Ordinateur en plein déclin!

je t''avais déjà répondu ceci dans le forum windows:

coches les lignes suivantes puis cliques sur fix checked
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {D34F5D71-99E4-4D96-91CA-F4104F69B8AE} - C:\Program Files\Video AX Object\bpvol.dll (file missing)
O3 - Toolbar: Protection Bar - {F0993251-2512-4710-AF6E-0A13EA199D02} - C:\Program Files\Video AX Object\splug.dll (file missing)
O4 - HKLM\..\Run: [rdr readme curb error] C:\Documents and Settings\All Users\Application Data\fragbookrdrreadme\Fastcdrom.exe
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/
O16 - DPF: {68BCE50A-DC9B-4519-A118-6FDA19DB450D} (Info Class) - http://www.blizzard.com/support/includes/cabs/si.cab

ensuite
# Télécharge FixWareout LonnyRJones à partir l'une de ces adresses :

* http://downloads.subratam.org/Fixwareout.exe
* http://swandog46.geekstogo.com/Fixwareout.exe

# Lance le fix: clique sur Next, puis Install, puis assure toi que "Run fixit" est activé puis clique sur Finish.
# Il te sera demandé de redémarrer ton ordinateur, redémarre-le.
# ton PC mettra un peu plus de temps au démarrage, c'est normal.

puis reviens avec un nouveau rapport hijackthis

Oui je sais que tu m'avais deja repondu !
Mais je viende le voir .. désolé ...

Mais je vfaire comme tu me dis !

Rapport hijack

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:37:43, on 10/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
C:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
C:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
C:\Program Files\Securitoo\av_fw\Anti-Virus\FSGK32.EXE
C:\Program Files\Securitoo\av_fw\fswsclds.exe
C:\Program Files\Securitoo\av_fw\Anti-Virus\fssm32.exe
C:\WINDOWS\System32\mnmsrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
C:\Program Files\Securitoo\av_fw\Common\FSMB32.EXE
C:\Program Files\Securitoo\av_fw\Common\FCH32.EXE
C:\Program Files\Securitoo\av_fw\Common\FAMEH32.EXE
C:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Securitoo\av_fw\Anti-Virus\fsav32.exe
C:\Program Files\Securitoo\av_fw\backweb\1044199\Program\BackWeb-1044199.exe
C:\Program Files\Securitoo\av_fw\Common\FSM32.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\system32\ezSP_Px.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\PROGRA~1\WANADOO\CnxMon.exe
C:\PROGRA~1\MESSAG~1\StartMessager.exe
C:\PROGRA~1\WANADOO\TaskbarIcon.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\E-Color\True Internet Color\TICIcon.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Wanadoo\EspaceWanadoo.exe
C:\Program Files\Wanadoo\ComComp.exe
C:\Program Files\Wanadoo\Watch.exe
C:\Program Files\Mozilla Firefox\firefox.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O4 - HKLM\..\Run: [PMXInit] C:\WINDOWS\System32\pmxinit.exe
O4 - HKLM\..\Run: [autoclk] autoclk.exe
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Securitoo\av_fw\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Securitoo\av_fw\TNB\TNBUtil.exe" /CHECKALL
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\system32\ezSP_Px.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MMTray] C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [P-Install] E:\Install\installerp1.exe f
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\WANADOO\CnxMon.exe
O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\TaskbarIcon.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [.nvsvc] C:\WINDOWS\system\smss.exe /w
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [File Spam] C:\DOCUME~1\Mathieu\APPLIC~1\KNOBSO~1\drv vga.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe -autorun
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: True Internet Color Icon.lnk = C:\Program Files\E-Color\True Internet Color\TICIcon.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZSzeb029YYFR_ZNxdm414YYFR
O8 - Extra context menu item: Ouvrir l'image dans &Microsoft PhotoDraw - res://C:\PROGRA~1\MICROS~2\Office\1036\phdintl.dll/phdContext.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab31267.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O22 - SharedTaskScheduler: depreciable - {716002db-288c-4bf0-80cd-a467e78d8b55} - C:\WINDOWS\system32\dxovx.dll (file missing)
O23 - Service: Securitoo AntiVirus Firewall (BackWeb Client - 1044199) - Unknown owner - C:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Authentication Agent (FSAA) - Unknown owner - C:\Program Files\Securitoo\av_fw\Common\FSAA.EXE (file missing)
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
O23 - Service: F-Secure Distributed Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
O23 - Service: F-Secure Windows Security Center Legacy Detection Service (Fswsclds) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\fswsclds.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe

ca doit déjà aller beaucoup mieux?

maintenant tu vas faire ceci

coches cette ligne dans hijackthis et cliques sur fixer ou fix checked
O22 - SharedTaskScheduler: depreciable - {716002db-288c-4bf0-80cd-a467e78d8b55} - C:\WINDOWS\system32\dxovx.dll (file missing)

puis va dans C:\DOCUME~1\Mathieu\APPLICations datas1\KNOBSO~1\drv et supprimes vga.exe

ensuite
Télécharge OAD http://sosvirus.changelog.fr/OAD.exe
- Enregistre le sur ton bureau

Double clique sur le OAD pour le lancer

- nom de fichier à rechercher tape ou fais un copier coller de : smss
- Type de recherche : sélectionne l'option 6 puis valide [entree]

OAD va maintenant rechercher le fichier. Laisse le travailler jusqu'à ce qu'il en ai terminé.
Le rapport de recherche s'affichera automatiquement à dès qu'il en aura terminé.

- Fais un copier / coller de ce rapport dans ton prochain post.

