[Virus] Infections par de multiple pub - Page 2

Résolu
Précédent
  • 1
  • 2
  1. legras Messages postés 21 Statut Membre
     
    Mais ca va faire la même chose qu'avant juste scanné et non nettoyer. Non ?
    0
  2. legras Messages postés 21 Statut Membre
     
    Alors voila le rapport de eScan :

    File C:\Documents and Settings\Wxp\Bureau\SmitfraudFix\Reboot.exe tagged as not-a-virus:RiskTool.Win32.Reboot.f. No

    Action Taken.
    File C:\Documents and Settings\Wxp\Bureau\SmitfraudFix.exe tagged as not-a-virus:RiskTool.Win32.Reboot.f.

    No Action Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\agfherdb.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\aolelmeq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\aqusnwid.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

    Action Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\audimhij.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\aupgnxlj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bbjudflx.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

    Action Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bddoirhx.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\bifvcaqc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cgtyqlrr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action

    Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cjgiktsa.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\ckxhgpdf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\crdwqqep.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

    Action Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ddvvohgd.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\difwtfvm.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dikmwqyc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

    Action Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dqacyhwy.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\dunxmasq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\duoollxq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action

    Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\edeeccww.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\elsdjceh.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\eoffqsqk.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

    Action Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\fopwmgdy.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\ftboxnxl.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\fvsidooy.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action

    Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gardhtfc.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\gobrxtwv.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gvopwqdu.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

    Action Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\hgcddihu.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\hjqqbfii.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\hxdfpeav.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

    Action Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ikicnabt.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\iuviiqct.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\jkrmhoip.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action

    Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\krplutvf.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\kvrmyshi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ldguntat.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action

    Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\lvvoqgqi.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\mcldsfkv.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mgxpvprt.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

    Action Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\musqllhf.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\mydcfiom.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\nfqwphvg.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

    Action Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\nloyoorh.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\nnddeawh.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ogpsrlax.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action

    Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ohpkqvys.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\pfodbooc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\pgshdnsa.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

    Action Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\phlkcrom.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\pmqbsdfq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\qktboyra.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

    Action Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\qobxyqqr.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\quwjqcea.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\sgbpxmer.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

    Action Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\sqogavnb.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\stxubqlj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\sufgwnyi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

    Action Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\tduxgeqv.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\tioxqmer.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\tnhgecfn.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

    Action Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\tqdncpme.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\txhihndo.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ubhieikw.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

    Action Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\unutsgdr.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\vanlhmqa.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\veeqhdea.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

    Action Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vjbmfnse.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\vltjjnrm.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vsekpwgr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

    Action Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vynxttnq.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\waodljik.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\whudvlfi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action

    Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\wticjrpl.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\xcbphrhg.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xlltauir.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action

    Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xonmwfdy.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\xwlplaqj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ybulhxpc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

    Action Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\yifydmhf.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File C:\Documents and

    Settings\Wxp\DoctorWeb\Quarantine\ylafajue.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    File

    C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ylorutgu.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action

    Taken.
    File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ytqesnjf.exe tagged as

    not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
    0
  3. legras Messages postés 21 Statut Membre
     
    et celui de DiagHelp :

    C:\WINDOWS\System32\wpa.dbl -->27.12.2006 09:41:25
    C:\WINDOWS\System32\perfh00C.dat -->23.12.2006 10:56:18
    C:\WINDOWS\System32\perfh009.dat -->23.12.2006 10:56:18
    C:\WINDOWS\System32\perfc00C.dat -->23.12.2006 10:56:18
    C:\WINDOWS\System32\perfc009.dat -->23.12.2006 10:56:18
    C:\WINDOWS\System32\PerfStringBackup.INI -->23.12.2006 10:56:17
    C:\WINDOWS\System32\xwjoalvq.ini -->23.12.2006 10:45:05
    C:\WINDOWS\System32\odtpfici.dll -->22.12.2006 19:44:58
    C:\WINDOWS\System32\wbqmyces.dll -->22.12.2006 19:20:41
    C:\WINDOWS\System32\axgvpryj.dll -->22.12.2006 18:22:27
    C:\WINDOWS\System32\njimnfjf.dll -->22.12.2006 17:37:06
    C:\WINDOWS\System32\tmp.txt -->22.12.2006 17:34:49
    C:\WINDOWS\System32\tmp.reg -->22.12.2006 17:34:49
    C:\WINDOWS\System32\cpdymfnb.dll -->22.12.2006 17:33:49
    C:\WINDOWS\System32\cbhwfxuq.ini -->22.12.2006 17:33:08
    C:\WINDOWS\System32\muaktpvk.dll -->22.12.2006 17:02:57
    C:\WINDOWS\System32\efvnvkme.dll -->21.12.2006 19:03:21
    C:\WINDOWS\System32\cvfginer.dll -->20.12.2006 22:39:03
    C:\WINDOWS\System32\gtmbnrcp.dll -->20.12.2006 18:34:44
    C:\WINDOWS\System32\jrharjaq.dll -->20.12.2006 18:14:52
    C:\WINDOWS\System32\rvoqxscq.dll -->19.12.2006 21:08:23
    C:\WINDOWS\System32\quxfwhbc.dll -->18.12.2006 19:18:38
    C:\WINDOWS\System32\spupdsvc.inf -->17.12.2006 18:19:27
    C:\WINDOWS\System32\mcrh.tmp -->17.12.2006 14:26:34
    C:\WINDOWS\System32\MRT.exe -->08.12.2006 00:13:44

    C:\WINDOWS\BlendSettings.ini -->27.12.2006 14:42:40
    C:\WINDOWS\WindowsUpdate.log -->27.12.2006 09:40:58
    C:\WINDOWS\bootstat.dat -->27.12.2006 09:40:48
    C:\WINDOWS\SchedLgU.Txt -->26.12.2006 23:29:25
    C:\WINDOWS\QTFont.qfn -->26.12.2006 18:44:24
    C:\WINDOWS\QTFont.for -->24.12.2006 16:04:06
    C:\WINDOWS\cdPlayer.ini -->26.11.2006 14:29:21
    C:\WINDOWS\Thumbs.db -->19.11.2006 16:47:33
    C:\WINDOWS\SWPRODPB.INI -->06.11.2006 23:17:10
    C:\WINDOWS\system.ini -->06.11.2006 22:46:44
    C:\WINDOWS\cserve.ini -->01.11.2006 21:44:14
    C:\WINDOWS\WMSysPr9.prx -->04.10.2006 19:46:53
    C:\WINDOWS\mngui.INI -->28.09.2006 10:43:09
    C:\WINDOWS\pavsig.txt -->08.09.2006 19:57:38
    C:\WINDOWS\BricoPackFoldersDelete.cmd -->12.08.2006 16:08:45

