Demande d'interpretation de rapports !
ninon
-
green day Messages postés 26722 Statut Modérateur, Contributeur sécurité -
green day Messages postés 26722 Statut Modérateur, Contributeur sécurité -
Bonjour,
voila ; je suis une novice en matiere d'ordinateur...et bien sur en virus , malwares , spywares et autres cochoneries dans le genre
j'ai voulu nettoyer mon ordinateur d'apres ce que j'ai trouvé sur ce site, et ils préconisent d'envoyer les differents rapports sur ce forum pour avoir une interpretation de specialiste et des conseils!
je vous remercie d'avance de prendre du temps pour me répondre
il est a notter que j'ai deja fais tout ça il y a une semaine a peine , mais je n'ai posté aucun rapport(ce qui explique peut etre l'absence de mouchard)
voici les rapports ci dessous :
Rapport Spybot - Search & Destroy :
Aucun mouchard détecté
Rapport BitDefender Online Scanner :
BitDefender Online Scanner - Real Time Virus Report
Generated at: Sat, Oct 13, 2007 - 16:57:17
Scan Info
Scanned Files 324128
Infected Files 4
Virus Detected
Worm.IM.Agent.G 2
Trojan.Autorun.EU 1
Trojan.Mailskinner.C 1
This summary of the scan process will be used by the BitDefender Antivirus Lab to create agregate statistics about virus activity around the world.
Rapport Hijackthis V2.02 :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:26:24, on 13/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\National Instruments\Shared\License Manager\Bin\nilm.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Babylon\Babylon-Pro\Babylon.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\eoRezo\EoAdv\EoRezobho.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll
O2 - BHO: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Babylon Client] C:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart
O4 - HKLM\..\Run: [IMAQBoot] C:\Program Files\National Instruments\NI-IMAQ\bin\ImaqBoot.exe
O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB003" /M "Stylus C66"
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Antivirus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2A5F3251-843B-49EA-BE0A-A794D56C54CC}: NameServer = 213.140.2.43,212.31.224.2
O17 - HKLM\System\CCS\Services\Tcpip\..\{3600CF06-F06F-4B24-91FE-D0D683B3D0D6}: NameServer = 41.221.20.244 213.140.2.21
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NILM License manager - GLOBEtrotter Software Inc. - C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe
O23 - Service: OpcEnum - Unknown owner - C:\WINDOWS\system32\OpcEnum.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
voila ; je suis une novice en matiere d'ordinateur...et bien sur en virus , malwares , spywares et autres cochoneries dans le genre
j'ai voulu nettoyer mon ordinateur d'apres ce que j'ai trouvé sur ce site, et ils préconisent d'envoyer les differents rapports sur ce forum pour avoir une interpretation de specialiste et des conseils!
je vous remercie d'avance de prendre du temps pour me répondre
il est a notter que j'ai deja fais tout ça il y a une semaine a peine , mais je n'ai posté aucun rapport(ce qui explique peut etre l'absence de mouchard)
voici les rapports ci dessous :
Rapport Spybot - Search & Destroy :
Aucun mouchard détecté
Rapport BitDefender Online Scanner :
BitDefender Online Scanner - Real Time Virus Report
Generated at: Sat, Oct 13, 2007 - 16:57:17
Scan Info
Scanned Files 324128
Infected Files 4
Virus Detected
Worm.IM.Agent.G 2
Trojan.Autorun.EU 1
Trojan.Mailskinner.C 1
This summary of the scan process will be used by the BitDefender Antivirus Lab to create agregate statistics about virus activity around the world.
Rapport Hijackthis V2.02 :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:26:24, on 13/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\National Instruments\Shared\License Manager\Bin\nilm.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Babylon\Babylon-Pro\Babylon.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\eoRezo\EoAdv\EoRezobho.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll
O2 - BHO: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Babylon Client] C:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart
O4 - HKLM\..\Run: [IMAQBoot] C:\Program Files\National Instruments\NI-IMAQ\bin\ImaqBoot.exe
O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB003" /M "Stylus C66"
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Antivirus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2A5F3251-843B-49EA-BE0A-A794D56C54CC}: NameServer = 213.140.2.43,212.31.224.2
O17 - HKLM\System\CCS\Services\Tcpip\..\{3600CF06-F06F-4B24-91FE-D0D683B3D0D6}: NameServer = 41.221.20.244 213.140.2.21
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NILM License manager - GLOBEtrotter Software Inc. - C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe
O23 - Service: OpcEnum - Unknown owner - C:\WINDOWS\system32\OpcEnum.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
A voir également:
- Demande d'interpretation de rapports !
- Plan de rapport de stage - Guide
- Rapport de crash windows - Guide
- Impossible d'afficher le rapport de tableau croisé dynamique sur un rapport existant ✓ - Forum Excel
- Acheter un rapport de stage - Forum Programmation
- Exemple de thème de rapport de stage en ressources humaines - Forum Réseau
44 réponses
re
non, rien ! c'est plutôt une bonne nouvelle !
pour ce qui est du hacker, c'est possible oui, mais ça implique qu'il doit être très très fort en info sous toutes ses coutures ! car ce n'est pas la même chose de pirater une boite mail et d'envoyer des bébéttes pour infecter let ou tel PC !
Télécharge SDFix sur ton bureau
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau.
Redémarre ton ordinateur en mode sans échec
Ouvre le dossier SDFix qui vient d'être créé sur le Bureau et double clique sur RunThis.bat pour lancer le script.
Appuie sur Y pour commencer le processus de nettoyage.
Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
Appuie sur une touche pour redémarrer le PC.
Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !
++
non, rien ! c'est plutôt une bonne nouvelle !
pour ce qui est du hacker, c'est possible oui, mais ça implique qu'il doit être très très fort en info sous toutes ses coutures ! car ce n'est pas la même chose de pirater une boite mail et d'envoyer des bébéttes pour infecter let ou tel PC !
Télécharge SDFix sur ton bureau
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau.
Redémarre ton ordinateur en mode sans échec
Ouvre le dossier SDFix qui vient d'être créé sur le Bureau et double clique sur RunThis.bat pour lancer le script.
Appuie sur Y pour commencer le processus de nettoyage.
Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
Appuie sur une touche pour redémarrer le PC.
Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !
++
me revoila!
j'ai due m'absenter pour quelques heures, désolée de n'avoir pas prévenu.
je viens de faire une analyse avec SDfix dont voici le rapport , qui sera suivi d'un deuxieme rapport d' Hijackthis
Rapport SDfix :
SDFix: Version 1.109
Run by P4 on 14/10/2007 at 22:10
Microsoft Windows XP [version 5.1.2600]
Running From: C:\DOCUME~1\P4\Bureau\SDFix
Safe Mode:
Checking Services:
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting...
Normal Mode:
Checking Files:
No Trojan Files Found
Removing Temp Files...
ADS Check:
C:\WINDOWS
No streams found.
C:\WINDOWS\system32
No streams found.
C:\WINDOWS\system32\svchost.exe
No streams found.
C:\WINDOWS\system32\ntoskrnl.exe
No streams found.