Note importante : Suivant la taille des disques dur cette recherche peut prendre plusieurs minutes. Sois patient(e)

Si possible, ne redémarre pas l'ordi.

Voila !!

Mais par contre j'aipas trouver le fichier vga.exe

Rapport OAD

10/11/2007 ---- 11:40:58,90

----------------------------------
§§§§§§ [smss.exe] §§§§§§
----------------------------------
[X] Registre

-------------- [ ] rapide
-- Fichier --- [ ] disque systeme
------------- [X] complete

********************
[Registre]
********************

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
".nvsvc"="C:\\WINDOWS\\system\\smss.exe /w"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Terminal Server\SysProcs]
"smss.exe"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Terminal Server\SysProcs]
"smss.exe"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Terminal Server\SysProcs]
"smss.exe"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\SysProcs]
"smss.exe"=dword:00000000

*******************
[Fichier]
*******************

c:\WINDOWS\$NtServicePackUninstall$\smss.exe
c:\WINDOWS\ServicePackFiles\i386\smss.exe
c:\WINDOWS\system32\smss.exe

*********************
[Même date]
*********************

[20/08/2004 ] ---> C:\WINDOWS\slrundll.exe
[20/08/2004 ] ---> C:\WINDOWS\system32\ati2cqag.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\ati2dvaa.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\ati2dvag.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\ati3d1ag.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\ati3duag.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\ativdaxx.ax
[20/08/2004 ] ---> C:\WINDOWS\system32\ativmvxx.ax
[20/08/2004 ] ---> C:\WINDOWS\system32\ativtmxx.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\ativvaxx.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\auditusr.exe
[20/08/2004 ] ---> C:\WINDOWS\system32\blastcln.exe
[20/08/2004 ] ---> C:\WINDOWS\system32\bthci.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\bthprops.cpl
[20/08/2004 ] ---> C:\WINDOWS\system32\bthserv.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\btpanui.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\cmsetacl.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\drivers\adv01nt5.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\drivers\adv02nt5.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\drivers\adv05nt5.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\drivers\adv07nt5.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\drivers\adv08nt5.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\drivers\adv09nt5.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\drivers\adv11nt5.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\drivers\atv01nt5.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\drivers\atv02nt5.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\drivers\atv04nt5.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\drivers\atv06nt5.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\drivers\atv10nt5.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\drivers\ch7xxnt5.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\drivers\siint5.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\drivers\vchnt5.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\dsprpres.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\encdec.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\extmgr.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\faxpatch.exe
[20/08/2004 ] ---> C:\WINDOWS\system32\firewall.cpl
[20/08/2004 ] ---> C:\WINDOWS\system32\fltlib.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\fltmc.exe
[20/08/2004 ] ---> C:\WINDOWS\system32\fsquirt.exe
[20/08/2004 ] ---> C:\WINDOWS\system32\fwcfg.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\hccoin.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\hsfcisp2.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\httpapi.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\ieencode.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\ieuinit.inf
[20/08/2004 ] ---> C:\WINDOWS\system32\irprops.cpl
[20/08/2004 ] ---> C:\WINDOWS\system32\kbdfi1.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\kbdinbe1.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\kbdinben.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\kbdinmal.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\kbdmaori.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\kbdmlt47.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\kbdmlt48.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\kbdno1.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\kbdsmsfi.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\kbdsmsno.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\kbdukx.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\logman.exe
[20/08/2004 ] ---> C:\WINDOWS\system32\mdmxsdk.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\MP43DMOD.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\MP4SDMOD.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\msctfime.ime
[20/08/2004 ] ---> C:\WINDOWS\system32\msdadiag.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\msftedit.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\MsPMSNSv.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\mssap.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\mtxparhd.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\netsetup.cpl
[20/08/2004 ] ---> C:\WINDOWS\system32\nv4_disp.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\p2p.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\p2pgasvc.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\p2pgraph.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\p2pnetsh.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\p2psvc.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\pnrpnsp.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\powercfg.exe
[20/08/2004 ] ---> C:\WINDOWS\system32\proxycfg.exe
[20/08/2004 ] ---> C:\WINDOWS\system32\s3gnb.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\sbe.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\sbeio.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\sdhcinst.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\shlwapi(2)(2).dll
[20/08/2004 ] ---> C:\WINDOWS\system32\SHLWAPI(4).DLL
[20/08/2004 ] ---> C:\WINDOWS\system32\SHLWAPI(5).DLL
[20/08/2004 ] ---> C:\WINDOWS\system32\shlwapi.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\slcoinst.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\slextspk.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\slgen.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\slrundll.exe
[20/08/2004 ] ---> C:\WINDOWS\system32\slserv.exe
[20/08/2004 ] ---> C:\WINDOWS\system32\smbinst.exe
[20/08/2004 ] ---> C:\WINDOWS\system32\spdwnwxp.exe
[20/08/2004 ] ---> C:\WINDOWS\system32\spupdwxp.exe
[20/08/2004 ] ---> C:\WINDOWS\system32\strmfilt.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\twext.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\vidcap.ax
[20/08/2004 ] ---> C:\WINDOWS\system32\w3ssl.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\winbrand.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\winshfhc.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\wmerror.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\wmidx.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\wmp.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\wmpasf.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\wmpdxm.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\wmsdmoe2.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\WMSPDMOD.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\WMSPDMOE.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\wmvdmoe2.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\wscntfy.exe
[20/08/2004 ] ---> C:\WINDOWS\system32\wscsvc.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\wscui.cpl
[20/08/2004 ] ---> C:\WINDOWS\system32\wshbth.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\xmlprov.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\xmlprovi.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\xpsp1res.dll
[20/08/2004 ] ---> C:\WINDOWS\system32\xpsp2res.dll
[28/08/2001 ] ---> C:\Bootfont.bin
[28/08/2001 ] ---> C:\NTDETECT.COM
[28/08/2001 ] ---> C:\ntldr
[28/08/2001 ] ---> C:\WINDOWS\_default.pif
[28/08/2001 ] ---> C:\WINDOWS\clock.avi
[28/08/2001 ] ---> C:\WINDOWS\explorer.exe
[28/08/2001 ] ---> C:\WINDOWS\explorer.scf
[28/08/2001 ] ---> C:\WINDOWS\msdfmap.ini
[28/08/2001 ] ---> C:\WINDOWS\regedit.exe
[28/08/2001 ] ---> C:\WINDOWS\system.ini
[28/08/2001 ] ---> C:\WINDOWS\system32\12520437.cpx
[28/08/2001 ] ---> C:\WINDOWS\system32\12520850.cpx
[28/08/2001 ] ---> C:\WINDOWS\system32\6to4svc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\aaaamon.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\acelpdec.ax
[28/08/2001 ] ---> C:\WINDOWS\system32\acledit.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\aclui.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\activeds.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\activeds.tlb
[28/08/2001 ] ---> C:\WINDOWS\system32\actmovie.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\actxprxy.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\admparse.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\adptif.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\adsldp.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\adsldpc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\adsmsext.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\adsnt.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\advapi32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\advpack.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ahui.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\alg.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\alrsvc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ansi.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\apcups.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\append.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\apphelp.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\appwiz.cpl
[28/08/2001 ] ---> C:\WINDOWS\system32\arp.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\asctrls.ocx
[28/08/2001 ] ---> C:\WINDOWS\system32\asferror.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\asycfilt.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\at.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\atkctrs.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\atl.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\atmadm.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\atmfd.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\atmlib.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\atmpvcno.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\attrib.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\audiosrv.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\authz.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\autochk.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\autoconv.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\autodisc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\autofmt.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\autolfn.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\avicap.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\avicap32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\avifil32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\avifile.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\basesrv.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\batmeter.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\bidispl.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\bios1.rom
[28/08/2001 ] ---> C:\WINDOWS\system32\bios4.rom
