Malware

Rusher -  
Bonjour,
en faisant une recherche Malwarebytes j'ai eu ce rapport : Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3825
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

05/03/2010 20:41:26
mbam-log-2010-03-05 (20-41-26).txt

Type de recherche: Examen rapide
Eléments examinés: 107842
Temps écoulé: 4 minute(s), 6 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 2

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cdoosoft (Spyware.OnlineGames) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Documents and Settings\Geordy\Local Settings\Temp\cvasds0.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\Documents and Settings\Geordy\Local Settings\Temp\herss.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.

Après une suppression et un redémarrage, j'obtiens le même rapport. Pourrais-je avoir de l'aide ?
Configuration: Windows XP / Firefox 3.6

23 réponses

Résumé de la discussion

Le fil porte sur un rapport Malwarebytes montrant des éléments registrés et des fichiers liés à Spyware.OnlineGames sur Windows XP, le redémarrage ne résout pas le problème et l’utilisateur demande de l’aide. Une recommandation propose d’utiliser HijackThis puis RSIT pour analyser en profondeur le système et partager les rapports étape par étape, afin d’identifier les configurations nuisibles et de préparer des actions de nettoyage plus ciblées. D’autres échanges suggèrent ensuite RSIT puis ZHPDiag pour compléter l’analyse et nettoyer les éléments résiduels, reflétant une progression vers des outils complémentaires afin d’identifier d’éventuelles réinstallations malveillantes.

Bobot (l’IA à votre service)
  1. archet9
    Bonsoir Rusher

    Je te conseille vivement de suivre les instructions de:
    Guillaume5188


    ==>" I am toto"     porte parfaitement son nom ....!!!!

    a+
    1
    1. soufiandedk
      explique moi plus précisement stp
      0
      1. Rusher
        Cela veut dire que Malwarebytes supprime "temporairement" c'est fichier infecté car ils reviennent systématiquement...
        0
        1. Utilisateur anonyme
          Bonsoir

          Pour de plus amples informations;fait ceci stp;merci

          a) Télécharge et installe le logiciel HijackThis :

          https://www.commentcamarche.net/telecharger/securite/11747-hijackthis/
          ou ici http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
          ou ici https://www.clubic.com/telecharger-fiche17891-hijackthis.html

          -->Clique sur le setup pour lancer l'installation : laisse toi guider et ne modifie pas les paramètres d'installation .
          A la fin de l’installation, le programme se lance automatiquement : ferme le en cliquant sur la croix rouge.
          Au final, tu dois avoir un raccourci sur ton bureau et aussi un cheminement comme :
          "C:\ program files\Trend Micro\HijackThis\HijackThis.exe " .

          (Ne lance pas ce prg pour l'instant et fais la suite ... )

          b) Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

          -> http://images.malwareremoval.com/random/RSIT.exe

          ! Déconnecte toi et ferme toutes tes applications en cours !

          Double-clique sur " RSIT.exe " pour le lancer.

          Clic droit sous VISTA (exécuter en tant que…)

          -> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

          * Devant l'option "List files/folders created ..." , tu choisis : 2 months

          * clique ensuite sur " Continue " pour lancer l'analyse ...

          -> laisse faire le scan et ne touche pas au PC ...

          Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-notes).

          Poste le contenu de " log.txt " (c'est celui qui apparaît à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

          Important : poste un rapport, puis l'autre dans la réponse suivante ...
          Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum ...
          ( Et si "log.txt" seul, ne passe pas non plus , fais le en 2 fois ... merci ... )

          ( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit

          @+
          0
          2. i am toto
            pas besoin d'explication, passe un coup de RSIT .

            Tu telecahge RSIT : https://www.commentcamarche.net/telecharger/securite/19597-rsit/

            (tuto : https://forum.pcastuces.com/randoms_system_information_tool_rsit-f31s31.htm

            tu psot le rapport.

            aprés tu telecahge ZHPDiag :

            tu le telecahge

            tu l'installe,

            tu clique sur l'icon ZHPDiag

            tu clique sur la loupe et tu touche a rien jusqu'a le rapport

            tu post le rapport

            aprés tu telecahge cclener, tu fait une analyse et tu netoie (normalement c'est pour supprimerles fichier qui serve arien , mais des fichier peuve se servired de ses fichier pour se reinstaller.
            0
            1. archet9
              Bonsoir Rusher,

              Et bonsoir à vous tous....

              ==> Message édité !

              a+
              0
              1. Rusher
                Logfile of random's system information tool 1.06 (written by random/random)
                Run by Geordy at 2010-03-05 21:14:57
                Microsoft Windows XP Édition familiale Service Pack 2
                System drive C: has 427 GB (90%) free of 477 GB
                Total RAM: 446 MB (39% free)

                Logfile of Trend Micro HijackThis v2.0.2
                Scan saved at 21:14:58, on 05/03/2010
                Platform: Windows XP SP2 (WinNT 5.01.2600)
                MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
                Boot mode: Normal

                Running processes:
                C:\WINDOWS\System32\smss.exe
                C:\WINDOWS\system32\winlogon.exe
                C:\WINDOWS\system32\services.exe
                C:\WINDOWS\system32\lsass.exe
                C:\WINDOWS\system32\Ati2evxx.exe
                C:\WINDOWS\system32\svchost.exe
                C:\WINDOWS\System32\svchost.exe
                C:\WINDOWS\system32\spoolsv.exe
                C:\Program Files\Avira\AntiVir Desktop\sched.exe
                C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe
                C:\Program Files\PC Tools Firewall Plus\FWService.exe
                C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe
                C:\WINDOWS\system32\Ati2evxx.exe
                C:\WINDOWS\Explorer.EXE
                C:\WINDOWS\system32\rundll32.exe
                C:\WINDOWS\system32\wscntfy.exe
                C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
                C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
                C:\WINDOWS\RTHDCPL.EXE
                C:\WINDOWS\system32\ctfmon.exe
                C:\Program Files\TP-LINK\TL-WN321G\COMMON\TWCU.exe
                C:\WINDOWS\System32\svchost.exe
                C:\Documents and Settings\Geordy\Bureau\RSIT.exe
                C:\Program Files\Trend Micro\HijackThis\Geordy.exe