Final Check:
Remaining Services:
------------------
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus 6.0\\avp.exe"="C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus 6.0\\avp.exe:*:Enabled:Kaspersky Anti-Virus"
"C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
"C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe:*:Enabled:Yahoo! FT Server"
"C:\\DOCUME~1\\P4\\LOCALS~1\\Temp\\wincrtc.exe"="C:\\DOCUME~1\\P4\\LOCALS~1\\Temp\\wincrtc.exe:*:Enabled:ipsec"
"C:\\Program Files\\WinZip\\WZQKPICK.EXE"="C:\\Program Files\\WinZip\\WZQKPICK.EXE:*:Enabled:ipsec"
"C:\\DOCUME~1\\P4\\LOCALS~1\\Temp\\winyeftnb.exe"="C:\\DOCUME~1\\P4\\LOCALS~1\\Temp\\winyeftnb.exe:*:Enabled:ipsec"
"C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 6.0\\avp.exe"="C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 6.0\\avp.exe:*:Enabled:Kaspersky Anti-Virus"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.066\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.066\\emule.exe:*:Enabled:eMule"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX01.430\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX01.430\\emule.exe:*:Enabled:eMule"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.281\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.281\\emule.exe:*:Disabled:eMule"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX09.746\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX09.746\\emule.exe:*:Enabled:eMule"
"C:\\StubInstaller.exe"="C:\\StubInstaller.exe:*:Enabled:LimeWire swarmed installer"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Program Files\\National Instruments\\LabVIEW\\labview.exe"="C:\\Program Files\\National Instruments\\LabVIEW\\labview.exe:*:Enabled:labview"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.864\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.864\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\BitTorrent\\bittorrent.exe"="C:\\Program Files\\BitTorrent\\bittorrent.exe:*:Enabled:BitTorrent"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX01.478\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX01.478\\emule.exe:*:Enabled:eMule"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX33.628\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX33.628\\emule.exe:*:Enabled:eMule"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.236\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.236\\emule.exe:*:Enabled:eMule"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX04.681\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX04.681\\emule.exe:*:Enabled:eMule"
"C:\\Documents and Settings\\P4\\Mes documents\\eMule\\emule.exe"="C:\\Documents and Settings\\P4\\Mes documents\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.234\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.234\\emule.exe:*:Enabled:eMule"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.614\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.614\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\National Instruments\\NI - DAQ\\RDA\\nidqsrvr.exe"="C:\\Program Files\\National Instruments\\NI - DAQ\\RDA\\nidqsrvr.exe:*:Enabled:NI-DAQ Remote Device Access Server"
"C:\\Program Files\\Internet Download Manager\\IDMan.exe"="C:\\Program Files\\Internet Download Manager\\IDMan.exe:*:Enabled:Internet Download Manager (IDM)"
"C:\\Program Files\\National Instruments\\LabVIEW 8.2\\LabVIEW.exe"="C:\\Program Files\\National Instruments\\LabVIEW 8.2\\LabVIEW.exe:*:Enabled:LabVIEW 8.2.1 Development System"
"C:\\Program Files\\National Instruments\\Shared\\Example Finder\\1.0\\BIN\\NIExampleFinder.exe"="C:\\Program Files\\National Instruments\\Shared\\Example Finder\\1.0\\BIN\\NIExampleFinder.exe:*:Enabled:NIExampleFinder"
"C:\\Program Files\\Net2Phone\\Net2fone.exe"="C:\\Program Files\\Net2Phone\\Net2fone.exe:*:Enabled:Net2Phone Client - 32 Bit/9600 CODEC - "
"C:\\Program Files\\Last.fm\\LastFM.exe"="C:\\Program Files\\Last.fm\\LastFM.exe:*:Enabled:LastFM"
"C:\\Program Files\\Microsoft Office\\Office10\\POWERPNT.EXE"="C:\\Program Files\\Microsoft Office\\Office10\\POWERPNT.EXE:*:Enabled:Microsoft PowerPoint"
"C:\\Program Files\\National Instruments\\LabVIEW 6.1\\LabVIEW.exe"="C:\\Program Files\\National Instruments\\LabVIEW 6.1\\LabVIEW.exe:*:Enabled:LabVIEW Development System"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
Remaining Files:
---------------
Files with Hidden Attributes:
Fri 27 May 2005 10,752 A..H. --- "C:\WINDOWS\hh.exe"
Wed 4 Aug 2004 70,656 A..H. --- "C:\WINDOWS\NOTEPAD.EXE"
Wed 4 Aug 2004 153,088 A..H. --- "C:\WINDOWS\regedit.exe"
Wed 4 Aug 2004 1,014,836 A..HR --- "C:\WINDOWS\SET3.tmp"
Wed 4 Aug 2004 1,086,058 A..HR --- "C:\WINDOWS\SET4.tmp"
Wed 4 Aug 2004 14,043 A..HR --- "C:\WINDOWS\SET8.tmp"
Tue 2 Oct 2001 15,872 A..H. --- "C:\WINDOWS\TASKMAN.EXE"
Tue 2 Oct 2001 94,864 A..H. --- "C:\WINDOWS\twain.dll"
Wed 4 Aug 2004 50,688 A..H. --- "C:\WINDOWS\twain_32.dll"
Tue 2 Oct 2001 49,680 A..H. --- "C:\WINDOWS\twunk_16.exe"
Tue 2 Oct 2001 25,600 A..H. --- "C:\WINDOWS\twunk_32.exe"
Mon 23 Oct 1995 246,272 A..H. --- "C:\WINDOWS\UNINST16.EXE"
Tue 2 Oct 2001 18,944 A..H. --- "C:\WINDOWS\vmmreg32.dll"
Tue 2 Oct 2001 256,768 A..H. --- "C:\WINDOWS\winhelp.exe"
Wed 4 Aug 2004 288,256 A..H. --- "C:\WINDOWS\winhlp32.exe"
Tue 2 Oct 2001 707 A..H. --- "C:\WINDOWS\_default.pif"
Mon 14 Jul 2003 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Mon 14 Jul 2003 401 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv13.bak"
Wed 24 Jan 2007 4,348 ..SH. --- "C:\Documents and Settings\All Users.WINDOWS\DRM\DRMv1.bak"
Thu 22 Mar 2007 401 ..SH. --- "C:\Documents and Settings\All Users.WINDOWS\DRM\DRMv13.bak"
Sat 16 Jun 2007 824,320 ...H. --- "C:\Documents and Settings\P4\Bureau\~WRL1035.tmp"
Wed 27 Jun 2007 972,800 ...H. --- "C:\Documents and Settings\P4\Bureau\~WRL1493.tmp"
Tue 26 Jun 2007 976,896 ...H. --- "C:\Documents and Settings\P4\Bureau\~WRL1753.tmp"
Sun 24 Jun 2007 1,100,288 ...H. --- "C:\Documents and Settings\P4\Bureau\~WRL1815.tmp"
Sun 24 Jun 2007 1,118,208 ...H. --- "C:\Documents and Settings\P4\Bureau\~WRL1882.tmp"
Tue 15 May 2007 616,448 ...H. --- "C:\Documents and Settings\P4\Bureau\~WRL1925.tmp"
Tue 26 Jun 2007 973,312 ...H. --- "C:\Documents and Settings\P4\Bureau\~WRL2354.tmp"
Tue 26 Jun 2007 1,112,064 ...H. --- "C:\Documents and Settings\P4\Bureau\~WRL2398.tmp"
Tue 15 May 2007 612,864 ...H. --- "C:\Documents and Settings\P4\Bureau\~WRL2789.tmp"
Thu 21 Dec 2006 28,160 ...H. --- "C:\Documents and Settings\P4\Mes documents\~WRL0005.tmp"
Tue 6 Nov 2001 348,160 A..HR --- "C:\Program Files\National Instruments\MAX\uninstall.exe"
Thu 14 Oct 2004 8,192 A..H. --- "C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll"
Thu 14 Oct 2004 8,192 A..H. --- "C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll"
Thu 14 Oct 2004 8,192 A..H. --- "C:\WINDOWS\$hf_mig$\KB886185\spmsg.dll"
Thu 14 Oct 2004 8,192 A..H. --- "C:\WINDOWS\$hf_mig$\KB887472\spmsg.dll"
Tue 30 Nov 2004 8,192 A..H. --- "C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB890859\spuninst.exe"
Tue 30 Nov 2004 8,192 A..H. --- "C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB894391\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB896423\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB896423\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB896424\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB896424\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB896428\spuninst.exe"
Fri 25 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB898461\spmsg.dll"
Fri 25 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB898461\spuninst.exe"
Fri 25 Feb 2005 22,752 A..H. --- "C:\WINDOWS\$hf_mig$\KB898461\spupdsvc.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB899587\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB899587\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB899591\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB899591\spuninst.exe"
Thu 13 Oct 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB900485\spmsg.dll"
Thu 13 Oct 2005 216,800 A..H. --- "C:\WINDOWS\$hf_mig$\KB900485\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB900725\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB900725\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB901017\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB901017\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB901214\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\spuninst.exe"
Thu 13 Oct 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB904706\spmsg.dll"
Thu 13 Oct 2005 216,800 A..H. --- "C:\WINDOWS\$hf_mig$\KB904706\spuninst.exe"
Fri 25 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB905414\spmsg.dll"
Fri 25 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB905414\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB905749\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB905749\spuninst.exe"
Thu 13 Oct 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB908519\spmsg.dll"
Thu 13 Oct 2005 216,800 A..H. --- "C:\WINDOWS\$hf_mig$\KB908519\spuninst.exe"
Thu 13 Oct 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB908531\spmsg.dll"
Thu 13 Oct 2005 216,800 A..H. --- "C:\WINDOWS\$hf_mig$\KB908531\spuninst.exe"
Thu 13 Oct 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB910437\spmsg.dll"
Thu 13 Oct 2005 216,800 A..H. --- "C:\WINDOWS\$hf_mig$\KB910437\spuninst.exe"
Thu 13 Oct 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB911280\spmsg.dll"
Thu 13 Oct 2005 216,800 A..H. --- "C:\WINDOWS\$hf_mig$\KB911280\spuninst.exe"
Thu 13 Oct 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB911562\spmsg.dll"
Thu 13 Oct 2005 216,800 A..H. --- "C:\WINDOWS\$hf_mig$\KB911562\spuninst.exe"
Wed 17 Nov 2004 354,304 A..H. --- "C:\WINDOWS\$hf_mig$\KB873339\SP2QFE\hypertrm.dll"
Thu 14 Oct 2004 21,504 A..H. --- "C:\WINDOWS\$hf_mig$\KB873339\update\spcustom.dll"
Thu 14 Oct 2004 21,504 A..H. --- "C:\WINDOWS\$hf_mig$\KB885836\update\spcustom.dll"
Thu 30 Sep 2004 134,912 A..H. --- "C:\WINDOWS\$hf_mig$\KB886185\SP2QFE\ipnat.sys"
Thu 14 Oct 2004 21,504 A..H. --- "C:\WINDOWS\$hf_mig$\KB886185\update\spcustom.dll"