    C:\WINDOWS\ALCFDRTM.EXE |03/01/2002 17:07:42
    C:\WINDOWS\alcrmv.exe |28/10/2004 16:12:26
    C:\WINDOWS\alcupd.exe |28/10/2004 16:12:26
    C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe |02/07/2005 17:43:37
    C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe |17/07/2005 18:21:58
    C:\WINDOWS\bwUnin-7.2.0.157-8876480SL.exe |02/04/2006 17:45:49
    C:\WINDOWS\GPInstall.exe |09/02/2005 17:57:37
    C:\WINDOWS\IsUn040c.exe |28/10/2004 15:57:55
    C:\WINDOWS\IsUninst.exe |28/10/2004 15:45:05
    C:\WINDOWS\iun6002.exe |20/07/2005 20:25:04
    C:\WINDOWS\ScUnin.exe |24/09/2005 13:02:20
    C:\WINDOWS\Setup1.exe |18/12/2004 13:14:19
    C:\WINDOWS\slrundll.exe |28/10/2004 15:27:29
    C:\WINDOWS\SOUNDMAN.EXE |28/10/2004 16:12:34
    C:\WINDOWS\twunk_16.exe |24/04/2003 13:00:00
    C:\WINDOWS\twunk_32.exe |24/04/2003 13:00:00
    C:\WINDOWS\una2setup.exe |06/12/2004 20:06:03
    C:\WINDOWS\unADesktop.exe |14/01/2005 15:43:51
    C:\WINDOWS\unin040c.exe |16/02/2005 17:56:29
    C:\WINDOWS\uninst.exe |18/08/2005 16:50:31
    C:\WINDOWS\USBK700iphmgunin.exe |04/01/2002 19:44:54
    C:\WINDOWS\twain.dll |24/04/2003 13:00:00
    C:\WINDOWS\twain_32.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\AcSignOpt.exe |05/03/2005 13:18:15
    C:\WINDOWS\system32\append.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\asuninst.exe |23/01/2006 20:11:05
    C:\WINDOWS\system32\aswBoot.exe |02/11/2006 22:11:06
    C:\WINDOWS\system32\ati2evxx.exe |29/09/2004 07:16:44
    C:\WINDOWS\system32\Ati2mdxx.exe |29/09/2004 07:18:28
    C:\WINDOWS\system32\ati2sgag.exe |28/10/2004 16:20:39
    C:\WINDOWS\system32\debug.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\dmgr2.exe |25/03/2005 20:32:41
    C:\WINDOWS\system32\dosx.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\dvdplay.exe |23/08/2001 18:47:34
    C:\WINDOWS\system32\edlin.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\exe2bin.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\fastopen.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\java.exe |13/11/2006 18:41:29
    C:\WINDOWS\system32\javaw.exe |13/11/2006 18:41:29
    C:\WINDOWS\system32\javaws.exe |13/11/2006 18:41:29
    C:\WINDOWS\system32\mem.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\mscdexnt.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\NeroCheck.exe |09/07/2001 11:50:42
    C:\WINDOWS\system32\nlsfunc.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\redir.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\reico.exe |18/02/2005 18:17:11
    C:\WINDOWS\system32\RTLCPL.EXE |28/10/2004 16:12:35
    C:\WINDOWS\system32\setver.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\share.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\slrundll.exe |28/10/2004 15:27:30
    C:\WINDOWS\system32\slserv.exe |28/10/2004 15:27:30
    C:\WINDOWS\system32\SpoonUninstall.exe |17/04/2005 13:31:15
    C:\WINDOWS\system32\UAService7.exe |27/03/2005 14:54:25
    C:\WINDOWS\system32\Uharc.exe |18/02/2005 18:16:23
    C:\WINDOWS\system32\usrmlnka.exe |23/08/2001 18:47:48
    C:\WINDOWS\system32\usrprbda.exe |23/08/2001 18:47:48
    C:\WINDOWS\system32\usrshuta.exe |23/08/2001 18:47:48
    C:\WINDOWS\system32\a3d.dll |28/10/2004 16:12:34
    C:\WINDOWS\system32\AcSignExt.dll |05/03/2005 13:18:09
    C:\WINDOWS\system32\AcSignExtRes.dll |07/03/2005 19:00:01
    C:\WINDOWS\system32\AcSignIcon.dll |05/03/2005 13:18:12
    C:\WINDOWS\system32\amstream.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\ati2cqag.dll |28/10/2004 15:27:32
    C:\WINDOWS\system32\ati2dvaa.dll |28/10/2004 15:27:32
    C:\WINDOWS\system32\ati2dvag.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\ati2edxx.dll |29/09/2004 07:18:20
    C:\WINDOWS\system32\ati2evxx.dll |29/09/2004 07:18:08
    C:\WINDOWS\system32\ati3d1ag.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\ati3d2ag.dll |13/11/2003 21:10:54
    C:\WINDOWS\system32\ati3duag.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\ATIDDC.DLL |29/09/2004 07:16:22
    C:\WINDOWS\system32\ATIDEMGR.dll |29/09/2004 09:32:34
    C:\WINDOWS\system32\atiiiexx.dll |29/09/2004 09:58:44
    C:\WINDOWS\system32\atikvmag.dll |21/02/2006 19:11:02
    C:\WINDOWS\system32\atioglx1.dll |21/02/2006 19:27:14
    C:\WINDOWS\system32\atioglxx.dll |29/09/2004 07:44:00
    C:\WINDOWS\system32\atipdlxx.dll |29/09/2004 07:18:50
    C:\WINDOWS\system32\atitvo32.dll |29/09/2004 06:36:20
    C:\WINDOWS\system32\ativcoxx.dll |09/11/2001 10:01:04
    C:\WINDOWS\system32\ativtmxx.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\ativvaxx.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\atmfd.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\atmlib.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\Audio3D.dll |28/10/2004 16:12:34
    C:\WINDOWS\system32\axgvpryj.dll |22/12/2006 18:22:25
    C:\WINDOWS\system32\clrvidcc.dll |02/01/2005 21:33:57
    C:\WINDOWS\system32\clrviddc.dll |11/08/1998 15:18:52
    C:\WINDOWS\system32\CmdLineExt.dll |27/03/2005 14:54:25
    C:\WINDOWS\system32\CNCS232.DLL |20/11/2003 14:09:09
    C:\WINDOWS\system32\cncs32.dll |27/12/2005 18:15:46
    C:\WINDOWS\system32\compatui.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\cpdymfnb.dll |22/12/2006 17:33:47
    C:\WINDOWS\system32\cvfginer.dll |20/12/2006 22:39:02
    C:\WINDOWS\system32\decdnet.dll |11/08/1998 15:18:44
    C:\WINDOWS\system32\dgrpsetu.dll |01/01/2002 00:07:13
    C:\WINDOWS\system32\dgsetup.dll |01/01/2002 00:07:13
    C:\WINDOWS\system32\DivX.dll |26/10/2004 23:38:23
    C:\WINDOWS\system32\divxdec_0407.dll |26/10/2004 23:38:18
    C:\WINDOWS\system32\divxdec_040c.dll |26/10/2004 23:38:18
    C:\WINDOWS\system32\divxdec_0411.dll |26/10/2004 23:38:18
    C:\WINDOWS\system32\divx_xx07.dll |26/10/2004 23:38:17
    C:\WINDOWS\system32\divx_xx0c.dll |26/10/2004 23:38:18
    C:\WINDOWS\system32\divx_xx11.dll |26/10/2004 23:38:18
    C:\WINDOWS\system32\dmgrax2.dll |25/03/2005 20:32:31
    C:\WINDOWS\system32\dpu10.dll |26/10/2004 23:39:03
    C:\WINDOWS\system32\dpuGUI10.dll |26/10/2004 23:39:03
    C:\WINDOWS\system32\dpus10.dll |26/10/2004 23:39:03
    C:\WINDOWS\system32\dpv10.dll |26/10/2004 23:39:04
    C:\WINDOWS\system32\efvnvkme.dll |21/12/2006 19:03:21
    C:\WINDOWS\system32\encdec.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\encdnet.dll |02/01/2005 21:33:57
    C:\WINDOWS\system32\EnumDev111.dll |23/10/2006 19:29:44
    C:\WINDOWS\system32\EqnClass.Dll |01/01/2002 00:07:12
    C:\WINDOWS\system32\GEARAspi.dll |19/09/2006 15:43:58
    C:\WINDOWS\system32\gtmbnrcp.dll |20/12/2006 18:34:42
    C:\WINDOWS\system32\hsfcisp2.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\hticons.dll |28/10/2004 15:48:03
    C:\WINDOWS\system32\hypertrm.dll |28/10/2004 15:48:03
    C:\WINDOWS\system32\iccvid.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\ieencode.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\imagr5.dll |21/09/2000 17:02:28
    C:\WINDOWS\system32\imagx5.dll |27/09/2000 16:15:06
    C:\WINDOWS\system32\ImagXpr5.dll |21/09/2000 12:53:00
    C:\WINDOWS\system32\inetda.dll |02/08/2001 04:11:25
    C:\WINDOWS\system32\IpLib.dll |23/10/2006 19:29:44
    C:\WINDOWS\system32\ir32_32.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\ir41_qc.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\ir41_qcx.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\ir50_32.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\ir50_qc.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\ir50_qcx.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\isrdbg32.dll |28/10/2004 15:48:58
    C:\WINDOWS\system32\jgaw400.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\jgdw400.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\jgmd400.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\jgpl400.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\jgsd400.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\jgsh400.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\jrharjaq.dll |20/12/2006 18:14:51
    C:\WINDOWS\system32\KMVIDC32.DLL |30/11/2004 18:40:54
    C:\WINDOWS\system32\mdmxsdk.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\mdwmdmsp.dll |23/08/2001 18:47:06
    C:\WINDOWS\system32\mrvdlg.dll |28/10/2004 16:17:56
    C:\WINDOWS\system32\msdmo.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\msencode.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\msttxl16.dll |24/02/1998 23:21:00
    C:\WINDOWS\system32\MSWAY.dll |26/12/2005 11:09:15
    C:\WINDOWS\system32\msxwnet32.dll |16/05/2001 11:52:26
    C:\WINDOWS\system32\mtxparhd.dll |28/10/2004 15:27:30
    C:\WINDOWS\system32\muaktpvk.dll |22/12/2006 17:02:55
    C:\WINDOWS\system32\njimnfjf.dll |22/12/2006 17:37:05
    C:\WINDOWS\system32\nv4_disp.dll |28/10/2004 15:27:30
    C:\WINDOWS\system32\odtpfici.dll |22/12/2006 19:44:55
    C:\WINDOWS\system32\Oemdspif.dll |29/09/2004 07:18:36
    C:\WINDOWS\system32\paqsp.dll |23/08/2001 18:47:16
    C:\WINDOWS\system32\pdfcmnnt.dll |26/03/2006 10:49:45
    C:\WINDOWS\system32\picn20.dll |21/09/2000 07:47:10
    C:\WINDOWS\system32\pnc32301.dll |02/01/2005 21:33:58
    C:\WINDOWS\system32\pnc32401.dll |02/01/2005 21:33:58
    C:\WINDOWS\system32\pncrt.dll |11/08/1998 15:18:44
    C:\WINDOWS\system32\pndx5016.dll |26/11/2004 21:09:27
    C:\WINDOWS\system32\pndx5032.dll |26/11/2004 21:09:27
    C:\WINDOWS\system32\pnen3230.dll |02/01/2005 21:33:58
    C:\WINDOWS\system32\pneng101.dll |02/01/2005 21:33:58
    C:\WINDOWS\system32\PSIKey.dll |26/10/2004 23:38:24
    C:\WINDOWS\system32\ptipbmf.dll |28/10/2004 16:18:41
    C:\WINDOWS\system32\qedwipes.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\qt-mt331.dll |26/10/2004 23:39:05
    C:\WINDOWS\system32\quxfwhbc.dll |18/12/2006 19:18:34
    C:\WINDOWS\system32\RA3214_4.dll |11/08/1998 15:18:44
    C:\WINDOWS\system32\ra3228_8.dll |11/08/1998 15:18:44
    C:\WINDOWS\system32\ra32clv1.dll |11/08/1998 15:18:44
    C:\WINDOWS\system32\ra32dnet.dll |11/08/1998 15:18:44
    C:\WINDOWS\system32\ra32rv10.dll |11/08/1998 15:18:44
    C:\WINDOWS\system32\ra32sipr.dll |11/08/1998 15:18:44
    C:\WINDOWS\system32\rarv1032.dll |11/08/1998 15:18:44
    C:\WINDOWS\system32\rarv10en.dll |02/01/2005 21:33:58
    C:\WINDOWS\system32\RGSS100J.dll |11/06/2005 15:48:26
    C:\WINDOWS\system32\rmevents.dll |02/01/2005 21:33:58
    C:\WINDOWS\system32\rmmerge2.dll |02/01/2005 21:33:58
    C:\WINDOWS\system32\rmoc3260.dll |26/11/2004 21:09:32
    C:\WINDOWS\system32\Roboex32.dll |30/01/2005 14:44:37
    C:\WINDOWS\system32\RTLCPAPI.dll |28/10/2004 16:12:34
    C:\WINDOWS\system32\rvoqxscq.dll |19/12/2006 21:08:22
    C:\WINDOWS\system32\s3gnb.dll |28/10/2004 15:27:30
    C:\WINDOWS\system32\sbe.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\SIntf16.dll |10/12/2004 17:11:20
    C:\WINDOWS\system32\SIntf32.dll |10/12/2004 17:11:20
    C:\WINDOWS\system32\SIntfNT.dll |10/12/2004 17:11:20
    C:\WINDOWS\system32\slbcsp.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\slbiop.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\slbrccsp.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\slcoinst.dll |28/10/2004 15:27:30
    C:\WINDOWS\system32\slextspk.dll |28/10/2004 15:27:30
    C:\WINDOWS\system32\slgen.dll |28/10/2004 15:27:30
    C:\WINDOWS\system32\spnike.dll |23/08/2001 18:47:18
    C:\WINDOWS\system32\sprio600.dll |23/08/2001 18:47:18
    C:\WINDOWS\system32\sprio800.dll |23/08/2001 18:47:18
    C:\WINDOWS\system32\spxcoins.dll |01/01/2002 00:07:12
    C:\WINDOWS\system32\swxpckm.dll |19/11/2006 10:13:15
    C:\WINDOWS\system32\tsd32.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\TwnLib20.dll |26/06/2000 10:45:30
    C:\WINDOWS\system32\unrar.dll |06/12/2004 20:06:06
    C:\WINDOWS\system32\unzip32.dll |05/12/2004 22:08:08
    C:\WINDOWS\system32\usrcntra.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrcoina.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrdpa.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrdtea.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrfaxa.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrlbva.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrrtosa.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrsdpia.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrsvpia.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrv42a.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrv80a.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrvoica.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrvpa.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\vboxb410.dll |13/06/2001 03:52:44
    C:\WINDOWS\system32\vboxp410.dll |13/06/2001 03:52:45
    C:\WINDOWS\system32\vboxt410.dll |13/06/2001 03:52:45
    C:\WINDOWS\system32\vturs.dll |05/12/2006 17:40:17
    C:\WINDOWS\system32\wbhelp2.dll |02/11/2004 22:03:21
    C:\WINDOWS\system32\wbqmyces.dll |22/12/2006 19:20:40
    C:\WINDOWS\system32\WG1v2Lib.dll |23/10/2006 19:29:44
    C:\WINDOWS\system32\wh2robo.dll |30/01/2005 14:44:37
    C:\WINDOWS\system32\win87em.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\WmJoyFrc.dll |21/08/2006 14:02:54
    C:\WINDOWS\system32\xmlparse.dll |08/12/2004 13:09:09
    C:\WINDOWS\system32\xmltok.dll |08/12/2004 13:09:09
    C:\WINDOWS\system32\ZPORT4AS.dll |23/01/2006 20:11:05

    Le volume dans le lecteur C s'appelle Wxp
    Le numéro de série du volume est 84B2-DB13

    Répertoire de C:\WINDOWS\system32

    19.08.2004 15:09 6'144 csrss.exe
    1 fichier(s) 6'144 octets
    0 Rép(s) 32'277'811'200 octets libres
    Le volume dans le lecteur C s'appelle Wxp
    Le numéro de série du volume est 84B2-DB13

    Répertoire de C:\WINDOWS\system32

    25.03.2005 20:32 860'160 dmgr2.exe
    1 fichier(s) 860'160 octets
    0 Rép(s) 32'277'811'200 octets libres

    Contenu de Downloaded Program Files
    Le volume dans le lecteur C s'appelle Wxp
    Le numéro de série du volume est 84B2-DB13

    Répertoire de C:\WINDOWS\Downloaded Program Files

    26.12.2006 11:17 <REP> .
    26.12.2006 11:17 <REP> ..
    11.04.2006 16:10 135'168 asinst.dll
    03.04.2006 10:00 537 asinst.inf
    17.05.2006 13:32 198'304 avsniffdlgs.dll
    17.05.2006 13:26 537'704 AXXPEE.dll
    06.09.2006 00:00 2'504 catalog.dat
    18.11.2006 12:20 <REP> CONFLICT.1
    22.12.2006 18:18 <REP> CONFLICT.2
    22.12.2006 18:18 <REP> CONFLICT.3
    22.12.2006 18:18 <REP> CONFLICT.4
    26.12.2006 11:17 <REP> CONFLICT.5
    22.12.2006 18:18 <REP> CONFLICT.6
    28.10.2004 15:49 65 desktop.ini
    06.09.2006 00:00 6'899 ecbootil.vxd
    17.05.2006 13:26 42'112 ecmldr32.dll
    06.09.2006 00:00 272'040 ecmsvr32.dll
    08.09.2004 22:38 1'271 erma.inf
    14.02.2003 09:32 283'296 IDrop.ocx
    14.02.2003 09:34 114'848 IDropENU.dll
    13.03.2003 09:58 114'600 IDropFRA.dll
    10.11.2005 13:05 876 jinstall-1_5_0_06.inf
    29.11.2006 14:00 367 LegitCheckControl.inf
    17.05.2006 13:28 6'850 navapi.vxd
    17.05.2006 13:28 201'896 navapi32.dll
    06.09.2006 00:00 124'584 naveng32.dll
    06.09.2006 00:00 882'344 navex32a.dll
    09.12.2005 14:47 24'576 playershim.dll
    09.10.2003 10:32 144 QTPlugin.inf
    06.09.2006 00:00 97'552 scrauth.dat
    22.06.2006 10:41 5'032 swflash.inf
    06.09.2006 00:00 14 symaveng.cat
    06.09.2006 00:00 901 symaveng.inf
    06.09.2006 00:00 48'797 tcdefs.dat
    06.09.2006 00:00 966'264 tcscan7.dat
    06.09.2006 00:00 315'136 tcscan8.dat
    06.09.2006 00:00 659'400 tcscan9.dat
    06.09.2006 00:00 453 tinf.dat
    06.09.2006 00:00 148 tinfidx.dat
    06.09.2006 00:00 1'957 tinfl.dat
    06.09.2006 00:00 58'587 tscan1.dat
    06.09.2006 00:00 3'027 tscan1hd.dat
    06.09.2006 00:00 5'116 v.grd
    06.09.2006 00:00 2'261 v.sig
    06.09.2006 00:00 106'244 virscan.inf
    06.09.2006 00:00 966'811 virscan1.dat
    06.09.2006 00:00 569'712 virscan2.dat
    06.09.2006 00:00 146'612 virscan3.dat
    06.09.2006 00:00 320'186 virscan4.dat
    06.09.2006 00:00 2'700'020 virscan5.dat
    06.09.2006 00:00 389'301 virscan6.dat
    06.09.2006 00:00 4'468'258 virscan7.dat
    06.09.2006 00:00 1'593'724 virscan8.dat
    06.09.2006 00:00 3'622'432 virscan9.dat
    06.09.2006 00:00 32 virscant.dat
    08.09.2006 21:30 2'072 vscanmsx.dat
    06.09.2006 00:00 224 zdone.dat
    49 fichier(s) 20'001'258 octets

    Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.1

    18.11.2006 12:20 <REP> .
    18.11.2006 12:20 <REP> ..
    0 fichier(s) 0 octets

    Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.2

    22.12.2006 18:18 <REP> .
    22.12.2006 18:18 <REP> ..
    0 fichier(s) 0 octets

    Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.3

    22.12.2006 18:18 <REP> .
    22.12.2006 18:18 <REP> ..
    0 fichier(s) 0 octets

    Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.4

    22.12.2006 18:18 <REP> .
    22.12.2006 18:18 <REP> ..
    0 fichier(s) 0 octets

    Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.5

    26.12.2006 11:17 <REP> .
    26.12.2006 11:17 <REP> ..
    0 fichier(s) 0 octets

    Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.6

    22.12.2006 18:18 <REP> .
    22.12.2006 18:18 <REP> ..
    0 fichier(s) 0 octets

    Total des fichiers listés :
    49 fichier(s) 20'001'258 octets
    20 Rép(s) 32'277'807'104 octets libres

    Recherche de rootkit! (Merci S!Ri)