                R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=
                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
                O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
                O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
                O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
                O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
                O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
                O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
                O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
                O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
                O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
                O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
                O4 - HKCU\..\Run: [cdoosoft] C:\DOCUME~1\Geordy\LOCALS~1\Temp\herss.exe
                O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
                O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
                O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
                O4 - Global Startup: TL-WN321G Wireless Utility.lnk = C:\Program Files\TP-LINK\TL-WN321G\COMMON\TWCU.exe
                O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                O17 - HKLM\System\CCS\Services\Tcpip\..\{E2AE303D-8394-43FE-A9BA-58F08702E139}: NameServer = 212.27.40.241,212.27.40.240
                O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
                O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
                O20 - AppInit_DLLs:
                O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
                O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
                O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe
                O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - C:\Program Files\PC Tools Firewall Plus\FWService.exe
                O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Unknown owner - C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe
                0
                1. Rusher
                  2010-03-03 18:18:17 ----D---- C:\WINDOWS\PeerNet
                  2010-03-03 18:18:14 ----HDC---- C:\WINDOWS\$NtUninstallKB817778$
                  2010-03-03 18:18:05 ----ASH---- C:\Documents and Settings\Geordy\Application Data\desktop.ini
                  2010-03-03 18:18:04 ----SD---- C:\Documents and Settings\Geordy\Application Data\Microsoft
                  2010-03-03 18:17:32 ----SHD---- C:\System Volume Information
                  2010-03-03 18:17:31 ----A---- C:\WINDOWS\SchedLgU.Txt
                  2010-03-03 18:15:03 ----D---- C:\WINDOWS\system32\xircom
                  2010-03-03 18:15:03 ----D---- C:\Program Files\xerox
                  2010-03-03 18:15:03 ----D---- C:\Program Files\microsoft frontpage
                  2010-03-03 18:14:49 ----HDC---- C:\WINDOWS\$NtUninstallKB822603$
                  2010-03-03 18:14:42 ----HDC---- C:\WINDOWS\$NtUninstallQ828026$
                  2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\jit.dll
                  2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\javaee.dll
                  2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\dx3j.dll
                  2010-03-03 18:14:38 ----A---- C:\WINDOWS\setdebug.exe
                  2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\wjview.exe
                  2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\vmhelper.dll
                  2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msjdbc10.dll
                  2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msjava.dll
                  2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msawt.dll
                  2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\jview.exe
                  2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\jdbgmgr.exe
                  2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javart.dll
                  2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javaprxy.dll
                  2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javacypt.dll
                  2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\clspack.exe
                  2010-03-03 18:14:29 ----HDC---- C:\WINDOWS\$NtUninstallKB824105$
                  2010-03-03 18:14:20 ----HDC---- C:\WINDOWS\$NtUninstallKB825121$
                  2010-03-03 18:14:18 ----D---- C:\Program Files\HighMAT CD Writing Wizard
                  2010-03-03 18:14:17 ----D---- C:\WINDOWS\Downloaded Installations
                  2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\rpcss.dll
                  2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\rpcrt4.dll
                  2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\ole32.dll
                  2010-03-03 18:14:11 ----HDC---- C:\WINDOWS\$NtUninstallKB820291$
                  2010-03-03 18:14:07 ----HDC---- C:\WINDOWS\$NtUninstallQ815485$
                  2010-03-03 18:13:59 ----HDC---- C:\WINDOWS\$NtUninstallKB810217$
                  2010-03-03 18:13:52 ----HDC---- C:\WINDOWS\$NtUninstallKB828035$
                  2010-03-03 18:13:52 ----A---- C:\WINDOWS\system32\msgsvc.dll
                  2010-03-03 18:13:48 ----HDC---- C:\WINDOWS\$NtUninstallKB826939$
                  2010-03-03 18:13:46 ----A---- C:\WINDOWS\system32\cryptsvc.dll
                  2010-03-03 18:13:44 ----A---- C:\WINDOWS\system32\newdev.dll
                  2010-03-03 18:13:43 ----A---- C:\WINDOWS\system32\shell32.dll
                  2010-03-03 18:13:35 ----HDC---- C:\WINDOWS\$NtUninstallKB825119$
                  2010-03-03 18:13:31 ----HDC---- C:\WINDOWS\$NtUninstallKB824141$
                  2010-03-03 18:13:27 ----HDC---- C:\WINDOWS\$NtUninstallKB823182$
                  2010-03-03 18:13:23 ----HDC---- C:\WINDOWS\$NtUninstallq329623$
                  2010-03-03 18:13:20 ----HDC---- C:\WINDOWS\$NtUninstallKB823980$
                  2010-03-03 18:13:16 ----HDC---- C:\WINDOWS\$NtUninstallKB823559$
                  2010-03-03 18:13:13 ----D---- C:\Program Files\Common Files
                  2010-03-03 18:13:09 ----HDC---- C:\WINDOWS\$NtUninstallKB821557$
                  2010-03-03 18:13:02 ----HDC---- C:\WINDOWS\$NtUninstallQ819696$
                  2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\wstdecod.dll
                  2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\psisdecd.dll
                  2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\msyuv.dll
                  2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\msvidctl.dll
                  2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmpdxm.dll
                  2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmpasf.dll
                  2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmerror.dll
                  2010-03-03 18:12:35 ----A---- C:\WINDOWS\system32\mspmsnsv.dll
                  2010-03-03 18:12:32 ----D---- C:\WINDOWS\RegisteredPackages
                  2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmvdmoe2.dll
                  2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmspdmoe.dll
                  2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmspdmod.dll
                  2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmsdmoe2.dll
                  2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmidx.dll
                  2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\mp4sdmod.dll
                  2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\mp43dmod.dll
                  2010-03-03 18:12:11 ----HDC---- C:\WINDOWS\$NtUninstallQ817606$
                  2010-03-03 18:12:08 ----HDC---- C:\WINDOWS\$NtUninstallQ817287$
                  2010-03-03 18:12:05 ----HDC---- C:\WINDOWS\$NtUninstallQ814033$
                  2010-03-03 18:11:58 ----HDC---- C:\WINDOWS\$NtUninstallQ811493$
                  2010-03-03 18:11:53 ----HDC---- C:\WINDOWS\$NtUninstallQ810833$
                  2010-03-03 18:11:50 ----HDC---- C:\WINDOWS\$NtUninstallQ810577$
                  2010-03-03 18:11:40 ----HDC---- C:\WINDOWS\$NtUninstallQ810565$
                  2010-03-03 18:11:31 ----HDC---- C:\WINDOWS\$NtUninstallQ331953$
                  2010-03-03 18:11:21 ----HD---- C:\Program Files\Uninstall Information
                  2010-03-03 18:11:18 ----HDC---- C:\WINDOWS\$NtUninstallQ329834$
                  2010-03-03 18:11:18 ----D---- C:\8c577054f32042639ee4988cc2f432d6
                  2010-03-03 18:11:16 ----HDC---- C:\WINDOWS\$NtUninstallQ329441$
                  2010-03-03 18:11:15 ----A---- C:\WINDOWS\system32\srrstr.dll
                  2010-03-03 18:11:13 ----HDC---- C:\WINDOWS\$NtUninstallQ329390$
                  2010-03-03 18:11:10 ----HDC---- C:\WINDOWS\$NtUninstallQ329170$
                  2010-03-03 18:11:07 ----HDC---- C:\WINDOWS\$NtUninstallQ329048$
                  2010-03-03 18:11:04 ----HDC---- C:\WINDOWS\$NtUninstallQ328310$
                  2010-03-03 18:11:03 ----A---- C:\WINDOWS\system32\xpsp1hfm.exe
                  2010-03-03 18:10:54 ----HDC---- C:\WINDOWS\$NtUninstallQ327979$
                  2010-03-03 18:10:42 ----HDC---- C:\WINDOWS\$NtUninstallKB282010$
                  2010-03-03 18:10:38 ----A---- C:\WINDOWS\817778.EXE
                  2010-03-03 18:10:34 ----D---- C:\Program Files\Windows Journal Viewer
                  2010-03-03 18:09:59 ----RSD---- C:\WINDOWS\assembly
                  2010-03-03 18:09:59 ----D---- C:\WINDOWS\system32\URTTemp
                  2010-03-03 18:09:59 ----D---- C:\WINDOWS\Microsoft.NET
                  2010-03-03 18:09:57 ----SHD---- C:\WINDOWS\Installer
                  2010-03-03 18:09:30 ----A---- C:\WINDOWS\control.ini
                  2010-03-03 18:09:30 ----A---- C:\AUTOEXEC.BAT
                  2010-03-03 18:09:26 ----A---- C:\WINDOWS\OEWABLog.txt
                  2010-03-03 18:09:23 ----A---- C:\WINDOWS\system32\mapi32.dll
                  2010-03-03 18:08:55 ----SD---- C:\WINDOWS\Downloaded Program Files
                  2010-03-03 18:08:55 ----RD---- C:\WINDOWS\Offline Web Pages
                  2010-03-03 18:08:55 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
                  2010-03-03 18:08:52 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
                  2010-03-03 18:08:37 ----D---- C:\WINDOWS\system32\DirectX
                  2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrslv.dll
                  2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrdm.dll
                  2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrcdlg.dll
                  2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\racpldlg.dll
                  2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\atrace.dll
                  2010-03-03 18:08:10 ----A---- C:\WINDOWS\system32\desktop.ini
                  2010-03-03 18:08:10 ----A---- C:\WINDOWS\desktop.ini
                  2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
                  2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
                  2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\isrdbg32.dll
                  2010-03-03 18:08:03 ----A---- C:\WINDOWS\system32\acctres.dll
                  2010-03-03 18:08:02 ----D---- C:\Program Files\Fichiers communs\Services
                  2010-03-03 18:07:59 ----SD---- C:\WINDOWS\Tasks
                  2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\isign32.dll
                  2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\icwphbk.dll
                  2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\icwdial.dll
                  2010-03-03 18:07:58 ----A---- C:\WINDOWS\system32\inetcfg.dll
                  2010-03-03 18:07:58 ----A---- C:\WINDOWS\system32\icfgnt5.dll
                  2010-03-03 18:07:57 ----D---- C:\Program Files\Fichiers communs\MSSoap
                  2010-03-03 18:07:53 ----D---- C:\WINDOWS\srchasst
                  2010-03-03 18:07:52 ----D---- C:\WINDOWS\system32\Macromed
                  2010-03-03 18:07:51 ----D---- C:\Program Files\Movie Maker
                  2010-03-03 18:07:51 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
                  2010-03-03 18:07:51 ----A---- C:\WINDOWS\system32\qmgr.dll
                  2010-03-03 18:07:47 ----D---- C:\WINDOWS\system32\Restore
                  2010-03-03 18:07:47 ----D---- C:\WINDOWS\PCHealth
                  2010-03-03 18:07:47 ----A---- C:\WINDOWS\system32\srsvc.dll
                  2010-03-03 18:07:47 ----A---- C:\WINDOWS\system32\srclient.dll
                  2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\nmmkcert.dll
                  2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\msconf.dll
                  2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\mnmdd.dll
                  2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\ils.dll
                  2010-03-03 18:07:44 ----D---- C:\Program Files\NetMeeting
                  2010-03-03 18:07:43 ----D---- C:\Program Files\Outlook Express
                  2010-03-03 18:07:43 ----A---- C:\WINDOWS\system32\schedsvc.dll
                  2010-03-03 18:07:42 ----A---- C:\WINDOWS\system32\mstinit.exe
                  2010-03-03 18:07:42 ----A---- C:\WINDOWS\system32\mstask.dll
                  2010-03-03 18:07:37 ----D---- C:\Program Files\Fichiers communs\System
                  2010-03-03 18:07:36 ----D---- C:\Program Files\Internet Explorer
                  2010-03-03 18:07:33 ----D---- C:\Program Files\ComPlus Applications
                  2010-03-03 18:07:33 ----A---- C:\WINDOWS\vbaddin.ini
                  2010-03-03 18:07:33 ----A---- C:\WINDOWS\vb.ini
                  2010-03-03 18:07:32 ----D---- C:\WINDOWS\Registration
                  2010-03-03 18:07:19 ----HD---- C:\Program Files\WindowsUpdate
                  2010-03-03 18:07:19 ----D---- C:\Program Files\Windows Media Player
                  2010-03-03 18:07:19 ----D---- C:\Program Files\Services en ligne
                  2010-03-03 18:07:17 ----D---- C:\Program Files\Messenger
                  2010-03-03 18:07:12 ----D---- C:\Program Files\MSN Gaming Zone
                  2010-03-03 18:07:12 ----A---- C:\WINDOWS\system32\write.exe
                  2010-03-03 18:07:05 ----A---- C:\WINDOWS\system32\sndvol32.exe
                  2010-03-03 18:07:05 ----A---- C:\WINDOWS\system32\sndrec32.exe
                  2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\hypertrm.dll