[28/08/2001 ] ---> C:\WINDOWS\system32\blackbox.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\bootok.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\bootvid.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\bootvrfy.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\browselc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\browsewm.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\c_037.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_10000.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_10079.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_1026.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_1250.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_1251.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_1252.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_1253.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_1254.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_1255.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_1256.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_1257.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_1258.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_20261.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_20866.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_20905.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_21866.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_28591.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_28592.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_28593.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_28598.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_28605.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_437.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_500.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_775.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_850.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_860.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_861.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_863.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_865.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_874.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_932.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_936.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_949.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\c_950.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\cabinet.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cabview.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cacls.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\camocx.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\capesnpn.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cards.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ccfgnt.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cdfview.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cdm.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cdosys.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\certcli.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\certmgr.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\certmgr.msc
[28/08/2001 ] ---> C:\WINDOWS\system32\cewmdm.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cfgmgr32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ChaŒnes.scf
[28/08/2001 ] ---> C:\WINDOWS\system32\chcp.com
[28/08/2001 ] ---> C:\WINDOWS\system32\chkdsk.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\chkntfs.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\ciadmin.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ciadv.msc
[28/08/2001 ] ---> C:\WINDOWS\system32\cic.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cidaemon.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\ciodm.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cisvc.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\ckcnv.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\clb.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cleanmgr.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\cliconf.chm
[28/08/2001 ] ---> C:\WINDOWS\system32\cliconfg.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cliconfg.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\cliconfg.rll
[28/08/2001 ] ---> C:\WINDOWS\system32\clipsrv.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\clusapi.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cmcfg32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cmd.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\cmdial32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cmdl32.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\cmmgr32.hlp
[28/08/2001 ] ---> C:\WINDOWS\system32\cmmon32.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\cmos.ram
[28/08/2001 ] ---> C:\WINDOWS\system32\cmpbk32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cmstp.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\cmutil.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cnetcfg.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cnvfat.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\comcat.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\comctl32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\comdlg32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\comm.drv
[28/08/2001 ] ---> C:\WINDOWS\system32\command.com
[28/08/2001 ] ---> C:\WINDOWS\system32\commdlg.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\comp.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\compact.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\compatUI.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\compmgmt.msc
[28/08/2001 ] ---> C:\WINDOWS\system32\compobj.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\compstui.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\comres.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\confmsp.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\conime.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\console.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\control.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\convert.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\corpol.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\country.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\credui.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\crtdll.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cryptdlg.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cryptdll.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cryptext.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cryptnet.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cryptsvc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cryptui.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cscdll.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\cscript.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\cscui.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\csrsrv.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\csrss.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\csseqchk.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ctfmon.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\ctl3d32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ctl3dv2.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ctype.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\d3dim.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\d3dpmesh.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\d3dramp.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\d3drm.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\d3dxof.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\danim.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dataclen.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\datime.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\davclnt.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\daxctle.ocx
[28/08/2001 ] ---> C:\WINDOWS\system32\dbgeng.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dbghelp.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dbmsadsn.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dbmsrpcn.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dbmsvinn.dLL
[28/08/2001 ] ---> C:\WINDOWS\system32\dbnetlib.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dbnmpntw.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\Dcache.bin
[28/08/2001 ] ---> C:\WINDOWS\system32\dciman32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ddeml.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ddeshare.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\debug.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\defrag.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\desk.cpl
[28/08/2001 ] ---> C:\WINDOWS\system32\deskadp.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\deskmon.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\deskperf.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\devmgmt.msc
[28/08/2001 ] ---> C:\WINDOWS\system32\devmgr.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dfrg.msc
[28/08/2001 ] ---> C:\WINDOWS\system32\dfrgfat.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\dfrgntfs.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\dfrgres.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dfrgsnap.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dfrgui.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dfsshlex.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dgnet.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dhcpcsvc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dhcpmon.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dhcpsapi.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\diactfrm.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\diantz.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\digest.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dimap.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\diskcomp.com
[28/08/2001 ] ---> C:\WINDOWS\system32\diskcopy.com
[28/08/2001 ] ---> C:\WINDOWS\system32\diskcopy.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\diskmgmt.msc
[28/08/2001 ] ---> C:\WINDOWS\system32\diskpart.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\diskperf.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\dispex.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dllhost.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\dllhst3g.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\dmadmin.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\dmconfig.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dmdlgs.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dmdskmgr.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dmdskres.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dmintf.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dmocx.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dmremote.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\dmserver.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dmview.ocx
[28/08/2001 ] ---> C:\WINDOWS\system32\dnsapi(2).dll
[28/08/2001 ] ---> C:\WINDOWS\system32\DNSAPI(3).DLL
[28/08/2001 ] ---> C:\WINDOWS\system32\dnsapi.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dnsrslvr.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\docprop.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\docprop2.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\doskey.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\dosx.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\dpcdll.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dplay.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dpnmodem.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dpnwsock.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dpserial.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dpwsock.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\acpi.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\acpiec.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\afd.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\asyncmac.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\atapi.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\atmarpc.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\atmepvc.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\atmlane.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\atmuni.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\beep.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\bridge.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\cbidf2k.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\cdfs.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\cdrom.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\classpnp.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\disk.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\diskdump.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\dmboot.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\dmio.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\dmload.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\dxapi.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\dxg.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\dxgthk.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\fastfat.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\fdc.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\fips.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\flpydisk.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\fs_rec.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\ftdisk.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\gm.dls
