PC infecté par Trojan-Downloader.Win32.Tiny.i

Greg185 -  
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité -
PC infecté par Trojan-Downloader.Win32.Tiny.id

Bonjour , voila je n'arrive pas a me débarasser de ce virus qui revient tout le temp , donc je me tourne vers vous , de plus j'ai sans cesse des pub d'antivirus qui s'affiche et çe que quand j'utuise les pages internet ... j'ai kaspersky internet sécurity 2007 mais rien n'y fait ... le pc est devenu tres lent au demarage que sur le net .... que dois-je faire pour faire rentrer ça dans l'ordre ? merçi beaucoup .



Coordialement Greg .
A voir également:

53 réponses

Précédent
Réponse 21 / 53
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité 1 537
 
Re,

relance OAD sur pmnkklm

Le rapport de Virus total est incomplet. Il faut recommencer (je ne suis pas sur que le fichier a été transmis).

@+
0
Réponse 22 / 53
Greg185
 
re , voiçi ,


Fichier klif.sys reçu le 2007.09.15 21:12:44 (CET)
Situation actuelle: en cours de chargement ... mis en file d'attente en attente en cours d'analyse terminé NON TROUVE ARRETE


Résultat: 0/32 (0%)
en train de charger les informations du serveur...
Votre fichier est dans la file d'attente, en position: 5.
L'heure estimée de démarrage est entre 56 et 81 secondes.
Ne fermez pas la fenêtre avant la fin de l'analyse.
L'analyseur qui traitait votre fichier est actuellement stoppé, nous allons attendre quelques secondes pour tenter de récupérer vos résultats.
Si vous attendez depuis plus de cinq minutes, vous devez renvoyer votre fichier.
Votre fichier est, en ce moment, en cours d'analyse par VirusTotal,
les résultats seront affichés au fur et à mesure de leur génération.
Formaté Impression des résultats
Votre fichier a expiré ou n'existe pas.
Le service est en ce moment, stoppé, votre fichier attend d'être analysé (position : ) depuis une durée indéfinie.

Vous pouvez attendre une réponse du Web (re-chargement automatique) ou taper votre e-mail dans le formulaire ci-dessous et cliquer "Demande" pour que le système vous envoie une notification quand l'analyse sera terminée.
Email:


Antivirus Version Dernière mise à jour Résultat
AhnLab-V3 2007.9.14.0 2007.09.14 -
AntiVir 7.6.0.10 2007.09.14 -
Authentium 4.93.8 2007.09.15 -
Avast 4.7.1043.0 2007.09.15 -
AVG 7.5.0.485 2007.09.14 -
BitDefender 7.2 2007.09.15 -
CAT-QuickHeal 9.00 2007.09.15 -
ClamAV 0.91.2 2007.09.15 -
DrWeb 4.33 2007.09.15 -
eSafe 7.0.15.0 2007.09.13 -
eTrust-Vet 31.1.5136 2007.09.14 -
Ewido 4.0 2007.09.15 -
FileAdvisor 1 2007.09.15 -
Fortinet 3.11.0.0 2007.09.15 -
F-Prot 4.3.2.48 2007.09.15 -
F-Secure 6.70.13030.0 2007.09.15 -
Ikarus T3.1.1.12 2007.09.15 -
Kaspersky 4.0.2.24 2007.09.15 -
McAfee 5120 2007.09.14 -
Microsoft 1.2803 2007.09.15 -
NOD32v2 2531 2007.09.15 -
Norman 5.80.02 2007.09.14 -
Panda 9.0.0.4 2007.09.15 -
Prevx1 V2 2007.09.15 -
Rising 19.40.52.00 2007.09.15 -
Sophos 4.21.0 2007.09.15 -
Sunbelt 2.2.907.0 2007.09.15 -
Symantec 10 2007.09.15 -
TheHacker 6.2.5.060 2007.09.14 -
VBA32 3.12.2.4 2007.09.15 -
VirusBuster 4.3.26:9 2007.09.15 -
Webwasher-Gateway 6.0.1 2007.09.14 -
Information additionnelle
File size: 186640 bytes
MD5: c6a8ad1c9698e5b7b4dd8c19257456e8
SHA1: 8ef925e909a7d7928139743230538dd6fd38bf79

voiçi le log de OAD ,


sam. 15/09/2007 ---- 21:44:39,87

----------------------------------
§§§§§§ [pmnkklm ] §§§§§§
----------------------------------
[X] Registre

-------------- [ ] rapide
-- Fichier --- [ ] disque systeme
------------- [X] complete


********************
[Registre]
********************


*******************
[Fichier]
*******************



*********************
[Même date]
*********************

Aucun fichier créé à la même date détecté


Outil Aide Diagnostic By !aur3n7 Version 1.1
----------------------------------
§§§§§ Fin Rapport §§§§§
----------------------------------
0
Réponse 23 / 53
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité 1 537
 
Re,

Clique sur ce lien :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
pour télécharger navilog1.exe.

Choisis Enregistrer

et enregistre-le sur ton bureau.

Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

Patiente jusqu'au message :
*** Analyse Termine le ..... ***
Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
Copie-colle l'intégralité dans une réponse. Referme le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

Double-clique VundoFix.exe afin de le lancer
NE clique PAS sur le bouton Scan for Vundo
Clique Droit dans la fenêtre blanche, choisis Add more files ?
Rajoute dans la première ligne :
C:\WINDOWS\system32\pmnkklm.dll C:\WINDOWS\system32\awtss.dll
Dans la deuxième ligne :
C:\WINDOWS\system32\awtss.dll


Clique successivement sur :
- Add Files
- Close Windows
- Remove Vundo


Si l'outil te demande de redémarrer, accepte.
Copie/Colle ensuite le rapport C:\vundofix.txt

@+
0
Réponse 24 / 53
Greg185
 
Bonjour , voila , à la fin du scan de Navilog1 il a affiché une dizaine de cheval de troie sous la forme de , ex : ykucmthl.exe , et il y a aussi un cheval de troie dans volume/restore ,(le pc est très lent au démarrage) , voiçi le rapport de Navilog1 ,



Search Navipromo version 3.0.3 commencé le dim. 16/09/2007 à 0:41:13,73

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Poster ce rapport sur le forum pour le faire analyser !!!
!!! Ne pas lancer la partie désinfection sans l'avis d'un spécialiste !!!

Fix lancé depuis C:\Program Files\navilog1
Mise a jour le 14.09.2007 a 13h00 by IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11


*** Recherche Programmes installes ***




*** Recherche dossiers dans C:\WINDOWS ***



*** Recherche dossiers dans C:\Program Files ***



*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




*** Recherche dossiers dans C:\Documents and Settings\oli2\Application Data ***


*** Recherche avec BlackLight Engine/F-secure ***
BlackLight Engine est un produit de F-secure, pour + d'infos :
https://www.f-secure.com/en


F-SECURE BLACKLIGHT ROOTKIT ELIMINATOR
======================================

Copyright 2005-2006 F-Secure Corporation. All rights reserved.
This is a beta version. It will expire on 1st of October, 2007.
Version information: 2.2.1064.

[+] Started on 09/16/07 at 00:41:45.
[+] Initializing ...
[+] Starting scan, press Ctrl-C to abort.
[+] Scanning for hidden items ...

*** Recherche avec GenericNaviSearch ***
!!! Tous Ces résultats peuvent révéler des fichiers légitimes !!!
!!! A verifier impérativement avant toute suppression manuelle !!!

* Scan C:\WINDOWS\system32 *

Fichiers trouvés :

Aucun Fichier trouvé !

Fichiers suspects :

Aucun Fichier suspect trouvé !



*** Recherche fichiers ***




*** Recherche cles registre ***



*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:
C:\WINDOWS\system32\sstwa.bak1 trouvé ! infection Vundo possible non traité par cet outil !
C:\WINDOWS\system32\sstwa.bak2 trouvé ! infection Vundo possible non traité par cet outil !

2)Recherche Heuristique :






3)Recherche Certificats :

Certificat Egroup absent !


*** Analyse Terminé le dim. 16/09/2007 à 1:47:26,45 ***

_____________________________________________________________________________________________________________


et voiçi le rapport de Vundofix... (redémarrer deux fois et ils c'est réouvert sans aucun fichier dedans ) ,



Beginning removal...

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Performing Repairs to the registry.
Done!

Beginning removal...

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Performing Repairs to the registry.
Done!

Beginning removal...
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 25 / 53
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité 1 537
 
Bonjour,

Ce vundo est coriace;

Télécharge ce programme puis double clic dessus (ferme ton antivirus s'il te détecte quoi que ce soit)
http://www.suspectfile.com/systemscan/

* Coche uniquement ces cases, décoche tout le reste :

- Recent Files, 30 days

Puis clic sur scan now, soit patient.
Une fois qu'il aura terminé, un rapport va s'ouvrir, copie et colle son contenu ici et vérifie qu'il soit bien en entier, si besoin crée deux messages.

@+
0
Réponse 26 / 53
Greg185
 
voiçi ce qu'il dis quand je clic sur le lien ,


Warning! You should have already downloaded the last Systemscan version (sys50036.exe).
If you can't download it probably your browser or your firewall is blocking popups.
Please enable popup on your PC and try again.
If you have already popup enabled, hold down the CTRL key and click on this link

Systemscan will be available within 83 seconds
0
Réponse 27 / 53
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité 1 537
 
Re,

accepte temporairement les pop-ups.

Commence par appuyer en même temps sur CTRL et sur le lien proposé.

@+
0
Réponse 28 / 53
Greg185
 
Re , j'ai pas très bien compris quand à ce que je devais décocher , si ces ces les cases avec ce symboles " * " que l'ont devait cocher , il y en a pas , j'ai donc tout décocher sauf recent files 30 days :$ , voiçi le rapport ,


SystemScan - www.suspectfile.com - ver. 3.2.0

Running on: Windows XP HOME Edition, Service Pack 2 (2600.5.1)
System directory: C:\WINDOWS

Date: 16/09/2007
Time: 15:28:53

Output limited to:
-Recent files

===================== Recent files (30 days old)=====================

----- recent files in C:\
19/08/2007 04:02:39 47564 byte 28 days old -- NTDETECT.COM
19/08/2007 04:02:39 251712 byte 28 days old -- ntldr
19/08/2007 04:57:37 216 byte 28 days old -- boot.ini
19/08/2007 10:11:20 (DIR) 0 byte 28 days old -- System Volume Information
30/08/2007 01:52:36 244 byte 17 days old -- sqmnoopt04.sqm
30/08/2007 01:52:36 268 byte 17 days old -- sqmdata04.sqm
31/08/2007 14:57:22 (DIR) 0 byte 16 days old -- Downloads
31/08/2007 14:57:22 (DIR) 0 byte 16 days old -- Bases
16/09/2007 00:36:54 (DIR) 0 byte 0 days old -- Program Files
16/09/2007 12:56:15 1598029824 byte 0 days old -- pagefile.sys
16/09/2007 12:56:31 42462 byte 0 days old -- check_LSA7.txt
16/09/2007 12:58:02 (DIR) 0 byte 0 days old -- WINDOWS
16/09/2007 15:28:52 (DIR) 0 byte 0 days old -- suspectfile