                  2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\hticons.dll
                  2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avwav.dll
                  2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avtapi.dll
                  2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avmeter.dll
                  2010-03-03 18:07:03 ----A---- C:\WINDOWS\system32\winchat.exe
                  2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\sol.exe
                  2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\getuname.dll
                  2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\charmap.exe
                  2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\calc.exe
                  2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\winmine.exe
                  2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\usrlogon.cmd
                  2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tsshutdn.exe
                  2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tslabels.ini
                  2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tskill.exe
                  2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\reset.exe
                  2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\rdshost.exe
                  2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\mshearts.exe
                  2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\freecell.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\tsdiscon.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\tscon.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\shadow.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\rwinsta.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\regini.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qwinsta.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qprocess.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qappsrv.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\mtxoci.dll
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\msg.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\logoff.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\cdmodem.dll
                  2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\xolehlp.dll
                  2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtctm.dll
                  2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtcprf.ini
                  2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtclog.dll
                  2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtc.exe
                  2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\stclient.dll
                  2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxlegih.dll
                  2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxex.dll
                  2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxdm.dll
                  2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
                  2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\comrepl.dll
                  2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\comaddin.dll
                  2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\colbact.dll
                  2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\comuid.dll
                  2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\comsnap.dll
                  2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\clbcatq.dll
                  2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\clbcatex.dll
                  2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\catsrvps.dll
                  2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\catsrv.dll
                  2010-03-03 18:06:48 ----A---- C:\WINDOWS\system32\wmimgmt.msc
                  2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\servdeps.dll
                  2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\mmfutil.dll
                  2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\cmprops.dll
                  2010-03-03 18:06:43 ----D---- C:\Program Files\Windows NT
                  2010-03-03 18:06:43 ----D---- C:\Program Files\MSN
                  2010-03-03 18:06:43 ----A---- C:\WINDOWS\system32\mplay32.exe
                  2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuauserv.dll
                  2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuaueng.dll
                  2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuauclt.exe
                  2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\spider.exe
                  2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\mspaint.exe
                  2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\clipbrd.exe
                  2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\tscupgrd.exe
                  2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
                  2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\termsrv.dll
                  2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\sessmgr.exe
                  2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\remotepg.dll
                  2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\rdsaddin.exe
                  2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\rdchost.dll
                  2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\mstscax.dll
                  2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\mstsc.exe
                  2010-03-03 18:06:40 ----D---- C:\WINDOWS\system32\MsDtc
                  2010-03-03 18:06:40 ----D---- C:\WINDOWS\system32\Com
                  2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpwsx.dll
                  2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpsnd.dll
                  2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpclip.exe
                  2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\msdtcprx.dll
                  2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\icaapi.dll
                  2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\cfgbkend.dll
                  2010-03-03 18:06:39 ----A---- C:\WINDOWS\system32\comsvcs.dll
                  2010-03-03 18:06:39 ----A---- C:\WINDOWS\system32\catsrvut.dll
                  2010-03-03 18:06:36 ----A---- C:\WINDOWS\system32\licwmi.dll
                  2010-03-03 18:06:18 ----A---- C:\WINDOWS\system32\h323log.txt
                  2010-03-03 18:05:28 ----A---- C:\WINDOWS\system32\hidserv.dll
                  2010-03-03 18:04:45 ----A---- C:\WINDOWS\system32\usbui.dll
                  2010-03-03 18:03:55 ----A---- C:\WINDOWS\imsins.BAK
                  2010-03-03 18:03:53 ----D---- C:\Program Files\Fichiers communs\ODBC
                  2010-03-03 18:03:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
                  2010-03-03 18:03:53 ----A---- C:\WINDOWS\ODBCINST.INI
                  2010-03-03 18:03:50 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
                  2010-03-03 18:03:49 ----RD---- C:\Program Files
                  2010-03-03 18:03:49 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
                  2010-03-03 18:03:49 ----D---- C:\Program Files\Fichiers communs
                  2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
                  2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
                  2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdazel.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdycc.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbduzb.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdur.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdtat.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdru1.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdru.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdmon.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdbu.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdblr.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdaze.dll
                  2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhept.dll
                  2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
                  2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
                  2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
                  2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
                  2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe.dll
                  2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
                  2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
                  2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlv.dll
                  2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
                  2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlt.dll
                  2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdest.dll
                  2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
                  2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdsl.dll
                  2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdro.dll
                  2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
                  2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdpl.dll
                  2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
                  2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdhu.dll
                  2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
                  2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
                  2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdycl.dll
                  2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdcz.dll
                  2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdcr.dll
                  2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
                  2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\spxcoins.dll
                  2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\irclass.dll
                  2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\dgsetup.dll
                  2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
                  2010-03-03 18:03:39 ----A---- C:\WINDOWS\system32\EqnClass.Dll
                  2010-03-03 18:03:38 ----N---- C:\WINDOWS\system32\CONFIG.TMP
                  2010-03-03 18:03:38 ----A---- C:\WINDOWS\TASKMAN.EXE
                  2010-03-03 18:03:38 ----A---- C:\WINDOWS\system32\batt.dll
                  2010-03-03 18:03:38 ----A---- C:\WINDOWS\notepad.exe
                  2010-03-03 18:03:37 ----A---- C:\WINDOWS\system32\storprop.dll
                  2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET52.tmp
                  2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET51.tmp
                  2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET50.tmp
                  2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4F.tmp
                  2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4E.tmp
                  2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4D.tmp
                  2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4C.tmp
                  2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4B.tmp
                  2010-03-03 18:03:35 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET4A.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET49.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET48.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET47.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET46.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET45.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET44.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET43.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET42.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET41.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET40.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3F.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3E.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3D.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3C.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3B.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3A.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET39.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET38.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET37.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET36.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET35.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET34.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET33.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET32.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET31.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET30.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2F.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2E.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2D.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2C.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2B.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2A.tmp
                  2010-03-03 18:03:32 ----RA---- C:\WINDOWS\SET29.tmp
                  2010-03-03 18:03:01 ----RA---- C:\WINDOWS\SETA.tmp
                  2010-03-03 18:02:57 ----RA---- C:\WINDOWS\SET3.tmp
                  2010-03-03 18:02:53 ----D---- C:\WINDOWS\system32\CatRoot2
                  2010-03-03 18:02:53 ----D---- C:\WINDOWS\system32\CatRoot
                  2010-03-03 18:02:48 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
                  2010-03-03 18:02:32 ----A---- C:\WINDOWS\setuplog.txt
                  2010-03-03 18:02:29 ----D---- C:\Documents and Settings
                  2010-02-11 05:37:08 ----A---- C:\WINDOWS\system32\atiok3x2.dll
                  2010-02-11 05:36:00 ----A---- C:\WINDOWS\system32\atipdlxx.dll
                  2010-02-11 05:35:44 ----A---- C:\WINDOWS\system32\Oemdspif.dll
                  2010-02-11 05:35:24 ----A---- C:\WINDOWS\system32\ati2edxx.dll
                  2010-02-11 05:35:10 ----A---- C:\WINDOWS\system32\ati2evxx.dll
                  2010-02-11 05:33:56 ----A---- C:\WINDOWS\system32\ati2evxx.exe
                  2010-02-11 04:59:16 ----A---- C:\WINDOWS\system32\amdpcom32.dll
                  2010-02-11 04:55:40 ----A---- C:\WINDOWS\system32\atikvmag.dll