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\gmreadme.txt
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\hidclass.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\hidparse.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\i8042prt.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\imapi.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\ipfltdrv.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\ipinip.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\ipnat.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\ipsec.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\isapnp.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\kbdclass.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\ksecdd.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\mcd.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\mnmdd.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\mountmgr.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\mrxdav.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\mrxsmb.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\msfs.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\msgpc.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\mup.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\ndis.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\ndistapi.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\ndiswan.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\ndproxy.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\netbios.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\netbt.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\nmnt.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\npfs.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\ntfs.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\null.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\nwlnkflt.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\nwlnkfwd.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\nwlnkipx.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\nwlnknb.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\nwlnkspx.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\oprghdlr.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\partmgr.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\parvdm.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\pci.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\pciidex.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\pcmcia.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\psched.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\ptilink.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\rasacd.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\rasl2tp.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\raspppoe.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\raspptp.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\raspti.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\rawwan.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\rdbss.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\rdpcdd.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\RMCast.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\rndismp.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\rootmdm.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\scsiport.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\secdrv.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\serenum.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\serial.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\sfloppy.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\smclib.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\srv.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\tape.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\tcpip.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\tcpip6.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\tdi.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\udfs.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\update.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\usb8023.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\usbd.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\usbhub.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\usbport.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\usbuhci.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\vga.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\viaide.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\videoprt.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\volsnap.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\wanarp.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\wmilib.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drivers\ws2ifsl.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\drmclien.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\drmstor.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\drmv2clt.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\drprov.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\drwatson.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\drwtsn32.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\ds16gt.dLL
[28/08/2001 ] ---> C:\WINDOWS\system32\ds32gt.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dsauth.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dskquota.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dskquoui.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dsound.vxd
[28/08/2001 ] ---> C:\WINDOWS\system32\dsprop.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dsquery.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dssec.dat
[28/08/2001 ] ---> C:\WINDOWS\system32\dssec.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dssenh.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dsuiext.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dumprep.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\duser.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dvdupgrd.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\dwwin.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\dxmasf.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dxtmsft.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\dxtrans.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\edit.com
[28/08/2001 ] ---> C:\WINDOWS\system32\edit.hlp
[28/08/2001 ] ---> C:\WINDOWS\system32\edlin.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\ega.cpi
[28/08/2001 ] ---> C:\WINDOWS\system32\els.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ersvc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\esent.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\esent97.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\esentprf.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\esentprf.hxx
[28/08/2001 ] ---> C:\WINDOWS\system32\esentprf.ini
[28/08/2001 ] ---> C:\WINDOWS\system32\esentutl.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\eudcedit.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\eula.txt
[28/08/2001 ] ---> C:\WINDOWS\system32\eventcls.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\eventlog.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\eventvwr.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\eventvwr.msc
[28/08/2001 ] ---> C:\WINDOWS\system32\exe2bin.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\expand.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\expsrv.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\extrac32.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\exts.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\fastopen.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\faultrep.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\fc.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\feclient.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\filemgmt.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\find.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\findstr.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\finger.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\fixmapi.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\fldrclnr.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\fmifs.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\fontext.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\fontsub.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\fontview.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\forcedos.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\format.com
[28/08/2001 ] ---> C:\WINDOWS\system32\framebuf.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\fsmgmt.msc
[28/08/2001 ] ---> C:\WINDOWS\system32\fsusd.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\fsutil.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\ftp.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\ftsrch.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\g711codc.ax
[28/08/2001 ] ---> C:\WINDOWS\system32\gcdef.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\gdi.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\gdi32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\geo.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\glmf32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\glu32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\gpkcsp.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\gpkrsrc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\graftabl.com
[28/08/2001 ] ---> C:\WINDOWS\system32\graphics.com
[28/08/2001 ] ---> C:\WINDOWS\system32\graphics.pro
[28/08/2001 ] ---> C:\WINDOWS\system32\grpconv.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\HAL.DLL
[28/08/2001 ] ---> C:\WINDOWS\system32\hdwwiz.cpl
[28/08/2001 ] ---> C:\WINDOWS\system32\help.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\hidphone.tsp
[28/08/2001 ] ---> C:\WINDOWS\system32\himem.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\hlink.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\hnetcfg.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\hnetmon.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\hnetwiz.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\hostname.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\hotplug.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\htui.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\iac25_32.ax
[28/08/2001 ] ---> C:\WINDOWS\system32\iasacct.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\iasads.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\iashlpr.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\iasnap.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\iaspolcy.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\iasrad.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\iasrecst.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\iassam.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\iassdo.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\iassvcs.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\iccvid.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\icm32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\icmp.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\icmui.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\idq.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ie4uinit.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\ieakeng.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ieaksie.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ieakui.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\iedkcs32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\iepeers.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\iernonce.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\iesetup.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\iexpress.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\ifmon.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ifsutil.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\igmpagnt.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\imaadp32.acm