Thu 14 Oct 2004 21,504 A..H. --- "C:\WINDOWS\$hf_mig$\KB887472\update\spcustom.dll"
Tue 7 Dec 2004 96,768 A..H. --- "C:\WINDOWS\$hf_mig$\KB888302\SP2QFE\srvsvc.dll"
Tue 30 Nov 2004 21,504 A..H. --- "C:\WINDOWS\$hf_mig$\KB888302\update\spcustom.dll"
Wed 2 Mar 2005 62,464 A..H. --- "C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\authz.dll"
Wed 2 Mar 2005 578,048 A..H. --- "C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll"
Wed 2 Mar 2005 1,836,416 A..H. --- "C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys"
Wed 2 Mar 2005 291,840 A..H. --- "C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB890859\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB890859\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB890859\update\updspapi.dll"
Tue 30 Nov 2004 21,504 A..H. --- "C:\WINDOWS\$hf_mig$\KB891781\update\spcustom.dll"
Fri 8 Jul 2005 249,344 A..H. --- "C:\WINDOWS\$hf_mig$\KB893756\SP2QFE\tapisrv.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB893756\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB893756\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB893756\update\updspapi.dll"
Thu 28 Apr 2005 1,286,144 A..H. --- "C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll"
Thu 28 Apr 2005 75,264 A..H. --- "C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecli32.dll"
Thu 28 Apr 2005 37,376 A..H. --- "C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecnv32.dll"
Thu 28 Apr 2005 396,288 A..H. --- "C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB894391\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB894391\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB894391\update\updspapi.dll"
Fri 27 May 2005 41,472 A..H. --- "C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhsetup.dll"
Fri 27 May 2005 155,136 A..H. --- "C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itircl.dll"
Fri 27 May 2005 137,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itss.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB896358\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB896358\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB896358\update\updspapi.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB896423\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB896423\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB896423\update\updspapi.dll"
Thu 6 Oct 2005 280,064 A..H. --- "C:\WINDOWS\$hf_mig$\KB896424\SP2QFE\gdi32.dll"
Thu 6 Oct 2005 1,839,616 A..H. --- "C:\WINDOWS\$hf_mig$\KB896424\SP2QFE\win32k.sys"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB896424\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB896424\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB896424\update\updspapi.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB896428\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB896428\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB896428\update\updspapi.dll"
Fri 25 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB898461\update\spcustom.dll"
Fri 25 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB898461\update\update.exe"
Fri 25 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB898461\update\updspapi.dll"
Wed 15 Jun 2005 297,984 A..H. --- "C:\WINDOWS\$hf_mig$\KB899587\SP2QFE\kerberos.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB899587\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB899587\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB899587\update\updspapi.dll"
Fri 10 Jun 2005 139,528 A..H. --- "C:\WINDOWS\$hf_mig$\KB899591\SP2QFE\rdpwd.sys"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB899591\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB899591\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB899591\update\updspapi.dll"
Wed 15 Feb 2006 142,464 A..H. --- "C:\WINDOWS\$hf_mig$\KB900485\SP2QFE\aec.sys"
Thu 13 Oct 2005 22,752 A..H. --- "C:\WINDOWS\$hf_mig$\KB900485\update\spcustom.dll"
Thu 13 Oct 2005 727,776 A..H. --- "C:\WINDOWS\$hf_mig$\KB900485\update\update.exe"
Thu 13 Oct 2005 394,976 A..H. --- "C:\WINDOWS\$hf_mig$\KB900485\update\updspapi.dll"
Thu 1 Sep 2005 19,968 A..H. --- "C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\linkinfo.dll"
Fri 23 Sep 2005 8,508,928 A..H. --- "C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shell32.dll"
Sat 3 Sep 2005 474,624 A..H. --- "C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shlwapi.dll"
Tue 27 Sep 2005 23,552 A..H. --- "C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\spru040c.dll"
Thu 1 Sep 2005 292,352 A..H. --- "C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\winsrv.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB900725\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB900725\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB900725\update\updspapi.dll"
Sat 10 Sep 2005 2,068,480 A..H. --- "C:\WINDOWS\$hf_mig$\KB901017\SP2QFE\cdosys.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB901017\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB901017\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB901017\update\updspapi.dll"
Wed 29 Jun 2005 254,976 A..H. --- "C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\icm32.dll"
Wed 29 Jun 2005 73,728 A..H. --- "C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\mscms.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB901214\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB901214\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB901214\update\updspapi.dll"
Tue 26 Jul 2005 225,792 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrv.dll"
Tue 26 Jul 2005 625,152 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrvut.dll"
Tue 26 Jul 2005 110,080 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatex.dll"
Tue 26 Jul 2005 498,688 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatq.dll"
Tue 26 Jul 2005 60,416 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\colbact.dll"
Tue 26 Jul 2005 195,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comadmin.dll"
Tue 26 Jul 2005 97,792 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comrepl.dll"
Tue 26 Jul 2005 1,267,200 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comsvcs.dll"
Tue 26 Jul 2005 540,160 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comuid.dll"
Tue 26 Jul 2005 243,200 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\es.dll"
Tue 26 Jul 2005 425,472 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcprx.dll"
Tue 26 Jul 2005 945,152 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtctm.dll"
Tue 26 Jul 2005 161,280 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcuiu.dll"
Tue 26 Jul 2005 66,560 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxclu.dll"
Tue 26 Jul 2005 91,136 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxoci.dll"
Tue 26 Jul 2005 1,285,632 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\ole32.dll"
Tue 26 Jul 2005 75,264 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecli32.dll"
Tue 26 Jul 2005 37,376 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecnv32.dll"
Tue 26 Jul 2005 398,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll"
Tue 26 Jul 2005 101,376 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\txflog.dll"
Tue 26 Jul 2005 11,776 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\xolehlp.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\update\updspapi.dll"
Tue 30 Aug 2005 1,293,824 A..H. --- "C:\WINDOWS\$hf_mig$\KB904706\SP2QFE\quartz.dll"
Thu 13 Oct 2005 22,752 A..H. --- "C:\WINDOWS\$hf_mig$\KB904706\update\spcustom.dll"
Thu 13 Oct 2005 727,776 A..H. --- "C:\WINDOWS\$hf_mig$\KB904706\update\update.exe"
Thu 13 Oct 2005 394,976 A..H. --- "C:\WINDOWS\$hf_mig$\KB904706\update\updspapi.dll"
Mon 22 Aug 2005 197,632 A..H. --- "C:\WINDOWS\$hf_mig$\KB905414\SP2QFE\netman.dll"
Fri 25 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB905414\update\spcustom.dll"
Fri 25 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB905414\update\update.exe"
Fri 25 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB905414\update\updspapi.dll"
Tue 23 Aug 2005 124,928 A..H. --- "C:\WINDOWS\$hf_mig$\KB905749\SP2QFE\umpnpmgr.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB905749\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB905749\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB905749\update\updspapi.dll"
Mon 17 Oct 2005 80,896 A..H. --- "C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\fontsub.dll"
Mon 17 Oct 2005 117,760 A..H. --- "C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\t2embed.dll"
Thu 13 Oct 2005 22,752 A..H. --- "C:\WINDOWS\$hf_mig$\KB908519\update\spcustom.dll"
Thu 13 Oct 2005 727,776 A..H. --- "C:\WINDOWS\$hf_mig$\KB908519\update\update.exe"
Thu 13 Oct 2005 394,976 A..H. --- "C:\WINDOWS\$hf_mig$\KB908519\update\updspapi.dll"
Fri 17 Mar 2006 8,510,976 A..H. --- "C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\shell32.dll"
Wed 22 Mar 2006 25,088 A..H. --- "C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\spru040c.dll"
Thu 13 Oct 2005 22,752 A..H. --- "C:\WINDOWS\$hf_mig$\KB908531\update\spcustom.dll"
Thu 13 Oct 2005 727,776 A..H. --- "C:\WINDOWS\$hf_mig$\KB908531\update\update.exe"
Thu 13 Oct 2005 394,976 A..H. --- "C:\WINDOWS\$hf_mig$\KB908531\update\updspapi.dll"
Fri 21 Oct 2005 1,097,728 A..H. --- "C:\WINDOWS\$hf_mig$\KB910437\SP2QFE\esent.dll"
Thu 13 Oct 2005 22,752 A..H. --- "C:\WINDOWS\$hf_mig$\KB910437\update\spcustom.dll"
Thu 13 Oct 2005 727,776 A..H. --- "C:\WINDOWS\$hf_mig$\KB910437\update\update.exe"
Thu 13 Oct 2005 394,976 A..H. --- "C:\WINDOWS\$hf_mig$\KB910437\update\updspapi.dll"
Thu 22 Jun 2006 180,736 A..H. --- "C:\WINDOWS\$hf_mig$\KB911280\SP2QFE\rasmans.dll"
Thu 13 Oct 2005 22,752 A..H. --- "C:\WINDOWS\$hf_mig$\KB911280\update\spcustom.dll"
Thu 13 Oct 2005 727,776 A..H. --- "C:\WINDOWS\$hf_mig$\KB911280\update\update.exe"
Thu 13 Oct 2005 394,976 A..H. --- "C:\WINDOWS\$hf_mig$\KB911280\update\updspapi.dll"
Thu 23 Mar 2006 143,360 A..H. --- "C:\WINDOWS\$hf_mig$\KB911562\SP2QFE\msadco.dll"