                  ======List of files/folders modified in the last 1 months======

                  2010-03-03 19:03:49 ----A---- C:\WINDOWS\win.ini
                  2010-03-03 18:21:55 ----RASH---- C:\NTDETECT.COM
                  2010-03-03 18:03:49 ----A---- C:\WINDOWS\system.ini

                  ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                  R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520]
                  R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
                  R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
                  R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2004-08-19 14848]
                  R1 pctgntdi;pctgntdi; \??\C:\WINDOWS\system32\drivers\pctgntdi.sys []
                  R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
                  R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.7.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-03-03 21361]
                  R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-11-25 56816]
                  R2 PCTAppEvent;PCTAppEvent Driver; \??\C:\WINDOWS\system32\drivers\PCTAppEvent.sys []
                  R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-05-12 3007488]
                  R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
                  R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2002-08-30 9600]
                  R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-10 4397568]
                  R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2002-08-30 12288]
                  R3 PCTFW-PacketFilter;PCTools Firewall - Packet filter driver; \??\C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys []
                  R3 pctNDIS;PC Tools Driver; C:\WINDOWS\system32\DRIVERS\pctNdis.sys [2010-01-07 58816]
                  R3 pctplfw;pctplfw; \??\C:\WINDOWS\system32\drivers\pctplfw.sys []
                  R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-03 31616]
                  R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-03 26624]
                  R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-03 57600]
                  R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2004-08-03 17024]
                  S3 a0z852jy;a0z852jy; C:\WINDOWS\system32\drivers\a0z852jy.sys []
                  S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
                  S3 RT73;TL-WN321G USB Wireless Adapter; C:\WINDOWS\system32\DRIVERS\rt73.sys [2008-10-21 465152]
                  S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-11-27 177152]
                  S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
                  S3 xnacc;Microsoft Common Controller For Windows Driver Service; C:\WINDOWS\system32\DRIVERS\xnacc.sys [2005-09-15 476672]
                  S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

                  ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                  R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
                  R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
                  R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-05-12 540672]
                  R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe [2009-12-08 93320]
                  R2 PCToolsFirewallPlus;PC Tools Firewall Plus; C:\Program Files\PC Tools Firewall Plus\FWService.exe [2009-11-09 818432]
                  R2 RalinkRegistryWriter;Ralink Registry Writer; C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe [2009-01-05 69632]
                  S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-05-12 593920]
                  S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
                  S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
                  S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
                  S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
                  S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2010-01-26 243056]
                  S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

