un trojan qui persiste depuis quatre jours!!! Fermé

Question

Bonjour, je suis infecté par un trojan appelé trojan-spy.win32@max, depuis j'ai un triangle jaune avec un point d'exclamation qui apparait, des multitudes de nom de virus ou autres comme : networm-ivirus@fp, PSW.X-vir-trojan ou  trojan-spy.win32@max, de plus des fenêtres pop-up apparaît me demandant de télécharger des softwares pour me protéger, live safety center en bleu et online security guide en vert sont apparu sur mon bureau, là je suis à bout j'ai tout essayé , j'ai mis AVG anti-spyware , j'ai utilisé Cclearner et combifix mais vu que je ne m'y connait pas je ne sais pas trop quoi faire d'autres à part perdre mon sans froid , alors je vous demande de l'aide et je vous en remercie d'avance.

bainoit · Answer

essaye rogue remover il est spécialisé pour sa

havi · Answer

Merci :) je vais voir ce que ça donne !!!! sinon je reviendrais pour donner suite au sujet!!!

havi · Answer

Ce truc persiste toujours !!! je ne sais pas si j'ai fait un truc de travers mais quelqu'un aidez moi !!!! sinon je vais craquer !!! U___U'''

afideg · Answer

Salut avi

Commence comme ceci SVP:

Télécharge ComboFix.exe (par sUBs) sur ton Bureau: 
< http://download.bleepingcomputer.com/sUBs/ComboFix.exe  > -1,41 Mo (1.483.997 octets)
- Double clique sur l'icône de ComboFix.exe du bureau, [Exécuter] et suis les invites. 
Tape 1 puis [Enter] . Accepter les alertes éventuelles. Laisse se dérouler le scan. 
Lorsque le scan sera complété, un rapport apparaîtra sur le bureau. 

Tu copies et colles ce rapport sur le forum

Et si tu le peux, donne-moi le premier rapport de ComboFix que tu as fait.


Merci
Al.

havi · Answer

et Voilà ce que tu as demandé sur combofix afideg:

ComboFix 07-11-08.1 - valou2007-11-16 0:46:44.2 - NTFSx86
Running from: C:\Documents and Settings\valou\Bureau\ComboFix.exe
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Menu Démarrer\Live Safety Center.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Online Security Guide.lnk
C:\Documents and Settings\valou\Bureau\Live Safety Center.lnk
C:\Documents and Settings\valou\Bureau\Online Security Guide.lnk
C:\Documents and Settings\valou\Favoris\Online Security Guide.lnk
C:\WINDOWS\system32\zobhdqqo.dllbox

.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-10-15 to 2007-11-15 ))))))))))))))))))))))))))))))))))))
.

2007-11-16 00:16 <REP> d-------- C:\Program Files\RogueRemover FREE
2007-11-15 23:40 <REP> d-------- C:\Program Files\a-squared Anti-Malware
2007-11-15 22:03 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-11-15 21:22 <REP> d----c--- C:\hijackthis_199
2007-11-15 21:10 79,936 --a------ C:\WINDOWS\system32\pbfkwprl.dll
2007-11-15 21:07 85,056 --a------ C:\WINDOWS\system32\dngknxww.dll
2007-11-15 21:03 71,232 --a------ C:\WINDOWS\system32\mqplhvrx.exe
2007-11-15 06:54 4,528 --a------ C:\WINDOWS\system32\tmp.reg
2007-11-15 06:52 <REP> d----c--- C:\SmitfraudFix
2007-11-15 06:52 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2007-11-15 06:52 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2007-11-15 06:52 53,248 --a------ C:\WINDOWS\system32\Process.exe
2007-11-15 06:52 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2007-11-15 06:52 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2007-11-15 06:25 <REP> d-a--c--- C:\Documents and Settings\All Users\Application Data\TEMP
2007-11-15 06:24 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll
2007-11-15 06:24 153,088 --a------ C:\WINDOWS\system32\UNRAR3.dll
2007-11-15 06:24 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll
2007-11-15 06:24 75,264 --a------ C:\WINDOWS\system32\unacev2.dll
2007-11-15 06:24 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll
2007-11-15 06:23 <REP> d-------- C:\Program Files\Trojan Remover
2007-11-15 06:23 <REP> d----c--- C:\Documents and Settings\All Users\Application Data\Simply Super Software
2007-11-15 06:01 212,843 --a--c--- C:\hijackthis_199.zip
2007-11-15 05:01 <REP> d-------- C:\WINDOWS\BDOSCAN8
2007-11-15 00:20 79,424 --a------ C:\WINDOWS\system32\tngygkox.dll
2007-11-15 00:05 672,020 --a------ C:\WINDOWS\system32\pmodtoxh.ini.ren
2007-11-15 00:05 85,056 --a------ C:\WINDOWS\system32\hxotdomp.dll.ren
2007-11-14 08:08 <REP> d----c--- C:\Documents and Settings\All Users\Application Data\Grisoft
2007-11-14 08:08 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-11-14 07:47 <REP> d----c--- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2007-11-14 07:46 <REP> d-------- C:\Program Files\Yahoo!
2007-11-14 07:46 <REP> d-------- C:\Program Files\CCleaner
2007-11-13 14:56 71,232 --a------ C:\WINDOWS\system32\udxolurp.exe
2007-11-13 14:55 145,984 --a------ C:\WINDOWS\system32\zobhdqqo.dll
2007-11-13 14:54 145,984 --a------ C:\WINDOWS\system32\owaxberp.dll
2007-11-12 17:28 35,328 --a------ C:\WINDOWS\system32\vtuvvwv.dll
2007-11-12 17:27 288,307 --a------ C:\WINDOWS\system32\prqss.ini2.ren
2007-11-12 17:27 288,307 --a------ C:\WINDOWS\system32\prqss.ini.ren
2007-11-12 17:26 35,328 --a------ C:\WINDOWS\system32\wvuusrq.dll
2007-11-12 17:22 <REP> d-------- C:\WINDOWS\system32\rMa01yy
2007-11-12 17:22 <REP> d--hs---- C:\WINDOWS\dmFs6XJpZQ
2007-11-12 17:22 <REP> d----c--- C:\Temp\abW9
2007-11-12 17:22 <REP> d----c--- C:\Temp
2007-11-12 17:22 35,328 --a------ C:\WINDOWS\system32\khfcded.dll
2007-10-25 10:26 53,248 --a------ C:\WINDOWS\bdoscandel.exe
2007-10-22 00:46 <REP> d-------- C:\WINDOWS\system32\AlertModule
2007-10-22 00:46 40,960 --a------ C:\WINDOWS\system32\FTRTSVC.exe
2007-10-22 00:46 36,864 --a------ C:\WINDOWS\system32\IfHelper.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-11-15 16:30 --------- d-----w C:\Program Files\Wanadoo
2007-11-13 23:41 --------- dc----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-11-13 09:00 --------- d-----w C:\Program Files\Microsoft Picture It! 9
2007-10-20 19:10 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-08-02 13:43 282,624 ----a-w C:\Program Files\TTC.dll
1999-07-07 00:00:00 6 --sh--r C:\WINDOWS\@@desktop.dat
1999-07-07 00:00:00 6 --sh--r C:\WINDOWS\@desktop@.dat
2005-08-11 13:48:57 104 -csh--r C:\WINDOWS\system32\9060AE1E38.sys
2006-05-30 11:35:34 4,704 -csha-w C:\WINDOWS\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4ec34730-1724-4592-b5aa-e6560066ea37}]
2007-11-15 21:10 79936 --a------ C:\WINDOWS\System32\pbfkwprl.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A95B2816-1D7E-4561-A202-68C0DE02353A}]
2007-11-13 14:55 145984 --a------ C:\WINDOWS\system32\zobhdqqo.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{11A69AE4-FBED-4832-A2BF-45AF82825583}"= C:\WINDOWS\system32\zobhdqqo.dll [2007-11-13 14:55 145984]

[HKEY_CLASSES_ROOT\CLSID\{11A69AE4-FBED-4832-A2BF-45AF82825583}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="C:\Program Files\Apoint2K\Apoint.exe" [2003-10-08 11:40]
"ATIModeChange"="Ati2mdxx.exe" [2004-04-02 15:16 C:\WINDOWS\system32\Ati2mdxx.exe]
"Cpqset"="C:\Program Files\HPQ\Default Settings\cpqset.exe" [2004-03-01 22:05]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-03-26 03:00]
"SunJavaUpdateSched"="C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe" [2004-05-13 18:34]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2004-01-27 22:52]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2004-05-13 18:54]
"eabconfg.cpl"="C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe" [2004-01-13 15:21]
"UpdateManager"="C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" [2003-08-19 07:01]
"HPHUPD05"="c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe" []
"HPHmon05"="C:\WINDOWS\System32\hphmon05.exe" [2003-05-23 01:56]
"ccApp"="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" [2006-04-04 11:55]
"AGRSMMSG"="AGRSMMSG.exe" [2003-10-30 21:40 C:\WINDOWS\AGRSMMSG.exe]
"Microsoft Works Update Detection"="C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe" [2003-06-11 00:49]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50]
"Symantec NetDriver Monitor"="C:\PROGRA~1\SYMNET~1\SNDMon.exe" [2006-11-16 00:18]
"HP Software Update"="C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" [2005-02-16 23:11]
"WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-08-23 13:49]
"WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\GestMaj.exe" [2004-10-14 15:55]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 17:25]
"TrojanScanner"="C:\Program Files\Trojan Remover\Trjscan.exe" [2007-11-11 13:42]
"71553283"="C:\WINDOWS\System32\dngknxww.dll" [2007-11-15 21:07]
"a-squared"="C:\Program Files\a-squared Anti-Malware\a2guard.exe" [2007-08-31 20:24]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RecordNow!"="" []
"WOOKIT"="C:\PROGRA~1\Wanadoo\Shell.exe" [2004-08-23 13:50]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-05-21 09:38]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 15:45]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-11-15 16:18]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\zobhdqqo]
zobhdqqo.dll 2007-11-13 14:55 145984 C:\WINDOWS\system32\zobhdqqo.dll

.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2006-10-27 13:39:26 C:\WINDOWS\Tasks\Connexion Facile à Internet.job"
"2005-11-02 08:45:30 C:\WINDOWS\Tasks\Norton AntiVirus - Analyser mon ordinateur - valérie.job"
"2007-11-15 17:03:00 C:\WINDOWS\Tasks\Symantec NetDetect.job"
- C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE
.
**************************************************************************

catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-16 00:59:15
Windows 5.1.2600 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Cpqset = C:\Program Files\HPQ\Default Settings\cpqset.exe?????????A)w?????????? ???B???????????????B? ??????

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-11-16 1:04:21 - machine was rebooted
C:\ComboFix2.txt ... 2007-11-15 22:25
.
--- E O F ---

havi · Answer

et voilà le premier rapport de combofix que j'ai fait effectué comme je pouvais , désoler pour le double post !!!

ComboFix 07-11-08.1 - valou 2007-11-15 22:06:19.1 - NTFSx86
Running from: C:\Documents and Settings\valou\Bureau\ComboFix.exe
* Created a new restore point
.

