Malware

Bonjour,
en faisant une recherche Malwarebytes j'ai eu ce rapport : Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3825
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

05/03/2010 20:41:26
mbam-log-2010-03-05 (20-41-26).txt

Type de recherche: Examen rapide
Eléments examinés: 107842
Temps écoulé: 4 minute(s), 6 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 2

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cdoosoft (Spyware.OnlineGames) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Documents and Settings\Geordy\Local Settings\Temp\cvasds0.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\Documents and Settings\Geordy\Local Settings\Temp\herss.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.

Après une suppression et un redémarrage, j'obtiens le même rapport. Pourrais-je avoir de l'aide ?
Configuration: Windows XP / Firefox 3.6

23 réponses

  • Votes
  • Date
  • Date décroissante
Résumé de la discussion

Le fil porte sur un rapport Malwarebytes montrant des éléments registrés et des fichiers liés à Spyware.OnlineGames sur Windows XP, le redémarrage ne résout pas le problème et l’utilisateur demande de l’aide. Une recommandation propose d’utiliser HijackThis puis RSIT pour analyser en profondeur le système et partager les rapports étape par étape, afin d’identifier les configurations nuisibles et de préparer des actions de nettoyage plus ciblées. D’autres échanges suggèrent ensuite RSIT puis ZHPDiag pour compléter l’analyse et nettoyer les éléments résiduels, reflétant une progression vers des outils complémentaires afin d’identifier d’éventuelles réinstallations malveillantes.

Bobot (l’IA à votre service)
  1. Bonsoir Rusher

    Je te conseille vivement de suivre les instructions de:
    Guillaume5188


    ==>" I am toto"
    porte parfaitement son nom ....!!!!

    a+
    1. Cela veut dire que Malwarebytes supprime "temporairement" c'est fichier infecté car ils reviennent systématiquement...
      1. Bonsoir

        Pour de plus amples informations;fait ceci stp;merci

        a) Télécharge et installe le logiciel HijackThis :

        https://www.commentcamarche.net/telecharger/securite/11747-hijackthis/
        ou ici http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
        ou ici https://www.clubic.com/telecharger-fiche17891-hijackthis.html

        -->Clique sur le setup pour lancer l'installation : laisse toi guider et ne modifie pas les paramètres d'installation .
        A la fin de l’installation, le programme se lance automatiquement : ferme le en cliquant sur la croix rouge.
        Au final, tu dois avoir un raccourci sur ton bureau et aussi un cheminement comme :
        "C:\ program files\Trend Micro\HijackThis\HijackThis.exe " .

        (Ne lance pas ce prg pour l'instant et fais la suite ... )

        b) Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

        -> http://images.malwareremoval.com/random/RSIT.exe

        ! Déconnecte toi et ferme toutes tes applications en cours !

        Double-clique sur " RSIT.exe " pour le lancer.

        Clic droit sous VISTA (exécuter en tant que…)

        -> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

        * Devant l'option "List files/folders created ..." , tu choisis : 2 months

        * clique ensuite sur " Continue " pour lancer l'analyse ...

        -> laisse faire le scan et ne touche pas au PC ...

        Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-notes).

        Poste le contenu de " log.txt " (c'est celui qui apparaît à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

        Important : poste un rapport, puis l'autre dans la réponse suivante ...
        Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum ...
        ( Et si "log.txt" seul, ne passe pas non plus , fais le en 2 fois ... merci ... )

        ( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit

        @+
        1. pas besoin d'explication, passe un coup de RSIT .

          Tu telecahge RSIT : https://www.commentcamarche.net/telecharger/securite/19597-rsit/

          (tuto : https://forum.pcastuces.com/randoms_system_information_tool_rsit-f31s31.htm

          tu psot le rapport.

          aprés tu telecahge ZHPDiag :

          tu le telecahge

          tu l'installe,

          tu clique sur l'icon ZHPDiag

          tu clique sur la loupe et tu touche a rien jusqu'a le rapport

          tu post le rapport

          aprés tu telecahge cclener, tu fait une analyse et tu netoie (normalement c'est pour supprimerles fichier qui serve arien , mais des fichier peuve se servired de ses fichier pour se reinstaller.
          1. Bonsoir Rusher,

            Et bonsoir à vous tous....

            ==> Message édité !

            a+
            1. Logfile of random's system information tool 1.06 (written by random/random)
              Run by Geordy at 2010-03-05 21:14:57
              Microsoft Windows XP Édition familiale Service Pack 2
              System drive C: has 427 GB (90%) free of 477 GB
              Total RAM: 446 MB (39% free)

              Logfile of Trend Micro HijackThis v2.0.2
              Scan saved at 21:14:58, on 05/03/2010
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
              Boot mode: Normal

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\Ati2evxx.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\spoolsv.exe
              C:\Program Files\Avira\AntiVir Desktop\sched.exe
              C:\Program Files\Avira\AntiVir Desktop\avguard.exe
              c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe
              C:\Program Files\PC Tools Firewall Plus\FWService.exe
              C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe
              C:\WINDOWS\system32\Ati2evxx.exe
              C:\WINDOWS\Explorer.EXE
              C:\WINDOWS\system32\rundll32.exe
              C:\WINDOWS\system32\wscntfy.exe
              C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
              C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
              C:\WINDOWS\RTHDCPL.EXE
              C:\WINDOWS\system32\ctfmon.exe
              C:\Program Files\TP-LINK\TL-WN321G\COMMON\TWCU.exe
              C:\WINDOWS\System32\svchost.exe
              C:\Documents and Settings\Geordy\Bureau\RSIT.exe
              C:\Program Files\Trend Micro\HijackThis\Geordy.exe