----- recent files in C:\WINDOWS\
19/08/2007 03:45:46 (DIR) 0 byte 28 days old -- EHome
19/08/2007 03:59:00 (DIR) 0 byte 28 days old -- $NtServicePackUninstall$
19/08/2007 04:03:50 (DIR) 0 byte 28 days old -- Web
19/08/2007 04:16:36 (DIR) 0 byte 28 days old -- system
19/08/2007 04:22:33 (DIR) 0 byte 28 days old -- srchasst
19/08/2007 04:24:48 (DIR) 0 byte 28 days old -- ServicePackFiles
19/08/2007 04:49:14 (DIR) 0 byte 28 days old -- provisioning
19/08/2007 04:49:27 (DIR) 0 byte 28 days old -- peernet
19/08/2007 04:52:40 (DIR) 0 byte 28 days old -- ime
19/08/2007 05:04:05 (DIR) 0 byte 28 days old -- $NtUninstallKB873339$
19/08/2007 05:08:26 (DIR) 0 byte 28 days old -- $NtUninstallKB885835$
19/08/2007 05:12:07 (DIR) 0 byte 28 days old -- $NtUninstallKB885836$
19/08/2007 05:16:18 (DIR) 0 byte 28 days old -- $NtUninstallKB888302$
19/08/2007 05:19:48 (DIR) 0 byte 28 days old -- $NtUninstallKB890046$
19/08/2007 05:24:46 (DIR) 0 byte 28 days old -- $NtUninstallKB890859$
19/08/2007 05:31:24 (DIR) 0 byte 28 days old -- $NtUninstallKB891781$
19/08/2007 05:40:10 (DIR) 0 byte 28 days old -- $NtUninstallKB893756$
19/08/2007 05:45:30 (DIR) 0 byte 28 days old -- $NtUninstallKB896358$
19/08/2007 05:51:01 (DIR) 0 byte 28 days old -- $NtUninstallKB896423$
19/08/2007 05:56:33 (DIR) 0 byte 28 days old -- $NtUninstallKB896424$
19/08/2007 06:01:51 (DIR) 0 byte 28 days old -- $NtUninstallKB896428$
19/08/2007 06:06:54 (DIR) 0 byte 28 days old -- $NtUninstallKB899587$
19/08/2007 06:12:09 (DIR) 0 byte 28 days old -- $NtUninstallKB899591$
19/08/2007 06:17:23 (DIR) 0 byte 28 days old -- $NtUninstallKB900725$
19/08/2007 06:23:29 (DIR) 0 byte 28 days old -- $NtUninstallKB901017$
19/08/2007 06:28:15 (DIR) 0 byte 28 days old -- $NtUninstallKB901214$
19/08/2007 06:33:10 (DIR) 0 byte 28 days old -- $NtUninstallKB902400$
19/08/2007 06:38:27 (DIR) 0 byte 28 days old -- $NtUninstallKB905414$
19/08/2007 06:43:06 (DIR) 0 byte 28 days old -- $NtUninstallKB905749$
19/08/2007 06:47:35 (DIR) 0 byte 28 days old -- $NtUninstallKB908519$
19/08/2007 06:52:33 (DIR) 0 byte 28 days old -- $NtUninstallKB908531$
19/08/2007 06:57:52 (DIR) 0 byte 28 days old -- $NtUninstallKB910437$
19/08/2007 07:02:30 (DIR) 0 byte 28 days old -- $NtUninstallKB911280$
19/08/2007 07:07:04 (DIR) 0 byte 28 days old -- $NtUninstallKB911562$
19/08/2007 07:11:50 (DIR) 0 byte 28 days old -- $NtUninstallKB911927$
19/08/2007 07:16:21 (DIR) 0 byte 28 days old -- $NtUninstallKB912919$
19/08/2007 07:21:03 (DIR) 0 byte 28 days old -- $NtUninstallKB913580$
19/08/2007 07:25:41 (DIR) 0 byte 28 days old -- $NtUninstallKB914388$
19/08/2007 07:30:12 (DIR) 0 byte 28 days old -- $NtUninstallKB914389$
19/08/2007 07:34:34 (DIR) 0 byte 28 days old -- $NtUninstallKB917344$
19/08/2007 07:38:44 (DIR) 0 byte 28 days old -- $NtUninstallKB917422$
19/08/2007 07:42:38 (DIR) 0 byte 28 days old -- $NtUninstallKB917953$
19/08/2007 07:46:27 (DIR) 0 byte 28 days old -- $NtUninstallKB919007$
19/08/2007 07:50:12 (DIR) 0 byte 28 days old -- $NtUninstallKB920670$
19/08/2007 07:54:17 (DIR) 0 byte 28 days old -- $NtUninstallKB920683$
19/08/2007 07:58:39 (DIR) 0 byte 28 days old -- $NtUninstallKB920685$
19/08/2007 08:03:38 (DIR) 0 byte 28 days old -- $NtUninstallKB921398$
19/08/2007 08:09:03 (DIR) 0 byte 28 days old -- $NtUninstallKB921883$
19/08/2007 08:13:40 (DIR) 0 byte 28 days old -- $NtUninstallKB922616$
19/08/2007 08:18:12 (DIR) 0 byte 28 days old -- $NtUninstallKB922819$
19/08/2007 08:22:55 (DIR) 0 byte 28 days old -- $NtUninstallKB923191$
19/08/2007 08:27:28 (DIR) 0 byte 28 days old -- $NtUninstallKB923414$
19/08/2007 08:32:00 (DIR) 0 byte 28 days old -- $NtUninstallKB924191$
19/08/2007 08:36:33 (DIR) 0 byte 28 days old -- $NtUninstallKB924496$
19/08/2007 10:10:53 (DIR) 0 byte 28 days old -- Fonts
19/08/2007 10:10:57 (DIR) 0 byte 28 days old -- AppPatch
19/08/2007 10:23:21 (DIR) 0 byte 28 days old -- $NtUninstallKB928843$
19/08/2007 10:23:48 (DIR) 0 byte 28 days old -- $NtUninstallKB935839$
19/08/2007 10:26:20 (DIR) 0 byte 28 days old -- $NtUninstallKB937143_0$
19/08/2007 10:28:24 (DIR) 0 byte 28 days old -- $NtUninstallKB923689$
19/08/2007 10:29:23 (DIR) 0 byte 28 days old -- $NtUninstallKB930916$
19/08/2007 10:29:53 (DIR) 0 byte 28 days old -- $NtUninstallKB916595$
19/08/2007 10:30:21 (DIR) 0 byte 28 days old -- $NtUninstallKB886185$
19/08/2007 10:30:44 (DIR) 0 byte 28 days old -- $NtUninstallKB935840$
19/08/2007 10:31:10 (DIR) 0 byte 28 days old -- $NtUninstallKB920213$
19/08/2007 10:31:38 (DIR) 0 byte 28 days old -- $NtUninstallKB938127$
19/08/2007 10:32:09 (DIR) 0 byte 28 days old -- $NtUninstallKB926255$
19/08/2007 10:33:37 (DIR) 0 byte 28 days old -- $NtUninstallKB918118$
19/08/2007 10:34:27 (DIR) 0 byte 28 days old -- $NtUninstallKB922582$
19/08/2007 10:34:59 (DIR) 0 byte 28 days old -- $NtUninstallKB932168$
19/08/2007 10:35:24 (DIR) 0 byte 28 days old -- $NtUninstallKB930178$
19/08/2007 10:35:55 (DIR) 0 byte 28 days old -- $NtUninstallKB920872$
19/08/2007 10:36:19 (DIR) 0 byte 28 days old -- $NtUninstallKB926436$
19/08/2007 10:36:46 (DIR) 0 byte 28 days old -- $NtUninstallKB929123$
19/08/2007 10:37:31 (DIR) 0 byte 28 days old -- $NtUninstallKB925902$
19/08/2007 10:38:28 (DIR) 0 byte 28 days old -- $NtUninstallKB925398_WMP64$
19/08/2007 10:38:53 (DIR) 0 byte 28 days old -- $NtUninstallKB938829$
19/08/2007 10:39:21 (DIR) 0 byte 28 days old -- $NtUninstallKB887472$
19/08/2007 10:39:53 (DIR) 0 byte 28 days old -- $NtUninstallKB921503$
19/08/2007 10:40:26 (DIR) 0 byte 28 days old -- $NtUninstallKB931836$
19/08/2007 10:40:49 (DIR) 0 byte 28 days old -- $NtUninstallKB936357$
19/08/2007 10:41:23 (DIR) 0 byte 28 days old -- $NtUninstallKB927891$
19/08/2007 10:42:58 (DIR) 0 byte 28 days old -- $NtUninstallKB936782_WMP9$
19/08/2007 10:44:00 (DIR) 0 byte 28 days old -- $NtUninstallKB931261$
19/08/2007 10:44:31 (DIR) 0 byte 28 days old -- $NtUninstallKB924270$
19/08/2007 10:45:09 (DIR) 0 byte 28 days old -- $NtUninstallKB900485$
19/08/2007 10:45:38 (DIR) 0 byte 28 days old -- $NtUninstallKB924667$
19/08/2007 10:45:56 (DIR) 0 byte 28 days old -- WinSxS
19/08/2007 10:46:21 (DIR) 0 byte 28 days old -- $NtUninstallKB938828$
19/08/2007 10:47:08 (DIR) 0 byte 28 days old -- $NtUninstallKB936021$
19/08/2007 10:47:57 (DIR) 0 byte 28 days old -- $NtUninstallKB923980$
19/08/2007 10:48:58 (DIR) 0 byte 28 days old -- $NtUninstallKB931784$
19/08/2007 10:51:01 (DIR) 0 byte 28 days old -- $NtUninstallKB928255$
19/08/2007 10:52:37 (DIR) 0 byte 28 days old -- $NtUninstallKB927802$
19/08/2007 10:53:13 (DIR) 0 byte 28 days old -- $NtUninstallKB927779$
19/08/2007 10:54:53 (DIR) 0 byte 28 days old -- security
19/08/2007 10:56:11 (DIR) 0 byte 28 days old -- msagent
19/08/2007 20:53:30 (DIR) 0 byte 28 days old -- SoftwareDistribution
20/08/2007 18:09:28 2060 byte 27 days old -- ModemLog_Conexant HDA D110 MDC V.92 Modem.txt
26/08/2007 22:14:26 0 byte 21 days old -- setuperr.log
26/08/2007 22:14:45 6228 byte 21 days old -- KB892130.log
26/08/2007 22:20:37 (DIR) 0 byte 21 days old -- assembly
26/08/2007 22:29:19 (DIR) 0 byte 21 days old -- $NtUninstallKB904942$
26/08/2007 22:29:56 13823 byte 21 days old -- KB904942.log
26/08/2007 22:30:38 (DIR) 0 byte 21 days old -- $NtUninstallKB914440$
26/08/2007 22:31:03 (DIR) 0 byte 21 days old -- network diagnostic
26/08/2007 22:33:19 (DIR) 0 byte 21 days old -- $NtUninstallKB937143$
26/08/2007 22:35:08 13455 byte 21 days old -- KB937143.log
26/08/2007 22:35:08 6343 byte 21 days old -- KB914440.log
26/08/2007 22:35:45 (DIR) 0 byte 21 days old -- Debug
26/08/2007 22:43:03 (DIR) 0 byte 21 days old -- $NtUninstallKB915865$
26/08/2007 22:43:32 13085 byte 21 days old -- KB915865.log
26/08/2007 22:44:27 (DIR) 0 byte 21 days old -- $NtServicePackUninstallNLSDownlevelMapping$
26/08/2007 22:44:47 13103 byte 21 days old -- NLSDownlevelMapping.log
26/08/2007 22:45:35 (DIR) 0 byte 21 days old -- $NtServicePackUninstallIDNMitigationAPIs$
26/08/2007 22:45:56 13425 byte 21 days old -- IDNMitigationAPIs.log
26/08/2007 22:50:28 (DIR) 0 byte 21 days old -- ie7
26/08/2007 22:51:12 (DIR) 0 byte 21 days old -- Media
26/08/2007 22:54:02 53539 byte 21 days old -- ie7.log
26/08/2007 22:54:34 25459 byte 21 days old -- ie7_main.log
26/08/2007 22:55:53 1548 byte 21 days old -- COM+.log
27/08/2007 00:18:30 (DIR) 0 byte 20 days old -- WBEM
27/08/2007 17:26:58 (DIR) 0 byte 20 days old -- ie7updates
27/08/2007 17:27:17 11101 byte 20 days old -- KB938127-IE7.log
27/08/2007 17:30:56 22991 byte 20 days old -- KB937143-IE7.log
29/08/2007 12:42:27 (DIR) 0 byte 18 days old -- $hf_mig$
29/08/2007 12:52:27 22902 byte 18 days old -- KB933360.log
30/08/2007 00:53:07 240 byte 17 days old -- setupact.log
30/08/2007 20:26:21 1185856 byte 17 days old -- ntbtlog.txt
31/08/2007 14:58:37 (DIR) 0 byte 16 days old -- $NtUninstallKB933360$
31/08/2007 14:59:33 (DIR) 0 byte 16 days old -- erdnt
02/09/2007 21:53:14 (DIR) 0 byte 14 days old -- $NtUninstallWudf01000$
02/09/2007 21:55:13 (DIR) 0 byte 14 days old -- $NtUninstallWMFDist11$
02/09/2007 21:57:29 316640 byte 14 days old -- WMSysPr9.prx
02/09/2007 22:00:01 (DIR) 0 byte 14 days old -- $NtUninstallwmp11$
02/09/2007 22:01:03 (DIR) 0 byte 14 days old -- $NtUninstallMSCompPackV1$
02/09/2007 22:01:09 3336 byte 14 days old -- MSCompPackV1.log
02/09/2007 22:01:27 1182 byte 14 days old -- KB926239.log
02/09/2007 22:07:53 11209 byte 14 days old -- Wudf01000Inst.log
02/09/2007 22:09:59 44370 byte 14 days old -- WMFDist11.log
02/09/2007 22:13:19 613 byte 14 days old -- win.ini
02/09/2007 22:13:34 21936 byte 14 days old -- wmp11.log
02/09/2007 22:15:39 1106 byte 14 days old -- wmsetup10.log
03/09/2007 03:01:40 (DIR) 0 byte 13 days old -- $NtUninstallKB929399$
03/09/2007 03:01:56 7330 byte 13 days old -- KB929399.log
04/09/2007 03:02:35 (DIR) 0 byte 12 days old -- $NtUninstallKB936782_WMP11$
04/09/2007 03:03:02 35948 byte 12 days old -- updspapi.log
04/09/2007 03:03:34 9121 byte 12 days old -- KB936782.log
04/09/2007 03:03:34 1355 byte 12 days old -- imsins.BAK
04/09/2007 03:50:08 8451 byte 12 days old -- wmsetup.log
04/09/2007 03:50:10 55305 byte 12 days old -- spupdsvc.log
04/09/2007 04:00:03 (DIR) 0 byte 12 days old -- $NtUninstallKB939683$
04/09/2007 04:00:18 37744 byte 12 days old -- tsoc.log
04/09/2007 04:00:18 4944 byte 12 days old -- msgsocm.log
04/09/2007 04:00:18 98920 byte 12 days old -- FaxSetup.log
04/09/2007 04:00:18 6254 byte 12 days old -- KB939683.log
04/09/2007 04:00:18 46656 byte 12 days old -- ocgen.log
04/09/2007 04:00:18 5130 byte 12 days old -- ocmsn.log
04/09/2007 04:00:18 1355 byte 12 days old -- imsins.log
04/09/2007 04:00:19 15765 byte 12 days old -- iis6.log
04/09/2007 04:00:19 18738 byte 12 days old -- ntdtcsetup.log
04/09/2007 04:00:19 30970 byte 12 days old -- comsetup.log
08/09/2007 00:58:54 (DIR) 0 byte 8 days old -- Help
09/09/2007 02:15:19 (DIR) 0 byte 7 days old -- Registration
11/09/2007 01:30:50 (DIR) 0 byte 5 days old -- Installer
13/09/2007 14:01:57 (DIR) 0 byte 3 days old -- inf
13/09/2007 14:02:08 101866 byte 3 days old -- setupapi.log
15/09/2007 16:02:09 (DIR) 0 byte 1 days old -- Downloaded Program Files
16/09/2007 12:54:57 32468 byte 0 days old -- SchedLgU.Txt
16/09/2007 12:56:35 2048 byte 0 days old -- bootstat.dat
16/09/2007 12:57:33 50 byte 0 days old -- wiaservc.log
16/09/2007 12:57:52 1981687 byte 0 days old -- WindowsUpdate.log
16/09/2007 12:58:01 159 byte 0 days old -- wiadebug.log
16/09/2007 13:00:00 0 byte 0 days old -- 0.log
16/09/2007 14:20:25 (DIR) 0 byte 0 days old -- temp
16/09/2007 14:37:10 1286 byte 0 days old -- cookies.ini
16/09/2007 15:28:36 (DIR) 0 byte 0 days old -- Prefetch
16/09/2007 15:28:51 (DIR) 0 byte 0 days old -- system32