Incapable d'obtenir les privilèges Système

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Application Data.\salesmonitor
C:\Documents and Settings\All Users\Menu Démarrer\Live Safety Center.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Online Security Guide.lnk
C:\Documents and Settings\valou\Application Data\BestsellerAntivirus
C:\Documents and Settings\valou\Application Data\BestsellerAntivirus\avtasks.dat
C:\Documents and Settings\valou\Application Data\BestsellerAntivirus\Logs\av.log
C:\Documents and Settings\valou\Application Data\BestsellerAntivirus\Logs\ga6Support.log
C:\Documents and Settings\valou\Application Data\BestsellerAntivirus\Logs\update.log
C:\Documents and Settings\valou\Bureau\Live Safety Center.lnk
C:\Documents and Settings\valou\Bureau\Online Security Guide.lnk
C:\Documents and Settings\valou\Favoris\Online Security Guide.lnk
C:\Documents and Settings\valou\ResErrors.log
C:\Program Files\BestsellerAntivirus
C:\Program Files\BestsellerAntivirus\history.db
C:\Temp\1cb
C:\Temp\1cb\syscheck.log
C:\UGA6P
C:\WINDOWS\cookies.ini
C:\WINDOWS\system32\atmtd.dll
C:\WINDOWS\system32\atmtd.dll._
C:\WINDOWS\system32\c3
C:\WINDOWS\system32\k1
C:\WINDOWS\system32\k1\jumper83122.exe
C:\WINDOWS\system32\o4
C:\WINDOWS\system32\o4\revdrive33b.exe
C:\WINDOWS\system32\pac.txt
C:\WINDOWS\system32\prqss.ini
C:\WINDOWS\system32\prqss.ini2
C:\WINDOWS\System32\ssqrp.dll
C:\WINDOWS\system32\zobhdqqo.dllbox

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.
-------\LEGACY_CMDSERVICE
-------\LEGACY_DOMAINSERVICE
-------\LEGACY_FMTR
-------\LEGACY_NETWORK_MONITOR
-------\cmdService
-------\DomainService

((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-10-15 to 2007-11-15 ))))))))))))))))))))))))))))))))))))
.

2007-11-15 22:03 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-11-15 21:22 <REP> d----c--- C:\hijackthis_199
2007-11-15 21:10 79,936 --a------ C:\WINDOWS\system32\pbfkwprl.dll
2007-11-15 21:07 85,056 --a------ C:\WINDOWS\system32\dngknxww.dll
2007-11-15 21:03 71,232 --a------ C:\WINDOWS\system32\mqplhvrx.exe
2007-11-15 06:54 4,528 --a------ C:\WINDOWS\system32\tmp.reg
2007-11-15 06:52 <REP> d----c--- C:\SmitfraudFix
2007-11-15 06:52 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2007-11-15 06:52 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2007-11-15 06:52 53,248 --a------ C:\WINDOWS\system32\Process.exe
2007-11-15 06:52 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2007-11-15 06:52 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2007-11-15 06:25 <REP> d-a--c--- C:\Documents and Settings\All Users\Application Data\TEMP
2007-11-15 06:24 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll
2007-11-15 06:24 153,088 --a------ C:\WINDOWS\system32\UNRAR3.dll
2007-11-15 06:24 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll
2007-11-15 06:24 75,264 --a------ C:\WINDOWS\system32\unacev2.dll
2007-11-15 06:24 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll
2007-11-15 06:23 <REP> d-------- C:\Program Files\Trojan Remover
2007-11-15 06:23 <REP> d----c--- C:\Documents and Settings\All Users\Application Data\Simply Super Software
2007-11-15 06:01 212,843 --a--c--- C:\hijackthis_199.zip
2007-11-15 05:01 <REP> d-------- C:\WINDOWS\BDOSCAN8
2007-11-15 00:20 79,424 --a------ C:\WINDOWS\system32\tngygkox.dll
2007-11-15 00:05 672,020 --a------ C:\WINDOWS\system32\pmodtoxh.ini.ren
2007-11-15 00:05 85,056 --a------ C:\WINDOWS\system32\hxotdomp.dll.ren
2007-11-14 08:08 <REP> d----c--- C:\Documents and Settings\All Users\Application Data\Grisoft
2007-11-14 08:08 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-11-14 07:47 <REP> d----c--- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2007-11-14 07:46 <REP> d-------- C:\Program Files\Yahoo!
2007-11-14 07:46 <REP> d-------- C:\Program Files\CCleaner
2007-11-13 14:56 71,232 --a------ C:\WINDOWS\system32\udxolurp.exe
2007-11-13 14:55 145,984 --a------ C:\WINDOWS\system32\zobhdqqo.dll
2007-11-13 14:54 145,984 --a------ C:\WINDOWS\system32\owaxberp.dll
2007-11-12 17:28 35,328 --a------ C:\WINDOWS\system32\vtuvvwv.dll
2007-11-12 17:27 288,307 --a------ C:\WINDOWS\system32\prqss.ini2.ren
2007-11-12 17:27 288,307 --a------ C:\WINDOWS\system32\prqss.ini.ren
2007-11-12 17:26 35,328 --a------ C:\WINDOWS\system32\wvuusrq.dll
2007-11-12 17:22 <REP> d-------- C:\WINDOWS\system32\rMa01yy
2007-11-12 17:22 <REP> d--hs---- C:\WINDOWS\dmFs6XJpZQ
2007-11-12 17:22 <REP> d----c--- C:\Temp\abW9
2007-11-12 17:22 <REP> d----c--- C:\Temp
2007-11-12 17:22 35,328 --a------ C:\WINDOWS\system32\khfcded.dll
2007-10-25 10:26 53,248 --a------ C:\WINDOWS\bdoscandel.exe
2007-10-22 00:46 <REP> d-------- C:\WINDOWS\system32\AlertModule
2007-10-22 00:46 40,960 --a------ C:\WINDOWS\system32\FTRTSVC.exe
2007-10-22 00:46 36,864 --a------ C:\WINDOWS\system32\IfHelper.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-11-15 14:01 --------- d-----w C:\Program Files\Wanadoo
2007-11-13 23:41 --------- dc----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-11-13 09:00 --------- d-----w C:\Program Files\Microsoft Picture It! 9
2007-10-20 19:10 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-09-09 13:27 808,720 ----a-w C:\WINDOWS\system32\pdrtvctl.dll
2007-09-09 13:27 210,704 ----a-w C:\WINDOWS\system32\pdrtvf2.dll
2007-09-09 13:27 206,608 ----a-w C:\WINDOWS\system32\pdrtvsvr.exe
2007-09-09 13:27 153,360 ----a-w C:\WINDOWS\system32\pdrtvf1.dll
2007-09-09 13:27 1,097,488 ----a-w C:\WINDOWS\system32\pavc.dll
2007-08-02 13:43 282,624 ----a-w C:\Program Files\TTC.dll
1999-07-07 00:00:00 6 --sh--r C:\WINDOWS\@@desktop.dat
1999-07-07 00:00:00 6 --sh--r C:\WINDOWS\@desktop@.dat
2005-08-11 13:48:57 104 -csh--r C:\WINDOWS\system32\9060AE1E38.sys
2006-05-30 11:35:34 4,704 -csha-w C:\WINDOWS\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4ec34730-1724-4592-b5aa-e6560066ea37}]
2007-11-15 21:10 79936 --a------ C:\WINDOWS\System32\pbfkwprl.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A95B2816-1D7E-4561-A202-68C0DE02353A}]
2007-11-13 14:55 145984 --a------ C:\WINDOWS\system32\zobhdqqo.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{11A69AE4-FBED-4832-A2BF-45AF82825583}"= C:\WINDOWS\system32\zobhdqqo.dll [2007-11-13 14:55 145984]

[HKEY_CLASSES_ROOT\CLSID\{11A69AE4-FBED-4832-A2BF-45AF82825583}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="C:\Program Files\Apoint2K\Apoint.exe" [2003-10-08 11:40]
"ATIModeChange"="Ati2mdxx.exe" [2004-04-02 15:16 C:\WINDOWS\system32\Ati2mdxx.exe]
"Cpqset"="C:\Program Files\HPQ\Default Settings\cpqset.exe" [2004-03-01 22:05]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-03-26 03:00]
"SunJavaUpdateSched"="C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe" [2004-05-13 18:34]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2004-01-27 22:52]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2004-05-13 18:54]
"eabconfg.cpl"="C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe" [2004-01-13 15:21]
"UpdateManager"="C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" [2003-08-19 07:01]
"HPHUPD05"="c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe" []
"HPHmon05"="C:\WINDOWS\System32\hphmon05.exe" [2003-05-23 01:56]
"ccApp"="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" [2006-04-04 11:55]
"AGRSMMSG"="AGRSMMSG.exe" [2003-10-30 21:40 C:\WINDOWS\AGRSMMSG.exe]
"Microsoft Works Update Detection"="C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe" [2003-06-11 00:49]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50]
"Symantec NetDriver Monitor"="C:\PROGRA~1\SYMNET~1\SNDMon.exe" [2006-11-16 00:18]
"HP Software Update"="C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" [2005-02-16 23:11]
"WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-08-23 13:49]
"WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\GestMaj.exe" [2004-10-14 15:55]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 17:25]
"TrojanScanner"="C:\Program Files\Trojan Remover\Trjscan.exe" [2007-11-11 13:42]
"71553283"="C:\WINDOWS\System32\dngknxww.dll" [2007-11-15 21:07]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RecordNow!"="" []
"WOOKIT"="C:\PROGRA~1\Wanadoo\Shell.exe" [2004-08-23 13:50]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-05-21 09:38]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 15:45]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-11-15 16:18]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\zobhdqqo]
zobhdqqo.dll 2007-11-13 14:55 145984 C:\WINDOWS\system32\zobhdqqo.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Authentication Packages"= msv1_0 C:\WINDOWS\System32\ssqrp.dll

R0 $sys$cor;$sys$cor;C:\WINDOWS\System32\Drivers\$sys$cor.sys
R1 $sys$crater;$sys$crater;\??\C:\WINDOWS\System32\$sys$filesystem\crater.sys
R1 Cinemsup;Cinemsup;C:\WINDOWS\System32\drivers\Cinemsup.sys
R2 $sys$DRMServer;Plug and Play Device Manager;C:\WINDOWS\System32\$sys$filesystem\$sys$DRMServer.exe
R2 CD_Proxy;XCP CD Proxy;C:\WINDOWS\CDProxyServ.exe
S3 CE3;Service de la carte Xircom Ethernet 10/100;C:\WINDOWS\System32\DRIVERS\ce3n5.sys
S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\System32\DRIVERS\usbscan.sys
S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS

.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2006-10-27 13:39:26 C:\WINDOWS\Tasks\Connexion Facile à Internet.job"
"2005-11-02 08:45:30 C:\WINDOWS\Tasks\Norton AntiVirus - Analyser mon ordinateur - valérie.job"
"2007-11-15 14:23:00 C:\WINDOWS\Tasks\Symantec NetDetect.job"
- C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE
.
**************************************************************************

catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-15 22:13:43
Windows 5.1.2600 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Cpqset = C:\Program Files\HPQ\Default Settings\cpqset.exe?????????A)w?????????? ???B???????????????B? ??????