Thu 11 Oct 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\5d8093d524ba38b2f4036bb4d3aa25e4\BIT4.tmp"
Tue 2 Oct 2007 4,830,072 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\be055ba2b2ed973399d61482c6723317\BIT9E.tmp"
Tue 2 Oct 2007 12,396,400 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\d87fb8947e75ca18dc081689c7a9b0bf\BIT9D.tmp"
Sun 24 Jun 2007 1,101,312 ...H. --- "C:\Documents and Settings\P4\Application Data\Microsoft\Word\~WRL0201.tmp"
Sun 24 Jun 2007 1,115,648 ...H. --- "C:\Documents and Settings\P4\Application Data\Microsoft\Word\~WRL0700.tmp"
Fri 26 Jan 2007 569,344 ...H. --- "C:\Documents and Settings\P4\Application Data\Microsoft\Word\~WRL0828.tmp"
Wed 27 Jun 2007 24,064 ...H. --- "C:\Documents and Settings\P4\Application Data\Microsoft\Word\~WRL1422.tmp"
Sun 24 Jun 2007 54,784 ...H. --- "C:\Documents and Settings\P4\Application Data\Microsoft\Word\~WRL1648.tmp"
Fri 26 Jan 2007 563,200 ...H. --- "C:\Documents and Settings\P4\Application Data\Microsoft\Word\~WRL2057.tmp"
Thu 26 Apr 2007 347,136 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\Copie de enfin khra!!!!!!!!!!!!!!\~WRL0295.tmp"
Fri 27 Apr 2007 389,632 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\Copie de enfin khra!!!!!!!!!!!!!!\~WRL2895.tmp"
Thu 26 Apr 2007 347,136 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\enfin khra!!!!!!!!!!!!!!\~WRL0295.tmp"
Fri 27 Apr 2007 389,632 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\enfin khra!!!!!!!!!!!!!!\~WRL2895.tmp"
Tue 24 Apr 2007 651,264 ...H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\memoire corig‚\~WRL3210.tmp"
Fri 20 Apr 2007 495,104 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\memoire corig‚\~WRL4008.tmp"
Wed 24 Jan 2007 4,348 ...H. --- "C:\Documents and Settings\P4\Mes documents\Ma musique\Sauvegarde de la licence\drmv1key.bak"
Thu 22 Mar 2007 20 A..H. --- "C:\Documents and Settings\P4\Mes documents\Ma musique\Sauvegarde de la licence\drmv1lic.bak"
Wed 17 Jan 2007 312 ...H. --- "C:\Documents and Settings\P4\Mes documents\Ma musique\Sauvegarde de la licence\drmv2key.bak"
Thu 22 Mar 2007 1,536 A..H. --- "C:\Documents and Settings\P4\Mes documents\Ma musique\Sauvegarde de la licence\drmv2lic.bak"
Mon 14 Jul 2003 4,348 A..H. --- "C:\Documents and Settings\user\Mes documents\Ma musique\Sauvegarde de la licence\drmv1key.bak"
Mon 14 Jul 2003 401 A..H. --- "C:\Documents and Settings\user\Mes documents\Ma musique\Sauvegarde de la licence\drmv1lic.bak"
Mon 14 Jul 2003 312 A.SH. --- "C:\Documents and Settings\user\Mes documents\Ma musique\Sauvegarde de la licence\drmv2key.bak"
Tue 23 Jan 2007 103,936 A..H. --- "C:\Documents and Settings\P4\Bureau\Nouveau dossier (4)\les infos utiles de amina\monographie belghoraf\~WRL1713.tmp"
Wed 16 May 2007 620,032 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\0000\memoire finis\~WRL1786.tmp"
Wed 16 May 2007 619,520 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\0000\memoire finis\~WRL1841.tmp"
Wed 16 May 2007 619,520 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\0000\memoire finis\~WRL2967.tmp"
Wed 16 May 2007 620,032 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\0000\memoire finis\~WRL3357.tmp"
Wed 16 May 2007 620,032 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\0000\memoire finis\~WRL3491.tmp"
Wed 16 May 2007 619,520 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\0000\memoire finis\~WRL3986.tmp"
Tue 24 Apr 2007 360,448 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\guide de la norme iso 9001\nouveau!!!!!!!!!!!!!!!!!!\~WRL2880.tmp"
Thu 26 Apr 2007 347,136 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\memoire revu par farid\enfin khra!!!!!!!!!!!!!!\~WRL0295.tmp"
Fri 27 Apr 2007 389,632 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\memoire revu par farid\enfin khra!!!!!!!!!!!!!!\~WRL2895.tmp"
Mon 8 Jan 2007 348,160 A.SH. --- "C:\Documents and Settings\P4\Bureau\Nouveau dossier (4)\les infos utiles de amina\umts\SID BAR€A (E)\msvcr71.dll"
Finished!
Rapport HijackThis :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:42:38, on 14/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe
C:\Program Files\National Instruments\Shared\License Manager\Bin\nilm.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Babylon\Babylon-Pro\Babylon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\eoRezo\EoAdv\EoRezobho.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll
O2 - BHO: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Babylon Client] C:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart
O4 - HKLM\..\Run: [IMAQBoot] C:\Program Files\National Instruments\NI-IMAQ\bin\ImaqBoot.exe
O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB003" /M "Stylus C66"
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Fichiers communs\Adobe\Updater5\AdobeUpdater.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Antivirus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2A5F3251-843B-49EA-BE0A-A794D56C54CC}: NameServer = 213.140.2.43,212.31.224.2
O17 - HKLM\System\CCS\Services\Tcpip\..\{3600CF06-F06F-4B24-91FE-D0D683B3D0D6}: NameServer = 41.221.20.244 213.140.2.21
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NILM License manager - GLOBEtrotter Software Inc. - C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe
O23 - Service: OpcEnum - Unknown owner - C:\WINDOWS\system32\OpcEnum.exe
j'ai due m'absenter pour quelques heures, désolée de n'avoir pas prévenu.
je viens de faire une analyse avec SDfix dont voici le rapport , qui sera suivi d'un deuxieme rapport d' Hijackthis
Rapport SDfix :
SDFix: Version 1.109
Run by P4 on 14/10/2007 at 22:10
Microsoft Windows XP [version 5.1.2600]
Running From: C:\DOCUME~1\P4\Bureau\SDFix
Safe Mode:
Checking Services:
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting...
Normal Mode:
Checking Files:
No Trojan Files Found
Removing Temp Files...
ADS Check:
C:\WINDOWS
No streams found.
C:\WINDOWS\system32
No streams found.
C:\WINDOWS\system32\svchost.exe
No streams found.
C:\WINDOWS\system32\ntoskrnl.exe
No streams found.
Final Check:
Remaining Services:
------------------
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus 6.0\\avp.exe"="C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus 6.0\\avp.exe:*:Enabled:Kaspersky Anti-Virus"
"C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
"C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe:*:Enabled:Yahoo! FT Server"
"C:\\DOCUME~1\\P4\\LOCALS~1\\Temp\\wincrtc.exe"="C:\\DOCUME~1\\P4\\LOCALS~1\\Temp\\wincrtc.exe:*:Enabled:ipsec"
"C:\\Program Files\\WinZip\\WZQKPICK.EXE"="C:\\Program Files\\WinZip\\WZQKPICK.EXE:*:Enabled:ipsec"
"C:\\DOCUME~1\\P4\\LOCALS~1\\Temp\\winyeftnb.exe"="C:\\DOCUME~1\\P4\\LOCALS~1\\Temp\\winyeftnb.exe:*:Enabled:ipsec"
"C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 6.0\\avp.exe"="C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 6.0\\avp.exe:*:Enabled:Kaspersky Anti-Virus"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.066\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.066\\emule.exe:*:Enabled:eMule"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX01.430\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX01.430\\emule.exe:*:Enabled:eMule"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.281\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.281\\emule.exe:*:Disabled:eMule"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX09.746\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX09.746\\emule.exe:*:Enabled:eMule"
"C:\\StubInstaller.exe"="C:\\StubInstaller.exe:*:Enabled:LimeWire swarmed installer"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Program Files\\National Instruments\\LabVIEW\\labview.exe"="C:\\Program Files\\National Instruments\\LabVIEW\\labview.exe:*:Enabled:labview"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.864\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.864\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\BitTorrent\\bittorrent.exe"="C:\\Program Files\\BitTorrent\\bittorrent.exe:*:Enabled:BitTorrent"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX01.478\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX01.478\\emule.exe:*:Enabled:eMule"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX33.628\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX33.628\\emule.exe:*:Enabled:eMule"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.236\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.236\\emule.exe:*:Enabled:eMule"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX04.681\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX04.681\\emule.exe:*:Enabled:eMule"
"C:\\Documents and Settings\\P4\\Mes documents\\eMule\\emule.exe"="C:\\Documents and Settings\\P4\\Mes documents\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.234\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.234\\emule.exe:*:Enabled:eMule"
"C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.614\\emule.exe"="C:\\Documents and Settings\\P4\\Local Settings\\Temp\\Rar$EX00.614\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\National Instruments\\NI - DAQ\\RDA\\nidqsrvr.exe"="C:\\Program Files\\National Instruments\\NI - DAQ\\RDA\\nidqsrvr.exe:*:Enabled:NI-DAQ Remote Device Access Server"
"C:\\Program Files\\Internet Download Manager\\IDMan.exe"="C:\\Program Files\\Internet Download Manager\\IDMan.exe:*:Enabled:Internet Download Manager (IDM)"
"C:\\Program Files\\National Instruments\\LabVIEW 8.2\\LabVIEW.exe"="C:\\Program Files\\National Instruments\\LabVIEW 8.2\\LabVIEW.exe:*:Enabled:LabVIEW 8.2.1 Development System"
"C:\\Program Files\\National Instruments\\Shared\\Example Finder\\1.0\\BIN\\NIExampleFinder.exe"="C:\\Program Files\\National Instruments\\Shared\\Example Finder\\1.0\\BIN\\NIExampleFinder.exe:*:Enabled:NIExampleFinder"
"C:\\Program Files\\Net2Phone\\Net2fone.exe"="C:\\Program Files\\Net2Phone\\Net2fone.exe:*:Enabled:Net2Phone Client - 32 Bit/9600 CODEC - "
"C:\\Program Files\\Last.fm\\LastFM.exe"="C:\\Program Files\\Last.fm\\LastFM.exe:*:Enabled:LastFM"
"C:\\Program Files\\Microsoft Office\\Office10\\POWERPNT.EXE"="C:\\Program Files\\Microsoft Office\\Office10\\POWERPNT.EXE:*:Enabled:Microsoft PowerPoint"