----- recent files in C:\WINDOWS\Downloaded Program Files\

----- recent files in C:\WINDOWS\system\

----- recent files in C:\WINDOWS\system32\
19/08/2007 03:59:28 (DIR) 0 byte 28 days old -- ReinstallBackups
19/08/2007 04:16:49 (DIR) 0 byte 28 days old -- usmt
19/08/2007 04:23:02 (DIR) 0 byte 28 days old -- npp
19/08/2007 04:52:41 (DIR) 0 byte 28 days old -- mui
19/08/2007 04:52:47 (DIR) 0 byte 28 days old -- Setup
19/08/2007 04:52:56 (DIR) 0 byte 28 days old -- oobe
19/08/2007 06:37:35 (DIR) 0 byte 28 days old -- Com
19/08/2007 10:13:14 90 byte 28 days old -- spupdwxp.log
19/08/2007 10:56:30 146808 byte 28 days old -- FNTCACHE.DAT
26/08/2007 22:21:12 380684 byte 21 days old -- perfh009.dat
26/08/2007 22:21:12 928492 byte 21 days old -- PerfStringBackup.INI
26/08/2007 22:21:12 53098 byte 21 days old -- perfc009.dat
26/08/2007 22:21:12 64052 byte 21 days old -- perfc00C.dat
26/08/2007 22:21:13 445672 byte 21 days old -- perfh00C.dat
27/08/2007 00:44:29 (DIR) 0 byte 20 days old -- Restore
27/08/2007 17:29:19 (DIR) 0 byte 20 days old -- fr-fr
29/08/2007 12:52:08 249356 byte 18 days old -- TZLog.log
02/09/2007 21:53:27 (DIR) 0 byte 14 days old -- LogFiles
02/09/2007 22:00:54 242688 byte 14 days old -- SETA3.tmp
02/09/2007 22:27:55 16832 byte 14 days old -- amcompat.tlb
02/09/2007 22:27:55 23392 byte 14 days old -- nscompat.tlb
04/09/2007 03:03:14 (DIR) 0 byte 12 days old -- CatRoot
04/09/2007 23:41:00 82744 byte 12 days old -- PICCLP32.OCX
05/09/2007 21:40:22 479232 byte 11 days old -- NameGrabber.exe
06/09/2007 04:50:42 17474680 byte 10 days old -- MRT.exe
08/09/2007 17:43:02 244832 byte 8 days old -- awtss.dll
08/09/2007 17:43:04 321 byte 8 days old -- sstwa.ini
08/09/2007 17:46:37 6448 byte 8 days old -- sstwa.bak1
09/09/2007 00:32:57 13646 byte 7 days old -- wpa.dbl
09/09/2007 01:58:42 12335 byte 7 days old -- sstwa.tmp
09/09/2007 02:15:28 (DIR) 0 byte 7 days old -- wbem
09/09/2007 02:17:11 (DIR) 0 byte 7 days old -- config
09/09/2007 16:54:14 693485 byte 7 days old -- qxajxrnj.ini
09/09/2007 21:00:23 693476 byte 7 days old -- mtiyjvne.ini
11/09/2007 02:38:52 (DIR) 0 byte 5 days old -- drivers
14/09/2007 03:04:41 693485 byte 2 days old -- acxwbrot.ini
14/09/2007 03:06:40 69184 byte 2 days old -- prsgnqhh.dll
14/09/2007 11:37:14 125504 byte 2 days old -- pifsrind.dll
14/09/2007 11:37:28 693485 byte 2 days old -- dnirsfip.ini
14/09/2007 11:55:32 125504 byte 2 days old -- kmjpauwo.dll
14/09/2007 12:31:20 3072 byte 2 days old -- CONFIG.NT
14/09/2007 13:26:16 693502 byte 2 days old -- owuapjmk.ini
14/09/2007 14:20:28 69184 byte 2 days old -- oisysyde.dll
14/09/2007 14:23:26 125504 byte 2 days old -- lghtytds.dll
14/09/2007 14:27:12 693484 byte 2 days old -- sdtythgl.ini
14/09/2007 15:01:02 125504 byte 2 days old -- qluyvadf.dll
14/09/2007 15:04:10 69184 byte 2 days old -- qhnxtqml.dll
14/09/2007 15:36:40 693512 byte 2 days old -- fdavyulq.ini
14/09/2007 16:09:02 125504 byte 2 days old -- sltxuyid.dll
14/09/2007 20:12:33 693485 byte 2 days old -- diyuxtls.ini
14/09/2007 21:08:44 125504 byte 2 days old -- xypkuibn.dll
14/09/2007 21:09:06 693484 byte 2 days old -- nbiukpyx.ini
14/09/2007 21:27:39 125504 byte 2 days old -- wubdgweu.dll
14/09/2007 23:24:51 693512 byte 2 days old -- uewgdbuw.ini
15/09/2007 01:12:09 125504 byte 1 days old -- jidupqja.dll
15/09/2007 02:25:58 693502 byte 1 days old -- ajqpudij.ini
15/09/2007 02:54:01 125504 byte 1 days old -- diwasfqy.dll
15/09/2007 04:38:36 693494 byte 1 days old -- yqfsawid.ini
15/09/2007 04:52:59 125504 byte 1 days old -- xkndroam.dll
15/09/2007 04:53:50 693476 byte 1 days old -- maordnkx.ini
15/09/2007 05:09:34 125504 byte 1 days old -- vleeggvk.dll
15/09/2007 13:52:09 693484 byte 1 days old -- kvggeelv.ini
15/09/2007 14:09:42 125504 byte 1 days old -- rwpfbqsf.dll
15/09/2007 14:10:01 693484 byte 1 days old -- fsqbfpwr.ini
15/09/2007 14:19:58 125504 byte 1 days old -- afsqqtln.dll
15/09/2007 15:38:11 693502 byte 1 days old -- nltqqsfa.ini
15/09/2007 16:20:21 125504 byte 1 days old -- stcxusom.dll
15/09/2007 16:23:42 693484 byte 1 days old -- mosuxcts.ini
15/09/2007 18:46:42 125504 byte 1 days old -- eukhupgq.dll
15/09/2007 20:05:25 693503 byte 1 days old -- qgpuhkue.ini
15/09/2007 23:13:47 125504 byte 1 days old -- ceqlxmdp.dll
16/09/2007 00:05:49 693485 byte 0 days old -- pdmxlqec.ini
16/09/2007 09:46:40 125504 byte 0 days old -- uogxkkef.dll
16/09/2007 09:47:09 693485 byte 0 days old -- fekkxgou.ini
16/09/2007 11:24:18 69184 byte 0 days old -- gpprrtbc.dll
16/09/2007 11:27:15 125504 byte 0 days old -- iforexnw.dll
16/09/2007 11:27:44 693485 byte 0 days old -- wnxerofi.ini
16/09/2007 12:10:24 (DIR) 0 byte 0 days old -- dllcache
16/09/2007 13:03:57 75328 byte 0 days old -- ncgtxkun.exe
16/09/2007 13:04:15 (DIR) 0 byte 0 days old -- CatRoot2
16/09/2007 13:10:23 125504 byte 0 days old -- uhrdamik.dll
16/09/2007 14:18:14 693614 byte 0 days old -- kimadrhu.ini
16/09/2007 14:18:49 692344 byte 0 days old -- sstwa.bak2
16/09/2007 14:18:51 75328 byte 0 days old -- qbxwykos.exe
16/09/2007 14:21:21 4672 byte 0 days old -- exrkihbj.exe
16/09/2007 14:27:21 125504 byte 0 days old -- odpslrss.dll
16/09/2007 14:37:02 693485 byte 0 days old -- ssrlspdo.ini
16/09/2007 15:28:51 694444 byte 0 days old -- sstwa.ini2

----- recent files in C:\WINDOWS\system32\drivers\
25/08/2007 16:14:41 359808 byte 22 days old -- TCPIP.SYS.ORIGINAL
25/08/2007 16:14:41 359808 byte 22 days old -- TCPIP.SYS
02/09/2007 21:56:34 (DIR) 0 byte 14 days old -- UMDF
08/09/2007 02:27:25 62016 byte 8 days old -- avipbb.sys
11/09/2007 02:38:15 82061 byte 5 days old -- klick.dat
11/09/2007 02:38:15 81549 byte 5 days old -- klin.dat
11/09/2007 02:38:52 186640 byte 5 days old -- klif.sys
16/09/2007 12:55:04 49004 byte 0 days old -- fidbox.idx
16/09/2007 12:55:04 4582176 byte 0 days old -- fidbox.dat
16/09/2007 12:55:04 3788 byte 0 days old -- fidbox2.idx
16/09/2007 12:55:04 40224 byte 0 days old -- fidbox2.dat
16/09/2007 15:23:35 (DIR) 0 byte 0 days old -- etc

----- recent files in C:\WINDOWS\temp\
31/08/2007 02:23:37 0 byte 16 days old -- Upd1.tmp
01/09/2007 02:23:29 0 byte 15 days old -- Upd5D.tmp
02/09/2007 02:23:30 0 byte 14 days old -- Upd8.tmp
03/09/2007 02:23:32 0 byte 13 days old -- Upd53.tmp
04/09/2007 02:23:37 0 byte 12 days old -- Upd8A.tmp
05/09/2007 02:23:46 0 byte 11 days old -- Upd86.tmp
06/09/2007 02:23:58 0 byte 10 days old -- UpdD2.tmp
09/09/2007 20:49:42 0 byte 7 days old -- s78
11/09/2007 03:37:15 (DIR) 0 byte 5 days old -- Fichiers Internet temporaires
11/09/2007 03:37:21 (DIR) 0 byte 5 days old -- Cookies
11/09/2007 03:37:21 (DIR) 0 byte 5 days old -- History
11/09/2007 10:12:44 8192 byte 5 days old -- cch~1a532c841.htp
11/09/2007 10:12:58 8192 byte 5 days old -- cch~1a86fa9fb.htp
11/09/2007 10:13:02 8192 byte 5 days old -- cch~1a9381bb2.htp
11/09/2007 10:13:02 8192 byte 5 days old -- cch~1a93f6a9c.htp
11/09/2007 10:13:02 8192 byte 5 days old -- cch~1a93f0704.htp
11/09/2007 10:13:02 8192 byte 5 days old -- cch~1a93e8b68.htp
11/09/2007 10:13:02 8192 byte 5 days old -- cch~1a937f81e.htp
11/09/2007 10:13:02 8192 byte 5 days old -- cch~1a929e636.htp
11/09/2007 10:13:02 8192 byte 5 days old -- cch~1a91c5d69.htp
11/09/2007 10:13:02 8192 byte 5 days old -- cch~1a92a0bb7.htp
11/09/2007 10:13:02 8192 byte 5 days old -- cch~1a92a42b0.htp
11/09/2007 10:13:02 8192 byte 5 days old -- cch~1a92a2fba.htp
11/09/2007 10:13:02 8192 byte 5 days old -- cch~1a94583d9.htp
11/09/2007 10:13:02 8192 byte 5 days old -- cch~1a945a1b4.htp
11/09/2007 10:13:02 8192 byte 5 days old -- cch~1a93f9b41.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a95696c0.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a952ec24.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a952be32.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a9571da6.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a957bbe9.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a956e90c.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a954a147.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a955b133.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a955f02b.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a956499f.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a954dc6e.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a954fa36.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a955709d.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a96e2505.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a96e4406.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a96f967c.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a96982c2.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a969a0c8.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a96a0669.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a96fba81.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a97330a4.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a97532fc.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a9754a30.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a9729f70.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a972d834.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a9730f1a.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a9597370.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a95a623e.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a95a8086.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a9590ee2.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a9592f20.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a9595600.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a95ffaf0.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a967547a.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a9677253.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a967c9ba.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a961a72a.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a966e185.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a9670051.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a952889e.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a950a4a6.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a950c525.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a93fe6fd.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a93ff0f8.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a95118fc.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a95265fc.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a9516fb2.htp
11/09/2007 10:13:03 8192 byte 5 days old -- cch~1a9513d84.htp
11/09/2007 10:13:05 8192 byte 5 days old -- cch~1a9d8267b.htp
11/09/2007 10:13:05 8192 byte 5 days old -- cch~1a9d82aa0.htp
11/09/2007 10:13:05 8192 byte 5 days old -- cch~1a9da04ab.htp
11/09/2007 10:13:05 8192 byte 5 days old -- cch~1a9d6954e.htp
11/09/2007 10:13:05 8192 byte 5 days old -- cch~1a9d81f75.htp
11/09/2007 10:13:05 8192 byte 5 days old -- cch~1a9d8242d.htp
11/09/2007 10:13:05 8192 byte 5 days old -- cch~1a9ed10d9.htp
11/09/2007 10:13:05 8192 byte 5 days old -- cch~1a9ed5e46.htp
11/09/2007 10:13:05 8192 byte 5 days old -- cch~1a9ed7c9f.htp
11/09/2007 10:13:05 8192 byte 5 days old -- cch~1a9ebdb82.htp
11/09/2007 10:13:05 8192 byte 5 days old -- cch~1a9ebddcf.htp
11/09/2007 10:13:05 8192 byte 5 days old -- cch~1a9ec5d5e.htp
11/09/2007 10:13:06 8192 byte 5 days old -- cch~1a9d88706.htp
11/09/2007 10:13:06 8192 byte 5 days old -- cch~1a9fbb5b1.htp
11/09/2007 10:13:06 8192 byte 5 days old -- cch~1a9dabc7e.htp
11/09/2007 10:13:06 8192 byte 5 days old -- cch~1a9dab8a6.htp
11/09/2007 10:13:06 8192 byte 5 days old -- cch~1a9d821d3.htp
11/09/2007 10:13:06 8192 byte 5 days old -- cch~1a9794b8c.htp
11/09/2007 10:13:06 8192 byte 5 days old -- cch~1a97d4878.htp
11/09/2007 10:13:06 8192 byte 5 days old -- cch~1a9d81c3a.htp
11/09/2007 10:13:06 8192 byte 5 days old -- cch~1a9d4e79b.htp
11/09/2007 10:13:06 8192 byte 5 days old -- cch~1a9ec311b.htp
11/09/2007 10:13:06 8192 byte 5 days old -- cch~1a9fb9192.htp
11/09/2007 10:13:06 8192 byte 5 days old -- cch~1a9edcefa.htp
11/09/2007 10:13:06 8192 byte 5 days old -- cch~1a9ee84bf.htp
11/09/2007 10:13:06 8192 byte 5 days old -- cch~1a9ec0e85.htp
11/09/2007 10:13:07 8192 byte 5 days old -- cch~1a9eddb1a.htp
11/09/2007 10:13:08 8192 byte 5 days old -- cch~1a9fc78f4.htp
11/09/2007 10:13:08 0 byte 5 days old -- cch~1a9d4edee.htp
11/09/2007 10:13:08 0 byte 5 days old -- cch~1a9edae24.htp
11/09/2007 10:13:08 8192 byte 5 days old -- cch~1a9fba842.htp
11/09/2007 10:13:08 0 byte 5 days old -- cch~1a9137a74.htp
11/09/2007 10:13:08 8192 byte 5 days old -- cch~1a9fc6b4d.htp
11/09/2007 10:13:08 8192 byte 5 days old -- cch~1a9fc7681.htp
11/09/2007 10:13:08 0 byte 5 days old -- cch~1a9523f65.htp
11/09/2007 10:13:08 8192 byte 5 days old -- cch~1aa084a80.htp
11/09/2007 10:13:08 8192 byte 5 days old -- cch~1a9fd8143.htp
11/09/2007 10:13:08 0 byte 5 days old -- cch~1a4809fb6.htp
11/09/2007 10:13:08 0 byte 5 days old -- cch~1a8a3cd41.htp
11/09/2007 10:13:08 0 byte 5 days old -- cch~1a97922a2.htp
11/09/2007 10:13:08 0 byte 5 days old -- cch~1a9790460.htp
11/09/2007 10:13:08 8192 byte 5 days old -- cch~1a9fd7ee0.htp
11/09/2007 10:13:08 8192 byte 5 days old -- cch~1a9fd7b56.htp
11/09/2007 10:13:09 8192 byte 5 days old -- cch~1a9fadcad.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a1f6f813.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a203781c.htp
11/09/2007 10:13:09 8192 byte 5 days old -- cch~1a9f49896.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1789115b4.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~177b27534.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a1f66755.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a1d6e95d.htp
11/09/2007 10:13:09 8192 byte 5 days old -- cch~1a9fbb36b.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1aa2f8ae2.htp
11/09/2007 10:13:09 8192 byte 5 days old -- cch~1aa084cab.htp
11/09/2007 10:13:09 8192 byte 5 days old -- cch~1aa278f66.htp
11/09/2007 10:13:09 8192 byte 5 days old -- cch~1a9fbb10c.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a2e72c9a.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a2311bc0.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a2ef59f3.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a2e84201.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a301424b.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a3aa38b0.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a3c426ef.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a2f8aa8f.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a2f906b2.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a2fd4928.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a3ce68df.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a515b749.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a7846783.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a8a3d588.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a4ac6adc.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a4ac6d74.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a4b287f1.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a2f6bcec.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a913739d.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a91398db.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a9138155.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a91375e9.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a9137f10.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a9137cbb.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a913782f.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a2f67ca8.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a2f1f583.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a2f037f7.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a912f0be.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a913715c.htp
11/09/2007 10:13:09 0 byte 5 days old -- cch~1a9136e9a.htp
11/09/2007 23:14:11 2823048 byte 5 days old -- mpengine.dll
11/09/2007 23:15:00 524288 byte 5 days old -- TMP000000014ED2217419CE380C
12/09/2007 00:26:34 616448 byte 4 days old -- cezaqd0a.TMP
12/09/2007 07:17:31 616448 byte 4 days old -- 9hfehu5i.TMP
14/09/2007 02:52:02 16384 byte 2 days old -- Perflib_Perfdata_92c.dat
14/09/2007 14:48:31 16384 byte 2 days old -- Perflib_Perfdata_7cc.dat