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-11-15 22:25:29 - machine was rebooted
.
--- E O F ---

afideg · Answer

Re,
Merci
Patiente, je passe à table.
À ce soir.

Fais ceci en attendanr SVP :

1)- Fais un ScanOnline PANDA( sous Internet explorer donc )< https://www.pandasecurity.com/?ref=www.pandasoftware.com/activescan/fr/activescan_principal.htm >
•- Procédure : "Analyser votre pc" -> "suivant" -> remplir adresse mail (factice) -> Pays/Etat-région -> envoyer -> laisser se dérouler le téléchargement du contrôle ActiveX -> sélectionner "Poste de Travail" -> fermer la popup.
•- Un tuto < https://www.malekal.com/scan-antivirus-ligne-nod32/ > ) ou là < https://www.malekal.com/scan-antivirus-ligne-nod32/#mozTocId23736 >
NOTE* A la fin du scanning, sauvegarde et fais un copier/coller du rapport d'analyse dans ta prochaine réponse
Attention!! Panda peut entrer en conflit avec autre antivirus . Par exemple, pour pouvoir télécharger le contrôle active x de Panda, il faut que tu désactives le bouclier web d'Avast le temps du scan.

2)- ScanOnline secuser.com http://support.f-secure.fr/fra/home/ols.shtml
Activer les Actives X

Merci

Al

havi · Answer

et me revoilà !! voilà le rapport en question sous panda:


;***********************************************************************************************************************************************************************************
ANALYSIS: 2007-11-16 03:06:54
PROTECTIONS: 1
MALWARE: 14
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description                                  Version                       Active    Updated
;===================================================================================================================================================================================
Norton Antivirus 2004                        10.00.10                      No        No
;===================================================================================================================================================================================
MALWARE
Id        Description                        Type                Active    Severity  Disinfectable  Disinfected Location
;===================================================================================================================================================================================
00139061  Cookie/Doubleclick                 TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@doubleclick[1].txt
00139535  Application/Processor              HackTools           No        0         Yes            No           C:\WINDOWS\system32\Process.exe
00145457  Cookie/FastClick                   TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@fastclick[1].txt
00147824  Cookie/Clickbank                   TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@clickbank[2].txt
00167642  Cookie/Com.com                     TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@com[1].txt
00167704  Cookie/Xiti                        TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@xiti[1].txt
00168106  Cookie/Weborama                    TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@weborama[2].txt
00169190  Cookie/Advertising                 TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@advertising[2].txt
00173520  Cookie/Bluestreak                  TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@bluestreak[1].txt
00273339  Cookie/Smartadserver               TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@smartadserver[1].txt
00508894  Rootkit/XCP                        HackTools           Yes       1         Yes            No           C:\WINDOWS\SYSTEM32\$SYS$FILESYSTEM\$SYS$DRMSERVER.EXE
01262593  Application/NirCmd.A               HackTools           No        0         Yes            No           C:\WINDOWS\NirCmd.exe
02688344  Spyware/Virtumonde                 Spyware             No        1         Yes            No           C:\WINDOWS\system32\udxolurp.exe
02688344  Spyware/Virtumonde                 Spyware             No        1         Yes            No           C:\WINDOWS\system32\mqplhvrx.exe
02688348  Spyware/Virtumonde                 Spyware             Yes       2         Yes            No           C:\WINDOWS\SYSTEM32\ZOBHDQQO.DLL
02688348  Spyware/Virtumonde                 Spyware             No        1         Yes            No           C:\WINDOWS\system32\owaxberp.dll
;===================================================================================================================================================================================
SUSPECTS
Location
;===================================================================================================================================================================================
;===================================================================================================================================================================================

havi · Answer

une partie du rapport est mal sortie le revoilà ici! 

;***********************************************************************************************************************************************************************************
ANALYSIS: 2007-11-16 03:06:54
PROTECTIONS: 1
MALWARE: 14
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description                                  Version                       Active    Updated
;===================================================================================================================================================================================
Norton Antivirus 2004                        10.00.10                      No        No
;===================================================================================================================================================================================
MALWARE
Id        Description                        Type                Active    Severity  Disinfectable  Disinfected Location
;===================================================================================================================================================================================
00139061  Cookie/Doubleclick               TrackingCookie      No        0       Yes     No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@doubleclick[1].txt
00139535  Application/Processor            HackTools           No        0       Yes     No           C:\WINDOWS\system32\Process.exe
00145457  Cookie/FastClick                 TrackingCookie      No        0       Yes     No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@fastclick[1].txt
00147824  Cookie/Clickbank                 TrackingCookie      No        0       Yes     No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@clickbank[2].txt
00167642  Cookie/Com.com                   TrackingCookie      No        0       Yes     No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@com[1].txt
00167704  Cookie/Xiti                      TrackingCookie      No        0       Yes     No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@xiti[1].txt
00168106  Cookie/Weborama                  TrackingCookie      No        0       Yes     No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@weborama[2].txt
00169190  Cookie/Advertising               TrackingCookie      No        0       Yes     No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@advertising[2].txt
00173520  Cookie/Bluestreak                TrackingCookie      No        0       Yes     No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@bluestreak[1].txt
00273339  Cookie/Smartadserver             TrackingCookie      No        0       Yes     No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@smartadserver[1].txt
00508894  Rootkit/XCP                      HackTools           Yes       1       Yes     No           C:\WINDOWS\SYSTEM32\$SYS$FILESYSTEM\$SYS$DRMSERVER.EXE
01262593  Application/NirCmd.A             HackTools           No        0       Yes     No           C:\WINDOWS\NirCmd.exe
02688344  Spyware/Virtumonde               Spyware             No        1       Yes     No           C:\WINDOWS\system32\udxolurp.exe
02688344  Spyware/Virtumonde               Spyware             No        1       Yes     No           C:\WINDOWS\system32\mqplhvrx.exe
02688348  Spyware/Virtumonde               Spyware             Yes       2       Yes     No           C:\WINDOWS\SYSTEM32\ZOBHDQQO.DLL
02688348  Spyware/Virtumonde               Spyware             No        1       Yes     No           C:\WINDOWS\system32\owaxberp.dll
;===================================================================================================================================================================================
SUSPECTS
Location
;===================================================================================================================================================================================
;===================================================================================================================================================================================

afideg · Answer

Merci
C'est pas de la tarte cette infection.
Nous n'aurons pas fini ce soir.

A1)- Poste le rapport ScanOnline secuser s'il y en a un. SVP.

B2)- Télécharge VirtumundoBegone sur le bureau:
http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

Double clique ensuite sur VirtumundoBeGone.exe et suis les instructions.
Une fois terminé, redémarre et poste le rapport VBG.TXT créé sur le bureau
dans ta prochaine réponse.
Ne t'inquiète pas si tu vois un message Ecran bleu "Erreur fatale", c'est normal et attendu.

C3)- Effectuer un eScan Antivirus Toolkit < https://www.malekal.com/tutorial-escan-antivirus-toolkit/ >

À exécuter en mode sans échec (< http://www.coupdepoucepc.com/modules/news/article.php?storyid=253 > ) et restauration système désactivée (< http://www.libellules.ch/desactiver_restauration.php > afin de pouvoir effectuer un nettoyage complet.

Étape 1:

Télécharge eScan Antivirus Toolkit ici:

http://www.spywareinfo.dk/download/mwav.exe

Sauvegarde-le sur ton Bureau.
Avant de lancer le programme, il faut le mettre à jour tel qu'indiqué à l'étape 2.

Étape 2:

Voici comment mettre l'outil à jour :

1.) Double-clique le fichier mwav.exe qui se trouve sur le Bureau > puis [Exécuter]
Dézippe les fichiers dans le nouveau dossier suggéré (C:\Kaspersky)
< https://www.hiboox.com >
Le programme va se lancer, et tu dois le quitter (clique sur "Exit" puis "Exit").
< https://www.hiboox.com >

2.) Double-clique sur le Poste de travail, puis double-clique sur le lecteur principal (habituellement C:\), double-clique sur le dossier "Kaspersky" ; ensuite, double-clique sur le fichier kavupd.exe.
< https://www.hiboox.com >
Tu verras maintenant une fenêtre DOS apparaître, et la mise à jour se complètera en quelques minutes

3.) Lorsque la mise à jour sera complétée, tu verras "Press any key to continue" ; tape sur une clé pour continuer. Deux nouveaux répertoires (dossiers) ont été créés lors de la mise à jour (C:\Bases et C:\Downloads).

4.) Sélectionne/copie tous les fichiers présents dans le dossier C:\Downloads, puis colle-les dans le dossier C:\Kaspersky. Accepte à l'invite de remplacer les fichiers existants.

Ne pas lancer le scan tout de suite !

Étape 3:

•- Désactive la restauration système :
"Démarrer"> clic droit sur "Poste de Travail"> "Propriétés système"> onglet "Restauration du système"> cocher la case "Désactiver la Restauration du système" > [Appliquer] >OK
Pour la suite, tu n’auras pas accès à Internet, ni donc à CCM ; copie ou imprime donc la procédure suivante pour ne rien oublier .

•- Redémarre en mode Sans Échec :
http://www.coupdepoucepc.com/modules/news/article.php?storyid=253 >
Choisir sa session habituelle, (pas le compte "Administrateur" ou une autre).

Étape 4:

Sous le Mode Sans Échec, voici comment utiliser le programme :

1.) Pour lancer "eScan Antivirus Toolkit", trouve le fichier « mwavscan.com » situé dans le dossier C:\Kaspersky

2.) Double-clique sur « mwavscan.com » ; l'interface d'eScan va apparaître à l'écran.

3.) Coche les options comme indiquées sur cette page < https://www.malekal.com/fichiers/eScan/eScan3.png > ; c’est-à-dire:

- Il est très important de bien cocher ces boîtes sous Scan Option : Memory, Registry, Startup Folders, System Folders, Services.

4.) Coche la boîte Drive, ce qui donne accès à une nouvelle boîte Drive (bouton rond) juste dessous ; coche ce bouton "Drive" (très important..), et tu verras une nouvelle boîte de navigation apparaître à la droite. Clique sur la petite flèche de cette boîte and choisi la lettre de ton disque dur, habituellement C:\.

5.) Juste au-dessous, assure-toi que Scan All Files est coché, (et non "Program Files").

6.) Puis en bas à droite, clic sur « Scan Clean » et laisse l’outil vérifier tout le disque dur (ça peut être long..). Lorsque terminé, tu verras « Scan Completed ». Ne pas quitter tout de suite !

7.) Ouvre un nouveau fichier Bloc notes (clique sur "Démarrer" >> "Programmes" >>"Accessoires" >> "Bloc notes"), puis copie/colle tout le contenu de la fenêtre « Virus Log Information » (la deuxième, au bas) dans le fichier texte, et sauvegarde-le sur le bureau ( pour le retrouver facilement – donne-lui un nom, par ex KAS -).

