Connexion qui rame Résolu/Fermé

Question

Salut, alors j'ai un petit probleme, depuis hier.
Je suis allé sur le site jeuxvideo.com  pour voir les final fantasy dispo sur PC, la mon antivirus ( antivir) se déclenche une bonne dizaine de fois, donc je refuse l'acces à tout ce qui a été detecté.
quelques minutes apres, plusieurs pub " ad.reduxmedia" s'ouvre seule sur IE, donc avec SpyBot je fait un scan et je supprime les Trojans et tout et depuis donc plus de pop up de pub, mais en meme temps depuis hier (apres etre aller sur le site jeuxvidéo.com) ma connexion wifi par mon modem rame vraiment, défois c'est normal mais défois c'est horrible je peux meme pas charger les pages, par contre si je me met en neufwifi ou freewifi ya pas de soucis et la connexion est bonne.

Donc j'aimerais bien savoir si vous saviez a quoi c'était du? c'est un virus ? et comment je peux résoudre sa ! si vous voulez des rapports ou autre dites moi, merci beaucoup

Bye

Configuration: Windows Vista / Firefox 3.6.3

moxxxx · Answer

les antivirus gratuit, c'est bien pour t'avertir que tu as des virus, mais généralement ils sont incapables de les supprimer définitivement. franchement j'préfère payer trente € par ans et être tranquil.
Prend la demo de G data fait un scan avec. Tu verra c'est beaucoup plus efficace que antivir ou avast.
Pour de bon antivirus : G data ; Kaspersky antivirus  (pas internet security)

booddha · Answer

Bonjour
============= ZHPDIAG =============
I) Uniquement sous Vista et Seven, désactiver l' UAC (à réactiver après la désinfection)
Sous XP, passer directement au dernier paragraphe concernant le téléchargement de ZHPDIAG]

* Sous Vista : ? Désactiver le contrôle des comptes utilisateurs
* Cliquer sur Démarrer puis sur panneau de configuration
* Double Cliquer sur l'icône Comptes d'utilisateurs
* Cliquer ensuite sur désactiver et valider.
* Redémarrer le PC 
---------------------------------------------------
? Sous Seven : Désactiver le contrôle des comptes utilisateurs
* Cliquer sur Démarrer puis sur panneau de configuration
* Cliquer sur Comptes et protection des utilisateurs puis sur Comptes d'utilisateurs.
* Cliquer sur Modifier les paramètres de contrôle de compte d'utilisateur.
* Une fenêtre apparait avec un curseur vertical à 4 positions.
* Noter sur quelle position le curseur se trouve. En fin de désinfection, il faudra repositionner ce curseur sur la même position.
* Glisser le curseur sur la positon du bas Ne jamais m'avertir
* Cliquer sur OK et confirmer une dernière fois son identité.
* Redémarrer le PC 
--------------------------------------------------
* Télécharger ZHPDIAG
* Pour vista et Seven : clic droit sur le raccourci ZHPDiag sur le Bureau et choisir "exécuter en tant qu'administrateur".
* Pour XP, double/cliquer sur le raccourci ZHPDiag sur le Bureau
* Suivre les instructions lors de l'installation, lancement automatiquement à la fin.
* Cliquer sur l'icône représentant un tournevis.
* Cliquer sur Tous en bas de la fenêtre.
* Cliquer sur l'icône représentant une loupe (« Lancer le diagnostic »).
* Enregistrer le rapport sur le Bureau à l'aide de l'icône représentant une disquette.
* Sauvegarder le rapport ici: cijoint et coller le lien dans la réponse sur ce forum

booddha · Answer

Essaye de le mettre en plusieurs bouts ici alors.

eldar · Answer

Voila pour le scan.... relou désolé !

booddha · Answer

Ne soit pas désolé

Utilise pour les réponses le bouton vert "J'ai une réponse" afin que les messages soient bien dans l'ordre chronologique. 
N'utilise pas "Ajouter un commentaire".

Bon deux bestioles dont un rootkit.


Fais ceci

==================  MalwareBytes =====================

Telecharger MalwareBytes (Qui peut être conservé)
* (NB : S'il manque"COMCTL32.OCX" lors de l'installation, alors le télécharger ici) 
* L'enregistrer sur le bureau
* Double cliquer sur le fichier téléchargé pour lancer le processus d'installation.
* Dans l'onglet "mise à jour", cliquer sur le bouton Recherche de mise à jour
* Si le pare-feu demande l'autorisation de se connecter pour malwarebytes, accepter
* Une fois la mise à jour terminé
* Sélectionner l'onglet, Recherche
* Sélectionner Exécuter un examen rapide
* Cliquer sur Rechercher
* Le scan démarre.
* A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. 
* Cliquer sur Afficher les résultats pour afficher tous les objets trouvés.
* Cliquer sur Ok pour poursuivre.
* Si des malwares ont été détectés, cliquer sur Afficher les résultats
* Sélectionner tout (ou laisser cochés) et cliquer sur Supprimer la sélection.
* Malwarebytes va détruire les fichiers et clés de registre et en faire une copie dans la quarantaine.
* Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
* Sélectionner l'onglet rapport/log
* Une fois le rapport affiché
* Taper Ctrl A pour tout sélectionner
* Taper Ctrl C pour tout copier
* Revenir sur le forum et dans la prochaine réponse taper CTRL V pour tout coller.

Si besoin d'aide regarder ces tutoriels :
Aide
Autre aide

eldar · Answer

Voila :

Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Version de la base de données: 4051

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18904

29/04/2010 15:47:48
mbam-log-2010-04-29 (15-47-48).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 111109
Temps écoulé: 5 minute(s), 19 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\canaveral (Trojan.Downloader) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Windows\system32\Drivers\wtbyk.sys (Rootkit.Agent) -> Quarantined and deleted successfully.

booddha · Answer

OK

Fais ceci

Vide la quarantaine de MalwaresBytes en supprimant tout ce qu'il y a dedans.

Supprime tous les rapports ZHPDIAG.TXT présents sur ta machine

Reboote la machine et poste moi un nouveau rapport ZHPDIAG selon la procédure déjà donnée

eldar · Answer

Ya pas moyen que je t'envoi sa par mail en piece jointe ou autre? parce que va encore falloir que je mette 3 000 posts pour le rapport :s

booddha · Answer

Cijoint ça marche pas ? Ou tu ne sais pas ?

eldar · Answer

Ici ca marche toujours pas.

booddha · Answer

Alors procède comme tout à l'heure.

Je vais m'absenter, serais de retour vers 18 h 30, 19 h

eldar · Answer

OK
merci ;)

eldar · Answer

apport de ZHPDiag v1.25.1413 par Nicolas Coolman
Run by karim at 29/04/2010 16:27:51
Web site :  http://www.premiumorange.com/zeb-help-process/zhpdiag.html

---\ Web Browser
MSIE: Internet Explorer v8.0.6001.18904
MFIE: Mozilla Firefox (3.6.3)

---\ System Information
Platform : Windows Vista (TM) Home Basic (6.0.6002) Service Pack 2
Processor: x86 Family 15 Model 104 Stepping 2, AuthenticAMD
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3070 MB (65% free)
System drive C: has 29 GB (25%) free of 112 GB

---\ Logged in mode
Computer Name: PC-DE-KARIM
User Name: karim
Unselected Option: None
Logged in as Administrator

---\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 29 Go of 112 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 101 Go of 111 Go)
E:\ CD-ROM drive (Not Inserted)
F:\ CD-ROM drive (Not Inserted)
G:\ CD-ROM drive (Not Inserted)


---\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK

eldar · Answer

---\ Processus lancés
[MD5.0D392EDE3B97E0B3131B2F63EF1DB94E] - (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe   [1008184]
[MD5.20F0D48EA1631579D84157658A59C5CD] - (.CyberLink - Notification tool for RealTek audio chip.) -- C:\Acer\Empowering Technology\eAudio\eAudio.exe   [1286144]
[MD5.F97964F84BDC92AB67FFDF1803276B3E] - (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\Acer\Acer Arcade\PCMService.exe   [155648]
[MD5.0854CC97DE4CB3D14B50BE60DA5A12F7] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 167.4.) -- C:\Windows\system32
vsvc.dll   [86016]
[MD5.AFF1F6E9C33D93031D6F62CD9D9D0DCE] - (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\NvCpl.dll   [8534560]
[MD5.426E007BE5B393C2F5D33F24F5A80AA2] - (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\Windows\system32\NvMcTray.dll   [81920]
[MD5.F082D25C1F5ED9A9132C5F9B8E66DF9F] - (.Dritek System Inc. - Launch Manager.) -- C:\PROGRA~1\LAUNCH~1\LManager.exe   [768520]
[MD5.F0187E45268E86AAAA932CBD9087BEA8] - (.Google - Google Desktop.) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe   [30192]
[MD5.2AC7F8B8BF0D5D327A3A2A00453222C4] - (.Pas de propriétaire - DefaultSettingEXE MFC Application.) -- C:\Windows\PLFSetI.exe   [200704]
[MD5.5C33844FE593165193086033F4FCB096] - (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint2K\Apoint.exe   [159744]
[MD5.105A208C015D578FB67ED0C3A427C655] - (.Acer - ProductR Application.) -- C:\Program Files\Acer\WR_PopUp\ProductReg.exe   [6144]
[MD5.D22D936F9AB0DA3B8EB7537284867708] - (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jusched.exe   [148888]
[MD5.29680A793F690EEF4AAA68479D2A6DF8] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe   [209153]
[MD5.473955AC544526E4670B1EAD1B80BFC0] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\Samsung\PanelMgr\SSMMgr.exe   [536576]
[MD5.8CBD57D84729DEBEE1E83CB5FA3E3D7A] - (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe   [417792]
[MD5.D1458A77A6E15462CB96D34089549BAC] - (.Apple Inc. - iTunesHelper Module.) -- C:\Program Files\iTunes\iTunesHelper.exe   [305440]
[MD5.F8B94D1000DB2A335262165D0FAB4B95] - (.Applian Technologies, Inc. - FLV Service for Ask and Record Toolbar.) -- C:\Program Files\Replay Media Catcher\FLVSrvc.exe   [156672]
[MD5.E3E35989184E217D5B10986E1207D3AA] - (.Guillemot Corporation S.A. - CamService Application.) -- C:\Program Files\Hercules\DualPix Exchange\Camservice.exe   [81920]
[MD5.FB1EEAB5A76A943060DEFA4CCC45143B] - (.sonix - DefaultSettingEXE.) -- C:\Windows\PLFSetL.exe   [94208]
[MD5.07B9233D1B5554A7F3F05AA36755A8E9] - (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe   [40368]
[MD5.DB1DB28467111A24664933AB8908CBCE] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe   [952768]
[MD5.1542D48BEF0C07513453CDEF1577BB79] - (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\daemon.exe   [691656]
[MD5.18B4B12358EFCF68D76812058A26181F] - (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\MsnMsgr.exe   [3883856]
[MD5.E616A6A6E91B0A86F2F6217CDE835FFE] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe   [68856]
[MD5.896A1DB9A972AD2339C2E8569EC926D1] - (.Safer Networking Limited - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe   [2144088]
[MD5.9E35FF7F943AE0FB89192BFE058B7FD4] - (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe   [1233920]
[MD5.3794B461C45882E06856F282EEF025AF] - (.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe   [21504]
[MD5.11EFBA771A360DDB3B3AAD354A5CCED3] - (.Pas de propriétaire - ALaunchSvc Image.) -- C:\Acer\ALaunch\ALaunchSvc.exe   [51200]
[MD5.9015BC03F62940527EC92D45EE89E46F] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe   [108289]
[MD5.B8720A787C1223492E6F319465E996CE] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe   [185089]
[MD5.4B5AE15E5C73EB4DC8DBEC2788230D41] - (.Apple Inc. - Apple Mobile Device Service.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe   [144672]
[MD5.1EAE8474EFFFC0835CEA813817A521BD] - (.Pas de propriétaire - CLCapSvc Module.) -- C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe   [254059]
[MD5.EAA9AFD1CDE9813C0FF2504A5EC1A275] - (.Pas de propriétaire - CLSched Module.) -- C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe   [114793]
[MD5.48F25FC1B2796CDA2AEEFFE560666055] - (.Cyberlink - NT CLMLServer.) -- C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe   [1076832]
[MD5.E28516FED46251119ADDAF4CF33BA401] - (.Acer Inc. - Acer eLock Management.) -- C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe   [24576]
[MD5.66F31FBBF96C8E10CFBB03384CCA455E] - (.Acer Inc. - acer eNet Management Service.) -- C:\Acer\Empowering Technology\eNet\eNet Service.exe   [131072]
[MD5.59FCCAF915BA89DD98CADF08DA91AFEE] - (.Acer Inc. - eRecoveryService.) -- C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe   [57344]
[MD5.A9745687A57CDD71237915859ABA8DAC] - (.Pas de propriétaire - Service.) -- C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe   [24576]
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe   [135664]
[MD5.793FF718477345CD5D232C50BED1E452] - (.Hewlett-Packard Company - Pas de description.) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe   [61440]
[MD5.DF89F8DC584FDDF01906E1DD533E4F62] - (.Pas de propriétaire - app.) -- C:\Acer\Mobility Center\MobilityService.exe   [110592]
[MD5.E24106A5EAECDDFF00B25497049DD65F] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\PnkBstrB.exe   [107832]
[MD5.3978F3540329E16C0AC3BCF677E5669F] - (.Microsoft Corporation - Processus de l'autorité de sécurité locale.) -- C:\Windows\system32\lsass.exe   [9728]
[MD5.271077B91D7AD1B616F8AFDFE8E3F981] - (.Microsoft Corporation - Microsoft SeaPort Search Enhancement Broker.) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe   [240512]
[MD5.862BB4CBC05D80C5B45BE430E5EF872F] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe   [3408896]
[MD5.524BFBEA40E6E404737CCBC754647A2E] - (.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\System32\spoolsv.exe   [127488]
[MD5.C8F8AAC50B5B0BF821AB7D7126056B30] - (.acer - WMIServi Application.) -- C:\Acer\Empowering Technology\ePower\ePowerSvc.exe   [167936]
[MD5.AED0DFF80C6B3914769407E78D7AB21A] - (.Microsoft Corporation - Indexeur Microsoft Windows Search.) -- C:\Windows\system32\SearchIndexer.exe   [441344]
[MD5.F82FC2C30A19442B95AE554215837C46] - (.Conexant Systems, Inc. - Modem Audio Service.) -- C:\Windows\system32\DRIVERS\xaudio.exe   [386560]

eldar · Answer

---\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=explorer.exe


---\ Pages de recherche d'Internet Explorer (R1)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm


---\ Internet Explorer URLSearchHook (R3)
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)) -- C:\Windows\system32\ieframe.dll


---\ Browser Helper Objects de navigateur (O2)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} . (.www.flashget.com - Flashget CatchUrl Module.) -- C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} . (.Safer Networking Limited - SBSD IE Protection.) -- C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} . (.www.flashget.com - Flashget GetFlash Module.) -- C:\Program Files\FlashGet\getflash.dll


---\ Internet Explorer Toolbars (O3)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

eldar · Answer

---\ Applications démarrées automatiquement par le registre (O4)
O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe 
O4 - HKLM\..\Run: [eAudio] . (.CyberLink - Notification tool for RealTek audio chip.) -- C:\Acer\Empowering Technology\eAudio\eAudio.exe 
O4 - HKLM\..\Run: [PCMService] . (.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Program Files\Acer\Acer Arcade\PCMService.exe 
O4 - HKLM\..\Run: [NvSvc] . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 167.4.) -- C:\Windows\system32
vsvc.dll 
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\NvCpl.dll 
O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\Windows\system32\NvMcTray.dll 
O4 - HKLM\..\Run: [LManager] . (.Dritek System Inc. - Launch Manager.) -- C:\PROGRA~1\LAUNCH~1\LManager.exe 
O4 - HKLM\..\Run: [Google Desktop Search] . (.Google - Google Desktop.) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe 
O4 - HKLM\..\Run: [PLFSetI] . (.Pas de propriétaire - DefaultSettingEXE MFC Application.) -- C:\Windows\PLFSetI.exe 
O4 - HKLM\..\Run: [Apoint] . (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint2K\Apoint.exe 
O4 - HKLM\..\Run: [ProductReg] . (.Acer - ProductR Application.) -- C:\Program Files\Acer\WR_PopUp\ProductReg.exe 
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jusched.exe 
O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe 
O4 - HKLM\..\Run: [Samsung PanelMgr] . (.Pas de propriétaire - Pas de description.) -- C:\Windows\Samsung\PanelMgr\SSMMgr.exe 
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe 
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper Module.) -- C:\Program Files\iTunes\iTunesHelper.exe 
O4 - HKLM\..\Run: [Ask and Record FLV Service] . (.Applian Technologies, Inc. - FLV Service for Ask and Record Toolbar.) -- C:\Program Files\Replay Media Catcher\FLVSrvc.exe 
O4 - HKLM\..\Run: [CamserviceDP] . (.Guillemot Corporation S.A. - CamService Application.) -- C:\Program Files\Hercules\DualPix Exchange\Camservice.exe 
O4 - HKLM\..\Run: [PLFSetL] . (.sonix - DefaultSettingEXE.) -- C:\Windows\PLFSetL.exe 
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe 
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe 
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\daemon.exe 
O4 - HKCU\..\Run: [MsnMsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\MsnMsgr.exe 
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 
O4 - HKCU\..\Run: [SpybotSD TeaTimer] . (.Safer Networking Limited - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe 
O4 - Global Startup: Empowering Technology Launcher.lnk . (.Acer Inc. - Acer eAP Launch Tool.)  -- C:\Acer\Empowering Technology\eAPLauncher.exe
O4 - Global Startup: LimeWire On Startup.lnk . (.Lime Wire, LLC - LimeWire.)  -- C:\Program Files\LimeWire\LimeWire.exe
O4 - Global Startup: Notification de cadeaux MSN.lnk . (.Microsoft Corporation - Notification de cadeaux MSN.)  -- C:\Users\karim\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe


---\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: &Tout télécharger avec FlashGet . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Télécharger avec FlashGet . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe
O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll

eldar · Answer

---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} . (.FlashGet.com - FlashGet.) -- C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} . (.not file.) - (.not file.)


---\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32
apinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll


---\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.systemrequirementslab.com/srl_bin/sysreqlab_srl.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab


---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (.Google - Google Desktop.) - C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.dll


---\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll


---\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll

eldar · Answer

---\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: ALaunch Service (ALaunchService) . (.Pas de propriétaire - ALaunchSvc Image.) - C:\Acer\ALaunch\ALaunchSvc.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - Apple Mobile Device Service.) - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) . (.Pas de propriétaire - CLCapSvc Module.) - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) . (.Pas de propriétaire - CLSched Module.) - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service (CyberLink Media Library Service) . (.Cyberlink - NT CLMLServer.) - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: eLock Service (eLockService) . (.Acer Inc. - Acer eLock Management.) - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service (eNet Service) . (.Acer Inc. - acer eNet Management Service.) - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) . (.Acer Inc. - eRecoveryService.) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) . (.Pas de propriétaire - Service.) - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - Pas de description.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MobilityService (MobilityService) . (.Pas de propriétaire - app.) - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: PnkBstrB (PnkBstrB) . (.Pas de propriétaire - Pas de description.) - C:\Windows\system32\PnkBstrB.exe
O23 - Service: ePower Service (WMIService) . (.acer - WMIServi Application.) - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService (XAudioService) . (.Conexant Systems, Inc. - Modem Audio Service.) - C:\Windows\system32\DRIVERS\xaudio.exe


---\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job


---\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\binegutils.dll
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11CF-96B8-444553540000} . (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r45.) -- C:\Windows\system32\Macromed\Flash\Flash10e.ocx