----- recent files in C:\Program Files\
19/08/2007 04:21:16 (DIR) 0 byte 28 days old -- Windows NT
19/08/2007 04:22:10 (DIR) 0 byte 28 days old -- NetMeeting
19/08/2007 04:49:33 (DIR) 0 byte 28 days old -- Movie Maker
19/08/2007 10:22:25 (DIR) 0 byte 28 days old -- MSN Messenger
19/08/2007 10:37:02 (DIR) 0 byte 28 days old -- Outlook Express
19/08/2007 10:56:12 (DIR) 0 byte 28 days old -- Messenger
19/08/2007 21:15:43 (DIR) 0 byte 28 days old -- ma-config.com
25/08/2007 03:01:03 (DIR) 0 byte 22 days old -- WinRAR
25/08/2007 04:31:30 (DIR) 0 byte 22 days old -- ParadisePoker
27/08/2007 17:29:18 (DIR) 0 byte 20 days old -- Internet Explorer
29/08/2007 12:58:40 (DIR) 0 byte 18 days old -- Grisoft
02/09/2007 22:22:13 (DIR) 0 byte 14 days old -- Windows Media Player
08/09/2007 03:43:49 (DIR) 0 byte 8 days old -- DivX
11/09/2007 01:27:28 (DIR) 0 byte 5 days old -- Kaspersky Lab
14/09/2007 12:36:40 (DIR) 0 byte 2 days old -- Trend Micro
14/09/2007 20:21:51 (DIR) 0 byte 2 days old -- eChanblard
16/09/2007 01:49:44 (DIR) 0 byte 0 days old -- Navilog1

----- recent files in C:\Program Files\Fichiers communs\
19/08/2007 10:37:00 (DIR) 0 byte 28 days old -- System

----- recent files in C:\Documents and Settings\oli2\Application Data\
19/08/2007 21:19:51 (DIR) 0 byte 28 days old -- ma-config.com
25/08/2007 03:01:03 (DIR) 0 byte 22 days old -- Help
26/08/2007 22:18:12 (DIR) 0 byte 21 days old -- Microsoft
31/08/2007 14:59:28 (DIR) 0 byte 16 days old -- Grisoft
08/09/2007 03:47:33 (DIR) 0 byte 8 days old -- Mozilla
08/09/2007 03:48:14 (DIR) 0 byte 8 days old -- Talkback
08/09/2007 17:26:10 (DIR) 0 byte 8 days old -- Shareaza

