 ----D---- C:\Program Files\Toshiba
2009-12-07 22:36:22 ----D---- C:\WINDOWS\pchealth
2009-12-07 22:31:04 ----D---- C:\WINDOWS\security
2009-12-07 22:30:17 ----A---- C:\WINDOWS\OEWABLog.txt
2009-12-07 22:30:08 ----D---- C:\WINDOWS\oemdrv
2009-12-07 22:29:25 ----D---- C:\Program Files\Intel
2009-12-07 22:28:28 ----A---- C:\WINDOWS\setuplog.txt
2009-12-07 22:28:20 ----D---- C:\WINDOWS\system32\config
2009-12-07 22:28:14 ----D---- C:\WINDOWS\system32\RTCOM
2009-12-07 22:27:51 ----D---- C:\Program Files\Realtek
2009-12-07 22:27:26 ----D---- C:\WINDOWS\Registration
2009-12-07 22:24:06 ----D---- C:\WINDOWSepair

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-05 40320]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.9.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2009-12-07 21275]
R2 Netdevio;TOSHIBA Network Device Usermode I/O Protocol; C:\WINDOWS\system32\DRIVERS
etdevio.sys [2003-01-29 12032]
R2 s24trans;Transport RLAN; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2005-11-28 13568]
R3 AgereSoftModem;TOSHIBA V92 Software Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2006-03-04 1124097]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2004-08-03 14080]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2006-03-23 1166972]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-05-10 4273152]
R3 Iviaspi;IVI ASPI Shell; C:\WINDOWS\system32\drivers\iviaspi.sys [2003-09-10 21060]
R3 Pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-09-18 10368]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2006-01-13 76544]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
R3 w39n51;Intel(R) PRO/Wireless 3945ABG Adapter Driver; C:\WINDOWS\system32\DRIVERS\w39n51.sys [2005-12-05 1428096]
S3 ApfiltrService;Alps Pointing-device Filter Driver; C:\WINDOWS\system32\DRIVERS\Apfiltr.sys []
S3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-05 60800]
S3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e1e5132.sys [2005-09-15 179200]
S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
S3 IFXTPM;IFXTPM; C:\WINDOWS\system32\DRIVERS\IFXTPM.SYS [2005-06-10 35968]
S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
S3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS
ic1394.sys [2004-08-05 61824]
S3 sffdisk;Pilote de classe de stockage SFF; C:\WINDOWS\system32\DRIVERS\sffdisk.sys [2006-01-13 11136]
S3 sffp_sd;Pilote de protocole de stockage SFF pour SDBus; C:\WINDOWS\system32\DRIVERS\sffp_sd.sys [2006-01-13 10368]
S3 SYMIDSCO;SYMIDSCO; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\SymcData\idsdefs\20050901.036\symidsco.sys []
S3 TcUsb;TC USB Kernel Driver; C:\WINDOWS\System32\Drivers	cusb.sys [2006-05-06 28800]
S3 tosrfec;Bluetooth ACPI from TOSHIBA; C:\WINDOWS\system32\DRIVERS	osrfec.sys [2005-09-09 9344]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CFSvcs;ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [2005-01-17 40960]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2005-11-28 114753]
R2 MSSQLSERVER;MSSQLSERVER; C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlservr.exe [2000-08-23 7442493]
R2 OracleMTSRecoveryService;OracleMTSRecoveryService; C:\oracle\ora92\bin\omtsreco.exe [2002-04-30 57603]
R2 OracleOraHome92Agent;OracleOraHome92Agent; C:\oracle\ora92\bin\agntsrvc.exe [2002-04-26 28944]
R2 OracleOraHome92HTTPServer;OracleOraHome92HTTPServer; C:\oracle\ora92\Apache\Apache\apache.exe [2002-04-18 4096]
R2 OracleOraHome92TNSListener;OracleOraHome92TNSListener; C:\oracle\ora92\BIN\TNSLSNR  []
R2 OracleServiceORACLEDB;OracleServiceORACLEDB; c:\oracle\ora92\bin\ORACLE.EXE [2002-05-14 29475088]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2005-11-28 217164]
R2 S24EventMonitor;Intel(R) PROSet/Wireless Service; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [2005-11-28 540745]
R2 Thpsrv;TOSHIBA HDD Protection; C:\WINDOWS\system32\ThpSrv.exe [2006-05-24 167936]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-10 38912]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2000-08-06 65602]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 OracleOraHome92ClientCache;OracleOraHome92ClientCache; C:\oracle\ora92\BIN\ONRSD.EXE [2002-04-26 242328]
S3 OracleOraHome92PagingServer;OracleOraHome92PagingServer; C:\oracle\ora92/bin/pagntsrv.exe [2002-08-20 49152]
S3 OracleOraHome92SNMPPeerEncapsulator;OracleOraHome92SNMPPeerEncapsulator; C:\oracle\ora92\BIN\ENCSVC.EXE [2002-02-13 187392]
S3 OracleOraHome92SNMPPeerMasterAgent;OracleOraHome92SNMPPeerMasterAgent; C:\oracle\ora92\BIN\AGNTSVC.EXE [2002-02-13 254464]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SQLSERVERAGENT;SQLSERVERAGENT; C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlagent.exe [2000-08-06 303170]
S3 wampapache;wampapache; c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe [2008-12-10 24636]
S3 wampmysqld;wampmysqld; c:\wamp\bin\mysql\mysql5.1.36\bin\mysqld.exe [2009-06-17 6582912]
S4 NetTcpPortSharing;Service de partage de ports Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