    Recherche d'infections connues

    Liste des programmes installes

    Ad-Aware SE Personal
    Adobe Flash Player 9 ActiveX
    Adobe Photoshop 6.0
    Adobe Reader 7.0.8 - Français
    Adobe SVG Viewer
    adsl TV
    Apple Software Update
    Archiveur WinRAR
    AsusUpdate
    ATI - Utilitaire de désinstallation du logiciel
    ATI Control Panel
    ATI Display Driver
    Audacity 1.2.4
    AutoCAD 2006 - Français
    Autodesk DWF Viewer
    AutoUpdate
    avast! Antivirus
    AVG Anti-Spyware 7.5
    BitTorrent 4.0.1
    CCleaner (remove only)
    DirectX for Managed Code Update (December 2004)
    DivX Player
    DivX Pro Trial
    Download Accelerator Plus
    EA SPORTS online 2006
    Easy TM 2.4
    eMule
    FileZilla (remove only)
    Freelancer
    GeTax2005
    Google Earth
    Google Toolbar for Internet Explorer
    Highway Pursuit v1.1
    HijackThis 1.99.1
    IGNMap 0.8.1
    iTunes
    J2SE Runtime Environment 5.0 Update 6
    J2SE Runtime Environment 5.0 Update 9
    K700i USB-Handset Manager
    Language pack for Ad-Aware SE
    Lecteur Windows Media 10
    Logitech Desktop Messenger
    Logitech Gaming Software
    Logitech SetPoint
    LX Systems Download Manager
    Macromedia Shockwave Player
    MediaLife
    MediaTickets by OIN
    Messenger Plus! 3 & Sponsor
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 French Language Pack
    Microsoft .NET Framework 1.1 Hotfix (KB886903)
    Microsoft .NET Framework 2.0
    Microsoft .NET Framework 2.0
    Microsoft .NET Framework 2.0 Language Pack - FRA
    Microsoft Game Studios Common Redistributables Pack 1
    Microsoft Internationalized Domain Names Mitigation APIs
    Microsoft National Language Support Downlevel APIs
    Microsoft Office Access MUI (French) 2007 (Beta)
    Microsoft Office Excel MUI (French) 2007 (Beta)
    Microsoft Office InfoPath MUI (French) 2007 (Beta)
    Microsoft Office Outlook MUI (French) 2007 (Beta)
    Microsoft Office PowerPoint MUI (French) 2007 (Beta)
    Microsoft Office Professional 2007 (Beta)
    Microsoft Office Professional Plus 2007 (Beta)
    Microsoft Office Proof (Arabic) 2007 (Beta)
    Microsoft Office Proof (Dutch) 2007 (Beta)
    Microsoft Office Proof (English) 2007 (Beta)
    Microsoft Office Proof (French) 2007 (Beta)
    Microsoft Office Proof (German) 2007 (Beta)
    Microsoft Office Proof (Spanish) 2007 (Beta)
    Microsoft Office Publisher MUI (French) 2007 (Beta)
    Microsoft Office Shared MUI (French) 2007 (Beta)
    Microsoft Office Word MUI (French) 2007 (Beta)
    Microsoft XML Parser
    Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA
    MSXML 4.0 SP2 (KB927978)
    MSXML4 Parser
    Nero - Burning Rom
    NHL06
    Oblivion
    Package de base Microsoft de service de chiffrement pour cartes à puce
    Panda ActiveScan
    PDFCreator
    Plasma Pong v1.2
    PowerDVD
    Prince of Persia T2T
    Prince of Persia The Two Thrones
    QuickTime
    RealPlayer
    Realtek AC'97 Audio
    Rise Of Legends
    Rise Of Legends
    Rise of Nations
    Security Update for Microsoft .NET Framework 2.0 (KB917283)
    Security Update pour Microsoft .NET Framework 2.0 (KB922770)
    Sony Ericsson Capability Manager
    Sony Ericsson Mobile Phone Monitor
    Spybot - Search & Destroy 1.4
    Starcraft
    Steganos Internet Anonym 7.1.6
    TrackMania Nations ESWC 0.1.7.5
    Watchtower Library 2005 - Édition française
    WebFldrs XP
    WG111v2 Configuration Utility
    Windows Defender
    Windows Defender Signatures
    Windows Genuine Advantage Notifications (KB905474)
    Windows Live Messenger
    Windows Live Sign-in Assistant
    Windows Media Connect
    Windows Media Format Runtime
    Windows XP Service Pack 2

    Le volume dans le lecteur C s'appelle Wxp
    Le numéro de série du volume est 84B2-DB13

    Répertoire de C:\Program Files

    26.12.2006 11:19 <REP> .
    26.12.2006 11:19 <REP> ..
    11.09.2005 12:49 <REP> A4DeskMag2
    24.11.2005 18:37 <REP> Admiresoft
    26.03.2006 11:33 <REP> Adobe
    13.11.2006 18:27 <REP> adslTV
    17.11.2005 22:30 <REP> Adverts
    01.01.2002 14:00 <REP> Ahead
    06.02.2006 21:55 <REP> Alwil Software
    07.06.2005 21:58 <REP> America's Army
    05.11.2006 13:44 <REP> AnswerWorks 4.0
    06.11.2006 21:17 <REP> Apple Software Update
    25.03.2005 19:06 <REP> Ashampoo
    28.10.2004 15:45 <REP> ASUS
    28.10.2004 16:20 <REP> ATI Technologies
    02.08.2006 19:03 <REP> Audacity
    05.11.2006 13:49 <REP> AutoCAD 2006
    04.11.2006 21:25 <REP> Autodesk
    24.11.2005 18:36 <REP> AV MP3 Player-Morpher
    28.10.2004 16:12 <REP> AvRack
    19.04.2005 17:36 <REP> BitTorrent
    27.03.2005 20:03 <REP> BoontyGames
    18.11.2006 23:03 <REP> CCleaner
    12.01.2006 18:02 <REP> Clash N Slash
    14.01.2006 15:33 <REP> Common Files
    07.02.2006 21:16 <REP> Comodo
    28.10.2004 15:48 <REP> ComPlus Applications
    29.10.2006 15:16 <REP> Corel(R) Painter(TM) IX.5 TBYB FR
    21.03.2005 19:10 <REP> Creative
    01.01.2002 13:57 <REP> CyberLink
    26.12.2006 11:17 <REP> DAP
    22.11.2004 21:21 <REP> directx
    20.11.2004 10:31 <REP> DivX
    17.04.2006 13:28 <REP> DOSBox-0.65
    15.04.2006 11:42 <REP> D-Tools
    18.11.2006 12:12 <REP> Easy TM
    02.01.2002 16:26 <REP> eMule
    21.06.2005 17:15 <REP> eoRezo
    19.11.2006 13:26 <REP> Fichiers communs
    03.04.2006 18:42 <REP> FileZilla
    27.06.2005 21:22 <REP> FlashFXP
    02.11.2006 22:05 <REP> F-Secure
    11.03.2005 17:33 <REP> Game_Maker6
    26.03.2006 11:34 <REP> GeTax2005
    31.10.2006 21:26 <REP> Google
    22.12.2006 17:10 <REP> Grisoft
    30.04.2005 19:00 <REP> GSC Game World
    12.09.2005 20:08 <REP> IDM Computer Solutions
    18.12.2006 22:13 <REP> IGN
    24.09.2006 12:39 <REP> IKEA HomePlanner
    17.04.2005 13:31 <REP> Illustrate
    28.10.2004 16:03 <REP> Intel
    11.01.2006 18:47 <REP> InterActual
    17.12.2006 18:21 <REP> Internet Explorer
    06.11.2006 21:21 <REP> iPod
    06.11.2006 21:22 <REP> iTunes
    13.11.2006 18:41 <REP> Java
    08.12.2004 12:57 <REP> K700i USB-Handset Manager
    04.11.2006 16:24 <REP> Lavasoft
    27.12.2005 12:02 <REP> Lecteur CANALPLAY
    17.06.2006 13:00 <REP> LimeWire
    21.08.2006 14:02 <REP> Logitech
    15.05.2005 16:17 <REP> LucasFan Games
    25.03.2005 20:32 <REP> LX Download Manager
    23.01.2006 20:24 <REP> Messenger
    24.09.2006 12:33 <REP> Messenger Plus! 3
    28.10.2004 15:50 <REP> microsoft frontpage
    23.05.2006 16:36 <REP> Microsoft Games
    05.11.2006 13:44 <REP> Microsoft Office
    02.07.2006 20:05 <REP> Microsoft Visual Studio
    02.07.2006 20:04 <REP> Microsoft Works
    02.07.2006 20:04 <REP> Microsoft.NET
    16.12.2006 16:54 <REP> Movie Maker
    09.01.2006 17:35 <REP> Mozilla Firefox
    02.07.2006 20:05 <REP> MSBuild
    28.10.2004 15:48 <REP> MSN
    28.10.2004 15:48 <REP> MSN Gaming Zone
    02.11.2006 22:24 <REP> MSN Messenger
    17.11.2006 19:02 <REP> MSXML 4.0
    12.09.2005 17:19 <REP> MUSICMATCH
    19.04.2005 20:10 <REP> NASA
    23.10.2006 19:29 <REP> NETGEAR
    28.10.2004 15:26 <REP> NetMeeting
    07.09.2006 14:40 <REP> Notepad++
    04.01.2002 18:33 <REP> OfficeUpdate11
    11.12.2006 19:03 <REP> Opera
    16.12.2006 16:54 <REP> Outlook Express
    26.03.2006 10:50 <REP> PDFCreator
    16.05.2005 17:39 <REP> PeerGuardian pr14
    09.03.2005 18:13 <REP> Plustech Inc
    27.03.2005 13:48 <REP> PopCap Games
    06.11.2006 21:20 <REP> QuickTime
    26.11.2004 21:09 <REP> Real
    28.10.2004 16:12 <REP> Realtek Sound Manager
    21.08.2006 14:07 <REP> ReflexiveArcade
    18.02.2005 18:07 <REP> ScreenSaver
    23.01.2006 20:26 <REP> Secure Surfing Engine
    28.10.2004 15:48 <REP> Services en ligne
    28.09.2006 10:59 <REP> Sony Ericsson
    01.05.2006 16:03 <REP> Spybot - Search & Destroy
    04.11.2006 20:08 <REP> Spybot - Search & Destroy2
    23.01.2006 20:26 <REP> Steganos Internet Anonym 7
    27.12.2005 12:03 <REP> StreetFighter Flash
    17.06.2006 12:53 <REP> TheTurtle
    07.02.2006 18:22 <REP> Trustix
    31.07.2005 12:04 <REP> Ubi Soft
    08.12.2004 13:09 <REP> Ubisoft
    01.06.2005 22:14 <REP> Ulead Systems
    17.06.2006 12:59 <REP> Visicom Media
    17.06.2005 19:32 <REP> VoipBuster.com
    20.02.2006 19:44 <REP> Watchtower
    09.03.2006 22:47 <REP> Webteh
    18.11.2006 22:51 <REP> Windows Defender
    05.11.2004 17:41 <REP> Windows Media Components
    04.09.2006 19:43 <REP> Windows Media Connect 2
    16.12.2006 16:54 <REP> Windows Media Player
    28.10.2004 15:26 <REP> Windows NT
    27.08.2005 19:55 <REP> WinHex
    23.01.2006 20:26 <REP> WinRAR
    28.10.2004 15:50 <REP> xerox
    19.11.2006 13:26 <REP> ?ssembly
    04.11.2006 12:26 <REP> ??stem
    0 fichier(s) 0 octets
    122 Rép(s) 32'277'479'424 octets libres
    Le volume dans le lecteur C s'appelle Wxp
    Le numéro de série du volume est 84B2-DB13

    Répertoire de C:\Program Files\fichiers communs

    19.11.2006 13:26 <REP> .
    19.11.2006 13:26 <REP> ..
    26.03.2006 11:33 <REP> Adobe
    05.11.2006 13:50 <REP> Autodesk Shared
    05.08.2006 10:52 <REP> AVSMedia
    05.11.2006 13:44 <REP> DESIGNER
    21.11.2004 15:01 <REP> InstallShield
    05.09.2006 20:30 <REP> Java
    21.08.2006 14:02 <REP> Logitech
    03.11.2004 19:17 <REP> Macrovision Shared
    05.11.2006 13:44 <REP> Microsoft Shared
    28.10.2004 15:48 <REP> MSSoap
    01.01.2002 00:07 <REP> ODBC
    24.09.2006 12:54 <REP> Panda Software
    26.11.2004 21:09 <REP> Real
    28.10.2004 15:48 <REP> Services
    01.01.2002 00:07 <REP> SpeechEngines
    20.06.2006 20:39 <REP> Synacast
    16.12.2006 14:55 <REP> System
    28.09.2006 10:59 <REP> Teleca Shared
    26.11.2004 21:09 <REP> xing shared
    22.12.2006 18:18 <REP> {84B2DB13-0C7E-1036-0924-040307090029}
    0 fichier(s) 0 octets
    22 Rép(s) 32'277'487'616 octets libres
    Le volume dans le lecteur C s'appelle Wxp
    Le numéro de série du volume est 84B2-DB13

    Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders

    02.07.2006 20:05 <REP> .
    02.07.2006 20:05 <REP> ..
    04.01.2002 18:27 <REP> 1033
    02.07.2006 19:59 <REP> 1036
    25.04.2006 20:33 967'952 MSONSEXT.DLL
    02.05.2006 18:37 40'208 MSOSV.DLL
    03.06.1999 13:09 122'937 MSOWS409.DLL
    07.03.2001 08:00 127'033 MSOWS40c.DLL
    11.07.2003 02:25 80'448 PKMWS.DLL
    5 fichier(s) 1'338'578 octets
    4 Rép(s) 32'277'487'616 octets libres
    Le volume dans le lecteur C s'appelle Wxp
    Le numéro de série du volume est 84B2-DB13

    Répertoire de C:\Program Files\common files

    14.01.2006 15:33 <REP> .
    14.01.2006 15:33 <REP> ..
    21.08.2006 17:33 <REP> EasyInfo
    20.02.2005 12:17 <REP> Stardock
    0 fichier(s) 0 octets
    4 Rép(s) 32'277'483'520 octets libres
    Le volume dans le lecteur C s'appelle Wxp
    Le numéro de série du volume est 84B2-DB13