----- recent files in C:\DOCUME~1\oli2\LOCALS~1\Temp\
30/08/2007 12:22:19 (DIR) 0 byte 17 days old -- WLTB Custom Button Feeds
30/08/2007 12:31:13 2561 byte 17 days old -- jar_cache8081.tmp
30/08/2007 12:31:37 2561 byte 17 days old -- jar_cache8082.tmp
30/08/2007 13:00:11 (DIR) 0 byte 17 days old -- KAV Updater update files
30/08/2007 13:05:29 2561 byte 17 days old -- jar_cache8083.tmp
30/08/2007 22:30:26 2561 byte 17 days old -- jar_cache8011.tmp
31/08/2007 00:14:00 512 byte 16 days old -- ~DFBA62.tmp
31/08/2007 00:14:00 933888 byte 16 days old -- ~DFB9C7.tmp
31/08/2007 00:14:09 933888 byte 16 days old -- ~DFD086.tmp
31/08/2007 00:14:09 512 byte 16 days old -- ~DFD0B6.tmp
31/08/2007 00:51:55 2561 byte 16 days old -- jar_cache8013.tmp
31/08/2007 00:53:07 2561 byte 16 days old -- jar_cache8012.tmp
31/08/2007 00:53:22 2561 byte 16 days old -- jar_cache8014.tmp
31/08/2007 00:53:30 2561 byte 16 days old -- jar_cache8015.tmp
31/08/2007 02:12:56 2561 byte 16 days old -- jar_cache53986.tmp
31/08/2007 04:42:24 2561 byte 16 days old -- jar_cache53987.tmp
31/08/2007 05:02:24 2561 byte 16 days old -- jar_cache53988.tmp
31/08/2007 16:33:02 2561 byte 16 days old -- jar_cache39371.tmp
31/08/2007 17:50:26 16384 byte 16 days old -- ~DF2475.tmp
31/08/2007 17:50:31 16384 byte 16 days old -- ~DF3745.tmp
31/08/2007 17:56:13 16384 byte 16 days old -- ~DF5DEC.tmp
31/08/2007 17:56:18 16384 byte 16 days old -- ~DF6D69.tmp
31/08/2007 18:02:14 16384 byte 16 days old -- ~DF843.tmp
31/08/2007 18:02:18 16384 byte 16 days old -- ~DF1B49.tmp
31/08/2007 18:08:14 16384 byte 16 days old -- ~DF6A5A.tmp
31/08/2007 18:08:22 16384 byte 16 days old -- ~DF8050.tmp
31/08/2007 18:28:08 2561 byte 16 days old -- jar_cache39372.tmp
31/08/2007 18:38:13 2561 byte 16 days old -- jar_cache39373.tmp
31/08/2007 19:00:51 2561 byte 16 days old -- jar_cache39374.tmp
31/08/2007 19:08:12 2561 byte 16 days old -- jar_cache39375.tmp
31/08/2007 20:12:43 16384 byte 16 days old -- ~DF7EFA.tmp
31/08/2007 20:12:48 16384 byte 16 days old -- ~DF8E38.tmp
31/08/2007 20:23:00 16384 byte 16 days old -- ~DFCE42.tmp
31/08/2007 20:23:04 16384 byte 16 days old -- ~DFDD1B.tmp
31/08/2007 22:02:44 2561 byte 16 days old -- jar_cache39376.tmp
31/08/2007 22:08:07 2561 byte 16 days old -- jar_cache39377.tmp
31/08/2007 22:08:07 2561 byte 16 days old -- jar_cache39378.tmp
31/08/2007 22:08:34 16384 byte 16 days old -- ~DF58E1.tmp
31/08/2007 22:08:39 16384 byte 16 days old -- ~DF65FD.tmp
31/08/2007 22:12:07 16384 byte 16 days old -- ~DF7C32.tmp
31/08/2007 22:12:17 16384 byte 16 days old -- ~DF974C.tmp
31/08/2007 22:12:17 16384 byte 16 days old -- ~DF957F.tmp
31/08/2007 22:13:20 16384 byte 16 days old -- ~DFD509.tmp
31/08/2007 22:13:27 16384 byte 16 days old -- ~DFE6DD.tmp
31/08/2007 22:20:33 16384 byte 16 days old -- ~DF9490.tmp
31/08/2007 22:20:37 16384 byte 16 days old -- ~DFA301.tmp
31/08/2007 22:27:52 16384 byte 16 days old -- ~DFE878.tmp
31/08/2007 22:27:56 16384 byte 16 days old -- ~DFF860.tmp
31/08/2007 22:31:46 16384 byte 16 days old -- ~DFBF3F.tmp
31/08/2007 22:31:53 16384 byte 16 days old -- ~DFD4E2.tmp
01/09/2007 01:36:18 16384 byte 15 days old -- ~DF70D8.tmp
01/09/2007 01:36:22 16384 byte 15 days old -- ~DF8334.tmp
01/09/2007 01:43:33 16384 byte 15 days old -- ~DFC3BA.tmp
01/09/2007 01:43:38 16384 byte 15 days old -- ~DFD51E.tmp
01/09/2007 01:47:51 16384 byte 15 days old -- ~DFD802.tmp
01/09/2007 01:55:33 16384 byte 15 days old -- ~DFFD7F.tmp
01/09/2007 02:01:49 16384 byte 15 days old -- ~DF4DBE.tmp
01/09/2007 02:09:36 16384 byte 15 days old -- ~DF3456.tmp
01/09/2007 02:13:58 16384 byte 15 days old -- ~DF2E9F.tmp
01/09/2007 02:15:44 16384 byte 15 days old -- ~DF882.tmp
01/09/2007 03:09:30 2561 byte 15 days old -- jar_cache35060.tmp
01/09/2007 05:52:55 2561 byte 15 days old -- jar_cache51999.tmp
01/09/2007 14:27:07 2561 byte 15 days old -- jar_cache52000.tmp
01/09/2007 15:31:13 2561 byte 15 days old -- jar_cache62436.tmp
01/09/2007 15:39:23 2561 byte 15 days old -- jar_cache62437.tmp
01/09/2007 15:57:37 2561 byte 15 days old -- jar_cache62438.tmp
01/09/2007 17:06:11 2561 byte 15 days old -- jar_cache62439.tmp
01/09/2007 19:11:14 2561 byte 15 days old -- jar_cache21578.tmp
01/09/2007 19:24:18 16384 byte 15 days old -- ~DFB354.tmp
01/09/2007 19:27:13 16384 byte 15 days old -- ~DF570B.tmp
01/09/2007 19:52:45 16384 byte 15 days old -- ~DF6172.tmp
01/09/2007 20:01:19 16384 byte 15 days old -- ~DF2735.tmp
01/09/2007 21:47:36 2561 byte 15 days old -- jar_cache52233.tmp
01/09/2007 22:42:37 2561 byte 15 days old -- jar_cache52234.tmp
01/09/2007 23:16:04 2561 byte 15 days old -- jar_cache52235.tmp
01/09/2007 23:37:43 2561 byte 15 days old -- jar_cache52236.tmp
02/09/2007 02:22:08 16384 byte 14 days old -- ~DF6716.tmp
02/09/2007 02:29:25 2561 byte 14 days old -- jar_cache22012.tmp
02/09/2007 03:55:40 950272 byte 14 days old -- ~DF4B5D.tmp
02/09/2007 03:55:40 512 byte 14 days old -- ~DF4B7A.tmp
02/09/2007 03:55:47 512 byte 14 days old -- ~DF6366.tmp
02/09/2007 03:55:47 933888 byte 14 days old -- ~DF6349.tmp
02/09/2007 05:37:03 2561 byte 14 days old -- jar_cache54449.tmp
02/09/2007 14:47:05 16384 byte 14 days old -- ~DF377E.tmp
02/09/2007 17:44:29 46021 byte 14 days old -- TFRD.tmp
02/09/2007 17:44:29 67560 byte 14 days old -- TFRE.tmp
02/09/2007 17:44:29 27777 byte 14 days old -- TFR15.tmp
02/09/2007 17:44:29 21122 byte 14 days old -- TFR19.tmp
02/09/2007 17:44:30 23262 byte 14 days old -- TFR22.tmp
02/09/2007 17:44:30 23427 byte 14 days old -- TFR25.tmp
02/09/2007 17:44:30 62753 byte 14 days old -- TFR1E.tmp
02/09/2007 17:44:30 67994 byte 14 days old -- TFR1C.tmp
02/09/2007 18:08:41 16384 byte 14 days old -- ~DF1A17.tmp
02/09/2007 18:08:51 16384 byte 14 days old -- ~DF4AB2.tmp
02/09/2007 18:08:52 16384 byte 14 days old -- ~DF4BD0.tmp
02/09/2007 18:12:57 2561 byte 14 days old -- jar_cache38722.tmp
02/09/2007 18:55:25 16384 byte 14 days old -- ~DF697F.tmp
02/09/2007 21:47:04 12818 byte 14 days old -- control.xml
02/09/2007 22:00:19 (DIR) 0 byte 14 days old -- WMC0000.tmp
02/09/2007 22:03:19 112672 byte 14 days old -- AHI0A9KK.emf
02/09/2007 22:03:19 288352 byte 14 days old -- 2KVG8QBC.emf
02/09/2007 22:07:29 (DIR) 0 byte 14 days old -- WMC0002.tmp
02/09/2007 22:15:20 24248 byte 14 days old -- wmsetup.log
02/09/2007 23:57:00 16384 byte 14 days old -- ~DF8801.tmp
03/09/2007 02:10:38 21122 byte 13 days old -- TFR3C.tmp
03/09/2007 02:10:38 62753 byte 13 days old -- TFR42.tmp
03/09/2007 02:10:38 67994 byte 13 days old -- TFR40.tmp
03/09/2007 02:10:38 46021 byte 13 days old -- TFR31.tmp
03/09/2007 02:10:38 67560 byte 13 days old -- TFR32.tmp
03/09/2007 02:10:38 27777 byte 13 days old -- TFR36.tmp
03/09/2007 02:10:38 23262 byte 13 days old -- TFR47.tmp
03/09/2007 02:10:39 23427 byte 13 days old -- TFR4B.tmp
03/09/2007 03:56:59 16384 byte 13 days old -- ~DF76CB.tmp
03/09/2007 17:41:48 2561 byte 13 days old -- jar_cache46750.tmp
03/09/2007 20:51:47 148 byte 13 days old -- jar_cache46757.tmp
03/09/2007 20:54:44 2561 byte 13 days old -- jar_cache46753.tmp
03/09/2007 20:54:44 2561 byte 13 days old -- jar_cache46758.tmp
03/09/2007 20:54:44 2561 byte 13 days old -- jar_cache46756.tmp
03/09/2007 20:54:44 2561 byte 13 days old -- jar_cache46752.tmp
03/09/2007 20:54:44 2561 byte 13 days old -- jar_cache46751.tmp
04/09/2007 01:20:35 2561 byte 12 days old -- jar_cache30506.tmp
04/09/2007 01:25:05 16384 byte 12 days old -- ~DFC907.tmp
04/09/2007 01:34:07 16384 byte 12 days old -- ~DFC33A.tmp
04/09/2007 01:36:54 16384 byte 12 days old -- ~DF962B.tmp
04/09/2007 03:45:29 2561 byte 12 days old -- jar_cache30509.tmp
04/09/2007 03:45:29 2561 byte 12 days old -- jar_cache30507.tmp
04/09/2007 03:45:29 2561 byte 12 days old -- jar_cache30508.tmp
04/09/2007 03:55:25 16384 byte 12 days old -- ~DFA922.tmp
04/09/2007 04:10:23 16384 byte 12 days old -- ~DF816F.tmp
04/09/2007 15:53:22 2561 byte 12 days old -- jar_cache64585.tmp
04/09/2007 17:49:29 2561 byte 12 days old -- jar_cache64586.tmp
04/09/2007 19:48:47 16384 byte 12 days old -- ~DFD17.tmp
05/09/2007 01:27:51 (DIR) 0 byte 11 days old -- IXP000.TMP
05/09/2007 03:38:09 16384 byte 11 days old -- ~DF2B48.tmp
05/09/2007 03:52:45 148 byte 11 days old -- jar_cache25353.tmp
05/09/2007 04:05:51 2561 byte 11 days old -- jar_cache25352.tmp
05/09/2007 04:07:02 2561 byte 11 days old -- jar_cache25354.tmp
05/09/2007 04:07:05 159 byte 11 days old -- jar_cache25358.tmp
05/09/2007 04:19:47 2653 byte 11 days old -- jar_cache25357.tmp
05/09/2007 04:19:47 2561 byte 11 days old -- jar_cache25359.tmp
05/09/2007 04:19:47 2561 byte 11 days old -- jar_cache25360.tmp
05/09/2007 04:39:49 2561 byte 11 days old -- jar_cache25361.tmp
05/09/2007 15:04:17 2561 byte 11 days old -- jar_cache13113.tmp
05/09/2007 15:10:36 2561 byte 11 days old -- jar_cache13114.tmp
05/09/2007 16:51:57 16384 byte 11 days old -- ~DF3400.tmp
05/09/2007 20:34:40 2561 byte 11 days old -- jar_cache13115.tmp
06/09/2007 01:09:12 2561 byte 10 days old -- jar_cache17428.tmp
06/09/2007 03:33:46 16384 byte 10 days old -- ~DFEBD4.tmp
06/09/2007 04:49:53 2561 byte 10 days old -- jar_cache17436.tmp
06/09/2007 14:50:44 16384 byte 10 days old -- ~DFEAAE.tmp
06/09/2007 16:33:17 2561 byte 10 days old -- jar_cache10274.tmp
06/09/2007 18:29:16 2561 byte 10 days old -- jar_cache10275.tmp
07/09/2007 00:44:00 2561 byte 9 days old -- jar_cache37942.tmp
07/09/2007 03:42:59 2561 byte 9 days old -- jar_cache37943.tmp
07/09/2007 17:21:23 2561 byte 9 days old -- jar_cache16569.tmp
07/09/2007 18:20:36 2561 byte 9 days old -- jar_cache16570.tmp
07/09/2007 18:20:36 2561 byte 9 days old -- jar_cache16571.tmp
07/09/2007 22:06:17 16384 byte 9 days old -- ~DFDBEC.tmp
07/09/2007 22:06:28 16384 byte 9 days old -- ~DF87D.tmp
07/09/2007 22:06:28 16384 byte 9 days old -- ~DF70E.tmp
07/09/2007 22:23:38 966656 byte 9 days old -- ~DFBAB8.tmp
07/09/2007 22:23:38 512 byte 9 days old -- ~DFBAC3.tmp
07/09/2007 22:23:44 950272 byte 9 days old -- ~DFC632.tmp
07/09/2007 22:23:44 512 byte 9 days old -- ~DFC6B9.tmp
07/09/2007 23:17:20 16384 byte 9 days old -- ~DFED60.tmp
07/09/2007 23:17:20 16384 byte 9 days old -- ~DFF001.tmp
07/09/2007 23:22:19 2561 byte 9 days old -- jar_cache16574.tmp
07/09/2007 23:22:19 2561 byte 9 days old -- jar_cache16572.tmp
07/09/2007 23:22:19 2561 byte 9 days old -- jar_cache16573.tmp
07/09/2007 23:31:34 16384 byte 9 days old -- ~DFDBED.tmp
07/09/2007 23:32:02 16384 byte 9 days old -- ~DFFE63.tmp
07/09/2007 23:32:04 16384 byte 9 days old -- ~DFFF0A.tmp
07/09/2007 23:32:11 16384 byte 9 days old -- ~DF302.tmp
07/09/2007 23:32:17 16384 byte 9 days old -- ~DF5A0.tmp
07/09/2007 23:47:09 16384 byte 9 days old -- ~DFBE02.tmp
08/09/2007 02:23:34 49152 byte 8 days old -- ~DF6BE0.tmp
08/09/2007 03:42:55 34 byte 8 days old -- mod29.tmp
08/09/2007 03:43:05 3323824 byte 8 days old -- DivXInstaller.exe
08/09/2007 03:43:06 34 byte 8 days old -- mod2A.tmp
08/09/2007 05:50:55 381 byte 8 days old -- mod61.tmp
08/09/2007 14:52:30 0 byte 8 days old -- mgv6D.tmp
08/09/2007 14:52:32 0 byte 8 days old -- u1x6E.tmp
08/09/2007 21:35:11 2561 byte 8 days old -- jar_cache34158.tmp
08/09/2007 21:38:00 2561 byte 8 days old -- jar_cache723.tmp
08/09/2007 21:38:07 2561 byte 8 days old -- jar_cache36230.tmp
08/09/2007 22:29:27 2561 byte 8 days old -- jar_cache57861.tmp
08/09/2007 23:48:45 2561 byte 8 days old -- jar_cache57862.tmp
08/09/2007 23:52:30 379 byte 8 days old -- mod9C.tmp
09/09/2007 00:01:38 512 byte 7 days old -- ~DFD145.tmp
09/09/2007 00:01:38 966656 byte 7 days old -- ~DFD133.tmp
09/09/2007 00:01:43 950272 byte 7 days old -- ~DFE7CA.tmp
09/09/2007 00:01:43 512 byte 7 days old -- ~DFE87F.tmp
09/09/2007 00:04:57 32768 byte 7 days old -- ~DF132.tmp
09/09/2007 00:22:50 23661600 byte 7 days old -- 33003.exe
09/09/2007 00:48:09 110546238 byte 7 days old -- fla4.tmp
09/09/2007 01:02:52 16384 byte 7 days old -- ~DF1DD0.tmp
09/09/2007 01:06:21 123138060 byte 7 days old -- fla15.tmp
09/09/2007 01:37:22 966656 byte 7 days old -- ~DFCAC2.tmp
09/09/2007 01:37:26 512 byte 7 days old -- ~DFCE53.tmp
09/09/2007 01:38:51 950272 byte 7 days old -- ~DF3A61.tmp
09/09/2007 01:38:55 512 byte 7 days old -- ~DF3D18.tmp
09/09/2007 03:09:52 16384 byte 7 days old -- ~DF9645.tmp
09/09/2007 04:00:30 43 byte 7 days old -- removalfile.bat
09/09/2007 15:54:27 966656 byte 7 days old -- ~DF1408.tmp
09/09/2007 15:54:27 512 byte 7 days old -- ~DF1417.tmp
09/09/2007 15:54:33 512 byte 7 days old -- ~DF1CC6.tmp
09/09/2007 15:54:33 950272 byte 7 days old -- ~DF1C9E.tmp
09/09/2007 16:50:17 16384 byte 7 days old -- ~DF6A3F.tmp
09/09/2007 17:29:36 966656 byte 7 days old -- ~DFD2F.tmp
09/09/2007 17:29:37 512 byte 7 days old -- ~DFEAA.tmp
09/09/2007 17:30:47 512 byte 7 days old -- ~DFA854.tmp
09/09/2007 17:30:47 950272 byte 7 days old -- ~DFA65A.tmp
10/09/2007 20:28:00 16384 byte 6 days old -- ~DF1B72.tmp
10/09/2007 21:20:19 16384 byte 6 days old -- ~DF9B60.tmp
11/09/2007 00:15:00 2561 byte 5 days old -- jar_cache38036.tmp
11/09/2007 00:47:14 16384 byte 5 days old -- ~DF4FAE.tmp
11/09/2007 00:52:06 6002 byte 5 days old -- plf1.tmp
11/09/2007 00:52:13 (DIR) 0 byte 5 days old -- pft3.tmp
11/09/2007 01:24:42 728 byte 5 days old -- KLeaner.log
11/09/2007 01:31:41 228568 byte 5 days old -- caevents.log
11/09/2007 09:36:47 16384 byte 5 days old -- ~DF74A3.tmp
11/09/2007 09:49:41 16384 byte 5 days old -- ~DF7BED.tmp
11/09/2007 10:37:28 16384 byte 5 days old -- ~DFFC20.tmp
11/09/2007 12:16:34 16384 byte 5 days old -- ~DFB801.tmp
11/09/2007 12:35:38 966656 byte 5 days old -- ~DFAD29.tmp
11/09/2007 12:35:40 512 byte 5 days old -- ~DFADB0.tmp
11/09/2007 12:36:11 966656 byte 5 days old -- ~DF3681.tmp
11/09/2007 12:36:13 512 byte 5 days old -- ~DF3BBF.tmp
11/09/2007 13:02:05 2561 byte 5 days old -- jar_cache45610.tmp
11/09/2007 18:23:37 16384 byte 5 days old -- ~DFC1BA.tmp
11/09/2007 21:32:23 2561 byte 5 days old -- jar_cache62612.tmp
11/09/2007 21:32:23 2561 byte 5 days old -- jar_cache62611.tmp
11/09/2007 23:41:45 16384 byte 5 days old -- ~DFBAA4.tmp
12/09/2007 00:41:45 16384 byte 4 days old -- ~DFB1B9.tmp
12/09/2007 02:00:51 2561 byte 4 days old -- jar_cache25346.tmp
12/09/2007 03:29:09 2561 byte 4 days old -- jar_cache3283.tmp
12/09/2007 03:29:09 2561 byte 4 days old -- jar_cache3282.tmp
12/09/2007 03:30:15 2561 byte 4 days old -- jar_cache25967.tmp
12/09/2007 03:37:19 2561 byte 4 days old -- jar_cache25968.tmp
12/09/2007 04:22:19 2561 byte 4 days old -- jar_cache48130.tmp
12/09/2007 04:22:19 2561 byte 4 days old -- jar_cache48131.tmp
12/09/2007 05:20:24 2561 byte 4 days old -- jar_cache48132.tmp
12/09/2007 05:20:24 2561 byte 4 days old -- jar_cache48133.tmp
12/09/2007 05:36:54 2561 byte 4 days old -- jar_cache48135.tmp
12/09/2007 05:39:31 2561 byte 4 days old -- jar_cache48134.tmp
12/09/2007 05:44:14 2561 byte 4 days old -- jar_cache48136.tmp
12/09/2007 06:54:39 16384 byte 4 days old -- ~DF8E79.tmp
12/09/2007 07:16:40 2561 byte 4 days old -- jar_cache63469.tmp
12/09/2007 07:29:20 16384 byte 4 days old -- ~DFFF67.tmp
12/09/2007 20:05:39 16384 byte 4 days old -- ~DFD4C8.tmp
12/09/2007 20:05:44 16384 byte 4 days old -- ~DF96BC.tmp
12/09/2007 20:08:45 966656 byte 4 days old -- ~DFD45D.tmp
12/09/2007 20:08:49 966656 byte 4 days old -- ~DF96A5.tmp
12/09/2007 20:42:18 16384 byte 4 days old -- ~DF4D86.tmp
12/09/2007 21:33:03 16384 byte 4 days old -- ~DFC0A9.tmp
12/09/2007 22:13:17 2561 byte 4 days old -- jar_cache41851.tmp
12/09/2007 22:23:52 2561 byte 4 days old -- jar_cache41852.tmp
13/09/2007 00:52:26 2561 byte 3 days old -- jar_cache9604.tmp
13/09/2007 00:52:26 2561 byte 3 days old -- jar_cache9605.tmp
13/09/2007 01:57:52 2561 byte 3 days old -- jar_cache60342.tmp
13/09/2007 01:57:52 2561 byte 3 days old -- jar_cache60341.tmp
13/09/2007 01:57:57 2561 byte 3 days old -- jar_cache43400.tmp
13/09/2007 04:06:34 16384 byte 3 days old -- ~DF606D.tmp
13/09/2007 13:33:40 32768 byte 3 days old -- ~DF39EF.tmp
13/09/2007 13:41:50 2561 byte 3 days old -- jar_cache8385.tmp
13/09/2007 13:47:15 32768 byte 3 days old -- ~DF8109.tmp
13/09/2007 17:55:24 (DIR) 0 byte 3 days old -- tmp00000efe
13/09/2007 18:21:15 114688 byte 3 days old -- ~DF4B38.tmp
13/09/2007 18:34:53 16384 byte 3 days old -- ~DF1E01.tmp
13/09/2007 21:03:40 16384 byte 3 days old -- ~DFF995.tmp
13/09/2007 21:09:26 966656 byte 3 days old -- ~DF60B9.tmp
13/09/2007 21:09:26 512 byte 3 days old -- ~DF60C6.tmp
13/09/2007 21:09:30 966656 byte 3 days old -- ~DF6ED1.tmp
13/09/2007 21:09:30 512 byte 3 days old -- ~DF6FE9.tmp
13/09/2007 21:22:26 2561 byte 3 days old -- jar_cache28041.tmp
13/09/2007 21:36:12 16384 byte 3 days old -- ~DF24EC.tmp
13/09/2007 22:00:22 16384 byte 3 days old -- ~DF67F9.tmp
13/09/2007 22:00:43 16384 byte 3 days old -- ~DFD090.tmp
13/09/2007 22:00:44 16384 byte 3 days old -- ~DFD43A.tmp
13/09/2007 22:24:56 2561 byte 3 days old -- jar_cache53683.tmp
13/09/2007 22:30:43 2561 byte 3 days old -- jar_cache44611.tmp
13/09/2007 23:20:57 16384 byte 3 days old -- ~DFAFBA.tmp
14/09/2007 02:25:50 32768 byte 2 days old -- ~DF7B0B.tmp
14/09/2007 02:52:08 32768 byte 2 days old -- ~DF7D2A.tmp
14/09/2007 03:15:22 16384 byte 2 days old -- ~DF1B01.tmp
14/09/2007 04:05:52 2561 byte 2 days old -- jar_cache60605.tmp
14/09/2007 10:05:53 508846 byte 2 days old -- flaA.tmp
14/09/2007 10:06:04 1014497 byte 2 days old -- flaC.tmp
14/09/2007 10:06:40 1014497 byte 2 days old -- flaF.tmp
14/09/2007 10:07:32 1018484 byte 2 days old -- fla12.tmp
14/09/2007 12:14:57 13176 byte 2 days old -- bt1651.bat
14/09/2007 12:14:59 (DIR) 0 byte 2 days old -- KIS7.0.0.123
14/09/2007 12:40:29 16384 byte 2 days old -- ~DF7AFC.tmp
14/09/2007 13:58:14 65536 byte 2 days old -- ~DFE147.tmp
14/09/2007 14:34:20 65536 byte 2 days old -- ~DFDC3A.tmp
14/09/2007 15:18:15 16384 byte 2 days old -- ~DF78AE.tmp
14/09/2007 22:17:11 16384 byte 2 days old -- ~DF795F.tmp
15/09/2007 01:49:29 16384 byte 1 days old -- ~DFC9B8.tmp
15/09/2007 02:15:27 2561 byte 1 days old -- jar_cache56149.tmp
15/09/2007 02:26:17 2561 byte 1 days old -- jar_cache63651.tmp
15/09/2007 03:42:33 16384 byte 1 days old -- ~DF7CBC.tmp
15/09/2007 04:39:35 2561 byte 1 days old -- jar_cache42173.tmp
15/09/2007 04:39:36 2561 byte 1 days old -- jar_cache42169.tmp
15/09/2007 04:39:36 2561 byte 1 days old -- jar_cache42170.tmp
15/09/2007 04:54:37 16384 byte 1 days old -- ~DF2C34.tmp
15/09/2007 05:11:04 16384 byte 1 days old -- ~DFC91F.tmp
15/09/2007 21:56:58 12688 byte 1 days old -- java_install_reg.log
15/09/2007 23:06:51 2561 byte 1 days old -- jar_cache51497.tmp
15/09/2007 23:06:51 (DIR) 0 byte 1 days old -- hsperfdata_oli2
16/09/2007 00:41:53 (DIR) 0 byte 0 days old -- F-Secure
16/09/2007 06:44:38 16384 byte 0 days old -- ~DF193C.tmp
16/09/2007 09:33:07 32768 byte 0 days old -- ~DF398D.tmp
16/09/2007 11:05:50 65536 byte 0 days old -- ~DFE84A.tmp
16/09/2007 11:12:17 32768 byte 0 days old -- ~DF90B6.tmp
16/09/2007 13:12:43 (DIR) 0 byte 0 days old -- MessengerCache
16/09/2007 13:58:10 (DIR) 0 byte 0 days old -- Rar$EX01.844
16/09/2007 14:04:33 (DIR) 0 byte 0 days old -- Rar$EX00.625
16/09/2007 14:18:24 (DIR) 0 byte 0 days old -- WPDNSE
16/09/2007 14:24:37 (DIR) 0 byte 0 days old -- Rar$EX00.875
16/09/2007 14:44:20 (DIR) 0 byte 0 days old -- Rar$EX00.281
16/09/2007 14:45:05 16384 byte 0 days old -- ~DF96B5.tmp
16/09/2007 14:45:06 16384 byte 0 days old -- ~DF3CCD.tmp
16/09/2007 14:45:12 966656 byte 0 days old -- ~DF969D.tmp
16/09/2007 14:45:12 966656 byte 0 days old -- ~DF366D.tmp
16/09/2007 14:47:36 16384 byte 0 days old -- ~DFA170.tmp
16/09/2007 15:28:28 16384 byte 0 days old -- ~DFBBB8.tmp
16/09/2007 15:28:28 (DIR) 0 byte 0 days old -- nsb10.tmp