jlpjlp · Answer

branche tous tes supports externes puis colle un rapport avec usbfix . Option 1 (recherche).

jacinthe87 · Answer

############################## | UsbFix V6.067 |

User : ASSIA (Administrateurs) # JACINTHUS
Update on 24/12/2009 by Chiquitine29, C_XX & Chimay8
Start at: 19:35:58 | 25/12/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Genuine Intel(R) CPU           T2050  @ 1.60GHz
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 6.0.2900.2180
Windows Firewall Status : Enabled

C:\ -> Disque fixe local # 74.53 Go (59.49 Go free) # NTFS
D:\ -> Disque CD-ROM
E:\ -> Disque amovible # 1.9 Go (1.3 Go free) # FAT32
F:\ -> Disque amovible # 3.77 Go (2.39 Go free) [@$$!@] # FAT32
G:\ -> Disque amovible # 971.12 Mo (2.66 Mo free) # FAT

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe 576
C:\WINDOWS\system32\csrss.exe 624
C:\WINDOWS\system32\winlogon.exe 648
C:\WINDOWS\system32\services.exe 692
C:\WINDOWS\system32\lsass.exe 704
C:\WINDOWS\system32\svchost.exe 860
C:\WINDOWS\system32\svchost.exe 960
C:\WINDOWS\System32\svchost.exe 1016
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe 1088
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe 1152
C:\WINDOWS\system32\svchost.exe 1256
C:\WINDOWS\system32\svchost.exe 1304
C:\WINDOWS\system32\spoolsv.exe 1584
C:\WINDOWS\system32\svchost.exe 1652
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe 1700
C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlservr.exe 1792
C:\WINDOWS\Explorer.EXE 176
C:\oracle\ora92\bin\omtsreco.exe 412
c:\oracle\ora92\bin\ORACLE.EXE 1216
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe 1264
C:\WINDOWS\system32\ThpSrv.exe 1480
C:\WINDOWS\system32\wdfmgr.exe 1728
C:\WINDOWS\SkyTel.EXE 1832
C:\WINDOWS\system32\00THotkey.exe 1876
C:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe 1968
C:\WINDOWS\system32\ctfmon.exe 1996
C:\Program Files\Ares\Ares.exe 2036
C:\Program Files\Mozilla Firefox\firefox.exe 948
C:\WINDOWS\System32\alg.exe 1516
C:\Program Files\TOSHIBA\ConfigFree\CFXFER.exe 2348
C:\WINDOWS\system32\wbem\wmiprvse.exe 3488

################## | Elements infectieux |

E:\autorun.inf  
E:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx   
E:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665  
F:\autorun.inf  
F:\log.exe  
F:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx   
F:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665  
G:\autorun.inf  
G:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx   
G:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665  

################## | Registre |


################## | Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{476fe164-eaf6-11de-a7e0-0018de6e9005}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE      .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn

HKCU\..\..\Explorer\MountPoints2\{476fe16b-eaf6-11de-a7e0-0018de6e9005}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE      .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn

HKCU\..\..\Explorer\MountPoints2\{476fe16c-eaf6-11de-a7e0-0018de6e9005}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE      .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn

HKCU\..\..\Explorer\MountPoints2\{746aedf5-e3fa-11de-a7d6-0018de6e9005}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE      .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn

HKCU\..\..\Explorer\MountPoints2\{9791db6d-ea33-11de-a7df-0018de6e9005}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE      .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn

HKCU\..\..\Explorer\MountPoints2\{a9090cc0-f07a-11de-a7e9-e38b09b697c4}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE      .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn

HKCU\..\..\Explorer\MountPoints2\{b4be00c2-e4a5-11de-a7d8-0018de6e9005}
Shell\AutoRun\command =E:\NOT\GLOW\eKn.exe 
Shell\open\command =E:\NOT\GLOW\eKn.exe 

################## | Cracks / Keygens / Serials |

"C:\oracle\ora92\jdk\bin\serialver.exe"  
18/04/2002 21:40 |Size 20576 |Crc32 36509380 |Md5 0e24a5116b5dcf62d17781a8aa15640b  
 

################## | ! Fin du rapport # UsbFix V6.067 ! |

jlpjlp · Answer

ok fais l'option 2 et colle le rapport . Puis colle un rapport d'un scan rapide avec malwarebyte antimalware.

jacinthe87 · Answer

USBFIX:

############################## | UsbFix V6.067 |

User : ASSIA (Administrateurs) # JACINTHUS
Update on 24/12/2009 by Chiquitine29, C_XX & Chimay8
Start at: 21:23:42 | 25/12/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Genuine Intel(R) CPU           T2050  @ 1.60GHz
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 6.0.2900.2180
Windows Firewall Status : Enabled

C:\ -> Disque fixe local # 74.53 Go (59.45 Go free) # NTFS
D:\ -> Disque CD-ROM
E:\ -> Disque amovible # 1.9 Go (1.3 Go free) # FAT32
F:\ -> Disque amovible # 3.77 Go (2.39 Go free) [@$$!@] # FAT32
G:\ -> Disque amovible # 971.12 Mo (2.66 Mo free) # FAT

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe 576
C:\WINDOWS\system32\csrss.exe 628
C:\WINDOWS\system32\winlogon.exe 652
C:\WINDOWS\system32\services.exe 696
C:\WINDOWS\system32\lsass.exe 708
C:\WINDOWS\system32\svchost.exe 864
C:\WINDOWS\system32\svchost.exe 944
C:\WINDOWS\System32\svchost.exe 1000
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe 1076
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe 1156
C:\WINDOWS\system32\svchost.exe 1264
C:\WINDOWS\system32\svchost.exe 1312
C:\WINDOWS\system32\spoolsv.exe 1588
C:\WINDOWS\system32\svchost.exe 1660
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe 1696
C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlservr.exe 1800
C:\WINDOWS\Explorer.EXE 140
C:\oracle\ora92\bin\omtsreco.exe 276
c:\oracle\ora92\bin\ORACLE.EXE 1428
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe 1324
C:\WINDOWS\system32\ThpSrv.exe 1052
C:\WINDOWS\system32\wdfmgr.exe 1724
C:\oracle\ora92\bin\oradim.exe 1888
C:\WINDOWS\System32\alg.exe 592
C:\WINDOWS\system32\wbem\wmiprvse.exe 824

################## | Elements infectieux |

Supprimé ! C:\Recycler\S-1-5-21-2579720848-1240602005-1065437235-1005 
Supprimé ! E:\autorun.inf 
Supprimé ! E:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx  
Supprimé ! E:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665 
Supprimé ! F:\autorun.inf 
Supprimé ! F:\log.exe 
Supprimé ! F:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx  
Supprimé ! F:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665 
Supprimé ! F:\Recycler\S-1-5-21-1482476501-1644491937-682003330-1013 
Supprimé ! G:\autorun.inf 
Supprimé ! G:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx  
Supprimé ! G:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665 