[28/08/2001 ] ---> C:\WINDOWS\system32\imagehlp.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\imapi.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\imeshare.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\imgutil.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\imm32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\inetcpl.cpl
[28/08/2001 ] ---> C:\WINDOWS\system32\inetcplc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\inetmib1.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\inetpp.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\inetppui.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\infosoft.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\initpki.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\input.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\instcat.sql
[28/08/2001 ] ---> C:\WINDOWS\system32\intl.cpl
[28/08/2001 ] ---> C:\WINDOWS\system32\iologmsg.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ipconf.tsp
[28/08/2001 ] ---> C:\WINDOWS\system32\ipconfig.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\IPHLPAPI(3).DLL
[28/08/2001 ] ---> C:\WINDOWS\system32\iphlpapi.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ipmontr.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ippromon.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\iprop.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\iprtprio.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\iprtrmgr.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ipsec6.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\ipsecsnp.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ipsecsvc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ipsmsnap.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ipv6.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\ipv6mon.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ipxmontr.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ipxpromn.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ipxrip.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ipxroute.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\ipxrtmgr.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ipxsap.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ipxwan.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ir32_32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ir41_32.ax
[28/08/2001 ] ---> C:\WINDOWS\system32\ir41_qc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ir41_qcx.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ir50_32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ir50_qc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ir50_qcx.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ivfsrc.ax
[28/08/2001 ] ---> C:\WINDOWS\system32\ixsso.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\jet500.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\jgaw400.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\jgdw400.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\jgmd400.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\jgpl400.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\jgsd400.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\jgsh400.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\jobexec.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\jscript.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\jsfr.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\jsproxy.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kb16.com
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdbe.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdbene.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdbr.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdca.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdcan.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdda.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbddv.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdes.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdfc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdfi.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdfo.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdfr.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdgae.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdgr.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdgr1.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdic.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdir.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdit.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdit142.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdla.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdmac.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdne.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdnec.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdno.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdpo.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdsf.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdsg.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdsp.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdsw.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbduk.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdus.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdusl.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdusr.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kbdusx.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kd1394.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kdcom.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\KDJWV.0XE
[28/08/2001 ] ---> C:\WINDOWS\system32\kerberos.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kernel32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\key01.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\keyboard.drv
[28/08/2001 ] ---> C:\WINDOWS\system32\keyboard.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\keymgr.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\kmddsp.tsp
[28/08/2001 ] ---> C:\WINDOWS\system32\krnl386.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\l_except.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\l_intl.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\l3codeca.acm
[28/08/2001 ] ---> C:\WINDOWS\system32\label.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\langwrbk.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\lanman.drv
[28/08/2001 ] ---> C:\WINDOWS\system32\LAPRXY.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\licdll.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\licmgr10.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\lights.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\linkinfo.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\lmhsvc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\lmrt.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\lnkstub.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\loadfix.com
[28/08/2001 ] ---> C:\WINDOWS\system32\loadperf.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\locale.nls
[28/08/2001 ] ---> C:\WINDOWS\system32\localsec.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\localspl.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\localui.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\locator.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\lodctr.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\logagent.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\loghours.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\logon.scr
[28/08/2001 ] ---> C:\WINDOWS\system32\logonui.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\lpk.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\lpq.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\lpr.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\lprhelp.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\lprmonui.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\lsasrv.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\lsass.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\lusrmgr.msc
[28/08/2001 ] ---> C:\WINDOWS\system32\lz32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\lzexpand.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mag_hook.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\magnify.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\main.cpl
[28/08/2001 ] ---> C:\WINDOWS\system32\makecab.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\mapistub.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mcastmib.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mcd32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mcdsrv32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mchgrcoi.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mciavi.drv
[28/08/2001 ] ---> C:\WINDOWS\system32\mciavi32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mcicda.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mciole16.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mciole32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mciseq.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mciseq.drv
[28/08/2001 ] ---> C:\WINDOWS\system32\mciwave.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mciwave.drv
[28/08/2001 ] ---> C:\WINDOWS\system32\mdhcp.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mdminst.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mem.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\mfc40.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mfc40loc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mfc40u.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mfc42.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mfc42loc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mfc42u.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mfcsubs.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mgmtapi.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mib.bin
[28/08/2001 ] ---> C:\WINDOWS\system32\midimap.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\miglibnt.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\migpwd.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\mimefilt.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mindex.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mlang.dat
[28/08/2001 ] ---> C:\WINDOWS\system32\mlang.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mll_hp.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mll_mtf.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mll_qic.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mmc.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\mmcbase.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mmcndmgr.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mmcshext.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mmdriver.inf
[28/08/2001 ] ---> C:\WINDOWS\system32\mmdrv.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mmsys.cpl
[28/08/2001 ] ---> C:\WINDOWS\system32\mmsystem.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mmtask.tsk
[28/08/2001 ] ---> C:\WINDOWS\system32\mmutilse.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mobsync.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mobsync.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\mode.com
[28/08/2001 ] ---> C:\WINDOWS\system32\modemui.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\modex.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\more.com
[28/08/2001 ] ---> C:\WINDOWS\system32\moricons.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mountvol.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\mouse.drv