              R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
              O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
              O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
              O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
              O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
              O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
              O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
              O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
              O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
              O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
              O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
              O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
              O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
              O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
              O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
              O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
              O4 - HKCU\..\Run: [cdoosoft] C:\DOCUME~1\Geordy\LOCALS~1\Temp\herss.exe
              O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
              O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
              O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
              O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
              O4 - Global Startup: TL-WN321G Wireless Utility.lnk = C:\Program Files\TP-LINK\TL-WN321G\COMMON\TWCU.exe
              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O17 - HKLM\System\CCS\Services\Tcpip\..\{E2AE303D-8394-43FE-A9BA-58F08702E139}: NameServer = 212.27.40.241,212.27.40.240
              O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
              O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
              O20 - AppInit_DLLs:
              O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
              O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
              O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
              O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
              O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
              O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe
              O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - C:\Program Files\PC Tools Firewall Plus\FWService.exe
              O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Unknown owner - C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe
              1. 2010-03-03 18:18:17 ----D---- C:\WINDOWS\PeerNet
                2010-03-03 18:18:14 ----HDC---- C:\WINDOWS\$NtUninstallKB817778$
                2010-03-03 18:18:05 ----ASH---- C:\Documents and Settings\Geordy\Application Data\desktop.ini
                2010-03-03 18:18:04 ----SD---- C:\Documents and Settings\Geordy\Application Data\Microsoft
                2010-03-03 18:17:32 ----SHD---- C:\System Volume Information
                2010-03-03 18:17:31 ----A---- C:\WINDOWS\SchedLgU.Txt
                2010-03-03 18:15:03 ----D---- C:\WINDOWS\system32\xircom
                2010-03-03 18:15:03 ----D---- C:\Program Files\xerox
                2010-03-03 18:15:03 ----D---- C:\Program Files\microsoft frontpage
                2010-03-03 18:14:49 ----HDC---- C:\WINDOWS\$NtUninstallKB822603$
                2010-03-03 18:14:42 ----HDC---- C:\WINDOWS\$NtUninstallQ828026$
                2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\jit.dll
                2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\javaee.dll
                2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\dx3j.dll
                2010-03-03 18:14:38 ----A---- C:\WINDOWS\setdebug.exe
                2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\wjview.exe
                2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\vmhelper.dll
                2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msjdbc10.dll
                2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msjava.dll
                2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msawt.dll
                2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\jview.exe
                2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\jdbgmgr.exe
                2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javart.dll
                2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javaprxy.dll
                2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javacypt.dll
                2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\clspack.exe
                2010-03-03 18:14:29 ----HDC---- C:\WINDOWS\$NtUninstallKB824105$
                2010-03-03 18:14:20 ----HDC---- C:\WINDOWS\$NtUninstallKB825121$
                2010-03-03 18:14:18 ----D---- C:\Program Files\HighMAT CD Writing Wizard
                2010-03-03 18:14:17 ----D---- C:\WINDOWS\Downloaded Installations
                2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\rpcss.dll
                2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\rpcrt4.dll
                2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\ole32.dll
                2010-03-03 18:14:11 ----HDC---- C:\WINDOWS\$NtUninstallKB820291$
                2010-03-03 18:14:07 ----HDC---- C:\WINDOWS\$NtUninstallQ815485$
                2010-03-03 18:13:59 ----HDC---- C:\WINDOWS\$NtUninstallKB810217$
                2010-03-03 18:13:52 ----HDC---- C:\WINDOWS\$NtUninstallKB828035$
                2010-03-03 18:13:52 ----A---- C:\WINDOWS\system32\msgsvc.dll
                2010-03-03 18:13:48 ----HDC---- C:\WINDOWS\$NtUninstallKB826939$
                2010-03-03 18:13:46 ----A---- C:\WINDOWS\system32\cryptsvc.dll
                2010-03-03 18:13:44 ----A---- C:\WINDOWS\system32\newdev.dll
                2010-03-03 18:13:43 ----A---- C:\WINDOWS\system32\shell32.dll
                2010-03-03 18:13:35 ----HDC---- C:\WINDOWS\$NtUninstallKB825119$
                2010-03-03 18:13:31 ----HDC---- C:\WINDOWS\$NtUninstallKB824141$
                2010-03-03 18:13:27 ----HDC---- C:\WINDOWS\$NtUninstallKB823182$
                2010-03-03 18:13:23 ----HDC---- C:\WINDOWS\$NtUninstallq329623$
                2010-03-03 18:13:20 ----HDC---- C:\WINDOWS\$NtUninstallKB823980$
                2010-03-03 18:13:16 ----HDC---- C:\WINDOWS\$NtUninstallKB823559$
                2010-03-03 18:13:13 ----D---- C:\Program Files\Common Files
                2010-03-03 18:13:09 ----HDC---- C:\WINDOWS\$NtUninstallKB821557$
                2010-03-03 18:13:02 ----HDC---- C:\WINDOWS\$NtUninstallQ819696$
                2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\wstdecod.dll
                2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\psisdecd.dll
                2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\msyuv.dll
                2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\msvidctl.dll
                2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmpdxm.dll
                2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmpasf.dll
                2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmerror.dll
                2010-03-03 18:12:35 ----A---- C:\WINDOWS\system32\mspmsnsv.dll
                2010-03-03 18:12:32 ----D---- C:\WINDOWS\RegisteredPackages
                2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmvdmoe2.dll
                2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmspdmoe.dll
                2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmspdmod.dll
                2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmsdmoe2.dll
                2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmidx.dll
                2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\mp4sdmod.dll
                2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\mp43dmod.dll
                2010-03-03 18:12:11 ----HDC---- C:\WINDOWS\$NtUninstallQ817606$
                2010-03-03 18:12:08 ----HDC---- C:\WINDOWS\$NtUninstallQ817287$
                2010-03-03 18:12:05 ----HDC---- C:\WINDOWS\$NtUninstallQ814033$
                2010-03-03 18:11:58 ----HDC---- C:\WINDOWS\$NtUninstallQ811493$
                2010-03-03 18:11:53 ----HDC---- C:\WINDOWS\$NtUninstallQ810833$
                2010-03-03 18:11:50 ----HDC---- C:\WINDOWS\$NtUninstallQ810577$
                2010-03-03 18:11:40 ----HDC---- C:\WINDOWS\$NtUninstallQ810565$
                2010-03-03 18:11:31 ----HDC---- C:\WINDOWS\$NtUninstallQ331953$
                2010-03-03 18:11:21 ----HD---- C:\Program Files\Uninstall Information
                2010-03-03 18:11:18 ----HDC---- C:\WINDOWS\$NtUninstallQ329834$
                2010-03-03 18:11:18 ----D---- C:\8c577054f32042639ee4988cc2f432d6
                2010-03-03 18:11:16 ----HDC---- C:\WINDOWS\$NtUninstallQ329441$
                2010-03-03 18:11:15 ----A---- C:\WINDOWS\system32\srrstr.dll
                2010-03-03 18:11:13 ----HDC---- C:\WINDOWS\$NtUninstallQ329390$
                2010-03-03 18:11:10 ----HDC---- C:\WINDOWS\$NtUninstallQ329170$
                2010-03-03 18:11:07 ----HDC---- C:\WINDOWS\$NtUninstallQ329048$
                2010-03-03 18:11:04 ----HDC---- C:\WINDOWS\$NtUninstallQ328310$
                2010-03-03 18:11:03 ----A---- C:\WINDOWS\system32\xpsp1hfm.exe
                2010-03-03 18:10:54 ----HDC---- C:\WINDOWS\$NtUninstallQ327979$
                2010-03-03 18:10:42 ----HDC---- C:\WINDOWS\$NtUninstallKB282010$
                2010-03-03 18:10:38 ----A---- C:\WINDOWS\817778.EXE
                2010-03-03 18:10:34 ----D---- C:\Program Files\Windows Journal Viewer
                2010-03-03 18:09:59 ----RSD---- C:\WINDOWS\assembly
                2010-03-03 18:09:59 ----D---- C:\WINDOWS\system32\URTTemp
                2010-03-03 18:09:59 ----D---- C:\WINDOWS\Microsoft.NET
                2010-03-03 18:09:57 ----SHD---- C:\WINDOWS\Installer
                2010-03-03 18:09:30 ----A---- C:\WINDOWS\control.ini
                2010-03-03 18:09:30 ----A---- C:\AUTOEXEC.BAT
                2010-03-03 18:09:26 ----A---- C:\WINDOWS\OEWABLog.txt
                2010-03-03 18:09:23 ----A---- C:\WINDOWS\system32\mapi32.dll
                2010-03-03 18:08:55 ----SD---- C:\WINDOWS\Downloaded Program Files
                2010-03-03 18:08:55 ----RD---- C:\WINDOWS\Offline Web Pages
                2010-03-03 18:08:55 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
                2010-03-03 18:08:52 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
                2010-03-03 18:08:37 ----D---- C:\WINDOWS\system32\DirectX
                2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrslv.dll
                2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrdm.dll
                2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrcdlg.dll
                2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\racpldlg.dll
                2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\atrace.dll
                2010-03-03 18:08:10 ----A---- C:\WINDOWS\system32\desktop.ini
                2010-03-03 18:08:10 ----A---- C:\WINDOWS\desktop.ini
                2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
                2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
                2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\isrdbg32.dll
                2010-03-03 18:08:03 ----A---- C:\WINDOWS\system32\acctres.dll
                2010-03-03 18:08:02 ----D---- C:\Program Files\Fichiers communs\Services
                2010-03-03 18:07:59 ----SD---- C:\WINDOWS\Tasks
                2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\isign32.dll
                2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\icwphbk.dll
                2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\icwdial.dll
                2010-03-03 18:07:58 ----A---- C:\WINDOWS\system32\inetcfg.dll
                2010-03-03 18:07:58 ----A---- C:\WINDOWS\system32\icfgnt5.dll
                2010-03-03 18:07:57 ----D---- C:\Program Files\Fichiers communs\MSSoap
                2010-03-03 18:07:53 ----D---- C:\WINDOWS\srchasst
                2010-03-03 18:07:52 ----D---- C:\WINDOWS\system32\Macromed
                2010-03-03 18:07:51 ----D---- C:\Program Files\Movie Maker
                2010-03-03 18:07:51 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
                2010-03-03 18:07:51 ----A---- C:\WINDOWS\system32\qmgr.dll
                2010-03-03 18:07:47 ----D---- C:\WINDOWS\system32\Restore
                2010-03-03 18:07:47 ----D---- C:\WINDOWS\PCHealth
                2010-03-03 18:07:47 ----A---- C:\WINDOWS\system32\srsvc.dll
                2010-03-03 18:07:47 ----A---- C:\WINDOWS\system32\srclient.dll
                2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\nmmkcert.dll
                2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\msconf.dll
                2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\mnmdd.dll
                2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\ils.dll
                2010-03-03 18:07:44 ----D---- C:\Program Files\NetMeeting
                2010-03-03 18:07:43 ----D---- C:\Program Files\Outlook Express
                2010-03-03 18:07:43 ----A---- C:\WINDOWS\system32\schedsvc.dll
                2010-03-03 18:07:42 ----A---- C:\WINDOWS\system32\mstinit.exe
                2010-03-03 18:07:42 ----A---- C:\WINDOWS\system32\mstask.dll
                2010-03-03 18:07:37 ----D---- C:\Program Files\Fichiers communs\System
                2010-03-03 18:07:36 ----D---- C:\Program Files\Internet Explorer
                2010-03-03 18:07:33 ----D---- C:\Program Files\ComPlus Applications
                2010-03-03 18:07:33 ----A---- C:\WINDOWS\vbaddin.ini
                2010-03-03 18:07:33 ----A---- C:\WINDOWS\vb.ini
                2010-03-03 18:07:32 ----D---- C:\WINDOWS\Registration
                2010-03-03 18:07:19 ----HD---- C:\Program Files\WindowsUpdate
                2010-03-03 18:07:19 ----D---- C:\Program Files\Windows Media Player
                2010-03-03 18:07:19 ----D---- C:\Program Files\Services en ligne
                2010-03-03 18:07:17 ----D---- C:\Program Files\Messenger
                2010-03-03 18:07:12 ----D---- C:\Program Files\MSN Gaming Zone
                2010-03-03 18:07:12 ----A---- C:\WINDOWS\system32\write.exe
                2010-03-03 18:07:05 ----A---- C:\WINDOWS\system32\sndvol32.exe