################## | Registre |


################## | Mountpoints2 |

Supprimé ! HKCU\...\Explorer\MountPoints2\{476fe164-eaf6-11de-a7e0-0018de6e9005}\Shell\AutoRun\Command  
Supprimé ! HKCU\...\Explorer\MountPoints2\{476fe16b-eaf6-11de-a7e0-0018de6e9005}\Shell\AutoRun\Command  
Supprimé ! HKCU\...\Explorer\MountPoints2\{476fe16c-eaf6-11de-a7e0-0018de6e9005}\Shell\AutoRun\Command  
Supprimé ! HKCU\...\Explorer\MountPoints2\{b4be00c2-e4a5-11de-a7d8-0018de6e9005}\Shell\AutoRun\Command  

################## | Listing des fichiers présent |

[08/06/2006 11:42|--a------|0] C:\AUTOEXEC.BAT 
[13/12/2009 14:22|-rahs----|227] C:\boot.ini 
[05/08/2004 10:00|-rahs----|4952] C:\Bootfont.bin 
[08/06/2006 11:42|--a------|0] C:\CONFIG.SYS 
[?|?|?] C:\hiberfil.sys 
[08/06/2006 11:42|-rahs----|0] C:\IO.SYS 
[08/06/2006 11:42|-rahs----|0] C:\MSDOS.SYS 
[05/08/2004 10:00|-rahs----|47564] C:\NTDETECT.COM 
[05/08/2004 10:00|-rahs----|251712] C:
tldr 
[?|?|?] C:\pagefile.sys 
[24/12/2009 00:57|--a------|233472] C:\Service.mdb 
[19/06/2006 20:14|--ah-----|176] C:\SWSTAMP.TXT 
[25/12/2009 21:27|--a------|3648] C:\UsbFix.txt 
[24/12/2009 17:28|--a------|28672] E:\TP4-CpmressionCryptageQuota.doc 
[23/04/2008 19:06|--a------|5143172] E:\adele - chasing pavements(2)(2).mp3 
[29/01/2009 22:28|-ra------|3926116] E:\Backstreet_Boys_-_Helpless_When_She_Smiles_-_hopsmp3thing.com.mp3 
[01/05/2009 11:39|--a------|5214839] E:\hinder- lips of an angel (acoustic)(4).mp3 
[15/08/2009 17:06|--a------|4985042] E:\ - Coldplay - The Scientist.mp3 
[15/08/2009 17:06|--a------|4156325] E:\01-daniel bedingfield - if you're not the one.mp3 
[14/09/2009 09:37|--a------|5717329] E:\07 - I'm Awake Now.mp3 
[14/09/2009 09:37|--a------|3347921] E:\08 - Torn Apart.mp3 
[14/09/2009 09:37|--a------|5471228] E:\09 - No Way Out.mp3 
[14/09/2009 09:37|--a------|5512492] E:\10 - String Of Lies.mp3 
[14/09/2009 09:37|--a------|10156501] E:\11 - We'll Be Here (When You're Gone) (New Mix).mp3 
[14/09/2009 09:37|--a------|6574900] E:\12 - Without You Here.mp3 
[14/09/2009 09:37|--a------|5941507] E:\13 - Only One.mp3 
[14/09/2009 09:37|--a------|6474032] E:\14 - Truth Is A Whisper.mp3 
[14/09/2009 09:37|--a------|8181360] E:\15 - What A Scene.mp3 
[14/09/2009 09:37|--a------|5085884] E:\16 - Million Miles Away.mp3 
[14/09/2009 09:37|--a------|4696521] E:\17 - I Wanna Destroy You.mp3 
[14/09/2009 09:37|--a------|6763020] E:\18 - Wait For The Blackout.mp3 
[14/09/2009 09:37|--a------|4264061] E:\19 - Slave Girl.mp3 
[14/09/2009 09:37|--a------|6541997] E:\20 - Don't Change.mp3 
[14/09/2009 09:37|--a------|6281050] E:\21 - I Don't Want To Know.mp3 
[14/09/2009 09:37|--a------|5985039] E:\22 - American Girl (Live).mp3 
[14/09/2009 09:37|--a------|7554608] E:\01 - Hate This Place.mp3 
[14/09/2009 09:37|--a------|6074511] E:\02 - Stop The World.mp3 
[14/09/2009 09:37|--a------|6351802] E:\03 - Long Way Down.mp3 
[14/09/2009 09:37|--a------|8178285] E:\04 - All Eyes On Me (Live).mp3 
[14/09/2009 09:37|--a------|6720735] E:\05 - Lazy Eye.mp3 