[28/08/2001 ] ---> C:\WINDOWS\system32\MPG4DMOD.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mpg4ds32.ax
[28/08/2001 ] ---> C:\WINDOWS\system32\mpnotify.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\mpr.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mprapi.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mprddm.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mprdim.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mprmsg.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mprui.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mrinfo.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\msaatext.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msacm.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msacm32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msacm32.drv
[28/08/2001 ] ---> C:\WINDOWS\system32\msadds32.ax
[28/08/2001 ] ---> C:\WINDOWS\system32\msadp32.acm
[28/08/2001 ] ---> C:\WINDOWS\system32\msafd.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msapsspc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msasn1.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msaud32.acm
[28/08/2001 ] ---> C:\WINDOWS\system32\msaudite.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mscat32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mscdexnt.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\mscms.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mscpx32r.dLL
[28/08/2001 ] ---> C:\WINDOWS\system32\mscpxl32.dLL
[28/08/2001 ] ---> C:\WINDOWS\system32\msctf.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msctfp.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msdart.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msdatsrc.tlb
[28/08/2001 ] ---> C:\WINDOWS\system32\msdxm.ocx
[28/08/2001 ] ---> C:\WINDOWS\system32\msdxmlc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msencode.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msexch40.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msexcl40.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msg711.acm
[28/08/2001 ] ---> C:\WINDOWS\system32\msgina.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msgsm32.acm
[28/08/2001 ] ---> C:\WINDOWS\system32\msgsvc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mshta.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\mshtml.tlb
[28/08/2001 ] ---> C:\WINDOWS\system32\mshtmled.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mshtmler.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msi.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msident.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msidle.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msidntld.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msieftp.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msiexec.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\msihnd.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msimg32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msimsg.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msimtf.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msisam11.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msisip.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msjet40.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msjetoledb40.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msjint40.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msjter40.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msjtes40.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mslbui.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msls31.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msltus40.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msnetobj.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msnsspc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msobjs.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msorc32r.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msorcl32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mspatcha.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mspbde40.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\MsPMSP.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msports.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msprivs.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msr2c.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msr2cenu.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msratelc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msrating.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msrclr40.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msrd2x40.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msrd3x40.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msrepl40.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msrle32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msscds32.ax
[28/08/2001 ] ---> C:\WINDOWS\system32\msscp.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msscript.ocx
[28/08/2001 ] ---> C:\WINDOWS\system32\mssign32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mssip32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msswch.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msswchx.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\mstext40.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mstime.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mstlsapi.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msuni11.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msutb.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msv1_0.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msvbvm50.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msvbvm60.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msvcirt.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msvcp50.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msvcp60.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msvcrt.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msvcrt20.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msvcrt40.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msvfw32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msvidc32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msvideo.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msw3prt.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mswdat10.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mswmdm.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mswsock.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mswstr10.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msxbde40.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msxml.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msxml2.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msxml2r.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msxml3.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msxml3r.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\msxmlr.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mycomput.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\mydocs.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\narrator.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\narrhook.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\nbtstat.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\ncobjapi.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ncpa.cpl
[28/08/2001 ] ---> C:\WINDOWS\system32\ncxpnt.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\nddeapi.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\nddeapir.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\nddenb32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ndptsp.tsp
[28/08/2001 ] ---> C:\WINDOWS\system32\net.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\net.hlp
[28/08/2001 ] ---> C:\WINDOWS\system32\net1.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\netapi.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\netcfgx.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\netdde.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\netevent.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\neth.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\netid.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\netlogon.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\netman.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\netmsg.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\netplwiz.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\netrap.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\netsetup.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\netsh.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\netshell.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\netstat.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\netui0.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\netui1.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\netui2.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\newdev.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\nlhtml.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\nlsfunc.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\noise.chs
[28/08/2001 ] ---> C:\WINDOWS\system32\noise.cht
[28/08/2001 ] ---> C:\WINDOWS\system32\noise.dat
[28/08/2001 ] ---> C:\WINDOWS\system32\noise.deu
[28/08/2001 ] ---> C:\WINDOWS\system32\noise.eng
[28/08/2001 ] ---> C:\WINDOWS\system32\noise.enu
[28/08/2001 ] ---> C:\WINDOWS\system32\noise.esn
[28/08/2001 ] ---> C:\WINDOWS\system32\noise.fra
[28/08/2001 ] ---> C:\WINDOWS\system32\noise.ita
[28/08/2001 ] ---> C:\WINDOWS\system32\noise.nld
[28/08/2001 ] ---> C:\WINDOWS\system32\noise.sve
[28/08/2001 ] ---> C:\WINDOWS\system32\noise.tha
[28/08/2001 ] ---> C:\WINDOWS\system32\notepad.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\npptools.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\nslookup.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\ntdll.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ntdos.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\ntdos404.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\ntdos411.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\ntdos412.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\ntdos804.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\ntdsapi.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ntimage.gif
[28/08/2001 ] ---> C:\WINDOWS\system32\ntio.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\ntio404.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\ntio411.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\ntio412.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\ntio804.sys
[28/08/2001 ] ---> C:\WINDOWS\system32\ntlanman.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ntlanui.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ntlanui2.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ntlsapi.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ntmarta.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ntmsapi.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ntmsdba.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ntmsevt.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ntmsmgr.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ntmsmgr.msc
[28/08/2001 ] ---> C:\WINDOWS\system32\ntmsoprq.msc
[28/08/2001 ] ---> C:\WINDOWS\system32\ntmssvc.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ntoskrnl.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\ntprint.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ntsd.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\ntsdexts.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ntshrui.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ntvdm.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\nusrmgr.cpl
[28/08/2001 ] ---> C:\WINDOWS\system32\nwprovau.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\oakley.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\objsel.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\occache.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\ocmanage.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\odbc16gt.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\odbc32.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\odbc32gt.dll
[28/08/2001 ] ---> C:\WINDOWS\system32\odbcad32.exe
[28/08/2001 ] ---> C:\WINDOWS\system32\odbcbcp.dll