                2010-03-03 18:07:05 ----A---- C:\WINDOWS\system32\sndrec32.exe
                2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\hypertrm.dll
                2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\hticons.dll
                2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avwav.dll
                2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avtapi.dll
                2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avmeter.dll
                2010-03-03 18:07:03 ----A---- C:\WINDOWS\system32\winchat.exe
                2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\sol.exe
                2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\getuname.dll
                2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\charmap.exe
                2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\calc.exe
                2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\winmine.exe
                2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\usrlogon.cmd
                2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tsshutdn.exe
                2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tslabels.ini
                2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tskill.exe
                2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\reset.exe
                2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\rdshost.exe
                2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\mshearts.exe
                2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\freecell.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\tsdiscon.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\tscon.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\shadow.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\rwinsta.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\regini.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qwinsta.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qprocess.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qappsrv.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\mtxoci.dll
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\msg.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\logoff.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\cdmodem.dll
                2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\xolehlp.dll
                2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtctm.dll
                2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtcprf.ini
                2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtclog.dll
                2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtc.exe
                2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\stclient.dll
                2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxlegih.dll
                2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxex.dll
                2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxdm.dll
                2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
                2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\comrepl.dll
                2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\comaddin.dll
                2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\colbact.dll
                2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\comuid.dll
                2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\comsnap.dll
                2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\clbcatq.dll
                2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\clbcatex.dll
                2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\catsrvps.dll
                2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\catsrv.dll
                2010-03-03 18:06:48 ----A---- C:\WINDOWS\system32\wmimgmt.msc
                2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\servdeps.dll
                2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\mmfutil.dll
                2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\cmprops.dll
                2010-03-03 18:06:43 ----D---- C:\Program Files\Windows NT
                2010-03-03 18:06:43 ----D---- C:\Program Files\MSN
                2010-03-03 18:06:43 ----A---- C:\WINDOWS\system32\mplay32.exe
                2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuauserv.dll
                2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuaueng.dll
                2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuauclt.exe
                2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\spider.exe
                2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\mspaint.exe
                2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\clipbrd.exe
                2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\tscupgrd.exe
                2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
                2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\termsrv.dll
                2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\sessmgr.exe
                2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\remotepg.dll
                2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\rdsaddin.exe
                2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\rdchost.dll
                2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\mstscax.dll
                2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\mstsc.exe
                2010-03-03 18:06:40 ----D---- C:\WINDOWS\system32\MsDtc
                2010-03-03 18:06:40 ----D---- C:\WINDOWS\system32\Com
                2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpwsx.dll
                2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpsnd.dll
                2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpclip.exe
                2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\msdtcprx.dll
                2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\icaapi.dll
                2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\cfgbkend.dll
                2010-03-03 18:06:39 ----A---- C:\WINDOWS\system32\comsvcs.dll
                2010-03-03 18:06:39 ----A---- C:\WINDOWS\system32\catsrvut.dll
                2010-03-03 18:06:36 ----A---- C:\WINDOWS\system32\licwmi.dll
                2010-03-03 18:06:18 ----A---- C:\WINDOWS\system32\h323log.txt
                2010-03-03 18:05:28 ----A---- C:\WINDOWS\system32\hidserv.dll
                2010-03-03 18:04:45 ----A---- C:\WINDOWS\system32\usbui.dll
                2010-03-03 18:03:55 ----A---- C:\WINDOWS\imsins.BAK
                2010-03-03 18:03:53 ----D---- C:\Program Files\Fichiers communs\ODBC
                2010-03-03 18:03:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
                2010-03-03 18:03:53 ----A---- C:\WINDOWS\ODBCINST.INI
                2010-03-03 18:03:50 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
                2010-03-03 18:03:49 ----RD---- C:\Program Files
                2010-03-03 18:03:49 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
                2010-03-03 18:03:49 ----D---- C:\Program Files\Fichiers communs
                2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
                2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
                2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdazel.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdycc.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbduzb.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdur.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdtat.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdru1.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdru.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdmon.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdbu.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdblr.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdaze.dll
                2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhept.dll
                2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
                2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
                2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
                2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
                2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe.dll
                2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
                2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
                2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlv.dll
                2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
                2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlt.dll
                2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdest.dll
                2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
                2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdsl.dll
                2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdro.dll
                2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
                2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdpl.dll
                2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
                2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdhu.dll
                2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
                2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
                2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdycl.dll
                2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdcz.dll
                2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdcr.dll
                2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
                2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\spxcoins.dll
                2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\irclass.dll
                2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\dgsetup.dll
                2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
                2010-03-03 18:03:39 ----A---- C:\WINDOWS\system32\EqnClass.Dll
                2010-03-03 18:03:38 ----N---- C:\WINDOWS\system32\CONFIG.TMP
                2010-03-03 18:03:38 ----A---- C:\WINDOWS\TASKMAN.EXE
                2010-03-03 18:03:38 ----A---- C:\WINDOWS\system32\batt.dll
                2010-03-03 18:03:38 ----A---- C:\WINDOWS\notepad.exe
                2010-03-03 18:03:37 ----A---- C:\WINDOWS\system32\storprop.dll
                2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET52.tmp
                2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET51.tmp
                2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET50.tmp
                2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4F.tmp
                2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4E.tmp
                2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4D.tmp
                2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4C.tmp
                2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4B.tmp
                2010-03-03 18:03:35 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET4A.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET49.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET48.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET47.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET46.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET45.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET44.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET43.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET42.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET41.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET40.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3F.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3E.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3D.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3C.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3B.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3A.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET39.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET38.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET37.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET36.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET35.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET34.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET33.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET32.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET31.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET30.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2F.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2E.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2D.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2C.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2B.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2A.tmp
                2010-03-03 18:03:32 ----RA---- C:\WINDOWS\SET29.tmp
                2010-03-03 18:03:01 ----RA---- C:\WINDOWS\SETA.tmp
                2010-03-03 18:02:57 ----RA---- C:\WINDOWS\SET3.tmp
                2010-03-03 18:02:53 ----D---- C:\WINDOWS\system32\CatRoot2
                2010-03-03 18:02:53 ----D---- C:\WINDOWS\system32\CatRoot
                2010-03-03 18:02:48 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
                2010-03-03 18:02:32 ----A---- C:\WINDOWS\setuplog.txt
                2010-03-03 18:02:29 ----D---- C:\Documents and Settings
                2010-02-11 05:37:08 ----A---- C:\WINDOWS\system32\atiok3x2.dll
                2010-02-11 05:36:00 ----A---- C:\WINDOWS\system32\atipdlxx.dll
                2010-02-11 05:35:44 ----A---- C:\WINDOWS\system32\Oemdspif.dll
                2010-02-11 05:35:24 ----A---- C:\WINDOWS\system32\ati2edxx.dll
                2010-02-11 05:35:10 ----A---- C:\WINDOWS\system32\ati2evxx.dll
                2010-02-11 05:33:56 ----A---- C:\WINDOWS\system32\ati2evxx.exe
                2010-02-11 04:59:16 ----A---- C:\WINDOWS\system32\amdpcom32.dll
                2010-02-11 04:55:40 ----A---- C:\WINDOWS\system32\atikvmag.dll