---\ Pilotes lancés au démarrage (O41)
O41 - Driver: avgio (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
O41 - Driver: avipbb (avipbb) . (.Avira GmbH - Avira Driver for RootKit Detection.) - C:\Windows\system32\DRIVERS\avipbb.sys
O41 - Driver: Dritek General Port I/O (DritekPortIO) . (.Dritek System Inc. - General Port I/O.) - C:\PROGRA~1\LAUNCH~1\DPortIO.sys
O41 - Driver: ssmdrv (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\system32\DRIVERS\ssmdrv.sys

eldar · Answer

---\ Logiciels installés (O42)
O42 - Logiciel: ALPS Touch Pad Driver - (.Alps Electric.) [HKLM]
O42 - Logiciel: Acer Arcade - (.CyberLink Corporation.) [HKLM]
O42 - Logiciel: Acer Crystal Eye Webcam - (.SuYin.) [HKLM]
O42 - Logiciel: Acer Crystal Eye webcam - (.Sonix.) [HKLM]
O42 - Logiciel: Acer Empowering Technology - (.Acer Inc..) [HKLM]
O42 - Logiciel: Acer GridVista - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: Acer Mobility Center Plug-In - (.Acer Inc..) [HKLM]
O42 - Logiciel: Acer ScreenSaver - (.Acer Inc..) [HKLM]
O42 - Logiciel: Acer eAudio Management - (.CyberLink Corp..) [HKLM]
O42 - Logiciel: Acer eLock Management - (.Acer Inc..) [HKLM]
O42 - Logiciel: Acer eNet Management - (.Acer Inc..) [HKLM]
O42 - Logiciel: Acer ePower Management - (.Acer Inc..) [HKLM]
O42 - Logiciel: Acer ePresentation Management - (.Acer Inc..) [HKLM]
O42 - Logiciel: Acer eSettings Management - (.Acer Inc..) [HKLM]
O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM]
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM]
O42 - Logiciel: Adobe Reader 8.2.0 - (.Adobe Systems Incorporated.) [HKLM]
O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM]
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM]
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM]
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM]
O42 - Logiciel: Archiveur WinRAR - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM]
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM]
O42 - Logiciel: DAEMON Tools Toolbar - (.DT Soft Ltd.) [HKLM]
O42 - Logiciel: Debut Video Capture Software - (.NCH Software.) [HKLM]
O42 - Logiciel: FIFA 10 - (.Electronic Arts.) [HKLM]
O42 - Logiciel: FileZilla Client 3.2.7.1 - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: FlashGet 1.9.6.1073 - (.http://www.FlashGet.com.) [HKLM]
O42 - Logiciel: GIMP 2.6.7 - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: GUILD WARS - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Google Desktop - (.Google.) [HKLM]
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM]
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM]
O42 - Logiciel: HDAUDIO Soft Data Fax Modem with SmartCP - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: Hercules DualPix Exchange Webcam - (.Hercules.) [HKLM]
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Java(TM) 6 Update 14 - (.Sun Microsystems, Inc..) [HKLM]
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Launch Manager - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: LimeWire 5.3.6 - (.Lime Wire, LLC.) [HKLM]
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM]
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM]
O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM]
O42 - Logiciel: MaxTV - (.MaxTV Technologies.) [HKLM]
O42 - Logiciel: Messenger Plus! Live - (.Yuna Software.) [HKLM]
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Microsoft.) [HKLM]
O42 - Logiciel: Microsoft .NET Framework 1.1 - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: Microsoft .NET Framework 1.1 Security Update (KB953297) - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM]
O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Office Live Add-in 1.3 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Office Outlook Connector - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM]
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Mozilla Firefox (3.6.3) - (.Mozilla.) [HKLM]
O42 - Logiciel: Mumble and Murmur - (.Mumble.) [HKLM]
O42 - Logiciel: NTI Backup NOW! 4.7 - (.NewTech Infosystems.) [HKLM]
O42 - Logiciel: NTI CD & DVD-Maker - (.NewTech Infosystems.) [HKLM]
O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: Notification de cadeaux MSN - (.Microsoft.) [HKCU]
O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Prism Video Converter - (.NCH Software.) [HKLM]
O42 - Logiciel: Pro Evolution Soccer 2010 - (.KONAMI.) [HKLM]
O42 - Logiciel: PunkBuster Services - (.Even Balance, Inc..) [HKLM]
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM]
O42 - Logiciel: RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01 - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM]
O42 - Logiciel: Replay Media Catcher 3.11 - (.Applian Technologies Inc..) [HKLM]
O42 - Logiciel: Samsung ML-1630 Series - (.Samsung Electronics CO.,LTD.) [HKLM]
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM]
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB978380) - (.Microsoft.) [HKLM]
O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB978382) - (.Microsoft.) [HKLM]
O42 - Logiciel: Security Update for Microsoft Office Outlook 2007 (KB972363) - (.Microsoft.) [HKLM]
O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB957789) - (.Microsoft.) [HKLM]
O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB980470) - (.Microsoft.) [HKLM]
O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM]
O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM]
O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB969613) - (.Microsoft.) [HKLM]
O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM]
O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM]
O42 - Logiciel: System Requirements Lab - (.Husdawg, LLC.) [HKLM]
O42 - Logiciel: System Requirements Lab - (.Pas de propriétaire.) [HKLM]
O42 - Logiciel: TeamSpeak 2 RC2 - (.Dominating Bytes Design.) [HKLM]
O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM]
O42 - Logiciel: Update for 2007 Microsoft Office System (KB981715) - (.Microsoft.) [HKLM]
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Update for Microsoft Office InfoPath 2007 (KB976416) - (.Microsoft.) [HKLM]
O42 - Logiciel: Update for Microsoft Office Word 2007 (KB974561) - (.Microsoft.) [HKLM]
O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (kb981433) - (.Microsoft.) [HKLM]
O42 - Logiciel: VLC media player 1.0.5 - (.VideoLAN Team.) [HKLM]
O42 - Logiciel: VTT Challenge 09 (FR) - (.Pas de propriétaire.) [HKCU]
O42 - Logiciel: WinSCP 4.1.8 - (.Martin Prikryl.) [HKLM]
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Windows Live Contrôle parental - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM]
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM]
O42 - Logiciel: Wondershare Streaming Audio Recorder(Build 1.0.9.2) - (.Wondershare Software.) [HKLM]
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM]

eldar · Answer

---\ HKCU & HKLM Software Keys
[HKCU\Software\Adobe]
[HKCU\Software\Alps]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\ApplianTechnologies]
[HKCU\Software\Applian]
[HKCU\Software\ArenaNet]
[HKCU\Software\Avira]
[HKCU\Software\Binary Noise]
[HKCU\Software\COOPP]
[HKCU\Software\Casino Bellini]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Compal]
[HKCU\Software\Cyberlink]
[HKCU\Software\DT Soft]
[HKCU\Software\EA Sports]
[HKCU\Software\Electronic Arts]
[HKCU\Software\Google]
[HKCU\Software\Hercules]
[HKCU\Software\HookNetwork]
[HKCU\Software\IM Providers]
[HKCU\Software\JavaSoft]
[HKCU\Software\JetCar]
[HKCU\Software\Leadertech]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\Macromedia]
[HKCU\Software\Magnet]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\Martin Prikryl]
[HKCU\Software\Monolith Productions]
[HKCU\Software\Mozilla]
[HKCU\Software\Mumble]
[HKCU\Software\NCH Software]
[HKCU\Software\NCH Swift Sound]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Nadeo]
[HKCU\Software\Netscape]
[HKCU\Software\NewTech Infosystems]
[HKCU\Software\Northcode Inc]
[HKCU\Software\ODBC]
[HKCU\Software\Oberon Media]
[HKCU\Software\Patchou]
[HKCU\Software\Piriform]
[HKCU\Software\Policies]
[HKCU\Software\Realtek]
[HKCU\Software\Replay Media Catcher]
[HKCU\Software\SSPrint]
[HKCU\Software\Safer Networking Limited]
[HKCU\Software\SecuROM]
[HKCU\Software\Sonix]
[HKCU\Software\Stilesoft]
[HKCU\Software\Sysinternals]
[HKCU\Software\System Requirements Lab]
[HKCU\Software\Trolltech]
[HKCU\Software\Ubisoft]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\Valve]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Windows Live Writer]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\acer]
[HKCU\Software\cybelsoft]
[HKCU\Software\mozilla.org]
[HKCU\Software\pixelStorm]
[HKCU\Software\shockwave.com]
[HKLM\Software\Acer Inc.]
[HKLM\Software\Adobe]
[HKLM\Software\Alps]
[HKLM\Software\America Online]
[HKLM\Software\AppDataLow]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Arcade]
[HKLM\Software\ArenaNet]
[HKLM\Software\Avira]
[HKLM\Software\CXT]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Compal]
[HKLM\Software\Conexant Systems Inc  ]
[HKLM\Software\Conexant]
[HKLM\Software\CyberLink]
[HKLM\Software\DT Soft]
[HKLM\Software\EA Sports]
[HKLM\Software\Electronic Arts]
[HKLM\Software\Even Balance]
[HKLM\Software\FGUpdate]
[HKLM\Software\FileZilla 3]
[HKLM\Software\GEAR Software]
[HKLM\Software\Google]
[HKLM\Software\Hercules Technologies]
[HKLM\Software\Hercules]
[HKLM\Software\InstallShield]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\KONAMI]
[HKLM\Software\LightScribe]
[HKLM\Software\Macromedia]
[HKLM\Software\Martin Prikryl]
[HKLM\Software\McAfee.com]
[HKLM\Software\MimarSinan]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NCH Software]
[HKLM\Software\NCH Swift Sound]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\NewTech Infosystems]
[HKLM\Software\ODBC]
[HKLM\Software\Oberon Media]
[HKLM\Software\OemSetup]
[HKLM\Software\Patchou]
[HKLM\Software\Policies]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Replay Media Catcher]
[HKLM\Software\SONIX]
[HKLM\Software\SPanel]
[HKLM\Software\SRS Labs]
[HKLM\Software\SSPrint]
[HKLM\Software\Safer Networking Limited]
[HKLM\Software\Samsung]
[HKLM\Software\SuYin]
[HKLM\Software\Ubisoft]
[HKLM\Software\VideoLAN]
[HKLM\Software\WOW6432Node]
[HKLM\Software\Waves Audio]
[HKLM\Software\WinRAR]
[HKLM\Software\Wondershare]
[HKLM\Software\X-AVCSD]
[HKLM\Software\acer]
[HKLM\Software\cybelsoft]
[HKLM\Software\mozilla.org]
[HKLM\Software\muvee Technologies]
[HKLM\Software
Splitter]

eldar · Answer

---\ Contenu des dossiers Fichiers Communs (O43)
O43 - CFD:Common File Directory ----D- C:\Program Files\Acer
O43 - CFD:Common File Directory ----D- C:\Program Files\Acer Inc
O43 - CFD:Common File Directory ----D- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe
O43 - CFD:Common File Directory ----D- C:\Program Files\Apoint2K
O43 - CFD:Common File Directory ----D- C:\Program Files\Apple Software Update
O43 - CFD:Common File Directory ----D- C:\Program Files\Avira
O43 - CFD:Common File Directory ----D- C:\Program Files\Big Kahuna Reef
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files
O43 - CFD:Common File Directory ----D- C:\Program Files\CONEXANT
O43 - CFD:Common File Directory ----D- C:\Program Files\CyberLink
O43 - CFD:Common File Directory ----D- C:\Program Files\DAEMON Tools Lite
O43 - CFD:Common File Directory ----D- C:\Program Files\DAEMON Tools Toolbar
O43 - CFD:Common File Directory ----D- C:\Program Files\EA Sports
O43 - CFD:Common File Directory -SH-D- C:\Program Files\Fichiers communs
O43 - CFD:Common File Directory ----D- C:\Program Files\FileZilla FTP Client
O43 - CFD:Common File Directory ----D- C:\Program Files\FlashGet
O43 - CFD:Common File Directory ----D- C:\Program Files\GIMP-2.0
O43 - CFD:Common File Directory ----D- C:\Program Files\Google
O43 - CFD:Common File Directory ----D- C:\Program Files\GUILD WARS
O43 - CFD:Common File Directory ----D- C:\Program Files\Hercules
O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer
O43 - CFD:Common File Directory ----D- C:\Program Files\iPod
O43 - CFD:Common File Directory ----D- C:\Program Files\iTunes
O43 - CFD:Common File Directory ----D- C:\Program Files\Java
O43 - CFD:Common File Directory ----D- C:\Program Files\KONAMI
O43 - CFD:Common File Directory ----D- C:\Program Files\Launch Manager
O43 - CFD:Common File Directory ----D- C:\Program Files\LimeWire
O43 - CFD:Common File Directory ----D- C:\Program Files\ma-config.com
O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD:Common File Directory ----D- C:\Program Files\Messenger Plus! Live
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Games
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office Outlook Connector
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Silverlight
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Sync Framework
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Visual Studio
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Visual Studio 8
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft.NET
O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker
O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox
O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild
O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0
O43 - CFD:Common File Directory ----D- C:\Program Files\Mumble
O43 - CFD:Common File Directory ----D- C:\Program Files\NCH Software
O43 - CFD:Common File Directory ----D- C:\Program Files\NewTech Infosystems
O43 - CFD:Common File Directory ----D- C:\Program Files\QuickTime
O43 - CFD:Common File Directory ----D- C:\Program Files\Realtek
O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies
O43 - CFD:Common File Directory ----D- C:\Program Files\Replay Media Catcher
O43 - CFD:Common File Directory ----D- C:\Program Files\Samsung
O43 - CFD:Common File Directory ----D- C:\Program Files\Spybot - Search & Destroy
O43 - CFD:Common File Directory ----D- C:\Program Files\SystemRequirementsLab
O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information
O43 - CFD:Common File Directory ----D- C:\Program Files\VideoLAN
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Calendar
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Collaboration
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Defender
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live SkyDrive
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Mail
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Photo Gallery
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Portable Devices
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Sidebar
O43 - CFD:Common File Directory ----D- C:\Program Files\WinRAR
O43 - CFD:Common File Directory ----D- C:\Program Files\WinSCP
O43 - CFD:Common File Directory ----D- C:\Program Files\Wondershare
O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Adobe
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Apple
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\DESIGNER
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\InstallShield
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\LightScribe
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\microsoft shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\muvee Technologies
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\NewTech Infosystems
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Services
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\snp2uvc
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\System
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\windows
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Windows Live
O43 - CFD:Common File Directory -SH-D- C:\Program Files\Common Files\WindowsLiveInstaller


---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.00000000000000000000000000000000] - 29/04/2010 - 15:27:51 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\WindowsUpdate.log   [1840518]
O44 - LFC:[MD5.50B1FFFFAD54825284834FAE39E197E7] - 29/04/2010 - 15:22:01 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\bootstat.dat   [67584]
O44 - LFC:[MD5.6E55699FD66C13AE1D6BF5905F523AED] - 29/04/2010 - 15:06:31 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\PerfStringBackup.INI   [1499290]
O44 - LFC:[MD5.52BFC39EDB35D3E7F640EF2BA7ACDF41] - 29/04/2010 - 15:06:31 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc009.dat   [105276]
O44 - LFC:[MD5.6579B179C69CED1CC78293AC2CBF4D06] - 29/04/2010 - 15:06:31 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc00C.dat   [128418]
O44 - LFC:[MD5.25447F83A7D576D409C583F74194090C] - 29/04/2010 - 15:06:31 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh009.dat   [595946]
O44 - LFC:[MD5.A4C2AB87DAE964C69F86B2C0E65FA0CB] - 29/04/2010 - 15:06:31 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh00C.dat   [679418]
O44 - LFC:[MD5.75B8EF2A089127E8A3B38F46CC366D79] - 29/04/2010 - 14:35:46 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbamswissarmy.sys   [38224]
O44 - LFC:[MD5.F61B04F2BB5098A34817D776C59E5E7C] - 29/04/2010 - 14:35:38 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys   [20824]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 29/04/2010 - 13:48:23 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\setupact.log   [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 29/04/2010 - 13:48:23 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\setuperr.log   [0]
O44 - LFC:[MD5.CE53ABBEA3044842F4BD9B6B12866DE5] - 29/04/2010 - 12:46:27 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\MEMORY.DMP   [167668886]
O44 - LFC:[MD5.AF807922FD23F35D7077A185B082A775] - 29/04/2010 - 12:46:27 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\PFRO.log   [1546]
O44 - LFC:[MD5.8A64A3F68F0E24917759852C842DCD74] - 14/04/2010 - 13:02:13 ---A- . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm   [62464]
O44 - LFC:[MD5.0857BDD856888D78E6E991CDDA49A4B8] - 14/04/2010 - 13:02:12 ---A- . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\l3codecp.acm   [220672]