(eScan génère également un rapport complet dans le dossier C:\Kaspersky (nommé mwav.log), mais il est trop lourd pour poster sur le forum).

Ferme le programme.

Redémarre ton PC en mode Normal.

Ensuite réactive ta restauration système
Clic droit sur « Poste de travail », puis sur « Propriétés »,
Vas sur l’onglet « Restauration système »
Tu décoches la case « Désactiver la restauration »
Termine par [Appliquer] [OK]

Poste (copie/colle) le rapport que tu as sauvegardé dans ta prochaine réponse.

D)- Relance une analyse ComboFix.

Sois patient surtout.
Et ne fais rien d'autre que ce qui est demandé.

Merci

havi · Answer

le rapport scan online comme fait :


F-Secure Online Scanner 3.1.5 - Scanning Report - Friday, November 16, 2007 05:33:02Scanning 
Report
Friday, November 16, 2007 03:55:48 - 05:33:00
Computer name: LUMINA 
Scanning type: Scan system for viruses, rootkits, spyware 
Target: C:\ 



Result: 16 malware found
Tracking Cookie (spyware) 
  System (Disinfected) 
  System 
  System 
  System 
  System 
  System 
  System 
  System 
  System 
Trojan-Downloader.Win32.VB.bsp (virus) 
  C:\WINDOWS\SYSTEM32\RMA01YY\RMA01YY1065.EXE (Renamed) 
Trojan.Win32.Obfuscated.kp (virus) 
  C:\WINDOWS\SYSTEM32\MQPLHVRX.EXE (Renamed) 
  C:\WINDOWS\SYSTEM32\UDXOLURP.EXE (Renamed) 
Vundo.gen42 (virus) 
  C:\WINDOWS\SYSTEM32\KHFCDED.DLL 
  C:\WINDOWS\SYSTEM32\VTUVVWV.DLL 
  C:\WINDOWS\SYSTEM32\WVUUSRQ.DLL 
W32/Malware.JR (virus) 
  C:\WINDOWS\SYSTEM32\$SYS$FILESYSTEM\$SYS$DRMSERVER.EXE 



Statistics
Scanned:
  Files: 32910 
  System: 5080 
  Not scanned: 9 
Actions:
  Disinfected: 1 
  Renamed: 3 
  Deleted: 0 
  None: 12 
  Submitted: 0 
Files not scanned:
  C:\HIBERFIL.SYS 
  C:\PAGEFILE.SYS 
  C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT 
  C:\WINDOWS\$NTUNINSTALLKB828035$\MSGSVC.DLL 
  C:\WINDOWS\$NTUNINSTALLKB828028$\MSASN1.DLL 
  C:\WINDOWS\$NTUNINSTALLKB826942$\DHCPCSVC.DLL 
  C:\WINDOWS\$NTUNINSTALLKB826942$\WZCDLG.DLL 
  C:\WINDOWS\$NTUNINSTALLKB826939$\ACCWIZ.EXE 
  C:\WINDOWS\$NTUNINSTALLKB824141$\USER32.DLL 



Options
Scanning engines:
  F-Secure Libra: 2.4.2, 2007-11-15 
  F-Secure AVP: 7.0.171, 2007-11-15 
  F-Secure Orion: 1.2.37, 2007-11-15 
  F-Secure Blacklight: 1.0.64 
  F-Secure Draco: 1.0.35, 0597-150-72 
  F-Secure Pegasus: 1.19.0, 2007-10-12 
Scanning options:
  Scan defined files: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF 
  VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI 
  MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 
  TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB BAT LNK ANI AVB CEO CMD LSP MAP MHT 
  MIF PDF PHP POT WMF NWS TAR TGZ WSF ZL? {* ZIP JAR ARJ LZH TAR TGZ GZ CAB RAR 
  BZ2 HQX 
  Use Advanced heuristics 



  Copyright © 1998-2006 Product support |Send virus sample to F-Secure

havi · Answer

Le rapport VBG.txt est fait :


[11/16/2007, 5:41:44] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\valou\Bureau\VirtumundoBeGone.exe" )
[11/16/2007, 5:42:00] - Detected System Information:
[11/16/2007, 5:42:00] -  Windows Version: 5.1.2600, Service Pack 1
[11/16/2007, 5:42:00] -  Current Username: valou (Admin)
[11/16/2007, 5:42:00] -  Windows is in NORMAL mode.
[11/16/2007, 5:42:00] - Searching for Browser Helper Objects:
[11/16/2007, 5:42:00] -  BHO 1: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (Yahoo! Toolbar Helper)
[11/16/2007, 5:42:00] -  BHO 2: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Adobe PDF Reader Link Helper)
[11/16/2007, 5:42:00] -  BHO 3: {4ec34730-1724-4592-b5aa-e6560066ea37} ()
[11/16/2007, 5:42:00] - WARNING: BHO has no default name. Checking for Winlogon reference.
[11/16/2007, 5:42:00] -  Checking for HKLM\...\Winlogon\Notify\pbfkwprl
[11/16/2007, 5:42:00] -  Key not found: HKLM\...\Winlogon\Notify\pbfkwprl, continuing.
[11/16/2007, 5:42:00] -  BHO 4: {A95B2816-1D7E-4561-A202-68C0DE02353A} ()
[11/16/2007, 5:42:00] - WARNING: BHO has no default name. Checking for Winlogon reference.
[11/16/2007, 5:42:00] -  Checking for HKLM\...\Winlogon\Notify\zobhdqqo
[11/16/2007, 5:42:00] -  Found: HKLM\...\Winlogon\Notify\zobhdqqo - This is probably Virtumundo.
[11/16/2007, 5:42:00] -  Assigning {A95B2816-1D7E-4561-A202-68C0DE02353A} MSEvents Object
[11/16/2007, 5:42:00] - BHO list has been changed! Starting over...
[11/16/2007, 5:42:00] -  BHO 1: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (Yahoo! Toolbar Helper)
[11/16/2007, 5:42:00] -  BHO 2: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Adobe PDF Reader Link Helper)
[11/16/2007, 5:42:00] -  BHO 3: {4ec34730-1724-4592-b5aa-e6560066ea37} ()
[11/16/2007, 5:42:00] - WARNING: BHO has no default name. Checking for Winlogon reference.
[11/16/2007, 5:42:00] -  Checking for HKLM\...\Winlogon\Notify\pbfkwprl
[11/16/2007, 5:42:00] -  Key not found: HKLM\...\Winlogon\Notify\pbfkwprl, continuing.
[11/16/2007, 5:42:00] -  BHO 4: {A95B2816-1D7E-4561-A202-68C0DE02353A} (MSEvents Object)
[11/16/2007, 5:42:00] - ALERT: Found MSEvents Object!
[11/16/2007, 5:42:00] -  BHO 5: {AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper)
[11/16/2007, 5:42:01] -  BHO 6: {BDF3E430-B101-42AD-A544-FADC6B084872} (CNavExtBho Class)
[11/16/2007, 5:42:01] - Finished Searching Browser Helper Objects
[11/16/2007, 5:42:01] - *** Detected MSEvents Object
[11/16/2007, 5:42:01] - Trying to remove MSEvents Object...
[11/16/2007, 5:42:02] -    Terminating Process: IEXPLORE.EXE
[11/16/2007, 5:42:02] -    Terminating Process: RUNDLL32.EXE
[11/16/2007, 5:42:02] -    Disabling Automatic Shell Restart
[11/16/2007, 5:42:02] -    Terminating Process: EXPLORER.EXE
[11/16/2007, 5:42:03] -    Suspending the NT Session Manager System Service
[11/16/2007, 5:42:03] -    Terminating Windows NT Logon/Logoff Manager
[11/16/2007, 5:42:03] -    Re-enabling Automatic Shell Restart
[11/16/2007, 5:42:03] -   File to disable: C:\WINDOWS\system32\zobhdqqo.dll
[11/16/2007, 5:42:03] -  Renaming C:\WINDOWS\system32\zobhdqqo.dll -> C:\WINDOWS\system32\zobhdqqo.dll.vir
[11/16/2007, 5:42:03] -  File successfully renamed!
[11/16/2007, 5:42:03] -   Removing HKLM\...\Browser Helper Objects\{A95B2816-1D7E-4561-A202-68C0DE02353A}
[11/16/2007, 5:42:04] -   Removing HKCR\CLSID\{A95B2816-1D7E-4561-A202-68C0DE02353A}
[11/16/2007, 5:42:05] -   Adding Kill Bit for ActiveX for GUID: {A95B2816-1D7E-4561-A202-68C0DE02353A}
[11/16/2007, 5:42:06] -   Deleting ATLEvents/MSEvents Registry entries
[11/16/2007, 5:42:06] -   Removing HKLM\...\Winlogon\Notify\zobhdqqo
[11/16/2007, 5:42:06] - Searching for Browser Helper Objects:
[11/16/2007, 5:42:06] -  BHO 1: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (Yahoo! Toolbar Helper)
[11/16/2007, 5:42:06] -  BHO 2: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Adobe PDF Reader Link Helper)
[11/16/2007, 5:42:06] -  BHO 3: {4ec34730-1724-4592-b5aa-e6560066ea37} ()
[11/16/2007, 5:42:06] - WARNING: BHO has no default name. Checking for Winlogon reference.
[11/16/2007, 5:42:06] -  Checking for HKLM\...\Winlogon\Notify\pbfkwprl
[11/16/2007, 5:42:06] -  Key not found: HKLM\...\Winlogon\Notify\pbfkwprl, continuing.
[11/16/2007, 5:42:06] -  BHO 4: {AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper)
[11/16/2007, 5:42:06] -  BHO 5: {BDF3E430-B101-42AD-A544-FADC6B084872} (CNavExtBho Class)
[11/16/2007, 5:42:06] - Finished Searching Browser Helper Objects
[11/16/2007, 5:42:06] - Finishing up...
[11/16/2007, 5:42:06] - A restart is needed.
[11/16/2007, 5:42:16] - Attempting to Restart via STOP error (Blue Screen!)

afideg · Answer

Courage!

havi · Answer

ENFIN TERMINER et voilà le raport mwav.log TXTje ne sais pas si c'est de cette partie du rappoet dont tu parles mais voilà ce que ça donne:

Fri Nov 16 09:40:17 2007 => ***** Checking for specific ITW Viruses *****
Fri Nov 16 09:40:17 2007 => Checking for Welchia Virus...
Fri Nov 16 09:40:17 2007 => Checking for LovGate Virus...
Fri Nov 16 09:40:17 2007 => Checking for CodeRed Virus...
Fri Nov 16 09:40:17 2007 => Checking for OpaServ Virus...
Fri Nov 16 09:40:17 2007 => Checking for Sobig.e Virus...
Fri Nov 16 09:40:17 2007 => Checking for Winupie Virus...
Fri Nov 16 09:40:17 2007 => Checking for Swen Virus...
Fri Nov 16 09:40:17 2007 => Checking for JS.Fortnight Virus...
Fri Nov 16 09:40:17 2007 => Checking for Novarg Virus...
Fri Nov 16 09:40:17 2007 => Checking for Pagabot Virus...
Fri Nov 16 09:40:17 2007 => Checking for Parite.b Virus...
Fri Nov 16 09:40:17 2007 => Checking for Parite.a Virus...
 