"C:\\Program Files\\National Instruments\\LabVIEW 6.1\\LabVIEW.exe"="C:\\Program Files\\National Instruments\\LabVIEW 6.1\\LabVIEW.exe:*:Enabled:LabVIEW Development System"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
Remaining Files:
---------------
Files with Hidden Attributes:
Fri 27 May 2005 10,752 A..H. --- "C:\WINDOWS\hh.exe"
Wed 4 Aug 2004 70,656 A..H. --- "C:\WINDOWS\NOTEPAD.EXE"
Wed 4 Aug 2004 153,088 A..H. --- "C:\WINDOWS\regedit.exe"
Wed 4 Aug 2004 1,014,836 A..HR --- "C:\WINDOWS\SET3.tmp"
Wed 4 Aug 2004 1,086,058 A..HR --- "C:\WINDOWS\SET4.tmp"
Wed 4 Aug 2004 14,043 A..HR --- "C:\WINDOWS\SET8.tmp"
Tue 2 Oct 2001 15,872 A..H. --- "C:\WINDOWS\TASKMAN.EXE"
Tue 2 Oct 2001 94,864 A..H. --- "C:\WINDOWS\twain.dll"
Wed 4 Aug 2004 50,688 A..H. --- "C:\WINDOWS\twain_32.dll"
Tue 2 Oct 2001 49,680 A..H. --- "C:\WINDOWS\twunk_16.exe"
Tue 2 Oct 2001 25,600 A..H. --- "C:\WINDOWS\twunk_32.exe"
Mon 23 Oct 1995 246,272 A..H. --- "C:\WINDOWS\UNINST16.EXE"
Tue 2 Oct 2001 18,944 A..H. --- "C:\WINDOWS\vmmreg32.dll"
Tue 2 Oct 2001 256,768 A..H. --- "C:\WINDOWS\winhelp.exe"
Wed 4 Aug 2004 288,256 A..H. --- "C:\WINDOWS\winhlp32.exe"
Tue 2 Oct 2001 707 A..H. --- "C:\WINDOWS\_default.pif"
Mon 14 Jul 2003 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Mon 14 Jul 2003 401 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv13.bak"
Wed 24 Jan 2007 4,348 ..SH. --- "C:\Documents and Settings\All Users.WINDOWS\DRM\DRMv1.bak"
Thu 22 Mar 2007 401 ..SH. --- "C:\Documents and Settings\All Users.WINDOWS\DRM\DRMv13.bak"
Sat 16 Jun 2007 824,320 ...H. --- "C:\Documents and Settings\P4\Bureau\~WRL1035.tmp"
Wed 27 Jun 2007 972,800 ...H. --- "C:\Documents and Settings\P4\Bureau\~WRL1493.tmp"
Tue 26 Jun 2007 976,896 ...H. --- "C:\Documents and Settings\P4\Bureau\~WRL1753.tmp"
Sun 24 Jun 2007 1,100,288 ...H. --- "C:\Documents and Settings\P4\Bureau\~WRL1815.tmp"
Sun 24 Jun 2007 1,118,208 ...H. --- "C:\Documents and Settings\P4\Bureau\~WRL1882.tmp"
Tue 15 May 2007 616,448 ...H. --- "C:\Documents and Settings\P4\Bureau\~WRL1925.tmp"
Tue 26 Jun 2007 973,312 ...H. --- "C:\Documents and Settings\P4\Bureau\~WRL2354.tmp"
Tue 26 Jun 2007 1,112,064 ...H. --- "C:\Documents and Settings\P4\Bureau\~WRL2398.tmp"
Tue 15 May 2007 612,864 ...H. --- "C:\Documents and Settings\P4\Bureau\~WRL2789.tmp"
Thu 21 Dec 2006 28,160 ...H. --- "C:\Documents and Settings\P4\Mes documents\~WRL0005.tmp"
Tue 6 Nov 2001 348,160 A..HR --- "C:\Program Files\National Instruments\MAX\uninstall.exe"
Thu 14 Oct 2004 8,192 A..H. --- "C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll"
Thu 14 Oct 2004 8,192 A..H. --- "C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll"
Thu 14 Oct 2004 8,192 A..H. --- "C:\WINDOWS\$hf_mig$\KB886185\spmsg.dll"
Thu 14 Oct 2004 8,192 A..H. --- "C:\WINDOWS\$hf_mig$\KB887472\spmsg.dll"
Tue 30 Nov 2004 8,192 A..H. --- "C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB890859\spuninst.exe"
Tue 30 Nov 2004 8,192 A..H. --- "C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB894391\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB896423\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB896423\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB896424\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB896424\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB896428\spuninst.exe"
Fri 25 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB898461\spmsg.dll"
Fri 25 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB898461\spuninst.exe"
Fri 25 Feb 2005 22,752 A..H. --- "C:\WINDOWS\$hf_mig$\KB898461\spupdsvc.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB899587\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB899587\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB899591\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB899591\spuninst.exe"
Thu 13 Oct 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB900485\spmsg.dll"
Thu 13 Oct 2005 216,800 A..H. --- "C:\WINDOWS\$hf_mig$\KB900485\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB900725\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB900725\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB901017\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB901017\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB901214\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\spuninst.exe"
Thu 13 Oct 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB904706\spmsg.dll"
Thu 13 Oct 2005 216,800 A..H. --- "C:\WINDOWS\$hf_mig$\KB904706\spuninst.exe"
Fri 25 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB905414\spmsg.dll"
Fri 25 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB905414\spuninst.exe"
Thu 24 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB905749\spmsg.dll"
Thu 24 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB905749\spuninst.exe"
Thu 13 Oct 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB908519\spmsg.dll"
Thu 13 Oct 2005 216,800 A..H. --- "C:\WINDOWS\$hf_mig$\KB908519\spuninst.exe"
Thu 13 Oct 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB908531\spmsg.dll"
Thu 13 Oct 2005 216,800 A..H. --- "C:\WINDOWS\$hf_mig$\KB908531\spuninst.exe"
Thu 13 Oct 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB910437\spmsg.dll"
Thu 13 Oct 2005 216,800 A..H. --- "C:\WINDOWS\$hf_mig$\KB910437\spuninst.exe"
Thu 13 Oct 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB911280\spmsg.dll"
Thu 13 Oct 2005 216,800 A..H. --- "C:\WINDOWS\$hf_mig$\KB911280\spuninst.exe"
Thu 13 Oct 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB911562\spmsg.dll"
Thu 13 Oct 2005 216,800 A..H. --- "C:\WINDOWS\$hf_mig$\KB911562\spuninst.exe"
Wed 17 Nov 2004 354,304 A..H. --- "C:\WINDOWS\$hf_mig$\KB873339\SP2QFE\hypertrm.dll"
Thu 14 Oct 2004 21,504 A..H. --- "C:\WINDOWS\$hf_mig$\KB873339\update\spcustom.dll"
Thu 14 Oct 2004 21,504 A..H. --- "C:\WINDOWS\$hf_mig$\KB885836\update\spcustom.dll"
Thu 30 Sep 2004 134,912 A..H. --- "C:\WINDOWS\$hf_mig$\KB886185\SP2QFE\ipnat.sys"
Thu 14 Oct 2004 21,504 A..H. --- "C:\WINDOWS\$hf_mig$\KB886185\update\spcustom.dll"
Thu 14 Oct 2004 21,504 A..H. --- "C:\WINDOWS\$hf_mig$\KB887472\update\spcustom.dll"
Tue 7 Dec 2004 96,768 A..H. --- "C:\WINDOWS\$hf_mig$\KB888302\SP2QFE\srvsvc.dll"
Tue 30 Nov 2004 21,504 A..H. --- "C:\WINDOWS\$hf_mig$\KB888302\update\spcustom.dll"
Wed 2 Mar 2005 62,464 A..H. --- "C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\authz.dll"
Wed 2 Mar 2005 578,048 A..H. --- "C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll"
Wed 2 Mar 2005 1,836,416 A..H. --- "C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys"
Wed 2 Mar 2005 291,840 A..H. --- "C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB890859\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB890859\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB890859\update\updspapi.dll"
Tue 30 Nov 2004 21,504 A..H. --- "C:\WINDOWS\$hf_mig$\KB891781\update\spcustom.dll"
Fri 8 Jul 2005 249,344 A..H. --- "C:\WINDOWS\$hf_mig$\KB893756\SP2QFE\tapisrv.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB893756\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB893756\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB893756\update\updspapi.dll"
Thu 28 Apr 2005 1,286,144 A..H. --- "C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll"
Thu 28 Apr 2005 75,264 A..H. --- "C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecli32.dll"
Thu 28 Apr 2005 37,376 A..H. --- "C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecnv32.dll"
Thu 28 Apr 2005 396,288 A..H. --- "C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB894391\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB894391\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB894391\update\updspapi.dll"
Fri 27 May 2005 41,472 A..H. --- "C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhsetup.dll"
Fri 27 May 2005 155,136 A..H. --- "C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itircl.dll"
Fri 27 May 2005 137,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itss.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB896358\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB896358\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB896358\update\updspapi.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB896423\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB896423\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB896423\update\updspapi.dll"
Thu 6 Oct 2005 280,064 A..H. --- "C:\WINDOWS\$hf_mig$\KB896424\SP2QFE\gdi32.dll"
Thu 6 Oct 2005 1,839,616 A..H. --- "C:\WINDOWS\$hf_mig$\KB896424\SP2QFE\win32k.sys"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB896424\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB896424\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB896424\update\updspapi.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB896428\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB896428\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB896428\update\updspapi.dll"
Fri 25 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB898461\update\spcustom.dll"
Fri 25 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB898461\update\update.exe"
Fri 25 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB898461\update\updspapi.dll"
Wed 15 Jun 2005 297,984 A..H. --- "C:\WINDOWS\$hf_mig$\KB899587\SP2QFE\kerberos.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB899587\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB899587\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB899587\update\updspapi.dll"
Fri 10 Jun 2005 139,528 A..H. --- "C:\WINDOWS\$hf_mig$\KB899591\SP2QFE\rdpwd.sys"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB899591\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB899591\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB899591\update\updspapi.dll"
Wed 15 Feb 2006 142,464 A..H. --- "C:\WINDOWS\$hf_mig$\KB900485\SP2QFE\aec.sys"
Thu 13 Oct 2005 22,752 A..H. --- "C:\WINDOWS\$hf_mig$\KB900485\update\spcustom.dll"
Thu 13 Oct 2005 727,776 A..H. --- "C:\WINDOWS\$hf_mig$\KB900485\update\update.exe"