                ======List of files/folders modified in the last 1 months======

                2010-03-03 19:03:49 ----A---- C:\WINDOWS\win.ini
                2010-03-03 18:21:55 ----RASH---- C:\NTDETECT.COM
                2010-03-03 18:03:49 ----A---- C:\WINDOWS\system.ini

                ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520]
                R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
                R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
                R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2004-08-19 14848]
                R1 pctgntdi;pctgntdi; \??\C:\WINDOWS\system32\drivers\pctgntdi.sys []
                R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
                R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.7.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-03-03 21361]
                R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-11-25 56816]
                R2 PCTAppEvent;PCTAppEvent Driver; \??\C:\WINDOWS\system32\drivers\PCTAppEvent.sys []
                R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-05-12 3007488]
                R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
                R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2002-08-30 9600]
                R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-10 4397568]
                R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2002-08-30 12288]
                R3 PCTFW-PacketFilter;PCTools Firewall - Packet filter driver; \??\C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys []
                R3 pctNDIS;PC Tools Driver; C:\WINDOWS\system32\DRIVERS\pctNdis.sys [2010-01-07 58816]
                R3 pctplfw;pctplfw; \??\C:\WINDOWS\system32\drivers\pctplfw.sys []
                R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-03 31616]
                R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-03 26624]
                R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-03 57600]
                R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2004-08-03 17024]
                S3 a0z852jy;a0z852jy; C:\WINDOWS\system32\drivers\a0z852jy.sys []
                S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
                S3 RT73;TL-WN321G USB Wireless Adapter; C:\WINDOWS\system32\DRIVERS\rt73.sys [2008-10-21 465152]
                S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-11-27 177152]
                S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
                S3 xnacc;Microsoft Common Controller For Windows Driver Service; C:\WINDOWS\system32\DRIVERS\xnacc.sys [2005-09-15 476672]
                S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

                ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
                R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
                R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-05-12 540672]
                R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe [2009-12-08 93320]
                R2 PCToolsFirewallPlus;PC Tools Firewall Plus; C:\Program Files\PC Tools Firewall Plus\FWService.exe [2009-11-09 818432]
                R2 RalinkRegistryWriter;Ralink Registry Writer; C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe [2009-01-05 69632]
                S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-05-12 593920]
                S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
                S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
                S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
                S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
                S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2010-01-26 243056]
                S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