==========================================
Scan completed in 0,1 minutes
End of report
0
Réponse 29 / 53
Greg185
 
Bonsoir , pourrait tu donnée suite ? merçi beaucoup
0
Réponse 30 / 53
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité 1 537
 
Re,

Commence par Ccleaner (gratuit)
Téléchargement :
https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html
Tuto :
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

Lors de l’installation, [décoche] l’option qui t’installerait la barre Yahoo !

¤ Lance CCleaner.

Suppression des fichiers temporaires

Va dans la section "Options" situé dans la marge gauche. Décoche Avancé. Retourne ensuite dans la section "Nettoyeur"
Fais bien attention de cocher toutes ces cases dans la marge gauche (Internet Explorer/Windows Explorer/Système)
• Clique sur Analyse
• Patiente le temps du scan, qui peut prendre un peu de temps si c'est la première fois.
• Une fois le scan terminé, clique sur Lancer le Nettoyage

Suppression des incohérence du registre

• Clique sur l'icône Erreurs situés dans la marge à gauche.
• Puis clique sur Analyser les erreurs
• Patiente pendant que CCleaner scan ton registre.
• Une fois le scan terminé, coche toutes les entrèes qu'il t'aura trouvée.
• Tu peux cliquer ensuite sur Corriger les erreurs.

Si tu n'est pas sur de ce que tu fais, tu peux choisir de sauvegarder les entrées cochées pour les restaurer ultérieurement


Ensuite refais tourner suspectFiles (post 25).

Il va ma< falloir un peu d etemlps pour identifier toius les fichiers infectés et de préparer la désinfection.

@+
0
Réponse 31 / 53
Greg185
 
re ok , prend ton temp , quand je clic sur cleaner voiçi ce qu'il me dit , " Nous sommes désolés, mais le téléchargement de ce logiciel est suspendu. " il n'y aurait pas un au prog du meme genre ? merçi
0
Réponse 32 / 53
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité 1 537
 
Re,

essaye à partir de ce lien :

ccleaner

@+
0
Réponse 33 / 53
Greg185
 
Re , voila je vient de faire ccleaner , et il a tout effacer ainsi que réparer les erreurs ( plus de 800 ) a plusieur reprise .. je sais pas si it te coller le rapport de suspectiles , donc je le fais ,

SystemScan - www.suspectfile.com - ver. 3.2.0

Running on: Windows XP HOME Edition, Service Pack 2 (2600.5.1)
System directory: C:\WINDOWS

Date: 16/09/2007
Time: 23:45:26

Output limited to:
-Recent files

===================== Recent files (30 days old)=====================

----- recent files in C:\
19/08/2007 04:02:39 47564 byte 28 days old -- NTDETECT.COM
19/08/2007 04:02:39 251712 byte 28 days old -- ntldr
19/08/2007 04:57:37 216 byte 28 days old -- boot.ini
19/08/2007 10:11:20 (DIR) 0 byte 28 days old -- System Volume Information
30/08/2007 01:52:36 244 byte 17 days old -- sqmnoopt04.sqm
30/08/2007 01:52:36 268 byte 17 days old -- sqmdata04.sqm
31/08/2007 14:57:22 (DIR) 0 byte 16 days old -- Downloads
31/08/2007 14:57:22 (DIR) 0 byte 16 days old -- Bases
16/09/2007 22:35:32 1598029824 byte 0 days old -- pagefile.sys
16/09/2007 22:35:47 19446 byte 0 days old -- check_LSA7.txt
16/09/2007 23:37:50 (DIR) 0 byte 0 days old -- Program Files
16/09/2007 23:41:24 (DIR) 0 byte 0 days old -- WINDOWS
16/09/2007 23:45:26 (DIR) 0 byte 0 days old -- suspectfile