                  -----------------EOF-----------------
                  0
                  1. Rusher
                    2010-03-03 18:18:17 ----D---- C:\WINDOWS\PeerNet
                    2010-03-03 18:18:14 ----HDC---- C:\WINDOWS\$NtUninstallKB817778$
                    2010-03-03 18:18:05 ----ASH---- C:\Documents and Settings\Geordy\Application Data\desktop.ini
                    2010-03-03 18:18:04 ----SD---- C:\Documents and Settings\Geordy\Application Data\Microsoft
                    2010-03-03 18:17:32 ----SHD---- C:\System Volume Information
                    2010-03-03 18:17:31 ----A---- C:\WINDOWS\SchedLgU.Txt
                    2010-03-03 18:15:03 ----D---- C:\WINDOWS\system32\xircom
                    2010-03-03 18:15:03 ----D---- C:\Program Files\xerox
                    2010-03-03 18:15:03 ----D---- C:\Program Files\microsoft frontpage
                    2010-03-03 18:14:49 ----HDC---- C:\WINDOWS\$NtUninstallKB822603$
                    2010-03-03 18:14:42 ----HDC---- C:\WINDOWS\$NtUninstallQ828026$
                    2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\jit.dll
                    2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\javaee.dll
                    2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\dx3j.dll
                    2010-03-03 18:14:38 ----A---- C:\WINDOWS\setdebug.exe
                    2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\wjview.exe
                    2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\vmhelper.dll
                    2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msjdbc10.dll
                    2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msjava.dll
                    2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msawt.dll
                    2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\jview.exe
                    2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\jdbgmgr.exe
                    2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javart.dll
                    2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javaprxy.dll
                    2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javacypt.dll
                    2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\clspack.exe
                    2010-03-03 18:14:29 ----HDC---- C:\WINDOWS\$NtUninstallKB824105$
                    2010-03-03 18:14:20 ----HDC---- C:\WINDOWS\$NtUninstallKB825121$
                    2010-03-03 18:14:18 ----D---- C:\Program Files\HighMAT CD Writing Wizard
                    2010-03-03 18:14:17 ----D---- C:\WINDOWS\Downloaded Installations
                    2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\rpcss.dll
                    2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\rpcrt4.dll
                    2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\ole32.dll
                    2010-03-03 18:14:11 ----HDC---- C:\WINDOWS\$NtUninstallKB820291$
                    2010-03-03 18:14:07 ----HDC---- C:\WINDOWS\$NtUninstallQ815485$
                    2010-03-03 18:13:59 ----HDC---- C:\WINDOWS\$NtUninstallKB810217$
                    2010-03-03 18:13:52 ----HDC---- C:\WINDOWS\$NtUninstallKB828035$
                    2010-03-03 18:13:52 ----A---- C:\WINDOWS\system32\msgsvc.dll
                    2010-03-03 18:13:48 ----HDC---- C:\WINDOWS\$NtUninstallKB826939$
                    2010-03-03 18:13:46 ----A---- C:\WINDOWS\system32\cryptsvc.dll
                    2010-03-03 18:13:44 ----A---- C:\WINDOWS\system32\newdev.dll
                    2010-03-03 18:13:43 ----A---- C:\WINDOWS\system32\shell32.dll
                    2010-03-03 18:13:35 ----HDC---- C:\WINDOWS\$NtUninstallKB825119$
                    2010-03-03 18:13:31 ----HDC---- C:\WINDOWS\$NtUninstallKB824141$
                    2010-03-03 18:13:27 ----HDC---- C:\WINDOWS\$NtUninstallKB823182$
                    2010-03-03 18:13:23 ----HDC---- C:\WINDOWS\$NtUninstallq329623$
                    2010-03-03 18:13:20 ----HDC---- C:\WINDOWS\$NtUninstallKB823980$
                    2010-03-03 18:13:16 ----HDC---- C:\WINDOWS\$NtUninstallKB823559$
                    2010-03-03 18:13:13 ----D---- C:\Program Files\Common Files
                    2010-03-03 18:13:09 ----HDC---- C:\WINDOWS\$NtUninstallKB821557$
                    2010-03-03 18:13:02 ----HDC---- C:\WINDOWS\$NtUninstallQ819696$
                    2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\wstdecod.dll
                    2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\psisdecd.dll
                    2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\msyuv.dll
                    2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\msvidctl.dll
                    2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmpdxm.dll
                    2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmpasf.dll
                    2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmerror.dll
                    2010-03-03 18:12:35 ----A---- C:\WINDOWS\system32\mspmsnsv.dll
                    2010-03-03 18:12:32 ----D---- C:\WINDOWS\RegisteredPackages
                    2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmvdmoe2.dll
                    2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmspdmoe.dll
                    2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmspdmod.dll
                    2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmsdmoe2.dll
                    2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmidx.dll
                    2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\mp4sdmod.dll
                    2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\mp43dmod.dll
                    2010-03-03 18:12:11 ----HDC---- C:\WINDOWS\$NtUninstallQ817606$
                    2010-03-03 18:12:08 ----HDC---- C:\WINDOWS\$NtUninstallQ817287$
                    2010-03-03 18:12:05 ----HDC---- C:\WINDOWS\$NtUninstallQ814033$
                    2010-03-03 18:11:58 ----HDC---- C:\WINDOWS\$NtUninstallQ811493$
                    2010-03-03 18:11:53 ----HDC---- C:\WINDOWS\$NtUninstallQ810833$
                    2010-03-03 18:11:50 ----HDC---- C:\WINDOWS\$NtUninstallQ810577$
                    2010-03-03 18:11:40 ----HDC---- C:\WINDOWS\$NtUninstallQ810565$
                    2010-03-03 18:11:31 ----HDC---- C:\WINDOWS\$NtUninstallQ331953$
                    2010-03-03 18:11:21 ----HD---- C:\Program Files\Uninstall Information
                    2010-03-03 18:11:18 ----HDC---- C:\WINDOWS\$NtUninstallQ329834$
                    2010-03-03 18:11:18 ----D---- C:\8c577054f32042639ee4988cc2f432d6
                    2010-03-03 18:11:16 ----HDC---- C:\WINDOWS\$NtUninstallQ329441$
                    2010-03-03 18:11:15 ----A---- C:\WINDOWS\system32\srrstr.dll
                    2010-03-03 18:11:13 ----HDC---- C:\WINDOWS\$NtUninstallQ329390$
                    2010-03-03 18:11:10 ----HDC---- C:\WINDOWS\$NtUninstallQ329170$
                    2010-03-03 18:11:07 ----HDC---- C:\WINDOWS\$NtUninstallQ329048$
                    2010-03-03 18:11:04 ----HDC---- C:\WINDOWS\$NtUninstallQ328310$
                    2010-03-03 18:11:03 ----A---- C:\WINDOWS\system32\xpsp1hfm.exe
                    2010-03-03 18:10:54 ----HDC---- C:\WINDOWS\$NtUninstallQ327979$
                    2010-03-03 18:10:42 ----HDC---- C:\WINDOWS\$NtUninstallKB282010$
                    2010-03-03 18:10:38 ----A---- C:\WINDOWS\817778.EXE
                    2010-03-03 18:10:34 ----D---- C:\Program Files\Windows Journal Viewer
                    2010-03-03 18:09:59 ----RSD---- C:\WINDOWS\assembly
                    2010-03-03 18:09:59 ----D---- C:\WINDOWS\system32\URTTemp
                    2010-03-03 18:09:59 ----D---- C:\WINDOWS\Microsoft.NET
                    2010-03-03 18:09:57 ----SHD---- C:\WINDOWS\Installer
                    2010-03-03 18:09:30 ----A---- C:\WINDOWS\control.ini
                    2010-03-03 18:09:30 ----A---- C:\AUTOEXEC.BAT
                    2010-03-03 18:09:26 ----A---- C:\WINDOWS\OEWABLog.txt
                    2010-03-03 18:09:23 ----A---- C:\WINDOWS\system32\mapi32.dll
                    2010-03-03 18:08:55 ----SD---- C:\WINDOWS\Downloaded Program Files
                    2010-03-03 18:08:55 ----RD---- C:\WINDOWS\Offline Web Pages
                    2010-03-03 18:08:55 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
                    2010-03-03 18:08:52 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
                    2010-03-03 18:08:37 ----D---- C:\WINDOWS\system32\DirectX
                    2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrslv.dll
                    2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrdm.dll
                    2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrcdlg.dll
                    2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\racpldlg.dll
                    2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\atrace.dll
                    2010-03-03 18:08:10 ----A---- C:\WINDOWS\system32\desktop.ini
                    2010-03-03 18:08:10 ----A---- C:\WINDOWS\desktop.ini
                    2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
                    2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
                    2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\isrdbg32.dll
                    2010-03-03 18:08:03 ----A---- C:\WINDOWS\system32\acctres.dll
                    2010-03-03 18:08:02 ----D---- C:\Program Files\Fichiers communs\Services
                    2010-03-03 18:07:59 ----SD---- C:\WINDOWS\Tasks
                    2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\isign32.dll
                    2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\icwphbk.dll
                    2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\icwdial.dll
                    2010-03-03 18:07:58 ----A---- C:\WINDOWS\system32\inetcfg.dll
                    2010-03-03 18:07:58 ----A---- C:\WINDOWS\system32\icfgnt5.dll
                    2010-03-03 18:07:57 ----D---- C:\Program Files\Fichiers communs\MSSoap
                    2010-03-03 18:07:53 ----D---- C:\WINDOWS\srchasst
                    2010-03-03 18:07:52 ----D---- C:\WINDOWS\system32\Macromed
                    2010-03-03 18:07:51 ----D---- C:\Program Files\Movie Maker
                    2010-03-03 18:07:51 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
                    2010-03-03 18:07:51 ----A---- C:\WINDOWS\system32\qmgr.dll
                    2010-03-03 18:07:47 ----D---- C:\WINDOWS\system32\Restore
                    2010-03-03 18:07:47 ----D---- C:\WINDOWS\PCHealth
                    2010-03-03 18:07:47 ----A---- C:\WINDOWS\system32\srsvc.dll
                    2010-03-03 18:07:47 ----A---- C:\WINDOWS\system32\srclient.dll
                    2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\nmmkcert.dll
                    2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\msconf.dll
                    2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\mnmdd.dll
                    2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\ils.dll
                    2010-03-03 18:07:44 ----D---- C:\Program Files\NetMeeting
                    2010-03-03 18:07:43 ----D---- C:\Program Files\Outlook Express
                    2010-03-03 18:07:43 ----A---- C:\WINDOWS\system32\schedsvc.dll
                    2010-03-03 18:07:42 ----A---- C:\WINDOWS\system32\mstinit.exe
                    2010-03-03 18:07:42 ----A---- C:\WINDOWS\system32\mstask.dll
                    2010-03-03 18:07:37 ----D---- C:\Program Files\Fichiers communs\System
                    2010-03-03 18:07:36 ----D---- C:\Program Files\Internet Explorer
                    2010-03-03 18:07:33 ----D---- C:\Program Files\ComPlus Applications
                    2010-03-03 18:07:33 ----A---- C:\WINDOWS\vbaddin.ini
                    2010-03-03 18:07:33 ----A---- C:\WINDOWS\vb.ini
                    2010-03-03 18:07:32 ----D---- C:\WINDOWS\Registration
                    2010-03-03 18:07:19 ----HD---- C:\Program Files\WindowsUpdate
                    2010-03-03 18:07:19 ----D---- C:\Program Files\Windows Media Player
                    2010-03-03 18:07:19 ----D---- C:\Program Files\Services en ligne
                    2010-03-03 18:07:17 ----D---- C:\Program Files\Messenger
                    2010-03-03 18:07:12 ----D---- C:\Program Files\MSN Gaming Zone
                    2010-03-03 18:07:12 ----A---- C:\WINDOWS\system32\write.exe
                    2010-03-03 18:07:05 ----A---- C:\WINDOWS\system32\sndvol32.exe
                    2010-03-03 18:07:05 ----A---- C:\WINDOWS\system32\sndrec32.exe
                    2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\hypertrm.dll
                    2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\hticons.dll
                    2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avwav.dll
                    2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avtapi.dll
                    2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avmeter.dll
                    2010-03-03 18:07:03 ----A---- C:\WINDOWS\system32\winchat.exe
                    2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\sol.exe
                    2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\getuname.dll
                    2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\charmap.exe
                    2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\calc.exe
                    2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\winmine.exe
                    2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\usrlogon.cmd
                    2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tsshutdn.exe
                    2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tslabels.ini
                    2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tskill.exe
                    2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\reset.exe
                    2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\rdshost.exe
                    2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\mshearts.exe
                    2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\freecell.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\tsdiscon.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\tscon.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\shadow.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\rwinsta.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\regini.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qwinsta.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qprocess.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qappsrv.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\mtxoci.dll
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\msg.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\logoff.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\cdmodem.dll
                    2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\xolehlp.dll
                    2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtctm.dll
                    2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtcprf.ini
                    2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtclog.dll
                    2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtc.exe
                    2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\stclient.dll
                    2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxlegih.dll
                    2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxex.dll
                    2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxdm.dll
                    2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
                    2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\comrepl.dll
                    2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\comaddin.dll
                    2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\colbact.dll
                    2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\comuid.dll
                    2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\comsnap.dll
                    2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\clbcatq.dll
                    2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\clbcatex.dll
                    2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\catsrvps.dll
                    2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\catsrv.dll
                    2010-03-03 18:06:48 ----A---- C:\WINDOWS\system32\wmimgmt.msc
                    2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\servdeps.dll
                    2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\mmfutil.dll
                    2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\cmprops.dll
                    2010-03-03 18:06:43 ----D---- C:\Program Files\Windows NT
                    2010-03-03 18:06:43 ----D---- C:\Program Files\MSN
                    2010-03-03 18:06:43 ----A---- C:\WINDOWS\system32\mplay32.exe
                    2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuauserv.dll
                    2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuaueng.dll
                    2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuauclt.exe
                    2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\spider.exe
                    2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\mspaint.exe
                    2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\clipbrd.exe
                    2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\tscupgrd.exe
                    2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
                    2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\termsrv.dll
                    2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\sessmgr.exe
                    2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\remotepg.dll
                    2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\rdsaddin.exe
                    2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\rdchost.dll
                    2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\mstscax.dll
                    2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\mstsc.exe
                    2010-03-03 18:06:40 ----D---- C:\WINDOWS\system32\MsDtc
                    2010-03-03 18:06:40 ----D---- C:\WINDOWS\system32\Com
                    2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpwsx.dll
                    2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpsnd.dll
                    2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpclip.exe
                    2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\msdtcprx.dll
                    2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\icaapi.dll
                    2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\cfgbkend.dll
                    2010-03-03 18:06:39 ----A---- C:\WINDOWS\system32\comsvcs.dll
                    2010-03-03 18:06:39 ----A---- C:\WINDOWS\system32\catsrvut.dll
                    2010-03-03 18:06:36 ----A---- C:\WINDOWS\system32\licwmi.dll
                    2010-03-03 18:06:18 ----A---- C:\WINDOWS\system32\h323log.txt
                    2010-03-03 18:05:28 ----A---- C:\WINDOWS\system32\hidserv.dll
                    2010-03-03 18:04:45 ----A---- C:\WINDOWS\system32\usbui.dll
                    2010-03-03 18:03:55 ----A---- C:\WINDOWS\imsins.BAK
                    2010-03-03 18:03:53 ----D---- C:\Program Files\Fichiers communs\ODBC
                    2010-03-03 18:03:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
                    2010-03-03 18:03:53 ----A---- C:\WINDOWS\ODBCINST.INI
                    2010-03-03 18:03:50 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
                    2010-03-03 18:03:49 ----RD---- C:\Program Files
                    2010-03-03 18:03:49 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
                    2010-03-03 18:03:49 ----D---- C:\Program Files\Fichiers communs
                    2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
                    2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
                    2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdazel.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdycc.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbduzb.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdur.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdtat.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdru1.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdru.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdmon.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdbu.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdblr.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdaze.dll
                    2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhept.dll
                    2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
                    2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
                    2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
                    2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
                    2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe.dll
                    2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
                    2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
                    2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlv.dll
                    2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
                    2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlt.dll
                    2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdest.dll
                    2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
                    2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdsl.dll
                    2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdro.dll
                    2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
                    2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdpl.dll
                    2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
                    2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdhu.dll
                    2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
                    2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
                    2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdycl.dll
                    2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdcz.dll
                    2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdcr.dll
                    2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
                    2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\spxcoins.dll
                    2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\irclass.dll
                    2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\dgsetup.dll
                    2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
                    2010-03-03 18:03:39 ----A---- C:\WINDOWS\system32\EqnClass.Dll
                    2010-03-03 18:03:38 ----N---- C:\WINDOWS\system32\CONFIG.TMP
                    2010-03-03 18:03:38 ----A---- C:\WINDOWS\TASKMAN.EXE
                    2010-03-03 18:03:38 ----A---- C:\WINDOWS\system32\batt.dll
                    2010-03-03 18:03:38 ----A---- C:\WINDOWS\notepad.exe
                    2010-03-03 18:03:37 ----A---- C:\WINDOWS\system32\storprop.dll
                    2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET52.tmp
                    2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET51.tmp
                    2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET50.tmp
                    2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4F.tmp
                    2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4E.tmp
                    2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4D.tmp
                    2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4C.tmp
                    2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4B.tmp
                    2010-03-03 18:03:35 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET4A.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET49.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET48.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET47.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET46.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET45.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET44.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET43.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET42.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET41.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET40.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3F.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3E.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3D.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3C.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3B.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3A.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET39.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET38.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET37.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET36.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET35.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET34.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET33.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET32.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET31.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET30.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2F.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2E.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2D.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2C.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2B.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2A.tmp
                    2010-03-03 18:03:32 ----RA---- C:\WINDOWS\SET29.tmp
                    2010-03-03 18:03:01 ----RA---- C:\WINDOWS\SETA.tmp
                    2010-03-03 18:02:57 ----RA---- C:\WINDOWS\SET3.tmp
                    2010-03-03 18:02:53 ----D---- C:\WINDOWS\system32\CatRoot2
                    2010-03-03 18:02:53 ----D---- C:\WINDOWS\system32\CatRoot
                    2010-03-03 18:02:48 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
                    2010-03-03 18:02:32 ----A---- C:\WINDOWS\setuplog.txt
                    2010-03-03 18:02:29 ----D---- C:\Documents and Settings
                    2010-02-11 05:37:08 ----A---- C:\WINDOWS\system32\atiok3x2.dll
                    2010-02-11 05:36:00 ----A---- C:\WINDOWS\system32\atipdlxx.dll
                    2010-02-11 05:35:44 ----A---- C:\WINDOWS\system32\Oemdspif.dll
                    2010-02-11 05:35:24 ----A---- C:\WINDOWS\system32\ati2edxx.dll
                    2010-02-11 05:35:10 ----A---- C:\WINDOWS\system32\ati2evxx.dll
                    2010-02-11 05:33:56 ----A---- C:\WINDOWS\system32\ati2evxx.exe
                    2010-02-11 04:59:16 ----A---- C:\WINDOWS\system32\amdpcom32.dll
                    2010-02-11 04:55:40 ----A---- C:\WINDOWS\system32\atikvmag.dll