    Répertoire de C:\

    11.11.2001 00:00 68'096 diff.exe
    27.08.2006 14:10 103'424 grep.exe
    31.10.2005 16:56 700'416 StubInstaller.exe
    24.05.2001 11:59 162'304 UNWISE.EXE
    4 fichier(s) 1'034'240 octets
    0 Rép(s) 32'277'483'520 octets libres
    c:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.0.2.16\iTunesSetupAdmin.exe
    c:\Documents and Settings\Wxp\.limewire\.NetworkShare\LimeWireWin4.10.5.exe
    c:\Documents and Settings\Wxp\.limewire\.NetworkShare\Incomplete\T-2840440-LimeWireWin4.10.9.exe
    c:\Documents and Settings\Wxp\Bureau\avgas-setup-7.5.0.50.exe
    c:\Documents and Settings\Wxp\Bureau\blbeta.exe
    c:\Documents and Settings\Wxp\Bureau\drweb-cureit.exe
    c:\Documents and Settings\Wxp\Bureau\mwav.exe
    c:\Documents and Settings\Wxp\Bureau\SmitfraudFix.exe
    c:\Documents and Settings\Wxp\Bureau\VundoFix.exe
    c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\diff.exe
    c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\FilesInfoCmd.exe
    c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\grep.exe
    c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\LFiles.exe
    c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\LISTDLLS.exe
    c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\streams.exe
    c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\swreg.exe
    c:\Documents and Settings\Wxp\Bureau\newbie\crackme1.exe
    c:\Documents and Settings\Wxp\Bureau\newbie\stega11.exe
    c:\Documents and Settings\Wxp\Bureau\newbie\stega22.exe
    c:\Documents and Settings\Wxp\Bureau\newbie\stega4.exe
    c:\Documents and Settings\Wxp\Bureau\newbie\HexDecCharEditor\HexDecCharEditor.exe
    c:\Documents and Settings\Wxp\Bureau\newbie\Nouveau dossier\ocamlq-public[1].exe
    c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\dumphive.exe
    c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\GenericRenosFix.exe
    c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\Reboot.exe
    c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\SmiUpdate.exe
    c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\SrchSTS.exe
    c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swreg.exe
    c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swsc.exe
    c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swxcacls.exe
    c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\unzip.exe
    c:\Documents and Settings\Wxp\Bureau\Steganos Updates\sia7int.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\A0190033.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\A0190035.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\agfherdb.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\amwskrut.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\aolelmeq.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\aqusnwid.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\astpbqig.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\audimhij.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\aupgnxlj.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bbjudflx.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bddoirhx.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bifvcaqc.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bldhynhq.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bnyvvhbm.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cdjwyfix.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cfvbcrlo.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cgfvpsjm.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cgtyqlrr.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cjgiktsa.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ckxhgpdf.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\crdwqqep.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ddvvohgd.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\difwtfvm.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dikmwqyc.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dowllovy.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dqacyhwy.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dqxktplr.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dtsijbas.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\duajsngx.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dunxmasq.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\duoollxq.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dwarqyok.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ealavluy.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\edeeccww.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\elsdjceh.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\eoffqsqk.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\exrkvkgu.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\fopwmgdy.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\Fport.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\fskmtsbm.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ftboxnxl.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\fvsidooy.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gardhtfc.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gktfxipw.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gncopicl.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gobrxtwv.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\guxarogi.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gvopwqdu.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gyjqeywt.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\hgcddihu.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\hjqqbfii.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\hsrjerlt.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\hxdfpeav.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ikicnabt.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\imonihvr.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\itdgccxx.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\iuviiqct.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\jkrmhoip.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\katadsql.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\krplutvf.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ksmnegtd.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\kunweeey.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\kvrmyshi.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ldguntat.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\lvvoqgqi.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mcldsfkv.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mgxpvprt.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mjwgqnkh.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\musqllhf.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mvtnxnrp.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mydcfiom.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mykecmyy.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ndjhporp.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\nfqwphvg.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\nhsraulq.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\nloyoorh.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\nnddeawh.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ntfwbkns.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\nwkrfcck.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\odabjrlj.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ogpsrlax.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ohnjbmtx.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ohpkqvys.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\oprsgstw.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\otfoegrk.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\owyllmmu.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\pfodbooc.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\pgshdnsa.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\phlkcrom.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\pmqbsdfq.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\Process.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\pslist.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\qktboyra.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\qnstnlpd.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\qobxyqqr.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\quwjqcea.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\rbneyqpm.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\restart.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\rriktdeh.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\sgbpxmer.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\sqogavnb.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\stuctgge.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\stxubqlj.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\sufgwnyi.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\svyywssj.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\tdbxowgv.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\tduxgeqv.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\tioxqmer.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\tnhgecfn.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\tqdncpme.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\txhihndo.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ubhieikw.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\uglxpxxn.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ujopqkeq.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\unutsgdr.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vanlhmqa.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\veeqhdea.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vfnvmtsv.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vjbmfnse.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vltjjnrm.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vsekpwgr.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vvnidnif.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vynxttnq.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\waodljik.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\wbxcojle.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\whudvlfi.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\wticjrpl.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xcbphrhg.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xcrnlyax.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xlltauir.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xonmwfdy.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xpeisose.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xsvgmppc.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xwlplaqj.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ybthtjqe.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ybulhxpc.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\yifydmhf.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ylafajue.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ylorutgu.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\yltenhbs.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ynktjcxl.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ytqesnjf.exe
    c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\yyqrwrsj.exe
    c:\Documents and Settings\Wxp\Local Settings\Temp\Uninst.exe
    c:\Documents and Settings\Wxp\Local Settings\Temp\AUG2005DXREDIST\DXSETUP.exe
    c:\Documents and Settings\Wxp\Mes documents\Ma musique\Adoprixtixics\4dsportdriving\LOAD.EXE
    c:\Documents and Settings\Wxp\Mes documents\Ma musique\Adoprixtixics\4dsportdriving\SETUP.EXE
    c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll
    c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig.dll
    c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
    c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Default\MpEngine.dll
    c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{05D79D39-D5A6-4866-9582-579B32CEA05A}\mpengine.dll
    c:\Documents and Settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
    c:\Documents and Settings\Wxp\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll
    0
  4. Utilisateur anonyme
     
    Bonjour

    c'est déja mieux.
    Encore quelques corrections.

    Une partie de la procédure se déroulera sans avoir accès à internet, prière d'imprimer ces instructions, ou de les coller dans un fichier texte, pour lecture durant cette désinfection.
    Les manipulations sont à faire sans interruption et dans l'ordre.
    Si tu ne comprends pas quelque chose, demande des explications avant de commencer


    1 Redémarre en mode sans échec. Attention, tu n'as pas accès à internet dans ce mode, note bien ce que tu as à faire.
    Démarre l'ordinateur.
    Une fois le chargement du BIOS terminé, il y a un écran noir. Appuye sur la touche F8 ou F5 jusqu'à l'affichage du menu des options avancées de Windows.
    En utilisant les touches du curseur, sélectionne le mode sans échec approprié et appuye sur Entrée.

    2 Assure toi d'avoir accés à tous les fichiers.
    Démarrer, Poste de travail ou autre dossier, Menu Outils, Option des dossiers, onglet Affichage :
    Activer la case : Afficher les fichiers et dossiers cachés
    Désactiver la case : Masquer les extensions des fichiers dont le type est connu
    Désactiver la case : Masquer les fichiers protégés du système d'exploitation
    Puis Appliquer

    3 Désinstalle ces applications (si tu les trouves) dans Ajout-Suppression de programmes :

    MediaTickets by OIN
    Adverts
    ?ssembly
    ??stem

    4 Supprime les fichiers/dossiers incriminés (s'ils existent encore) :

    C:\Program Files\MediaTickets by OIN
    C:\Program Files\Adverts
    C:\Program Files\?ssembly
    C:\Program Files\??stem
    c:\Documents and Settings\Wxp\Bureau\avgas-setup-7.5.0.50.exe
    c:\Documents and Settings\Wxp\Bureau\blbeta.exe
    c:\Documents and Settings\Wxp\Bureau\drweb-cureit.exe
    c:\Documents and Settings\Wxp\Bureau\mwav.exe
    c:\Documents and Settings\Wxp\Bureau\SmitfraudFix.exe
    c:\Documents and Settings\Wxp\DoctorWeb
    C:\WINDOWS\System32\xwjoalvq.ini
    C:\WINDOWS\System32\odtpfici.dll
    C:\WINDOWS\System32\wbqmyces.dll
    C:\WINDOWS\System32\axgvpryj.dll
    C:\WINDOWS\System32\njimnfjf.dll
    C:\WINDOWS\System32\cpdymfnb.dll
    C:\WINDOWS\System32\cbhwfxuq.ini
    C:\WINDOWS\System32\muaktpvk.dll
    C:\WINDOWS\System32\efvnvkme.dll
    C:\WINDOWS\System32\cvfginer.dll
    C:\WINDOWS\System32\gtmbnrcp.dll
    C:\WINDOWS\System32\jrharjaq.dll
    C:\WINDOWS\System32\rvoqxscq.dll
    C:\WINDOWS\System32\quxfwhbc.dll
    C:\WINDOWS\system32\vturs.dll
    c:\WINDOWS\system32\dmgr2.exe

    Recache les fichiers systeme afin de ne pas faire d'erreur à l'avenir en sélectionnant ne pas afficher les fichiers cachés ou les fichiers système.

    5 Lance le nettoyage avec CCleaner

    6 Redémarre normalement

    Poste un nouveau rapport DiagHelp.
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. legras Messages postés 21 Statut Membre
     
    Et voila le dernier rapport Daig :

    C:\WINDOWS\System32\wpa.dbl -->30.12.2006 14:45:58
    C:\WINDOWS\System32\perfh00C.dat -->23.12.2006 10:56:18
    C:\WINDOWS\System32\perfh009.dat -->23.12.2006 10:56:18
    C:\WINDOWS\System32\perfc00C.dat -->23.12.2006 10:56:18
    C:\WINDOWS\System32\perfc009.dat -->23.12.2006 10:56:18
    C:\WINDOWS\System32\PerfStringBackup.INI -->23.12.2006 10:56:17
    C:\WINDOWS\System32\tmp.txt -->22.12.2006 17:34:49
    C:\WINDOWS\System32\tmp.reg -->22.12.2006 17:34:49
    C:\WINDOWS\System32\quxfwhbc.dll -->18.12.2006 19:18:38
    C:\WINDOWS\System32\spupdsvc.inf -->17.12.2006 18:19:27
    C:\WINDOWS\System32\mcrh.tmp -->17.12.2006 14:26:34
    C:\WINDOWS\System32\MRT.exe -->08.12.2006 00:13:44
    C:\WINDOWS\System32\wmvcore.dll -->07.12.2006 06:29:34
    C:\WINDOWS\System32\vturs.dll -->05.12.2006 17:40:25
    C:\WINDOWS\System32\LegitCheckControl.DLL -->29.11.2006 16:31:32
    C:\WINDOWS\System32\swxpckm.dll -->19.11.2006 10:13:15
    C:\WINDOWS\System32\FNTCACHE.DAT -->19.11.2006 10:08:47
    C:\WINDOWS\System32\jupdate-1.5.0_09-b03.log -->13.11.2006 18:41:28
    C:\WINDOWS\System32\CmdLineExt.dll -->12.11.2006 19:50:00
    C:\WINDOWS\System32\inetcomm.dll -->08.11.2006 06:07:30
    C:\WINDOWS\System32\TitanPokerIconDropTRA108.ico -->04.11.2006 16:42:53
    C:\WINDOWS\System32\MobileSidewalkRON_2.ico -->04.11.2006 16:32:42
    C:\WINDOWS\System32\msxml4.dll -->04.11.2006 14:14:00
    C:\WINDOWS\System32\CONFIG.NT -->02.11.2006 22:11:17
    C:\WINDOWS\System32\Thumbs.db -->01.11.2006 21:37:45

    C:\WINDOWS\WindowsUpdate.log -->30.12.2006 14:45:53
    C:\WINDOWS\SchedLgU.Txt -->30.12.2006 14:45:49
    C:\WINDOWS\bootstat.dat -->30.12.2006 14:45:47
    C:\WINDOWS\BlendSettings.ini -->29.12.2006 23:46:37
    C:\WINDOWS\QTFont.qfn -->28.12.2006 20:05:26
    C:\WINDOWS\QTFont.for -->24.12.2006 16:04:06
    C:\WINDOWS\cdPlayer.ini -->26.11.2006 14:29:21
    C:\WINDOWS\Thumbs.db -->19.11.2006 16:47:33
    C:\WINDOWS\SWPRODPB.INI -->06.11.2006 23:17:10
    C:\WINDOWS\system.ini -->06.11.2006 22:46:44
    C:\WINDOWS\cserve.ini -->01.11.2006 21:44:14
    C:\WINDOWS\WMSysPr9.prx -->04.10.2006 19:46:53
    C:\WINDOWS\mngui.INI -->28.09.2006 10:43:09
    C:\WINDOWS\pavsig.txt -->08.09.2006 19:57:38
    C:\WINDOWS\BricoPackFoldersDelete.cmd -->12.08.2006 16:08:45