----- recent files in C:\WINDOWS\
19/08/2007 03:45:46 (DIR) 0 byte 28 days old -- EHome
19/08/2007 03:59:00 (DIR) 0 byte 28 days old -- $NtServicePackUninstall$
19/08/2007 04:03:50 (DIR) 0 byte 28 days old -- Web
19/08/2007 04:16:36 (DIR) 0 byte 28 days old -- system
19/08/2007 04:22:33 (DIR) 0 byte 28 days old -- srchasst
19/08/2007 04:24:48 (DIR) 0 byte 28 days old -- ServicePackFiles
19/08/2007 04:49:14 (DIR) 0 byte 28 days old -- provisioning
19/08/2007 04:49:27 (DIR) 0 byte 28 days old -- peernet
19/08/2007 04:52:40 (DIR) 0 byte 28 days old -- ime
19/08/2007 05:04:05 (DIR) 0 byte 28 days old -- $NtUninstallKB873339$
19/08/2007 05:08:26 (DIR) 0 byte 28 days old -- $NtUninstallKB885835$
19/08/2007 05:12:07 (DIR) 0 byte 28 days old -- $NtUninstallKB885836$
19/08/2007 05:16:18 (DIR) 0 byte 28 days old -- $NtUninstallKB888302$
19/08/2007 05:19:48 (DIR) 0 byte 28 days old -- $NtUninstallKB890046$
19/08/2007 05:24:46 (DIR) 0 byte 28 days old -- $NtUninstallKB890859$
19/08/2007 05:31:24 (DIR) 0 byte 28 days old -- $NtUninstallKB891781$
19/08/2007 05:40:10 (DIR) 0 byte 28 days old -- $NtUninstallKB893756$
19/08/2007 05:45:30 (DIR) 0 byte 28 days old -- $NtUninstallKB896358$
19/08/2007 05:51:01 (DIR) 0 byte 28 days old -- $NtUninstallKB896423$
19/08/2007 05:56:33 (DIR) 0 byte 28 days old -- $NtUninstallKB896424$
19/08/2007 06:01:51 (DIR) 0 byte 28 days old -- $NtUninstallKB896428$
19/08/2007 06:06:54 (DIR) 0 byte 28 days old -- $NtUninstallKB899587$
19/08/2007 06:12:09 (DIR) 0 byte 28 days old -- $NtUninstallKB899591$
19/08/2007 06:17:23 (DIR) 0 byte 28 days old -- $NtUninstallKB900725$
19/08/2007 06:23:29 (DIR) 0 byte 28 days old -- $NtUninstallKB901017$
19/08/2007 06:28:15 (DIR) 0 byte 28 days old -- $NtUninstallKB901214$
19/08/2007 06:33:10 (DIR) 0 byte 28 days old -- $NtUninstallKB902400$
19/08/2007 06:38:27 (DIR) 0 byte 28 days old -- $NtUninstallKB905414$
19/08/2007 06:43:06 (DIR) 0 byte 28 days old -- $NtUninstallKB905749$
19/08/2007 06:47:35 (DIR) 0 byte 28 days old -- $NtUninstallKB908519$
19/08/2007 06:52:33 (DIR) 0 byte 28 days old -- $NtUninstallKB908531$
19/08/2007 06:57:52 (DIR) 0 byte 28 days old -- $NtUninstallKB910437$
19/08/2007 07:02:30 (DIR) 0 byte 28 days old -- $NtUninstallKB911280$
19/08/2007 07:07:04 (DIR) 0 byte 28 days old -- $NtUninstallKB911562$
19/08/2007 07:11:50 (DIR) 0 byte 28 days old -- $NtUninstallKB911927$
19/08/2007 07:16:21 (DIR) 0 byte 28 days old -- $NtUninstallKB912919$
19/08/2007 07:21:03 (DIR) 0 byte 28 days old -- $NtUninstallKB913580$
19/08/2007 07:25:41 (DIR) 0 byte 28 days old -- $NtUninstallKB914388$
19/08/2007 07:30:12 (DIR) 0 byte 28 days old -- $NtUninstallKB914389$
19/08/2007 07:34:34 (DIR) 0 byte 28 days old -- $NtUninstallKB917344$
19/08/2007 07:38:44 (DIR) 0 byte 28 days old -- $NtUninstallKB917422$
19/08/2007 07:42:38 (DIR) 0 byte 28 days old -- $NtUninstallKB917953$
19/08/2007 07:46:27 (DIR) 0 byte 28 days old -- $NtUninstallKB919007$
19/08/2007 07:50:12 (DIR) 0 byte 28 days old -- $NtUninstallKB920670$
19/08/2007 07:54:17 (DIR) 0 byte 28 days old -- $NtUninstallKB920683$
19/08/2007 07:58:39 (DIR) 0 byte 28 days old -- $NtUninstallKB920685$
19/08/2007 08:03:38 (DIR) 0 byte 28 days old -- $NtUninstallKB921398$
19/08/2007 08:09:03 (DIR) 0 byte 28 days old -- $NtUninstallKB921883$
19/08/2007 08:13:40 (DIR) 0 byte 28 days old -- $NtUninstallKB922616$
19/08/2007 08:18:12 (DIR) 0 byte 28 days old -- $NtUninstallKB922819$
19/08/2007 08:22:55 (DIR) 0 byte 28 days old -- $NtUninstallKB923191$
19/08/2007 08:27:28 (DIR) 0 byte 28 days old -- $NtUninstallKB923414$
19/08/2007 08:32:00 (DIR) 0 byte 28 days old -- $NtUninstallKB924191$
19/08/2007 08:36:33 (DIR) 0 byte 28 days old -- $NtUninstallKB924496$
19/08/2007 10:10:53 (DIR) 0 byte 28 days old -- Fonts
19/08/2007 10:10:57 (DIR) 0 byte 28 days old -- AppPatch
19/08/2007 10:23:21 (DIR) 0 byte 28 days old -- $NtUninstallKB928843$
19/08/2007 10:23:48 (DIR) 0 byte 28 days old -- $NtUninstallKB935839$
19/08/2007 10:26:20 (DIR) 0 byte 28 days old -- $NtUninstallKB937143_0$
19/08/2007 10:28:24 (DIR) 0 byte 28 days old -- $NtUninstallKB923689$
19/08/2007 10:29:23 (DIR) 0 byte 28 days old -- $NtUninstallKB930916$
19/08/2007 10:29:53 (DIR) 0 byte 28 days old -- $NtUninstallKB916595$
19/08/2007 10:30:21 (DIR) 0 byte 28 days old -- $NtUninstallKB886185$
19/08/2007 10:30:44 (DIR) 0 byte 28 days old -- $NtUninstallKB935840$
19/08/2007 10:31:10 (DIR) 0 byte 28 days old -- $NtUninstallKB920213$
19/08/2007 10:31:38 (DIR) 0 byte 28 days old -- $NtUninstallKB938127$
19/08/2007 10:32:09 (DIR) 0 byte 28 days old -- $NtUninstallKB926255$
19/08/2007 10:33:37 (DIR) 0 byte 28 days old -- $NtUninstallKB918118$
19/08/2007 10:34:27 (DIR) 0 byte 28 days old -- $NtUninstallKB922582$
19/08/2007 10:34:59 (DIR) 0 byte 28 days old -- $NtUninstallKB932168$
19/08/2007 10:35:24 (DIR) 0 byte 28 days old -- $NtUninstallKB930178$
19/08/2007 10:35:55 (DIR) 0 byte 28 days old -- $NtUninstallKB920872$
19/08/2007 10:36:19 (DIR) 0 byte 28 days old -- $NtUninstallKB926436$
19/08/2007 10:36:46 (DIR) 0 byte 28 days old -- $NtUninstallKB929123$
19/08/2007 10:37:31 (DIR) 0 byte 28 days old -- $NtUninstallKB925902$
19/08/2007 10:38:28 (DIR) 0 byte 28 days old -- $NtUninstallKB925398_WMP64$
19/08/2007 10:38:53 (DIR) 0 byte 28 days old -- $NtUninstallKB938829$
19/08/2007 10:39:21 (DIR) 0 byte 28 days old -- $NtUninstallKB887472$
19/08/2007 10:39:53 (DIR) 0 byte 28 days old -- $NtUninstallKB921503$
19/08/2007 10:40:26 (DIR) 0 byte 28 days old -- $NtUninstallKB931836$
19/08/2007 10:40:49 (DIR) 0 byte 28 days old -- $NtUninstallKB936357$
19/08/2007 10:41:23 (DIR) 0 byte 28 days old -- $NtUninstallKB927891$
19/08/2007 10:42:58 (DIR) 0 byte 28 days old -- $NtUninstallKB936782_WMP9$
19/08/2007 10:44:00 (DIR) 0 byte 28 days old -- $NtUninstallKB931261$
19/08/2007 10:44:31 (DIR) 0 byte 28 days old -- $NtUninstallKB924270$
19/08/2007 10:45:09 (DIR) 0 byte 28 days old -- $NtUninstallKB900485$
19/08/2007 10:45:38 (DIR) 0 byte 28 days old -- $NtUninstallKB924667$
19/08/2007 10:45:56 (DIR) 0 byte 28 days old -- WinSxS
19/08/2007 10:46:21 (DIR) 0 byte 28 days old -- $NtUninstallKB938828$
19/08/2007 10:47:08 (DIR) 0 byte 28 days old -- $NtUninstallKB936021$
19/08/2007 10:47:57 (DIR) 0 byte 28 days old -- $NtUninstallKB923980$
19/08/2007 10:48:58 (DIR) 0 byte 28 days old -- $NtUninstallKB931784$
19/08/2007 10:51:01 (DIR) 0 byte 28 days old -- $NtUninstallKB928255$
19/08/2007 10:52:37 (DIR) 0 byte 28 days old -- $NtUninstallKB927802$
19/08/2007 10:53:13 (DIR) 0 byte 28 days old -- $NtUninstallKB927779$
19/08/2007 10:54:53 (DIR) 0 byte 28 days old -- security
19/08/2007 10:56:11 (DIR) 0 byte 28 days old -- msagent
19/08/2007 20:53:30 (DIR) 0 byte 28 days old -- SoftwareDistribution
20/08/2007 18:09:28 2060 byte 27 days old -- ModemLog_Conexant HDA D110 MDC V.92 Modem.txt
26/08/2007 22:20:37 (DIR) 0 byte 21 days old -- assembly
26/08/2007 22:29:19 (DIR) 0 byte 21 days old -- $NtUninstallKB904942$
26/08/2007 22:30:38 (DIR) 0 byte 21 days old -- $NtUninstallKB914440$
26/08/2007 22:31:03 (DIR) 0 byte 21 days old -- network diagnostic
26/08/2007 22:33:19 (DIR) 0 byte 21 days old -- $NtUninstallKB937143$
26/08/2007 22:43:03 (DIR) 0 byte 21 days old -- $NtUninstallKB915865$
26/08/2007 22:44:27 (DIR) 0 byte 21 days old -- $NtServicePackUninstallNLSDownlevelMapping$
26/08/2007 22:45:35 (DIR) 0 byte 21 days old -- $NtServicePackUninstallIDNMitigationAPIs$
26/08/2007 22:50:28 (DIR) 0 byte 21 days old -- ie7
26/08/2007 22:51:12 (DIR) 0 byte 21 days old -- Media
27/08/2007 00:18:30 (DIR) 0 byte 20 days old -- WBEM
27/08/2007 17:26:58 (DIR) 0 byte 20 days old -- ie7updates
29/08/2007 12:42:27 (DIR) 0 byte 18 days old -- $hf_mig$
31/08/2007 14:58:37 (DIR) 0 byte 16 days old -- $NtUninstallKB933360$
31/08/2007 14:59:33 (DIR) 0 byte 16 days old -- erdnt
02/09/2007 21:53:14 (DIR) 0 byte 14 days old -- $NtUninstallWudf01000$
02/09/2007 21:55:13 (DIR) 0 byte 14 days old -- $NtUninstallWMFDist11$
02/09/2007 21:57:29 316640 byte 14 days old -- WMSysPr9.prx
02/09/2007 22:00:01 (DIR) 0 byte 14 days old -- $NtUninstallwmp11$
02/09/2007 22:01:03 (DIR) 0 byte 14 days old -- $NtUninstallMSCompPackV1$
02/09/2007 22:13:19 613 byte 14 days old -- win.ini
03/09/2007 03:01:40 (DIR) 0 byte 13 days old -- $NtUninstallKB929399$
04/09/2007 03:02:35 (DIR) 0 byte 12 days old -- $NtUninstallKB936782_WMP11$
04/09/2007 04:00:03 (DIR) 0 byte 12 days old -- $NtUninstallKB939683$
08/09/2007 00:58:54 (DIR) 0 byte 8 days old -- Help
09/09/2007 02:15:19 (DIR) 0 byte 7 days old -- Registration
11/09/2007 01:30:50 (DIR) 0 byte 5 days old -- Installer
13/09/2007 14:01:57 (DIR) 0 byte 3 days old -- inf
15/09/2007 16:02:09 (DIR) 0 byte 1 days old -- Downloaded Program Files
16/09/2007 18:50:19 32468 byte 0 days old -- SchedLgU.Txt
16/09/2007 21:43:38 1357 byte 0 days old -- cookies.ini
16/09/2007 22:35:47 2048 byte 0 days old -- bootstat.dat
16/09/2007 22:37:13 50 byte 0 days old -- wiaservc.log
16/09/2007 22:37:36 159 byte 0 days old -- wiadebug.log
16/09/2007 22:38:02 2000016 byte 0 days old -- WindowsUpdate.log
16/09/2007 23:41:16 (DIR) 0 byte 0 days old -- temp
16/09/2007 23:41:24 (DIR) 0 byte 0 days old -- Debug
16/09/2007 23:45:23 (DIR) 0 byte 0 days old -- system32
16/09/2007 23:45:26 (DIR) 0 byte 0 days old -- Prefetch

----- recent files in C:\WINDOWS\Downloaded Program Files\

----- recent files in C:\WINDOWS\system\

----- recent files in C:\WINDOWS\system32\
19/08/2007 03:59:28 (DIR) 0 byte 28 days old -- ReinstallBackups
19/08/2007 04:16:49 (DIR) 0 byte 28 days old -- usmt
19/08/2007 04:23:02 (DIR) 0 byte 28 days old -- npp
19/08/2007 04:52:41 (DIR) 0 byte 28 days old -- mui
19/08/2007 04:52:47 (DIR) 0 byte 28 days old -- Setup
19/08/2007 04:52:56 (DIR) 0 byte 28 days old -- oobe
19/08/2007 06:37:35 (DIR) 0 byte 28 days old -- Com
19/08/2007 10:13:14 90 byte 28 days old -- spupdwxp.log
19/08/2007 10:56:30 146808 byte 28 days old -- FNTCACHE.DAT
26/08/2007 22:21:12 380684 byte 21 days old -- perfh009.dat
26/08/2007 22:21:12 64052 byte 21 days old -- perfc00C.dat
26/08/2007 22:21:12 53098 byte 21 days old -- perfc009.dat
26/08/2007 22:21:12 928492 byte 21 days old -- PerfStringBackup.INI
26/08/2007 22:21:13 445672 byte 21 days old -- perfh00C.dat
27/08/2007 00:44:29 (DIR) 0 byte 20 days old -- Restore
27/08/2007 17:29:19 (DIR) 0 byte 20 days old -- fr-fr
29/08/2007 12:52:08 249356 byte 18 days old -- TZLog.log
02/09/2007 21:53:27 (DIR) 0 byte 14 days old -- LogFiles
02/09/2007 22:00:54 242688 byte 14 days old -- SETA3.tmp
02/09/2007 22:27:55 16832 byte 14 days old -- amcompat.tlb
02/09/2007 22:27:55 23392 byte 14 days old -- nscompat.tlb
04/09/2007 03:03:14 (DIR) 0 byte 12 days old -- CatRoot
04/09/2007 23:41:00 82744 byte 12 days old -- PICCLP32.OCX
05/09/2007 21:40:22 479232 byte 11 days old -- NameGrabber.exe
06/09/2007 04:50:42 17474680 byte 10 days old -- MRT.exe
08/09/2007 17:43:02 244832 byte 8 days old -- awtss.dll
08/09/2007 17:43:04 321 byte 8 days old -- sstwa.ini
08/09/2007 17:46:37 6448 byte 8 days old -- sstwa.bak1
09/09/2007 00:32:57 13646 byte 7 days old -- wpa.dbl
09/09/2007 01:58:42 12335 byte 7 days old -- sstwa.tmp
09/09/2007 02:15:28 (DIR) 0 byte 7 days old -- wbem
09/09/2007 02:17:11 (DIR) 0 byte 7 days old -- config
09/09/2007 16:54:14 693485 byte 7 days old -- qxajxrnj.ini
09/09/2007 21:00:23 693476 byte 7 days old -- mtiyjvne.ini
11/09/2007 02:38:52 (DIR) 0 byte 5 days old -- drivers
14/09/2007 03:04:41 693485 byte 2 days old -- acxwbrot.ini
14/09/2007 03:06:40 69184 byte 2 days old -- prsgnqhh.dll
14/09/2007 11:37:14 125504 byte 2 days old -- pifsrind.dll
14/09/2007 11:37:28 693485 byte 2 days old -- dnirsfip.ini
14/09/2007 11:55:32 125504 byte 2 days old -- kmjpauwo.dll
14/09/2007 12:31:20 3072 byte 2 days old -- CONFIG.NT
14/09/2007 13:26:16 693502 byte 2 days old -- owuapjmk.ini
14/09/2007 14:20:28 69184 byte 2 days old -- oisysyde.dll
14/09/2007 14:23:26 125504 byte 2 days old -- lghtytds.dll
14/09/2007 14:27:12 693484 byte 2 days old -- sdtythgl.ini
14/09/2007 15:01:02 125504 byte 2 days old -- qluyvadf.dll
14/09/2007 15:04:10 69184 byte 2 days old -- qhnxtqml.dll
14/09/2007 15:36:40 693512 byte 2 days old -- fdavyulq.ini
14/09/2007 16:09:02 125504 byte 2 days old -- sltxuyid.dll
14/09/2007 20:12:33 693485 byte 2 days old -- diyuxtls.ini
14/09/2007 21:08:44 125504 byte 2 days old -- xypkuibn.dll
14/09/2007 21:09:06 693484 byte 2 days old -- nbiukpyx.ini
14/09/2007 21:27:39 125504 byte 2 days old -- wubdgweu.dll
14/09/2007 23:24:51 693512 byte 2 days old -- uewgdbuw.ini
15/09/2007 01:12:09 125504 byte 1 days old -- jidupqja.dll
15/09/2007 02:25:58 693502 byte 1 days old -- ajqpudij.ini
15/09/2007 02:54:01 125504 byte 1 days old -- diwasfqy.dll
15/09/2007 04:38:36 693494 byte 1 days old -- yqfsawid.ini
15/09/2007 04:52:59 125504 byte 1 days old -- xkndroam.dll
15/09/2007 04:53:50 693476 byte 1 days old -- maordnkx.ini
15/09/2007 05:09:34 125504 byte 1 days old -- vleeggvk.dll
15/09/2007 13:52:09 693484 byte 1 days old -- kvggeelv.ini
15/09/2007 14:09:42 125504 byte 1 days old -- rwpfbqsf.dll
15/09/2007 14:10:01 693484 byte 1 days old -- fsqbfpwr.ini
15/09/2007 14:19:58 125504 byte 1 days old -- afsqqtln.dll
15/09/2007 15:38:11 693502 byte 1 days old -- nltqqsfa.ini
15/09/2007 16:20:21 125504 byte 1 days old -- stcxusom.dll
15/09/2007 16:23:42 693484 byte 1 days old -- mosuxcts.ini
15/09/2007 18:46:42 125504 byte 1 days old -- eukhupgq.dll
15/09/2007 20:05:25 693503 byte 1 days old -- qgpuhkue.ini
15/09/2007 23:13:47 125504 byte 1 days old -- ceqlxmdp.dll
16/09/2007 00:05:49 693485 byte 0 days old -- pdmxlqec.ini
16/09/2007 09:46:40 125504 byte 0 days old -- uogxkkef.dll
16/09/2007 09:47:09 693485 byte 0 days old -- fekkxgou.ini
16/09/2007 11:24:18 69184 byte 0 days old -- gpprrtbc.dll
16/09/2007 11:27:15 125504 byte 0 days old -- iforexnw.dll
16/09/2007 11:27:44 693485 byte 0 days old -- wnxerofi.ini
16/09/2007 13:10:23 125504 byte 0 days old -- uhrdamik.dll
16/09/2007 14:18:14 693614 byte 0 days old -- kimadrhu.ini
16/09/2007 14:27:21 125504 byte 0 days old -- odpslrss.dll
16/09/2007 14:37:02 693485 byte 0 days old -- ssrlspdo.ini
16/09/2007 18:20:49 (DIR) 0 byte 0 days old -- dllcache
16/09/2007 19:06:56 125504 byte 0 days old -- ustxspal.dll
16/09/2007 19:08:45 693484 byte 0 days old -- lapsxtsu.ini
16/09/2007 20:30:12 4672 byte 0 days old -- pgixdmum.exe
16/09/2007 20:30:18 75328 byte 0 days old -- grpvegky.exe
16/09/2007 20:33:29 125504 byte 0 days old -- egljybqe.dll
16/09/2007 21:43:03 693530 byte 0 days old -- eqbyjlge.ini
16/09/2007 22:12:33 75328 byte 0 days old -- kplvltja.exe
16/09/2007 22:14:16 4672 byte 0 days old -- fgsdhxsg.exe
16/09/2007 22:40:36 692344 byte 0 days old -- sstwa.bak2
16/09/2007 22:40:38 4672 byte 0 days old -- qeuwubey.exe
16/09/2007 22:42:57 75328 byte 0 days old -- gjbodjmk.exe
16/09/2007 22:44:26 (DIR) 0 byte 0 days old -- CatRoot2
16/09/2007 23:45:23 700155 byte 0 days old -- sstwa.ini2