Thu 13 Oct 2005 394,976 A..H. --- "C:\WINDOWS\$hf_mig$\KB900485\update\updspapi.dll"
Thu 1 Sep 2005 19,968 A..H. --- "C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\linkinfo.dll"
Fri 23 Sep 2005 8,508,928 A..H. --- "C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shell32.dll"
Sat 3 Sep 2005 474,624 A..H. --- "C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shlwapi.dll"
Tue 27 Sep 2005 23,552 A..H. --- "C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\spru040c.dll"
Thu 1 Sep 2005 292,352 A..H. --- "C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\winsrv.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB900725\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB900725\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB900725\update\updspapi.dll"
Sat 10 Sep 2005 2,068,480 A..H. --- "C:\WINDOWS\$hf_mig$\KB901017\SP2QFE\cdosys.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB901017\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB901017\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB901017\update\updspapi.dll"
Wed 29 Jun 2005 254,976 A..H. --- "C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\icm32.dll"
Wed 29 Jun 2005 73,728 A..H. --- "C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\mscms.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB901214\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB901214\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB901214\update\updspapi.dll"
Tue 26 Jul 2005 225,792 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrv.dll"
Tue 26 Jul 2005 625,152 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrvut.dll"
Tue 26 Jul 2005 110,080 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatex.dll"
Tue 26 Jul 2005 498,688 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatq.dll"
Tue 26 Jul 2005 60,416 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\colbact.dll"
Tue 26 Jul 2005 195,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comadmin.dll"
Tue 26 Jul 2005 97,792 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comrepl.dll"
Tue 26 Jul 2005 1,267,200 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comsvcs.dll"
Tue 26 Jul 2005 540,160 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comuid.dll"
Tue 26 Jul 2005 243,200 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\es.dll"
Tue 26 Jul 2005 425,472 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcprx.dll"
Tue 26 Jul 2005 945,152 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtctm.dll"
Tue 26 Jul 2005 161,280 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcuiu.dll"
Tue 26 Jul 2005 66,560 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxclu.dll"
Tue 26 Jul 2005 91,136 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxoci.dll"
Tue 26 Jul 2005 1,285,632 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\ole32.dll"
Tue 26 Jul 2005 75,264 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecli32.dll"
Tue 26 Jul 2005 37,376 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecnv32.dll"
Tue 26 Jul 2005 398,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll"
Tue 26 Jul 2005 101,376 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\txflog.dll"
Tue 26 Jul 2005 11,776 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\xolehlp.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB902400\update\updspapi.dll"
Tue 30 Aug 2005 1,293,824 A..H. --- "C:\WINDOWS\$hf_mig$\KB904706\SP2QFE\quartz.dll"
Thu 13 Oct 2005 22,752 A..H. --- "C:\WINDOWS\$hf_mig$\KB904706\update\spcustom.dll"
Thu 13 Oct 2005 727,776 A..H. --- "C:\WINDOWS\$hf_mig$\KB904706\update\update.exe"
Thu 13 Oct 2005 394,976 A..H. --- "C:\WINDOWS\$hf_mig$\KB904706\update\updspapi.dll"
Mon 22 Aug 2005 197,632 A..H. --- "C:\WINDOWS\$hf_mig$\KB905414\SP2QFE\netman.dll"
Fri 25 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB905414\update\spcustom.dll"
Fri 25 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB905414\update\update.exe"
Fri 25 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB905414\update\updspapi.dll"
Tue 23 Aug 2005 124,928 A..H. --- "C:\WINDOWS\$hf_mig$\KB905749\SP2QFE\umpnpmgr.dll"
Thu 24 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB905749\update\spcustom.dll"
Thu 24 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB905749\update\update.exe"
Thu 24 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB905749\update\updspapi.dll"
Mon 17 Oct 2005 80,896 A..H. --- "C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\fontsub.dll"
Mon 17 Oct 2005 117,760 A..H. --- "C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\t2embed.dll"
Thu 13 Oct 2005 22,752 A..H. --- "C:\WINDOWS\$hf_mig$\KB908519\update\spcustom.dll"
Thu 13 Oct 2005 727,776 A..H. --- "C:\WINDOWS\$hf_mig$\KB908519\update\update.exe"
Thu 13 Oct 2005 394,976 A..H. --- "C:\WINDOWS\$hf_mig$\KB908519\update\updspapi.dll"
Fri 17 Mar 2006 8,510,976 A..H. --- "C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\shell32.dll"
Wed 22 Mar 2006 25,088 A..H. --- "C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\spru040c.dll"
Thu 13 Oct 2005 22,752 A..H. --- "C:\WINDOWS\$hf_mig$\KB908531\update\spcustom.dll"
Thu 13 Oct 2005 727,776 A..H. --- "C:\WINDOWS\$hf_mig$\KB908531\update\update.exe"
Thu 13 Oct 2005 394,976 A..H. --- "C:\WINDOWS\$hf_mig$\KB908531\update\updspapi.dll"
Fri 21 Oct 2005 1,097,728 A..H. --- "C:\WINDOWS\$hf_mig$\KB910437\SP2QFE\esent.dll"
Thu 13 Oct 2005 22,752 A..H. --- "C:\WINDOWS\$hf_mig$\KB910437\update\spcustom.dll"
Thu 13 Oct 2005 727,776 A..H. --- "C:\WINDOWS\$hf_mig$\KB910437\update\update.exe"
Thu 13 Oct 2005 394,976 A..H. --- "C:\WINDOWS\$hf_mig$\KB910437\update\updspapi.dll"
Thu 22 Jun 2006 180,736 A..H. --- "C:\WINDOWS\$hf_mig$\KB911280\SP2QFE\rasmans.dll"
Thu 13 Oct 2005 22,752 A..H. --- "C:\WINDOWS\$hf_mig$\KB911280\update\spcustom.dll"
Thu 13 Oct 2005 727,776 A..H. --- "C:\WINDOWS\$hf_mig$\KB911280\update\update.exe"
Thu 13 Oct 2005 394,976 A..H. --- "C:\WINDOWS\$hf_mig$\KB911280\update\updspapi.dll"
Thu 23 Mar 2006 143,360 A..H. --- "C:\WINDOWS\$hf_mig$\KB911562\SP2QFE\msadco.dll"
Thu 11 Oct 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\5d8093d524ba38b2f4036bb4d3aa25e4\BIT4.tmp"
Tue 2 Oct 2007 4,830,072 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\be055ba2b2ed973399d61482c6723317\BIT9E.tmp"
Tue 2 Oct 2007 12,396,400 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\d87fb8947e75ca18dc081689c7a9b0bf\BIT9D.tmp"
Sun 24 Jun 2007 1,101,312 ...H. --- "C:\Documents and Settings\P4\Application Data\Microsoft\Word\~WRL0201.tmp"
Sun 24 Jun 2007 1,115,648 ...H. --- "C:\Documents and Settings\P4\Application Data\Microsoft\Word\~WRL0700.tmp"
Fri 26 Jan 2007 569,344 ...H. --- "C:\Documents and Settings\P4\Application Data\Microsoft\Word\~WRL0828.tmp"
Wed 27 Jun 2007 24,064 ...H. --- "C:\Documents and Settings\P4\Application Data\Microsoft\Word\~WRL1422.tmp"
Sun 24 Jun 2007 54,784 ...H. --- "C:\Documents and Settings\P4\Application Data\Microsoft\Word\~WRL1648.tmp"
Fri 26 Jan 2007 563,200 ...H. --- "C:\Documents and Settings\P4\Application Data\Microsoft\Word\~WRL2057.tmp"
Thu 26 Apr 2007 347,136 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\Copie de enfin khra!!!!!!!!!!!!!!\~WRL0295.tmp"
Fri 27 Apr 2007 389,632 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\Copie de enfin khra!!!!!!!!!!!!!!\~WRL2895.tmp"
Thu 26 Apr 2007 347,136 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\enfin khra!!!!!!!!!!!!!!\~WRL0295.tmp"
Fri 27 Apr 2007 389,632 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\enfin khra!!!!!!!!!!!!!!\~WRL2895.tmp"
Tue 24 Apr 2007 651,264 ...H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\memoire corig‚\~WRL3210.tmp"
Fri 20 Apr 2007 495,104 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\memoire corig‚\~WRL4008.tmp"
Wed 24 Jan 2007 4,348 ...H. --- "C:\Documents and Settings\P4\Mes documents\Ma musique\Sauvegarde de la licence\drmv1key.bak"
Thu 22 Mar 2007 20 A..H. --- "C:\Documents and Settings\P4\Mes documents\Ma musique\Sauvegarde de la licence\drmv1lic.bak"
Wed 17 Jan 2007 312 ...H. --- "C:\Documents and Settings\P4\Mes documents\Ma musique\Sauvegarde de la licence\drmv2key.bak"
Thu 22 Mar 2007 1,536 A..H. --- "C:\Documents and Settings\P4\Mes documents\Ma musique\Sauvegarde de la licence\drmv2lic.bak"
Mon 14 Jul 2003 4,348 A..H. --- "C:\Documents and Settings\user\Mes documents\Ma musique\Sauvegarde de la licence\drmv1key.bak"
Mon 14 Jul 2003 401 A..H. --- "C:\Documents and Settings\user\Mes documents\Ma musique\Sauvegarde de la licence\drmv1lic.bak"
Mon 14 Jul 2003 312 A.SH. --- "C:\Documents and Settings\user\Mes documents\Ma musique\Sauvegarde de la licence\drmv2key.bak"
Tue 23 Jan 2007 103,936 A..H. --- "C:\Documents and Settings\P4\Bureau\Nouveau dossier (4)\les infos utiles de amina\monographie belghoraf\~WRL1713.tmp"
Wed 16 May 2007 620,032 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\0000\memoire finis\~WRL1786.tmp"
Wed 16 May 2007 619,520 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\0000\memoire finis\~WRL1841.tmp"
Wed 16 May 2007 619,520 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\0000\memoire finis\~WRL2967.tmp"
Wed 16 May 2007 620,032 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\0000\memoire finis\~WRL3357.tmp"
Wed 16 May 2007 620,032 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\0000\memoire finis\~WRL3491.tmp"
Wed 16 May 2007 619,520 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\0000\memoire finis\~WRL3986.tmp"
Tue 24 Apr 2007 360,448 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\guide de la norme iso 9001\nouveau!!!!!!!!!!!!!!!!!!\~WRL2880.tmp"
Thu 26 Apr 2007 347,136 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\memoire revu par farid\enfin khra!!!!!!!!!!!!!!\~WRL0295.tmp"
Fri 27 Apr 2007 389,632 A..H. --- "C:\Documents and Settings\P4\Bureau\trucmuche\memoire revu par farid\enfin khra!!!!!!!!!!!!!!\~WRL2895.tmp"
Mon 8 Jan 2007 348,160 A.SH. --- "C:\Documents and Settings\P4\Bureau\Nouveau dossier (4)\les infos utiles de amina\umts\SID BAR€A (E)\msvcr71.dll"
Finished!