    C:\WINDOWS\ALCFDRTM.EXE |03/01/2002 17:07:42
    C:\WINDOWS\alcrmv.exe |28/10/2004 16:12:26
    C:\WINDOWS\alcupd.exe |28/10/2004 16:12:26
    C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe |02/07/2005 17:43:37
    C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe |17/07/2005 18:21:58
    C:\WINDOWS\bwUnin-7.2.0.157-8876480SL.exe |02/04/2006 17:45:49
    C:\WINDOWS\GPInstall.exe |09/02/2005 17:57:37
    C:\WINDOWS\IsUn040c.exe |28/10/2004 15:57:55
    C:\WINDOWS\IsUninst.exe |28/10/2004 15:45:05
    C:\WINDOWS\iun6002.exe |20/07/2005 20:25:04
    C:\WINDOWS\ScUnin.exe |24/09/2005 13:02:20
    C:\WINDOWS\Setup1.exe |18/12/2004 13:14:19
    C:\WINDOWS\slrundll.exe |28/10/2004 15:27:29
    C:\WINDOWS\SOUNDMAN.EXE |28/10/2004 16:12:34
    C:\WINDOWS\twunk_16.exe |24/04/2003 13:00:00
    C:\WINDOWS\twunk_32.exe |24/04/2003 13:00:00
    C:\WINDOWS\una2setup.exe |06/12/2004 20:06:03
    C:\WINDOWS\unADesktop.exe |14/01/2005 15:43:51
    C:\WINDOWS\unin040c.exe |16/02/2005 17:56:29
    C:\WINDOWS\uninst.exe |18/08/2005 16:50:31
    C:\WINDOWS\USBK700iphmgunin.exe |04/01/2002 19:44:54
    C:\WINDOWS\twain.dll |24/04/2003 13:00:00
    C:\WINDOWS\twain_32.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\AcSignOpt.exe |05/03/2005 13:18:15
    C:\WINDOWS\system32\append.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\asuninst.exe |23/01/2006 20:11:05
    C:\WINDOWS\system32\aswBoot.exe |02/11/2006 22:11:06
    C:\WINDOWS\system32\ati2evxx.exe |29/09/2004 07:16:44
    C:\WINDOWS\system32\Ati2mdxx.exe |29/09/2004 07:18:28
    C:\WINDOWS\system32\ati2sgag.exe |28/10/2004 16:20:39
    C:\WINDOWS\system32\debug.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\dosx.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\dvdplay.exe |23/08/2001 18:47:34
    C:\WINDOWS\system32\edlin.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\exe2bin.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\fastopen.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\java.exe |13/11/2006 18:41:29
    C:\WINDOWS\system32\javaw.exe |13/11/2006 18:41:29
    C:\WINDOWS\system32\javaws.exe |13/11/2006 18:41:29
    C:\WINDOWS\system32\mem.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\mscdexnt.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\NeroCheck.exe |09/07/2001 11:50:42
    C:\WINDOWS\system32\nlsfunc.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\redir.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\reico.exe |18/02/2005 18:17:11
    C:\WINDOWS\system32\RTLCPL.EXE |28/10/2004 16:12:35
    C:\WINDOWS\system32\setver.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\share.exe |24/04/2003 13:00:00
    C:\WINDOWS\system32\slrundll.exe |28/10/2004 15:27:30
    C:\WINDOWS\system32\slserv.exe |28/10/2004 15:27:30
    C:\WINDOWS\system32\SpoonUninstall.exe |17/04/2005 13:31:15
    C:\WINDOWS\system32\UAService7.exe |27/03/2005 14:54:25
    C:\WINDOWS\system32\Uharc.exe |18/02/2005 18:16:23
    C:\WINDOWS\system32\usrmlnka.exe |23/08/2001 18:47:48
    C:\WINDOWS\system32\usrprbda.exe |23/08/2001 18:47:48
    C:\WINDOWS\system32\usrshuta.exe |23/08/2001 18:47:48
    C:\WINDOWS\system32\a3d.dll |28/10/2004 16:12:34
    C:\WINDOWS\system32\AcSignExt.dll |05/03/2005 13:18:09
    C:\WINDOWS\system32\AcSignExtRes.dll |07/03/2005 19:00:01
    C:\WINDOWS\system32\AcSignIcon.dll |05/03/2005 13:18:12
    C:\WINDOWS\system32\amstream.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\ati2cqag.dll |28/10/2004 15:27:32
    C:\WINDOWS\system32\ati2dvaa.dll |28/10/2004 15:27:32
    C:\WINDOWS\system32\ati2dvag.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\ati2edxx.dll |29/09/2004 07:18:20
    C:\WINDOWS\system32\ati2evxx.dll |29/09/2004 07:18:08
    C:\WINDOWS\system32\ati3d1ag.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\ati3d2ag.dll |13/11/2003 21:10:54
    C:\WINDOWS\system32\ati3duag.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\ATIDDC.DLL |29/09/2004 07:16:22
    C:\WINDOWS\system32\ATIDEMGR.dll |29/09/2004 09:32:34
    C:\WINDOWS\system32\atiiiexx.dll |29/09/2004 09:58:44
    C:\WINDOWS\system32\atikvmag.dll |21/02/2006 19:11:02
    C:\WINDOWS\system32\atioglx1.dll |21/02/2006 19:27:14
    C:\WINDOWS\system32\atioglxx.dll |29/09/2004 07:44:00
    C:\WINDOWS\system32\atipdlxx.dll |29/09/2004 07:18:50
    C:\WINDOWS\system32\atitvo32.dll |29/09/2004 06:36:20
    C:\WINDOWS\system32\ativcoxx.dll |09/11/2001 10:01:04
    C:\WINDOWS\system32\ativtmxx.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\ativvaxx.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\atmfd.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\atmlib.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\Audio3D.dll |28/10/2004 16:12:34
    C:\WINDOWS\system32\clrvidcc.dll |02/01/2005 21:33:57
    C:\WINDOWS\system32\clrviddc.dll |11/08/1998 15:18:52
    C:\WINDOWS\system32\CmdLineExt.dll |27/03/2005 14:54:25
    C:\WINDOWS\system32\CNCS232.DLL |20/11/2003 14:09:09
    C:\WINDOWS\system32\cncs32.dll |27/12/2005 18:15:46
    C:\WINDOWS\system32\compatui.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\decdnet.dll |11/08/1998 15:18:44
    C:\WINDOWS\system32\dgrpsetu.dll |01/01/2002 00:07:13
    C:\WINDOWS\system32\dgsetup.dll |01/01/2002 00:07:13
    C:\WINDOWS\system32\DivX.dll |26/10/2004 23:38:23
    C:\WINDOWS\system32\divxdec_0407.dll |26/10/2004 23:38:18
    C:\WINDOWS\system32\divxdec_040c.dll |26/10/2004 23:38:18
    C:\WINDOWS\system32\divxdec_0411.dll |26/10/2004 23:38:18
    C:\WINDOWS\system32\divx_xx07.dll |26/10/2004 23:38:17
    C:\WINDOWS\system32\divx_xx0c.dll |26/10/2004 23:38:18
    C:\WINDOWS\system32\divx_xx11.dll |26/10/2004 23:38:18
    C:\WINDOWS\system32\dmgrax2.dll |25/03/2005 20:32:31
    C:\WINDOWS\system32\dpu10.dll |26/10/2004 23:39:03
    C:\WINDOWS\system32\dpuGUI10.dll |26/10/2004 23:39:03
    C:\WINDOWS\system32\dpus10.dll |26/10/2004 23:39:03
    C:\WINDOWS\system32\dpv10.dll |26/10/2004 23:39:04
    C:\WINDOWS\system32\encdec.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\encdnet.dll |02/01/2005 21:33:57
    C:\WINDOWS\system32\EnumDev111.dll |23/10/2006 19:29:44
    C:\WINDOWS\system32\EqnClass.Dll |01/01/2002 00:07:12
    C:\WINDOWS\system32\GEARAspi.dll |19/09/2006 15:43:58
    C:\WINDOWS\system32\hsfcisp2.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\hticons.dll |28/10/2004 15:48:03
    C:\WINDOWS\system32\hypertrm.dll |28/10/2004 15:48:03
    C:\WINDOWS\system32\iccvid.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\ieencode.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\imagr5.dll |21/09/2000 17:02:28
    C:\WINDOWS\system32\imagx5.dll |27/09/2000 16:15:06
    C:\WINDOWS\system32\ImagXpr5.dll |21/09/2000 12:53:00
    C:\WINDOWS\system32\inetda.dll |02/08/2001 04:11:25
    C:\WINDOWS\system32\IpLib.dll |23/10/2006 19:29:44
    C:\WINDOWS\system32\ir32_32.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\ir41_qc.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\ir41_qcx.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\ir50_32.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\ir50_qc.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\ir50_qcx.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\isrdbg32.dll |28/10/2004 15:48:58
    C:\WINDOWS\system32\jgaw400.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\jgdw400.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\jgmd400.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\jgpl400.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\jgsd400.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\jgsh400.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\KMVIDC32.DLL |30/11/2004 18:40:54
    C:\WINDOWS\system32\mdmxsdk.dll |28/10/2004 15:27:31
    C:\WINDOWS\system32\mdwmdmsp.dll |23/08/2001 18:47:06
    C:\WINDOWS\system32\mrvdlg.dll |28/10/2004 16:17:56
    C:\WINDOWS\system32\msdmo.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\msencode.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\msttxl16.dll |24/02/1998 23:21:00
    C:\WINDOWS\system32\MSWAY.dll |26/12/2005 11:09:15
    C:\WINDOWS\system32\msxwnet32.dll |16/05/2001 11:52:26
    C:\WINDOWS\system32\mtxparhd.dll |28/10/2004 15:27:30
    C:\WINDOWS\system32\nv4_disp.dll |28/10/2004 15:27:30
    C:\WINDOWS\system32\Oemdspif.dll |29/09/2004 07:18:36
    C:\WINDOWS\system32\paqsp.dll |23/08/2001 18:47:16
    C:\WINDOWS\system32\pdfcmnnt.dll |26/03/2006 10:49:45
    C:\WINDOWS\system32\picn20.dll |21/09/2000 07:47:10
    C:\WINDOWS\system32\pnc32301.dll |02/01/2005 21:33:58
    C:\WINDOWS\system32\pnc32401.dll |02/01/2005 21:33:58
    C:\WINDOWS\system32\pncrt.dll |11/08/1998 15:18:44
    C:\WINDOWS\system32\pndx5016.dll |26/11/2004 21:09:27
    C:\WINDOWS\system32\pndx5032.dll |26/11/2004 21:09:27
    C:\WINDOWS\system32\pnen3230.dll |02/01/2005 21:33:58
    C:\WINDOWS\system32\pneng101.dll |02/01/2005 21:33:58
    C:\WINDOWS\system32\PSIKey.dll |26/10/2004 23:38:24
    C:\WINDOWS\system32\ptipbmf.dll |28/10/2004 16:18:41
    C:\WINDOWS\system32\qedwipes.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\qt-mt331.dll |26/10/2004 23:39:05
    C:\WINDOWS\system32\quxfwhbc.dll |18/12/2006 19:18:34
    C:\WINDOWS\system32\RA3214_4.dll |11/08/1998 15:18:44
    C:\WINDOWS\system32\ra3228_8.dll |11/08/1998 15:18:44
    C:\WINDOWS\system32\ra32clv1.dll |11/08/1998 15:18:44
    C:\WINDOWS\system32\ra32dnet.dll |11/08/1998 15:18:44
    C:\WINDOWS\system32\ra32rv10.dll |11/08/1998 15:18:44
    C:\WINDOWS\system32\ra32sipr.dll |11/08/1998 15:18:44
    C:\WINDOWS\system32\rarv1032.dll |11/08/1998 15:18:44
    C:\WINDOWS\system32\rarv10en.dll |02/01/2005 21:33:58
    C:\WINDOWS\system32\RGSS100J.dll |11/06/2005 15:48:26
    C:\WINDOWS\system32\rmevents.dll |02/01/2005 21:33:58
    C:\WINDOWS\system32\rmmerge2.dll |02/01/2005 21:33:58
    C:\WINDOWS\system32\rmoc3260.dll |26/11/2004 21:09:32
    C:\WINDOWS\system32\Roboex32.dll |30/01/2005 14:44:37
    C:\WINDOWS\system32\RTLCPAPI.dll |28/10/2004 16:12:34
    C:\WINDOWS\system32\s3gnb.dll |28/10/2004 15:27:30
    C:\WINDOWS\system32\sbe.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\SIntf16.dll |10/12/2004 17:11:20
    C:\WINDOWS\system32\SIntf32.dll |10/12/2004 17:11:20
    C:\WINDOWS\system32\SIntfNT.dll |10/12/2004 17:11:20
    C:\WINDOWS\system32\slbcsp.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\slbiop.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\slbrccsp.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\slcoinst.dll |28/10/2004 15:27:30
    C:\WINDOWS\system32\slextspk.dll |28/10/2004 15:27:30
    C:\WINDOWS\system32\slgen.dll |28/10/2004 15:27:30
    C:\WINDOWS\system32\spnike.dll |23/08/2001 18:47:18
    C:\WINDOWS\system32\sprio600.dll |23/08/2001 18:47:18
    C:\WINDOWS\system32\sprio800.dll |23/08/2001 18:47:18
    C:\WINDOWS\system32\spxcoins.dll |01/01/2002 00:07:12
    C:\WINDOWS\system32\swxpckm.dll |19/11/2006 10:13:15
    C:\WINDOWS\system32\tsd32.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\TwnLib20.dll |26/06/2000 10:45:30
    C:\WINDOWS\system32\unrar.dll |06/12/2004 20:06:06
    C:\WINDOWS\system32\unzip32.dll |05/12/2004 22:08:08
    C:\WINDOWS\system32\usrcntra.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrcoina.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrdpa.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrdtea.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrfaxa.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrlbva.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrrtosa.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrsdpia.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrsvpia.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrv42a.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrv80a.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrvoica.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\usrvpa.dll |23/08/2001 18:47:20
    C:\WINDOWS\system32\vboxb410.dll |13/06/2001 03:52:44
    C:\WINDOWS\system32\vboxp410.dll |13/06/2001 03:52:45
    C:\WINDOWS\system32\vboxt410.dll |13/06/2001 03:52:45
    C:\WINDOWS\system32\vturs.dll |05/12/2006 17:40:17
    C:\WINDOWS\system32\wbhelp2.dll |02/11/2004 22:03:21
    C:\WINDOWS\system32\WG1v2Lib.dll |23/10/2006 19:29:44
    C:\WINDOWS\system32\wh2robo.dll |30/01/2005 14:44:37
    C:\WINDOWS\system32\win87em.dll |24/04/2003 13:00:00
    C:\WINDOWS\system32\WmJoyFrc.dll |21/08/2006 14:02:54
    C:\WINDOWS\system32\xmlparse.dll |08/12/2004 13:09:09
    C:\WINDOWS\system32\xmltok.dll |08/12/2004 13:09:09
    C:\WINDOWS\system32\ZPORT4AS.dll |23/01/2006 20:11:05

    Le volume dans le lecteur C s'appelle Wxp
    Le numéro de série du volume est 84B2-DB13

    Répertoire de C:\WINDOWS\system32

    19.08.2004 15:09 6'144 csrss.exe
    1 fichier(s) 6'144 octets
    0 Rép(s) 32'159'334'400 octets libres