----- recent files in C:\WINDOWS\system32\drivers\
25/08/2007 16:14:41 359808 byte 22 days old -- TCPIP.SYS.ORIGINAL
25/08/2007 16:14:41 359808 byte 22 days old -- TCPIP.SYS
02/09/2007 21:56:34 (DIR) 0 byte 14 days old -- UMDF
08/09/2007 02:27:25 62016 byte 8 days old -- avipbb.sys
11/09/2007 02:38:15 82061 byte 5 days old -- klick.dat
11/09/2007 02:38:15 81549 byte 5 days old -- klin.dat
11/09/2007 02:38:52 186640 byte 5 days old -- klif.sys
16/09/2007 15:23:35 (DIR) 0 byte 0 days old -- etc
16/09/2007 22:18:23 4582176 byte 0 days old -- fidbox.dat
16/09/2007 22:18:23 55100 byte 0 days old -- fidbox.idx
16/09/2007 22:18:24 4652 byte 0 days old -- fidbox2.idx
16/09/2007 23:45:01 42016 byte 0 days old -- fidbox2.dat

----- recent files in C:\WINDOWS\temp\

----- recent files in C:\Program Files\
19/08/2007 04:21:16 (DIR) 0 byte 28 days old -- Windows NT
19/08/2007 04:22:10 (DIR) 0 byte 28 days old -- NetMeeting
19/08/2007 04:49:33 (DIR) 0 byte 28 days old -- Movie Maker
19/08/2007 10:22:25 (DIR) 0 byte 28 days old -- MSN Messenger
19/08/2007 10:37:02 (DIR) 0 byte 28 days old -- Outlook Express
19/08/2007 10:56:12 (DIR) 0 byte 28 days old -- Messenger
19/08/2007 21:15:43 (DIR) 0 byte 28 days old -- ma-config.com
25/08/2007 03:01:03 (DIR) 0 byte 22 days old -- WinRAR
25/08/2007 04:31:30 (DIR) 0 byte 22 days old -- ParadisePoker
27/08/2007 17:29:18 (DIR) 0 byte 20 days old -- Internet Explorer
29/08/2007 12:58:40 (DIR) 0 byte 18 days old -- Grisoft
02/09/2007 22:22:13 (DIR) 0 byte 14 days old -- Windows Media Player
08/09/2007 03:43:49 (DIR) 0 byte 8 days old -- DivX
11/09/2007 01:27:28 (DIR) 0 byte 5 days old -- Kaspersky Lab
14/09/2007 12:36:40 (DIR) 0 byte 2 days old -- Trend Micro
14/09/2007 20:21:51 (DIR) 0 byte 2 days old -- eChanblard
16/09/2007 01:49:44 (DIR) 0 byte 0 days old -- Navilog1
16/09/2007 23:37:56 (DIR) 0 byte 0 days old -- CCleaner

----- recent files in C:\Program Files\Fichiers communs\
19/08/2007 10:37:00 (DIR) 0 byte 28 days old -- System

----- recent files in C:\Documents and Settings\oli2\Application Data\
19/08/2007 21:19:51 (DIR) 0 byte 28 days old -- ma-config.com
25/08/2007 03:01:03 (DIR) 0 byte 22 days old -- Help
26/08/2007 22:18:12 (DIR) 0 byte 21 days old -- Microsoft
31/08/2007 14:59:28 (DIR) 0 byte 16 days old -- Grisoft
08/09/2007 03:47:33 (DIR) 0 byte 8 days old -- Mozilla
08/09/2007 03:48:14 (DIR) 0 byte 8 days old -- Talkback
08/09/2007 17:26:10 (DIR) 0 byte 8 days old -- Shareaza

----- recent files in C:\DOCUME~1\oli2\LOCALS~1\Temp\
16/09/2007 22:58:05 966656 byte 0 days old -- ~DF25D5.tmp
16/09/2007 22:58:06 512 byte 0 days old -- ~DF26E9.tmp
16/09/2007 22:58:24 966656 byte 0 days old -- ~DF4750.tmp
16/09/2007 22:58:25 512 byte 0 days old -- ~DF4804.tmp
16/09/2007 23:45:02 16384 byte 0 days old -- ~DF3C23.tmp
16/09/2007 23:45:05 (DIR) 0 byte 0 days old -- nszD.tmp

==========================================
Scan completed in 0,1 minutes
End of report


voila et merçi bcp , maintenant j'attendrai le temp qui faudra , pour que tu mettes la désinfection en place :) à bientot :
0
Réponse 34 / 53
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité 1 537
 
Bonjour,

Quelques outils avant une procédure manuelle :

1) Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau.


• Redémarre ton ordinateur
• Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
• A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
• Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
• Choisis ton compte.
Déroule la liste des instructions ci-dessous :
• Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le scrïpt.
• Appuie sur Y pour commencer le processus de nettoyage.
• Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
• Appuie sur une touche pour redémarrer le PC.
• Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
• Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
• Appuie sur une touche pour finir l'exécution du scrïpt et charger les icônes de ton Bureau.
• Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
• Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum

2) Télécharge « clean.zip »
http://www.malekal.com/download/clean.zip
•- Décompresse-le sur ton bureau (clic droit / extraire tout), tu dois obtenir un dossier dénommé "clean ".

•- Redémarre en mode sans échec. ( note bien ce que tu as à faire ).
•- Ouvre le dossier « clean » qui se trouve sur ton bureau.
•- Double-clic sur « clean.cmd ».
Une fenêtre noire va apparaître, choisis l’option 2.

Clean va travailler.
•- Redémarre normalement
•- Poste qui se trouve ici C:\rapport_clean.txt.

3) Remets un nouveau log Hijackthis !

@+
0
Réponse 35 / 53
Greg185
 
Bonjour,

1) Voiçi le rapport de SDFix ( merçi à Andymanchesta pour ce programme )


SDFix: Version 1.104

Run by oli2 on lun. 17/09/2007 at 11:28

Microsoft Windows XP [version 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:

Name:
DomainService

ImagePath:
C:\WINDOWS\system32\tuxtytac.exe /service

DomainService - Deleted



Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...


Normal Mode:
Checking Files:

No Trojan Files Found




Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.



Final Check:

Remaining Services:
------------------




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\\Kaspersky\\kavupd.exe"="C:\\Kaspersky\\kavupd.exe:*:Enabled:kavupd"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Messenger"
"C:\\Program Files\\Shareaza\\Shareaza.exe"="C:\\Program Files\\Shareaza\\Shareaza.exe:*:Enabled:Shareaza"
"C:\\WINDOWS\\system32\\tuxtytac.exe"="C:\\WINDOWS\\system32\\tux"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

Remaining Files:
---------------


Files with Hidden Attributes:

C:\Documents and Settings\oli\Bureau\Nouveau dossier\Mes Sites Web\777\rosula2b.r.skyblog.com\pics\Thumbs.db
C:\Documents and Settings\oli\Bureau\Nouveau dossier\Mes Sites Web\a\lacoste201.l.skyblog.com\pics\Thumbs.db
C:\Documents and Settings\oli\Bureau\Nouveau dossier\skyblog\lamarie3212.skyblog.com\pics\Thumbs.db
C:\Documents and Settings\oli\Bureau\Nouveau dossier\skyblog\www.skyblog.com\pics\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 54\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 56\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 57\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 58\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 59\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 6\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 61\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 67\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 68\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 7\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 70\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 71\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 72\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 73\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 75\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 76\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 77\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 78\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 79\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 8\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 80\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 81\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 82\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 83\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 86\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 87\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 88\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 89\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 9\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 90\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 91\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 92\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 93\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 94\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 95\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 96\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 97\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\sites\Site 99\Thumbs.db
C:\Documents and Settings\oli\Local Settings\Application Data\Microsoft\Messenger\beebop1032@hotmail.com\Sharing Folders\babyhilfinger@hotmail.com\san\www\Thumbs.db
C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp
C:\WINDOWS\system32\sstwa.tmp
C:\WINDOWS\system32\config\SAM.tmp.LOG
C:\WINDOWS\system32\config\SECURITY.tmp.LOG

Finished!
_____________________________________________________________________________________________________________

2) Voiçi le rapport_clean ,

Script execute en mode sans echec
Rapport clean par Malekal_morte - http://www.malekal.com
Script execute en mode sans echec lun. 17/09/2007 a 12:47:13,73

Microsoft Windows XP [version 5.1.2600]

*** Suppression des fichiers dans C:

*** Suppression des fichiers dans C:\WINDOWS\

*** Suppression des fichiers dans C:\WINDOWS\system32

*** Suppression des fichiers dans C:\Program Files
tentative de suppression de "C:\Program Files\DivX\Google\Firefox\ffinstaller.exe"

*** Suppression des clefs du registre effectuee..
*** Fin du rapport !
_____________________________________________________________________________________________

3) Voiçi le log de HijackThis ,

Script execute en mode sans echec
Rapport clean par Malekal_morte - http://www.malekal.com
Script execute en mode sans echec lun. 17/09/2007 a 12:47:13,73

Microsoft Windows XP [version 5.1.2600]

*** Suppression des fichiers dans C:

*** Suppression des fichiers dans C:\WINDOWS\

*** Suppression des fichiers dans C:\WINDOWS\system32

*** Suppression des fichiers dans C:\Program Files
tentative de suppression de "C:\Program Files\DivX\Google\Firefox\ffinstaller.exe"

*** Suppression des clefs du registre effectuee..
*** Fin du rapport !



Tout grand merçi à toi ! (en attente des prochainetruction )
0
Réponse 36 / 53
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité 1 537
 
Re,

tu as téléchargé Dvix ? Où ?

télécharge combofix (par sUBs)ici :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe


et enregistre le sur le bureau.

2 double-clique sur combofix.exe et suis les instructions

3 à la fin, il va produire un rapport C:\ComboFix.txt

4 copie/colle ce rapport dans ta prochaine réponse.

Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

@+
0
Réponse 37 / 53
Greg185
 
re ,

il ne veux pas s'ouvrir ces un fichier " nircmd.exe " qui s'ouvre et quand je veux l'ouvrir il me donne deux options

1) copy to windows directory

2) OK , quand je clic sur ok rien ne vient

il dit aussi , " for more information about using this utility , read the help files - nircmd.chm

pour le divx , j'ai visiter une vingtaines de site pour regarder Prison break saison deux et sur un de ces sites il ma proposer de telecharger ce divx , ces depuis que j'ai visiter ces sites que le pc déraille ,ensuite j'ai télécharger shearazad , et j'ai telecharger plusieur truc zip sans trop savoir ce que c'était ... je pense que tout ces virus viennent de ces deux choses dites .

(ralala quesque mon rame impossible de faire deux choses à la fois :s )
0
Réponse 38 / 53
Greg185
 
je viens de voir que je n'ai pas glisser le log HijackThis alala je suis bete lol :s j'en ai refais un ,

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:23:10, on 17/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\internet explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\oli2\Local Settings\Temp\Rar$EX01.110\I-D Empire\I-D Empire Unleashed.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.fr.msn.be/0SEFRBE/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [MP10_EnsureFileVer] C:\WINDOWS\inf\unregmp2.exe /EnsureFileVersions
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] ; C:\WINDOWS\System32\WLTRAY.exe
O4 - HKLM\..\Run: [igfxhkcmd] ; C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] ; C:\WINDOWS\System32\igfxpers.exe
O4 - HKLM\..\Run: [igfxtray] ; C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [RemoteControl] ; "C:\Program Files\ASUSTeK\ASUSDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [SystemOptimizer] rundll32.exe "C:\WINDOWS\system32\hquqcosn.dll",forkonce
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] ; "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] ; "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Ashampoo PopUpBlocker] ; C:\PROGRA~1\Ashampoo\ASHAMP~1\PopUpKiller.exe
O4 - HKCU\..\Run: [Google Desktop Search] ; "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-be\msntabres.dll.mui/229?38cd651561ed4b479eb49c0d111fd699
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-be\msntabres.dll.mui/230?38cd651561ed4b479eb49c0d111fd699
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: CarbonPoker - {6FDD5236-C9F0-49ef-935D-385F5E21991A} - C:\Program Files\CarbonPoker\Poker.exe (HKCU)
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.euro.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Unknown owner - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe (file missing)
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Unknown owner - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE
0
Réponse 39 / 53
Greg185
 
Bonsoir , voiçi le rapport de combofix , j'espere avoir bien ait , comme il ne voulais pas s'ouvrir , j'ai ouvert le dossier et double cliquer sur comboix.bat , car ça ne voulais pas s'ouvrir :s , j'espere avoir un suivi :) merçi beaucoup de la patience que tu me témoine en tout cas , meme si dans le domaine je suis asser blond ! :)

Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Services\vkquwexg

*******************

Script file located at: \??\C:\ComboFix\ComboDel.txt
Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:



File C:\WINDOWS\system32\awtss.dll not found!
Deletion of file C:\WINDOWS\system32\awtss.dll failed!

Could not process line:
C:\WINDOWS\system32\awtss.dll
Status: 0xc0000034


Completed script processing.

*******************

Finished! Terminate.
0
Réponse 40 / 53
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité 1 537
 
Bonjour,

remets un rapport suspectfiles (avec les même spécifications que celles du post 28);

@+
0