eldar · Answer

---\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:Last File Created Prefetch 08/04/2010 - 16:16:05 ---A- C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf
O45 - LFCP:Last File Created Prefetch 21/04/2010 - 06:43:53 ---A- C:\Windows\Prefetch\DLLHOST.EXE-8EF34503.pf
O45 - LFCP:Last File Created Prefetch 26/04/2010 - 02:02:11 ---A- C:\Windows\Prefetch\REGTLIB.EXE-BE025EDE.pf
O45 - LFCP:Last File Created Prefetch 26/04/2010 - 02:02:18 ---A- C:\Windows\Prefetch\REGSVCS.EXE-A54AD617.pf
O45 - LFCP:Last File Created Prefetch 26/04/2010 - 02:02:23 ---A- C:\Windows\Prefetch\DLLHOST.EXE-861F96F8.pf
O45 - LFCP:Last File Created Prefetch 26/04/2010 - 02:02:28 ---A- C:\Windows\Prefetch\ASPNET_REGIIS.EXE-B76F1AD7.pf
O45 - LFCP:Last File Created Prefetch 26/04/2010 - 08:00:38 ---A- C:\Windows\Prefetch\CAMSERVICE.EXE-599AAF8D.pf
O45 - LFCP:Last File Created Prefetch 26/04/2010 - 13:04:42 ---A- C:\Windows\Prefetch\WINRAR.EXE-94E7D80C.pf
O45 - LFCP:Last File Created Prefetch 26/04/2010 - 17:54:15 ---A- C:\Windows\Prefetch\RUNDLL32.EXE-DE9673F9.pf
O45 - LFCP:Last File Created Prefetch 26/04/2010 - 17:54:24 ---A- C:\Windows\Prefetch\WUDFHOST.EXE-AFFEF87C.pf
O45 - LFCP:Last File Created Prefetch 26/04/2010 - 20:33:04 ---A- C:\Windows\Prefetch\MPAS-D_BD1.EXE-97E29C40.pf
O45 - LFCP:Last File Created Prefetch 26/04/2010 - 20:33:04 ---A- C:\Windows\Prefetch\MPMINISIGSTUB.EXE-FBB6CD6E.pf
O45 - LFCP:Last File Created Prefetch 26/04/2010 - 20:33:04 ---A- C:\Windows\Prefetch\MPSIGSTUB.EXE-6CB27A06.pf
O45 - LFCP:Last File Created Prefetch 27/04/2010 - 02:00:46 ---A- C:\Windows\Prefetch\NDP1.1SP1-KB953297-X86.EXE-22046C3E.pf
O45 - LFCP:Last File Created Prefetch 27/04/2010 - 02:01:56 ---A- C:\Windows\Prefetch\GACUTIL.EXE-FD4A00E3.pf
O45 - LFCP:Last File Created Prefetch 27/04/2010 - 02:02:06 ---A- C:\Windows\Prefetch\NGEN.EXE-7900743E.pf
O45 - LFCP:Last File Created Prefetch 27/04/2010 - 02:02:10 ---A- C:\Windows\Prefetch\NETFXUPDATE.EXE-180B1646.pf
O45 - LFCP:Last File Created Prefetch 27/04/2010 - 08:05:42 ---A- C:\Windows\Prefetch\RUNDLL32.EXE-8BCA13E7.pf
O45 - LFCP:Last File Created Prefetch 27/04/2010 - 09:25:03 ---A- C:\Windows\Prefetch\RUNDLL32.EXE-230FC512.pf
O45 - LFCP:Last File Created Prefetch 27/04/2010 - 17:22:43 ---A- C:\Windows\Prefetch\SKYTEL.EXE-7920123E.pf
O45 - LFCP:Last File Created Prefetch 27/04/2010 - 18:21:05 ---A- C:\Windows\Prefetch\SETUP_WM.EXE-674F654A.pf
O45 - LFCP:Last File Created Prefetch 27/04/2010 - 20:59:12 ---A- C:\Windows\Prefetch\JAVAW.EXE-91B81925.pf
O45 - LFCP:Last File Created Prefetch 27/04/2010 - 20:59:12 ---A- C:\Windows\Prefetch\JAVAWS.EXE-5FA6EB7C.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 08:33:13 ---A- C:\Windows\Prefetch\RUNDLL32.EXE-C9E8B277.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 08:33:26 ---A- C:\Windows\Prefetch\GW.TMP-3F40E459.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 08:33:26 ---A- C:\Windows\Prefetch\RUNDLL32.EXE-C9E9789E.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 08:53:10 ---A- C:\Windows\Prefetch\DLLHOST.EXE-7ED62AA2.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 09:43:14 ---A- C:\Windows\Prefetch\ACER CRYSTAL EYE WEBCAM.EXE-D0A6384D.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 10:17:57 ---A- C:\Windows\Prefetch\JAVA.EXE-E27B75C2.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 10:17:57 ---A- C:\Windows\Prefetch\JP2LAUNCHER.EXE-7C1F11C1.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 10:25:22 ---A- C:\Windows\Prefetch\IEYIH.EXE-AC25B47D.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 10:25:23 ---A- C:\Windows\Prefetch\XWOMESNCRA.EXE-33ED9B20.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 10:25:26 ---A- C:\Windows\Prefetch\WONCMXESRA.EXE-CCD7D438.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 10:25:28 ---A- C:\Windows\Prefetch\CXSEMORWNA.EXE-A8B65B68.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 10:25:47 ---A- C:\Windows\Prefetch\SOMNWEARCX.EXE-82182F78.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 10:25:51 ---A- C:\Windows\Prefetch\GMFRXPGV.EXE-CB435612.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 10:26:50 ---A- C:\Windows\Prefetch\MSHTA.EXE-A970B441.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 10:37:10 ---A- C:\Windows\Prefetch\MSIEXEC.EXE-A2D55CB6.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 10:38:28 ---A- C:\Windows\Prefetch\UNINS000.EXE-D0FEE1F0.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 10:38:38 ---A- C:\Windows\Prefetch\_IU14D2N.TMP-33E50E3E.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 10:39:01 ---A- C:\Windows\Prefetch\UNINSTALL_MAXTV.EXE-7FBBB5DB.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 10:39:32 ---A- C:\Windows\Prefetch\SETXX.EXE-FDADA0B9.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 10:39:38 ---A- C:\Windows\Prefetch\DLLHOST.EXE-7FAA2E4C.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 10:39:39 ---A- C:\Windows\Prefetch\SETUP.EXE-32A878DA.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 10:39:40 ---A- C:\Windows\Prefetch\SETB34A.TMP-45D27B6E.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 10:39:41 ---A- C:\Windows\Prefetch\IKERNEL.EXE-91B7EDC7.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 10:39:52 ---A- C:\Windows\Prefetch\MUISTARTMENU.EXE-0F229788.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 10:46:16 ---A- C:\Windows\Prefetch\APOINT.EXE-B75B05B5.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 11:45:55 ---A- C:\Windows\Prefetch\FLASHUTIL10E.EXE-40DC23C8.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 12:30:20 ---A- C:\Windows\Prefetch\AVCENTER.EXE-C4AEDCEC.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 12:30:29 ---A- C:\Windows\Prefetch\AVSCAN.EXE-E289CD20.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 12:35:44 ---A- C:\Windows\Prefetch\SPYBOTSD162.TMP-7975AB3C.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 12:35:47 ---A- C:\Windows\Prefetch\SPYBOTSD162.EXE-1C9E0D5D.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 12:35:47 ---A- C:\Windows\Prefetch\SPYBOTSD162.TMP-8E7780A7.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 12:36:38 ---A- C:\Windows\Prefetch\RUNDLL32.EXE-53F681E6.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 12:39:47 ---A- C:\Windows\Prefetch\SPYBOTSD_INCLUDES.EXE-C7960DA3.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 12:52:16 ---A- C:\Windows\Prefetch\XTQ.EXE-29C25736.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 13:07:19 ---A- C:\Windows\Prefetch\SSVAGENT.EXE-D0A26E22.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 13:41:59 ---A- C:\Windows\Prefetch\XTR.EXE-3D1811BB.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 14:05:39 ---A- C:\Windows\Prefetch\MSASCUI.EXE-07E0123F.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 14:07:29 ---A- C:\Windows\Prefetch\APMSGFWD.EXE-B9B76B4B.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 14:07:30 ---A- C:\Windows\Prefetch\APNTEX.EXE-2802497E.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 18:47:17 ---A- C:\Windows\Prefetch\AgCx_SC1.db.trx
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 18:48:17 ---A- C:\Windows\Prefetch\AgCx_SC1.db
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 19:37:36 ---A- C:\Windows\Prefetch\GOOGLETOOLBARUSER_32.EXE-4E14BB2A.pf
O45 - LFCP:Last File Created Prefetch 28/04/2010 - 21:08:20 ---A- C:\Windows\Prefetch\VLC.EXE-A11F73EE.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 07:25:19 ---A- C:\Windows\Prefetch\AgCx_SC2.db
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 07:44:58 ---A- C:\Windows\Prefetch\PES2010.EXE-2D331A1C.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 08:23:57 ---A- C:\Windows\Prefetch\UPDATE.EXE-026DCA13.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 08:24:24 ---A- C:\Windows\Prefetch\AVNOTIFY.EXE-FEC2FEC4.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 08:27:50 ---A- C:\Windows\Prefetch\SPYBOTSD.EXE-DC433942.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 08:53:10 ---A- C:\Windows\Prefetch\MSNMSGR.EXE-9974F251.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 09:34:48 ---A- C:\Windows\Prefetch\PDFTOTEXT.EXE-935B1FD6.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 09:42:44 ---A- C:\Windows\Prefetch\Layout.ini
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 09:42:55 ---A- C:\Windows\Prefetch\DEFRAG.EXE-588F90AD.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 09:42:55 ---A- C:\Windows\Prefetch\DFRGNTFS.EXE-7E4077FE.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 09:56:58 ---A- C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-4198554580-3039984211-3707511759-1000.db
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 09:56:58 ---A- C:\Windows\Prefetch\AgGlUAD_S-1-5-21-4198554580-3039984211-3707511759-1000.db
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 10:04:53 ---A- C:\Windows\Prefetch\AVCONFIG.EXE-E1ECA235.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 10:13:03 ---A- C:\Windows\Prefetch\RUNDLL32.EXE-5541CA5D.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 10:13:31 ---A- C:\Windows\Prefetch\RUNDLL32.EXE-36B9894C.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 10:28:34 ---A- C:\Windows\Prefetch\SVCHOST.EXE-7CFEDEA3.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 10:28:34 ---A- C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 10:58:11 ---A- C:\Windows\Prefetch\GOOGLECRASHHANDLER.EXE-622B1698.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 10:58:23 ---A- C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 10:59:03 ---A- C:\Windows\Prefetch\LMANAGER.EXE-9D025777.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 11:43:01 ---A- C:\Windows\Prefetch\CCSETUP231.EXE-108A7E11.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 11:43:46 ---A- C:\Windows\Prefetch\CCLEANER.EXE-17DE5AD2.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 11:57:27 ---A- C:\Windows\Prefetch\GW.EXE-0149D0C6.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 12:35:45 ---A- C:\Windows\Prefetch\MOBSYNC.EXE-C5E2284F.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 12:38:49 ---A- C:\Windows\Prefetch\RUNDLL32.EXE-1304AE86.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 12:39:08 ---A- C:\Windows\Prefetch\CONSENT.EXE-531BD9EA.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 12:50:41 ---A- C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 12:57:10 ---A- C:\Windows\Prefetch\GUARDGUI.EXE-84F705BC.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 12:58:13 ---A- C:\Windows\Prefetch\CONIME.EXE-9781FD5F.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 13:02:39 ---A- C:\Windows\Prefetch\CMD.EXE-4A81B364.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 13:18:27 ---A- C:\Windows\Prefetch\SSVAGENT.EXE-42E515EF.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 13:18:33 ---A- C:\Windows\Prefetch\IEXPLORE.EXE-908C99F8.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 13:18:55 ---A- C:\Windows\Prefetch\GOOGLETOOLBARMANAGER_E85CDE76-F5D1818F.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 13:19:05 ---A- C:\Windows\Prefetch\GOOGLEUPDATERSERVICE.EXE-09540BCD.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 13:24:15 ---A- C:\Windows\Prefetch\FLASHGET.EXE-11FE1912.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 13:24:31 ---A- C:\Windows\Prefetch\CONTROL.EXE-817F8F1D.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 14:22:18 ---A- C:\Windows\Prefetch\ACRORD32.EXE-DE3ACCC1.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 14:28:08 ---A- C:\Windows\Prefetch\ACRORD32INFO.EXE-500FD695.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 14:28:09 ---A- C:\Windows\Prefetch\WMPLAYER.EXE-BAD6BD53.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 14:28:10 ---A- C:\Windows\Prefetch\MFPMP.EXE-26F35380.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 14:40:05 ---A- C:\Windows\Prefetch\ADOBEARM.EXE-719325FF.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 14:41:31 ---A- C:\Windows\Prefetch\REGSVR32.EXE-8461DBEE.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 14:47:42 ---A- C:\Windows\Prefetch\REGEDIT.EXE-90FEEA06.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:00:47 ---A- C:\Windows\Prefetch\WRITEACERADAPTERKEY.EXE-C47871BB.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:01:05 ---A- C:\Windows\Prefetch\EAUDIO.EXE-EE0A24DD.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:01:18 ---A- C:\Windows\Prefetch\IPCONFIG.EXE-912F3D5B.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:02:51 ---A- C:\Windows\Prefetch\WUAUCLT.EXE-70318591.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:05:38 ---A- C:\Windows\Prefetch\WLCOMM.EXE-272FF9F7.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:05:41 ---A- C:\Windows\Prefetch\FIREFOX.EXE-A606B53C.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:14:19 ---A- C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:17:00 ---A- C:\Windows\Prefetch\GOOGLEUPDATE.EXE-FE771DDA.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:20:00 ---A- C:\Windows\Prefetch\VERCLSID.EXE-7C52E31C.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:20:11 ---A- C:\Windows\Prefetch\RUNDLL32.EXE-095C481F.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:20:20 ---A- C:\Windows\Prefetch\AgRobust.db
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:20:20 ---A- C:\Windows\Prefetch\PfSvPerfStats.bin
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:20:21 ---A- C:\Windows\Prefetch\AgGlFaultHistory.db
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:20:21 ---A- C:\Windows\Prefetch\AgGlGlobalHistory.db
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:20:22 ---A- C:\Windows\Prefetch\AgGlFgAppHistory.db
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:22:57 ---A- C:\Windows\Prefetch\DLLHOST.EXE-766398D2.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:23:16 ---A- C:\Windows\Prefetch\WMPNSCFG.EXE-FC0D39BF.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:23:18 ---A- C:\Windows\Prefetch\WMPNETWK.EXE-D9F2A96F.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:23:23 ---A- C:\Windows\Prefetch\IPODSERVICE.EXE-37C43D64.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:23:32 ---A- C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:23:34 ---A- C:\Windows\Prefetch\WERCON.EXE-E36BD04E.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:23:38 ---A- C:\Windows\Prefetch\REG.EXE-E7E8BD26.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:23:53 ---A- C:\Windows\Prefetch\PCAUI.EXE-3E82C312.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:24:53 ---A- C:\Windows\Prefetch\AVWSC.EXE-4630B658.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:26:35 ---A- C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:27:02 ---A- C:\Windows\Prefetch\WERFAULT.EXE-E69F695A.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:27:04 ---A- C:\Windows\Prefetch\LOGONUI.EXE-09140401.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:27:15 ---A- C:\Windows\Prefetch\TASKMGR.EXE-5F5F473D.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:27:34 ---A- C:\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:27:41 ---A- C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf
O45 - LFCP:Last File Created Prefetch 29/04/2010 - 15:27:41 ---A- C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf


---\ Export de clé d'application autorisée (ECAA) (O47)
O47 - AAKE:Key Export SP - "C:\Acer\Empowering Technology\eDataSecurity\x86\eDSfsu.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Acer\Empowering Technology\eDataSecurity\x86\eDSfsu.exe
O47 - AAKE:Key Export SP - "C:\Acer\Empowering Technology\eDataSecurity\x86\encryption.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Acer\Empowering Technology\eDataSecurity\x86\encryption.exe
O47 - AAKE:Key Export SP - "C:\Acer\Empowering Technology\eDataSecurity\x86\decryption.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Acer\Empowering Technology\eDataSecurity\x86\decryption.exe
O47 - AAKE:Key Export SP - "C:\Acer\Empowering Technology\eDataSecurity\x86\eDSMgr.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Acer\Empowering Technology\eDataSecurity\x86\eDSMgr.exe
O47 - AAKE:Key Export SP - "C:\Acer\Empowering Technology\eDataSecurity\x86\eDStbmngr.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Acer\Empowering Technology\eDataSecurity\x86\eDStbmngr.exe
O47 - AAKE:Key Export SP - "C:\Acer\Empowering Technology\eDataSecurity\x64\eDSfsu.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Acer\Empowering Technology\eDataSecurity\x64\eDSfsu.exe
O47 - AAKE:Key Export SP - "C:\Acer\Empowering Technology\eDataSecurity\x64\encryption.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Acer\Empowering Technology\eDataSecurity\x64\encryption.exe
O47 - AAKE:Key Export SP - "C:\Acer\Empowering Technology\eDataSecurity\x64\decryption.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Acer\Empowering Technology\eDataSecurity\x64\decryption.exe
O47 - AAKE:Key Export SP - "C:\Acer\Empowering Technology\eDataSecurity\x64\eDSMgr.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Acer\Empowering Technology\eDataSecurity\x64\eDSMgr.exe
O47 - AAKE:Key Export SP - "C:\Acer\Empowering Technology\eDataSecurity\x64\eDStbmngr.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) (.not file.) -- C:\Acer\Empowering Technology\eDataSecurity\x64\eDStbmngr.exe

eldar · Answer

---\ MountPoints2 Shell Key (MPSK) (O51)
O51 - MPSK:{3f74984d-6d59-11de-ac9a-00235a5b022f}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- F:\autorun.exe (.not file.)


---\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll
O52 - TDSD: \Drivers32\"msacm.ac3filter"="ac3filter.acm" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\ac3filter.acm
O52 - TDSD: \Drivers32\"msacm.l3codecp"="" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"ac3filter.acm"="AC3Filter ACM codec" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\ac3filter.acm
O52 - TDSD: \drivers.desc\"l3codecp.acm"="" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\l3codecp.acm


---\ Microsoft Control Security Providers (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - "SecurityProviders"=credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - "SecurityProviders"=credssp.dll


---\ Microsoft Windows Policies System (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0


---\ Microsoft Windows Policies Explorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\Policies\Explorer] - "BindDirectlyToPropertySetStorage"=0

eldar · Answer

---\ Liste des Drivers Système (SDL) (O58)
O58 - SDL:[MD5.04F0FCAC69C7C71A3AC4EB97FAFC8303] - 21/01/2008 - 03:32:46 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys
O58 - SDL:[MD5.60505E0041F7751BDBB80F88BF45C2CE] - 21/01/2008 - 03:32:51 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys
O58 - SDL:[MD5.8A42779B02AEC986EAB64ECFC98F8BD7] - 21/01/2008 - 03:32:52 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\system32\drivers\adpu160m.sys
O58 - SDL:[MD5.241C9E37F8CE45EF51C3DE27515CA4E5] - 21/01/2008 - 03:32:53 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys
O58 - SDL:[MD5.9EAEF5FC9B8E351AFA7E78A6FAE91F91] - 21/01/2008 - 03:32:21 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys
O58 - SDL:[MD5.0A0FBC30DE483233124CDAEF8E5CBCDD] - 11/12/2007 - 10:42:44 ---A- . (.Alps Electric Co., Ltd. - Alps Touch Pad Driver.) -- C:\Windows\system32\drivers\Apfiltr.sys
O58 - SDL:[MD5.5D2888182FB46632511ACEE92FDAD522] - 21/01/2008 - 03:32:49 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys
O58 - SDL:[MD5.5E2A321BD7C8B3624E41FDEC3E244945] - 21/01/2008 - 03:32:50 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys
O58 - SDL:[MD5.D5ABEB24A3A3138B35F88931FB04E100] - 30/07/2007 - 15:13:10 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\system32\drivers\athr.sys
O58 - SDL:[MD5.14FE36D8F2C6A2435275338D061A0B66] - 11/12/2009 - 21:48:50 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\Windows\system32\drivers\avgntflt.sys
O58 - SDL:[MD5.AD9BD66A862116E79CB45BB6BE46055F] - 30/03/2009 - 09:32:47 ---A- . (.Avira GmbH - Avira Driver for RootKit Detection.) -- C:\Windows\system32\drivers\avipbb.sys
O58 - SDL:[MD5.E22ABCAA7B6FF580FEB0D49545DC4263] - 26/10/2007 - 07:41:02 ---A- . (.Broadcom Corp. - Broadcom 802.11 Network Adapter wireless driver.) -- C:\Windows\system32\drivers\BCMWL6.SYS
O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 02/11/2006 - 09:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys
O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 02/11/2006 - 09:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys
O58 - SDL:[MD5.B304E75CFF293029EDDF094246747113] - 02/11/2006 - 09:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys
O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys
O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys
O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 02/11/2006 - 09:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys
O58 - SDL:[MD5.919DB06DBF8A98D00CDCDA5BC58F8136] - 29/05/2007 - 12:23:58 ---A- . (.Guillemot Corporation - Filter Driver for the Hercules Webcams (MJPG).) -- C:\Windows\system32\drivers\camfilt2.sys
O58 - SDL:[MD5.0CA25E686A4928484E9FDABD168AB629] - 21/01/2008 - 03:32:21 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys
O58 - SDL:[MD5.AE1FDF7BF7BB6C6A70F67699D880592A] - 02/11/2006 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys
O58 - SDL:[MD5.73BAF270D24FE726B9CD7F80BB17A23D] - 02/11/2006 - 14:29:38 ---A- . (.Dritek System Inc. - Dritek PS2 Keyboard Filter Driver.) -- C:\Windows\system32\drivers\DKbFltr.sys
O58 - SDL:[MD5.5425F74AC0C1DBD96A1E04F17D63F94C] - 21/01/2008 - 03:32:50 ---A- . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel(R) PRO/1000.) -- C:\Windows\system32\drivers\E1G60I32.sys
O58 - SDL:[MD5.23B62471681A124889978F6295B3F4C6] - 21/01/2008 - 03:32:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys
O58 - SDL:[MD5.29DCAEB81DDE6F154AA4D36B18ECBB1F] - 16/05/2007 - 13:47:44 ---A- . (.ENE TECHNOLOGY INC. - ENE Consumer IR Driver for eHome.) -- C:\Windows\system32\drivers\enecir.sys
O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 18/05/2009 - 13:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\system32\drivers\GEARAspiWDM.sys
O58 - SDL:[MD5.16EE7B23A009E00D835CDB79574A91A6] - 21/01/2008 - 03:32:52 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys
O58 - SDL:[MD5.194BC52FC0F53E540FAF9DE8A9C05255] - 26/04/2007 - 10:18:04 ---A- . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\system32\drivers\HSXHWAZL.sys
O58 - SDL:[MD5.C9C63410D8CF98F621B9CC62243FB877] - 26/04/2007 - 10:17:54 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\system32\drivers\HSX_CNXT.sys
O58 - SDL:[MD5.3F53B4AF98F8FD83B7F0B8B65D2D90A7] - 26/04/2007 - 10:19:26 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\system32\drivers\HSX_DPV.sys
O58 - SDL:[MD5.54155EA1B0DF185878E0FC9EC3AC3A14] - 21/01/2008 - 03:32:49 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys
O58 - SDL:[MD5.2D077BF86E843F901D8DB709C95B49A5] - 02/11/2006 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys
O58 - SDL:[MD5.C6E5276C00EBDEB096BB5EF4B797D1B6] - 30/11/2007 - 15:51:34 ---A- . (.Acer, Inc. - int15.) -- C:\Windows\system32\drivers\int15.sys
O58 - SDL:[MD5.91B61589BB2915E81D436EFE07548507] - 06/11/2007 - 09:30:46 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\drivers\int15_64.sys
O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 02/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys
O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 02/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys
O58 - SDL:[MD5.C7E15E82879BF3235B559563D4185365] - 21/01/2008 - 03:32:49 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys
O58 - SDL:[MD5.EE01EBAE8C9BF0FA072E0FF68718920A] - 21/01/2008 - 03:32:51 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys
O58 - SDL:[MD5.912A04696E9CA30146A62AFA1463DD5C] - 21/01/2008 - 03:32:48 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys
O58 - SDL:[MD5.F61B04F2BB5098A34817D776C59E5E7C] - 30/03/2010 - 23:45:52 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys
O58 - SDL:[MD5.75B8EF2A089127E8A3B38F46CC366D79] - 30/03/2010 - 23:46:30 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbamswissarmy.sys
O58 - SDL:[MD5.0CEA2D0D3FA284B85ED5B68365114F76] - 19/06/2006 - 07:26:58 ---A- . (.Conexant - Diagnostic Interface x86 Driver.) -- C:\Windows\system32\drivers\mdmxsdk.sys
O58 - SDL:[MD5.0001CE609D66632FA17B84705F658879] - 21/01/2008 - 03:32:53 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys
O58 - SDL:[MD5.C252F32CD9A49DBFC25ECF26EBD51A99] - 21/01/2008 - 03:32:52 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys
O58 - SDL:[MD5.4FBBB70D30FD20EC51F80061703B001E] - 02/11/2006 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys
O58 - SDL:[MD5.2E7FB731D4790A1BC6270ACCEFACB36E] - 02/11/2006 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers
frd960.sys
O58 - SDL:[MD5.7F1C1F78D709C4A54CBB46EDE7E0B48D] - 20/03/2008 - 22:54:24 ---A- . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\system32\drivers\NTIDrvr.sys
O58 - SDL:[MD5.E875C093AEC0C978A90F30C9E0DFBB72] - 02/11/2006 - 08:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\system32\drivers
trigdigi.sys
O58 - SDL:[MD5.02A96700623AF401A4F6632AF04C0464] - 05/12/2007 - 11:18:00 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows Vista Kernel Mode Driver, Version 167.) -- C:\Windows\system32\drivers
vlddmkm.sys
O58 - SDL:[MD5.D668632606D1CEBF0B6EC64C1DF7ED6F] - 03/12/2007 - 03:48:10 ---A- . (.NVIDIA Corporation - NVIDIA MCP Networking Function Driver..) -- C:\Windows\system32\drivers
vmfdx32.sys
O58 - SDL:[MD5.2EDF9E7751554B42CBB60116DE727101] - 21/01/2008 - 03:32:47 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\system32\drivers
vraid.sys
O58 - SDL:[MD5.9AEBC32F9D6E02EBEE0369AB296FE7C8] - 16/02/2007 - 01:50:32 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) SMU Microcontroller Driver.) -- C:\Windows\system32\drivers
vsmu.sys
O58 - SDL:[MD5.ABED0C09758D1D97DB0042DBB2688177] - 21/01/2008 - 03:32:47 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers
vstor.sys
O58 - SDL:[MD5.C3E33580A3A85BE28612B83D0C321E20] - 15/09/2009 - 09:24:15 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\drivers\PnkBstrK.sys
O58 - SDL:[MD5.18DE162F9B83079C24CD96F59292F5ED] - 03/01/2008 - 04:07:24 ---A- . (.Egis Incorporated - Acer eDataSecurity Management PSD Filter Driver.) -- C:\Windows\system32\drivers\psdfilter.sys
O58 - SDL:[MD5.0A6DB55AFB7820C99AA1F3A1D270F4F6] - 21/01/2008 - 03:32:50 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys
O58 - SDL:[MD5.81A7E5C076E59995D54BC1ED3A16E60B] - 02/11/2006 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys
O58 - SDL:[MD5.355AAC141B214BEF1DBC1483AFD9BD50] - 24/02/2007 - 14:42:22 ---A- . (.REDC - RICOH SD Driver.) -- C:\Windows\system32\driversimmptsk.sys
O58 - SDL:[MD5.A4216C71DD4F60B26418CCFD99CD0815] - 23/01/2007 - 16:40:20 ---A- . (.REDC - RICOH MS Driver.) -- C:\Windows\system32\driversimsptsk.sys
O58 - SDL:[MD5.D231B577024AA324AF13A42F3A807D10] - 21/03/2007 - 22:02:04 ---A- . (.REDC - RICOH XD SM Driver.) -- C:\Windows\system32\driversixdptsk.sys
O58 - SDL:[MD5.F6548A004E94996877D43B33FFCF20E3] - 05/12/2007 - 10:28:52 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\RTKVHDA.sys
O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 02/11/2006 - 07:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys
O58 - SDL:[MD5.56250672235BBE54BA8A4963B1AC997C] - 14/01/2005 - 17:14:07 ---A- . (.Protection Technology - StarForce Protection Environment Driver.) -- C:\Windows\system32\drivers\sfdrv01.sys
O58 - SDL:[MD5.3AD2B15CCC03FEBFBAF5FF057822AA75] - 28/10/2004 - 11:47:59 ---A- . (.Protection Technology - StarForce Protection Helper Driver.) -- C:\Windows\system32\drivers\sfhlp02.sys
O58 - SDL:[MD5.A99C6C8B0BAA970D8AA59DDC50B57F94] - 21/01/2008 - 03:32:52 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys
O58 - SDL:[MD5.0057F29323C393A35903B4C5DAF9A144] - 09/05/2007 - 15:16:40 ---A- . (.Pas de propriétaire - USBCAMD for Sonix UVC.) -- C:\Windows\system32\drivers\sncduvc.sys
O58 - SDL:[MD5.0A0E0A9F9C658FDE4CCCCC39928B0CF9] - 16/05/2007 - 13:02:54 ---A- . (.Pas de propriétaire - UVC Camera Streaming Driver.) -- C:\Windows\system32\drivers\snp2uvc.sys
O58 - SDL:[MD5.00000000000000000000000000000000] - 10/07/2009 - 02:50:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\drivers\sptd.sys
O58 - SDL:[MD5.3AD0362CF68DE3AC500E981700242CCA] - 13/07/2009 - 10:20:53 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\Windows\system32\drivers\ssmdrv.sys
O58 - SDL:[MD5.192AA3AC01DF071B541094F251DEED10] - 02/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys
O58 - SDL:[MD5.8C8EB8C76736EBAF3B13B633B2E64125] - 02/11/2006 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys
O58 - SDL:[MD5.8072AF52B5FD103BBBA387A1E49F62CB] - 02/11/2006 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys
O58 - SDL:[MD5.97DD70FECA64FB4F63DE7BB7E66A80B1] - 06/11/2007 - 09:30:46 ---A- . (.EnTech Taiwan - TVicPort Driver for Windows NT/2000/XP.) -- C:\Windows\system32\drivers\TVicPort.sys
O58 - SDL:[MD5.4E104EBC164231D2272CC9BDD1EF5C40] - 06/11/2007 - 09:30:46 ---A- . (.EnTech Taiwan - TVicPort Driver for Windows NT/2000/XP.) -- C:\Windows\system32\drivers\TVicPort64.sys
O58 - SDL:[MD5.9224BB254F591DE4CA8D572A5F0D635C] - 21/01/2008 - 03:32:45 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys
O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 02/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys
O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 21/01/2008 - 03:32:49 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\system32\drivers\ulsata2.sys
O58 - SDL:[MD5.1DF89C499BF45D878B87EBD4421D462D] - 28/08/2009 - 18:42:52 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\system32\drivers\usbaapl.sys
O58 - SDL:[MD5.AADF5587A4063F52C2C3FED7887426FC] - 21/01/2008 - 03:32:21 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys
O58 - SDL:[MD5.587253E09325E6BF226B299774B728A9] - 21/01/2008 - 03:32:49 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys
O58 - SDL:[MD5.46D67209550973257601A533E2AC5785] - 21/01/2008 - 03:32:48 ---A- . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\system32\drivers\VSTAZL3.SYS
O58 - SDL:[MD5.5C7BDCF5864DB00323FE2D90FA26A8A2] - 21/01/2008 - 03:32:48 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\system32\drivers\VSTCNXT3.SYS
O58 - SDL:[MD5.EC36F1D542ED4252390D446BF6D4DFD0] - 21/01/2008 - 03:32:48 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\system32\drivers\VSTDPV3.SYS
O58 - SDL:[MD5.85ECE26F326C2D07BA77A60343468272] - 19/11/2008 - 08:41:08 ---A- . (.Wondershare - Wondershare Virtual Audio Device.) -- C:\Windows\system32\drivers\WsAudioDevice_383.sys
O58 - SDL:[MD5.2E579520E114A9CA309F13BF40AD8292] - 30/01/2007 - 06:23:30 ---A- . (.Conexant Systems, Inc. - Modem Audio Device Driver.) -- C:\Windows\system32\drivers\XAudio.sys
O58 - SDL:[MD5.40AC8590CC9006DBB99FFCB37879D4C6] - 06/11/2007 - 09:30:48 ---A- . (.Zeal SoftStudio - zntport.) -- C:\Windows\system32\drivers\zntport.sys
O58 - SDL:[MD5.C32ACB6D3FB23EBF528B676F7B8197B7] - 06/11/2007 - 09:30:46 ---A- . (.Zeal SoftStudio - NTPort Library kernel driver.) -- C:\Windows\system32\drivers\zntport64.sys
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 02/11/2006 - 08:09:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\ANSI.SYS
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/11/2006 - 08:09:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\country.sys
O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 02/11/2006 - 08:09:41 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\HIMEM.SYS
O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 02/11/2006 - 08:09:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\KEY01.SYS
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/11/2006 - 08:09:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\KEYBOARD.SYS
O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 02/11/2006 - 08:09:29 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS.SYS
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/11/2006 - 08:09:35 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS404.SYS
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/11/2006 - 08:09:38 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS411.SYS
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/11/2006 - 08:09:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS412.SYS
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/11/2006 - 08:09:31 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS804.SYS
O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 02/11/2006 - 08:09:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO.SYS
O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 02/11/2006 - 08:09:23 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO404.SYS
O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 02/11/2006 - 08:09:24 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO411.SYS
O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 02/11/2006 - 08:09:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO412.SYS
O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 02/11/2006 - 08:09:22 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO804.SYS
O58 - SDL:[MD5.A10AB556379FE56A37BAA43C3E7DF23E] - 06/08/2007 - 14:04:38 ---A- . (.Pas de propriétaire - USBCAMD for Sonix UVC.) -- C:\Windows\system32\sncduvc.sys
O58 - SDL:[MD5.D79FE8FF4C1A11CD650A8BBEAC62BE9F] - 13/08/2007 - 14:54:22 ---A- . (.Pas de propriétaire - UVC Camera Streaming Driver.) -- C:\Windows\system32\snp2uvc.sys