                -----------------EOF-----------------
                1. 2010-03-03 18:18:17 ----D---- C:\WINDOWS\PeerNet
                  2010-03-03 18:18:14 ----HDC---- C:\WINDOWS\$NtUninstallKB817778$
                  2010-03-03 18:18:05 ----ASH---- C:\Documents and Settings\Geordy\Application Data\desktop.ini
                  2010-03-03 18:18:04 ----SD---- C:\Documents and Settings\Geordy\Application Data\Microsoft
                  2010-03-03 18:17:32 ----SHD---- C:\System Volume Information
                  2010-03-03 18:17:31 ----A---- C:\WINDOWS\SchedLgU.Txt
                  2010-03-03 18:15:03 ----D---- C:\WINDOWS\system32\xircom
                  2010-03-03 18:15:03 ----D---- C:\Program Files\xerox
                  2010-03-03 18:15:03 ----D---- C:\Program Files\microsoft frontpage
                  2010-03-03 18:14:49 ----HDC---- C:\WINDOWS\$NtUninstallKB822603$
                  2010-03-03 18:14:42 ----HDC---- C:\WINDOWS\$NtUninstallQ828026$
                  2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\jit.dll
                  2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\javaee.dll
                  2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\dx3j.dll
                  2010-03-03 18:14:38 ----A---- C:\WINDOWS\setdebug.exe
                  2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\wjview.exe
                  2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\vmhelper.dll
                  2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msjdbc10.dll
                  2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msjava.dll
                  2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msawt.dll
                  2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\jview.exe
                  2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\jdbgmgr.exe
                  2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javart.dll
                  2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javaprxy.dll
                  2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javacypt.dll
                  2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\clspack.exe
                  2010-03-03 18:14:29 ----HDC---- C:\WINDOWS\$NtUninstallKB824105$
                  2010-03-03 18:14:20 ----HDC---- C:\WINDOWS\$NtUninstallKB825121$
                  2010-03-03 18:14:18 ----D---- C:\Program Files\HighMAT CD Writing Wizard
                  2010-03-03 18:14:17 ----D---- C:\WINDOWS\Downloaded Installations
                  2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\rpcss.dll
                  2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\rpcrt4.dll
                  2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\ole32.dll
                  2010-03-03 18:14:11 ----HDC---- C:\WINDOWS\$NtUninstallKB820291$
                  2010-03-03 18:14:07 ----HDC---- C:\WINDOWS\$NtUninstallQ815485$
                  2010-03-03 18:13:59 ----HDC---- C:\WINDOWS\$NtUninstallKB810217$
                  2010-03-03 18:13:52 ----HDC---- C:\WINDOWS\$NtUninstallKB828035$
                  2010-03-03 18:13:52 ----A---- C:\WINDOWS\system32\msgsvc.dll
                  2010-03-03 18:13:48 ----HDC---- C:\WINDOWS\$NtUninstallKB826939$
                  2010-03-03 18:13:46 ----A---- C:\WINDOWS\system32\cryptsvc.dll
                  2010-03-03 18:13:44 ----A---- C:\WINDOWS\system32\newdev.dll
                  2010-03-03 18:13:43 ----A---- C:\WINDOWS\system32\shell32.dll
                  2010-03-03 18:13:35 ----HDC---- C:\WINDOWS\$NtUninstallKB825119$
                  2010-03-03 18:13:31 ----HDC---- C:\WINDOWS\$NtUninstallKB824141$
                  2010-03-03 18:13:27 ----HDC---- C:\WINDOWS\$NtUninstallKB823182$
                  2010-03-03 18:13:23 ----HDC---- C:\WINDOWS\$NtUninstallq329623$
                  2010-03-03 18:13:20 ----HDC---- C:\WINDOWS\$NtUninstallKB823980$
                  2010-03-03 18:13:16 ----HDC---- C:\WINDOWS\$NtUninstallKB823559$
                  2010-03-03 18:13:13 ----D---- C:\Program Files\Common Files
                  2010-03-03 18:13:09 ----HDC---- C:\WINDOWS\$NtUninstallKB821557$
                  2010-03-03 18:13:02 ----HDC---- C:\WINDOWS\$NtUninstallQ819696$
                  2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\wstdecod.dll
                  2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\psisdecd.dll
                  2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\msyuv.dll
                  2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\msvidctl.dll
                  2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmpdxm.dll
                  2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmpasf.dll
                  2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmerror.dll
                  2010-03-03 18:12:35 ----A---- C:\WINDOWS\system32\mspmsnsv.dll
                  2010-03-03 18:12:32 ----D---- C:\WINDOWS\RegisteredPackages
                  2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmvdmoe2.dll
                  2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmspdmoe.dll
                  2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmspdmod.dll
                  2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmsdmoe2.dll
                  2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmidx.dll
                  2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\mp4sdmod.dll
                  2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\mp43dmod.dll
                  2010-03-03 18:12:11 ----HDC---- C:\WINDOWS\$NtUninstallQ817606$
                  2010-03-03 18:12:08 ----HDC---- C:\WINDOWS\$NtUninstallQ817287$
                  2010-03-03 18:12:05 ----HDC---- C:\WINDOWS\$NtUninstallQ814033$
                  2010-03-03 18:11:58 ----HDC---- C:\WINDOWS\$NtUninstallQ811493$
                  2010-03-03 18:11:53 ----HDC---- C:\WINDOWS\$NtUninstallQ810833$
                  2010-03-03 18:11:50 ----HDC---- C:\WINDOWS\$NtUninstallQ810577$
                  2010-03-03 18:11:40 ----HDC---- C:\WINDOWS\$NtUninstallQ810565$
                  2010-03-03 18:11:31 ----HDC---- C:\WINDOWS\$NtUninstallQ331953$
                  2010-03-03 18:11:21 ----HD---- C:\Program Files\Uninstall Information
                  2010-03-03 18:11:18 ----HDC---- C:\WINDOWS\$NtUninstallQ329834$
                  2010-03-03 18:11:18 ----D---- C:\8c577054f32042639ee4988cc2f432d6
                  2010-03-03 18:11:16 ----HDC---- C:\WINDOWS\$NtUninstallQ329441$
                  2010-03-03 18:11:15 ----A---- C:\WINDOWS\system32\srrstr.dll
                  2010-03-03 18:11:13 ----HDC---- C:\WINDOWS\$NtUninstallQ329390$
                  2010-03-03 18:11:10 ----HDC---- C:\WINDOWS\$NtUninstallQ329170$
                  2010-03-03 18:11:07 ----HDC---- C:\WINDOWS\$NtUninstallQ329048$
                  2010-03-03 18:11:04 ----HDC---- C:\WINDOWS\$NtUninstallQ328310$
                  2010-03-03 18:11:03 ----A---- C:\WINDOWS\system32\xpsp1hfm.exe
                  2010-03-03 18:10:54 ----HDC---- C:\WINDOWS\$NtUninstallQ327979$
                  2010-03-03 18:10:42 ----HDC---- C:\WINDOWS\$NtUninstallKB282010$
                  2010-03-03 18:10:38 ----A---- C:\WINDOWS\817778.EXE
                  2010-03-03 18:10:34 ----D---- C:\Program Files\Windows Journal Viewer
                  2010-03-03 18:09:59 ----RSD---- C:\WINDOWS\assembly
                  2010-03-03 18:09:59 ----D---- C:\WINDOWS\system32\URTTemp
                  2010-03-03 18:09:59 ----D---- C:\WINDOWS\Microsoft.NET
                  2010-03-03 18:09:57 ----SHD---- C:\WINDOWS\Installer
                  2010-03-03 18:09:30 ----A---- C:\WINDOWS\control.ini
                  2010-03-03 18:09:30 ----A---- C:\AUTOEXEC.BAT
                  2010-03-03 18:09:26 ----A---- C:\WINDOWS\OEWABLog.txt
                  2010-03-03 18:09:23 ----A---- C:\WINDOWS\system32\mapi32.dll
                  2010-03-03 18:08:55 ----SD---- C:\WINDOWS\Downloaded Program Files
                  2010-03-03 18:08:55 ----RD---- C:\WINDOWS\Offline Web Pages
                  2010-03-03 18:08:55 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
                  2010-03-03 18:08:52 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
                  2010-03-03 18:08:37 ----D---- C:\WINDOWS\system32\DirectX
                  2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrslv.dll
                  2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrdm.dll
                  2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrcdlg.dll
                  2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\racpldlg.dll
                  2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\atrace.dll
                  2010-03-03 18:08:10 ----A---- C:\WINDOWS\system32\desktop.ini
                  2010-03-03 18:08:10 ----A---- C:\WINDOWS\desktop.ini
                  2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
                  2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
                  2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\isrdbg32.dll
                  2010-03-03 18:08:03 ----A---- C:\WINDOWS\system32\acctres.dll
                  2010-03-03 18:08:02 ----D---- C:\Program Files\Fichiers communs\Services
                  2010-03-03 18:07:59 ----SD---- C:\WINDOWS\Tasks
                  2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\isign32.dll
                  2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\icwphbk.dll
                  2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\icwdial.dll
                  2010-03-03 18:07:58 ----A---- C:\WINDOWS\system32\inetcfg.dll
                  2010-03-03 18:07:58 ----A---- C:\WINDOWS\system32\icfgnt5.dll
                  2010-03-03 18:07:57 ----D---- C:\Program Files\Fichiers communs\MSSoap
                  2010-03-03 18:07:53 ----D---- C:\WINDOWS\srchasst
                  2010-03-03 18:07:52 ----D---- C:\WINDOWS\system32\Macromed
                  2010-03-03 18:07:51 ----D---- C:\Program Files\Movie Maker
                  2010-03-03 18:07:51 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
                  2010-03-03 18:07:51 ----A---- C:\WINDOWS\system32\qmgr.dll
                  2010-03-03 18:07:47 ----D---- C:\WINDOWS\system32\Restore
                  2010-03-03 18:07:47 ----D---- C:\WINDOWS\PCHealth
                  2010-03-03 18:07:47 ----A---- C:\WINDOWS\system32\srsvc.dll
                  2010-03-03 18:07:47 ----A---- C:\WINDOWS\system32\srclient.dll
                  2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\nmmkcert.dll
                  2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\msconf.dll
                  2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\mnmdd.dll
                  2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\ils.dll
                  2010-03-03 18:07:44 ----D---- C:\Program Files\NetMeeting
                  2010-03-03 18:07:43 ----D---- C:\Program Files\Outlook Express
                  2010-03-03 18:07:43 ----A---- C:\WINDOWS\system32\schedsvc.dll
                  2010-03-03 18:07:42 ----A---- C:\WINDOWS\system32\mstinit.exe
                  2010-03-03 18:07:42 ----A---- C:\WINDOWS\system32\mstask.dll
                  2010-03-03 18:07:37 ----D---- C:\Program Files\Fichiers communs\System
                  2010-03-03 18:07:36 ----D---- C:\Program Files\Internet Explorer
                  2010-03-03 18:07:33 ----D---- C:\Program Files\ComPlus Applications
                  2010-03-03 18:07:33 ----A---- C:\WINDOWS\vbaddin.ini
                  2010-03-03 18:07:33 ----A---- C:\WINDOWS\vb.ini
                  2010-03-03 18:07:32 ----D---- C:\WINDOWS\Registration
                  2010-03-03 18:07:19 ----HD---- C:\Program Files\WindowsUpdate
                  2010-03-03 18:07:19 ----D---- C:\Program Files\Windows Media Player
                  2010-03-03 18:07:19 ----D---- C:\Program Files\Services en ligne
                  2010-03-03 18:07:17 ----D---- C:\Program Files\Messenger
                  2010-03-03 18:07:12 ----D---- C:\Program Files\MSN Gaming Zone
                  2010-03-03 18:07:12 ----A---- C:\WINDOWS\system32\write.exe
                  2010-03-03 18:07:05 ----A---- C:\WINDOWS\system32\sndvol32.exe
                  2010-03-03 18:07:05 ----A---- C:\WINDOWS\system32\sndrec32.exe
                  2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\hypertrm.dll
                  2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\hticons.dll
                  2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avwav.dll
                  2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avtapi.dll
                  2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avmeter.dll
                  2010-03-03 18:07:03 ----A---- C:\WINDOWS\system32\winchat.exe
                  2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\sol.exe
                  2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\getuname.dll
                  2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\charmap.exe
                  2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\calc.exe
                  2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\winmine.exe
                  2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\usrlogon.cmd
                  2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tsshutdn.exe
                  2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tslabels.ini
                  2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tskill.exe
                  2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\reset.exe
                  2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\rdshost.exe
                  2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\mshearts.exe
                  2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\freecell.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\tsdiscon.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\tscon.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\shadow.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\rwinsta.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\regini.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qwinsta.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qprocess.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qappsrv.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\mtxoci.dll
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\msg.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\logoff.exe
                  2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\cdmodem.dll
                  2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\xolehlp.dll
                  2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtctm.dll
                  2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtcprf.ini
                  2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtclog.dll
                  2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtc.exe
                  2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\stclient.dll
                  2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxlegih.dll
                  2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxex.dll
                  2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxdm.dll
                  2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
                  2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\comrepl.dll
                  2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\comaddin.dll
                  2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\colbact.dll
                  2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\comuid.dll
                  2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\comsnap.dll
                  2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\clbcatq.dll
                  2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\clbcatex.dll
                  2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\catsrvps.dll
                  2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\catsrv.dll
                  2010-03-03 18:06:48 ----A---- C:\WINDOWS\system32\wmimgmt.msc
                  2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\servdeps.dll
                  2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\mmfutil.dll
                  2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\cmprops.dll
                  2010-03-03 18:06:43 ----D---- C:\Program Files\Windows NT
                  2010-03-03 18:06:43 ----D---- C:\Program Files\MSN
                  2010-03-03 18:06:43 ----A---- C:\WINDOWS\system32\mplay32.exe
                  2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuauserv.dll
                  2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuaueng.dll
                  2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuauclt.exe
                  2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\spider.exe
                  2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\mspaint.exe
                  2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\clipbrd.exe
                  2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\tscupgrd.exe
                  2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
                  2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\termsrv.dll
                  2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\sessmgr.exe
                  2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\remotepg.dll
                  2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\rdsaddin.exe
                  2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\rdchost.dll
                  2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\mstscax.dll
                  2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\mstsc.exe
                  2010-03-03 18:06:40 ----D---- C:\WINDOWS\system32\MsDtc
                  2010-03-03 18:06:40 ----D---- C:\WINDOWS\system32\Com
                  2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpwsx.dll
                  2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpsnd.dll
                  2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpclip.exe
                  2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\msdtcprx.dll
                  2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\icaapi.dll
                  2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\cfgbkend.dll
                  2010-03-03 18:06:39 ----A---- C:\WINDOWS\system32\comsvcs.dll
                  2010-03-03 18:06:39 ----A---- C:\WINDOWS\system32\catsrvut.dll
                  2010-03-03 18:06:36 ----A---- C:\WINDOWS\system32\licwmi.dll
                  2010-03-03 18:06:18 ----A---- C:\WINDOWS\system32\h323log.txt
                  2010-03-03 18:05:28 ----A---- C:\WINDOWS\system32\hidserv.dll
                  2010-03-03 18:04:45 ----A---- C:\WINDOWS\system32\usbui.dll
                  2010-03-03 18:03:55 ----A---- C:\WINDOWS\imsins.BAK
                  2010-03-03 18:03:53 ----D---- C:\Program Files\Fichiers communs\ODBC
                  2010-03-03 18:03:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
                  2010-03-03 18:03:53 ----A---- C:\WINDOWS\ODBCINST.INI
                  2010-03-03 18:03:50 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
                  2010-03-03 18:03:49 ----RD---- C:\Program Files
                  2010-03-03 18:03:49 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
                  2010-03-03 18:03:49 ----D---- C:\Program Files\Fichiers communs
                  2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
                  2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
                  2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdazel.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdycc.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbduzb.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdur.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdtat.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdru1.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdru.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdmon.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdbu.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdblr.dll
                  2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdaze.dll
                  2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhept.dll
                  2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
                  2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
                  2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
                  2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
                  2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe.dll
                  2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
                  2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
                  2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlv.dll
                  2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
                  2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlt.dll
                  2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdest.dll
                  2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
                  2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdsl.dll
                  2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdro.dll
                  2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
                  2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdpl.dll
                  2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
                  2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdhu.dll
                  2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
                  2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
                  2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdycl.dll
                  2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdcz.dll
                  2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdcr.dll
                  2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
                  2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\spxcoins.dll
                  2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\irclass.dll
                  2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\dgsetup.dll
                  2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
                  2010-03-03 18:03:39 ----A---- C:\WINDOWS\system32\EqnClass.Dll
                  2010-03-03 18:03:38 ----N---- C:\WINDOWS\system32\CONFIG.TMP
                  2010-03-03 18:03:38 ----A---- C:\WINDOWS\TASKMAN.EXE
                  2010-03-03 18:03:38 ----A---- C:\WINDOWS\system32\batt.dll
                  2010-03-03 18:03:38 ----A---- C:\WINDOWS\notepad.exe
                  2010-03-03 18:03:37 ----A---- C:\WINDOWS\system32\storprop.dll
                  2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET52.tmp
                  2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET51.tmp
                  2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET50.tmp
                  2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4F.tmp
                  2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4E.tmp
                  2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4D.tmp
                  2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4C.tmp
                  2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4B.tmp
                  2010-03-03 18:03:35 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET4A.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET49.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET48.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET47.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET46.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET45.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET44.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET43.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET42.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET41.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET40.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3F.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3E.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3D.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3C.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3B.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3A.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET39.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET38.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET37.tmp
                  2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET36.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET35.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET34.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET33.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET32.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET31.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET30.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2F.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2E.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2D.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2C.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2B.tmp
                  2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2A.tmp
                  2010-03-03 18:03:32 ----RA---- C:\WINDOWS\SET29.tmp
                  2010-03-03 18:03:01 ----RA---- C:\WINDOWS\SETA.tmp
                  2010-03-03 18:02:57 ----RA---- C:\WINDOWS\SET3.tmp
                  2010-03-03 18:02:53 ----D---- C:\WINDOWS\system32\CatRoot2
                  2010-03-03 18:02:53 ----D---- C:\WINDOWS\system32\CatRoot
                  2010-03-03 18:02:48 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
                  2010-03-03 18:02:32 ----A---- C:\WINDOWS\setuplog.txt
                  2010-03-03 18:02:29 ----D---- C:\Documents and Settings
                  2010-02-11 05:37:08 ----A---- C:\WINDOWS\system32\atiok3x2.dll
                  2010-02-11 05:36:00 ----A---- C:\WINDOWS\system32\atipdlxx.dll
                  2010-02-11 05:35:44 ----A---- C:\WINDOWS\system32\Oemdspif.dll
                  2010-02-11 05:35:24 ----A---- C:\WINDOWS\system32\ati2edxx.dll
                  2010-02-11 05:35:10 ----A---- C:\WINDOWS\system32\ati2evxx.dll
                  2010-02-11 05:33:56 ----A---- C:\WINDOWS\system32\ati2evxx.exe
                  2010-02-11 04:59:16 ----A---- C:\WINDOWS\system32\amdpcom32.dll
                  2010-02-11 04:55:40 ----A---- C:\WINDOWS\system32\atikvmag.dll