[14/09/2009 09:37|--a------|5543921] E:\06 - Iris (Demo).mp3 
[09/02/2009 17:29|--a------|7859198] E:\Hinder- Homecoming Queen.mp3 
[09/02/2009 16:38|--a------|6344779] E:\Hinder - It Ain't No Suprise.mp3 
[09/02/2009 16:29|--a------|3739481] E:\Hinder - Without You (Album Version).mp3 
[09/02/2009 17:51|--a------|6523743] E:\The Fray - All At Once.mp3 
[09/02/2009 17:41|--a------|7512744] E:\The Fray - Look After You.mp3 
[09/02/2009 18:11|--a------|5237307] E:\The Fray - Trust Me.mp3 
[22/02/2009 07:17|--a------|5730432] E:\Hinder - Bed of roses.mp3 
[24/10/2009 10:56|--a------|5888005] E:\Hinder - Better than me.mp3 
[15/08/2009 18:00|--a------|7559150] E:\02-paramore-decode.mp3 
[15/08/2009 18:00|--a------|5356474] E:\01-muse-supermassive_black_hole.mp3 
[14/09/2009 09:36|--a------|8427098] E:\09-Sum41-With_Me-HHI.mp3 
[14/09/2009 09:36|--a------|6807898] E:\12-Sum41-Best_Of_Me-HHI.mp3 
[09/02/2009 17:18|--a------|4655542] E:\04 - HINDER - Nothin' Good About Goodbye.mp3 
[06/03/2009 13:02|--a------|5135770] E:\Cadillac Records Soundtrack [deluxe] cD1.2008. 05. Beyonce.Once In A Lifetime.mp3 
[09/03/2009 11:40|--a------|4291714] E:\Cadillac Records Soundtrack [deluxe] cD2.2008. 03. Beyonce.Trust In Me.mp3 
[09/03/2009 11:44|--a------|6564950] E:\Cadillac Records Soundtrack - 05 Once In A Lifetime (BeyoncŠ).mp3 
[09/03/2009 12:04|--a------|3676810] E:\Cadillac Records Soundtrack Cd1 2008 11 Beyonce I'd Rather Go Blind.mp3 
[16/12/2009 13:04|--a------|2987262] E:\Orange Whip Groove.mp3 
[13/12/2009 13:59|--a------|2127914] E:\Same Girl.mp3 
[13/12/2009 15:38|--a------|1793803] E:\The Cove.mp3 
[13/12/2009 14:25|--a------|5191093] E:\What You Thought You Need.mp3 
[13/12/2009 14:20|--a------|1423334] E:\While We Wait.mp3 
[13/12/2009 12:47|--a------|2013658] E:\Angel.mp3 
[13/12/2009 15:51|--a------|3896966] E:\Breakdown.mp3 
[13/12/2009 16:08|--a------|3787607] E:\If I Had Eyes.mp3 
[13/12/2009 17:12|--a------|3421347] E:\Imagine.mp3 
[13/11/2009 21:25|--a------|61707] F:\4IIRT1.pdf 
[21/11/2009 13:14|--a------|221184] F:\hokey.mdb 
[04/12/2009 15:02|--a------|741] F:\livre.sql.zip 
[03/12/2009 14:59|--a------|2323] F:\base.txt 
[02/12/2009 21:11|--a------|517632] F:\CoursPHP_Snineh.ppt 
[08/12/2009 17:15|--a------|1048576] F:\base1_Log.LDF 
[08/12/2009 17:15|--a------|1179648] F:\base1_Data.MDF 
[10/12/2009 16:26|--a------|3016] F:\base2.txt 
[16/12/2009 11:16|--a------|427401] F:\suite(PHP).ppt 
[24/12/2009 14:59|--a------|1240] F:\livres_sc.sql 
[24/12/2009 16:28|--a------|424] F:\insert_categoorie.php 
[24/12/2009 15:54|--a------|235] F:\admin_fns.php 
[24/12/2009 17:11|--a------|326] F:\admin_fns_lvr.php 
[10/11/2008 10:25|---hs----|4096] G:	fs4_160.ess 
[13/10/2009 13:20|--a------|28272] G:\Young_Link_Avy_by_iSoulTouch.png 

################## | Vaccination |

# C:\autorun.inf -> Dossier créé par UsbFix.  
# E:\autorun.inf -> Dossier créé par UsbFix.  
# F:\autorun.inf -> Dossier créé par UsbFix.  
# G:\autorun.inf -> Dossier créé par UsbFix.  

