Packed.Win32.Krap.AS > VIRUS!

tiagoof -  
totobetourne Messages postés 5677 Statut Membre -
Bonjour,
J'ai eu un probleme tres recemment. Mon pc a été infecté par le trojan Packed.Win32.Krap.as (détécté par kaspersky scan online) , qui ralentit pas mal mon pc et baisse ses performances.
Irréparable, je viens demandé de l'aide .

Rapport RSIT :

Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrateur at 2010-02-24 17:10:09
Microsoft Windows XP Professionnel Service Pack 3, v.5657
System drive C: has 180 GB (94%) free of 191 GB
Total RAM: 2046 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:10:33 PM, on 2/24/2010
Platform: Windows XP SP3, v.5657 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20900)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\WINDOWS\vsnpstd3.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\program files\steam\steam.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Program Files\AVG\AVG9\avgemc.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\NWTYQ5RX\RSIT[1].exe
C:\Program Files\trend micro\Administrateur.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr/toolbar/ie8/sidebar.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.fr/toolbar/ie8/sidebar.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr/toolbar/ie8/sidebar.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favoris
R3 - URLSearchHook: DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\WINDOWS\system32\dvmurl.dll
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: ZoneAlarm Toolbar Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O3 - Toolbar: ZoneAlarm Toolbar - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [GEST] =
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [ISW] "C:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /icon="hidden"
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [TOY5KNQ8OC] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Tkd.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Cool Hand Poker - {00000000-0000-0000-0000-000000000000} - C:\MicroGaming\Poker\coolhandMPP\MPPoker.exe (HKCU)
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/3,0,0,5901/mcfscan.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: ZoneAlarm Toolbar IswSvc (IswSvc) - Check Point Software Technologies - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 6619 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
C:\WINDOWS\tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2010-02-22 1484056]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]
ZoneAlarm Toolbar Registrar - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2009-10-27 583024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll [2009-11-25 1230080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-02-17 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-02-17 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll [2009-11-25 1230080]
{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - ZoneAlarm Toolbar - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2009-10-27 583024]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-08-29 61440]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-02-13 16857600]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"GEST"== []
"SunJavaUpdateSched"=C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe [2010-01-11 246504]
"AVG9_TRAY"=C:\PROGRA~1\AVG\AVG9\avgtray.exe [2010-02-22 2033432]
"ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2009-12-04 1037192]
"ISW"=C:\Program Files\CheckPoint\ZAForceField\ForceField.exe [2009-10-27 730480]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=c:\program files\steam\steam.exe [2010-02-20 1217872]
"TOY5KNQ8OC"=C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Tkd.exe [2010-02-23 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-12-01 143360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2010-02-22 12464]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2008-10-19 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=1
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=255
"NoSMHelp"=1
"ForceClassicControlPanel"=1
"NoDesktopCleanupWizard"=1
"NoInstrumentation"=1
"NoResolveSearch"=1
"NoResolveTrack"=1
"NoSMBalloonTip"=1
"NoSMConfigurePrograms"=1
"NoStartMenuMFUprogramsList"=1
"NoStrCmpLogical"=0
"NoWelcomeScreen"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HideRunAsVerb"=
"NoActiveDesktop"=
"NoDriveTypeAutoRun"=
"NoInstrumentation"=
"NoResolveTrack"=
"NoStartMenuMFUprogramsList"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\AVG\AVG9\avgemc.exe"="C:\Program Files\AVG\AVG9\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG9\avgupd.exe"="C:\Program Files\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG9\avgnsx.exe"="C:\Program Files\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======File associations======