eldar · Answer

---\ Liste des outils de nettoyage (LATC) (O63)
O63 - Logiciel: ZHPDiag 1.25 - (.Nicolas Coolman.)


---\ Liste des services Legacy (LALS) (O64)
O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avgio.sys - avgio (avgio)  .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO
O64 - Services: CurCS - C:\Windows\system32\DRIVERS\avgntflt.sys - avgntflt (avgntflt)  .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT
O64 - Services: CurCS - C:\Windows\system32\DRIVERS\avipbb.sys - avipbb (avipbb)  .(.Avira GmbH - Avira Driver for RootKit Detection.) - LEGACY_AVIPBB
O64 - Services: CurCS - (.not file.) - Beep (Beep)  .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP
O64 - Services: CurCS - C:\PROGRA~1\LAUNCH~1\DPortIO.sys - Dritek General Port I/O (DritekPortIO)  .(.Dritek System Inc. - General Port I/O.) - LEGACY_DRITEKPORTIO
O64 - Services: CurCS - C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys - driverhardwarev2 (driverhardwarev2)  .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2
O64 - Services: CurCS - (.not file.) - FAT12/16/32 File System Driver (fastfat)  .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT
O64 - Services: CurCS - C:\Acer\Empowering Technology\eRecovery\int15.sys - int15 (int15)  .(.Acer, Inc. - int15.) - LEGACY_INT15
O64 - Services: CurCS - (.not file.) - mbr (mbr)  .(.Pas de propriétaire - Pas de description.) - LEGACY_MBR
O64 - Services: CurCS - (.not file.) - McAfee Inc. (mfehidk)  .(.Pas de propriétaire - Pas de description.) - LEGACY_MFEHIDK
O64 - Services: CurCS - (.not file.) - McAfee Inc. (mfehidk01)  .(.Pas de propriétaire - Pas de description.) - LEGACY_MFEHIDK01
O64 - Services: CurCS - (.not file.) - MPFP (MPFP)  .(.Pas de propriétaire - Pas de description.) - LEGACY_MPFP
O64 - Services: CurCS - C:\Windows\system32\Drivers\PSDFILTER.sys - PSDFilter (PSDFilter)  .(.Egis Incorporated - Acer eDataSecurity Management PSD Filter Dr.) - LEGACY_PSDFILTER
O64 - Services: CurCS - (.not file.) - PSDNServ (PSDNServ)  .(.Pas de propriétaire - Pas de description.) - LEGACY_PSDNSERV
O64 - Services: CurCS - (.not file.) - PSDVdisk (psdvdisk)  .(.Pas de propriétaire - Pas de description.) - LEGACY_PSDVDISK
O64 - Services: CurCS - (.not file.) - Security Driver (secdrv)  .(.Pas de propriétaire - Pas de description.) - LEGACY_SECDRV
O64 - Services: CurCS - C:\Windows\system32\drivers\sfhlp02.sys - StarForce Protection Helper Driver (version 2.x) (sfhlp02)  .(.Protection Technology - StarForce Protection Helper Driver.) - LEGACY_SFHLP02
O64 - Services: CurCS - (.not file.) - Security Processor Loader Driver (spldr)  .(.Pas de propriétaire - Pas de description.) - LEGACY_SPLDR
O64 - Services: CurCS - C:\Windows\system32\Drivers\sptd.sys - sptd (sptd)  .(.Pas de propriétaire - Pas de description.) - LEGACY_SPTD
O64 - Services: CurCS - C:\Windows\system32\DRIVERS\ssmdrv.sys - ssmdrv (ssmdrv)  .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV
O64 - Services: CurCS - C:\Windows\system32\Drivers\SSPORT.sys - SSPORT (SSPORT)  .(.Samsung Electronics - 32bit Port Contention Driver.) - LEGACY_SSPORT
O64 - Services: CurCS - (.not file.) - wtbyk (wtbyk)  .(.Pas de propriétaire - Pas de description.) - LEGACY_WTBYK
O64 - Services: CurCS - C:\Windows\system32\DRIVERS\xaudio.sys - XAudio (XAudio)  .(.Conexant Systems, Inc. - Modem Audio Device Driver.) - LEGACY_XAUDIO

eldar · Answer

---\ Liste des fichiers non signés (LUF) (O65) O65 - LUF:09/12/2005 (. - .) (1.0.2169.16560) - c:\windows\system32\ClearEvent.exe ---\ Observateur d'évènement d'application (OEA) (O66) O66 - EventLog: ID=4118 (Avira AntiVir) - (.Pas de propriétaire - Pas de description.) -- C:\Users\karim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\A4RA4PKF\27430_ (.not file.) O66 - EventLog: ID=4118 (Avira AntiVir) - (.Pas de propriétaire - Pas de description.) -- C:\Users\karim\AppData\Local\Temp\MessengerCache\GZL75ixShJtWUeK7GWserAlclWM= (.not file.) O66 - EventLog: ID=215 (ESENT) - (.Pas de propriétaire - Pas de description.) -- C:\Users\karim\AppData\Local\Microsoft\Windows Live Contacts\{a1e2ba07-9946-4b94-b21d- (.not file.) O66 - EventLog: ID=217 (ESENT) - (.Pas de propriétaire - Pas de description.) -- C:\Users\karim\AppData\Local\Microsoft\Windows Live Contacts\{a1e2ba07-9946-4b94-b21d- (.not file.) O66 - EventLog: ID=481 (ESENT) - (.Pas de propriétaire - Pas de description.) -- C:\Users\karim\AppData\Local\Microsoft\Windows Live Contacts\{a1e2ba07-9946-4b94-b21d- (.not file.) ---\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> [HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\system32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows egedit.exe O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> [HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.evt> [HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\system32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows egedit.exe ---\ Start Menu Internet (SMI) (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ---\ Recherche d'infection Master Boot Record (O80) Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net Run by karim at 29/04/2010 16:32:10 device: opened successfully user: MBR read successfully called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ndis.sys bcmwl6.sys >>UNKNOWN [0x859221F8]<< kernel: MBR read successfully detected MBR rootkit hooks: \Driver\atapi -> 0x859221f8 Warning: possible MBR rootkit infection ! user & kernel MBR OK Use "Recovery Console" command "fixmbr" to clear infection ! Use "ZHPFix" command "MBRFix" to clear infection ! End of the scan (1189 lines in 04mn 19s)

booddha · Answer

============= ZHPFIX =============
*	Lancer ZHPDIAG (Sous Vista et Seven lancer avec Clique/droit et executer en tant qu'administrateur)
*	Cliquer sur l'icône représentant un bouclier vert
*	Dans la nouvelle fenêtre qui s'ouvre ZHPFIX, cliquer sur le H bleu "Coller les lignes Helper"
*	Copier/coller dans la fenetre jaune ceci

MBRFix

*	Cliquer sur OK, la fenêtre change d'aspect.
*	Cliquer en bas de la fenêtre sur tous puis sur nettoyer
*	Fermer la fenêtre ZHPFIX
*	Rebooter la machine faire un nouveau rapport ZHPDIAG.  

Si CiJoint ne marche pas, envoie moi que les 20 ou 30 dernières lignes

eldar · Answer

---\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> [HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\system32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows egedit.exe O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> [HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.evt> [HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d'événements.) -- C:\Windows\system32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows egedit.exe ---\ Start Menu Internet (SMI) (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ---\ Recherche d'infection Master Boot Record (O80) Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net Run by karim at 29/04/2010 21:02:15 device: opened successfully user: MBR read successfully called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll >>UNKNOWN [0x859211F8]<< kernel: MBR read successfully detected MBR rootkit hooks: \Driver\atapi -> 0x859211f8 Warning: possible MBR rootkit infection ! user & kernel MBR OK Use "Recovery Console" command "fixmbr" to clear infection ! Use "ZHPFix" command "MBRFix" to clear infection ! End of the scan (1216 lines in 05mn 31s)

booddha · Answer

Désolé, obligé de m'absenter hier soir

Le rootkit fait de la résistance

============= COMBOFIX =============
/!\Avertissement : Ce logiciel n'est à utiliser que prescrit par un helper qualifié et formé à l'outil. 
Ne pas utiliser en dehors de ce cas de figure : dangereux! 
L'utilisation de ce logiciel se fait aux risques et périls du ou de la propriétaire de la machine infectée

Sous XP, passer directement au dernier paragraphe concernant le téléchargement de COMBOFIX]
Sous vista ou W7
Désactiver le contrôle des comptes utilisateurs (à réactiver après la désinfection):
---------------------------------------------------
--- Vista: Désactiver le contrôle des comptes utilisateurs --- 
---------------------------------------------------
* Cliquer sur Démarrer puis sur panneau de configuration
* Double Cliquer sur l'icône Comptes d'utilisateurs
* Cliquer ensuite sur désactiver et valider.
* Redémarrer le PC 
---------------------------------------------------
--- Seven : Désactiver le contrôle des comptes utilisateurs --- 
---------------------------------------------------
* Sous Seven : Désactiver le contrôle des comptes utilisateurs
* Cliquer sur Démarrer puis sur panneau de configuration
* Cliquer sur Comptes et protection des utilisateurs puis sur Comptes d'utilisateurs.
* Cliquer sur Modifier les paramètres de contrôle de compte d'utilisateur.
* Une fenêtre apparait avec un curseur vertical à 4 positions.
* Noter sur quelle position le curseur se trouve. En fin de désinfection, il faudra repositionner ce curseur sur la même position.
* Glisser le curseur sur la positon du bas Ne jamais m'avertir
* Cliquer sur OK et confirmer une dernière fois son identité.
* Redémarrer le PC 
---------------------------------------------------
*	Télécharger combofix (par sUBs) et l'enregistrer sur le bureau.

*	Se déconnecter d'internet et fermer toutes tes applications.
*	Désactiver provisoirement et seulement le temps de l'utilisation de Combofix les protections (antivirus, parefeu, garde en temps réel de l'antispyware)
*	Sous XP Double-cliquer sur combofix.exe et suivre les instructions
*	Sous Vista ou Seven : Cliquer/droit sur le logo de Combofix, puis « exécuter en tant qu'Administrateur » 

Si Combofix propose d'installer la console de récupération, accepter.

à la fin, Combofix va produire un rapport C:\ComboFix.txt

*	Réactiver le parefeu, l'antivirus, la garde de l'antispyware
*	Copier/coller le rapport C:\ComboFix.txt dans la prochaine réponse du forum.

Attention, ne pas utiliser la souris ni le clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordinateur.

Tutoriel complet ici

------------------------------

Réparer manuellement la connexion Internet

Si, par malchance, l'accès à la connexion Internet ne fonctionne plus après avoir fait tourner ComboFix, la première chose à essayer est de faire redémarrer l'ordinateur. 
Cette seule manipulation devrait corriger la grande majorité des problèmes de non-connexion à Internet après l'utilisation de ComboFix. 
Si la connexion Internet n'est pas rétablie après avoir redémarré, exécuter les étapes suivantes:

   1. Cliquer sur le bouton Démarrer.
   2. Cliquer sur l'option de menu Paramètres.
   3. Cliquer sur l'option Panneau de configuration.
   4. Après l'ouverture du Panneau de configuration, faire un double clic sur l'icône Connexions réseau. 
Si le Panneau de configuration est paramétré pour un affichage en catégories, faire un double clic sur Connexions réseau et Internet puis cliquer sur Connexions réseau tout en bas.
   5. Une liste de toutes les connexions réseau disponibles apparait. Repérer la connexion vers l'adaptateur Sans Fil ou Réseau local et faire un clic droit dessus.
   6. Cliquer simplement sur l'option de menu Réparer.

eldar · Answer

bonsoir, désolé j'ai pas eu le temps de me connecter, je fais le rapport avec Combo demain matin.

eldar · Answer

bon j'ai mis plusieurs fois le lien du rapport apparament on la supprimé.
Tas besoin d'une partie spéciale du rapport ou faut vraiment que je mette tout?

booddha · Answer

Poste le rapport combofix entier dans ta réponse suivante

eldar · Answer

ComboFix 10-04-29.04 - karim 30/04/2010  10:04:19.2.2 - x86
Microsoft® Windows Vista(TM) Édition Familiale Basique   6.0.6002.2.1252.33.1036.18.3070.1914 [GMT 2:00]
Lancé depuis: c:\users\karim\Downloads\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((   Fichiers créés du 2010-03-28 au 2010-04-30  ))))))))))))))))))))))))))))))))))))
.

2010-04-30 08:13 . 2010-04-30 08:13	--------	d-----w-	c:\users\karim\AppData\Local	emp
2010-04-30 08:13 . 2010-04-30 08:13	--------	d-----w-	c:\users\Public\AppData\Local	emp
2010-04-30 08:13 . 2010-04-30 08:13	--------	d-----w-	c:\users\Default\AppData\Local	emp
2010-04-29 13:35 . 2010-04-29 13:35	--------	d-----w-	c:\users\karim\AppData\Roaming\Malwarebytes
2010-04-29 13:35 . 2010-03-29 22:46	38224	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
2010-04-29 13:35 . 2010-04-29 13:35	--------	d-----w-	c:\programdata\Malwarebytes
2010-04-29 13:35 . 2010-04-29 13:35	--------	d-----w-	c:\program files\Malwarebytes' Anti-Malware
2010-04-29 13:35 . 2010-03-29 22:45	20824	----a-w-	c:\windows\system32\drivers\mbam.sys
2010-04-29 11:54 . 2010-04-29 19:01	--------	d-----w-	c:\program files\ZHPDiag
2010-04-28 11:39 . 2010-04-30 08:02	--------	d-----w-	c:\program files\Spybot - Search & Destroy
2010-04-28 11:39 . 2010-04-30 07:59	--------	d-----w-	c:\programdata\Spybot - Search & Destroy
2010-04-28 09:25 . 2010-04-29 11:58	--------	d-----w-	c:\users\karim\AppData\Roaming\7B3960DB01DD648767E36140257E9AB4
2010-04-23 10:23 . 2010-04-23 10:23	93	----a-w-	c:\users\karim\AppData\Local\fusioncache.dat
2010-04-23 10:23 . 2010-04-23 10:23	--------	d-----w-	c:\users\karim\AppData\Local\ApplicationHistory
2010-04-23 10:18 . 2010-04-23 10:18	--------	d-----w-	c:\windows\system32\URTTEMP
2010-04-18 10:20 . 2010-04-18 10:20	85504	----a-w-	c:\users\karim\AppData\Roaming\SystemRequirementsLab\srlproxy_cyri_4.1.71.0A.dll
2010-04-15 10:15 . 2010-04-18 11:01	--------	d-----w-	c:\program files\EA Sports
2010-04-14 12:02 . 2010-02-23 11:10	212992	----a-w-	c:\windows\system32\drivers\mrxsmb10.sys
2010-04-14 12:02 . 2010-02-23 11:10	79360	----a-w-	c:\windows\system32\drivers\mrxsmb20.sys
2010-04-14 12:02 . 2010-02-23 11:10	106496	----a-w-	c:\windows\system32\drivers\mrxsmb.sys
2010-04-14 12:02 . 2010-02-18 14:07	3600776	----a-w-	c:\windows\system32
tkrnlpa.exe
2010-04-14 12:02 . 2010-02-18 14:07	3548040	----a-w-	c:\windows\system32
toskrnl.exe
2010-04-14 12:02 . 2010-03-05 14:01	420352	----a-w-	c:\windows\system32\vbscript.dll
2010-04-14 12:02 . 2010-02-18 14:07	904576	----a-w-	c:\windows\system32\drivers	cpip.sys
2010-04-14 12:02 . 2010-02-18 13:30	200704	----a-w-	c:\windows\system32\iphlpsvc.dll
2010-04-14 12:02 . 2010-02-18 11:28	25088	----a-w-	c:\windows\system32\drivers	unnel.sys
2010-04-14 11:54 . 2010-01-13 17:34	98304	----a-w-	c:\windows\system32\cabview.dll
2010-04-14 11:54 . 2009-12-23 11:33	172032	----a-w-	c:\windows\system32\wintrust.dll
2010-03-31 20:08 . 2010-04-29 22:23	--------	d-----w-	c:\users\karim\AppData\Roaming\vlc
2010-03-31 20:04 . 2010-04-29 09:37	--------	d-----w-	C:\PCBOX