                  ======List of files/folders modified in the last 1 months======

                  2010-03-03 19:03:49 ----A---- C:\WINDOWS\win.ini
                  2010-03-03 18:21:55 ----RASH---- C:\NTDETECT.COM
                  2010-03-03 18:03:49 ----A---- C:\WINDOWS\system.ini

                  ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                  R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520]
                  R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
                  R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
                  R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2004-08-19 14848]
                  R1 pctgntdi;pctgntdi; \??\C:\WINDOWS\system32\drivers\pctgntdi.sys []
                  R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
                  R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.7.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-03-03 21361]
                  R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-11-25 56816]
                  R2 PCTAppEvent;PCTAppEvent Driver; \??\C:\WINDOWS\system32\drivers\PCTAppEvent.sys []
                  R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-05-12 3007488]
                  R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
                  R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2002-08-30 9600]
                  R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-10 4397568]
                  R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2002-08-30 12288]
                  R3 PCTFW-PacketFilter;PCTools Firewall - Packet filter driver; \??\C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys []
                  R3 pctNDIS;PC Tools Driver; C:\WINDOWS\system32\DRIVERS\pctNdis.sys [2010-01-07 58816]
                  R3 pctplfw;pctplfw; \??\C:\WINDOWS\system32\drivers\pctplfw.sys []
                  R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-03 31616]
                  R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-03 26624]
                  R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-03 57600]
                  R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2004-08-03 17024]
                  S3 a0z852jy;a0z852jy; C:\WINDOWS\system32\drivers\a0z852jy.sys []
                  S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
                  S3 RT73;TL-WN321G USB Wireless Adapter; C:\WINDOWS\system32\DRIVERS\rt73.sys [2008-10-21 465152]
                  S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-11-27 177152]
                  S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
                  S3 xnacc;Microsoft Common Controller For Windows Driver Service; C:\WINDOWS\system32\DRIVERS\xnacc.sys [2005-09-15 476672]
                  S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

                  ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                  R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
                  R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
                  R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-05-12 540672]
                  R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe [2009-12-08 93320]
                  R2 PCToolsFirewallPlus;PC Tools Firewall Plus; C:\Program Files\PC Tools Firewall Plus\FWService.exe [2009-11-09 818432]
                  R2 RalinkRegistryWriter;Ralink Registry Writer; C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe [2009-01-05 69632]
                  S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-05-12 593920]
                  S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
                  S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
                  S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
                  S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
                  S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2010-01-26 243056]
                  S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