                    ======List of files/folders modified in the last 1 months======

                    2010-03-03 19:03:49 ----A---- C:\WINDOWS\win.ini
                    2010-03-03 18:21:55 ----RASH---- C:\NTDETECT.COM
                    2010-03-03 18:03:49 ----A---- C:\WINDOWS\system.ini

                    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                    R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520]
                    R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
                    R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
                    R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2004-08-19 14848]
                    R1 pctgntdi;pctgntdi; \??\C:\WINDOWS\system32\drivers\pctgntdi.sys []
                    R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
                    R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.7.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-03-03 21361]
                    R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-11-25 56816]
                    R2 PCTAppEvent;PCTAppEvent Driver; \??\C:\WINDOWS\system32\drivers\PCTAppEvent.sys []
                    R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-05-12 3007488]
                    R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
                    R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2002-08-30 9600]
                    R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-10 4397568]
                    R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2002-08-30 12288]
                    R3 PCTFW-PacketFilter;PCTools Firewall - Packet filter driver; \??\C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys []
                    R3 pctNDIS;PC Tools Driver; C:\WINDOWS\system32\DRIVERS\pctNdis.sys [2010-01-07 58816]
                    R3 pctplfw;pctplfw; \??\C:\WINDOWS\system32\drivers\pctplfw.sys []
                    R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-03 31616]
                    R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-03 26624]
                    R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-03 57600]
                    R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2004-08-03 17024]
                    S3 a0z852jy;a0z852jy; C:\WINDOWS\system32\drivers\a0z852jy.sys []
                    S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
                    S3 RT73;TL-WN321G USB Wireless Adapter; C:\WINDOWS\system32\DRIVERS\rt73.sys [2008-10-21 465152]
                    S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-11-27 177152]
                    S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
                    S3 xnacc;Microsoft Common Controller For Windows Driver Service; C:\WINDOWS\system32\DRIVERS\xnacc.sys [2005-09-15 476672]
                    S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

                    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                    R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
                    R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
                    R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-05-12 540672]
                    R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe [2009-12-08 93320]
                    R2 PCToolsFirewallPlus;PC Tools Firewall Plus; C:\Program Files\PC Tools Firewall Plus\FWService.exe [2009-11-09 818432]
                    R2 RalinkRegistryWriter;Ralink Registry Writer; C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe [2009-01-05 69632]
                    S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-05-12 593920]
                    S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
                    S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
                    S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
                    S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
                    S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2010-01-26 243056]
                    S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