    Contenu de Downloaded Program Files
    Le volume dans le lecteur C s'appelle Wxp
    Le numéro de série du volume est 84B2-DB13

    Répertoire de C:\WINDOWS\Downloaded Program Files

    26.12.2006 11:17 <REP> .
    26.12.2006 11:17 <REP> ..
    11.04.2006 16:10 135'168 asinst.dll
    03.04.2006 10:00 537 asinst.inf
    17.05.2006 13:32 198'304 avsniffdlgs.dll
    17.05.2006 13:26 537'704 AXXPEE.dll
    06.09.2006 00:00 2'504 catalog.dat
    18.11.2006 12:20 <REP> CONFLICT.1
    22.12.2006 18:18 <REP> CONFLICT.2
    22.12.2006 18:18 <REP> CONFLICT.3
    22.12.2006 18:18 <REP> CONFLICT.4
    26.12.2006 11:17 <REP> CONFLICT.5
    22.12.2006 18:18 <REP> CONFLICT.6
    28.10.2004 15:49 65 desktop.ini
    06.09.2006 00:00 6'899 ecbootil.vxd
    17.05.2006 13:26 42'112 ecmldr32.dll
    06.09.2006 00:00 272'040 ecmsvr32.dll
    08.09.2004 22:38 1'271 erma.inf
    14.02.2003 09:32 283'296 IDrop.ocx
    14.02.2003 09:34 114'848 IDropENU.dll
    13.03.2003 09:58 114'600 IDropFRA.dll
    10.11.2005 13:05 876 jinstall-1_5_0_06.inf
    29.11.2006 14:00 367 LegitCheckControl.inf
    17.05.2006 13:28 6'850 navapi.vxd
    17.05.2006 13:28 201'896 navapi32.dll
    06.09.2006 00:00 124'584 naveng32.dll
    06.09.2006 00:00 882'344 navex32a.dll
    09.12.2005 14:47 24'576 playershim.dll
    09.10.2003 10:32 144 QTPlugin.inf
    06.09.2006 00:00 97'552 scrauth.dat
    22.06.2006 10:41 5'032 swflash.inf
    06.09.2006 00:00 14 symaveng.cat
    06.09.2006 00:00 901 symaveng.inf
    06.09.2006 00:00 48'797 tcdefs.dat
    06.09.2006 00:00 966'264 tcscan7.dat
    06.09.2006 00:00 315'136 tcscan8.dat
    06.09.2006 00:00 659'400 tcscan9.dat
    06.09.2006 00:00 453 tinf.dat
    06.09.2006 00:00 148 tinfidx.dat
    06.09.2006 00:00 1'957 tinfl.dat
    06.09.2006 00:00 58'587 tscan1.dat
    06.09.2006 00:00 3'027 tscan1hd.dat
    06.09.2006 00:00 5'116 v.grd
    06.09.2006 00:00 2'261 v.sig
    06.09.2006 00:00 106'244 virscan.inf
    06.09.2006 00:00 966'811 virscan1.dat
    06.09.2006 00:00 569'712 virscan2.dat
    06.09.2006 00:00 146'612 virscan3.dat
    06.09.2006 00:00 320'186 virscan4.dat
    06.09.2006 00:00 2'700'020 virscan5.dat
    06.09.2006 00:00 389'301 virscan6.dat
    06.09.2006 00:00 4'468'258 virscan7.dat
    06.09.2006 00:00 1'593'724 virscan8.dat
    06.09.2006 00:00 3'622'432 virscan9.dat
    06.09.2006 00:00 32 virscant.dat
    08.09.2006 21:30 2'072 vscanmsx.dat
    06.09.2006 00:00 224 zdone.dat
    49 fichier(s) 20'001'258 octets

    Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.1

    18.11.2006 12:20 <REP> .
    18.11.2006 12:20 <REP> ..
    0 fichier(s) 0 octets

    Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.2

    22.12.2006 18:18 <REP> .
    22.12.2006 18:18 <REP> ..
    0 fichier(s) 0 octets

    Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.3

    22.12.2006 18:18 <REP> .
    22.12.2006 18:18 <REP> ..
    0 fichier(s) 0 octets

    Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.4

    22.12.2006 18:18 <REP> .
    22.12.2006 18:18 <REP> ..
    0 fichier(s) 0 octets

    Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.5

    26.12.2006 11:17 <REP> .
    26.12.2006 11:17 <REP> ..
    0 fichier(s) 0 octets

    Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.6

    22.12.2006 18:18 <REP> .
    22.12.2006 18:18 <REP> ..
    0 fichier(s) 0 octets

    Total des fichiers listés :
    49 fichier(s) 20'001'258 octets
    20 Rép(s) 32'159'330'304 octets libres

    Recherche de rootkit! (Merci S!Ri)

    Recherche d'infections connues

    Liste des programmes installes

    Ad-Aware SE Personal
    Adobe Flash Player 9 ActiveX
    Adobe Photoshop 6.0
    Adobe Reader 7.0.8 - Français
    Adobe SVG Viewer
    adsl TV
    Apple Software Update
    Archiveur WinRAR
    AsusUpdate
    ATI - Utilitaire de désinstallation du logiciel
    ATI Control Panel
    ATI Display Driver
    Audacity 1.2.4
    AutoCAD 2006 - Français
    Autodesk DWF Viewer
    AutoUpdate
    avast! Antivirus
    AVG Anti-Spyware 7.5
    BitTorrent 4.0.1
    CCleaner (remove only)
    DirectX for Managed Code Update (December 2004)
    DivX Player
    DivX Pro Trial
    Download Accelerator Plus
    EA SPORTS online 2006
    Easy TM 2.4
    eMule
    FileZilla (remove only)
    Freelancer
    GeTax2005
    Google Earth
    Google Toolbar for Internet Explorer
    Highway Pursuit v1.1
    HijackThis 1.99.1
    IGNMap 0.8.1
    iTunes
    J2SE Runtime Environment 5.0 Update 6
    J2SE Runtime Environment 5.0 Update 9
    K700i USB-Handset Manager
    Language pack for Ad-Aware SE
    Lecteur Windows Media 10
    Logitech Desktop Messenger
    Logitech Gaming Software
    Logitech SetPoint
    LX Systems Download Manager
    Macromedia Shockwave Player
    MediaLife
    Messenger Plus! 3 & Sponsor
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 French Language Pack
    Microsoft .NET Framework 1.1 Hotfix (KB886903)
    Microsoft .NET Framework 2.0
    Microsoft .NET Framework 2.0
    Microsoft .NET Framework 2.0 Language Pack - FRA
    Microsoft Game Studios Common Redistributables Pack 1
    Microsoft Internationalized Domain Names Mitigation APIs
    Microsoft National Language Support Downlevel APIs
    Microsoft Office Access MUI (French) 2007 (Beta)
    Microsoft Office Excel MUI (French) 2007 (Beta)
    Microsoft Office InfoPath MUI (French) 2007 (Beta)
    Microsoft Office Outlook MUI (French) 2007 (Beta)
    Microsoft Office PowerPoint MUI (French) 2007 (Beta)
    Microsoft Office Professional 2007 (Beta)
    Microsoft Office Professional Plus 2007 (Beta)
    Microsoft Office Proof (Arabic) 2007 (Beta)
    Microsoft Office Proof (Dutch) 2007 (Beta)
    Microsoft Office Proof (English) 2007 (Beta)
    Microsoft Office Proof (French) 2007 (Beta)
    Microsoft Office Proof (German) 2007 (Beta)
    Microsoft Office Proof (Spanish) 2007 (Beta)
    Microsoft Office Publisher MUI (French) 2007 (Beta)
    Microsoft Office Shared MUI (French) 2007 (Beta)
    Microsoft Office Word MUI (French) 2007 (Beta)
    Microsoft XML Parser
    Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA
    MSXML 4.0 SP2 (KB927978)
    MSXML4 Parser
    Nero - Burning Rom
    NHL06
    Oblivion
    Package de base Microsoft de service de chiffrement pour cartes à puce
    Panda ActiveScan
    PDFCreator
    Plasma Pong v1.2
    PowerDVD
    Prince of Persia T2T
    Prince of Persia The Two Thrones
    QuickTime
    RealPlayer
    Realtek AC'97 Audio
    Rise Of Legends
    Rise Of Legends
    Rise of Nations
    Security Update for Microsoft .NET Framework 2.0 (KB917283)
    Security Update pour Microsoft .NET Framework 2.0 (KB922770)
    Sony Ericsson Capability Manager
    Sony Ericsson Mobile Phone Monitor
    Spybot - Search & Destroy 1.4
    Starcraft
    Steganos Internet Anonym 7.1.6
    TrackMania Nations ESWC 0.1.7.5
    Watchtower Library 2005 - Édition française
    WebFldrs XP
    WG111v2 Configuration Utility
    Windows Defender
    Windows Defender Signatures
    Windows Genuine Advantage Notifications (KB905474)
    Windows Live Messenger
    Windows Live Sign-in Assistant
    Windows Media Connect
    Windows Media Format Runtime
    Windows XP Service Pack 2

    Le volume dans le lecteur C s'appelle Wxp
    Le numéro de série du volume est 84B2-DB13

    Répertoire de C:\Program Files

    30.12.2006 14:33 <REP> .
    30.12.2006 14:33 <REP> ..
    11.09.2005 12:49 <REP> A4DeskMag2
    24.11.2005 18:37 <REP> Admiresoft
    26.03.2006 11:33 <REP> Adobe
    13.11.2006 18:27 <REP> adslTV
    01.01.2002 14:00 <REP> Ahead
    06.02.2006 21:55 <REP> Alwil Software
    07.06.2005 21:58 <REP> America's Army
    05.11.2006 13:44 <REP> AnswerWorks 4.0
    06.11.2006 21:17 <REP> Apple Software Update
    25.03.2005 19:06 <REP> Ashampoo
    28.10.2004 15:45 <REP> ASUS
    28.10.2004 16:20 <REP> ATI Technologies
    02.08.2006 19:03 <REP> Audacity
    05.11.2006 13:49 <REP> AutoCAD 2006
    04.11.2006 21:25 <REP> Autodesk
    24.11.2005 18:36 <REP> AV MP3 Player-Morpher
    28.10.2004 16:12 <REP> AvRack
    19.04.2005 17:36 <REP> BitTorrent
    27.03.2005 20:03 <REP> BoontyGames
    18.11.2006 23:03 <REP> CCleaner
    12.01.2006 18:02 <REP> Clash N Slash
    14.01.2006 15:33 <REP> Common Files
    07.02.2006 21:16 <REP> Comodo
    28.10.2004 15:48 <REP> ComPlus Applications
    29.10.2006 15:16 <REP> Corel(R) Painter(TM) IX.5 TBYB FR
    21.03.2005 19:10 <REP> Creative
    01.01.2002 13:57 <REP> CyberLink
    26.12.2006 11:17 <REP> DAP
    22.11.2004 21:21 <REP> directx
    20.11.2004 10:31 <REP> DivX
    17.04.2006 13:28 <REP> DOSBox-0.65
    15.04.2006 11:42 <REP> D-Tools
    18.11.2006 12:12 <REP> Easy TM
    02.01.2002 16:26 <REP> eMule
    21.06.2005 17:15 <REP> eoRezo
    30.12.2006 14:15 <REP> Fichiers communs
    03.04.2006 18:42 <REP> FileZilla
    27.06.2005 21:22 <REP> FlashFXP
    02.11.2006 22:05 <REP> F-Secure
    11.03.2005 17:33 <REP> Game_Maker6
    26.03.2006 11:34 <REP> GeTax2005
    31.10.2006 21:26 <REP> Google
    22.12.2006 17:10 <REP> Grisoft
    30.04.2005 19:00 <REP> GSC Game World
    12.09.2005 20:08 <REP> IDM Computer Solutions
    18.12.2006 22:13 <REP> IGN
    24.09.2006 12:39 <REP> IKEA HomePlanner
    17.04.2005 13:31 <REP> Illustrate
    28.10.2004 16:03 <REP> Intel
    11.01.2006 18:47 <REP> InterActual
    17.12.2006 18:21 <REP> Internet Explorer
    06.11.2006 21:21 <REP> iPod
    06.11.2006 21:22 <REP> iTunes
    13.11.2006 18:41 <REP> Java
    08.12.2004 12:57 <REP> K700i USB-Handset Manager
    04.11.2006 16:24 <REP> Lavasoft
    27.12.2005 12:02 <REP> Lecteur CANALPLAY
    17.06.2006 13:00 <REP> LimeWire
    21.08.2006 14:02 <REP> Logitech
    15.05.2005 16:17 <REP> LucasFan Games
    25.03.2005 20:32 <REP> LX Download Manager
    23.01.2006 20:24 <REP> Messenger
    24.09.2006 12:33 <REP> Messenger Plus! 3
    28.10.2004 15:50 <REP> microsoft frontpage
    23.05.2006 16:36 <REP> Microsoft Games
    05.11.2006 13:44 <REP> Microsoft Office
    02.07.2006 20:05 <REP> Microsoft Visual Studio
    02.07.2006 20:04 <REP> Microsoft Works
    02.07.2006 20:04 <REP> Microsoft.NET
    16.12.2006 16:54 <REP> Movie Maker
    09.01.2006 17:35 <REP> Mozilla Firefox
    02.07.2006 20:05 <REP> MSBuild
    28.10.2004 15:48 <REP> MSN
    28.10.2004 15:48 <REP> MSN Gaming Zone
    02.11.2006 22:24 <REP> MSN Messenger
    17.11.2006 19:02 <REP> MSXML 4.0
    12.09.2005 17:19 <REP> MUSICMATCH
    19.04.2005 20:10 <REP> NASA
    23.10.2006 19:29 <REP> NETGEAR
    28.10.2004 15:26 <REP> NetMeeting
    07.09.2006 14:40 <REP> Notepad++
    04.01.2002 18:33 <REP> OfficeUpdate11
    11.12.2006 19:03 <REP> Opera
    16.12.2006 16:54 <REP> Outlook Express
    26.03.2006 10:50 <REP> PDFCreator
    16.05.2005 17:39 <REP> PeerGuardian pr14
    09.03.2005 18:13 <REP> Plustech Inc
    27.03.2005 13:48 <REP> PopCap Games
    06.11.2006 21:20 <REP> QuickTime
    26.11.2004 21:09 <REP> Real
    28.10.2004 16:12 <REP> Realtek Sound Manager
    21.08.2006 14:07 <REP> ReflexiveArcade
    18.02.2005 18:07 <REP> ScreenSaver
    23.01.2006 20:26 <REP> Secure Surfing Engine
    28.10.2004 15:48 <REP> Services en ligne
    28.09.2006 10:59 <REP> Sony Ericsson
    01.05.2006 16:03 <REP> Spybot - Search & Destroy
    04.11.2006 20:08 <REP> Spybot - Search & Destroy2
    23.01.2006 20:26 <REP> Steganos Internet Anonym 7
    27.12.2005 12:03 <REP> StreetFighter Flash
    17.06.2006 12:53 <REP> TheTurtle
    07.02.2006 18:22 <REP> Trustix
    31.07.2005 12:04 <REP> Ubi Soft
    08.12.2004 13:09 <REP> Ubisoft
    01.06.2005 22:14 <REP> Ulead Systems
    17.06.2006 12:59 <REP> Visicom Media
    17.06.2005 19:32 <REP> VoipBuster.com
    20.02.2006 19:44 <REP> Watchtower
    09.03.2006 22:47 <REP> Webteh
    18.11.2006 22:51 <REP> Windows Defender
    05.11.2004 17:41 <REP> Windows Media Components
    04.09.2006 19:43 <REP> Windows Media Connect 2
    16.12.2006 16:54 <REP> Windows Media Player
    28.10.2004 15:26 <REP> Windows NT
    27.08.2005 19:55 <REP> WinHex
    23.01.2006 20:26 <REP> WinRAR
    28.10.2004 15:50 <REP> xerox
    19.11.2006 13:26 <REP> ?ssembly
    04.11.2006 12:26 <REP> ??stem
    0 fichier(s) 0 octets
    121 Rép(s) 32'159'117'312 octets libres
    Le volume dans le lecteur C s'appelle Wxp
    Le numéro de série du volume est 84B2-DB13