.reg - edit -
.reg - open -

======List of files/folders created in the last 1 months======

2010-02-24 17:10:10 ----D---- C:\Program Files\trend micro
2010-02-24 17:10:09 ----D---- C:\rsit
2010-02-24 16:14:13 ----A---- C:\WINDOWS\system32\lsdelete.exe
2010-02-24 16:02:52 ----HDC---- C:\Documents and Settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}
2010-02-24 16:02:34 ----D---- C:\Program Files\Lavasoft
2010-02-24 16:02:34 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
2010-02-24 15:52:48 ----D---- C:\Documents and Settings\Administrateur\Application Data\CheckPoint
2010-02-24 15:52:31 ----D---- C:\Program Files\CheckPoint
2010-02-24 15:52:03 ----A---- C:\WINDOWS\system32\vsutil_loc040c.dll
2010-02-24 15:51:57 ----A---- C:\WINDOWS\system32\vsregexp.dll
2010-02-24 15:51:43 ----A---- C:\WINDOWS\system32\zlcommdb.dll
2010-02-24 15:51:43 ----A---- C:\WINDOWS\system32\zlcomm.dll
2010-02-24 15:51:35 ----A---- C:\WINDOWS\system32\vswmi.dll
2010-02-24 15:51:30 ----A---- C:\WINDOWS\system32\zpeng25.dll
2010-02-24 15:51:29 ----D---- C:\WINDOWS\system32\ZoneLabs
2010-02-24 15:51:29 ----A---- C:\WINDOWS\system32\vsxml.dll
2010-02-24 15:51:28 ----A---- C:\WINDOWS\system32\vspubapi.dll
2010-02-24 15:51:28 ----A---- C:\WINDOWS\system32\vsmonapi.dll
2010-02-24 15:51:24 ----D---- C:\Program Files\Zone Labs
2010-02-24 15:51:00 ----D---- C:\WINDOWS\Internet Logs
2010-02-24 15:50:59 ----A---- C:\WINDOWS\system32\vsutil.dll
2010-02-24 15:50:59 ----A---- C:\WINDOWS\system32\vsinit.dll
2010-02-24 15:50:59 ----A---- C:\WINDOWS\system32\vsdata.dll
2010-02-24 15:40:31 ----D---- C:\WINDOWS\McAfee.com
2010-02-23 20:44:42 ----D---- C:\Documents and Settings\Administrateur\Application Data\Microgaming
2010-02-23 20:43:45 ----D---- C:\MicroGaming
2010-02-23 05:50:38 ----D---- C:\Program Files\Fichiers communs\Adobe
2010-02-22 21:59:52 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2010-02-22 21:58:56 ----A---- C:\WINDOWS\FixCamera.exe
2010-02-22 21:58:56 ----A---- C:\WINDOWS\amcap.exe
2010-02-22 21:58:55 ----A---- C:\WINDOWS\vsnpstd3.exe
2010-02-22 21:58:55 ----A---- C:\WINDOWS\tsnpstd3.exe
2010-02-22 21:58:55 ----A---- C:\WINDOWS\snpstd3.ini
2010-02-22 21:58:53 ----D---- C:\Program Files\Fichiers communs\snpstd3
2010-02-22 21:58:53 ----A---- C:\WINDOWS\system32\vsnpstd3.dll
2010-02-22 21:58:53 ----A---- C:\WINDOWS\system32\rsnpstd3.dll
2010-02-22 21:58:53 ----A---- C:\WINDOWS\system32\csnpstd3.dll
2010-02-22 21:58:53 ----A---- C:\WINDOWS\csnpstd3.dll
2010-02-22 01:54:19 ----HD---- C:\$AVG
2010-02-22 01:54:11 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2010-02-22 01:53:58 ----D---- C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
2010-02-22 01:53:50 ----D---- C:\Program Files\AVG
2010-02-22 01:53:50 ----D---- C:\Documents and Settings\All Users\Application Data\avg9
2010-02-17 03:59:49 ----D---- C:\WINDOWS\Sun
2010-02-17 03:59:44 ----D---- C:\Documents and Settings\All Users\Application Data\Sun
2010-02-17 03:59:43 ----D---- C:\Program Files\Fichiers communs\Java
2010-02-17 03:59:33 ----A---- C:\WINDOWS\system32\javaws.exe
2010-02-17 03:59:33 ----A---- C:\WINDOWS\system32\javaw.exe
2010-02-17 03:59:33 ----A---- C:\WINDOWS\system32\java.exe
2010-02-17 03:59:33 ----A---- C:\WINDOWS\system32\deploytk.dll
2010-02-17 03:59:25 ----D---- C:\Program Files\Java
2010-02-17 03:59:09 ----D---- C:\Documents and Settings\Administrateur\Application Data\Sun
2010-02-17 02:45:06 ----D---- C:\Documents and Settings\All Users\Application Data\TrackMania
2010-02-17 02:32:59 ----D---- C:\WINDOWS\system32\DirectX
2010-02-17 02:30:44 ----D---- C:\Program Files\TmNationsForever
2010-02-16 03:01:40 ----D---- C:\Documents and Settings\Administrateur\Application Data\Notepad++
2010-02-15 17:42:35 ----D---- C:\Documents and Settings\Administrateur\Application Data\dvdcss
2010-02-12 21:23:04 ----D---- C:\Documents and Settings\Administrateur\Application Data\teamspeak2
2010-02-12 21:22:59 ----D---- C:\Program Files\Teamspeak2_RC2
2010-02-12 20:38:28 ----D---- C:\Documents and Settings\Administrateur\Application Data\TS3Client