                    -----------------EOF-----------------
                    0
                    1. Rusher
                      2010-03-03 18:18:17 ----D---- C:\WINDOWS\PeerNet
                      2010-03-03 18:18:14 ----HDC---- C:\WINDOWS\$NtUninstallKB817778$
                      2010-03-03 18:18:05 ----ASH---- C:\Documents and Settings\Geordy\Application Data\desktop.ini
                      2010-03-03 18:18:04 ----SD---- C:\Documents and Settings\Geordy\Application Data\Microsoft
                      2010-03-03 18:17:32 ----SHD---- C:\System Volume Information
                      2010-03-03 18:17:31 ----A---- C:\WINDOWS\SchedLgU.Txt
                      2010-03-03 18:15:03 ----D---- C:\WINDOWS\system32\xircom
                      2010-03-03 18:15:03 ----D---- C:\Program Files\xerox
                      2010-03-03 18:15:03 ----D---- C:\Program Files\microsoft frontpage
                      2010-03-03 18:14:49 ----HDC---- C:\WINDOWS\$NtUninstallKB822603$
                      2010-03-03 18:14:42 ----HDC---- C:\WINDOWS\$NtUninstallQ828026$
                      2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\jit.dll
                      2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\javaee.dll
                      2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\dx3j.dll
                      2010-03-03 18:14:38 ----A---- C:\WINDOWS\setdebug.exe
                      2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\wjview.exe
                      2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\vmhelper.dll
                      2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msjdbc10.dll
                      2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msjava.dll
                      2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msawt.dll
                      2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\jview.exe
                      2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\jdbgmgr.exe
                      2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javart.dll
                      2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javaprxy.dll
                      2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javacypt.dll
                      2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\clspack.exe
                      2010-03-03 18:14:29 ----HDC---- C:\WINDOWS\$NtUninstallKB824105$
                      2010-03-03 18:14:20 ----HDC---- C:\WINDOWS\$NtUninstallKB825121$
                      2010-03-03 18:14:18 ----D---- C:\Program Files\HighMAT CD Writing Wizard
                      2010-03-03 18:14:17 ----D---- C:\WINDOWS\Downloaded Installations
                      2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\rpcss.dll
                      2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\rpcrt4.dll
                      2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\ole32.dll
                      2010-03-03 18:14:11 ----HDC---- C:\WINDOWS\$NtUninstallKB820291$
                      2010-03-03 18:14:07 ----HDC---- C:\WINDOWS\$NtUninstallQ815485$
                      2010-03-03 18:13:59 ----HDC---- C:\WINDOWS\$NtUninstallKB810217$
                      2010-03-03 18:13:52 ----HDC---- C:\WINDOWS\$NtUninstallKB828035$
                      2010-03-03 18:13:52 ----A---- C:\WINDOWS\system32\msgsvc.dll
                      2010-03-03 18:13:48 ----HDC---- C:\WINDOWS\$NtUninstallKB826939$
                      2010-03-03 18:13:46 ----A---- C:\WINDOWS\system32\cryptsvc.dll
                      2010-03-03 18:13:44 ----A---- C:\WINDOWS\system32\newdev.dll
                      2010-03-03 18:13:43 ----A---- C:\WINDOWS\system32\shell32.dll
                      2010-03-03 18:13:35 ----HDC---- C:\WINDOWS\$NtUninstallKB825119$
                      2010-03-03 18:13:31 ----HDC---- C:\WINDOWS\$NtUninstallKB824141$
                      2010-03-03 18:13:27 ----HDC---- C:\WINDOWS\$NtUninstallKB823182$
                      2010-03-03 18:13:23 ----HDC---- C:\WINDOWS\$NtUninstallq329623$
                      2010-03-03 18:13:20 ----HDC---- C:\WINDOWS\$NtUninstallKB823980$
                      2010-03-03 18:13:16 ----HDC---- C:\WINDOWS\$NtUninstallKB823559$
                      2010-03-03 18:13:13 ----D---- C:\Program Files\Common Files
                      2010-03-03 18:13:09 ----HDC---- C:\WINDOWS\$NtUninstallKB821557$
                      2010-03-03 18:13:02 ----HDC---- C:\WINDOWS\$NtUninstallQ819696$
                      2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\wstdecod.dll
                      2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\psisdecd.dll
                      2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\msyuv.dll
                      2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\msvidctl.dll
                      2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmpdxm.dll
                      2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmpasf.dll
                      2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmerror.dll
                      2010-03-03 18:12:35 ----A---- C:\WINDOWS\system32\mspmsnsv.dll
                      2010-03-03 18:12:32 ----D---- C:\WINDOWS\RegisteredPackages
                      2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmvdmoe2.dll
                      2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmspdmoe.dll
                      2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmspdmod.dll
                      2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmsdmoe2.dll
                      2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmidx.dll
                      2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\mp4sdmod.dll
                      2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\mp43dmod.dll
                      2010-03-03 18:12:11 ----HDC---- C:\WINDOWS\$NtUninstallQ817606$
                      2010-03-03 18:12:08 ----HDC---- C:\WINDOWS\$NtUninstallQ817287$
                      2010-03-03 18:12:05 ----HDC---- C:\WINDOWS\$NtUninstallQ814033$
                      2010-03-03 18:11:58 ----HDC---- C:\WINDOWS\$NtUninstallQ811493$
                      2010-03-03 18:11:53 ----HDC---- C:\WINDOWS\$NtUninstallQ810833$
                      2010-03-03 18:11:50 ----HDC---- C:\WINDOWS\$NtUninstallQ810577$
                      2010-03-03 18:11:40 ----HDC---- C:\WINDOWS\$NtUninstallQ810565$
                      2010-03-03 18:11:31 ----HDC---- C:\WINDOWS\$NtUninstallQ331953$
                      2010-03-03 18:11:21 ----HD---- C:\Program Files\Uninstall Information
                      2010-03-03 18:11:18 ----HDC---- C:\WINDOWS\$NtUninstallQ329834$
                      2010-03-03 18:11:18 ----D---- C:\8c577054f32042639ee4988cc2f432d6
                      2010-03-03 18:11:16 ----HDC---- C:\WINDOWS\$NtUninstallQ329441$
                      2010-03-03 18:11:15 ----A---- C:\WINDOWS\system32\srrstr.dll
                      2010-03-03 18:11:13 ----HDC---- C:\WINDOWS\$NtUninstallQ329390$
                      2010-03-03 18:11:10 ----HDC---- C:\WINDOWS\$NtUninstallQ329170$
                      2010-03-03 18:11:07 ----HDC---- C:\WINDOWS\$NtUninstallQ329048$
                      2010-03-03 18:11:04 ----HDC---- C:\WINDOWS\$NtUninstallQ328310$
                      2010-03-03 18:11:03 ----A---- C:\WINDOWS\system32\xpsp1hfm.exe
                      2010-03-03 18:10:54 ----HDC---- C:\WINDOWS\$NtUninstallQ327979$
                      2010-03-03 18:10:42 ----HDC---- C:\WINDOWS\$NtUninstallKB282010$
                      2010-03-03 18:10:38 ----A---- C:\WINDOWS\817778.EXE
                      2010-03-03 18:10:34 ----D---- C:\Program Files\Windows Journal Viewer
                      2010-03-03 18:09:59 ----RSD---- C:\WINDOWS\assembly
                      2010-03-03 18:09:59 ----D---- C:\WINDOWS\system32\URTTemp
                      2010-03-03 18:09:59 ----D---- C:\WINDOWS\Microsoft.NET
                      2010-03-03 18:09:57 ----SHD---- C:\WINDOWS\Installer
                      2010-03-03 18:09:30 ----A---- C:\WINDOWS\control.ini
                      2010-03-03 18:09:30 ----A---- C:\AUTOEXEC.BAT
                      2010-03-03 18:09:26 ----A---- C:\WINDOWS\OEWABLog.txt
                      2010-03-03 18:09:23 ----A---- C:\WINDOWS\system32\mapi32.dll
                      2010-03-03 18:08:55 ----SD---- C:\WINDOWS\Downloaded Program Files
                      2010-03-03 18:08:55 ----RD---- C:\WINDOWS\Offline Web Pages
                      2010-03-03 18:08:55 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
                      2010-03-03 18:08:52 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
                      2010-03-03 18:08:37 ----D---- C:\WINDOWS\system32\DirectX
                      2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrslv.dll
                      2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrdm.dll
                      2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrcdlg.dll
                      2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\racpldlg.dll
                      2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\atrace.dll
                      2010-03-03 18:08:10 ----A---- C:\WINDOWS\system32\desktop.ini
                      2010-03-03 18:08:10 ----A---- C:\WINDOWS\desktop.ini
                      2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
                      2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
                      2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\isrdbg32.dll
                      2010-03-03 18:08:03 ----A---- C:\WINDOWS\system32\acctres.dll
                      2010-03-03 18:08:02 ----D---- C:\Program Files\Fichiers communs\Services
                      2010-03-03 18:07:59 ----SD---- C:\WINDOWS\Tasks
                      2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\isign32.dll
                      2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\icwphbk.dll
                      2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\icwdial.dll
                      2010-03-03 18:07:58 ----A---- C:\WINDOWS\system32\inetcfg.dll
                      2010-03-03 18:07:58 ----A---- C:\WINDOWS\system32\icfgnt5.dll
                      2010-03-03 18:07:57 ----D---- C:\Program Files\Fichiers communs\MSSoap
                      2010-03-03 18:07:53 ----D---- C:\WINDOWS\srchasst
                      2010-03-03 18:07:52 ----D---- C:\WINDOWS\system32\Macromed
                      2010-03-03 18:07:51 ----D---- C:\Program Files\Movie Maker
                      2010-03-03 18:07:51 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
                      2010-03-03 18:07:51 ----A---- C:\WINDOWS\system32\qmgr.dll
                      2010-03-03 18:07:47 ----D---- C:\WINDOWS\system32\Restore
                      2010-03-03 18:07:47 ----D---- C:\WINDOWS\PCHealth
                      2010-03-03 18:07:47 ----A---- C:\WINDOWS\system32\srsvc.dll
                      2010-03-03 18:07:47 ----A---- C:\WINDOWS\system32\srclient.dll
                      2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\nmmkcert.dll
                      2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\msconf.dll
                      2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\mnmdd.dll
                      2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\ils.dll
                      2010-03-03 18:07:44 ----D---- C:\Program Files\NetMeeting
                      2010-03-03 18:07:43 ----D---- C:\Program Files\Outlook Express
                      2010-03-03 18:07:43 ----A---- C:\WINDOWS\system32\schedsvc.dll
                      2010-03-03 18:07:42 ----A---- C:\WINDOWS\system32\mstinit.exe
                      2010-03-03 18:07:42 ----A---- C:\WINDOWS\system32\mstask.dll
                      2010-03-03 18:07:37 ----D---- C:\Program Files\Fichiers communs\System
                      2010-03-03 18:07:36 ----D---- C:\Program Files\Internet Explorer
                      2010-03-03 18:07:33 ----D---- C:\Program Files\ComPlus Applications
                      2010-03-03 18:07:33 ----A---- C:\WINDOWS\vbaddin.ini
                      2010-03-03 18:07:33 ----A---- C:\WINDOWS\vb.ini
                      2010-03-03 18:07:32 ----D---- C:\WINDOWS\Registration
                      2010-03-03 18:07:19 ----HD---- C:\Program Files\WindowsUpdate
                      2010-03-03 18:07:19 ----D---- C:\Program Files\Windows Media Player
                      2010-03-03 18:07:19 ----D---- C:\Program Files\Services en ligne
                      2010-03-03 18:07:17 ----D---- C:\Program Files\Messenger
                      2010-03-03 18:07:12 ----D---- C:\Program Files\MSN Gaming Zone
                      2010-03-03 18:07:12 ----A---- C:\WINDOWS\system32\write.exe
                      2010-03-03 18:07:05 ----A---- C:\WINDOWS\system32\sndvol32.exe
                      2010-03-03 18:07:05 ----A---- C:\WINDOWS\system32\sndrec32.exe
                      2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\hypertrm.dll
                      2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\hticons.dll
                      2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avwav.dll
                      2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avtapi.dll
                      2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avmeter.dll
                      2010-03-03 18:07:03 ----A---- C:\WINDOWS\system32\winchat.exe
                      2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\sol.exe
                      2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\getuname.dll
                      2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\charmap.exe
                      2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\calc.exe
                      2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\winmine.exe
                      2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\usrlogon.cmd
                      2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tsshutdn.exe
                      2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tslabels.ini
                      2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tskill.exe
                      2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\reset.exe
                      2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\rdshost.exe
                      2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\mshearts.exe
                      2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\freecell.exe
                      2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\tsdiscon.exe
                      2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\tscon.exe
                      2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\shadow.exe
                      2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\rwinsta.exe
                      2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\regini.exe
                      2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
                      2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qwinsta.exe
                      2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qprocess.exe
                      2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qappsrv.exe
                      2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\mtxoci.dll
                      2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\msg.exe
                      2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
                      2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\logoff.exe
                      2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\cdmodem.dll
                      2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\xolehlp.dll
                      2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtctm.dll
                      2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtcprf.ini
                      2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtclog.dll
                      2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtc.exe
                      2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\stclient.dll
                      2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxlegih.dll
                      2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxex.dll
                      2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxdm.dll
                      2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
                      2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\comrepl.dll
                      2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\comaddin.dll
                      2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\colbact.dll
                      2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\comuid.dll
                      2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\comsnap.dll
                      2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\clbcatq.dll
                      2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\clbcatex.dll
                      2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\catsrvps.dll
                      2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\catsrv.dll
                      2010-03-03 18:06:48 ----A---- C:\WINDOWS\system32\wmimgmt.msc
                      2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\servdeps.dll
                      2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\mmfutil.dll
                      2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\cmprops.dll
                      2010-03-03 18:06:43 ----D---- C:\Program Files\Windows NT
                      2010-03-03 18:06:43 ----D---- C:\Program Files\MSN
                      2010-03-03 18:06:43 ----A---- C:\WINDOWS\system32\mplay32.exe
                      2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuauserv.dll
                      2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuaueng.dll
                      2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuauclt.exe
                      2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\spider.exe
                      2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\mspaint.exe
                      2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\clipbrd.exe
                      2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\tscupgrd.exe
                      2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
                      2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\termsrv.dll
                      2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\sessmgr.exe
                      2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\remotepg.dll
                      2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\rdsaddin.exe
                      2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\rdchost.dll
                      2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\mstscax.dll
                      2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\mstsc.exe
                      2010-03-03 18:06:40 ----D---- C:\WINDOWS\system32\MsDtc
                      2010-03-03 18:06:40 ----D---- C:\WINDOWS\system32\Com
                      2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpwsx.dll
                      2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpsnd.dll
                      2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpclip.exe
                      2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\msdtcprx.dll
                      2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\icaapi.dll
                      2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\cfgbkend.dll
                      2010-03-03 18:06:39 ----A---- C:\WINDOWS\system32\comsvcs.dll
                      2010-03-03 18:06:39 ----A---- C:\WINDOWS\system32\catsrvut.dll
                      2010-03-03 18:06:36 ----A---- C:\WINDOWS\system32\licwmi.dll
                      2010-03-03 18:06:18 ----A---- C:\WINDOWS\system32\h323log.txt
                      2010-03-03 18:05:28 ----A---- C:\WINDOWS\system32\hidserv.dll
                      2010-03-03 18:04:45 ----A---- C:\WINDOWS\system32\usbui.dll
                      2010-03-03 18:03:55 ----A---- C:\WINDOWS\imsins.BAK
                      2010-03-03 18:03:53 ----D---- C:\Program Files\Fichiers communs\ODBC
                      2010-03-03 18:03:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
                      2010-03-03 18:03:53 ----A---- C:\WINDOWS\ODBCINST.INI
                      2010-03-03 18:03:50 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
                      2010-03-03 18:03:49 ----RD---- C:\Program Files
                      2010-03-03 18:03:49 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
                      2010-03-03 18:03:49 ----D---- C:\Program Files\Fichiers communs
                      2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
                      2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
                      2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdazel.dll
                      2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdycc.dll
                      2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbduzb.dll
                      2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdur.dll
                      2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdtat.dll
                      2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdru1.dll
                      2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdru.dll
                      2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdmon.dll
                      2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
                      2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
                      2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdbu.dll
                      2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdblr.dll
                      2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdaze.dll
                      2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhept.dll
                      2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
                      2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
                      2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
                      2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
                      2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe.dll
                      2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
                      2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
                      2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlv.dll
                      2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
                      2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlt.dll
                      2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdest.dll
                      2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
                      2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdsl.dll
                      2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdro.dll
                      2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
                      2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdpl.dll
                      2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
                      2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdhu.dll
                      2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
                      2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
                      2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdycl.dll
                      2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdcz.dll
                      2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdcr.dll
                      2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
                      2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\spxcoins.dll
                      2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\irclass.dll
                      2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\dgsetup.dll
                      2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
                      2010-03-03 18:03:39 ----A---- C:\WINDOWS\system32\EqnClass.Dll
                      2010-03-03 18:03:38 ----N---- C:\WINDOWS\system32\CONFIG.TMP
                      2010-03-03 18:03:38 ----A---- C:\WINDOWS\TASKMAN.EXE
                      2010-03-03 18:03:38 ----A---- C:\WINDOWS\system32\batt.dll
                      2010-03-03 18:03:38 ----A---- C:\WINDOWS\notepad.exe
                      2010-03-03 18:03:37 ----A---- C:\WINDOWS\system32\storprop.dll
                      2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET52.tmp
                      2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET51.tmp
                      2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET50.tmp
                      2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4F.tmp
                      2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4E.tmp
                      2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4D.tmp
                      2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4C.tmp
                      2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4B.tmp
                      2010-03-03 18:03:35 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET4A.tmp
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET49.tmp
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET48.tmp
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET47.tmp
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET46.tmp
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET45.tmp
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET44.tmp
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET43.tmp
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET42.tmp
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET41.tmp
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET40.tmp
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3F.tmp
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3E.tmp
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3D.tmp
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3C.tmp
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3B.tmp
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3A.tmp
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET39.tmp
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET38.tmp
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET37.tmp
                      2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET36.tmp
                      2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET35.tmp
                      2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET34.tmp
                      2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET33.tmp
                      2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET32.tmp
                      2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET31.tmp
                      2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET30.tmp
                      2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2F.tmp
                      2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2E.tmp
                      2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2D.tmp
                      2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2C.tmp
                      2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2B.tmp
                      2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2A.tmp
                      2010-03-03 18:03:32 ----RA---- C:\WINDOWS\SET29.tmp
                      2010-03-03 18:03:01 ----RA---- C:\WINDOWS\SETA.tmp
                      2010-03-03 18:02:57 ----RA---- C:\WINDOWS\SET3.tmp
                      2010-03-03 18:02:53 ----D---- C:\WINDOWS\system32\CatRoot2
                      2010-03-03 18:02:53 ----D---- C:\WINDOWS\system32\CatRoot
                      2010-03-03 18:02:48 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
                      2010-03-03 18:02:32 ----A---- C:\WINDOWS\setuplog.txt
                      2010-03-03 18:02:29 ----D---- C:\Documents and Settings
                      2010-02-11 05:37:08 ----A---- C:\WINDOWS\system32\atiok3x2.dll
                      2010-02-11 05:36:00 ----A---- C:\WINDOWS\system32\atipdlxx.dll
                      2010-02-11 05:35:44 ----A---- C:\WINDOWS\system32\Oemdspif.dll
                      2010-02-11 05:35:24 ----A---- C:\WINDOWS\system32\ati2edxx.dll
                      2010-02-11 05:35:10 ----A---- C:\WINDOWS\system32\ati2evxx.dll
                      2010-02-11 05:33:56 ----A---- C:\WINDOWS\system32\ati2evxx.exe
                      2010-02-11 04:59:16 ----A---- C:\WINDOWS\system32\amdpcom32.dll
                      2010-02-11 04:55:40 ----A---- C:\WINDOWS\system32\atikvmag.dll