################## | Cracks / Keygens / Serials |

"C:\oracle\ora92\jdk\bin\serialver.exe"  
18/04/2002 21:40 |Size 20576 |Crc32 36509380 |Md5 0e24a5116b5dcf62d17781a8aa15640b  
 

################## | Upload | 

Veuillez envoyer le fichier : C:\DOCUME~1\ASSIA\Bureau\UsbFix_Upload_Me_JACINTHUS.zip : https://www.ionos.fr/?affiliate_id=77097 
Merci pour votre contribution .  

################## | ! Fin du rapport # UsbFix V6.067 ! |

jacinthe87 · Answer

malwarebytes

Malwarebytes' Anti-Malware 1.42
Version de la base de données: 3289
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

25/12/2009 22:39:16
mbam-log-2009-12-25 (22-39-16).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 239820
Temps écoulé: 44 minute(s), 49 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

jlpjlp · Answer

antivir remarche?

mets le a jour et colle un rapport avec


si impossible colle un scan en ligne de chez bitdefender
http://www.bitdefender.com/scan_fr/scan8/ie.html

jlpjlp · Answer

ok colle un scan en ligne de chez bitdefender pour voir

jlpjlp · Answer

ok

Télécharge Combofix de sUBs : Renomme le avant toute installation, par exemple, nomme le "KillBagle". aide ici : https://forum.pcastuces.com/sujet.asp?f=25&s=37315

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Sauvegarde le sur ton bureau et pas ailleurs !

Aide à l’utilisation de combofix ici: https://bibou0007.forumpro.fr/login?redirect=%2Ft121-topic

Double-clic sur combofix, Il va te poser une question, réponds par la touche 1 et entrée pour valider, laisse toi guider.
Attends que combofix ait terminé, un rapport sera créé. Poste le rapport.

jlpjlp · Answer

colle un rapport avec dr web
https://www.commentcamarche.net/telecharger/securite/7749-dr-web-cureit/

jacinthe87 · Answer

...

jlpjlp · Answer

ici

https://www.01net.com/telecharger/windows/Securite/antivirus-antitrojan/fiches/33668.html



si cela passe pas

colle un rapport avec
bit defender free

https://www.01net.com/telecharger/windows/Securite/antivirus-antitrojan/fiches/29063.html

jlpjlp · Answer

transfère par une clé usb les deux logiciels et colle les rapports avec

jacinthe87 · Answer

Vous ne me repondez toujours pas à ma question, je crois pas que j'ai un virus aprés le marwarebyte scan , si ce n'est pas le forum convenient, dites le moi.

Merci à vous

jlpjlp · Answer

dr web et bitdefender permettront de voir si tu es infecté

sinon si tu fais cela depuis une école peut etre que tu n'as pas les droits administrateur et que certains sites sont bloqués

jacinthe87 · Answer

non non, c'est mon reseau et normalement ces sites doivent etre affiché, car dans mon 2eme pc tout marche bien

jlpjlp · Answer

la mise à jour manuelle d'antivir et parfois utile . Tu peux nous coller les rapports dr web et bitdefender free?

jacinthe87 · Answer

Re,

SVP pour le Dr web , je lance le scan sans le mettre à jour?
je fais analyse rapide ou complet?

jacinthe87 · Answer

Pour Dr. web , voila ce qu'il a donnée : 
auaaneq.dll	C:\WINDOWS\system32	Win32.HLLW.Shadow.based	Supprimé.

jacinthe87 · Answer

Pour le bitDefender , lors de l'installation , il m'affiche cet erreur:
http://www.cijoint.fr/cjlink.php?file=cj200912/cij6mQExI0.jpg

jacinthe87 · Answer

Toujours pas de reponse...

jlpjlp · Answer

slt
désolé 
je serai dispo demain pour voir cela en profondeur

en attendant

Telecharge genproc de Jean-Chrétien 1 et Narco 4.
http://www.alt-shift-return.org/Info/GenProc-HowTo.html
Poste le rapport .

Mon PC est infecté - Page 2

Newsletters