2010-02-12 20:38:08 ----D---- C:\Program Files\TeamSpeak 3 Client
2010-02-12 04:58:37 ----D---- C:\Documents and Settings\Administrateur\Application Data\vlc
2010-02-12 04:57:26 ----D---- C:\Program Files\VideoLAN
2010-02-12 04:37:42 ----D---- C:\Program Files\mIRC
2010-02-12 04:37:42 ----D---- C:\Documents and Settings\Administrateur\Application Data\mIRC
2010-02-12 03:11:12 ----D---- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2010-02-12 03:10:52 ----D---- C:\Program Files\Messenger Plus! Live
2010-02-12 02:27:52 ----D---- C:\Program Files\PokerStars
2010-02-12 00:41:05 ----D---- C:\Program Files\Microsoft
2010-02-12 00:40:48 ----D---- C:\Program Files\Windows Live SkyDrive
2010-02-12 00:40:23 ----D---- C:\Program Files\Windows Live
2010-02-12 00:37:40 ----D---- C:\Program Files\Fichiers communs\Windows Live
2010-02-12 00:31:30 ----A---- C:\WINDOWS\system32\usbui.dll
2010-02-12 00:30:07 ----SHD---- C:\WINDOWS\Installer
2010-02-12 00:30:07 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-02-12 00:30:06 ----D---- C:\Program Files\Fichiers communs\ODBC
2010-02-12 00:30:06 ----A---- C:\WINDOWS\ODBCINST.INI
2010-02-12 00:30:03 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2010-02-12 00:30:03 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2010-02-12 00:30:02 ----D---- C:\Program Files\Fichiers communs
2010-02-12 00:30:02 ----D---- C:\Program Files
2010-02-12 00:30:00 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2010-02-12 00:30:00 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2010-02-12 00:30:00 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2010-02-12 00:29:59 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2010-02-12 00:29:59 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2010-02-12 00:29:59 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2010-02-12 00:29:59 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2010-02-12 00:29:58 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2010-02-12 00:29:58 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2010-02-12 00:29:58 ----RA---- C:\WINDOWS\system32\kbdur.dll
2010-02-12 00:29:58 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2010-02-12 00:29:58 ----RA---- C:\WINDOWS\system32\kbdru.dll
2010-02-12 00:29:58 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2010-02-12 00:29:58 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2010-02-12 00:29:58 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2010-02-12 00:29:57 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2010-02-12 00:29:57 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2010-02-12 00:29:57 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2010-02-12 00:29:57 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2010-02-12 00:29:57 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2010-02-12 00:29:57 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2010-02-12 00:29:57 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2010-02-12 00:29:56 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2010-02-12 00:29:56 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2010-02-12 00:29:56 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2010-02-12 00:29:56 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2010-02-12 00:29:56 ----RA---- C:\WINDOWS\system32\kbdest.dll
2010-02-12 00:29:55 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2010-02-12 00:29:55 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2010-02-12 00:29:55 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2010-02-12 00:29:55 ----RA---- C:\WINDOWS\system32\kbdro.dll
2010-02-12 00:29:55 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2010-02-12 00:29:55 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2010-02-12 00:29:55 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2010-02-12 00:29:55 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2010-02-12 00:29:55 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2010-02-12 00:29:55 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2010-02-12 00:29:55 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2010-02-12 00:29:55 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2010-02-12 00:29:55 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2010-02-12 00:29:51 ----A---- C:\WINDOWS\system32\spxcoins.dll