                  -----------------EOF-----------------
                  1. 2010-03-03 18:18:17 ----D---- C:\WINDOWS\PeerNet
                    2010-03-03 18:18:14 ----HDC---- C:\WINDOWS\$NtUninstallKB817778$
                    2010-03-03 18:18:05 ----ASH---- C:\Documents and Settings\Geordy\Application Data\desktop.ini
                    2010-03-03 18:18:04 ----SD---- C:\Documents and Settings\Geordy\Application Data\Microsoft
                    2010-03-03 18:17:32 ----SHD---- C:\System Volume Information
                    2010-03-03 18:17:31 ----A---- C:\WINDOWS\SchedLgU.Txt
                    2010-03-03 18:15:03 ----D---- C:\WINDOWS\system32\xircom
                    2010-03-03 18:15:03 ----D---- C:\Program Files\xerox
                    2010-03-03 18:15:03 ----D---- C:\Program Files\microsoft frontpage
                    2010-03-03 18:14:49 ----HDC---- C:\WINDOWS\$NtUninstallKB822603$
                    2010-03-03 18:14:42 ----HDC---- C:\WINDOWS\$NtUninstallQ828026$
                    2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\jit.dll
                    2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\javaee.dll
                    2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\dx3j.dll
                    2010-03-03 18:14:38 ----A---- C:\WINDOWS\setdebug.exe
                    2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\wjview.exe
                    2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\vmhelper.dll
                    2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msjdbc10.dll
                    2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msjava.dll
                    2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msawt.dll
                    2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\jview.exe
                    2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\jdbgmgr.exe
                    2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javart.dll
                    2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javaprxy.dll
                    2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javacypt.dll
                    2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\clspack.exe
                    2010-03-03 18:14:29 ----HDC---- C:\WINDOWS\$NtUninstallKB824105$
                    2010-03-03 18:14:20 ----HDC---- C:\WINDOWS\$NtUninstallKB825121$
                    2010-03-03 18:14:18 ----D---- C:\Program Files\HighMAT CD Writing Wizard
                    2010-03-03 18:14:17 ----D---- C:\WINDOWS\Downloaded Installations
                    2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\rpcss.dll
                    2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\rpcrt4.dll
                    2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\ole32.dll
                    2010-03-03 18:14:11 ----HDC---- C:\WINDOWS\$NtUninstallKB820291$
                    2010-03-03 18:14:07 ----HDC---- C:\WINDOWS\$NtUninstallQ815485$
                    2010-03-03 18:13:59 ----HDC---- C:\WINDOWS\$NtUninstallKB810217$
                    2010-03-03 18:13:52 ----HDC---- C:\WINDOWS\$NtUninstallKB828035$
                    2010-03-03 18:13:52 ----A---- C:\WINDOWS\system32\msgsvc.dll
                    2010-03-03 18:13:48 ----HDC---- C:\WINDOWS\$NtUninstallKB826939$
                    2010-03-03 18:13:46 ----A---- C:\WINDOWS\system32\cryptsvc.dll
                    2010-03-03 18:13:44 ----A---- C:\WINDOWS\system32\newdev.dll
                    2010-03-03 18:13:43 ----A---- C:\WINDOWS\system32\shell32.dll
                    2010-03-03 18:13:35 ----HDC---- C:\WINDOWS\$NtUninstallKB825119$
                    2010-03-03 18:13:31 ----HDC---- C:\WINDOWS\$NtUninstallKB824141$
                    2010-03-03 18:13:27 ----HDC---- C:\WINDOWS\$NtUninstallKB823182$
                    2010-03-03 18:13:23 ----HDC---- C:\WINDOWS\$NtUninstallq329623$
                    2010-03-03 18:13:20 ----HDC---- C:\WINDOWS\$NtUninstallKB823980$
                    2010-03-03 18:13:16 ----HDC---- C:\WINDOWS\$NtUninstallKB823559$
                    2010-03-03 18:13:13 ----D---- C:\Program Files\Common Files
                    2010-03-03 18:13:09 ----HDC---- C:\WINDOWS\$NtUninstallKB821557$
                    2010-03-03 18:13:02 ----HDC---- C:\WINDOWS\$NtUninstallQ819696$
                    2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\wstdecod.dll
                    2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\psisdecd.dll
                    2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\msyuv.dll
                    2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\msvidctl.dll
                    2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmpdxm.dll
                    2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmpasf.dll
                    2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmerror.dll
                    2010-03-03 18:12:35 ----A---- C:\WINDOWS\system32\mspmsnsv.dll
                    2010-03-03 18:12:32 ----D---- C:\WINDOWS\RegisteredPackages
                    2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmvdmoe2.dll
                    2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmspdmoe.dll
                    2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmspdmod.dll
                    2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmsdmoe2.dll
                    2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmidx.dll
                    2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\mp4sdmod.dll
                    2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\mp43dmod.dll
                    2010-03-03 18:12:11 ----HDC---- C:\WINDOWS\$NtUninstallQ817606$
                    2010-03-03 18:12:08 ----HDC---- C:\WINDOWS\$NtUninstallQ817287$
                    2010-03-03 18:12:05 ----HDC---- C:\WINDOWS\$NtUninstallQ814033$
                    2010-03-03 18:11:58 ----HDC---- C:\WINDOWS\$NtUninstallQ811493$
                    2010-03-03 18:11:53 ----HDC---- C:\WINDOWS\$NtUninstallQ810833$
                    2010-03-03 18:11:50 ----HDC---- C:\WINDOWS\$NtUninstallQ810577$
                    2010-03-03 18:11:40 ----HDC---- C:\WINDOWS\$NtUninstallQ810565$
                    2010-03-03 18:11:31 ----HDC---- C:\WINDOWS\$NtUninstallQ331953$
                    2010-03-03 18:11:21 ----HD---- C:\Program Files\Uninstall Information
                    2010-03-03 18:11:18 ----HDC---- C:\WINDOWS\$NtUninstallQ329834$
                    2010-03-03 18:11:18 ----D---- C:\8c577054f32042639ee4988cc2f432d6
                    2010-03-03 18:11:16 ----HDC---- C:\WINDOWS\$NtUninstallQ329441$
                    2010-03-03 18:11:15 ----A---- C:\WINDOWS\system32\srrstr.dll
                    2010-03-03 18:11:13 ----HDC---- C:\WINDOWS\$NtUninstallQ329390$
                    2010-03-03 18:11:10 ----HDC---- C:\WINDOWS\$NtUninstallQ329170$
                    2010-03-03 18:11:07 ----HDC---- C:\WINDOWS\$NtUninstallQ329048$
                    2010-03-03 18:11:04 ----HDC---- C:\WINDOWS\$NtUninstallQ328310$
                    2010-03-03 18:11:03 ----A---- C:\WINDOWS\system32\xpsp1hfm.exe
                    2010-03-03 18:10:54 ----HDC---- C:\WINDOWS\$NtUninstallQ327979$
                    2010-03-03 18:10:42 ----HDC---- C:\WINDOWS\$NtUninstallKB282010$
                    2010-03-03 18:10:38 ----A---- C:\WINDOWS\817778.EXE
                    2010-03-03 18:10:34 ----D---- C:\Program Files\Windows Journal Viewer
                    2010-03-03 18:09:59 ----RSD---- C:\WINDOWS\assembly
                    2010-03-03 18:09:59 ----D---- C:\WINDOWS\system32\URTTemp
                    2010-03-03 18:09:59 ----D---- C:\WINDOWS\Microsoft.NET
                    2010-03-03 18:09:57 ----SHD---- C:\WINDOWS\Installer
                    2010-03-03 18:09:30 ----A---- C:\WINDOWS\control.ini
                    2010-03-03 18:09:30 ----A---- C:\AUTOEXEC.BAT
                    2010-03-03 18:09:26 ----A---- C:\WINDOWS\OEWABLog.txt
                    2010-03-03 18:09:23 ----A---- C:\WINDOWS\system32\mapi32.dll
                    2010-03-03 18:08:55 ----SD---- C:\WINDOWS\Downloaded Program Files
                    2010-03-03 18:08:55 ----RD---- C:\WINDOWS\Offline Web Pages
                    2010-03-03 18:08:55 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
                    2010-03-03 18:08:52 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
                    2010-03-03 18:08:37 ----D---- C:\WINDOWS\system32\DirectX
                    2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrslv.dll
                    2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrdm.dll
                    2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrcdlg.dll
                    2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\racpldlg.dll
                    2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\atrace.dll
                    2010-03-03 18:08:10 ----A---- C:\WINDOWS\system32\desktop.ini
                    2010-03-03 18:08:10 ----A---- C:\WINDOWS\desktop.ini
                    2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
                    2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
                    2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\isrdbg32.dll
                    2010-03-03 18:08:03 ----A---- C:\WINDOWS\system32\acctres.dll
                    2010-03-03 18:08:02 ----D---- C:\Program Files\Fichiers communs\Services
                    2010-03-03 18:07:59 ----SD---- C:\WINDOWS\Tasks
                    2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\isign32.dll
                    2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\icwphbk.dll
                    2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\icwdial.dll
                    2010-03-03 18:07:58 ----A---- C:\WINDOWS\system32\inetcfg.dll
                    2010-03-03 18:07:58 ----A---- C:\WINDOWS\system32\icfgnt5.dll
                    2010-03-03 18:07:57 ----D---- C:\Program Files\Fichiers communs\MSSoap
                    2010-03-03 18:07:53 ----D---- C:\WINDOWS\srchasst
                    2010-03-03 18:07:52 ----D---- C:\WINDOWS\system32\Macromed
                    2010-03-03 18:07:51 ----D---- C:\Program Files\Movie Maker
                    2010-03-03 18:07:51 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
                    2010-03-03 18:07:51 ----A---- C:\WINDOWS\system32\qmgr.dll
                    2010-03-03 18:07:47 ----D---- C:\WINDOWS\system32\Restore
                    2010-03-03 18:07:47 ----D---- C:\WINDOWS\PCHealth
                    2010-03-03 18:07:47 ----A---- C:\WINDOWS\system32\srsvc.dll
                    2010-03-03 18:07:47 ----A---- C:\WINDOWS\system32\srclient.dll
                    2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\nmmkcert.dll
                    2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\msconf.dll
                    2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\mnmdd.dll
                    2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\ils.dll
                    2010-03-03 18:07:44 ----D---- C:\Program Files\NetMeeting
                    2010-03-03 18:07:43 ----D---- C:\Program Files\Outlook Express
                    2010-03-03 18:07:43 ----A---- C:\WINDOWS\system32\schedsvc.dll
                    2010-03-03 18:07:42 ----A---- C:\WINDOWS\system32\mstinit.exe
                    2010-03-03 18:07:42 ----A---- C:\WINDOWS\system32\mstask.dll
                    2010-03-03 18:07:37 ----D---- C:\Program Files\Fichiers communs\System
                    2010-03-03 18:07:36 ----D---- C:\Program Files\Internet Explorer
                    2010-03-03 18:07:33 ----D---- C:\Program Files\ComPlus Applications
                    2010-03-03 18:07:33 ----A---- C:\WINDOWS\vbaddin.ini
                    2010-03-03 18:07:33 ----A---- C:\WINDOWS\vb.ini
                    2010-03-03 18:07:32 ----D---- C:\WINDOWS\Registration
                    2010-03-03 18:07:19 ----HD---- C:\Program Files\WindowsUpdate
                    2010-03-03 18:07:19 ----D---- C:\Program Files\Windows Media Player
                    2010-03-03 18:07:19 ----D---- C:\Program Files\Services en ligne
                    2010-03-03 18:07:17 ----D---- C:\Program Files\Messenger
                    2010-03-03 18:07:12 ----D---- C:\Program Files\MSN Gaming Zone
                    2010-03-03 18:07:12 ----A---- C:\WINDOWS\system32\write.exe
                    2010-03-03 18:07:05 ----A---- C:\WINDOWS\system32\sndvol32.exe
                    2010-03-03 18:07:05 ----A---- C:\WINDOWS\system32\sndrec32.exe
                    2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\hypertrm.dll
                    2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\hticons.dll
                    2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avwav.dll
                    2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avtapi.dll
                    2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avmeter.dll
                    2010-03-03 18:07:03 ----A---- C:\WINDOWS\system32\winchat.exe
                    2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\sol.exe
                    2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\getuname.dll
                    2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\charmap.exe
                    2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\calc.exe
                    2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\winmine.exe
                    2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\usrlogon.cmd
                    2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tsshutdn.exe
                    2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tslabels.ini
                    2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tskill.exe
                    2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\reset.exe
                    2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\rdshost.exe
                    2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\mshearts.exe
                    2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\freecell.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\tsdiscon.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\tscon.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\shadow.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\rwinsta.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\regini.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qwinsta.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qprocess.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qappsrv.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\mtxoci.dll
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\msg.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\logoff.exe
                    2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\cdmodem.dll
                    2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\xolehlp.dll
                    2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtctm.dll
                    2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtcprf.ini
                    2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtclog.dll
                    2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtc.exe
                    2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\stclient.dll
                    2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxlegih.dll
                    2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxex.dll
                    2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxdm.dll
                    2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
                    2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\comrepl.dll
                    2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\comaddin.dll
                    2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\colbact.dll
                    2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\comuid.dll
                    2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\comsnap.dll
                    2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\clbcatq.dll
                    2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\clbcatex.dll
                    2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\catsrvps.dll
                    2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\catsrv.dll
                    2010-03-03 18:06:48 ----A---- C:\WINDOWS\system32\wmimgmt.msc
                    2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\servdeps.dll
                    2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\mmfutil.dll
                    2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\cmprops.dll
                    2010-03-03 18:06:43 ----D---- C:\Program Files\Windows NT
                    2010-03-03 18:06:43 ----D---- C:\Program Files\MSN
                    2010-03-03 18:06:43 ----A---- C:\WINDOWS\system32\mplay32.exe
                    2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuauserv.dll
                    2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuaueng.dll
                    2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuauclt.exe
                    2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\spider.exe
                    2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\mspaint.exe
                    2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\clipbrd.exe
                    2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\tscupgrd.exe
                    2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
                    2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\termsrv.dll
                    2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\sessmgr.exe
                    2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\remotepg.dll
                    2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\rdsaddin.exe
                    2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\rdchost.dll
                    2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\mstscax.dll
                    2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\mstsc.exe
                    2010-03-03 18:06:40 ----D---- C:\WINDOWS\system32\MsDtc
                    2010-03-03 18:06:40 ----D---- C:\WINDOWS\system32\Com
                    2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpwsx.dll
                    2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpsnd.dll
                    2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpclip.exe
                    2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\msdtcprx.dll
                    2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\icaapi.dll
                    2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\cfgbkend.dll
                    2010-03-03 18:06:39 ----A---- C:\WINDOWS\system32\comsvcs.dll
                    2010-03-03 18:06:39 ----A---- C:\WINDOWS\system32\catsrvut.dll
                    2010-03-03 18:06:36 ----A---- C:\WINDOWS\system32\licwmi.dll
                    2010-03-03 18:06:18 ----A---- C:\WINDOWS\system32\h323log.txt
                    2010-03-03 18:05:28 ----A---- C:\WINDOWS\system32\hidserv.dll
                    2010-03-03 18:04:45 ----A---- C:\WINDOWS\system32\usbui.dll
                    2010-03-03 18:03:55 ----A---- C:\WINDOWS\imsins.BAK
                    2010-03-03 18:03:53 ----D---- C:\Program Files\Fichiers communs\ODBC
                    2010-03-03 18:03:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
                    2010-03-03 18:03:53 ----A---- C:\WINDOWS\ODBCINST.INI
                    2010-03-03 18:03:50 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
                    2010-03-03 18:03:49 ----RD---- C:\Program Files
                    2010-03-03 18:03:49 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
                    2010-03-03 18:03:49 ----D---- C:\Program Files\Fichiers communs
                    2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
                    2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
                    2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdazel.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdycc.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbduzb.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdur.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdtat.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdru1.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdru.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdmon.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdbu.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdblr.dll
                    2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdaze.dll
                    2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhept.dll
                    2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
                    2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
                    2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
                    2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
                    2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe.dll
                    2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
                    2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
                    2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlv.dll
                    2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
                    2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlt.dll
                    2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdest.dll
                    2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
                    2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdsl.dll
                    2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdro.dll
                    2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
                    2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdpl.dll
                    2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
                    2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdhu.dll
                    2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
                    2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
                    2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdycl.dll
                    2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdcz.dll
                    2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdcr.dll
                    2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
                    2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\spxcoins.dll
                    2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\irclass.dll
                    2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\dgsetup.dll
                    2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
                    2010-03-03 18:03:39 ----A---- C:\WINDOWS\system32\EqnClass.Dll
                    2010-03-03 18:03:38 ----N---- C:\WINDOWS\system32\CONFIG.TMP
                    2010-03-03 18:03:38 ----A---- C:\WINDOWS\TASKMAN.EXE
                    2010-03-03 18:03:38 ----A---- C:\WINDOWS\system32\batt.dll
                    2010-03-03 18:03:38 ----A---- C:\WINDOWS\notepad.exe
                    2010-03-03 18:03:37 ----A---- C:\WINDOWS\system32\storprop.dll
                    2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET52.tmp
                    2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET51.tmp
                    2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET50.tmp
                    2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4F.tmp
                    2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4E.tmp
                    2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4D.tmp
                    2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4C.tmp
                    2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4B.tmp
                    2010-03-03 18:03:35 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET4A.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET49.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET48.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET47.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET46.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET45.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET44.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET43.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET42.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET41.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET40.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3F.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3E.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3D.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3C.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3B.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3A.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET39.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET38.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET37.tmp
                    2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET36.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET35.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET34.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET33.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET32.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET31.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET30.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2F.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2E.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2D.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2C.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2B.tmp
                    2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2A.tmp
                    2010-03-03 18:03:32 ----RA---- C:\WINDOWS\SET29.tmp
                    2010-03-03 18:03:01 ----RA---- C:\WINDOWS\SETA.tmp
                    2010-03-03 18:02:57 ----RA---- C:\WINDOWS\SET3.tmp
                    2010-03-03 18:02:53 ----D---- C:\WINDOWS\system32\CatRoot2
                    2010-03-03 18:02:53 ----D---- C:\WINDOWS\system32\CatRoot
                    2010-03-03 18:02:48 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
                    2010-03-03 18:02:32 ----A---- C:\WINDOWS\setuplog.txt
                    2010-03-03 18:02:29 ----D---- C:\Documents and Settings
                    2010-02-11 05:37:08 ----A---- C:\WINDOWS\system32\atiok3x2.dll
                    2010-02-11 05:36:00 ----A---- C:\WINDOWS\system32\atipdlxx.dll
                    2010-02-11 05:35:44 ----A---- C:\WINDOWS\system32\Oemdspif.dll
                    2010-02-11 05:35:24 ----A---- C:\WINDOWS\system32\ati2edxx.dll
                    2010-02-11 05:35:10 ----A---- C:\WINDOWS\system32\ati2evxx.dll
                    2010-02-11 05:33:56 ----A---- C:\WINDOWS\system32\ati2evxx.exe
                    2010-02-11 04:59:16 ----A---- C:\WINDOWS\system32\amdpcom32.dll
                    2010-02-11 04:55:40 ----A---- C:\WINDOWS\system32\atikvmag.dll