Rapport HijackThis :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:42:38, on 14/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe
C:\Program Files\National Instruments\Shared\License Manager\Bin\nilm.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Babylon\Babylon-Pro\Babylon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\eoRezo\EoAdv\EoRezobho.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll
O2 - BHO: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Babylon Client] C:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart
O4 - HKLM\..\Run: [IMAQBoot] C:\Program Files\National Instruments\NI-IMAQ\bin\ImaqBoot.exe
O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB003" /M "Stylus C66"
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Fichiers communs\Adobe\Updater5\AdobeUpdater.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Antivirus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2A5F3251-843B-49EA-BE0A-A794D56C54CC}: NameServer = 213.140.2.43,212.31.224.2
O17 - HKLM\System\CCS\Services\Tcpip\..\{3600CF06-F06F-4B24-91FE-D0D683B3D0D6}: NameServer = 41.221.20.244 213.140.2.21
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NILM License manager - GLOBEtrotter Software Inc. - C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe
O23 - Service: OpcEnum - Unknown owner - C:\WINDOWS\system32\OpcEnum.exe
salut green day!!!
je suis de retour...et j'attends tes intructions.
j'espere que tu as passé une bonne journée
@+
je suis de retour...et j'attends tes intructions.
j'espere que tu as passé une bonne journée
@+
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
ben...un peu lent , la barre de tache disparait parfois et reviens toute seule , et les fenetres que j'ouvre bloquent au debut , et il faut attendre quelques secondes...voir meme quelques minutes pour y voir un peu clair.
je ne sais pas si je me fais bien comprendre...sinon...dis le moi.
je ne sais pas si je me fais bien comprendre...sinon...dis le moi.
ben
il est un peu lent,la barre de tache disparait parfois et reviens toute seule , et quand j'ouvre une fenetre , tout se bloque au debut , et il faut que j'attende quelques secondes voir quelques minutes pour que ça s'arrange.
je ne sais pas si je me fais comprendre...sinon , dis le moi.
merci
il est un peu lent,la barre de tache disparait parfois et reviens toute seule , et quand j'ouvre une fenetre , tout se bloque au debut , et il faut que j'attende quelques secondes voir quelques minutes pour que ça s'arrange.
je ne sais pas si je me fais comprendre...sinon , dis le moi.
merci
resalut
voici le premier rapport de Spybot
ça a mis bcp de temps , car j'ai due m'y remmetre a plusieurs reprises , car le programme a bloqué et s'est arrété tout seul en plein milieu...
je ne sais pas si ça te parle , mais j'ai preféré te le preciser
je lance un scan avec l'antivirus en ligne et je te poste le rapport tout de suite apres
merci
--- Search result list ---
Microsoft.Windows.Security.InternetExplorer: Réglages (Modification du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-484763869-1343024091-1003\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\iexplore.exe!=W=1
--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---
2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2007-10-10 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2007-05-23 advcheck.dll (1.5.3.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2007-07-31 Tools.dll (2.1.2.0)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2007-10-10 Includes\Cookies.sbi (*)
2007-07-25 Includes\Dialer.sbi (*)
2007-10-10 Includes\DialerC.sbi (*)
2007-08-29 Includes\Hijackers.sbi (*)
2007-10-10 Includes\HijackersC.sbi (*)
2007-10-04 Includes\Keyloggers.sbi (*)
2007-10-10 Includes\KeyloggersC.sbi (*)
2007-10-04 Includes\Malware.sbi (*)
2007-10-10 Includes\MalwareC.sbi (*)
2007-09-05 Includes\PUPS.sbi (*)
2007-10-10 Includes\PUPSC.sbi (*)
2007-10-10 Includes\Revision.sbi (*)
2007-05-30 Includes\Security.sbi (*)
2007-10-10 Includes\SecurityC.sbi (*)
2007-10-10 Includes\Spybots.sbi (*)
2007-10-10 Includes\SpybotsC.sbi (*)
2007-08-21 Includes\Tracks.uti
2007-10-04 Includes\Trojans.sbi (*)
2007-10-10 Includes\TrojansC.sbi (*)
2007-06-06 Plugins\TCPIPAddress.dll
voici le premier rapport de Spybot
ça a mis bcp de temps , car j'ai due m'y remmetre a plusieurs reprises , car le programme a bloqué et s'est arrété tout seul en plein milieu...
je ne sais pas si ça te parle , mais j'ai preféré te le preciser
je lance un scan avec l'antivirus en ligne et je te poste le rapport tout de suite apres
merci
--- Search result list ---
Microsoft.Windows.Security.InternetExplorer: Réglages (Modification du registre, nothing done)
HKEY_USERS\S-1-5-21-1645522239-484763869-1343024091-1003\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\iexplore.exe!=W=1
--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---
2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2007-10-10 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2007-05-23 advcheck.dll (1.5.3.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2007-07-31 Tools.dll (2.1.2.0)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2007-10-10 Includes\Cookies.sbi (*)
2007-07-25 Includes\Dialer.sbi (*)
2007-10-10 Includes\DialerC.sbi (*)
2007-08-29 Includes\Hijackers.sbi (*)
2007-10-10 Includes\HijackersC.sbi (*)
2007-10-04 Includes\Keyloggers.sbi (*)
2007-10-10 Includes\KeyloggersC.sbi (*)
2007-10-04 Includes\Malware.sbi (*)
2007-10-10 Includes\MalwareC.sbi (*)
2007-09-05 Includes\PUPS.sbi (*)
2007-10-10 Includes\PUPSC.sbi (*)
2007-10-10 Includes\Revision.sbi (*)
2007-05-30 Includes\Security.sbi (*)
2007-10-10 Includes\SecurityC.sbi (*)
2007-10-10 Includes\Spybots.sbi (*)
2007-10-10 Includes\SpybotsC.sbi (*)
2007-08-21 Includes\Tracks.uti
2007-10-04 Includes\Trojans.sbi (*)
2007-10-10 Includes\TrojansC.sbi (*)
2007-06-06 Plugins\TCPIPAddress.dll
oula...a ce rythme j'en ai pour toute la nuit!!!!
c'est hyper lent...je ne sais pas si c'est ma connexion qui déconne ou autre chose...mais c'est vraiment tres lent!!!
j'ai deja fais ces differents scan avant...mais là !!!
je te fais aussi le scan avec AVG anti spyware , et scan virus BitDefender et je termine avec un HijackThis...
si tu penses que je dois faire autre chose , dis le moi , car a ce rythme , tu seras deja au lit quand j'aurai fini tout ça!!!lol
merci encore de m'accompagner dans toutes mes demarches...le site est vraiment genial, et vous tous qui y participez...j'en perds mes mots!!!
vraiment merci de tout coeur!
green day tu es vraiment (le/la) meilleur(e) !!!!!!!!!!!!!!!!!
c'est hyper lent...je ne sais pas si c'est ma connexion qui déconne ou autre chose...mais c'est vraiment tres lent!!!
j'ai deja fais ces differents scan avant...mais là !!!
je te fais aussi le scan avec AVG anti spyware , et scan virus BitDefender et je termine avec un HijackThis...
si tu penses que je dois faire autre chose , dis le moi , car a ce rythme , tu seras deja au lit quand j'aurai fini tout ça!!!lol
merci encore de m'accompagner dans toutes mes demarches...le site est vraiment genial, et vous tous qui y participez...j'en perds mes mots!!!
vraiment merci de tout coeur!
green day tu es vraiment (le/la) meilleur(e) !!!!!!!!!!!!!!!!!
voila enfin le rapport de AVG:(avant supression)
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 23:36:16 15/10/2007
+ Résultat de l'analyse:
:mozilla.10:C:\Documents and Settings\P4\Application Data\Mozilla\Firefox\Profiles\9c1s8eb7.default\cookies.txt -> TrackingCookie.Netflame : Aucune action entreprise.