2010-02-12 00:29:51 ----A---- C:\WINDOWS\system32\irclass.dll
2010-02-12 00:29:51 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2010-02-12 00:29:51 ----A---- C:\WINDOWS\system32\dgsetup.dll
2010-02-12 00:29:51 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2010-02-12 00:29:49 ----A---- C:\WINDOWS\TASKMAN.EXE
2010-02-12 00:29:49 ----A---- C:\WINDOWS\system32\batt.dll
2010-02-12 00:29:48 ----A---- C:\WINDOWS\system32\storprop.dll
2010-02-12 00:29:48 ----A---- C:\WINDOWS\NOTEPAD.EXE
2010-02-12 00:29:40 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2010-02-12 00:27:48 ----D---- C:\WINDOWS\system32\CatRoot2
2010-02-12 00:27:48 ----D---- C:\WINDOWS\system32\CatRoot
2010-02-12 00:27:42 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2010-02-12 00:26:58 ----SHD---- C:\System Volume Information
2010-02-12 00:26:58 ----D---- C:\Documents and Settings
2010-02-12 00:26:25 ----SH---- C:\boot.ini
2010-02-12 00:23:23 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-02-12 00:23:23 ----RSD---- C:\WINDOWS\Fonts
2010-02-12 00:23:23 ----RD---- C:\WINDOWS\Offline Web Pages
2010-02-12 00:23:23 ----D---- C:\WINDOWS\WinSxS
2010-02-12 00:23:23 ----D---- C:\WINDOWS\Web
2010-02-12 00:23:23 ----D---- C:\WINDOWS\WBEM
2010-02-12 00:23:23 ----D---- C:\WINDOWS\twain_32
2010-02-12 00:23:23 ----D---- C:\WINDOWS\Temp
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\wins
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\wbem
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\usmt
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\spool
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\ShellExt
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\Setup
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\ras
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\npp
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\mui
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\inetsrv
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\IME
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\icsxml
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\ias
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\fr-fr
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\fr
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\export
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\drivers
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\dhcp
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\config
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\3com_dmi
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\3076
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\2052
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\1054
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\1042
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\1041
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\1037
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\1036
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\1033
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\1031
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\1028
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32\1025
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system32
2010-02-12 00:23:23 ----D---- C:\WINDOWS\system
2010-02-12 00:23:23 ----D---- C:\WINDOWS\security
2010-02-12 00:23:23 ----D---- C:\WINDOWS\Resources
2010-02-12 00:23:23 ----D---- C:\WINDOWS\repair
2010-02-12 00:23:23 ----D---- C:\WINDOWS\Provisioning
2010-02-12 00:23:23 ----D---- C:\WINDOWS\PeerNet
2010-02-12 00:23:23 ----D---- C:\WINDOWS\pchealth
2010-02-12 00:23:23 ----D---- C:\WINDOWS\Network Diagnostic
2010-02-12 00:23:23 ----D---- C:\WINDOWS\mui
2010-02-12 00:23:23 ----D---- C:\WINDOWS\msapps
2010-02-12 00:23:23 ----D---- C:\WINDOWS\Media
2010-02-12 00:23:23 ----D---- C:\WINDOWS\L2Schemas