Fri Nov 16 09:40:18 2007 => ***** Scanning complete. *****
 
Fri Nov 16 09:40:18 2007 => Total Number of Files Scanned: 61060
Fri Nov 16 09:40:18 2007 => Total Number of Virus(es) Found: 22
Fri Nov 16 09:40:18 2007 => Total Number of Disinfected Files: 0
Fri Nov 16 09:40:18 2007 => Total Number of Files Renamed: 5
Fri Nov 16 09:40:18 2007 => Total Number of Deleted Files: 4
Fri Nov 16 09:40:18 2007 => Total Number of Errors: 17
Fri Nov 16 09:40:18 2007 => Time Elapsed: 02:07:51
Fri Nov 16 09:40:18 2007 => Virus Database Date: 2007/11/16
Fri Nov 16 09:40:18 2007 => Virus Database Count: 460059
 
Fri Nov 16 09:40:18 2007 => Scan Completed.

havi · Answer

voilà le nouveau rapport COMBOFIX :

ComboFix 07-11-08.1 - valérie 2007-11-16 10:32:44.3 - NTFSx86
Running from: C:\Documents and Settings\valérie\Bureau\ComboFix.exe
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Menu Démarrer\Live Safety Center.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Online Security Guide.lnk
C:\Documents and Settings\valérie\Bureau\Live Safety Center.lnk
C:\Documents and Settings\valérie\Bureau\Online Security Guide.lnk
C:\Documents and Settings\valérie\Favoris\Online Security Guide.lnk
C:\WINDOWS\system32\zobhdqqo.dllbox

.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-10-16 to 2007-11-16 ))))))))))))))))))))))))))))))))))))
.

2007-11-16 06:52 <REP> d----c--- C:\Kaspersky
2007-11-16 02:48 <REP> d-------- C:\Program Files\Panda Security
2007-11-16 00:16 <REP> d-------- C:\Program Files\RogueRemover FREE
2007-11-15 23:40 <REP> d-------- C:\Program Files\a-squared Anti-Malware
2007-11-15 22:03 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-11-15 21:22 <REP> d----c--- C:\hijackthis_199
2007-11-15 21:10 79,936 --a------ C:\WINDOWS\system32\pbfkwprl.dll
2007-11-15 21:07 85,056 --a------ C:\WINDOWS\system32\dngknxww.dll
2007-11-15 06:54 4,528 --a------ C:\WINDOWS\system32\tmp.reg
2007-11-15 06:52 <REP> d----c--- C:\SmitfraudFix
2007-11-15 06:52 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2007-11-15 06:52 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2007-11-15 06:52 53,248 --a------ C:\WINDOWS\system32\Process.exe
2007-11-15 06:52 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2007-11-15 06:52 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2007-11-15 06:25 <REP> d-a--c--- C:\Documents and Settings\All Users\Application Data\TEMP
2007-11-15 06:24 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll
2007-11-15 06:24 153,088 --a------ C:\WINDOWS\system32\UNRAR3.dll
2007-11-15 06:24 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll
2007-11-15 06:24 75,264 --a------ C:\WINDOWS\system32\unacev2.dll
2007-11-15 06:24 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll
2007-11-15 06:23 <REP> d-------- C:\Program Files\Trojan Remover
2007-11-15 06:23 <REP> d----c--- C:\Documents and Settings\All Users\Application Data\Simply Super Software
2007-11-15 06:01 212,843 --a--c--- C:\hijackthis_199.zip
2007-11-15 05:01 <REP> d-------- C:\WINDOWS\BDOSCAN8
2007-11-15 00:20 79,424 --a------ C:\WINDOWS\system32\tngygkox.dll
2007-11-15 00:05 672,020 --a------ C:\WINDOWS\system32\pmodtoxh.ini.ren
2007-11-15 00:05 85,056 --a------ C:\WINDOWS\system32\hxotdomp.dll.ren
2007-11-14 08:08 <REP> d----c--- C:\Documents and Settings\All Users\Application Data\Grisoft
2007-11-14 08:08 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-11-14 07:47 <REP> d----c--- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2007-11-14 07:46 <REP> d-------- C:\Program Files\Yahoo!
2007-11-14 07:46 <REP> d-------- C:\Program Files\CCleaner
2007-11-13 14:55 145,984 --a------ C:\WINDOWS\system32\zobhdqqo.dll.vir
2007-11-13 14:54 145,984 --a------ C:\WINDOWS\system32\owaxberp.dll
2007-11-12 17:28 35,328 --a------ C:\WINDOWS\system32\vtuvvwv.dll
2007-11-12 17:27 288,307 --a------ C:\WINDOWS\system32\prqss.ini2.ren
2007-11-12 17:27 288,307 --a------ C:\WINDOWS\system32\prqss.ini.ren
2007-11-12 17:26 35,328 --a------ C:\WINDOWS\system32\wvuusrq.dll
2007-11-12 17:22 <REP> d-------- C:\WINDOWS\system32\rMa01yy
2007-11-12 17:22 <REP> d--hs---- C:\WINDOWS\dmFs6XJpZQ
2007-11-12 17:22 <REP> d----c--- C:\Temp\abW9
2007-11-12 17:22 <REP> d----c--- C:\Temp
2007-11-12 17:22 35,328 --a------ C:\WINDOWS\system32\khfcded.dll
2007-10-25 10:26 53,248 --a------ C:\WINDOWS\bdoscandel.exe
2007-10-22 00:46 <REP> d-------- C:\WINDOWS\system32\AlertModule
2007-10-22 00:46 40,960 --a------ C:\WINDOWS\system32\FTRTSVC.exe
2007-10-22 00:46 36,864 --a------ C:\WINDOWS\system32\IfHelper.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-11-16 02:32 --------- d-----w C:\Program Files\Wanadoo
2007-11-13 23:41 --------- dc----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-11-13 09:00 --------- d-----w C:\Program Files\Microsoft Picture It! 9
2007-10-20 19:10 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-08-02 13:43 282,624 ----a-w C:\Program Files\TTC.dll
1999-07-07 00:00:00 6 --sh--r C:\WINDOWS\@@desktop.dat
1999-07-07 00:00:00 6 --sh--r C:\WINDOWS\@desktop@.dat
2005-08-11 13:48:57 104 -csh--r C:\WINDOWS\system32\9060AE1E38.sys
2006-05-30 11:35:34 4,704 -csha-w C:\WINDOWS\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((( snapshot@2007-11-15_22.14.36.96 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-08-21 06:37:26 124,208 ----a-w C:\WINDOWS\Downloaded Program Files\ascstubie.dll
+ 2007-05-07 08:38:46 500,120 ----a-w C:\WINDOWS\Downloaded Program Files\daas_s.dll
+ 2007-05-07 08:39:00 192,920 ----a-w C:\WINDOWS\Downloaded Program Files\fsauc.dll
+ 2007-05-07 08:39:24 254,360 ----a-w C:\WINDOWS\Downloaded Program Files\fscax.dll
+ 2007-07-18 06:49:56 12,592 ----a-w C:\WINDOWS\Downloaded Program Files\libcomm.dll
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4ec34730-1724-4592-b5aa-e6560066ea37}]
2007-11-15 21:10 79936 --a------ C:\WINDOWS\System32\pbfkwprl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="C:\Program Files\Apoint2K\Apoint.exe" [2003-10-08 11:40]
"ATIModeChange"="Ati2mdxx.exe" [2004-04-02 15:16 C:\WINDOWS\system32\Ati2mdxx.exe]
"Cpqset"="C:\Program Files\HPQ\Default Settings\cpqset.exe" [2004-03-01 22:05]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-03-26 03:00]
"SunJavaUpdateSched"="C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe" [2004-05-13 18:34]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2004-01-27 22:52]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2004-05-13 18:54]
"eabconfg.cpl"="C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe" [2004-01-13 15:21]
"UpdateManager"="C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" [2003-08-19 07:01]
"HPHmon05"="C:\WINDOWS\System32\hphmon05.exe" [2003-05-23 01:56]
"ccApp"="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" [2006-04-04 11:55]
"AGRSMMSG"="AGRSMMSG.exe" [2003-10-30 21:40 C:\WINDOWS\AGRSMMSG.exe]
"Microsoft Works Update Detection"="C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe" [2003-06-11 00:49]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50]
"Symantec NetDriver Monitor"="C:\PROGRA~1\SYMNET~1\SNDMon.exe" [2006-11-16 00:18]
"HP Software Update"="C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" [2005-02-16 23:11]
"WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-08-23 14:49]
"WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\GestMaj.exe" [2004-10-14 16:55]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 17:25]
"TrojanScanner"="C:\Program Files\Trojan Remover\Trjscan.exe" [2007-11-11 13:42]
"71553283"="C:\WINDOWS\System32\dngknxww.dll" [2007-11-15 21:07]
"a-squared"="C:\Program Files\a-squared Anti-Malware\a2guard.exe" [2007-08-31 20:24]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RecordNow!"="" []
"WOOKIT"="C:\PROGRA~1\Wanadoo\Shell.exe" [2004-08-23 14:50]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-05-21 09:38]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 15:45]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-11-15 16:18]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=0 (0x0)

.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2006-10-27 13:39:26 C:\WINDOWS\Tasks\Connexion Facile à Internet.job"
"2005-11-02 08:45:30 C:\WINDOWS\Tasks\Norton AntiVirus - Analyser mon ordinateur - valérie.job"
"2007-11-16 03:03:00 C:\WINDOWS\Tasks\Symantec NetDetect.job"
- C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE
.
**************************************************************************

catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-16 10:37:39
Windows 5.1.2600 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Cpqset = C:\Program Files\HPQ\Default Settings\cpqset.exe?????????A)w?????????? ???B???????????????B? ??????

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-11-16 11:07:07 - machine was rebooted
C:\ComboFix2.txt ... 2007-11-16 01:04
C:\ComboFix3.txt ... 2007-11-15 22:25
.
--- E O F ---

Et enfin il n'y a plus d'alerte virus, plus d'icones live safety center et online security guide sur mon bureau, tout à disparu et semble redevenu à la normal , mais encore plus important quel antivirus gratuit je pourrais utiliser pour sécuriser mon pc et quel manipulation je pourais faire pour protéger mon ordi efficacement contre tout ces virus ?

Sinon merci de m'avoir aider efficacement : ) j'ai cru que j' arriverais jamais à m'en sortir.

afideg · Answer

Bonjour et bravo pour ces résultats.
Mais ATTENTION, ce n'est pas fini.
Il faut maintenant nettoyer.