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-30 08:10 . 2008-01-21 07:23	694498	----a-w-	c:\windows\system32\perfh00C.dat
2010-04-30 08:10 . 2008-01-21 07:23	133500	----a-w-	c:\windows\system32\perfc00C.dat
2010-04-30 07:59 . 2009-11-13 09:49	--------	d-----w-	c:\users\karim\AppData\Roaming\LimeWire
2010-04-30 07:02 . 2009-07-06 17:48	49159	----a-w-	c:\users\karim\AppData\Roaming
vModes.dat
2010-04-29 11:48 . 2008-03-20 21:44	--------	d-----w-	c:\programdata\NVIDIA
2010-04-29 09:37 . 2009-07-06 17:29	--------	d-----w-	c:\program files\GUILD WARS
2010-04-28 09:44 . 2008-03-20 21:45	--------	d--h--w-	c:\program files\InstallShield Installation Information
2010-04-25 14:23 . 2009-08-10 10:11	7592	----a-w-	c:\users\karim\AppData\Local\d3d9caps.dat
2010-04-18 10:21 . 2009-07-06 17:14	--------	d-----w-	c:\program files\SystemRequirementsLab
2010-04-18 10:20 . 2009-07-12 14:25	--------	d-----w-	c:\users\karim\AppData\Roaming\SystemRequirementsLab
2010-04-16 18:08 . 2010-03-30 08:34	--------	d-----w-	c:\programdata\NCH Software
2010-04-14 12:13 . 2006-11-02 11:18	--------	d-----w-	c:\program files\Windows Mail
2010-04-14 12:12 . 2008-03-20 22:18	--------	d-----w-	c:\programdata\Microsoft Help
2010-04-13 20:22 . 2010-03-30 08:34	--------	d-----w-	c:\program files\NCH Software
2010-03-30 08:35 . 2010-03-30 08:34	--------	d-----w-	c:\users\karim\AppData\Roaming\NCH Software
2010-03-29 17:59 . 2009-07-06 16:53	--------	d-----w-	c:\program files\Messenger Plus! Live
2010-03-28 21:04 . 2009-08-14 05:13	--------	d-----w-	c:\users\karim\AppData\Roaming\dvdcss
2010-03-24 18:17 . 2010-03-24 08:04	952768	----a-w-	c:\programdata\Adobe\Reader\8.2\ARM\32432\AdobeARM.exe
2010-03-24 18:17 . 2010-03-24 08:04	70584	----a-w-	c:\programdata\Adobe\Reader\8.2\ARM\32432\AdobeExtractFiles.dll
2010-03-24 18:17 . 2010-03-24 08:04	326056	----a-w-	c:\programdata\Adobe\Reader\8.2\ARM\32432\ReaderUpdater.exe
2010-03-24 18:17 . 2010-03-24 08:04	326056	----a-w-	c:\programdata\Adobe\Reader\8.2\ARM\32432\AcrobatUpdater.exe
2010-03-16 20:34 . 2009-10-29 20:58	--------	d-----w-	c:\program files\Replay Media Catcher
2010-03-16 20:28 . 2009-11-22 10:48	237568	----a-w-	c:\windows\system32mc_rtspdl.dll
2010-03-16 20:28 . 2009-11-22 10:48	156672	----a-w-	c:\windows\system32mc_fixasf.exe
2010-03-04 22:39 . 2010-03-04 22:39	--------	d-----w-	c:\users\karim\AppData\Roaming\Windows Live Writer
2010-02-25 20:54 . 2010-02-25 20:54	20648	----a-w-	c:\users\karim\AppData\Roaming\Mumble\Plugins\insurgency.dll
2010-02-25 20:54 . 2010-02-25 20:54	20648	----a-w-	c:\users\karim\AppData\Roaming\Mumble\Plugins\gmod.dll
2010-02-25 20:54 . 2010-02-25 20:54	20136	----a-w-	c:\users\karim\AppData\Roaming\Mumble\Plugins	f2.dll
2010-02-25 20:54 . 2010-02-25 20:54	17576	----a-w-	c:\users\karim\AppData\Roaming\Mumble\Plugins\sto.dll
2010-02-25 20:54 . 2010-02-25 20:54	17064	----a-w-	c:\users\karim\AppData\Roaming\Mumble\Plugins\lotro.dll
2010-02-25 20:54 . 2010-02-25 20:54	20648	----a-w-	c:\users\karim\AppData\Roaming\Mumble\Plugins\dods.dll
2010-02-25 20:54 . 2010-02-25 20:54	20648	----a-w-	c:\users\karim\AppData\Roaming\Mumble\Plugins\aoc.dll
2010-02-25 20:54 . 2010-02-25 20:54	17064	----a-w-	c:\users\karim\AppData\Roaming\Mumble\Plugins\l4d2.dll
2010-02-25 20:54 . 2010-02-25 20:54	16552	----a-w-	c:\users\karim\AppData\Roaming\Mumble\Plugins\arma2.dll
2010-02-25 08:20 . 2009-07-06 16:25	102424	----a-w-	c:\users\karim\AppData\Local\GDIPFONTCACHEV1.DAT
2010-02-24 08:16 . 2009-10-03 06:28	181632	------w-	c:\windows\system32\MpSigStub.exe
2010-02-23 06:39 . 2010-03-31 13:22	916480	----a-w-	c:\windows\system32\wininet.dll
2010-02-23 06:33 . 2010-03-31 13:22	71680	----a-w-	c:\windows\system32\iesetup.dll
2010-02-23 06:33 . 2010-03-31 13:22	109056	----a-w-	c:\windows\system32\iesysprep.dll
2010-02-23 04:55 . 2010-03-31 13:22	133632	----a-w-	c:\windows\system32\ieUnatt.exe
2010-02-12 10:32 . 2010-03-02 02:00	293376	----a-w-	c:\windows\system32\browserchoice.exe
2010-02-08 11:13 . 2010-02-08 11:13	86576	----a-w-	c:\users\karim\AppData\Roaming\Microsoft\Services Windows Live\Raccourci Galerie de Photos Windows Live.exe
2010-02-08 11:13 . 2010-02-08 11:13	392728	----a-w-	c:\users\karim\AppData\Roaming\Microsoft\Services Windows Live\Services Windows Live.dll
2010-02-08 11:13 . 2010-02-08 11:13	135680	----a-w-	c:\users\karim\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
2010-02-08 11:13 . 2010-02-08 11:13	132672	----a-w-	c:\users\karim\AppData\Roaming\Microsoft\Services Windows Live\Raccourci Windows Live Messenger.exe
2010-02-05 12:22 . 2010-02-05 12:22	509552	----a-w-	c:\programdata\Google\Google Toolbar\Update\gtbE0BE.tmp.exe
2009-11-27 23:51 . 2009-11-27 23:51	119808	----a-w-	c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.

eldar · Answer

(((((((((((((((((((((((((((((   SnapShot@2010-04-30_07.52.32   )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-01-21 02:32 . 2008-01-21 02:32	54272              c:\windows\winsxs\x86_wsdscdrv.inf_31bf3856ad364e35_6.0.6001.18000_none_d03e46f3c9815a07\WSDScPrx.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32	16896              c:\windows\winsxs\x86_wsdprint.inf_31bf3856ad364e35_6.0.6002.18005_none_173ab75eae68bace\WSDPrint.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	56320              c:\windows\winsxs\x86_wsdprint.inf_31bf3856ad364e35_6.0.6001.18000_none_154f3e52b146ef82\WSDPrPxy.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32	16896              c:\windows\winsxs\x86_wsdprint.inf_31bf3856ad364e35_6.0.6001.18000_none_154f3e52b146ef82\WSDPrint.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	39936              c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688d\WpdUsb.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	60928              c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688d\WpdMtpUS.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32	66560              c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688d\WpdMtpIP.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32	33280              c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688d\WpdConns.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32	39936              c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6001.18000_none_1f9a45a386b09d41\WpdUsb.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	60928              c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6001.18000_none_1f9a45a386b09d41\WpdMtpUS.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32	66560              c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6001.18000_none_1f9a45a386b09d41\WpdMtpIP.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32	33280              c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6001.18000_none_1f9a45a386b09d41\WpdConns.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32	31616              c:\windows\winsxs\x86_winusb.inf_31bf3856ad364e35_6.0.6001.18000_none_f7f4e48615a15a51\winusb.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	20480              c:\windows\winsxs\x86_winmobil.inf_31bf3856ad364e35_6.0.6001.18000_none_9f841f055f7e71c2\wmcoinst.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32	14848              c:\windows\winsxs\x86_winmobil.inf_31bf3856ad364e35_6.0.6001.18000_none_9f841f055f7e71c2\wcescpxy.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32	16384              c:\windows\winsxs\x86_winmobil.inf_31bf3856ad364e35_6.0.6001.18000_none_9f841f055f7e71c2	cp2udp.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32	14848              c:\windows\winsxs\x86_winmobil.inf_31bf3856ad364e35_6.0.6001.18000_none_9f841f055f7e71c2apispxy.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32	91136              c:\windows\winsxs\x86_winmobil.inf_31bf3856ad364e35_6.0.6001.18000_none_9f841f055f7e71c2api.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32	10752              c:\windows\winsxs\x86_winmobil.inf_31bf3856ad364e35_6.0.6001.18000_none_9f841f055f7e71c2\dtptdns.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32	65536              c:\windows\winsxs\x86_winmobil.inf_31bf3856ad364e35_6.0.6001.18000_none_9f841f055f7e71c2\ceutil.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32	22016              c:\windows\winsxs\x86_winmobil.inf_31bf3856ad364e35_6.0.6001.18000_none_9f841f055f7e71c2\btplugin.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32	73216              c:\windows\winsxs\x86_windowssideshowenhanceddriver.inf_31bf3856ad364e35_6.0.6001.18000_none_a4bddb83ceadd56c\AuxiliaryDisplayEnhancedDriver.dll
+ 2006-11-02 07:22 . 2006-11-02 06:29	18271              c:\windows\winsxs\x86_windowssearchengine..uredqueryschema.bin_31bf3856ad364e35_6.0.6001.18000_none_9784d4f858e3c74e\StructuredQuerySchemaTrivial.bin
+ 2008-01-21 02:32 . 2008-01-21 02:32	73088              c:\windows\winsxs\x86_wdma_usb.inf_31bf3856ad364e35_6.0.6001.18000_none_6d17dba1b6dae561\USBAUDIO.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	22072              c:\windows\winsxs\x86_wd.inf_31bf3856ad364e35_6.0.6001.18000_none_13ae4ead610a7b3a\wd.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	31616              c:\windows\winsxs\x86_wceusbsh.inf_31bf3856ad364e35_6.0.6001.18000_none_1ed992ec561f20c5\winusb.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	27136              c:\windows\winsxs\x86_viafir2k.inf_31bf3856ad364e35_6.0.6001.18000_none_a12e756a5b8b0d97\viairda.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	55296              c:\windows\winsxs\x86_usbstor.inf_31bf3856ad364e35_6.0.6001.18000_none_48864eb697d31b43\USBSTOR.SYS
+ 2008-01-21 02:32 . 2008-01-21 02:32	18944              c:\windows\winsxs\x86_usbprint.inf_31bf3856ad364e35_6.0.6001.18000_none_32f9c26ac169fb1e\usbprint.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	23552              c:\windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.0.6002.18005_none_bfadd87f00af6ca2\usbuhci.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	15872              c:\windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.0.6002.18005_none_bfadd87f00af6ca2\hcrstco.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32	23552              c:\windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.0.6001.18000_none_bdc25f73038da156\usbuhci.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	19456              c:\windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.0.6001.18000_none_bdc25f73038da156\usbohci.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	39424              c:\windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.0.6001.18000_none_bdc25f73038da156\usbehci.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	15872              c:\windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.0.6001.18000_none_bdc25f73038da156\hcrstco.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32	68608              c:\windows\winsxs\x86_usbcir.inf_31bf3856ad364e35_6.0.6001.18000_none_9e47973ffc820d99\usbcir.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	73216              c:\windows\winsxs\x86_usb.inf_31bf3856ad364e35_6.0.6002.18005_none_cce3e0020b941ebb\usbccgp.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	73216              c:\windows\winsxs\x86_usb.inf_31bf3856ad364e35_6.0.6001.18000_none_caf866f60e72536f\usbccgp.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	34816              c:\windows\winsxs\x86_umbus.inf_31bf3856ad364e35_6.0.6001.18000_none_0bdbc8d7c49fa65d\umbus.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	31616              c:\windows\winsxs\x86_transfercable.inf_31bf3856ad364e35_6.0.6001.18000_none_609fa33191d7d709\x86\winusb.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	45624              c:\windows\winsxs\x86_tpm.inf_31bf3856ad364e35_6.0.6001.18000_none_ac22eb370727a62a	pm.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	49664              c:\windows\winsxs\x86_tdibth.inf_31bf3856ad364e35_6.0.6001.18000_none_2dc5774d938e5beafcomm.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	10240              c:\windows\winsxs\x86_tape.inf_31bf3856ad364e35_6.0.6001.18000_none_e67ad7997d7e1e1f\dlttape.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	13824              c:\windows\winsxs\x86_tape.inf_31bf3856ad364e35_6.0.6001.18000_none_e67ad7997d7e1e1f\4mmdat.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	41728              c:\windows\winsxs\x86_stusb2ir.inf_31bf3856ad364e35_6.0.6001.18000_none_02edc9968ab857ff\stusb2ir.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	30720              c:\windows\winsxs\x86_smscirda.inf_31bf3856ad364e35_6.0.6001.18000_none_dce6111669c17531\smscirda.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	22016              c:\windows\winsxs\x86_smartcrd.inf_31bf3856ad364e35_6.0.6001.18000_none_72a9e15f343dcd03\stcusb.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	22528              c:\windows\winsxs\x86_smartcrd.inf_31bf3856ad364e35_6.0.6001.18000_none_72a9e15f343dcd03\SCR111.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	21504              c:\windows\winsxs\x86_smartcrd.inf_31bf3856ad364e35_6.0.6001.18000_none_72a9e15f343dcd03\scmstcs.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	18432              c:\windows\winsxs\x86_smartcrd.inf_31bf3856ad364e35_6.0.6001.18000_none_72a9e15f343dcd03\pscr.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	31232              c:\windows\winsxs\x86_smartcrd.inf_31bf3856ad364e35_6.0.6001.18000_none_72a9e15f343dcd03\grserial.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	22528              c:\windows\winsxs\x86_smartcrd.inf_31bf3856ad364e35_6.0.6001.18000_none_72a9e15f343dcd03\gpr400.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	56448              c:\windows\winsxs\x86_smartcrd.inf_31bf3856ad364e35_6.0.6001.18000_none_72a9e15f343dcd03\cxbp0wdm.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	20608              c:\windows\winsxs\x86_smartcrd.inf_31bf3856ad364e35_6.0.6001.18000_none_72a9e15f343dcd03\cmbp0wdm.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	74808              c:\windows\winsxs\x86_sisraid4.inf_31bf3856ad364e35_6.0.6001.18000_none_28424a1bb82e4340\sisraid4.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	41016              c:\windows\winsxs\x86_sisraid2.inf_31bf3856ad364e35_6.0.6001.18000_none_273025b185f1ca6e\sisraid2.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	13312              c:\windows\winsxs\x86_sffdisk.inf_31bf3856ad364e35_6.0.6002.18005_none_a627020ee70bbf15\sffdisk.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	11776              c:\windows\winsxs\x86_sffdisk.inf_31bf3856ad364e35_6.0.6001.18000_none_a43b8902e9e9f3c9\sffp_sd.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	12288              c:\windows\winsxs\x86_sffdisk.inf_31bf3856ad364e35_6.0.6001.18000_none_a43b8902e9e9f3c9\sffp_mmc.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	13312              c:\windows\winsxs\x86_sffdisk.inf_31bf3856ad364e35_6.0.6001.18000_none_a43b8902e9e9f3c9\sffdisk.sys
+ 2006-11-02 12:33 . 2006-11-02 12:33	11368              c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MsMpLics.dll
+ 2006-11-02 12:33 . 2006-11-02 12:33	16488              c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MpAsDesc.dll
+ 2006-11-02 12:33 . 2006-11-02 12:33	11368              c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6001.18000_none_57bcb0ca582f18c5\MsMpLics.dll
+ 2006-11-02 12:33 . 2006-11-02 12:33	16488              c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6001.18000_none_57bcb0ca582f18c5\MpAsDesc.dll
+ 2006-11-02 12:33 . 2006-11-02 12:33	65640              c:\windows\winsxs\x86_security-malware-windows-defender-events_31bf3856ad364e35_6.0.6000.16386_none_b3613e39beae266f\MpEvMsg.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32	88576              c:\windows\winsxs\x86_sdbus.inf_31bf3856ad364e35_6.0.6001.18000_none_71e2bcc3ca5711da\sdbus.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	81464              c:\windows\winsxs\x86_sbp2.inf_31bf3856ad364e35_6.0.6001.18000_none_4538a4ecf623396e\sbp2port.sys
+ 2006-11-02 06:34 . 2006-10-20 01:14	32768              c:\windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6000.16386_none_ea5acd8d67a02ef5\RegSvcs.exe
+ 2006-11-02 06:34 . 2006-10-20 01:14	53248              c:\windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6000.16386_none_173fa2e7152d3645\RegAsm.exe
+ 2008-01-21 02:32 . 2008-01-21 02:32	22528              c:\windows\winsxs\x86_ramdisk.inf_31bf3856ad364e35_6.0.6001.18000_none_b8ecbe6bda091ffcamdisk.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	79872              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPZPRLHN.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	89600              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPZPPLHN.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	37376              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPZLLLHN.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	20992              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPZISN12.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	34304              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPZIPT12.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	37376              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPZIPR12.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	52736              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPZIPM12.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	43008              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPZINW12.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	53248              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPZIDR12.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	30208              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPZ3LLHN.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	90624              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPVUD50.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	49152              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPOEMUI.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	96768              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPFUD50.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	19968              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPFRES50.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	90624              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPCCLJUI.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	50176              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPCCLJ1.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	41984              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPCABOUT.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	11776              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPBPROPS.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	39936              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPBPRO.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	11776              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPBOIDPS.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	29184              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPBOID.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	28160              c:\windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPBMIAPI.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	45112              c:\windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467
vstor.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	17408              c:\windows\winsxs\x86_ntprint.inf_31bf3856ad364e35_6.0.6001.18000_none_3b009d01bab2e138\I386\PJLMON.DLL
+ 2008-01-21 02:32 . 2008-01-21 02:32	47104              c:\windows\winsxs\x86_netvgx86.inf_31bf3856ad364e35_6.0.6001.18000_none_644cd6f3df223fbb\getnd6.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	15872              c:\windows\winsxs\x86_netrndis.inf_31bf3856ad364e35_6.0.6001.18000_none_c7c28f2a45cca308\usb8023x.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	33280              c:\windows\winsxs\x86_netrndis.inf_31bf3856ad364e35_6.0.6001.18000_none_c7c28f2a45cca308ndismpx.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	20992              c:\windows\winsxs\x86_netirsir.inf_31bf3856ad364e35_6.0.6001.18000_none_26c98065851e3463\irsir.sys
+ 2006-11-02 06:34 . 2006-11-02 06:34	28160              c:\windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_735d77df7a16028b\WMINet_Utils.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	71680              c:\windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_613d08e55393a756\TLBREF.DLL
+ 2006-11-02 06:34 . 2006-11-02 06:34	85504              c:\windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_a63c20a9cbd96a81\ShFusRes.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	78336              c:\windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_2a02772aff510a96\PerfCounter.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	15360              c:\windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_dc5bf0ae2d4f6fc2
ormalization.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	89600              c:\windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6000.16386_none_77e860c04a4c2385
gen.exe
+ 2006-11-02 06:34 . 2006-11-02 06:34	10240              c:\windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_cec954a364832345\mscortim.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	59392              c:\windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6000.16386_none_2021a451e82131db\mscorsvw.exe
+ 2006-11-02 06:34 . 2006-10-20 01:14	22528              c:\windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_a5c0f813ee2ed1f8\mscorsecr.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	67072              c:\windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_11dcd325f46ef956\mscorsec.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	81408              c:\windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_c30a9235495732ed\mscorld.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	36864              c:\windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_eac2005b6fd42d71\mscorie.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	73216              c:\windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_6d1b5243c560db72\mscordbc.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	55296              c:\windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_b6e1e631d82aaeaf\InstallUtilLib.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	32768              c:\windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6000.16386_none_925ce6867e4dfdfc
etfxperf.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	26624              c:\windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6000.16386_none_cdc7ed1d1ae18477\dw20.exe
+ 2006-11-02 06:34 . 2006-11-02 06:34	52736              c:\windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_887bbb9454368959\dfdll.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	25600              c:\windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6000.16386_none_e5eb996633b707c2\cvtres.exe
+ 2006-11-02 06:34 . 2006-11-02 06:34	17920              c:\windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_dad951e64fe4ffb9\Culture.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	70656              c:\windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6000.16386_none_fea421ba2cc2d199\csc.exe
+ 2006-11-02 06:34 . 2006-11-02 06:34	88576              c:\windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_b31310afc29c6b21\CORPerfMonExt.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	95232              c:\windows\winsxs\x86_netfx-clrgc_b03f5f7f11d50a3a_6.0.6000.16386_none_20f69241f8b2f71d\clrgc.exe
+ 2006-11-02 06:34 . 2006-11-02 06:34	47616              c:\windows\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_528b86b0b782b897\System.EnterpriseServices.Thunk.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	23552              c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6000.16386_none_c51455248bf19310\aspnet_wp.exe
+ 2006-11-02 06:34 . 2006-11-02 06:34	24064              c:\windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6000.16386_none_81486aa9c284a376\aspnet_state.exe
+ 2006-11-02 06:34 . 2006-11-02 06:34	23040              c:\windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6000.16386_none_12533aab21a2c6d8\aspnet_regiis.exe
+ 2006-11-02 06:34 . 2006-10-20 01:13	75264              c:\windows\winsxs\x86_netfx-aspnet_rc_dll_res_b03f5f7f11d50a3a_6.0.6000.16386_none_30455c49fd6dcdbb\aspnet_rc.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	23552              c:\windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_ddd5c5f6fc614a9e\Aspnet_perf.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	87040              c:\windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_90ee1bebd2cc5bb9\MmcAspExt.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	10752              c:\windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_d57ba977578b0ec9\aspnet_filter.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	49152              c:\windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6000.16386_none_c5623d346a9c29f7\AppLaunch.exe
+ 2006-11-02 06:34 . 2006-10-20 01:13	19456              c:\windows\winsxs\x86_netfx-_vc_assembly_linker_messages_b03f5f7f11d50a3a_6.0.6000.16386_none_655c53dca4acdafc\alinkui.dll
+ 2006-11-02 06:34 . 2006-11-02 06:34	87552              c:\windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_39276ed5eb38bec0\alink.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32	50048              c:\windows\winsxs\x86_mstape.inf_31bf3856ad364e35_6.0.6001.18000_none_2e09336815547761\mstape.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	83456              c:\windows\winsxs\x86_msports.inf_31bf3856ad364e35_6.0.6001.18000_none_f897b0b1b85e4433\serial.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	17920              c:\windows\winsxs\x86_msports.inf_31bf3856ad364e35_6.0.6001.18000_none_f897b0b1b85e4433\serenum.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	79360              c:\windows\winsxs\x86_msports.inf_31bf3856ad364e35_6.0.6001.18000_none_f897b0b1b85e4433\parport.sys