2010-02-12 00:23:23 ----D---- C:\WINDOWS\java
2010-02-12 00:23:23 ----D---- C:\WINDOWS\inf
2010-02-12 00:23:23 ----D---- C:\WINDOWS\ime
2010-02-12 00:23:23 ----D---- C:\WINDOWS\Help
2010-02-12 00:23:23 ----D---- C:\WINDOWS\Driver Cache
2010-02-12 00:23:23 ----D---- C:\WINDOWS\Debug
2010-02-12 00:23:23 ----D---- C:\WINDOWS\Cursors
2010-02-12 00:23:23 ----D---- C:\WINDOWS\Connection Wizard
2010-02-12 00:23:23 ----D---- C:\WINDOWS\Config
2010-02-12 00:23:23 ----D---- C:\WINDOWS\AppPatch
2010-02-12 00:23:23 ----D---- C:\WINDOWS\addins
2010-02-12 00:23:23 ----D---- C:\WINDOWS
2010-02-12 00:21:34 ----D---- C:\Program Files\Steam
2010-02-12 00:13:45 ----D---- C:\Documents and Settings\Administrateur\Application Data\Macromedia
2010-02-12 00:13:44 ----D---- C:\Documents and Settings\Administrateur\Application Data\Adobe
2010-02-12 00:11:11 ----D---- C:\Documents and Settings\All Users\Application Data\Google
2010-02-12 00:05:10 ----D---- C:\WINDOWS\OPTIONS
2010-02-12 00:05:08 ----D---- C:\Documents and Settings\Administrateur\Application Data\InstallShield
2010-02-12 00:04:52 ----D---- C:\WINDOWS\system32\Lang
2010-02-12 00:03:50 ----R---- C:\WINDOWS\system32\ChCfg.exe
2010-02-12 00:03:44 ----D---- C:\WINDOWS\system32\RTCOM
2010-02-12 00:03:37 ----R---- C:\WINDOWS\SoundMan.exe
2010-02-12 00:03:37 ----R---- C:\WINDOWS\SkyTel.exe
2010-02-12 00:03:36 ----R---- C:\WINDOWS\RtlUpd.exe
2010-02-12 00:03:34 ----R---- C:\WINDOWS\RTLCPL.exe
2010-02-12 00:03:30 ----R---- C:\WINDOWS\RTHDCPL.exe
2010-02-12 00:03:30 ----R---- C:\WINDOWS\MicCal.exe
2010-02-12 00:03:28 ----R---- C:\WINDOWS\alcwzrd.exe
2010-02-12 00:03:28 ----R---- C:\WINDOWS\Alcmtr.exe
2010-02-12 00:03:27 ----R---- C:\WINDOWS\RtlExUpd.dll
2010-02-12 00:03:27 ----D---- C:\Program Files\Realtek
2010-02-12 00:03:27 ----A---- C:\WINDOWS\HideWin.exe
2010-02-12 00:01:21 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-02-12 00:01:20 ----RA---- C:\WINDOWS\system32\CSVer.dll
2010-02-12 00:01:20 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-02-12 00:01:19 ----D---- C:\Program Files\Intel
2010-02-12 00:01:15 ----D---- C:\Intel
2010-02-12 00:01:00 ----D---- C:\Program Files\Browser Configuration Utility
2010-02-12 00:01:00 ----A---- C:\WINDOWS\system32\dvmurl.dll
2010-02-11 23:55:50 ----D---- C:\Documents and Settings\Administrateur\Application Data\Mozilla
2010-02-11 23:55:09 ----SHD---- C:\RECYCLER
2010-02-11 23:53:58 ----D---- C:\Documents and Settings\All Users\Application Data\ATI
2010-02-11 23:53:58 ----D---- C:\Documents and Settings\Administrateur\Application Data\ATI
2010-02-11 23:51:24 ----D---- C:\Program Files\Fichiers communs\ATI Technologies
2010-02-11 23:50:51 ----A---- C:\WINDOWS\system32\ksuser.dll
2010-02-11 23:50:37 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2010-02-11 23:50:23 ----HD---- C:\Program Files\InstallShield Installation Information
2010-02-11 23:50:23 ----D---- C:\Program Files\ATI Technologies
2010-02-11 23:50:03 ----D---- C:\Program Files\Fichiers communs\InstallShield
2010-02-11 23:49:38 ----D---- C:\AMD
2010-02-11 23:49:02 ----A---- C:\WINDOWS\system32\h323log.txt
2010-02-11 23:41:50 ----D---- C:\Program Files\SumatraPDF
2010-02-11 23:41:50 ----D---- C:\Documents and Settings\Administrateur\Application Data\SumatraPDF
2010-02-11 23:41:49 ----D---- C:\Program Files\CCleaner
2010-02-11 23:41:45 ----D---- C:\Program Files\uTorrent
2010-02-11 23:41:45 ----D---- C:\Documents and Settings\Administrateur\Application Data\uTorrent
2010-02-11 23:41:42 ----D---- C:\Program Files\Mozilla Firefox
2010-02-11 23:41:36 ----D---- C:\Program Files\IZArc
2010-02-11 23:40:22 ----D---- C:\Documents and Settings\Administrateur\Application Data\Identities
2010-02-11 23:40:18 ----HD---- C:\Program Files\Uninstall Information
2010-02-11 23:40:08 ----SD---- C:\Documents and Settings\Administrateur\Application Data\Microsoft
2010-02-11 23:40:08 ----ASH---- C:\Documents and Settings\Administrateur\Application Data\desktop.ini
2010-02-11 23:40:06 ----D---- C:\WINDOWS\SoftwareDistribution
2010-02-11 23:40:04 ----SD---- C:\WINDOWS\system32\Microsoft
2010-02-11 23:40:04 ----D---- C:\WINDOWS\Prefetch