A)- Tu me donnes ceci: Fri Nov 16 09:40:18 2007 => ***** Scanning complete. ***** 

Fri Nov 16 09:40:18 2007 => Total Number of Files Scanned: 61060 
Fri Nov 16 09:40:18 2007 => Total Number of Virus(es) Found: 22 
Fri Nov 16 09:40:18 2007 => Total Number of Disinfected Files: 0 
Fri Nov 16 09:40:18 2007 => Total Number of Files Renamed: 5 
Fri Nov 16 09:40:18 2007 => Total Number of Deleted Files: 4   ==> à vérifier.
Fri Nov 16 09:40:18 2007 => Total Number of Errors: 17 
Fri Nov 16 09:40:18 2007 => Time Elapsed: 02:07:51 
Fri Nov 16 09:40:18 2007 => Virus Database Date: 2007/11/16 
Fri Nov 16 09:40:18 2007 => Virus Database Count: 460059 

Mais j'ai besoin des détails.
Peux-tu me livrer le rapport complet, s'il vous plaît.
S'il est trop long, découpe-le en plusieurs livraisons.
Merci.


B)- Commence le nettoyage par ceci: ==> Si tu as le moindre doute, stoppe et demande.
(c'est simple -comme souvent avec ces PC- mais il faut déjà l'avoir fait)  ==> je te fais confiance.

Première action:  Vérifier si cette donnée : C:\WINDOWS\System32\ssqrp.dll existe encore.

Deuxième action: Si elle existe encore, il nous faut supprimer la donnée C:\WINDOWS\System32\ssqrp.dll dans cette clé HKEY_LOCAL_MACHINE, en suivant ce chemin [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] 

À gauche dans le panneau de droite, il y a cette valeur :"Authentication Packages"= msv1_0

À droite de cette valeur, et sur la même ligne, il y a cette donnée : C:\WINDOWS\System32\ssqrp.dll qu'il va falloir supprimer. 

Mais ATTENTION; fais comme ceci :

(Si la donnée citée ci-avant n'existe plus, tu stoppes et tu me l'annonces). Merci.

Vas dans "démarrer"/"exécuter" et tape regedit puis valide avec [OK]. 
Dans le panneau de gauche, navigue en cochant sur le signe "+" depuis HKEY_LOCAL_MACHINE jusqu'à la sous-clé en gras "lsa", puis clique une fois sur le petit dossier jaune  "lsa" pour l'ouvrir : 

Dans le panneau de droite, double-clique sur "Authentication Packages". 
Dans le champ "données" (à droite sur la même ligne), tu dois avoir msv1_0 C:\WINDOWS\system32\mljjh.dll 

Supprime tout ce qui est derrière (à la suite de) msv1_0  ==> ATTENTION: Ne supprime surtout pas msv1_0 
Donc, ne supprime que C:\WINDOWS\System32\ssqrp.dll (Sélectionner/Clic-droit/Supprimer)
Valide par [OK] ou [Enter]
Vérifie dans le panneau de droite que pour la valeur "Authentication Packages" il soit toujours bien inscrit tout à droite la donnée: msv1_0 .

C'est très important, si tu as le moindre doute pour la modification de cette sous-clé, ou des questions, demande-moi. 

Si c'est bon, referme l'éditeur de registre et redémarre ton PC. 
(Si tu as suivi correctement ces instructions, tu ne devrais avoir aucun problème au redémarrage).



Bonne chance.
Au vu du décalage horaire sur le rapport ComboFix, d'où es-tu?
Bonne journée depuis la Belgique.
Al.

afideg · Answer

(suite1) A)- Assure toi d'avoir accès aux dossiers/fichiers cachés : Soit en faisant : Ouvrir un dossier, n'importe lequel. Aller dans "Outils" >"Options des dossiers" > "Affichage" Soit en faisant « Démarrer »/ »PanneauConfiguration/OptionsDossiers /onglet « Affichage » et là : cocher la case devant les lignes: - afficher les fichiers et dossier cachés - afficher contenu dossier système décocher la case devant les lignes: - masquer les extensions des fichiers dont le type est connu - masquer les fichiers protégés du système d'exploitation Tu vas recevoir un message qui te dit que cela peut endommager le système, n'en tiens pas compte. Puis cliquer APPLIQUER à TOUS les Dossiers > [OK] Si tu n'es pas à l'aise dans la navigation des dossiers, je t'invite à suivre ce tutorial : < http://www.malekal.com/rechercher_fichiers.php > Supprime les éléments suivants écrits en caractères gras: C:\WINDOWS\SYSTEM32\RMA01YY <== le dossier C:\WINDOWS\SYSTEM32\MQPLHVRX.EXE <== le fichier renommé avec une double extension (.exe.ren Par exemple) C:\WINDOWS\SYSTEM32\UDXOLURP.EXE <== le fichier renommé avec une double extension (.exe.ren Par exemple) C:\Documents and Settings\All Users\Menu Démarrer\Live Safety Center.lnk <== le raccourci C:\Documents and Settings\All Users\Menu Démarrer\Online Security Guide.lnk <== le raccourci B)- Recherche C:\WINDOWS\SYSTEM32\$SYS$FILESYSTEM\$SYS$DRMSERVER.EXE et si tu le trouves, donne-moi le chemin exact, éventuellement sans les $ si c'est le cas; ensuite fais-le analyser chez VirusTotal, comme ceci: °- Vas là :< https://www.virustotal.com/gui/ > •- sur la page qui s'affiche tu cliques sur "parcourir" •- ensuite sur la nouvelle page qui s'affiche, tu suis le chemin "réellement trouvé" du fichier $SYS$DRMSERVER.EXE c'est-à-dire via "Poste de travail" > C:\WINDOWS\SYSTEM32\$SYS$FILESYSTEM\ (avec ou sans les $) •- quand tu as trouvé le premier fichier $SYS$DRMSERVER.EXE, tu fais "ouvrir" ( sur cette dernière page affichée) •- le fichier $SYS$DRMSERVER.EXE se retrouve alors ainsi dans la fenêtre de Virustotal, pour l'analyse •- là, tu cliques sur "send file" ( de la page de Virustotal ) •- et tu attends le résultat (il faut parfois patienter) •- que tu postes sur le forum ( par un copier/coller de tout le texte de l’analyse ) Merci pour ta collaboration C)- Supprime le ComboFix que tu possèdes, ainsi que ses composants dont les quarantaines ou backups; comme ceci: Supprime le dossier Qoobox (il est à la racine de ton disque dur c:\) Supprime tous les rapports situés. (C:\ComboFix-quarantined-files.txt ; C:\ComboFix.txt ; C:\ComboFix2.txt ; C:\ComboFix3.txt ... ; C:\ComboFix-Do.txt) Supprime l'application téléchargée. (ComboFix.exe) D)- Télécharge VundoFix.exe (par Atribune) http://www.atribune.org/ccount/click.php?id=4 sur ton Bureau. Double-clique VundoFix.exe afin de le lancer Clique sur le bouton Scan for Vundo Lorsque le scan est complété, clique sur le bouton Remove Vundo Une invite te demandera si tu veux supprimer les fichiers, clique YES Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers Tu verras une invite qui t'annonce que ton PC va redémarrer; clique OK Copie/colle le contenu du rapport situé dans C:\vundofix.txt dans ta prochaine réponse Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage. Il faut simplement suivre les instructions ci-haut, à partir de "clique sur le bouton Scan for Vundo". C'est quasi fini. Encore un petit effort. Al.

havi · Answer

Bonjour , et enfin je suis de retour pour te livrer le rapport au complet:

Partie 1

Fri Nov 16 06:52:49 2007 => **********************************************************
Fri Nov 16 06:52:49 2007 => eScan AntiVirus Toolkit Utility.
Fri Nov 16 06:52:49 2007 => Copyright © 2003-2004,  MicroWorld Technologies Inc.
Fri Nov 16 06:52:49 2007 => **********************************************************
Fri Nov 16 06:52:49 2007 => Version 4.4.7
Fri Nov 16 06:52:49 2007 => Log File: C:\KASPER~1\mwav.log
Fri Nov 16 06:52:50 2007 => Latest Date of files inside MWAV: 04 Sep 2007  00:11:30.
Fri Nov 16 06:52:54 2007 => AV Library Loaded...
Fri Nov 16 06:52:54 2007 => Scanning File C:\KASPER~1\kavss.exe
Fri Nov 16 06:52:54 2007 => Scanning File C:\KASPER~1\Getvlist.exe
Fri Nov 16 06:52:54 2007 => Scanning File C:\KASPER~1\kavss.dll
Fri Nov 16 06:52:54 2007 => Scanning File C:\KASPER~1\kavssdi.dll
Fri Nov 16 06:52:54 2007 => Scanning File C:\KASPER~1\kavssi.dll
Fri Nov 16 06:52:54 2007 => Scanning File C:\KASPER~1\kavvlg.dll
Fri Nov 16 06:52:54 2007 => Scanning File C:\KASPER~1\msvlclnt.dll
Fri Nov 16 06:52:54 2007 => Scanning File C:\KASPER~1\ipc.dll
Fri Nov 16 06:52:54 2007 => Scanning File C:\KASPER~1\main.avi
Fri Nov 16 06:52:54 2007 => Scanning File C:\KASPER~1\virus.avi
Fri Nov 16 06:52:54 2007 => Virus Database Date: 2007/09/04
Fri Nov 16 06:52:54 2007 => Virus Database Count: 403200
Fri Nov 16 07:29:48 2007 => **********************************************************
Fri Nov 16 07:29:48 2007 => eScan AntiVirus Toolkit Utility.
Fri Nov 16 07:29:48 2007 => Copyright © 2003-2004,  MicroWorld Technologies Inc.
Fri Nov 16 07:29:48 2007 => **********************************************************
Fri Nov 16 07:29:48 2007 => Version 4.4.7
Fri Nov 16 07:29:48 2007 => Log File: C:\KASPER~1\mwav.log
Fri Nov 16 07:29:57 2007 => Latest Date of files inside MWAV: 16 Nov 2007  01:21:28.
Fri Nov 16 07:30:08 2007 => AV Library Loaded...
Fri Nov 16 07:30:08 2007 => Scanning File C:\KASPER~1\kavss.exe
Fri Nov 16 07:30:08 2007 => Scanning File C:\KASPER~1\Getvlist.exe
Fri Nov 16 07:30:08 2007 => Scanning File C:\KASPER~1\kavss.dll
Fri Nov 16 07:30:09 2007 => Scanning File C:\KASPER~1\kavssdi.dll
Fri Nov 16 07:30:09 2007 => Scanning File C:\KASPER~1\kavssi.dll
Fri Nov 16 07:30:09 2007 => Scanning File C:\KASPER~1\kavvlg.dll
Fri Nov 16 07:30:09 2007 => Scanning File C:\KASPER~1\msvlclnt.dll
Fri Nov 16 07:30:09 2007 => Scanning File C:\KASPER~1\ipc.dll
Fri Nov 16 07:30:09 2007 => Scanning File C:\KASPER~1\main.avi
Fri Nov 16 07:30:09 2007 => Scanning File C:\KASPER~1\virus.avi
Fri Nov 16 07:30:10 2007 => Virus Database Date: 2007/11/16
Fri Nov 16 07:30:10 2007 => Virus Database Count: 460059
 
Fri Nov 16 07:32:24 2007 => **********************************************************
Fri Nov 16 07:32:24 2007 => eScan AntiVirus Toolkit Utility.
Fri Nov 16 07:32:24 2007 => Copyright © 2003-2004,  MicroWorld Technologies Inc.
Fri Nov 16 07:32:24 2007 => 
Fri Nov 16 07:32:24 2007 => Support: support@mwti.net
Fri Nov 16 07:32:24 2007 => Web: https://www.escanav.com/en/index.asp
Fri Nov 16 07:32:24 2007 => **********************************************************
Fri Nov 16 07:32:24 2007 => Version 4.4.7
Fri Nov 16 07:32:24 2007 => Log File: C:\KASPER~1\mwav.log
Fri Nov 16 07:32:24 2007 => Latest Date of files inside MWAV: 16 Nov 2007  01:21:28.
 