    Répertoire de C:\Program Files\fichiers communs

    30.12.2006 14:15 <REP> .
    30.12.2006 14:15 <REP> ..
    26.03.2006 11:33 <REP> Adobe
    05.11.2006 13:50 <REP> Autodesk Shared
    05.08.2006 10:52 <REP> AVSMedia
    05.11.2006 13:44 <REP> DESIGNER
    21.11.2004 15:01 <REP> InstallShield
    05.09.2006 20:30 <REP> Java
    21.08.2006 14:02 <REP> Logitech
    03.11.2004 19:17 <REP> Macrovision Shared
    05.11.2006 13:44 <REP> Microsoft Shared
    28.10.2004 15:48 <REP> MSSoap
    01.01.2002 00:07 <REP> ODBC
    24.09.2006 12:54 <REP> Panda Software
    26.11.2004 21:09 <REP> Real
    28.10.2004 15:48 <REP> Services
    01.01.2002 00:07 <REP> SpeechEngines
    20.06.2006 20:39 <REP> Synacast
    16.12.2006 14:55 <REP> System
    28.09.2006 10:59 <REP> Teleca Shared
    26.11.2004 21:09 <REP> xing shared
    22.12.2006 18:18 <REP> {84B2DB13-0C7E-1036-0924-040307090029}
    0 fichier(s) 0 octets
    22 Rép(s) 32'159'113'216 octets libres
    Le volume dans le lecteur C s'appelle Wxp
    Le numéro de série du volume est 84B2-DB13

    Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders

    02.07.2006 20:05 <REP> .
    02.07.2006 20:05 <REP> ..
    04.01.2002 18:27 <REP> 1033
    02.07.2006 19:59 <REP> 1036
    25.04.2006 20:33 967'952 MSONSEXT.DLL
    02.05.2006 18:37 40'208 MSOSV.DLL
    03.06.1999 13:09 122'937 MSOWS409.DLL
    07.03.2001 08:00 127'033 MSOWS40c.DLL
    11.07.2003 02:25 80'448 PKMWS.DLL
    5 fichier(s) 1'338'578 octets
    4 Rép(s) 32'159'113'216 octets libres
    Le volume dans le lecteur C s'appelle Wxp
    Le numéro de série du volume est 84B2-DB13

    Répertoire de C:\Program Files\common files

    14.01.2006 15:33 <REP> .
    14.01.2006 15:33 <REP> ..
    21.08.2006 17:33 <REP> EasyInfo
    20.02.2005 12:17 <REP> Stardock
    0 fichier(s) 0 octets
    4 Rép(s) 32'159'113'216 octets libres
    Le volume dans le lecteur C s'appelle Wxp
    Le numéro de série du volume est 84B2-DB13

    Répertoire de C:\

    11.11.2001 00:00 68'096 diff.exe
    27.08.2006 14:10 103'424 grep.exe
    31.10.2005 16:56 700'416 StubInstaller.exe
    24.05.2001 11:59 162'304 UNWISE.EXE
    4 fichier(s) 1'034'240 octets
    0 Rép(s) 32'159'113'216 octets libres
    c:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.0.2.16\iTunesSetupAdmin.exe
    c:\Documents and Settings\Wxp\.limewire\.NetworkShare\LimeWireWin4.10.5.exe
    c:\Documents and Settings\Wxp\.limewire\.NetworkShare\Incomplete\T-2840440-LimeWireWin4.10.9.exe
    c:\Documents and Settings\Wxp\Bureau\VundoFix.exe
    c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\diff.exe
    c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\FilesInfoCmd.exe
    c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\grep.exe
    c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\LFiles.exe
    c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\LISTDLLS.exe
    c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\streams.exe
    c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\swreg.exe
    c:\Documents and Settings\Wxp\Bureau\newbie\crackme1.exe
    c:\Documents and Settings\Wxp\Bureau\newbie\stega11.exe
    c:\Documents and Settings\Wxp\Bureau\newbie\stega22.exe
    c:\Documents and Settings\Wxp\Bureau\newbie\stega4.exe
    c:\Documents and Settings\Wxp\Bureau\newbie\HexDecCharEditor\HexDecCharEditor.exe
    c:\Documents and Settings\Wxp\Bureau\newbie\Nouveau dossier\ocamlq-public[1].exe
    c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\dumphive.exe
    c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\GenericRenosFix.exe
    c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\Reboot.exe
    c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\SmiUpdate.exe
    c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\SrchSTS.exe
    c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swreg.exe
    c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swsc.exe
    c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swxcacls.exe
    c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\unzip.exe
    c:\Documents and Settings\Wxp\Bureau\Steganos Updates\sia7int.exe
    c:\Documents and Settings\Wxp\Mes documents\Ma musique\Adoprixtixics\4dsportdriving\LOAD.EXE
    c:\Documents and Settings\Wxp\Mes documents\Ma musique\Adoprixtixics\4dsportdriving\SETUP.EXE
    c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll
    c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig.dll
    c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
    c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Default\MpEngine.dll
    c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{15BEA3B1-56BA-483F-B423-5FF9C3F2C64C}\mpengine.dll
    c:\Documents and Settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
    c:\Documents and Settings\Wxp\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll
    0
  7. Utilisateur anonyme
     
    Bonjour

    C'est beaucoup mieux.

    Télécharge Combofix.exe (par sUBs) sur ton Bureau
    http://download.bleepingcomputer.com/sUBs/combofix.exe

    Double clique combofix.exe et suis les invites.
    Lorsque le scan sera complété, un rapport apparaîtra.
    Copie/colle ce rapport dans ta prochaine réponse avec un nouveau HijackThis.
    0
  8. legras Messages postés 21 Statut Membre
     
    Alors voici le rapport de ce chère Hijackthis :

    Logfile of HijackThis v1.99.1
    Scan saved at 16:11:02, on 31.12.2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\SYSTEM32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\SYSTEM32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\WINDOWS\system32\UAService7.exe
    C:\Program Files\Messenger Plus! 3\MsgPlus.exe
    C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Logitech\Profiler\lwemon.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtWLan.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
    C:\Program Files\iTunes\iTunes.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://accounts.google.com/ServiceLogin?service=mail&passive=true&rm=false&continue=https://mail.google.com/mail/&ss=1&scc=1&ltmpl=default&ltmplcache=2&emr=1&osid=1
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~2\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
    O2 - BHO: (no name) - {D60B6578-737A-4422-99B4-0ABEDEBA0C17} - (no file)
    O3 - Toolbar: Steganos Internet Anonyme - {00000000-5736-4205-0008-2fe89c996183} - c:\program files\steganos internet anonym 7\sia7iep.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - Global Startup: Accélérateur de démarrage AutoCAD.lnk = C:\Program Files\Fichiers communs\Autodesk Shared\acstart16.exe
    O4 - Global Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ?
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{B7F9CDB8-BF58-4289-8669-EEA83434ED2E}: NameServer = 192.168.0.1
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: offline-8876480 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O20 - Winlogon Notify: wingdm32 - wingdm32.dll (file missing)
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
    0
  9. legras Messages postés 21 Statut Membre
     
    Et du Combofix :

    Wxp - 06-12-31 11:58:37.10 Service Pack 2
    ComboFix 06.11.27 - Running from: "C:\Documents and Settings\Wxp\Bureau"

    (((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

    C:\WINDOWS\system32\components
    C:\Program Files\Fichiers communs\{84B2DB13-0C7E-1036-0924-040307090029}

    ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ Purity ~ ~ ~ ~ ~ ~ ~ ~~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~

    Folders Quarantined:

    C:\QooBox\Purity\Program Files\SSEMBL~1
    C:\QooBox\Purity\Program Files\STEM~1
    C:\QooBox\Purity\Program Files\STEM~1\??stem

    ((((((((((((((((((((((((((((((( Files Created from 2006-11-31 to 2006-12-31 ))))))))))))))))))))))))))))))))))

    2006-12-31 11:06 <REP> d--hs---- C:\Documents and Settings\Wxp\Recent
    2006-12-24 18:05 <REP> d-------- C:\Documents and Settings\All Users\Application Data\POP3Profiles
    2006-12-23 16:43 <REP> d-------- C:\Downloads
    2006-12-23 16:43 <REP> d-------- C:\Bases
    2006-12-23 16:42 <REP> d-------- C:\Kaspersky
    2006-12-23 11:06 853 --a------ C:\reboot.cmd
    2006-12-23 11:06 68,096 --a------ C:\diff.exe
    2006-12-23 11:06 103,424 --a------ C:\grep.exe
    2006-12-22 19:46 <REP> d-------- C:\VundoFix Backups
    2006-12-22 17:10 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
    2006-12-22 17:10 <REP> d-------- C:\Program Files\Grisoft
    2006-12-20 19:20 2,788 --a------ C:\WINDOWS\system32\tmp.reg
    2006-12-20 18:43 <REP> d-------- C:\HijackThis
    2006-12-18 22:13 <REP> d-------- C:\Program Files\IGN
    2006-12-18 19:18 118,804 --a------ C:\WINDOWS\system32\quxfwhbc.dll
    2006-12-05 17:40 90,164 --ahs---- C:\WINDOWS\system32\vturs.dll

    (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

    2006-12-31 11:59 -------- d-------- C:\Program Files\Fichiers communs
    2006-12-26 17:02 -------- d--h----- C:\Program Files\InstallShield Installation Information
    2006-12-26 11:17 -------- d-------- C:\Program Files\DAP
    2006-12-23 10:56 -------- d---s---- C:\Documents and Settings\Wxp\Application Data\Microsoft
    2006-12-17 18:21 -------- d-------- C:\Program Files\Internet Explorer
    2006-12-16 16:54 -------- d-------- C:\Program Files\Windows Media Player
    2006-12-16 16:54 -------- d-------- C:\Program Files\Outlook Express
    2006-12-16 16:54 -------- d-------- C:\Program Files\Movie Maker
    2006-12-16 14:55 -------- d-------- C:\Program Files\Fichiers communs\System
    2006-12-11 19:03 -------- d-------- C:\Program Files\Opera
    2006-12-07 06:29 2374472 --a------ C:\WINDOWS\system32\wmvcore.dll
    2006-11-19 10:13 93696 --a------ C:\WINDOWS\system32\swxpckm.dll
    2006-11-18 23:03 -------- d-------- C:\Program Files\CCleaner
    2006-11-18 22:51 -------- d-------- C:\Program Files\Windows Defender
    2006-11-18 12:12 -------- d-------- C:\Program Files\Easy TM
    2006-11-17 19:02 -------- d-------- C:\Program Files\MSXML 4.0
    2006-11-13 18:41 -------- d-------- C:\Program Files\Java
    2006-11-13 18:27 -------- d-------- C:\Program Files\adslTV
    2006-11-12 19:50 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll
    2006-11-08 06:07 679424 --a------ C:\WINDOWS\system32\inetcomm.dll
    2006-11-06 21:22 -------- d-------- C:\Program Files\iTunes
    2006-11-06 21:21 -------- d-------- C:\Program Files\iPod
    2006-11-06 21:20 -------- d-------- C:\Program Files\QuickTime
    2006-11-06 21:17 -------- d-------- C:\Program Files\Apple Software Update
    2006-11-05 22:27 -------- d-------- C:\Documents and Settings\Wxp\Application Data\vlc
    2006-11-05 21:44 -------- d-------- C:\Documents and Settings\Wxp\Application Data\Opera
    2006-11-05 13:50 -------- d-------- C:\Program Files\Fichiers communs\Autodesk Shared
    2006-11-05 13:49 -------- d-------- C:\Program Files\AutoCAD 2006
    2006-11-05 13:44 -------- d-------- C:\Program Files\Microsoft Office
    2006-11-05 13:44 -------- d-------- C:\Program Files\Fichiers communs\Microsoft Shared
    2006-11-05 13:44 -------- d-------- C:\Program Files\Fichiers communs\DESIGNER
    2006-11-05 13:44 -------- d-------- C:\Program Files\AnswerWorks 4.0
    2006-11-05 13:41 -------- d-------- C:\Documents and Settings\Wxp\Application Data\Autodesk
    2006-11-04 21:25 -------- d-------- C:\Program Files\Autodesk
    2006-11-04 20:08 -------- d-------- C:\Program Files\Spybot - Search & Destroy2
    2006-11-04 16:25 -------- d-------- C:\Documents and Settings\Wxp\Application Data\Lavasoft
    2006-11-04 16:24 -------- d-------- C:\Program Files\Lavasoft
    2006-11-04 14:14 1245696 --a------ C:\WINDOWS\system32\msxml4.dll
    2006-11-02 22:24 -------- d-------- C:\Program Files\MSN Messenger
    2006-11-02 22:05 -------- d-------- C:\Program Files\F-Secure
    2006-11-01 20:50 -------- d-------- C:\Documents and Settings\Wxp\Application Data\F-Secure
    2006-10-31 21:26 -------- d-------- C:\Program Files\Google
    2006-10-29 15:28 88 -r-hs---- C:\WINDOWS\system32\4393551409.sys
    2006-10-29 15:28 2516 --ahsc--- C:\WINDOWS\system32\KGyGaAvL.sys
    2006-10-20 02:38 716800 --a------ C:\WINDOWS\system32\sxs.dll
    2006-10-13 13:36 145920 --a------ C:\WINDOWS\system32\nwprovau.dll