eldar · Answer

+ 2008-01-21 02:32 . 2008-01-21 02:32	19968              c:\windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.0.6001.18000_none_4e340b7cd25b3352\sermouse.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	15872              c:\windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.0.6001.18000_none_4e340b7cd25b3352\mouhid.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	34360              c:\windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.0.6001.18000_none_4e340b7cd25b3352\mouclass.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	54784              c:\windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.0.6001.18000_none_4e340b7cd25b3352\i8042prt.sys
+ 2008-01-21 02:14 . 2008-01-21 02:14	19968              c:\windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.0.6000.20734_none_4cbafb05ee66fb5a\sermouse.sys
+ 2008-01-21 02:14 . 2008-01-21 02:14	15872              c:\windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.0.6000.20734_none_4cbafb05ee66fb5a\mouhid.sys
+ 2008-01-21 02:14 . 2008-01-21 02:14	34360              c:\windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.0.6000.20734_none_4cbafb05ee66fb5a\mouclass.sys
+ 2008-01-21 02:14 . 2008-01-21 02:14	54784              c:\windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.0.6000.20734_none_4cbafb05ee66fb5a\i8042prt.sys
+ 2008-01-21 02:14 . 2008-01-21 02:14	19968              c:\windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.0.6000.16609_none_4c56cf70d52c8670\sermouse.sys
+ 2008-01-21 02:14 . 2008-01-21 02:14	15872              c:\windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.0.6000.16609_none_4c56cf70d52c8670\mouhid.sys
+ 2008-01-21 02:14 . 2008-01-21 02:14	34360              c:\windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.0.6000.16609_none_4c56cf70d52c8670\mouclass.sys
+ 2008-01-21 02:14 . 2008-01-21 02:14	54784              c:\windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.0.6000.16609_none_4c56cf70d52c8670\i8042prt.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	20024              c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\viaide.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	17976              c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\intelide.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	19000              c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\cmdide.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	17976              c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\amdide.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	17464              c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\aliide.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	20024              c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\viaide.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	45112              c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\pciidex.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	16440              c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\pciide.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	28728              c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\msahci.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	17976              c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\intelide.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	19000              c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\cmdide.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	21560              c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	17976              c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\amdide.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	17464              c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\aliide.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	52608              c:\windows\winsxs\x86_msdv.inf_31bf3856ad364e35_6.0.6001.18000_none_2736ff65812bdc6d\msdv.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	94776              c:\windows\winsxs\x86_msdsm.inf_31bf3856ad364e35_6.0.6001.18000_none_ca4742b4db8b917d\msdsm.sys
+ 2006-11-02 06:34 . 2006-10-20 01:14	69632              c:\windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6000.16386_none_815e96e1b0e084be\MSBuild.exe
+ 2008-01-21 02:32 . 2008-01-21 02:32	41984              c:\windows\winsxs\x86_monitor.inf_31bf3856ad364e35_6.0.6001.18000_none_4303417980442e51\monitor.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32	18432              c:\windows\winsxs\x86_modemcsa.inf_31bf3856ad364e35_6.0.6001.18000_none_1a2c07344ad1390e\MODEMCSA.sys
+ 2006-11-02 08:33 . 2006-11-02 09:38	34304              c:\windows\winsxs\x86_microsoft.windows.isolationautomation_6595b64144ccf1df_1.0.0.0_none_35d357a66c38ade4\sxsoa.dll
+ 2006-11-02 08:55 . 2006-11-02 09:46	39936              c:\windows\winsxs\x86_microsoft.windows.h..uetooth-driverclass_31bf3856ad364e35_6.0.6001.18000_none_84e4ea4562dcf212\bthserv.dll
+ 2006-11-02 08:54 . 2006-11-02 09:46	15360              c:\windows\winsxs\x86_microsoft.windows.h..monitor-driverclass_31bf3856ad364e35_6.0.6000.16386_none_57aa5b7f14b4d358\montr_ci.dll
+ 2008-01-21 02:14 . 2008-01-21 02:14	35328              c:\windows\winsxs\x86_microsoft.windows.h..display-driverclass_31bf3856ad364e35_6.0.6000.20734_none_4217a653ac61f6c0\dispci.dll
+ 2008-01-21 02:14 . 2008-01-21 02:14	35328              c:\windows\winsxs\x86_microsoft.windows.h..display-driverclass_31bf3856ad364e35_6.0.6000.16609_none_41b37abe932781d6\dispci.dll
+ 2008-01-21 02:14 . 2008-01-21 02:14	12800              c:\windows\winsxs\x86_microsoft.windows.h..battery-driverclass_31bf3856ad364e35_6.0.6000.20734_none_1864c95162e4e77d\batt.dll
+ 2008-01-21 02:14 . 2008-01-21 02:14	12800              c:\windows\winsxs\x86_microsoft.windows.h..battery-driverclass_31bf3856ad364e35_6.0.6000.16609_none_18009dbc49aa7293\batt.dll
+ 2006-11-02 08:35 . 2006-11-02 09:46	32768              c:\windows\winsxs\x86_microsoft.windows.h...sdhost-driverclass_31bf3856ad364e35_6.0.6001.18000_none_c2f17878c82f85ef\sdhcinst.dll
+ 2006-11-02 07:18 . 2006-11-02 09:47	77824              c:\windows\winsxs\x86_microsoft.interop.security.azroles_31bf3856ad364e35_6.0.6000.16386_none_155c2822e3529886\Microsoft.Interop.Security.AzRoles.dll
+ 2006-11-02 08:55 . 2006-11-02 09:46	79360              c:\windows\winsxs\x86_microsoft-windows-xwizards-registration_31bf3856ad364e35_6.0.6000.16386_none_16e20c08ebb573de\xwreg.dll
+ 2006-11-02 08:32 . 2006-11-02 09:46	36352              c:\windows\winsxs\x86_microsoft-windows-xcopy_31bf3856ad364e35_6.0.6000.16386_none_60bee8acf7612ea7\xcopy.exe
+ 2006-11-02 09:16 . 2006-11-02 09:46	20992              c:\windows\winsxs\x86_microsoft-windows-wsd-challengecomponent_31bf3856ad364e35_6.0.6000.16386_none_2240e747a669f6a5\wsdchngr.dll
+ 2006-11-02 08:33 . 2006-11-02 09:45	15872              c:\windows\winsxs\x86_microsoft-windows-wrp-integrity-client_31bf3856ad364e35_6.0.6000.16386_none_29080b40ee5b20f1\sfc.exe
+ 2006-11-02 12:34 . 2006-11-02 12:34	36864              c:\windows\winsxs\x86_microsoft-windows-wpd-legacywmdmapi_31bf3856ad364e35_6.0.6001.18000_none_59aa91436faa8e2e\wmdmps.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34	31744              c:\windows\winsxs\x86_microsoft-windows-wpd-legacywmdmapi_31bf3856ad364e35_6.0.6001.18000_none_59aa91436faa8e2e\wmdmlog.dll
+ 2006-11-02 08:41 . 2006-11-02 09:46	43520              c:\windows\winsxs\x86_microsoft-windows-wmi-win32-provider_31bf3856ad364e35_6.0.6001.18000_none_c6cb05b6765124d9\WMIPSESS.dll
+ 2006-11-02 08:41 . 2006-11-02 09:46	39936              c:\windows\winsxs\x86_microsoft-windows-wmi-win32-provider_31bf3856ad364e35_6.0.6001.18000_none_c6cb05b6765124d9\wmipdfs.dll
+ 2006-11-02 08:41 . 2006-11-02 09:46	43520              c:\windows\winsxs\x86_microsoft-windows-wmi-time-provider_31bf3856ad364e35_6.0.6001.18000_none_ed321ab4287c62df\wmitimep.dll
+ 2006-11-02 08:41 . 2006-11-02 09:46	18944              c:\windows\winsxs\x86_microsoft-windows-wmi-management-snapins_31bf3856ad364e35_6.0.6001.18000_none_9be5ddb8baf2bc00\MMFUtil.dll
+ 2006-11-02 08:41 . 2006-11-02 09:46	35840              c:\windows\winsxs\x86_microsoft-windows-wmi-krnlprov-provider_31bf3856ad364e35_6.0.6001.18000_none_e3b0c3fff516edba\KrnlProv.dll
+ 2006-11-02 08:41 . 2006-11-02 09:46	36352              c:\windows\winsxs\x86_microsoft-windows-wmi-consumers_31bf3856ad364e35_6.0.6001.18000_none_4ad2276858e160c5\SMTPCons.dll
+ 2006-11-02 08:55 . 2006-11-02 09:46	14848              c:\windows\winsxs\x86_microsoft-windows-wlancoinstaller_31bf3856ad364e35_6.0.6000.16386_none_4c8534fe5ef30d7c\wlaninst.dll
+ 2006-11-02 08:44 . 2006-11-02 09:45	34304              c:\windows\winsxs\x86_microsoft-windows-winlogon-tools_31bf3856ad364e35_6.0.6000.16386_none_923cb7d99010c685\wlrmdr.exe
+ 2006-11-02 08:44 . 2006-11-02 09:45	14336              c:\windows\winsxs\x86_microsoft-windows-winlogon-tools_31bf3856ad364e35_6.0.6000.16386_none_923cb7d99010c685\mpnotify.exe
+ 2006-11-02 08:44 . 2006-11-02 09:46	15360              c:\windows\winsxs\x86_microsoft-windows-winlogon-sysntfy_31bf3856ad364e35_6.0.6001.18000_none_5572f3220fb3454e\sysntfy.dll
+ 2006-11-02 08:44 . 2006-11-02 09:46	10752              c:\windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wmsgapi.dll
+ 2006-11-02 08:32 . 2006-11-02 09:45	43520              c:\windows\winsxs\x86_microsoft-windows-whoami_31bf3856ad364e35_6.0.6000.16386_none_cc45bc5a84eb17ed\whoami.exe
+ 2006-11-02 08:49 . 2006-11-02 09:46	15360              c:\windows\winsxs\x86_microsoft-windows-whhelper_31bf3856ad364e35_6.0.6000.16386_none_6f1a1a0e40672825\whhelper.dll
+ 2006-11-02 08:32 . 2006-11-02 09:45	36352              c:\windows\winsxs\x86_microsoft-windows-where_31bf3856ad364e35_6.0.6000.16386_none_5b9c7723e13f8233\where.exe
+ 2006-11-02 12:33 . 2006-11-02 12:33	48640              c:\windows\winsxs\x86_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.0.6000.16386_none_9196a743555429b0\davclnt.dll
+ 2008-01-21 02:14 . 2008-01-21 02:14	35384              c:\windows\winsxs\x86_microsoft-windows-wdf-kernellibrary_31bf3856ad364e35_6.0.6000.20734_none_74da07c339f7e0f2\WdfLdr.sys
+ 2008-01-21 02:14 . 2008-01-21 02:14	35384              c:\windows\winsxs\x86_microsoft-windows-wdf-kernellibrary_31bf3856ad364e35_6.0.6000.16609_none_7475dc2e20bd6c08\WdfLdr.sys
+ 2006-11-02 08:48 . 2006-11-02 09:46	41984              c:\windows\winsxs\x86_microsoft-windows-wab-core_31bf3856ad364e35_6.0.6002.18005_none_570ee68146eaef3c\wabimp.dll
+ 2006-11-02 08:48 . 2006-11-02 09:46	41984              c:\windows\winsxs\x86_microsoft-windows-wab-core_31bf3856ad364e35_6.0.6001.18000_none_55236d7549c923f0\wabimp.dll
+ 2006-11-02 08:48 . 2006-11-02 09:45	66048              c:\windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.0.6002.18005_none_4494d68cd4b469ae\wabmig.exe
+ 2006-11-02 08:48 . 2006-11-02 09:46	33280              c:\windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.0.6002.18005_none_4494d68cd4b469ae\wabfind.dll
+ 2006-11-02 08:48 . 2006-11-02 09:45	66048              c:\windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.0.6001.18000_none_42a95d80d7929e62\wabmig.exe
+ 2006-11-02 08:48 . 2006-11-02 09:46	33280              c:\windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.0.6001.18000_none_42a95d80d7929e62\wabfind.dll
+ 2006-11-02 09:13 . 2006-11-02 09:46	32256              c:\windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_6.0.6000.16386_none_acab9aecacae685d\wups2.dll
+ 2006-11-02 09:13 . 2006-11-02 09:46	41472              c:\windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_6.0.6000.16386_none_acab9aecacae685d\wuauclt.exe
+ 2006-11-02 12:33 . 2006-11-02 12:33	12800              c:\windows\winsxs\x86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6002.18005_none_347fb41db0752753\wiatrace.dll
+ 2006-11-02 12:33 . 2006-11-02 12:33	12800              c:\windows\winsxs\x86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6001.18000_none_32943b11b3535c07\wiatrace.dll
+ 2006-11-02 09:13 . 2006-11-02 09:46	30720              c:\windows\winsxs\x86_microsoft-windows-w..pdateclient-activex_31bf3856ad364e35_6.0.6000.16386_none_3cc795796625f35c\wuapp.exe
+ 2006-11-02 09:13 . 2006-11-02 09:46	22016              c:\windows\winsxs\x86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_6.0.6000.16386_none_92bcd538c06ec160\wups.dll
+ 2006-11-02 09:13 . 2006-11-02 09:46	76800              c:\windows\winsxs\x86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_6.0.6000.16386_none_92bcd538c06ec160\wudriver.dll
+ 2006-11-02 08:58 . 2006-11-02 09:46	14336              c:\windows\winsxs\x86_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.0.6000.16386_none_024e4071fa6fea95\wshelper.dll
+ 2006-11-02 08:58 . 2006-11-02 09:46	48640              c:\windows\winsxs\x86_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.0.6000.16386_none_024e4071fa6fea95\winsockhc.dll
+ 2006-11-02 12:33 . 2006-11-02 12:33	31232              c:\windows\winsxs\x86_microsoft-windows-w..ion-twaincomponents_31bf3856ad364e35_6.0.6000.16386_none_86fb724c5f4594fa	wunk_32.exe
+ 2006-11-02 12:33 . 2006-11-02 12:33	49680              c:\windows\winsxs\x86_microsoft-windows-w..ion-twaincomponents_31bf3856ad364e35_6.0.6000.16386_none_86fb724c5f4594fa	wunk_16.exe
+ 2006-11-02 12:33 . 2006-11-02 12:33	50688              c:\windows\winsxs\x86_microsoft-windows-w..ion-twaincomponents_31bf3856ad364e35_6.0.6000.16386_none_86fb724c5f4594fa	wain_32.dll
+ 2006-11-02 12:33 . 2006-11-02 12:33	94784              c:\windows\winsxs\x86_microsoft-windows-w..ion-twaincomponents_31bf3856ad364e35_6.0.6000.16386_none_86fb724c5f4594fa	wain.dll
+ 2006-11-02 12:33 . 2006-11-02 12:33	61168              c:\windows\winsxs\x86_microsoft-windows-video-for-windows16_31bf3856ad364e35_6.0.6000.16386_none_5dc33d5d7a504f78\msacm.dll
+ 2006-11-02 12:33 . 2006-11-02 12:33	28160              c:\windows\winsxs\x86_microsoft-windows-video-for-windows16_31bf3856ad364e35_6.0.6000.16386_none_5dc33d5d7a504f78\mciwave.drv
+ 2006-11-02 12:33 . 2006-11-02 12:33	25264              c:\windows\winsxs\x86_microsoft-windows-video-for-windows16_31bf3856ad364e35_6.0.6000.16386_none_5dc33d5d7a504f78\mciseq.drv
+ 2006-11-02 12:33 . 2006-11-02 12:33	73376              c:\windows\winsxs\x86_microsoft-windows-video-for-windows16_31bf3856ad364e35_6.0.6000.16386_none_5dc33d5d7a504f78\mciavi.drv
+ 2006-11-02 12:33 . 2006-11-02 12:33	69584              c:\windows\winsxs\x86_microsoft-windows-video-for-windows16_31bf3856ad364e35_6.0.6000.16386_none_5dc33d5d7a504f78\avicap.dll
+ 2006-11-02 09:03 . 2006-11-02 09:46	65024              c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.18158_none_93ea5cdf8609b416\avicap32.dll
+ 2006-11-02 09:03 . 2006-11-02 09:46	12800              c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.18049_none_93f62b2f8600b455\msrle32.dll
+ 2006-11-02 09:03 . 2006-11-02 09:46	82944              c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.18049_none_93f62b2f8600b455\mciavi32.dll
+ 2006-11-02 09:03 . 2006-11-02 09:46	65024              c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.18049_none_93f62b2f8600b455\avicap32.dll
+ 2006-11-02 09:03 . 2006-11-02 09:46	12800              c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18270_none_91e6450388fad1ce\msrle32.dll
+ 2006-11-02 09:03 . 2006-11-02 09:46	82944              c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18270_none_91e6450388fad1ce\mciavi32.dll
+ 2006-11-02 09:03 . 2006-11-02 09:46	65024              c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18270_none_91e6450388fad1ce\avicap32.dll
+ 2006-11-02 09:03 . 2006-11-02 09:46	12800              c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18000_none_9231f0ab88c213e9\msrle32.dll
+ 2006-11-02 09:03 . 2006-11-02 09:46	82944              c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18000_none_9231f0ab88c213e9\mciavi32.dll
+ 2006-11-02 09:03 . 2006-11-02 09:46	65024              c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18000_none_9231f0ab88c213e9\avicap32.dll

booddha · Answer

Ca c'est pas bon 

c:\users\karim\Downloads\ComboFix.exe  

Combofix doit être sur le bureau. Suis bien les instructions 

On recommence encore une fois Combofix (supprime le de là c:\users\karim\Downloads\ComboFix.exe ) 
Si il n'y a pas de solution c'est qu'il n'y a pas de problème.