Fri Nov 16 07:32:24 2007 => Options Selected by User:
Fri Nov 16 07:32:24 2007 => Memory Check: Enabled
Fri Nov 16 07:32:24 2007 => Registry Check: Enabled
Fri Nov 16 07:32:24 2007 => StartUp Folder Check: Enabled
Fri Nov 16 07:32:24 2007 => System Folder Check: Enabled
Fri Nov 16 07:32:24 2007 => System Area Check: Disabled
Fri Nov 16 07:32:24 2007 => Services Check: Enabled
Fri Nov 16 07:32:24 2007 => Drive Check: Enabled
Fri Nov 16 07:32:24 2007 => All Drive Check :Disabled
Fri Nov 16 07:32:24 2007 => Scanning Type: Scan And Clean
Fri Nov 16 07:32:24 2007 => Drive Selected = C:\
Fri Nov 16 07:32:24 2007 => Folder Check: Disabled
 
Fri Nov 16 07:32:24 2007 => ***** Scanning Memory Files *****
Fri Nov 16 07:32:24 2007 => Scanning File C:\WINDOWS\system32\services.exe
Fri Nov 16 07:32:25 2007 => Scanning File C:\WINDOWS\system32\lsass.exe
Fri Nov 16 07:32:25 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Fri Nov 16 07:32:25 2007 => Scanning File C:\PROGRA~1\Grisoft\AVGANT~1.5\guard.exe
Fri Nov 16 07:32:25 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Fri Nov 16 07:32:25 2007 => Scanning File C:\WINDOWS\Explorer.EXE
Fri Nov 16 07:32:25 2007 => Scanning File C:\Kaspersky\mwavscan.com
Fri Nov 16 07:32:25 2007 => Scanning File C:\Kaspersky\kavss.exe
 
Fri Nov 16 07:32:25 2007 => ***** Scanning Registry Files *****
 
Fri Nov 16 07:32:25 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
Fri Nov 16 07:32:25 2007 => *** File C:\WINDOWS\system32\SHELL32.dll having Size Restriction ***
Fri Nov 16 07:32:25 2007 => Scanning File C:\WINDOWS\system32\SHELL32.dll [**]
Fri Nov 16 07:32:25 2007 => *** File C:\WINDOWS\system32\SHELL32.dll having Size Restriction ***
Fri Nov 16 07:32:25 2007 => Scanning File C:\WINDOWS\system32\SHELL32.dll [**]
Fri Nov 16 07:32:25 2007 => Scanning File C:\WINDOWS\System32\webcheck.dll
Fri Nov 16 07:32:25 2007 => Scanning File C:\WINDOWS\System32\stobject.dll
 
Fri Nov 16 07:32:25 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects
Fri Nov 16 07:32:25 2007 => {02478D38-C3F9-4EFB-9B51-7695ECA05670} = C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
Fri Nov 16 07:32:25 2007 => Scanning File C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\yt.dll
Fri Nov 16 07:32:26 2007 => {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} = C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
Fri Nov 16 07:32:26 2007 => Scanning File C:\PROGRA~1\Adobe\ACROBA~2.0\ActiveX\ACROIE~1.DLL
Fri Nov 16 07:32:26 2007 => {4ec34730-1724-4592-b5aa-e6560066ea37} = C:\WINDOWS\System32\pbfkwprl.dll
Fri Nov 16 07:32:26 2007 => Scanning File C:\WINDOWS\System32\pbfkwprl.dll
Fri Nov 16 07:32:26 2007 => {AA58ED58-01DD-4d91-8333-CF10577473F7} = c:\program files\google\googletoolbar3.dll
Fri Nov 16 07:32:26 2007 => Scanning File c:\PROGRA~1\google\GOOGLE~3.DLL
Fri Nov 16 07:32:26 2007 => {BDF3E430-B101-42AD-A544-FADC6B084872} = C:\Program Files\Norton AntiVirus\NavShExt.dll
Fri Nov 16 07:32:26 2007 => Scanning File C:\PROGRA~1\NORTON~1\NavShExt.dll
 
Fri Nov 16 07:32:26 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Fri Nov 16 07:32:26 2007 => Scanning File C:\WINDOWS\Explorer.exe
Fri Nov 16 07:32:26 2007 => Scanning File C:\WINDOWS\system32\userinit.exe
 
Fri Nov 16 07:32:26 2007 => Scanning HKCU\Control Panel\Desktop
 
Fri Nov 16 07:32:27 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Fri Nov 16 07:32:27 2007 => Scanning File C:\PROGRA~1\Apoint2K\Apoint.exe
Fri Nov 16 07:32:27 2007 => Scanning File C:\WINDOWS\system32\Ati2mdxx.exe
Fri Nov 16 07:32:27 2007 => Scanning File C:\PROGRA~1\HPQ\DEFAUL~1\cpqset.exe
Fri Nov 16 07:32:27 2007 => Scanning File C:\PROGRA~1\ATITEC~1\ATICON~1\atiptaxx.exe
Fri Nov 16 07:32:27 2007 => Scanning File C:\PROGRA~1\Java\J2RE14~1.2_0\bin\jusched.exe
Fri Nov 16 07:32:27 2007 => Scanning File C:\PROGRA~1\iTunes\ITUNES~1.EXE
Fri Nov 16 07:32:27 2007 => Scanning File C:\PROGRA~1\QUICKT~1\qttask.exe
Fri Nov 16 07:32:27 2007 => Scanning File C:\PROGRA~1\HPQ\QUICKL~1\EabServr.exe
Fri Nov 16 07:32:28 2007 => Scanning File C:\PROGRA~1\FICHIE~1\Sonic\UPDATE~1\sgtray.exe
Fri Nov 16 07:32:28 2007 => ERROR!!! Invalid Entry HPHUPD05 = c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe. Removing it.
Fri Nov 16 07:32:28 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\ccApp.exe
Fri Nov 16 07:32:28 2007 => Scanning File C:\WINDOWS\AGRSMMSG.exe
Fri Nov 16 07:32:28 2007 => Scanning File C:\PROGRA~1\FICHIE~1\MICROS~1\WORKSS~1\WkUFind.exe
Fri Nov 16 07:32:28 2007 => Scanning File C:\WINDOWS\system32\NeroCheck.exe
Fri Nov 16 07:32:28 2007 => Scanning File C:\PROGRA~1\SYMNET~1\SNDMon.exe
Fri Nov 16 07:32:28 2007 => Scanning File C:\PROGRA~1\HEWLET~1\HPSOFT~1\HPWUSC~1.EXE
Fri Nov 16 07:32:29 2007 => Scanning File C:\PROGRA~1\Wanadoo\Watch.exe
Fri Nov 16 07:32:29 2007 => Scanning File C:\PROGRA~1\Wanadoo\GestMaj.exe
Fri Nov 16 07:32:29 2007 => *** File C:\PROGRA~1\Grisoft\AVGANT~1.5\avgas.exe having Size Restriction ***
Fri Nov 16 07:32:29 2007 => Scanning File C:\PROGRA~1\Grisoft\AVGANT~1.5\avgas.exe [**]
Fri Nov 16 07:32:29 2007 => Scanning File C:\PROGRA~1\TROJAN~1\Trjscan.exe
Fri Nov 16 07:32:30 2007 => Scanning File C:\WINDOWS\system32undll32.exe
Fri Nov 16 07:32:30 2007 => Scanning File C:\PROGRA~1\A-SQUA~1\a2guard.exe
 
Fri Nov 16 07:32:31 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
 
Fri Nov 16 07:32:31 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
 
Fri Nov 16 07:32:31 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
 
Fri Nov 16 07:32:31 2007 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Fri Nov 16 07:32:31 2007 => Scanning File C:\PROGRA~1\Wanadoo\Shell.exe
Fri Nov 16 07:32:31 2007 => Scanning File C:\PROGRA~1\Google\GOOGLE~1\GOOGLE~1.EXE
Fri Nov 16 07:32:31 2007 => Scanning File C:\PROGRA~1\Adobe\ACROBA~2.0\Reader\ADOBEU~1.EXE
 
Fri Nov 16 07:32:32 2007 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
 
Fri Nov 16 07:32:32 2007 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
 
Fri Nov 16 07:32:32 2007 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
 
Fri Nov 16 07:32:32 2007 => Scanning HKCR	xtfile\shell\open\command
 
Fri Nov 16 07:32:32 2007 => Scanning HKCR\comfile\shell\open\command
 
Fri Nov 16 07:32:32 2007 => Scanning HKCR\exefile\shell\open\command
 
Fri Nov 16 07:32:32 2007 => Scanning HKCR\dllfile\shell\open\command
 
Fri Nov 16 07:32:32 2007 => Scanning HKCR\batfile\shell\open\command
 
Fri Nov 16 07:32:32 2007 => Scanning HKCR\piffile\shell\open\command
 
Fri Nov 16 07:32:32 2007 => Scanning HKCR\scrfile\shell\open\command
 
Fri Nov 16 07:32:32 2007 => Scanning HKCR\scrfile\shell\config\command
 
Fri Nov 16 07:32:32 2007 => Scanning HKCRegfile\shell\open\command
 
Fri Nov 16 07:32:32 2007 => ***** Scanning StartUp Folders *****
 
Fri Nov 16 07:32:32 2007 => ***** Scanning C:\Documents and Settings\valérie\Menu Démarrer\Démarrage Folder *****
Fri Nov 16 07:32:32 2007 => Scanning Folder: C:\Documents and Settings\valérie\Menu Démarrer\Démarrage\*.*
Fri Nov 16 07:32:32 2007 => Scanning File C:\Documents and Settings\valérie\Menu Démarrer\Démarrage\desktop.ini
Fri Nov 16 07:32:32 2007 => Scanning File C:\Documents and Settings\valérie\Menu Démarrer\Démarrage\WkCalRem.LNK
 
Fri Nov 16 07:32:32 2007 => ***** Scanning C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage Folder *****
Fri Nov 16 07:32:32 2007 => Scanning Folder: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\*.*
Fri Nov 16 07:32:32 2007 => Scanning File C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\desktop.ini
Fri Nov 16 07:32:32 2007 => Scanning File C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk
 