    (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

    *Note* empty entries are not shown

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
    "MessengerPlus3"="\"C:\\Program Files\\Messenger Plus! 3\\MsgPlus.exe\" /WinStart"
    "MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
    "Start WingMan Profiler"="\"C:\\Program Files\\Logitech\\Profiler\\lwemon.exe\" /noui"
    "ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
    "ccleaner"="\"C:\\Program Files\\CCleaner\\ccleaner.exe\" /AUTO"
    "msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
    "ATIPTA"="C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe"
    "MessengerPlus3"="\"C:\\Program Files\\Messenger Plus! 3\\MsgPlus.exe\""
    "SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_09\\bin\\jusched.exe\""
    "avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
    "iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
    "Windows Defender"="\"C:\\Program Files\\Windows Defender\\MSASCui.exe\" -hide"
    "!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"
    "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
    "KernelFaultCheck"=hex(2):25,73,79,73,74,65,6d,72,6f,6f,74,25,5c,73,79,73,74,\
    65,6d,33,32,5c,64,75,6d,70,72,65,70,20,30,20,2d,6b,00

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
    "Installed"="1"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
    "NoChange"="1"
    "Installed"="1"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
    "Installed"="1"

    [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
    "DeskHtmlVersion"=dword:00000110
    "DeskHtmlMinorVersion"=dword:00000005
    "Settings"=dword:00000001
    "GeneralFlags"=dword:00000003

    [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
    "Source"="C:\\WINDOWS\\SideBar\\sidebar\\index.html"
    "SubscribedURL"="C:\\WINDOWS\\SideBar\\sidebar\\index.html"
    "FriendlyName"="Longhorn SideBar"
    "Flags"=dword:00000002
    "Position"=hex:2c,00,00,00,ea,01,00,00,01,00,00,00,96,00,00,00,c1,01,00,00,ec,\
    03,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
    "CurrentState"=hex:01,00,00,40
    "OriginalStateInfo"=hex:18,00,00,00,ea,01,00,00,01,00,00,00,96,00,00,00,c1,01,\
    00,00,01,00,00,40
    "RestoredStateInfo"=hex:18,00,00,00,13,01,00,00,1d,01,00,00,da,00,00,00,d2,00,\
    00,00,01,00,00,40

    [HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
    "SIA7"="\"C:\\Program Files\\Steganos Internet Anonym 7\\SIA7.exe\" -firstboot"

    [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\runonce]
    "SIA7"="\"C:\\Program Files\\Steganos Internet Anonym 7\\SIA7.exe\" -firstboot"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
    "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
    "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
    "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
    "{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"="Microsoft AntiMalware ShellExecuteHook"
    "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
    "NoDriveTypeAutoRun"=dword:00000000

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "dontdisplaylastusername"=dword:00000000
    "legalnoticecaption"=""
    "legalnoticetext"=""
    "shutdownwithoutlogon"=dword:00000001
    "undockwithoutlogon"=dword:00000001

    [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
    "NoDriveTypeAutoRun"=dword:00000091

    [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
    "NoDriveTypeAutoRun"=dword:00000091

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
    "0aMCPClient"="{F5DF91F9-15E9-416B-A7C3-7519B11ECBFC}"
    "PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
    "CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
    "WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
    "SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Adobe Gamma Loader.exe.lnk]
    "path"="C:\\Documents and Settings\\All Users\\Menu Démarrer\\Programmes\\Démarrage\\Adobe Gamma Loader.exe.lnk"
    "backup"="C:\\WINDOWS\\pss\\Adobe Gamma Loader.exe.lnkCommon Startup"
    "location"="Common Startup"
    "command"="C:\\PROGRA~1\\FICHIE~1\\Adobe\\CALIBR~1\\ADOBEG~1.EXE "
    "item"="Adobe Gamma Loader.exe"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^VoipBuster.lnk]
    "path"="C:\\Documents and Settings\\All Users\\Menu Démarrer\\Programmes\\Démarrage\\VoipBuster.lnk"
    "backup"="C:\\WINDOWS\\pss\\VoipBuster.lnkCommon Startup"
    "location"="Common Startup"
    "command"="C:\\PROGRA~1\\VOIPBU~1.COM\\VOIPBU~1\\VOIPBU~1.EXE -nosplash -minimized"
    "item"="VoipBuster"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="NeroCheck"
    "hkey"="HKLM"
    "command"="C:\\WINDOWS\\system32\\\\NeroCheck.exe"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PeerGuardian]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="PeerGuardian_1"
    "hkey"="HKCU"
    "command"="C:\\Program Files\\PeerGuardian pr14\\PeerGuardian_1.99b_pr14.exe"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="qttask"
    "hkey"="HKLM"
    "command"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="SOUNDMAN"
    "hkey"="HKLM"
    "command"="SOUNDMAN.EXE"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="jusched"
    "hkey"="HKLM"
    "command"="C:\\Program Files\\Java\\jre1.5.0_02\\bin\\jusched.exe"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="realsched"
    "hkey"="HKLM"
    "command"="\"C:\\Program Files\\Fichiers communs\\Real\\Update_OB\\realsched.exe\" -osboot"
    "inimapping"="0"

    HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wingdm32

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
    "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

    ~ ~ ~ ~ ~ ~ ~ ~ Hijackthis Backups ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~

    backup-20061226-111707-214
    O18 - Protocol: bwz0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-339
    O18 - Protocol: bww0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-669
    O18 - Protocol: bwx0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-370
    O18 - Protocol: bww0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-947
    O18 - Protocol: bwx0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-919
    O18 - Protocol: bwy0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-284
    O18 - Protocol: bwz0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-904
    O18 - Protocol: bwy0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-625
    O18 - Protocol: bwt0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-371
    O18 - Protocol: bwv0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-507
    O18 - Protocol: bws0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-471
    O18 - Protocol: bwr0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-360
    O18 - Protocol: bwv0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-133
    O18 - Protocol: bws0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-520
    O18 - Protocol: bwt0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-578
    O18 - Protocol: bwu0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-187
    O18 - Protocol: bwu0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-237
    O18 - Protocol: bwn0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-971
    O18 - Protocol: bwp0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-668
    O18 - Protocol: bwp0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-647
    O18 - Protocol: bwn0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-644
    O18 - Protocol: bwo0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-495
    O18 - Protocol: bwo0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-612
    O18 - Protocol: bwq0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-967
    O18 - Protocol: bwr0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-431
    O18 - Protocol: bwq0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-984
    O18 - Protocol: bwl0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-436
    O18 - Protocol: bwl0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-900
    O18 - Protocol: bwi0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-816
    O18 - Protocol: bwm0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-980
    O18 - Protocol: bwk0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-173
    O18 - Protocol: bwj0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-901
    O18 - Protocol: bwj0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-378
    O18 - Protocol: bwm0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-478
    O18 - Protocol: bwk0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-112
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    backup-20061226-111707-786
    O18 - Protocol: bwg0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-310
    O18 - Protocol: bwg0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-739
    O18 - Protocol: bwh0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-256
    O18 - Protocol: bwi0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-716
    O18 - Protocol: bwh0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-420
    O18 - Protocol: bwf0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-223
    O18 - Protocol: bwf0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-820
    O18 - Protocol: bwe0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-683
    O18 - Protocol: bwe0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-416
    O18 - Protocol: bwd0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-588
    O18 - Protocol: bw90 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-449
    O18 - Protocol: bwc0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-428
    O18 - Protocol: bw90s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-201
    O18 - Protocol: bwa0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-597
    O18 - Protocol: bw80s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-844
    O18 - Protocol: bwc0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-908
    O18 - Protocol: bwa0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-393
    O18 - Protocol: bwd0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-752
    O18 - Protocol: bwb0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-404
    O18 - Protocol: bwb0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-398
    O18 - Protocol: bw60 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-394
    O18 - Protocol: bw50 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-526
    O18 - Protocol: bw80 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-259
    O18 - Protocol: bw50s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-231
    O18 - Protocol: bw70 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-216
    O18 - Protocol: bw70s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-981
    O18 - Protocol: bw60s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-745
    O18 - Protocol: bw40s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-215
    O18 - Protocol: bw-0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-188
    O18 - Protocol: bw+0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-443
    O18 - Protocol: bw00s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-496
    O18 - Protocol: bw20s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-888
    O18 - Protocol: bw20 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-830
    O18 - Protocol: bw10 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-315
    O18 - Protocol: bw-0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-781
    O18 - Protocol: bw00 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-200
    O18 - Protocol: bw10s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-681
    O18 - Protocol: bw30s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-670
    O18 - Protocol: bw30 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-649
    O18 - Protocol: bw40 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111707-978
    O18 - Protocol: bw+0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    backup-20061226-111706-358
    O16 - DPF: {A91DEB0D-AD0D-453E-9AC8-60178EC24212} (VPlayer Control) - http://video.vividas.com/CDN1/4325_Pepsi/web/player/vivid_ocx.jpeg
    backup-20061226-111706-950
    O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
    backup-20061226-111706-479
    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
    backup-20061226-111706-180
    O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - https://www.afternic.com/domains/drivecleaner.com
    backup-20061226-111706-846
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    backup-20061226-111706-613
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    backup-20061226-111706-362
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    backup-20061226-111706-609
    O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\PROGRA~1\DAP\DAP.EXE
    backup-20061226-111705-672
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
    backup-20061226-111705-795
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
    backup-20061226-111705-845
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    backup-20061226-111705-135
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    backup-20061226-111705-830
    O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
    backup-20061226-111705-443
    O4 - HKLM\..\Run: [DownloadAccelerator] C:\PROGRA~1\DAP\DAP.EXE /STARTUP
    backup-20061226-111705-495
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    backup-20061226-111705-851
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    backup-20061226-111705-334
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    backup-20061226-111705-905
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    backup-20061226-111705-576
    O4 - HKLM\..\Run: [DllRunning] rundll32.exe "C:\WINDOWS\system32\qvlaojwx.dll",setvm
    backup-20061226-111705-559
    O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
    backup-20061226-111705-706
    O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\Program Files\DAP\DAPIEBar.dll
    backup-20061226-111705-952
    O2 - BHO: (no name) - {61E91E9C-BF33-6A6A-7BFC-00B25F19A7AE} - C:\WINDOWS\system32\urwzhx.dll (file missing)
    backup-20061226-111705-824
    O2 - BHO: (no name) - {36068946-CD51-1AC7-C4AD-044557583146} - C:\WINDOWS\system32\lctsupj.dll (file missing)
    backup-20061226-111705-959
    O2 - BHO: (no name) - {42E53C82-E11D-E01B-A428-084851DB6947} - C:\WINDOWS\system32\yzivngl.dll (file missing)
    backup-20061226-111705-290
    O2 - BHO: (no name) - {3FD6B99C-A275-46ea-8FD1-3D63986E51E4} - C:\WINDOWS\system32\hpvekfro.dll (file missing)
    backup-20061226-111705-126
    O2 - BHO: (no name) - {2527DC3F-C7A0-CF37-33EA-0525C1600A34} - C:\WINDOWS\system32\quqrbkl.dll
    backup-20061226-111705-436
    O2 - BHO: (no name) - {0964344D-C233-DAF1-2ADC-08C2A8D60810} - C:\WINDOWS\system32\hptukyk.dll
    backup-20061226-111705-231
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    backup-20061226-111705-638
    O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - C:\PROGRA~1\DAP\dapbho.dll
    backup-20061226-111705-783
    R3 - URLSearchHook: (no name) - {61C40C3D-BDD2-B627-D189-C569348CDBE4} - (no file)

    Contents of the 'Scheduled Tasks' folder
    C:\WINDOWS\tasks\AppleSoftwareUpdate.job
    C:\WINDOWS\tasks\MP Scheduled Scan.job
    C:\WINDOWS\tasks\{DE596C44-D582-438D-BE6A-E311E18B1DC2}_MICHAEL_Wxp.job

    Completion time: 06-12-31 11:59:51.34
    C:\ComboFix.txt ... 06-12-31 11:59
    0
  10. Utilisateur anonyme
     
    Re

    Quelques lignes inutiles dans HijackThis
    Relance un scan HijackThis et coche les lignes ci-dessous :

    O2 - BHO: (no name) - {D60B6578-737A-4422-99B4-0ABEDEBA0C17} - (no file)
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O20 - Winlogon Notify: wingdm32 - wingdm32.dll (file missing)

    Ferme toutes les fenêtres Windows, Internet explorer, Outlook,sauf le logiciel Hijackthis et clique sur « Fix checked »

    Combofix a fait du ménage.

    As tu encore des dysfonctionnements ?
    0
  11. legras Messages postés 21 Statut Membre
     
    Non tous à l'air de bien fonctionner, j'ai pu installer IE7 (pas de commentaires svp :~) ) et plus aucune pub non incorporé au site n'apparaissent, et l'ordi s'éteinds de plus en plus rapidement.

    Merci en tous cas de votre aide.
    0
Précédent
  • 1
  • 2