                      ======List of files/folders modified in the last 1 months======

                      2010-03-03 19:03:49 ----A---- C:\WINDOWS\win.ini
                      2010-03-03 18:21:55 ----RASH---- C:\NTDETECT.COM
                      2010-03-03 18:03:49 ----A---- C:\WINDOWS\system.ini

                      ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                      R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520]
                      R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
                      R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
                      R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2004-08-19 14848]
                      R1 pctgntdi;pctgntdi; \??\C:\WINDOWS\system32\drivers\pctgntdi.sys []
                      R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
                      R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.7.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-03-03 21361]
                      R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-11-25 56816]
                      R2 PCTAppEvent;PCTAppEvent Driver; \??\C:\WINDOWS\system32\drivers\PCTAppEvent.sys []
                      R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-05-12 3007488]
                      R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
                      R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2002-08-30 9600]
                      R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-10 4397568]
                      R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2002-08-30 12288]
                      R3 PCTFW-PacketFilter;PCTools Firewall - Packet filter driver; \??\C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys []
                      R3 pctNDIS;PC Tools Driver; C:\WINDOWS\system32\DRIVERS\pctNdis.sys [2010-01-07 58816]
                      R3 pctplfw;pctplfw; \??\C:\WINDOWS\system32\drivers\pctplfw.sys []
                      R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-03 31616]
                      R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-03 26624]
                      R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-03 57600]
                      R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2004-08-03 17024]
                      S3 a0z852jy;a0z852jy; C:\WINDOWS\system32\drivers\a0z852jy.sys []
                      S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
                      S3 RT73;TL-WN321G USB Wireless Adapter; C:\WINDOWS\system32\DRIVERS\rt73.sys [2008-10-21 465152]
                      S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-11-27 177152]
                      S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
                      S3 xnacc;Microsoft Common Controller For Windows Driver Service; C:\WINDOWS\system32\DRIVERS\xnacc.sys [2005-09-15 476672]
                      S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

                      ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                      R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
                      R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
                      R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-05-12 540672]
                      R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe [2009-12-08 93320]
                      R2 PCToolsFirewallPlus;PC Tools Firewall Plus; C:\Program Files\PC Tools Firewall Plus\FWService.exe [2009-11-09 818432]
                      R2 RalinkRegistryWriter;Ralink Registry Writer; C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe [2009-01-05 69632]
                      S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-05-12 593920]
                      S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
                      S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
                      S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
                      S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
                      S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2010-01-26 243056]
                      S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

                      -----------------EOF-----------------
                      0
                      1. Rusher
                        ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                        R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
                        R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
                        R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-05-12 540672]
                        R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe [2009-12-08 93320]
                        R2 PCToolsFirewallPlus;PC Tools Firewall Plus; C:\Program Files\PC Tools Firewall Plus\FWService.exe [2009-11-09 818432]
                        R2 RalinkRegistryWriter;Ralink Registry Writer; C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe [2009-01-05 69632]
                        S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-05-12 593920]
                        S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
                        0
                        1. Rusher
                          ZHPDiag a trouvé !! Je vous envoie un post ?
                          0
                          2. Rusher
                            ---\\ Browser Helper Objects de navigateur (O2)
                            O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                            O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
                            O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                            O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} . (.McAfee, Inc. - SiteAdvisor.) -- c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll

                            ---\\ MountPoints2 Shell Key (MPSK) (O51)
                            O51 - MPSK:{3b208cff-272c-11df-aa7a-0019e018a91d}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- E:\9qqigqwf.exe (.not file.)
                            O51 - MPSK:{c4fd191a-26e8-11df-aa71-ec4e97983cae}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- E:\fk.exe (.not file.)
                            O51 - MPSK:{c77babf5-26ec-11df-a355-806d6172696f}\Shell\AutoRun\command. (.Microsoft Corporation - Bienvenue dans Windows XP.) -- D:\setup.exe
                            O51 - MPSK:{c77babf6-26ec-11df-a355-806d6172696f}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- C:\fk.exe

                            ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
                            O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm
                            O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll
                            O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll
                            O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll
                            O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm
                            O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm
                            O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax
                            O52 - TDSD: \Drivers32\"msacm.iac2"="iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\System32\iac25_32.ax
                            O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll
                            O52 - TDSD: \Drivers32\"vidc.VP60"="C:\WINDOWS\system32\vp6vfw.dll" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\WINDOWS\system32\vp6vfw.dll
                            O52 - TDSD: \Drivers32\"vidc.VP61"="C:\WINDOWS\system32\vp6vfw.dll" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\WINDOWS\system32\vp6vfw.dll
                            O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm
                            O52 - TDSD: \drivers.desc\"C:\WINDOWS\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm
                            O52 - TDSD: \drivers.desc\"iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\System32\iac25_32.ax
                            O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
                            O52 - TDSD: \drivers.desc\"vp6vfw.dll"="EA VP6 Codec" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\WINDOWS\System32\vp6vfw.dll

                            ---\\ Liste des services Legacy (LALS) (O64)
                            O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\AegisP.sys - AEGIS Protocol (IEEE 802.1x) v3.7.5.0 (AegisP) .(.Cisco Systems, Inc. - IEEE 802.1X Protocol Driver.) - LEGACY_AEGISP
                            O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\sched.exe - Avira AntiVir Planificateur (AntiVirSchedulerService) .(.Avira GmbH - Antivirus Scheduler.) - LEGACY_ANTIVIRSCHEDULERSERVICE
                            O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avguard.exe - Avira AntiVir Guard (AntiVirService) .(.Avira GmbH - Antivirus On-Access Service.) - LEGACY_ANTIVIRSERVICE
                            O64 - Services: CurCS - C:\WINDOWS\system32\Ati2evxx.exe - Ati HotKey Poller (Ati HotKey Poller) .(.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - LEGACY_ATI_HOTKEY_POLLER
                            O64 - Services: CurCS - C:\WINDOWS\system32\ati2sgag.exe - ATI Smart (ATI Smart) .(.Pas de propriétaire - ATI Smart.) - LEGACY_ATI_SMART
                            O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avgio.sys - avgio (avgio) .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO
                            O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\avgntflt.sys - avgntflt (avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT
                            O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\avipbb.sys - avipbb (avipbb) .(.Avira GmbH - Avira Driver for RootKit Detection.) - LEGACY_AVIPBB
                            O64 - Services: CurCS - (.not file.) - Lanceur de processus serveur DCOM (DcomLaunch) .(.Pas de propriétaire - Pas de description.) - LEGACY_DCOMLAUNCH
                            O64 - Services: CurCS - C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys - driverhardwarev2 (driverhardwarev2) .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2
                            O64 - Services: CurCS - C:\Program Files\ma-config.com\maconfservice.exe - Ma-Config Service (maconfservice) .(.CybelSoft - Service de détection matériel.) - LEGACY_MACONFSERVICE
                            O64 - Services: CurCS - c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe - McAfee SiteAdvisor Service (McAfee SiteAdvisor Service) .(.McAfee, Inc. - SiteAdvisor.) - LEGACY_MCAFEE_SITEADVISOR_SERVICE
                            O64 - Services: CurCS - (.not file.) - mountmgr (mountmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MOUNTMGR
                            O64 - Services: CurCS - (.not file.) - Mup (Mup) .(.Pas de propriétaire - Pas de description.) - LEGACY_MUP
                            O64 - Services: CurCS - (.not file.) - Pilote système NDIS (NDIS) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDIS
                            O64 - Services: CurCS - (.not file.) - PartMgr (PartMgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARTMGR
                            O64 - Services: CurCS - C:\WINDOWS\system32\drivers\PCTAppEvent.sys - PCTAppEvent Driver (PCTAppEvent) .(.PC Tools - PC Tools App Monitor Driver.) - LEGACY_PCTAPPEVENT
                            O64 - Services: CurCS - C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys - PCTools Firewall - Packet filter driver (PCTFW-PacketFilter) .(.PC Tools - PC Tools NDIS - Packet Filter.) - LEGACY_PCTFW-PACKETFILTER
                            O64 - Services: CurCS - C:\WINDOWS\system32\drivers\pctgntdi.sys - pctgntdi (pctgntdi) .(.PC Tools - PC Tools Generic TDI Driver.) - LEGACY_PCTGNTDI
                            O64 - Services: CurCS - C:\Program Files\PC Tools Firewall Plus\FWService.exe - PC Tools Firewall Plus (PCToolsFirewallPlus) .(.PC Tools - PC Tools Firewall Plus service.) - LEGACY_PCTOOLSFIREWALLPLUS
                            O64 - Services: CurCS - C:\WINDOWS\system32\drivers\pctplfw.sys - pctplfw (pctplfw) .(.PC Tools - PC Tools FW Plugin Driver.) - LEGACY_PCTPLFW
                            O64 - Services: CurCS - C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe - Ralink Registry Writer (RalinkRegistryWriter) .(.Pas de propriétaire - RegistryWriter.) - LEGACY_RALINKREGISTRYWRITER
                            O64 - Services: CurCS - (.not file.) - RDPNP (RDPNP) .(.Pas de propriétaire - Pas de description.) - LEGACY_RDPNP
                            O64 - Services: CurCS - (.not file.) - REGMON701 (REGMON701) .(.Pas de propriétaire - Pas de description.) - LEGACY_REGMON701
                            O64 - Services: CurCS - (.not file.) - Appel de procédure distante (RPC) (RpcSs) .(.Pas de propriétaire - Pas de description.) - LEGACY_RPCSS
                            O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\sptd.sys - sptd (sptd) .(.Pas de propriétaire - Pas de description.) - LEGACY_SPTD
                            O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys - ssmdrv (ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV
                            O64 - Services: CurCS - (.not file.) - Services Terminal Server (TermService) .(.Pas de propriétaire - Pas de description.) - LEGACY_TERMSERVICE
                            O64 - Services: CurCS - (.not file.) - Gestionnaire de téléchargement (uploadmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_UPLOADMGR
                            0
                            1. Rusher
                              J'ai mis en gras ce qui est en bleu ( tu dois le savoir) ^^
                              0
                              2. Rusher
                                Non par contre il y a ça en vert (pas très grave à mon avis) :

                                ---\\ DOS/Devices
                                A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
                                C:\ Hard drive, Flash drive, Thumb drive (Free 417 Go of 466 Go)
                                D:\ CD-ROM drive (Not Inserted)
                                F:\ CD-ROM drive (Not Inserted)
                                0
                                2. Rusher
                                  je les ai suivi. Mais la méthode de toto semble meilleur.
                                  0
                                  1. Rusher
                                    Jcrois qu'à cause de vos logiciel ça m'en a rajouté ...
                                    0
                                    • 1
                                    • 2

                                    Discussions similaires

                                    Win64 malware gen
                                    jules555

                                    1 réponse
                                    supprimer tor.jack android
                                    sabinelouisonbruno

                                    4 réponses
                                    Win64:Malware-gen
                                    ptb35

                                    3 réponses
                                    Infection malware sur Android ?
                                    ajaax9

                                    9 réponses
                                    Antimalware service Executable consomme 45% de RAM.
                                    KalenShiv

                                    8 réponses