avec OAD, recherche vga.exe et ramene le rapport

fais une analyse antivirus de l'ensemble de ton disque dur en mode sans échec et ramène également le rapport

voila le rapport

10/11/2007 ---- 11:55:31,98

----------------------------------
§§§§§§ [vga.exe] §§§§§§
----------------------------------
[X] Registre

-------------- [ ] rapide
-- Fichier --- [ ] disque systeme
------------- [X] complete

********************
[Registre]
********************

[HKEY_USERS\S-1-5-21-1078081533-562591055-725345543-1005\Software\Microsoft\Search Assistant\ACMru\5603]
"000"="vga.exe "

[HKEY_USERS\S-1-5-21-1078081533-562591055-725345543-1005\Software\Microsoft\Windows\CurrentVersion\Run]
"File Spam"="C:\\DOCUME~1\\Mathieu\\APPLIC~1\\KNOBSO~1\\drv vga.exe"

*******************
[Fichier]
*******************

*********************
[Même date]
*********************

Aucun fichier créé à la même date détecté

Outil Aide Diagnostic By !aur3n7 Version 1.1
----------------------------------
§§§§§ Fin Rapport §§§§§
----------------------------------

Je le fais avec quoi l'annalyse de mon disque ? Quel logiciel ?

coches les lignes suivantes et cliques sur fixer ou fix checked
O4 - HKCU\..\Run: [File Spam] C:\DOCUME~1\Mathieu\APPLIC~1\KNOBSO~1\drv vga.exe

c'est bon !

Et je fais quoi ensuite ?

refais moi un log hijack stp

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:31:29, on 10/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
C:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
C:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
C:\Program Files\Securitoo\av_fw\Anti-Virus\FSGK32.EXE
C:\Program Files\Securitoo\av_fw\fswsclds.exe
C:\Program Files\Securitoo\av_fw\Anti-Virus\fssm32.exe
C:\WINDOWS\System32\mnmsrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
C:\Program Files\Securitoo\av_fw\Common\FSMB32.EXE
C:\Program Files\Securitoo\av_fw\Common\FCH32.EXE
C:\Program Files\Securitoo\av_fw\Common\FAMEH32.EXE
C:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Securitoo\av_fw\Anti-Virus\fsav32.exe
C:\Program Files\Securitoo\av_fw\backweb\1044199\Program\BackWeb-1044199.exe
C:\Program Files\Securitoo\av_fw\Common\FSM32.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\system32\ezSP_Px.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\PROGRA~1\WANADOO\CnxMon.exe
C:\PROGRA~1\MESSAG~1\StartMessager.exe
C:\PROGRA~1\WANADOO\TaskbarIcon.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\E-Color\True Internet Color\TICIcon.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Wanadoo\EspaceWanadoo.exe
C:\Program Files\Wanadoo\ComComp.exe
C:\Program Files\Wanadoo\Watch.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O4 - HKLM\..\Run: [PMXInit] C:\WINDOWS\System32\pmxinit.exe
O4 - HKLM\..\Run: [autoclk] autoclk.exe
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Securitoo\av_fw\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Securitoo\av_fw\TNB\TNBUtil.exe" /CHECKALL
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\system32\ezSP_Px.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MMTray] C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [P-Install] E:\Install\installerp1.exe f
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\WANADOO\CnxMon.exe
O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\TaskbarIcon.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [.nvsvc] C:\WINDOWS\system\smss.exe /w
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe -autorun
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: True Internet Color Icon.lnk = C:\Program Files\E-Color\True Internet Color\TICIcon.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZSzeb029YYFR_ZNxdm414YYFR
O8 - Extra context menu item: Ouvrir l'image dans &Microsoft PhotoDraw - res://C:\PROGRA~1\MICROS~2\Office\1036\phdintl.dll/phdContext.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab31267.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{7B325752-7244-4DC6-8BF6-89C8D8C05325}: NameServer = 80.10.246.1 81.253.149.10
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O23 - Service: Securitoo AntiVirus Firewall (BackWeb Client - 1044199) - Unknown owner - C:\PROGRA~1\SECURI~1\av_fw\backweb\1044199\Program\SERVIC~1.EXE
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\Securitoo\av_fw\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Authentication Agent (FSAA) - Unknown owner - C:\Program Files\Securitoo\av_fw\Common\FSAA.EXE (file missing)
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Securitoo\av_fw\backweb\1044199\program\fsbwsys.exe
O23 - Service: F-Secure Distributed Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\DFW\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\Common\FSMA32.EXE
O23 - Service: F-Secure Windows Security Center Legacy Detection Service (Fswsclds) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\fswsclds.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe

coches les lignes suivantes et cliques sur fixer ou fix checked
O4 - HKLM\..\Run: [.nvsvc] C:\WINDOWS\system\smss.exe /w

puis va ici
http://www.assistepc.com/forum/telechargement-utilisation-de-cwshredder-vt438.html
et utilises cwshrdder en suivant à la lettre le mode d'emploi

Désolé de repondre que maintenant mais j'ai eu un légé contre temps !
J'ai pus faire ce que tu m'a conseillé et ce pc remarche a la normal !
Je t'en remerci !!

Pour en revenir au moment même !
Je suis reveue dans ma maison principale .. et cette fois c'ets mon pc personnel qui a des problèmes

Blocage sur passage de programme a programme...
De grosse latence ...
Impossible de télécharger des videos ( Venant de Daylimotion, youtube ... Je tien a précisé !)

Bon voila .. je suppose un virus ...

Un petit hijackthis .. et dis moi ce que tu en pense ...

Merci d'avance!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:55:52, on 14/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\PACKSE~1\backweb\361343\Program\SERVIC~1.EXE
C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
C:\Program Files\Pack Securite\backweb\361343\Program\fspex.exe
C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
C:\Program Files\Pack Securite\backweb\361343\program\fsbwsys.exe
C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
C:\Program Files\Pack Securite\Common\FSMA32.EXE
C:\Program Files\Pack Securite\Common\FSMB32.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Pack Securite\Common\FCH32.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Pack Securite\Common\FAMEH32.EXE
C:\Program Files\Pack Securite\Anti-Virus\fsrw.exe
C:\Program Files\Pack Securite\FSPC\fspc.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Pack Securite\Common\FSM32.EXE
C:\Program Files\Pack Securite\FSGUI\ispnews.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\CameraAssistant.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
C:\Program Files\Philips\Sound Agent 2\mc500cpl.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\WINDOWS\BricoPacks\Crystal Clear\UberIcon\UberIcon Manager.exe
C:\Program Files\Kit ADSL\Wizard\Agent_WiFi.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
C:\WINDOWS\BricoPacks\Crystal Clear\YzShadow\YzShadow.exe
C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
C:\Program Files\Fichiers communs\Logitech\KhalShared\KHALMNPR.EXE
C:\PROGRA~1\PACKSE~1\ANTI-S~1\fsaw.exe
C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Logitech\Video\VideoEffectsWatcher.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Pack Securite\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [News Service] "C:\Program Files\Pack Securite\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [QveCtl2Tray] C:\Program Files\Philips\Sound Agent 2\mc500cpl.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WhenUSave] "C:\Program Files\Save\Save.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [UberIcon] "C:\WINDOWS\BricoPacks\Crystal Clear\UberIcon\UberIcon Manager.exe"
O4 - HKCU\..\Run: [TVAgent WiFi] C:\Program Files\Kit ADSL\Wizard\Agent_WiFi.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\YzShadow\YzShadow.exe
O4 - Startup: Y'z Toolbar.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Bloquer cette fenêtre publicitaire - C:\Program Files\Pack Securite\Anti-Spyware\blockpopups.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Filtre Web - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Filtre Web - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\Anti-Spyware\ieshield.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Pack Securite (BackWeb Plug-in - 361343) - Unknown owner - C:\PROGRA~1\PACKSE~1\backweb\361343\Program\SERVIC~1.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Pack Securite\backweb\361343\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Pack Securite\FSPC\fshttps\fshttps.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

va dans C:\Program Files et supprimes le dossier Save avec tout son contenu (c'est un spyware)
il faudra peut-être supprimer aussi quelques clés de la base de registre --> voir explications en anglais ci-dessous

WhenUSave Removal Instructions

Kill the following processes
save.exe, saveuninst.exe, savecms.exe, saveupdate.exe, searchupgrader.exe, sync.exe, uninst.exe

Delete these registry entries
HKEY_CLASSES_ROOT\wusn.1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\whenusave
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\whenusavemsg
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\whenusavepbtb
HKEY_LOCAL_MACHINE\software\whenusave

Remove the following files
save.cch, savecms.exe, saveupdate.exe, search.db, searchupgrader.exe, sync.exe, uninst.exe, whenusave.txt.
readme.txt, save.db, save.exe, save.htm, saveuninst.exe in Program Files\save\

Remove the following directories
Program Files\save

plus d'infos ici:http://www.spywaredb.com/remove-whenusave/

Puis vérifie ton PC avec un ou plusieurs anti-spywares (ad-aware, spybot search and destroy, AVG anti spyware etc)

Hum ...; Je l'ai aps ce dossier save dans programe Files ...

Je vais scaner le pc avec spybot !
Je te tien au courant!

pourtant il existe bien puisque tu as la ligne suivante dans ton log

O4 - HKCU\..\Run: [WhenUSave] "C:\Program Files\Save\Save.exe"

ce doit être un dossier caché aussi il faut activer l'affichage de ceux-ci pour le voir

Deja fais .. pas trouver .. je ne comprend pas ou il est!