C:\Documents and Settings\P4\Cookies\p4@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Aucune action entreprise.
Fin du rapport
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 23:36:16 15/10/2007
+ Résultat de l'analyse:
:mozilla.10:C:\Documents and Settings\P4\Application Data\Mozilla\Firefox\Profiles\9c1s8eb7.default\cookies.txt -> TrackingCookie.Netflame : Aucune action entreprise.
C:\Documents and Settings\P4\Cookies\p4@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Aucune action entreprise.
Fin du rapport
voila le rapport du scan BitDefender :
BitDefender Online Scanner
Scan report generated at: Tue, Oct 16, 2007 - 01:24:12
Scan path: A:\;C:\;D:\;
Statistics
Time
02:22:49
Files
318290
Folders
6748
Boot Sectors
2
Archives
1972
Packed Files
11905
Results
Identified Viruses
2
Infected Files
2
Suspect Files
0
Warnings
0
Disinfected
0
Deleted Files
2
Engines Info
Virus Definitions
826753
Engine build
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
Scan plugins
14
Archive plugins
38
Unpack plugins
7
E-mail plugins
6
System plugins
1
Scan Settings
First Action
Disinfect
Second Action
Delete
Heuristics
Yes
Enable Warnings
Yes
Scanned Extensions
*;
Exclude Extensions
Scan Emails
Yes
Scan Archives
Yes
Scan Packed
Yes
Scan Files
Yes
Scan Boot
Yes
Scanned File
&
Status
C:\WINDOWS\LBTWiz.exe
Infected with: Backdoor.Sdbot.DEXW
C:\WINDOWS\LBTWiz.exe
Disinfection failed
C:\WINDOWS\LBTWiz.exe
Deleted
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0008
Infected with: Trojan.Mailskinner.C
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0008
Disinfection failed
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0008
Deleted
C:\WINDOWS\pack.epk=>(NSIS 2g)
Update failed
BitDefender Online Scanner
Scan report generated at: Tue, Oct 16, 2007 - 01:24:12
Scan path: A:\;C:\;D:\;
Statistics
Time
02:22:49
Files
318290
Folders
6748
Boot Sectors
2
Archives
1972
Packed Files
11905
Results
Identified Viruses
2
Infected Files
2
Suspect Files
0
Warnings
0
Disinfected
0
Deleted Files
2
Engines Info
Virus Definitions
826753
Engine build
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
Scan plugins
14
Archive plugins
38
Unpack plugins
7
E-mail plugins
6
System plugins
1
Scan Settings
First Action
Disinfect
Second Action
Delete
Heuristics
Yes
Enable Warnings
Yes
Scanned Extensions
*;
Exclude Extensions
Scan Emails
Yes
Scan Archives
Yes
Scan Packed
Yes
Scan Files
Yes
Scan Boot
Yes
Scanned File
&
Status
C:\WINDOWS\LBTWiz.exe
Infected with: Backdoor.Sdbot.DEXW
C:\WINDOWS\LBTWiz.exe
Disinfection failed
C:\WINDOWS\LBTWiz.exe
Deleted
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0008
Infected with: Trojan.Mailskinner.C
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0008
Disinfection failed
C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0008
Deleted
C:\WINDOWS\pack.epk=>(NSIS 2g)
Update failed
et enfin...le rapport HijackThis :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:41:43, on 16/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe
C:\Program Files\National Instruments\Shared\License Manager\Bin\nilm.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Babylon\Babylon-Pro\Babylon.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\eoRezo\EoAdv\EoRezobho.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll
O2 - BHO: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Babylon Client] C:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart
O4 - HKLM\..\Run: [IMAQBoot] C:\Program Files\National Instruments\NI-IMAQ\bin\ImaqBoot.exe
O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB003" /M "Stylus C66"
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Fichiers communs\Adobe\Updater5\AdobeUpdater.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Antivirus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2A5F3251-843B-49EA-BE0A-A794D56C54CC}: NameServer = 213.140.2.43,212.31.224.2
O17 - HKLM\System\CCS\Services\Tcpip\..\{3600CF06-F06F-4B24-91FE-D0D683B3D0D6}: NameServer = 41.221.20.244 213.140.2.21
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NILM License manager - GLOBEtrotter Software Inc. - C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe
O23 - Service: OpcEnum - Unknown owner - C:\WINDOWS\system32\OpcEnum.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:41:43, on 16/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe
C:\Program Files\National Instruments\Shared\License Manager\Bin\nilm.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Babylon\Babylon-Pro\Babylon.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\eoRezo\EoAdv\EoRezobho.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll
O2 - BHO: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Multi Media Toolbar - {b5146c40-189a-4311-bda9-fbae3e023187} - C:\Program Files\Multi_Media\tbMul1.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Babylon Client] C:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart
O4 - HKLM\..\Run: [IMAQBoot] C:\Program Files\National Instruments\NI-IMAQ\bin\ImaqBoot.exe
O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB003" /M "Stylus C66"
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Fichiers communs\Adobe\Updater5\AdobeUpdater.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Antivirus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2A5F3251-843B-49EA-BE0A-A794D56C54CC}: NameServer = 213.140.2.43,212.31.224.2
O17 - HKLM\System\CCS\Services\Tcpip\..\{3600CF06-F06F-4B24-91FE-D0D683B3D0D6}: NameServer = 41.221.20.244 213.140.2.21
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NILM License manager - GLOBEtrotter Software Inc. - C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe
O23 - Service: OpcEnum - Unknown owner - C:\WINDOWS\system32\OpcEnum.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
voila...enfin a bout!!!!!!!!!!!
tout ça aura pris un temps monstre...
alors...bonne nuit et a demain!
tout ça aura pris un temps monstre...
alors...bonne nuit et a demain!
Salut ;-)
tu n'étais pas obligé de tout faire hier soir ! :)
bien, dis moi à présent où en sont tes soucis ??
++
tu n'étais pas obligé de tout faire hier soir ! :)
bien, dis moi à présent où en sont tes soucis ??
++
salut green day
c'est vrai que je n'etais pas obligée de tout faire hier , mais j'avais envie de me reposer un peu en rentrant du boulot avant de m'attaquer a la bete !!!lol
pour le comportement du pc...ben toujours pareil...
les fenetres se multiplient , s'effacent et reviennent toute seule , et...l'ordi est d'une lenteur a vouloir se pendre!
et...je suppose que tu as remarqué , mais on retrouve mailskinner dans le premier rapport de Spybot et dans le dernier de BitDefender!
c'est quoi au juste ce cheval de troie , et comment il fonctionne?
et est ce que ça veut dire qu'il a été supprimé et qu'il est revenu , ou pas ?!
merci d'avance...
j'espere a tte !!!
c'est vrai que je n'etais pas obligée de tout faire hier , mais j'avais envie de me reposer un peu en rentrant du boulot avant de m'attaquer a la bete !!!lol
pour le comportement du pc...ben toujours pareil...
les fenetres se multiplient , s'effacent et reviennent toute seule , et...l'ordi est d'une lenteur a vouloir se pendre!
et...je suppose que tu as remarqué , mais on retrouve mailskinner dans le premier rapport de Spybot et dans le dernier de BitDefender!
c'est quoi au juste ce cheval de troie , et comment il fonctionne?
et est ce que ça veut dire qu'il a été supprimé et qu'il est revenu , ou pas ?!
merci d'avance...
j'espere a tte !!!
resalut
navilog1 me fait le meme truc d'avant
il n'arrive pas a fonctionner!!!
je refais un scan avec catchme et SDfix ?!
navilog1 me fait le meme truc d'avant
il n'arrive pas a fonctionner!!!
je refais un scan avec catchme et SDfix ?!
Dommage !
tu as bien utilisé ccleaner comme indiqué ??
on va s'y prendre autrement, regarde dans ajout/supprimer un programme s'il n'y a pas mailskinner
ensuite :
Télécharge BTFix de bibi26
http://cluster1.easy-hebergement.net/
Dézippe l'archive sur ton Bureau (clic droit/extraire…)
Ouvre le dossier BTFix
Double clique sur BTFix.exe
Clique sur Rechercher
Un rapport va apparaître, copie/colle-le dans ta prochaine réponse
++
tu as bien utilisé ccleaner comme indiqué ??
on va s'y prendre autrement, regarde dans ajout/supprimer un programme s'il n'y a pas mailskinner
ensuite :
Télécharge BTFix de bibi26
http://cluster1.easy-hebergement.net/
Dézippe l'archive sur ton Bureau (clic droit/extraire…)
Ouvre le dossier BTFix
Double clique sur BTFix.exe
Clique sur Rechercher
Un rapport va apparaître, copie/colle-le dans ta prochaine réponse
++