2010-02-11 23:40:03 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-02-11 23:38:54 ----A---- C:\WINDOWS\system32\UnWTCC.exe
2010-02-11 23:38:06 ----RSD---- C:\WINDOWS\assembly
2010-02-11 23:37:51 ----D---- C:\WINDOWS\Microsoft.NET
2010-02-11 23:37:25 ----A---- C:\WINDOWS\control.ini
2010-02-11 23:37:25 ----A---- C:\AUTOEXEC.BAT
2010-02-11 23:37:06 ----D---- C:\WINDOWS\system32\dllcache
2010-02-11 23:37:06 ----A---- C:\WINDOWS\system32\mapi32.dll
2010-02-11 23:37:03 ----D---- C:\Program Files\Windows Trust
2010-02-11 23:37:01 ----D---- C:\WINDOWS\system32\LangDLLs
2010-02-11 23:36:51 ----D---- C:\Program Files\Paint.NET
2010-02-11 23:36:21 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-02-11 23:36:18 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-02-11 23:36:14 ----HD---- C:\Program Files\WindowsUpdate
2010-02-11 23:36:01 ----D---- C:\Program Files\Windows Media Connect 2
2010-02-11 23:35:53 ----A---- C:\WINDOWS\system32\desktop.ini
2010-02-11 23:35:53 ----A---- C:\WINDOWS\desktop.ini
2010-02-11 23:35:50 ----D---- C:\Program Files\Fichiers communs\Services
2010-02-11 23:35:50 ----A---- C:\WINDOWS\system32\acctres.dll
2010-02-11 23:35:48 ----SD---- C:\WINDOWS\Tasks
2010-02-11 23:35:48 ----D---- C:\Program Files\Fichiers communs\MSSoap
2010-02-11 23:35:48 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2010-02-11 23:35:44 ----A---- C:\WINDOWS\system32\wuweb.dll
2010-02-11 23:35:44 ----A---- C:\WINDOWS\system32\wuauserv.dll
2010-02-11 23:35:44 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2010-02-11 23:35:43 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2010-02-11 23:35:43 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2010-02-11 23:35:43 ----A---- C:\WINDOWS\system32\qmgr.dll
2010-02-11 23:35:43 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2010-02-11 23:35:43 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2010-02-11 23:35:43 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2010-02-11 23:35:42 ----A---- C:\WINDOWS\system32\fltMc.exe
2010-02-11 23:35:42 ----A---- C:\WINDOWS\system32\fltlib.dll
2010-02-11 23:35:41 ----D---- C:\WINDOWS\system32\Restore
2010-02-11 23:35:41 ----A---- C:\WINDOWS\system32\srsvc.dll
2010-02-11 23:35:41 ----A---- C:\WINDOWS\system32\srrstr.dll
2010-02-11 23:35:41 ----A---- C:\WINDOWS\system32\srclient.dll
2010-02-11 23:35:40 ----A---- C:\WINDOWS\system32\msoert2.dll
2010-02-11 23:35:40 ----A---- C:\WINDOWS\system32\msoeacct.dll
2010-02-11 23:35:39 ----A---- C:\WINDOWS\system32\inetres.dll
2010-02-11 23:35:39 ----A---- C:\WINDOWS\system32\inetcomm.dll
2010-02-11 23:35:38 ----D---- C:\Program Files\Outlook Express
2010-02-11 23:35:38 ----A---- C:\WINDOWS\system32\schedsvc.dll
2010-02-11 23:35:38 ----A---- C:\WINDOWS\system32\mstinit.exe
2010-02-11 23:35:37 ----A---- C:\WINDOWS\system32\mstask.dll
2010-02-11 23:35:37 ----A---- C:\WINDOWS\system32\isign32.dll
2010-02-11 23:35:37 ----A---- C:\WINDOWS\system32\inetcfg.dll
2010-02-11 23:35:37 ----A---- C:\WINDOWS\system32\icwphbk.dll
2010-02-11 23:35:37 ----A---- C:\WINDOWS\system32\icwdial.dll
2010-02-11 23:35:33 ----D---- C:\Program Files\Fichiers communs\System
2010-02-11 23:35:32 ----D---- C:\Program Files\Internet Explorer
2010-02-11 23:34:55 ----D---- C:\Program Files\ComPlus Applications
2010-02-11 23:34:53 ----A---- C:\WINDOWS\vbaddin.ini
2010-02-11 23:34:53 ----A---- C:\WINDOWS\vb.ini
2010-02-11 23:34:49 ----D---- C:\WINDOWS\Registration
2010-02-11 23:34:40 ----D---- C:\Program Files\Windows Media Player
2010-02-11 23:34:31 ----D---- C:\Program Files\Unlocker
2010-02-11 23:34:31 ----D---- C:\Program Files\Notepad++
2010-02-11 23:34:24 ----D---- C:\Program Files\WTInstaller
2010-02-11 23:34:22 ----D---- C:\WINDOWS\system32\Macromed
2010-02-11 23:34:22 ----A---- C:\WINDOWS\system32\sndvol32.exe
2010-02-11 23:34:21 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2010-02-11 23:34:21 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2010-02-11 23:34:21 ----A---- C:\WINDOWS\system32\tslabels.ini
2010-02-11 23:34:21 ----A---- C:\WINDOWS\system32\tskill.exe