                    ======List of files/folders modified in the last 1 months======

                    2010-03-03 19:03:49 ----A---- C:\WINDOWS\win.ini
                    2010-03-03 18:21:55 ----RASH---- C:\NTDETECT.COM
                    2010-03-03 18:03:49 ----A---- C:\WINDOWS\system.ini

                    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                    R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520]
                    R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
                    R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
                    R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2004-08-19 14848]
                    R1 pctgntdi;pctgntdi; \??\C:\WINDOWS\system32\drivers\pctgntdi.sys []
                    R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
                    R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.7.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-03-03 21361]
                    R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-11-25 56816]
                    R2 PCTAppEvent;PCTAppEvent Driver; \??\C:\WINDOWS\system32\drivers\PCTAppEvent.sys []
                    R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-05-12 3007488]
                    R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
                    R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2002-08-30 9600]
                    R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-10 4397568]
                    R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2002-08-30 12288]
                    R3 PCTFW-PacketFilter;PCTools Firewall - Packet filter driver; \??\C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys []
                    R3 pctNDIS;PC Tools Driver; C:\WINDOWS\system32\DRIVERS\pctNdis.sys [2010-01-07 58816]
                    R3 pctplfw;pctplfw; \??\C:\WINDOWS\system32\drivers\pctplfw.sys []
                    R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-03 31616]
                    R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-03 26624]
                    R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-03 57600]
                    R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2004-08-03 17024]
                    S3 a0z852jy;a0z852jy; C:\WINDOWS\system32\drivers\a0z852jy.sys []
                    S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
                    S3 RT73;TL-WN321G USB Wireless Adapter; C:\WINDOWS\system32\DRIVERS\rt73.sys [2008-10-21 465152]
                    S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-11-27 177152]
                    S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
                    S3 xnacc;Microsoft Common Controller For Windows Driver Service; C:\WINDOWS\system32\DRIVERS\xnacc.sys [2005-09-15 476672]
                    S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

                    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                    R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
                    R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
                    R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-05-12 540672]
                    R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe [2009-12-08 93320]
                    R2 PCToolsFirewallPlus;PC Tools Firewall Plus; C:\Program Files\PC Tools Firewall Plus\FWService.exe [2009-11-09 818432]
                    R2 RalinkRegistryWriter;Ralink Registry Writer; C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe [2009-01-05 69632]
                    S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-05-12 593920]
                    S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
                    S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
                    S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
                    S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
                    S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2010-01-26 243056]
                    S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

                    -----------------EOF-----------------
                    1. ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                      R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
                      R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
                      R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-05-12 540672]
                      R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe [2009-12-08 93320]
                      R2 PCToolsFirewallPlus;PC Tools Firewall Plus; C:\Program Files\PC Tools Firewall Plus\FWService.exe [2009-11-09 818432]
                      R2 RalinkRegistryWriter;Ralink Registry Writer; C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe [2009-01-05 69632]
                      S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-05-12 593920]
                      S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
                      1. ---\\ Browser Helper Objects de navigateur (O2)
                        O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                        O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
                        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                        O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} . (.McAfee, Inc. - SiteAdvisor.) -- c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll

                        ---\\ MountPoints2 Shell Key (MPSK) (O51)
                        O51 - MPSK:{3b208cff-272c-11df-aa7a-0019e018a91d}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- E:\9qqigqwf.exe (.not file.)
                        O51 - MPSK:{c4fd191a-26e8-11df-aa71-ec4e97983cae}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- E:\fk.exe (.not file.)

                        O51 - MPSK:{c77babf5-26ec-11df-a355-806d6172696f}\Shell\AutoRun\command. (.Microsoft Corporation - Bienvenue dans Windows XP.) -- D:\setup.exe
                        O51 - MPSK:{c77babf6-26ec-11df-a355-806d6172696f}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- C:\fk.exe

                        ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
                        O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm
                        O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll
                        O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll
                        O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll
                        O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm
                        O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm
                        O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax
                        O52 - TDSD: \Drivers32\"msacm.iac2"="iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\System32\iac25_32.ax
                        O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll
                        O52 - TDSD: \Drivers32\"vidc.VP60"="C:\WINDOWS\system32\vp6vfw.dll" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\WINDOWS\system32\vp6vfw.dll
                        O52 - TDSD: \Drivers32\"vidc.VP61"="C:\WINDOWS\system32\vp6vfw.dll" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\WINDOWS\system32\vp6vfw.dll
                        O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm
                        O52 - TDSD: \drivers.desc\"C:\WINDOWS\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm
                        O52 - TDSD: \drivers.desc\"iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\System32\iac25_32.ax
                        O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
                        O52 - TDSD: \drivers.desc\"vp6vfw.dll"="EA VP6 Codec" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\WINDOWS\System32\vp6vfw.dll

                        ---\\ Liste des services Legacy (LALS) (O64)
                        O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\AegisP.sys - AEGIS Protocol (IEEE 802.1x) v3.7.5.0 (AegisP) .(.Cisco Systems, Inc. - IEEE 802.1X Protocol Driver.) - LEGACY_AEGISP
                        O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\sched.exe - Avira AntiVir Planificateur (AntiVirSchedulerService) .(.Avira GmbH - Antivirus Scheduler.) - LEGACY_ANTIVIRSCHEDULERSERVICE
                        O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avguard.exe - Avira AntiVir Guard (AntiVirService) .(.Avira GmbH - Antivirus On-Access Service.) - LEGACY_ANTIVIRSERVICE
                        O64 - Services: CurCS - C:\WINDOWS\system32\Ati2evxx.exe - Ati HotKey Poller (Ati HotKey Poller) .(.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - LEGACY_ATI_HOTKEY_POLLER
                        O64 - Services: CurCS - C:\WINDOWS\system32\ati2sgag.exe - ATI Smart (ATI Smart) .(.Pas de propriétaire - ATI Smart.) - LEGACY_ATI_SMART
                        O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avgio.sys - avgio (avgio) .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO
                        O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\avgntflt.sys - avgntflt (avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT
                        O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\avipbb.sys - avipbb (avipbb) .(.Avira GmbH - Avira Driver for RootKit Detection.) - LEGACY_AVIPBB
                        O64 - Services: CurCS - (.not file.) - Lanceur de processus serveur DCOM (DcomLaunch) .(.Pas de propriétaire - Pas de description.) - LEGACY_DCOMLAUNCH
                        O64 - Services: CurCS - C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys - driverhardwarev2 (driverhardwarev2) .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2
                        O64 - Services: CurCS - C:\Program Files\ma-config.com\maconfservice.exe - Ma-Config Service (maconfservice) .(.CybelSoft - Service de détection matériel.) - LEGACY_MACONFSERVICE
                        O64 - Services: CurCS - c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe - McAfee SiteAdvisor Service (McAfee SiteAdvisor Service) .(.McAfee, Inc. - SiteAdvisor.) - LEGACY_MCAFEE_SITEADVISOR_SERVICE
                        O64 - Services: CurCS - (.not file.) - mountmgr (mountmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MOUNTMGR
                        O64 - Services: CurCS - (.not file.) - Mup (Mup) .(.Pas de propriétaire - Pas de description.) - LEGACY_MUP
                        O64 - Services: CurCS - (.not file.) - Pilote système NDIS (NDIS) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDIS
                        O64 - Services: CurCS - (.not file.) - PartMgr (PartMgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARTMGR

                        O64 - Services: CurCS - C:\WINDOWS\system32\drivers\PCTAppEvent.sys - PCTAppEvent Driver (PCTAppEvent) .(.PC Tools - PC Tools App Monitor Driver.) - LEGACY_PCTAPPEVENT
                        O64 - Services: CurCS - C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys - PCTools Firewall - Packet filter driver (PCTFW-PacketFilter) .(.PC Tools - PC Tools NDIS - Packet Filter.) - LEGACY_PCTFW-PACKETFILTER
                        O64 - Services: CurCS - C:\WINDOWS\system32\drivers\pctgntdi.sys - pctgntdi (pctgntdi) .(.PC Tools - PC Tools Generic TDI Driver.) - LEGACY_PCTGNTDI
                        O64 - Services: CurCS - C:\Program Files\PC Tools Firewall Plus\FWService.exe - PC Tools Firewall Plus (PCToolsFirewallPlus) .(.PC Tools - PC Tools Firewall Plus service.) - LEGACY_PCTOOLSFIREWALLPLUS
                        O64 - Services: CurCS - C:\WINDOWS\system32\drivers\pctplfw.sys - pctplfw (pctplfw) .(.PC Tools - PC Tools FW Plugin Driver.) - LEGACY_PCTPLFW
                        O64 - Services: CurCS - C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe - Ralink Registry Writer (RalinkRegistryWriter) .(.Pas de propriétaire - RegistryWriter.) - LEGACY_RALINKREGISTRYWRITER
                        O64 - Services: CurCS - (.not file.) - RDPNP (RDPNP) .(.Pas de propriétaire - Pas de description.) - LEGACY_RDPNP
                        O64 - Services: CurCS - (.not file.) - REGMON701 (REGMON701) .(.Pas de propriétaire - Pas de description.) - LEGACY_REGMON701
                        O64 - Services: CurCS - (.not file.) - Appel de procédure distante (RPC) (RpcSs) .(.Pas de propriétaire - Pas de description.) - LEGACY_RPCSS

                        O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\sptd.sys - sptd (sptd) .(.Pas de propriétaire - Pas de description.) - LEGACY_SPTD
                        O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys - ssmdrv (ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV
                        O64 - Services: CurCS - (.not file.) - Services Terminal Server (TermService) .(.Pas de propriétaire - Pas de description.) - LEGACY_TERMSERVICE
                        O64 - Services: CurCS - (.not file.) - Gestionnaire de téléchargement (uploadmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_UPLOADMGR
                        1. Non par contre il y a ça en vert (pas très grave à mon avis) :

                          ---\\ DOS/Devices
                          A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
                          C:\ Hard drive, Flash drive, Thumb drive (Free 417 Go of 466 Go)
                          D:\ CD-ROM drive (Not Inserted)
                          F:\ CD-ROM drive (Not Inserted)
                          • 1
                          • 2