eldar · Answer

+ 2006-11-02 12:33 . 2006-11-02 12:33	81920              c:\windows\winsxs\x86_microsoft-windows-vcm-core-codecs_31bf3856ad364e35_6.0.6000.16386_none_6a6bff15db84b924\iccvid.dll
+ 2006-11-02 12:33 . 2006-11-02 12:33	28160              c:\windows\winsxs\x86_microsoft-windows-v..or-windows16-system_31bf3856ad364e35_6.0.6000.16386_none_154ebb74cbcd1be0\mciwave.drv
+ 2006-11-02 12:33 . 2006-11-02 12:33	25264              c:\windows\winsxs\x86_microsoft-windows-v..or-windows16-system_31bf3856ad364e35_6.0.6000.16386_none_154ebb74cbcd1be0\mciseq.drv
+ 2006-11-02 12:33 . 2006-11-02 12:33	73376              c:\windows\winsxs\x86_microsoft-windows-v..or-windows16-system_31bf3856ad364e35_6.0.6000.16386_none_154ebb74cbcd1be0\mciavi.drv
+ 2006-11-02 12:33 . 2006-11-02 12:33	69584              c:\windows\winsxs\x86_microsoft-windows-v..or-windows16-system_31bf3856ad364e35_6.0.6000.16386_none_154ebb74cbcd1be0\avicap.dll
+ 2006-11-02 08:58 . 2006-11-02 09:46	37888              c:\windows\winsxs\x86_microsoft-windows-upnpssdp_31bf3856ad364e35_6.0.6001.18000_none_7fc972ebd13849b5\ssdpapi.dll
+ 2006-11-02 08:58 . 2006-11-02 09:46	41472              c:\windows\winsxs\x86_microsoft-windows-upnpdevicehost_31bf3856ad364e35_6.0.6001.18000_none_c1e834753483fdcf\udhisapi.dll
+ 2006-11-02 08:58 . 2006-11-02 09:46	17408              c:\windows\winsxs\x86_microsoft-windows-unimodem-voice_31bf3856ad364e35_6.0.6000.16386_none_4253ec0651d61b6b\umdmxfrm.dll
+ 2006-11-02 08:58 . 2006-11-02 09:46	18432              c:\windows\winsxs\x86_microsoft-windows-unimodem-voice_31bf3856ad364e35_6.0.6000.16386_none_4253ec0651d61b6b\serwvdrv.dll
+ 2006-11-02 08:58 . 2006-11-02 09:46	16384              c:\windows\winsxs\x86_microsoft-windows-unimodem-core_31bf3856ad364e35_6.0.6001.18000_none_949832cbd48def6a\uniplat.dll
+ 2006-11-02 08:58 . 2006-11-02 09:46	58880              c:\windows\winsxs\x86_microsoft-windows-unimodem-core-atmini_31bf3856ad364e35_6.0.6000.16386_none_87f7eece4e445729\unimdmat.dll
+ 2006-11-02 08:58 . 2006-11-02 09:46	34816              c:\windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.0.6002.18005_none_f6ed1a9a1bcc8805\uicom.dll
+ 2006-11-02 08:58 . 2006-11-02 09:46	34816              c:\windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.0.6001.18000_none_f501a18e1eaabcb9\uicom.dll
+ 2008-01-21 02:14 . 2008-01-21 02:14	27136              c:\windows\winsxs\x86_microsoft-windows-trustedinstaller_31bf3856ad364e35_6.0.6000.20734_none_8f94230d69327e03\TrustedInstaller.exe
+ 2008-01-21 02:14 . 2008-01-21 02:14	27136              c:\windows\winsxs\x86_microsoft-windows-trustedinstaller_31bf3856ad364e35_6.0.6000.16609_none_8f2ff7784ff80919\TrustedInstaller.exe
+ 2006-11-02 08:39 . 2006-11-02 09:46	18944              c:\windows\winsxs\x86_microsoft-windows-trapi_31bf3856ad364e35_6.0.6000.16386_none_5853e0fc96f5e8a0\TRAPI.dll
+ 2006-11-02 08:30 . 2006-11-02 09:46	40960              c:\windows\winsxs\x86_microsoft-windows-tpm-adminsnapin_31bf3856ad364e35_6.0.6001.18000_none_777d16eedf412426	pmcompc.dll
+ 2006-11-02 08:32 . 2006-11-02 09:45	28160              c:\windows\winsxs\x86_microsoft-windows-timeout_31bf3856ad364e35_6.0.6000.16386_none_8a2daac4c959a079	imeout.exe
+ 2006-11-02 12:34 . 2006-11-02 12:34	57856              c:\windows\winsxs\x86_microsoft-windows-telnet-server_31bf3856ad364e35_6.0.6001.18000_none_9307dcf14f15ce10	lntadmn.exe
+ 2006-11-02 08:58 . 2006-11-02 09:45	27136              c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\NETSTAT.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:45	11264              c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\MRINFO.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:45	10240              c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\finger.exe
+ 2006-11-02 08:58 . 2006-11-02 09:44	19968              c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\ARP.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:45	27136              c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18000_none_32c6f3aa4ede22b3\NETSTAT.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:45	11264              c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18000_none_32c6f3aa4ede22b3\MRINFO.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:45	10240              c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18000_none_32c6f3aa4ede22b3\finger.exe
+ 2006-11-02 08:58 . 2006-11-02 09:44	19968              c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18000_none_32c6f3aa4ede22b3\ARP.EXE
+ 2006-11-02 08:40 . 2006-11-02 09:46	16896              c:\windows\winsxs\x86_microsoft-windows-taskscheduler-proxy_31bf3856ad364e35_6.0.6000.16386_none_7b87175bbe5d3c57\TSChannel.dll
+ 2006-11-02 09:16 . 2006-11-02 09:45	10752              c:\windows\winsxs\x86_microsoft-windows-tapisetup_31bf3856ad364e35_6.0.6001.18000_none_69f32ac39b2a05e1\TapiUnattend.exe
+ 2006-11-02 09:16 . 2006-11-02 09:46	28160              c:\windows\winsxs\x86_microsoft-windows-tapicore_31bf3856ad364e35_6.0.6000.16386_none_e203168e49ab8983	apilua.dll
+ 2006-11-02 06:50 . 2006-09-18 21:49	19216              c:\windows\winsxs\x86_microsoft-windows-tapicore_31bf3856ad364e35_6.0.6000.16386_none_e203168e49ab8983	api.dll
+ 2006-11-02 09:16 . 2006-11-02 09:45	31232              c:\windows\winsxs\x86_microsoft-windows-tapicore_31bf3856ad364e35_6.0.6000.16386_none_e203168e49ab8983\dialer.exe
+ 2006-11-02 12:33 . 2006-11-02 12:33	49664              c:\windows\winsxs\x86_microsoft-windows-t..recognition-gesture_31bf3856ad364e35_6.0.6000.16386_none_b227edadd7b11824\mshwgst.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34	68096              c:\windows\winsxs\x86_microsoft-windows-t..platform-input-core_31bf3856ad364e35_6.0.6002.18005_none_d2fbc584d9efb14a\TabSvc.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34	68096              c:\windows\winsxs\x86_microsoft-windows-t..platform-input-core_31bf3856ad364e35_6.0.6001.18000_none_d1104c78dccde5fe\TabSvc.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34	39936              c:\windows\winsxs\x86_microsoft-windows-t..latform-input-proxy_31bf3856ad364e35_6.0.6000.16386_none_b782b05e0e0751d7	pcps.dll
+ 2006-11-02 09:02 . 2006-11-02 09:46	17920              c:\windows\winsxs\x86_microsoft-windows-t..inalservices-drprov_31bf3856ad364e35_6.0.6000.16386_none_cba2057f1c57e33a\drprov.dll
+ 2006-11-02 08:38 . 2006-11-02 09:46	10752              c:\windows\winsxs\x86_microsoft-windows-t..chxreadingstringime_31bf3856ad364e35_6.0.6000.16386_none_0d7e8dcef4069e0f\CHxReadingStringIME.dll
+ 2006-11-02 08:40 . 2006-11-02 09:46	73216              c:\windows\winsxs\x86_microsoft-windows-t..cheduler-apis-proxy_31bf3856ad364e35_6.0.6000.16386_none_d37d336e1eaadcc3\TaskSchdPS.dll
+ 2006-11-02 08:38 . 2006-11-02 09:46	83456              c:\windows\winsxs\x86_microsoft-windows-t..cesframework-msctfp_31bf3856ad364e35_6.0.6000.16386_none_c8a69d70f20633c3\msctfp.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35	17408              c:\windows\winsxs\x86_microsoft-windows-t..-deployment-package_31bf3856ad364e35_6.0.6000.16386_none_5c96ddb586a46863\TFTP.EXE
+ 2006-11-02 08:47 . 2006-11-02 09:45	81920              c:\windows\winsxs\x86_microsoft-windows-systempropertiesremote_31bf3856ad364e35_6.0.6000.16386_none_929e808d0ee289c4\SystemPropertiesRemote.exe
+ 2006-11-02 12:33 . 2006-11-02 12:33	11264              c:\windows\winsxs\x86_microsoft-windows-sysprep-spwinsat_31bf3856ad364e35_6.0.6000.16386_none_50fdbf058097a590\spwinsat.dll
+ 2006-11-02 12:33 . 2006-11-02 12:33	16384              c:\windows\winsxs\x86_microsoft-windows-speech-userexperience_31bf3856ad364e35_6.0.6002.18005_none_1df5691748ee6b08\SpeechUXPS.DLL
+ 2006-11-02 12:33 . 2006-11-02 12:33	16384              c:\windows\winsxs\x86_microsoft-windows-speech-userexperience_31bf3856ad364e35_6.0.6001.18000_none_1c09f00b4bcc9fbc\SpeechUXPS.DLL
+ 2006-11-02 08:32 . 2006-11-02 09:45	19968              c:\windows\winsxs\x86_microsoft-windows-sort_31bf3856ad364e35_6.0.6000.16386_none_a98761571c97d992\sort.exe
+ 2006-11-02 08:58 . 2006-11-02 09:45	12800              c:\windows\winsxs\x86_microsoft-windows-snmp-trap-service_31bf3856ad364e35_6.0.6001.18000_none_cf8afedd3f67da88\snmptrap.exe
+ 2006-11-02 08:58 . 2006-11-02 07:46	43131              c:\windows\winsxs\x86_microsoft-windows-snmp-mgmt-api_31bf3856ad364e35_6.0.6000.16386_none_e9559d75b69c210f\mib.bin
+ 2006-11-02 08:58 . 2006-11-02 09:46	18944              c:\windows\winsxs\x86_microsoft-windows-snmp-mgmt-api_31bf3856ad364e35_6.0.6000.16386_none_e9559d75b69c210f\mgmtapi.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34	93696              c:\windows\winsxs\x86_microsoft-windows-snmp-evntwin_31bf3856ad364e35_6.0.6000.16386_none_b49a0215089117a2\evntwin.exe
+ 2006-11-02 12:34 . 2006-11-02 12:34	20480              c:\windows\winsxs\x86_microsoft-windows-snmp-evntcmd_31bf3856ad364e35_6.0.6000.16386_none_b6ce05a5071a11c0\evntcmd.exe
+ 2006-11-02 08:58 . 2006-11-02 09:46	22528              c:\windows\winsxs\x86_microsoft-windows-snmp-common-api_31bf3856ad364e35_6.0.6000.16386_none_30e5332772078b0d\snmpapi.dll
+ 2006-11-02 08:43 . 2006-11-02 09:46	66560              c:\windows\winsxs\x86_microsoft-windows-smartcardsubsystem_31bf3856ad364e35_6.0.6002.18005_none_19e8b8b06714b3ae\SCardDlg.dll
+ 2006-11-02 08:43 . 2006-11-02 09:46	66560              c:\windows\winsxs\x86_microsoft-windows-smartcardsubsystem_31bf3856ad364e35_6.0.6001.18000_none_17fd3fa469f2e862\SCardDlg.dll
+ 2006-11-02 08:30 . 2006-11-02 09:46	20480              c:\windows\winsxs\x86_microsoft-windows-sisbkup_31bf3856ad364e35_6.0.6000.16386_none_5ab082a960b1481b\sisbkup.dll
+ 2006-11-02 08:33 . 2006-11-02 09:45	67584              c:\windows\winsxs\x86_microsoft-windows-sigverif_31bf3856ad364e35_6.0.6000.16386_none_b962c260fe7391d7\sigverif.exe
+ 2006-11-02 12:34 . 2006-11-02 12:34	66048              c:\windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.0.6002.18005_none_d0c824c923c9e622\sbdrop.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34	66048              c:\windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.0.6001.18000_none_cedcabbd26a81ad6\sbdrop.dll
+ 2006-11-02 08:47 . 2006-11-02 09:46	13824              c:\windows\winsxs\x86_microsoft-windows-shpafact_31bf3856ad364e35_6.0.6000.16386_none_cf3f4378f95db568\shpafact.dll
+ 2006-11-02 08:32 . 2006-11-02 09:45	46080              c:\windows\winsxs\x86_microsoft-windows-setx_31bf3856ad364e35_6.0.6000.16386_none_aa4013d31c25521a\setx.exe
+ 2008-01-21 02:06 . 2008-01-21 02:06	51712              c:\windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6001.18000_none_095f6148c74a7a64\wrpint.dll
+ 2008-01-21 02:06 . 2008-01-21 02:06	83968              c:\windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6001.18000_none_095f6148c74a7a64\wmiutils.dll
+ 2008-01-21 02:06 . 2008-01-21 02:06	30208              c:\windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6001.18000_none_095f6148c74a7a64\wbemprox.dll
+ 2008-01-21 02:06 . 2008-01-21 02:06	35328              c:\windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6001.18000_none_095f6148c74a7a64\mspatcha.dll
+ 2008-01-21 02:06 . 2008-01-21 02:06	99840              c:\windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6001.18000_none_095f6148c74a7a64\DrUpdate.dll
+ 2008-01-21 02:06 . 2008-01-21 02:06	22016              c:\windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6001.18000_none_095f6148c74a7a64\CbsMsg.dll
+ 2006-11-02 08:33 . 2006-11-02 09:46	50688              c:\windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6000.16386_none_07289f4cca5f6990\wrpint.dll
+ 2006-11-02 08:36 . 2006-11-02 09:45	99840              c:\windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6000.16386_none_07289f4cca5f6990\poqexec.exe
+ 2006-11-02 08:33 . 2006-11-02 09:46	95232              c:\windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6000.16386_none_07289f4cca5f6990\DrUpdate.dll
+ 2008-01-21 02:14 . 2008-01-21 02:14	18432              c:\windows\winsxs\x86_microsoft-windows-servicingstack-msg_31bf3856ad364e35_6.0.6000.20734_none_3d26597c47132f8e\CbsMsg.dll
+ 2008-01-21 02:00 . 2008-01-21 02:00	18432              c:\windows\winsxs\x86_microsoft-windows-servicingstack-msg_31bf3856ad364e35_6.0.6000.20728_none_3d352a90470778f9\CbsMsg.dll
+ 2008-01-21 02:14 . 2008-01-21 02:14	18432              c:\windows\winsxs\x86_microsoft-windows-servicingstack-msg_31bf3856ad364e35_6.0.6000.16609_none_3cc22de72dd8baa4\CbsMsg.dll
+ 2008-01-21 02:00 . 2008-01-21 02:00	18432              c:\windows\winsxs\x86_microsoft-windows-servicingstack-msg_31bf3856ad364e35_6.0.6000.16603_none_3cbc2c2b2dde229a\CbsMsg.dll
+ 2006-11-02 08:37 . 2006-11-02 09:45	14848              c:\windows\winsxs\x86_microsoft-windows-secinit_31bf3856ad364e35_6.0.6000.16386_none_85812e7bd013283b\secinit.exe
+ 2006-11-02 08:48 . 2006-11-02 09:44	10240              c:\windows\winsxs\x86_microsoft-windows-scrnsave_31bf3856ad364e35_6.0.6000.16386_none_df08df07dd79c713\scrnsave.scr
+ 2006-11-02 09:11 . 2006-11-02 09:46	57856              c:\windows\winsxs\x86_microsoft-windows-scripto_31bf3856ad364e35_6.0.6000.16386_none_3fabc387d4b1774a\scripto.dll
+ 2006-11-02 08:43 . 2006-11-02 09:46	23040              c:\windows\winsxs\x86_microsoft-windows-s..ty-protectedstorage_31bf3856ad364e35_6.0.6001.18000_none_4849149a305ec4a4\pstorsvc.dll
+ 2006-11-02 08:43 . 2006-11-02 09:46	42496              c:\windows\winsxs\x86_microsoft-windows-s..ty-protectedstorage_31bf3856ad364e35_6.0.6001.18000_none_4849149a305ec4a4\pstorec.dll
+ 2006-11-02 08:43 . 2006-11-02 09:46	18944              c:\windows\winsxs\x86_microsoft-windows-s..ty-cng-keyisolation_31bf3856ad364e35_6.0.6000.16386_none_c205da6ff92ec6ef\keyiso.dll
+ 2006-11-02 08:47 . 2006-11-02 09:45	81920              c:\windows\winsxs\x86_microsoft-windows-s..ropertiesprotection_31bf3856ad364e35_6.0.6000.16386_none_617b94d21f98a2cd\SystemPropertiesProtection.exe
+ 2006-11-02 08:47 . 2006-11-02 09:45	81920              c:\windows\winsxs\x86_microsoft-windows-s..pertiescomputername_31bf3856ad364e35_6.0.6000.16386_none_2e3c70553f52ed2a\SystemPropertiesComputerName.exe
+ 2006-11-02 08:47 . 2006-11-02 09:45	81920              c:\windows\winsxs\x86_microsoft-windows-s..opertiesperformance_31bf3856ad364e35_6.0.6000.16386_none_589feb3405ef2c5a\SystemPropertiesPerformance.exe
+ 2006-11-02 08:47 . 2006-11-02 09:45	81920              c:\windows\winsxs\x86_microsoft-windows-s..mpropertieshardware_31bf3856ad364e35_6.0.6000.16386_none_3ec3c343d60f49b4\SystemPropertiesHardware.exe
+ 2006-11-02 08:47 . 2006-11-02 09:45	81920              c:\windows\winsxs\x86_microsoft-windows-s..mpropertiesadvanced_31bf3856ad364e35_6.0.6000.16386_none_f511c5dbe75b5b10\SystemPropertiesAdvanced.exe
+ 2006-11-02 12:34 . 2006-11-02 12:34	43520              c:\windows\winsxs\x86_microsoft-windows-s..mib-extension-agent_31bf3856ad364e35_6.0.6000.16386_none_7644b9541de460a1\hostmib.dll
+ 2006-11-02 08:35 . 2006-11-02 09:45	31744              c:\windows\winsxs\x86_microsoft-windows-s..llercommandlinetool_31bf3856ad364e35_6.0.6000.16386_none_7237791cd7c1a1bc\sc.exe
+ 2006-11-02 08:43 . 2006-11-02 09:44	13824              c:\windows\winsxs\x86_microsoft-windows-s..line-user-interface_31bf3856ad364e35_6.0.6000.16386_none_dab0b0c8dfecf279\cmdkey.exe
+ 2006-11-02 12:34 . 2006-11-02 12:34	35840              c:\windows\winsxs\x86_microsoft-windows-s..ib2-extension-agent_31bf3856ad364e35_6.0.6000.16386_none_8ea574a4160d7100\lmmib2.dll
+ 2006-11-02 08:32 . 2006-11-02 09:46	10240              c:\windows\winsxs\x86_microsoft-windows-s..gevolumewmiprovider_31bf3856ad364e35_6.0.6001.18000_none_17d3c60709ecb009\dfrgifps.dll
+ 2006-11-02 08:47 . 2006-11-02 09:45	81920              c:\windows\winsxs\x86_microsoft-windows-s..executionprevention_31bf3856ad364e35_6.0.6000.16386_none_c7aca7a727ae5f8e\SystemPropertiesDataExecutionPrevention.exe
+ 2006-11-02 08:35 . 2006-11-02 09:46	41984              c:\windows\winsxs\x86_microsoft-windows-s..ddriverprovider-dll_31bf3856ad364e35_6.0.6000.16386_none_705a854bb7dec2c8\signdrv.dll
+ 2006-11-02 08:48 . 2006-11-02 09:45	57856              c:\windows\winsxs\x86_microsoft-windows-runlegacycplelevated_31bf3856ad364e35_6.0.6000.16386_none_0ed54d21f861c4c1\RunLegacyCPLElevated.exe
+ 2006-11-02 08:48 . 2006-11-02 09:45	44544              c:\windows\winsxs\x86_microsoft-windows-rundll32_31bf3856ad364e35_6.0.6000.16386_none_d5ce8f93adff8210undll32.exe
+ 2006-11-02 08:32 . 2006-11-02 09:45	16896              c:\windows\winsxs\x86_microsoft-windows-runas_31bf3856ad364e35_6.0.6000.16386_none_5db18748608251d3unas.exe
+ 2006-11-02 08:50 . 2006-11-02 09:46	43520              c:\windows\winsxs\x86_microsoft-windows-rpchelperclass_31bf3856ad364e35_6.0.6000.16386_none_bf3d525ec35ee9cd\RPCNDFP.dll
+ 2006-11-02 08:50 . 2006-11-02 09:46	27648              c:\windows\winsxs\x86_microsoft-windows-rpc-netsh_31bf3856ad364e35_6.0.6000.16386_none_b99a3fa3762195a0pcnsh.dll
+ 2006-11-02 08:57 . 2006-11-02 09:46	14848              c:\windows\winsxs\x86_microsoft-windows-rmcast_31bf3856ad364e35_6.0.6002.18005_none_5669453d850ccabc\wshrm.dll
+ 2006-11-02 08:57 . 2006-11-02 09:46	14848              c:\windows\winsxs\x86_microsoft-windows-rmcast_31bf3856ad364e35_6.0.6001.18069_none_5445ef4388138b25\wshrm.dll
+ 2006-11-02 08:57 . 2006-11-02 09:46	14848              c:\windows\winsxs\x86_microsoft-windows-rmcast_31bf3856ad364e35_6.0.6001.18000_none_547dcc3187eaff70\wshrm.dll
+ 2006-11-02 12:33 . 2006-11-02 12:33	15360              c:\windows\winsxs\x86_microsoft-windows-restore-acl-cmdline_31bf3856ad364e35_6.0.6000.16386_none_110e275ba0762f06\DDACLSys.dll
+ 2006-11-02 08:37 . 2006-11-02 09:45	14848              c:\windows\winsxs\x86_microsoft-windows-restartmanager_31bf3856ad364e35_6.0.6001.18000_none_803567cb241e9c20\RmClient.exe
+ 2006-11-02 12:34 . 2006-11-02 12:34	40960              c:\windows\winsxs\x86_microsoft-windows-remoteassistance-exe_31bf3856ad364e35_6.0.6001.18000_none_3758172c01e5ce47acpldlg.dll
+ 2006-11-02 09:00 . 2006-11-02 09:45	14336              c:\windows\winsxs\x86_microsoft-windows-regsvr32_31bf3856ad364e35_6.0.6000.16386_none_76205b553298875eegsvr32.exe
+ 2006-11-02 08:32 . 2006-11-02 09:46	13824              c:\windows\winsxs\x86_microsoft-windows-registry-editor_31bf3856ad364e35_6.0.6001.18000_none_f42eb564dbd8a697\clb.dll
+ 2006-11-02 08:32 . 2006-11-02 09:45	11776              c:\windows\winsxs\x86_microsoft-windows-recover_31bf3856ad364e35_6.0.6000.16386_none_83dc8bd2b7afee9eecover.exe
+ 2006-11-02 08:57 . 2006-11-02 09:46	36352              c:\windows\winsxs\x86_microsoft-windows-rasrtutils_31bf3856ad364e35_6.0.6001.18000_none_0d159410ea7a8f9dtutils.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35	29696              c:\windows\winsxs\x86_microsoft-windows-rasriplistener_31bf3856ad364e35_6.0.6000.16386_none_f97caf5c5fe6262f\iprip.dll
+ 2006-11-02 08:58 . 2006-11-02 09:45	16896              c:\windows\winsxs\x86_microsoft-windows-rasclienttools_31bf3856ad364e35_6.0.6001.18000_none_6f46cfc8a8b142a0asdial.exe
+ 2006-11-02 08:58 . 2006-11-02 09:46	22016              c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065asser.dll
+ 2006-11-02 08:58 . 2006-11-02 09:46	32768              c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065asmxs.dll
+ 2006-11-02 08:58 . 2006-11-02 09:46	22016              c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6001.18000_none_0de067e17a6f4519asser.dll
+ 2006-11-02 08:58 . 2006-11-02 09:46	32768              c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6001.18000_none_0de067e17a6f4519asmxs.dll
+ 2006-11-02 08:58 . 2006-11-02 09:45	16896              c:\windows\winsxs\x86_microsoft-windows-rasautodial_31bf3856ad364e35_6.0.6001.18000_none_0fd9feb665531f63asautou.exe
+ 2006-11-02 08:58 . 2006-11-02 09:46	10240              c:\windows\winsxs\x86_microsoft-windows-rasautodial_31bf3856ad364e35_6.0.6001.18000_none_0fd9feb665531f63asadhlp.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34	56320              c:\windows\winsxs\x86_microsoft-windows-r..stion-resolver-core_31bf3856ad364e35_6.0.6000.16386_none_9ec6c9da735276d0adarrs.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34	71680              c:\windows\winsxs\x86_microsoft-windows-r..stion-detector-core_31bf3856ad364e35_6.0.6000.16386_none_f6b1972f132d111cadardt.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35	17920              c:\windows\winsxs\x86_microsoft-windows-r..management-apilayer_31bf3856ad364e35_6.0.6000.16386_none_b5ca7c64c2f0aa05smps.dll

eldar · Answer

ComboFix 10-04-29.04 - karim 02/05/2010  10:12:31.4.2 - x86
Microsoft® Windows Vista(TM) Édition Familiale Basique   6.0.6002.2.1252.33.1036.18.3070.2020 [GMT 2:00]
Lancé depuis: c:\users\karim\Desktop\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((   Fichiers créés du 2010-04-02 au 2010-05-02  ))))))))))))))))))))))))))))))))))))
.