2010-02-11 23:34:21 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2010-02-11 23:34:21 ----A---- C:\WINDOWS\system32\tscon.exe
2010-02-11 23:34:21 ----A---- C:\WINDOWS\system32\shadow.exe
2010-02-11 23:34:21 ----A---- C:\WINDOWS\system32\rwinsta.exe
2010-02-11 23:34:21 ----A---- C:\WINDOWS\system32\reset.exe
2010-02-11 23:34:21 ----A---- C:\WINDOWS\system32\regini.exe
2010-02-11 23:34:21 ----A---- C:\WINDOWS\system32\getuname.dll
2010-02-11 23:34:21 ----A---- C:\WINDOWS\system32\charmap.exe
2010-02-11 23:34:21 ----A---- C:\WINDOWS\system32\calc.exe
2010-02-11 23:34:20 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2010-02-11 23:34:20 ----A---- C:\WINDOWS\system32\qwinsta.exe
2010-02-11 23:34:20 ----A---- C:\WINDOWS\system32\qappsrv.exe
2010-02-11 23:34:20 ----A---- C:\WINDOWS\system32\msg.exe
2010-02-11 23:34:20 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2010-02-11 23:34:20 ----A---- C:\WINDOWS\system32\logoff.exe
2010-02-11 23:34:20 ----A---- C:\WINDOWS\system32\cdmodem.dll
2010-02-11 23:34:17 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2010-02-11 23:34:16 ----A---- C:\WINDOWS\system32\tsgqec.dll
2010-02-11 23:34:16 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2010-02-11 23:34:16 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2010-02-11 23:34:16 ----A---- C:\WINDOWS\system32\mplay32.exe
2010-02-11 23:34:15 ----A---- C:\WINDOWS\system32\remotepg.dll
2010-02-11 23:34:15 ----A---- C:\WINDOWS\system32\rdshost.exe
2010-02-11 23:34:15 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2010-02-11 23:34:15 ----A---- C:\WINDOWS\system32\mstscax.dll
2010-02-11 23:34:15 ----A---- C:\WINDOWS\system32\mstsc.exe
2010-02-11 23:34:15 ----A---- C:\WINDOWS\system32\aaclient.dll
2010-02-11 23:34:14 ----D---- C:\WINDOWS\system32\MsDtc
2010-02-11 23:34:14 ----A---- C:\WINDOWS\system32\termsrv.dll
2010-02-11 23:34:14 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2010-02-11 23:34:14 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2010-02-11 23:34:14 ----A---- C:\WINDOWS\system32\rdpclip.exe
2010-02-11 23:34:14 ----A---- C:\WINDOWS\system32\rdchost.dll
2010-02-11 23:34:14 ----A---- C:\WINDOWS\system32\qprocess.exe
2010-02-11 23:34:14 ----A---- C:\WINDOWS\system32\mtxoci.dll
2010-02-11 23:34:14 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2010-02-11 23:34:14 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2010-02-11 23:34:14 ----A---- C:\WINDOWS\system32\icaapi.dll
2010-02-11 23:34:14 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2010-02-11 23:34:13 ----D---- C:\WINDOWS\system32\Com
2010-02-11 23:34:13 ----A---- C:\WINDOWS\system32\xolehlp.dll
2010-02-11 23:34:13 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2010-02-11 23:34:13 ----A---- C:\WINDOWS\system32\mtxex.dll
2010-02-11 23:34:13 ----A---- C:\WINDOWS\system32\mtxdm.dll
2010-02-11 23:34:13 ----A---- C:\WINDOWS\system32\msdtctm.dll
2010-02-11 23:34:13 ----A---- C:\WINDOWS\system32\msdtclog.dll
2010-02-11 23:34:13 ----A---- C:\WINDOWS\system32\msdtc.exe
2010-02-11 23:34:13 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2010-02-11 23:34:13 ----A---- C:\WINDOWS\system32\comaddin.dll
2010-02-11 23:34:13 ----A---- C:\WINDOWS\system32\colbact.dll
2010-02-11 23:34:12 ----A---- C:\WINDOWS\system32\stclient.dll
2010-02-11 23:34:12 ----A---- C:\WINDOWS\system32\comuid.dll
2010-02-11 23:34:12 ----A---- C:\WINDOWS\system32\comsvcs.dll
2010-02-11 23:34:12 ----A---- C:\WINDOWS\system32\comrepl.dll
2010-02-11 23:34:12 ----A---- C:\WINDOWS\system32\clbcatex.dll
2010-02-11 23:34:12 ----A---- C:\WINDOWS\system32\catsrvut.dll
2010-02-11 23:34:12 ----A---- C:\WINDOWS\system32\catsrvps.dll
2010-02-11 23:34:12 ----A---- C:\WINDOWS\system32\catsrv.dll
2010-02-11 23:34:11 ----A---- C:\WINDOWS\system32\comsnap.dll
2010-02-11 23:34:11 ----A---- C:\WINDOWS\system32\clbcatq.dll
2010-02-11 23:34:07 ----A---- C:\WINDOWS\system32\servdeps.dll
2010-02-11 23:34:07 ----A---- C:\WINDOWS\system32\mmfutil.dll
2010-02-11 23:34:07 ----A---- C:\WINDOWS\system32\licwmi.dll
2010-02-11 23:34:07 ----A---- C:\WINDOWS\system32\cmprops.dll

======List of files/folders modified in the last 1 months======

2010-02-24 15:32:45 ----A---- C:\WINDOWS\win.ini
2010-02-12 00:30:01 ----A---- C:\WINDOWS\system.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2010-02-22 333192]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2010-02-22 28424]
R1 AvgTdiX;AVG Free Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2010-02-22 360584]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2009-12-04 486280]
R2 ISWKL;ZoneAlarm Toolbar ISWKL; \??\C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys []
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-12-01 3452928]
R3 AtiHdmiService;ATI Function Driver for HDMI Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2008-10-31 93184]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-02-14 4676096]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-10-19 12288]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-01-03 105856]
R3 SNPSTD3;USB PC Camera (SNPSTD3); C:\WINDOWS\system32\DRIVERS\snpstd3.sys [2008-03-07 10423680]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 PciCon;PciCon; \??\H:\PciCon.sys []
S3 rkhdrv40;Rootkit Unhooker Driver; C:\WINDOWS\system32\drivers\rkhdrv40.sys []
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-10-19 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-10-19 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-12-01 598016]
R2 avg9emc;AVG Free E-mail Scanner; C:\Program Files\AVG\AVG9\avgemc.exe [2010-02-22 906520]
R2 avg9wd;AVG Free WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2010-02-22 285392]
R2 IswSvc;ZoneAlarm Toolbar IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [2009-10-27 476528]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-02-17 153376]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2010-02-24 1181328]
R2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2009-12-04 2384240]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-12-01 593920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S4 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2008-10-19 918016]

-----------------EOF-----------------

PS : Le fichier en question est TKD.exe situé dans le repertoir C:\Documents&Settings\Admin\LocalSettings\Temp . Si ça peut aider ..

Merci de votre aide cowboys ;
tiagoof.
Configuration: Windows XP / Internet Explorer 7.0

3 réponses

totobetourne Messages postés 5677 Statut Membre 65
 
bonjour

pour voir télécharge combofix (par sUBs) ici :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

et enregistre le sur le bureau.

déconnecte toi d'internet et ferme toutes tes applications.

désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

double-clique sur combofix.exe et suis les instructions

à la fin, il va produire un rapport C:\ComboFix.txt

réactive ton parefeu, ton antivirus, la garde de ton antispyware

copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

Tu as un tutoriel complet ici :

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
0
tiagoof
 
Ups, systeme d'exploitation imcompatible :s
0
totobetourne Messages postés 5677 Statut Membre 65
 
ok, merci.

ton windows est il bien legal?

passe cela.
--> Télécharge UsbFix (de Chiquitine29) sur ton Bureau.
http://pagesperso-orange.fr/NosTools/usbfix.html

--> Branche tes sources de données externes à ton PC (clé USB, disque dur externe, carte SD, etc...) sans les ouvrir.

--> Clique droit sur le raccourci UsbFix situé sur ton Bureau et choisis Exécuter en tant qu'administrateur.

--> Choisis l'option 1 (recherche).

--> Le PC va redémarrer.

--> Après redémarrage, poste le rapport UsbFix.txt

Note : le rapport UsbFix.txt est sauvegardé à la racine du disque.

(Si le Bureau ne réapparaît pas, presse Ctrl+Alt+Suppr, Onglet "Fichier", "Nouvelle tâche", tape explorer.exe et valide)

refais pareil mais en option 2 apres colle le rapport que tu obtiens.
0