2010-05-02 08:17 . 2010-05-02 08:17	--------	d-----w-	c:\users\karim\AppData\Local	emp
2010-05-02 08:17 . 2010-05-02 08:17	--------	d-----w-	c:\users\Public\AppData\Local	emp
2010-05-02 08:17 . 2010-05-02 08:17	--------	d-----w-	c:\users\Default\AppData\Local	emp
2010-04-30 08:25 . 2010-04-30 08:25	--------	d-----w-	c:\program files\Sophos
2010-04-29 13:35 . 2010-04-29 13:35	--------	d-----w-	c:\users\karim\AppData\Roaming\Malwarebytes
2010-04-29 13:35 . 2010-03-29 22:46	38224	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
2010-04-29 13:35 . 2010-04-29 13:35	--------	d-----w-	c:\programdata\Malwarebytes
2010-04-29 13:35 . 2010-04-29 13:35	--------	d-----w-	c:\program files\Malwarebytes' Anti-Malware
2010-04-29 13:35 . 2010-03-29 22:45	20824	----a-w-	c:\windows\system32\drivers\mbam.sys
2010-04-29 11:54 . 2010-04-29 19:01	--------	d-----w-	c:\program files\ZHPDiag
2010-04-28 11:39 . 2010-04-30 08:02	--------	d-----w-	c:\program files\Spybot - Search & Destroy
2010-04-28 11:39 . 2010-04-30 07:59	--------	d-----w-	c:\programdata\Spybot - Search & Destroy
2010-04-28 09:25 . 2010-04-29 11:58	--------	d-----w-	c:\users\karim\AppData\Roaming\7B3960DB01DD648767E36140257E9AB4
2010-04-23 10:23 . 2010-04-23 10:23	93	----a-w-	c:\users\karim\AppData\Local\fusioncache.dat
2010-04-23 10:23 . 2010-04-23 10:23	--------	d-----w-	c:\users\karim\AppData\Local\ApplicationHistory
2010-04-23 10:18 . 2010-04-23 10:18	--------	d-----w-	c:\windows\system32\URTTEMP
2010-04-18 10:20 . 2010-04-18 10:20	85504	----a-w-	c:\users\karim\AppData\Roaming\SystemRequirementsLab\srlproxy_cyri_4.1.71.0A.dll
2010-04-15 10:15 . 2010-04-18 11:01	--------	d-----w-	c:\program files\EA Sports
2010-04-14 12:02 . 2010-02-23 11:10	212992	----a-w-	c:\windows\system32\drivers\mrxsmb10.sys
2010-04-14 12:02 . 2010-02-23 11:10	79360	----a-w-	c:\windows\system32\drivers\mrxsmb20.sys
2010-04-14 12:02 . 2010-02-23 11:10	106496	----a-w-	c:\windows\system32\drivers\mrxsmb.sys
2010-04-14 12:02 . 2010-02-18 14:07	3600776	----a-w-	c:\windows\system32
tkrnlpa.exe
2010-04-14 12:02 . 2010-02-18 14:07	3548040	----a-w-	c:\windows\system32
toskrnl.exe
2010-04-14 12:02 . 2010-03-05 14:01	420352	----a-w-	c:\windows\system32\vbscript.dll
2010-04-14 12:02 . 2010-02-18 14:07	904576	----a-w-	c:\windows\system32\drivers	cpip.sys
2010-04-14 12:02 . 2010-02-18 13:30	200704	----a-w-	c:\windows\system32\iphlpsvc.dll
2010-04-14 12:02 . 2010-02-18 11:28	25088	----a-w-	c:\windows\system32\drivers	unnel.sys
2010-04-14 11:54 . 2010-01-13 17:34	98304	----a-w-	c:\windows\system32\cabview.dll
2010-04-14 11:54 . 2009-12-23 11:33	172032	----a-w-	c:\windows\system32\wintrust.dll

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-05-02 08:10 . 2009-11-13 09:49	--------	d-----w-	c:\users\karim\AppData\Roaming\LimeWire
2010-05-02 08:04 . 2008-01-21 07:23	694498	----a-w-	c:\windows\system32\perfh00C.dat
2010-05-02 08:04 . 2008-01-21 07:23	133500	----a-w-	c:\windows\system32\perfc00C.dat
2010-05-02 07:03 . 2009-07-06 17:48	49159	----a-w-	c:\users\karim\AppData\Roaming
vModes.dat
2010-04-29 22:23 . 2010-03-31 20:08	--------	d-----w-	c:\users\karim\AppData\Roaming\vlc
2010-04-29 11:48 . 2008-03-20 21:44	--------	d-----w-	c:\programdata\NVIDIA
2010-04-29 09:37 . 2009-07-06 17:29	--------	d-----w-	c:\program files\GUILD WARS
2010-04-28 09:44 . 2008-03-20 21:45	--------	d--h--w-	c:\program files\InstallShield Installation Information
2010-04-25 14:23 . 2009-08-10 10:11	7592	----a-w-	c:\users\karim\AppData\Local\d3d9caps.dat
2010-04-18 10:21 . 2009-07-06 17:14	--------	d-----w-	c:\program files\SystemRequirementsLab
2010-04-18 10:20 . 2009-07-12 14:25	--------	d-----w-	c:\users\karim\AppData\Roaming\SystemRequirementsLab
2010-04-16 18:08 . 2010-03-30 08:34	--------	d-----w-	c:\programdata\NCH Software
2010-04-14 12:13 . 2006-11-02 11:18	--------	d-----w-	c:\program files\Windows Mail
2010-04-14 12:12 . 2008-03-20 22:18	--------	d-----w-	c:\programdata\Microsoft Help
2010-04-13 20:22 . 2010-03-30 08:34	--------	d-----w-	c:\program files\NCH Software
2010-03-30 08:35 . 2010-03-30 08:34	--------	d-----w-	c:\users\karim\AppData\Roaming\NCH Software
2010-03-29 17:59 . 2009-07-06 16:53	--------	d-----w-	c:\program files\Messenger Plus! Live
2010-03-28 21:04 . 2009-08-14 05:13	--------	d-----w-	c:\users\karim\AppData\Roaming\dvdcss
2010-03-24 18:17 . 2010-03-24 08:04	952768	----a-w-	c:\programdata\Adobe\Reader\8.2\ARM\32432\AdobeARM.exe
2010-03-24 18:17 . 2010-03-24 08:04	70584	----a-w-	c:\programdata\Adobe\Reader\8.2\ARM\32432\AdobeExtractFiles.dll
2010-03-24 18:17 . 2010-03-24 08:04	326056	----a-w-	c:\programdata\Adobe\Reader\8.2\ARM\32432\ReaderUpdater.exe
2010-03-24 18:17 . 2010-03-24 08:04	326056	----a-w-	c:\programdata\Adobe\Reader\8.2\ARM\32432\AcrobatUpdater.exe
2010-03-16 20:34 . 2009-10-29 20:58	--------	d-----w-	c:\program files\Replay Media Catcher
2010-03-16 20:28 . 2009-11-22 10:48	237568	----a-w-	c:\windows\system32mc_rtspdl.dll
2010-03-16 20:28 . 2009-11-22 10:48	156672	----a-w-	c:\windows\system32mc_fixasf.exe
2010-03-04 22:39 . 2010-03-04 22:39	--------	d-----w-	c:\users\karim\AppData\Roaming\Windows Live Writer
2010-02-25 20:54 . 2010-02-25 20:54	20648	----a-w-	c:\users\karim\AppData\Roaming\Mumble\Plugins\insurgency.dll
2010-02-25 20:54 . 2010-02-25 20:54	20648	----a-w-	c:\users\karim\AppData\Roaming\Mumble\Plugins\gmod.dll
2010-02-25 20:54 . 2010-02-25 20:54	20136	----a-w-	c:\users\karim\AppData\Roaming\Mumble\Plugins	f2.dll
2010-02-25 20:54 . 2010-02-25 20:54	17576	----a-w-	c:\users\karim\AppData\Roaming\Mumble\Plugins\sto.dll
2010-02-25 20:54 . 2010-02-25 20:54	17064	----a-w-	c:\users\karim\AppData\Roaming\Mumble\Plugins\lotro.dll
2010-02-25 20:54 . 2010-02-25 20:54	20648	----a-w-	c:\users\karim\AppData\Roaming\Mumble\Plugins\dods.dll
2010-02-25 20:54 . 2010-02-25 20:54	20648	----a-w-	c:\users\karim\AppData\Roaming\Mumble\Plugins\aoc.dll
2010-02-25 20:54 . 2010-02-25 20:54	17064	----a-w-	c:\users\karim\AppData\Roaming\Mumble\Plugins\l4d2.dll
2010-02-25 20:54 . 2010-02-25 20:54	16552	----a-w-	c:\users\karim\AppData\Roaming\Mumble\Plugins\arma2.dll
2010-02-25 08:20 . 2009-07-06 16:25	102424	----a-w-	c:\users\karim\AppData\Local\GDIPFONTCACHEV1.DAT
2010-02-24 08:16 . 2009-10-03 06:28	181632	------w-	c:\windows\system32\MpSigStub.exe
2010-02-23 06:39 . 2010-03-31 13:22	916480	----a-w-	c:\windows\system32\wininet.dll
2010-02-23 06:33 . 2010-03-31 13:22	71680	----a-w-	c:\windows\system32\iesetup.dll
2010-02-23 06:33 . 2010-03-31 13:22	109056	----a-w-	c:\windows\system32\iesysprep.dll
2010-02-23 04:55 . 2010-03-31 13:22	133632	----a-w-	c:\windows\system32\ieUnatt.exe
2010-02-12 10:32 . 2010-03-02 02:00	293376	----a-w-	c:\windows\system32\browserchoice.exe
2010-02-08 11:13 . 2010-02-08 11:13	86576	----a-w-	c:\users\karim\AppData\Roaming\Microsoft\Services Windows Live\Raccourci Galerie de Photos Windows Live.exe
2010-02-08 11:13 . 2010-02-08 11:13	392728	----a-w-	c:\users\karim\AppData\Roaming\Microsoft\Services Windows Live\Services Windows Live.dll
2010-02-08 11:13 . 2010-02-08 11:13	135680	----a-w-	c:\users\karim\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
2010-02-08 11:13 . 2010-02-08 11:13	132672	----a-w-	c:\users\karim\AppData\Roaming\Microsoft\Services Windows Live\Raccourci Windows Live Messenger.exe
2010-02-05 12:22 . 2010-02-05 12:22	509552	----a-w-	c:\programdata\Google\Google Toolbar\Update\gtbE0BE.tmp.exe
2009-11-27 23:51 . 2009-11-27 23:51	119808	----a-w-	c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.

(((((((((((((((((((((((((((((   SnapShot_2010-04-30_08.13.06   )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-01-21 01:58 . 2010-05-02 07:58	66518              c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2006-11-02 13:02 . 2010-05-02 07:58	94828              c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2009-07-06 16:25 . 2010-04-30 09:17	11934              c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-4198554580-3039984211-3707511759-1000_UserData.bin
- 2009-03-09 18:29 . 2010-04-30 08:02	32768              c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-03-09 18:29 . 2010-05-02 07:56	32768              c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-03-09 18:29 . 2010-05-02 07:56	49152              c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-03-09 18:29 . 2010-04-30 08:02	49152              c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-03-09 18:29 . 2010-05-02 07:56	16384              c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-03-09 18:29 . 2010-04-30 08:02	16384              c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-12 12:52 . 2010-04-30 07:26	16384              c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-12 12:52 . 2010-04-30 10:18	16384              c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-12 12:52 . 2010-04-30 10:18	32768              c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-12 12:52 . 2010-04-30 07:26	32768              c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-12 12:52 . 2010-04-30 10:18	16384              c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-12 12:52 . 2010-04-30 07:26	16384              c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-08-04 08:03 . 2010-04-30 09:15	16384              c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-08-04 08:03 . 2010-04-30 07:10	16384              c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-08-04 08:03 . 2010-04-30 07:10	32768              c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-08-04 08:03 . 2010-04-30 09:15	32768              c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-08-04 08:03 . 2010-04-30 07:10	16384              c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-08-04 08:03 . 2010-04-30 09:15	16384              c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-12 12:28 . 2010-05-02 07:55	3768              c:\windows\System32\WDI\ERCQueuedResolutions.dat
- 2009-10-09 03:41 . 2010-03-21 23:18	2546              c:\windows\System32\WDI\{88d4896f-f553-446a-9c75-9dec124ff8b7}.bin
+ 2009-10-09 03:41 . 2010-05-01 01:06	2546              c:\windows\System32\WDI\{88d4896f-f553-446a-9c75-9dec124ff8b7}.bin
- 2010-04-30 08:02 . 2010-04-30 08:02	2048              c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2010-05-02 07:56 . 2010-05-02 07:56	2048              c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2010-05-02 07:56 . 2010-05-02 07:56	2048              c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2010-04-30 08:02 . 2010-04-30 08:02	2048              c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2009-07-13 15:20 . 2010-05-02 07:03	281100              c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S4.bin
+ 2009-07-06 20:04 . 2010-05-01 18:57	359214              c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin
+ 2006-11-02 10:33 . 2010-05-02 08:04	600640              c:\windows\System32\perfh009.dat
- 2006-11-02 10:33 . 2010-04-30 08:10	600640              c:\windows\System32\perfh009.dat
- 2006-11-02 10:33 . 2010-04-30 08:10	109778              c:\windows\System32\perfc009.dat
+ 2006-11-02 10:33 . 2010-05-02 08:04	109778              c:\windows\System32\perfc009.dat
.
(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2009-04-23 691656]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 3883856]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-03-09 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"RtHDVCpl"="RtHDVCpl.exe" [2007-12-05 4710400]
"eAudio"="c:\acer\Empowering Technology\eAudio\eAudio.exe" [2007-10-10 1286144]
"PCMService"="c:\program files\Acer\Acer Arcade\PCMService.exe" [2008-01-25 155648]
"NvSvc"="c:\windows\system32
vsvc.dll" [2007-12-05 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-12-05 8534560]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-12-05 81920]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2007-10-17 768520]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2009-11-27 30192]
"PLFSetI"="c:\windows\PLFSetI.exe" [2007-10-23 200704]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2007-07-21 159744]
"ProductReg"="c:\program files\Acer\WR_PopUp\ProductReg.exe" [2008-09-23 6144]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-10 148888]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"Samsung PanelMgr"="c:\windows\Samsung\PanelMgr\SSMMgr.exe" [2008-08-27 536576]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-04 417792]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-09-21 305440]
"Ask and Record FLV Service"="c:\program files\Replay Media Catcher\FLVSrvc.exe" [2009-09-22 156672]
"CamserviceDP"="c:\program files\Hercules\DualPix Exchange\Camservice.exe" [2007-08-10 81920]
"PLFSetL"="c:\windows\PLFSetL.exe" [2007-07-05 94208]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2009-12-18 40368]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768]

c:\users\karim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
LimeWire On Startup.lnk - c:\program files\LimeWire\LimeWire.exe [2009-9-30 503808]
Notification de cadeaux MSN.lnk - c:\users\karim\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe [2010-2-8 135680]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2008-3-21 535336]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~2\GoogleDesktopNetwork3.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):68,0b,f9,8d,76,7b,ca,01

R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2009-07-10 721904]
R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-02-05 135664]
R3 camfilt2;camfilt2;c:\windows\system32\Drivers\camfilt2.sys [2007-05-29 94208]
R3 GoogleDesktopManager-110309-193829;Google Desktop Manager 5.9.911.3589;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2009-11-27 30192]
R3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2009-05-29 234864]
S2 ALaunchService;ALaunch Service;c:\acer\ALaunch\ALaunchSvc.exe [2007-09-19 51200]
S2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [2009-07-13 108289]
S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys [2007-03-05 5120]
S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [2007-05-16 32256]
S3 WsAudioDevice_383;WsAudioDevice_383;c:\windows\system32\drivers\WsAudioDevice_383.sys [2008-11-19 16640]

eldar · Answer

--- Autres Services/Pilotes en mémoire ---

*Deregistered* - wtbyk

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork	REG_MULTI_SZ   	PLA DPS BFE mpssvc
LocalServiceAndNoImpersonation	REG_MULTI_SZ   	FontCache
.
Contenu du dossier 'Tâches planifiées'

2010-05-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-05 12:33]

2010-05-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-05 12:33]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.facebook.com/
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vb32&d=0309&m=aspire_7520
IE: &Tout télécharger avec FlashGet - c:\program files\FlashGet\jc_all.htm
IE: &Télécharger avec FlashGet - c:\program files\FlashGet\jc_link.htm
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
FF - ProfilePath - c:\users\karim\AppData\Roaming\Mozilla\Firefox\Profiles\15lzhu3f.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.bing.com/search?FORM=IEFM1&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://fr.msn.com/
FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?mkt=fr-FR&form=IEFM1&q=
FF - component: c:\users\karim\AppData\Roaming\Mozilla\Firefox\Profiles\15lzhu3f.default\extensionsadiobar@toolbar\components	oolbarhomewmp.dll
FF - plugin: c:\program files\Google\Update\1.2.183.23
pGoogleOneClick8.dll
FF - plugin: c:\program files\ma-config.com
phardwaredetection.dll
FF - plugin: c:\program files\Microsoft\Office Live
pOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins
p-mswmp.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- PARAMETRES FIREFOX ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency",   1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug",            false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight",       2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize",       1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight",   25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight",     5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation",  false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "https://www.mozilla.org/en-US/firefox/new/?redirect_source=firefox-com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-05-02 10:17
Windows 6.0.6002 Service Pack 2 NTFS

Recherche de processus cachés ... 

Recherche d'éléments en démarrage automatique cachés ... 

Recherche de fichiers cachés ... 

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\wtbyk]

.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'Explorer.exe'(4344)
c:\acer\Empowering Technology\EPOWER\SysHook.dll
.
Heure de fin: 2010-05-02  10:20:01
ComboFix-quarantined-files.txt  2010-05-02 08:19
ComboFix2.txt  2010-05-02 08:10
ComboFix3.txt  2010-04-30 08:15
ComboFix4.txt  2010-04-30 07:54

Avant-CF: 32 266 362 880 octets libres
Après-CF: 32 233 492 480 octets libres

Current=1 Default=1 Failed=0 LastKnownGood=6 Sets=1,2,3,4,5,6
- - End Of File - - 1D82D2DA37EFDEB406591FF3820B156E

booddha · Answer

Je ne vois rien de suspect dans le rapport combofix

Ou en es tu de tes soucis ?

eldar · Answer

bah ma connexion wifi bug toujours, apres je sais pas si c'est peut etre un bug du au FAI (neuf sfr), parceque enfait quand je suis en freewifi ou neufwifi ya aucun soucis. C'est assez bizarre ... La je suis en ethernet sa à l'air de tourner normal.

booddha · Answer

Pour ta connexion wifi, je ne vois pas ce que cela peut-être.

Je te propose de poster un message décrivant ton problème sur le forum Internet, en précisant que tu es passé par le forum Virus/sécurité et que ton ordi semble clean du côté virus.

On va finaliser

 ========= ZHPFIX NETTOYAGE DES OUTILS ========
*	Lancer ZHPDIAG (Sous Vista et Seven lancer avec Clique/droit et executer en tant qu'administrateur)
*	Cliquer sur l'icône représentant une loupe
*	Cliquer sur l'icône représentant un bouclier vert
*	Dans la nouvelle fenêtre qui s'ouvre ZHPFIX, cliquer sur le A Rouge "Nettoyeur de tools"
*	Cliquer en bas de la fenêtre sur tous puis sur nettoyer
*	Fermer les fenêtres ZHPFIX et ZHPDIAG 
*	Rebooter la machine. 

===================== CCLEANER ========================

Nettoyage avec CCleaner
On va commencer par faire un peu le ménage

	*	Télécharger CCLeaner et l'installer sur le bureau en refusant l'installation de la barre Yahoo.
	        http://download.piriform.com/ccsetup205.exe
	*	Fermer toutes les applications
	*	Lancer CCLeaner (Double/click sous XP, Click/droit puis "Ecécuter en tant qu'administrateur sous Vista et Seven).
	        S'il n'est pas en Français cliquer sur Options, Setting, Language 
          et sélectionner Français
	*	cocher dans le menu Nettoyeur - onglet Windows :
	        Internet Explorer: Fichiers Internet Temporaires, Cookies
	*	Système: Vider la Poubelle, Fichiers Temporaires, Presse-papiers
	*	Avancé: Vieilles données du Prefetch
	*	Décocher dans le menu Options - sous-menu Avancé :
	        Effacer uniquement les fichiers, du dossier temp de Windows, plus vieux que 48 heures
	*	Cocher dans le menu Nettoyeur - onglet Applications : Internet: Sun Java
	*	Cocher , si cela est possible, dans le menu Nettoyeur - onglet Applications :
	        Firefox/Mozilla: Cache Internet, Cookies 
	*	Click sur Analyse
	*	Click sur le bouton Lancer le nettoyage dans le menu Nettoyeur. 
	*	Click sur Registre
	*	Sélectionner tout
		------------------------------------------------------------------
Ce qui suit est à répéter jusqu'à ce qu'il n'y ai plus d'erreurs ou que les mêmes erreurs réaparaissent
	*	Click sur Chercher des erreurs (En bas)

	Une fois le scan terminé sélectionner tout  
	*	Click sur Réparer les erreurs sélectionnées

=========== POINT DE RESTAURATION SYSTEME =============   
     
Créer un point de restauration system sur Vista à partir de "Créer un point de restauration" au-dessus de l'image N° 3   


Dis moi quand tu auras terminé

eldar · Answer

C'est fait !

booddha · Answer

Ok, je mets en résolu. Réactive la file si problème

eldar · Answer

dak sa a l'air de mieux tourner la
merci du temps que tu m'as accordé en tout cas ;)
Bye

Connexion qui rame

45 réponses

Discussions similaires