Fri Nov 16 07:32:32 2007 => ***** Scanning Service Files *****
Fri Nov 16 07:32:32 2007 => Scanning HKLM\SYSTEM\CurrentControlSet\Services
Fri Nov 16 07:32:32 2007 => Scanning File C:\WINDOWS\System32\Drivers\$sys$cor.sys
Fri Nov 16 07:32:32 2007 => Scanning File C:\WINDOWS\SYSTEM32\$SYS$FILESYSTEM\CRATER.SYS
Fri Nov 16 07:32:32 2007 => Scanning File C:\WINDOWS\System32\$sys$filesystem\$sys$DRMServer.exe
Fri Nov 16 07:32:33 2007 => Scanning File C:\PROGRA~1\A-SQUA~1\A2SERV~1.EXE
Fri Nov 16 07:32:33 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\ACPI.sys
Fri Nov 16 07:32:34 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\ACPIEC.sys
Fri Nov 16 07:32:34 2007 => Scanning File C:\WINDOWS\System32\drivers\aeaudio.sys
Fri Nov 16 07:32:34 2007 => Scanning File C:\WINDOWS\System32\drivers\aec.sys
Fri Nov 16 07:32:34 2007 => Scanning File C:\WINDOWS\System32\drivers\afd.sys
Fri Nov 16 07:32:34 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\AGRSM.sys
Fri Nov 16 07:32:34 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:34 2007 => Scanning File C:\WINDOWS\System32\alg.exe
Fri Nov 16 07:32:34 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\Apfiltr.sys
Fri Nov 16 07:32:34 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Fri Nov 16 07:32:34 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\arp1394.sys
Fri Nov 16 07:32:34 2007 => Scanning File C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
Fri Nov 16 07:32:35 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\asyncmac.sys
Fri Nov 16 07:32:35 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\atapi.sys
Fri Nov 16 07:32:35 2007 => Scanning File C:\WINDOWS\System32\Ati2evxx.exe
Fri Nov 16 07:32:35 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\ati2mtag.sys
Fri Nov 16 07:32:35 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\atmarpc.sys
Fri Nov 16 07:32:35 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:35 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\audstub.sys
Fri Nov 16 07:32:35 2007 => Scanning File C:\PROGRA~1\GRISOFT\AVGANT~1.5\GUARD.SYS
Fri Nov 16 07:32:35 2007 => Scanning File C:\PROGRA~1\Grisoft\AVGANT~1.5\guard.exe
Fri Nov 16 07:32:35 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\AvgAsCln.sys
Fri Nov 16 07:32:35 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\bcmwl5.sys
Fri Nov 16 07:32:35 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:35 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:35 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\atisgkaf.sys
Fri Nov 16 07:32:36 2007 => ERROR!!! Invalid Entry \??\C:\DOCUME~1\VALRIE~1\LOCALS~1\Temp\catchme.sys in SYSTEM\CurrentControlSet\Services\catchme...
Fri Nov 16 07:32:36 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\ccEvtMgr.exe
Fri Nov 16 07:32:36 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\ccPwdSvc.exe
Fri Nov 16 07:32:36 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\ccSetMgr.exe
Fri Nov 16 07:32:36 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\cdrom.sys
Fri Nov 16 07:32:36 2007 => Scanning File C:\WINDOWS\CDProxyServ.exe
Fri Nov 16 07:32:36 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\ce3n5.sys
Fri Nov 16 07:32:36 2007 => Scanning File C:\WINDOWS\system32\cisvc.exe
Fri Nov 16 07:32:36 2007 => Scanning File C:\WINDOWS\system32\clipsrv.exe
Fri Nov 16 07:32:36 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\CmBatt.sys
Fri Nov 16 07:32:36 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\compbatt.sys
Fri Nov 16 07:32:36 2007 => Scanning File C:\WINDOWS\System32\dllhost.exe
Fri Nov 16 07:32:36 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Fri Nov 16 07:32:37 2007 => Scanning File C:\WINDOWS\System32\DRIVERS	iumflt.sys
Fri Nov 16 07:32:37 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:37 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\disk.sys
Fri Nov 16 07:32:37 2007 => Scanning File C:\WINDOWS\System32\dmadmin.exe
Fri Nov 16 07:32:37 2007 => Scanning File C:\WINDOWS\System32\drivers\dmboot.sys
Fri Nov 16 07:32:37 2007 => Scanning File C:\WINDOWS\System32\drivers\dmio.sys
Fri Nov 16 07:32:38 2007 => Scanning File C:\WINDOWS\System32\drivers\dmload.sys
Fri Nov 16 07:32:38 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:38 2007 => Scanning File C:\WINDOWS\System32\drivers\DMusic.sys
Fri Nov 16 07:32:38 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:38 2007 => Scanning File C:\WINDOWS\System32\drivers\drmkaud.sys
Fri Nov 16 07:32:38 2007 => Scanning File C:\WINDOWS\SYSTEM32\DRIVERS\EABFILTR.SYS
Fri Nov 16 07:32:38 2007 => Scanning File C:\WINDOWS\SYSTEM32\DRIVERS\EABUSB.SYS
Fri Nov 16 07:32:38 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:38 2007 => Scanning File C:\WINDOWS\system32\services.exe
Fri Nov 16 07:32:38 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:38 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:38 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\fdc.sys
Fri Nov 16 07:32:38 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\flpydisk.sys
Fri Nov 16 07:32:38 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\ftdisk.sys
Fri Nov 16 07:32:38 2007 => Scanning File C:\WINDOWS\System32\FTRTSVC.exe
Fri Nov 16 07:32:38 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\GEARAspiWDM.sys
Fri Nov 16 07:32:39 2007 => Scanning File C:\WINDOWS\System32\gearsec.exe
Fri Nov 16 07:32:39 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\msgpc.sys
Fri Nov 16 07:32:39 2007 => Scanning File C:\PROGRA~1\Google\Common\GOOGLE~1\GOOGLE~1.EXE
Fri Nov 16 07:32:39 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:39 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:39 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\hidusb.sys
Fri Nov 16 07:32:39 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\HPZid412.sys
Fri Nov 16 07:32:39 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\HPZipr12.sys
Fri Nov 16 07:32:39 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\HPZius12.sys
Fri Nov 16 07:32:39 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\i8042prt.sys
Fri Nov 16 07:32:39 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\imapi.sys
Fri Nov 16 07:32:39 2007 => Scanning File C:\WINDOWS\System32\imapi.exe
Fri Nov 16 07:32:39 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\intelide.sys
Fri Nov 16 07:32:39 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\intelppm.sys
Fri Nov 16 07:32:39 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\ipfltdrv.sys
Fri Nov 16 07:32:40 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\ipinip.sys
Fri Nov 16 07:32:40 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\ipnat.sys
Fri Nov 16 07:32:40 2007 => Scanning File C:\PROGRA~1\iPod\bin\IPODSE~1.EXE
Fri Nov 16 07:32:40 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\ipsec.sys
Fri Nov 16 07:32:40 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\irenum.sys
Fri Nov 16 07:32:40 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\isapnp.sys
Fri Nov 16 07:32:40 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\kbdclass.sys
Fri Nov 16 07:32:40 2007 => Scanning File C:\WINDOWS\System32\drivers\kmixer.sys
Fri Nov 16 07:32:41 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:41 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:41 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:41 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:41 2007 => Scanning File C:\WINDOWS\System32\mnmsrvc.exe
Fri Nov 16 07:32:41 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\mouclass.sys
Fri Nov 16 07:32:41 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\mouhid.sys
Fri Nov 16 07:32:41 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\mrxdav.sys
Fri Nov 16 07:32:41 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\mrxsmb.sys
Fri Nov 16 07:32:41 2007 => Scanning File C:\WINDOWS\System32\msdtc.exe
Fri Nov 16 07:32:41 2007 => Scanning File C:\WINDOWS\System32\msiexec.exe
Fri Nov 16 07:32:41 2007 => Scanning File C:\WINDOWS\System32\drivers\MSKSSRV.sys
Fri Nov 16 07:32:41 2007 => Scanning File C:\WINDOWS\System32\drivers\MSPCLOCK.sys
Fri Nov 16 07:32:41 2007 => Scanning File C:\WINDOWS\System32\drivers\MSPQM.sys
Fri Nov 16 07:32:42 2007 => Scanning File C:\PROGRA~1\NORTON~1
avapsvc.exe
Fri Nov 16 07:32:42 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20061227.017\NAVENG.SYS
Fri Nov 16 07:32:42 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20061227.017\NAVEX15.SYS
Fri Nov 16 07:32:42 2007 => Scanning File C:\WINDOWS\System32\DRIVERS
distapi.sys
Fri Nov 16 07:32:42 2007 => Scanning File C:\WINDOWS\System32\DRIVERS
disuio.sys
Fri Nov 16 07:32:42 2007 => Scanning File C:\WINDOWS\System32\DRIVERS
diswan.sys
Fri Nov 16 07:32:42 2007 => Scanning File C:\WINDOWS\System32\DRIVERS
etbios.sys
Fri Nov 16 07:32:42 2007 => Scanning File C:\WINDOWS\System32\DRIVERS
etbt.sys
Fri Nov 16 07:32:42 2007 => Scanning File C:\WINDOWS\system32
etdde.exe
Fri Nov 16 07:32:42 2007 => Scanning File C:\WINDOWS\system32
etdde.exe
Fri Nov 16 07:32:43 2007 => Scanning File C:\WINDOWS\System32\lsass.exe
Fri Nov 16 07:32:43 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:43 2007 => Scanning File C:\WINDOWS\System32\DRIVERS
ic1394.sys
Fri Nov 16 07:32:43 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:43 2007 => Scanning File C:\WINDOWS\System32\DRIVERS
scirda.sys
Fri Nov 16 07:32:43 2007 => Scanning File C:\WINDOWS\System32\lsass.exe
Fri Nov 16 07:32:43 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Fri Nov 16 07:32:43 2007 => Scanning File C:\WINDOWS\System32\DRIVERS
wlnkflt.sys
Fri Nov 16 07:32:43 2007 => Scanning File C:\WINDOWS\System32\DRIVERS
wlnkfwd.sys
Fri Nov 16 07:32:43 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\ohci1394.sys
Fri Nov 16 07:32:43 2007 => Scanning File C:\PROGRA~1\FICHIE~1\MICROS~1\SOURCE~1\OSE.EXE
Fri Nov 16 07:32:43 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\parport.sys
Fri Nov 16 07:32:43 2007 => Scanning File C:\WINDOWS\SYSTEM32\PCANDIS5.SYS
Fri Nov 16 07:32:43 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\pci.sys
Fri Nov 16 07:32:43 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\pciide.sys
Fri Nov 16 07:32:43 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\pcmcia.sys
Fri Nov 16 07:32:44 2007 => Scanning File C:\WINDOWS\system32\services.exe
Fri Nov 16 07:32:44 2007 => Scanning File C:\WINDOWS\System32\lsass.exe
Fri Nov 16 07:32:44 2007 => Scanning File C:\WINDOWS\System32\DRIVERSaspptp.sys
Fri Nov 16 07:32:44 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\processr.sys
Fri Nov 16 07:32:44 2007 => Scanning File C:\WINDOWS\system32\lsass.exe
Fri Nov 16 07:32:44 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\psched.sys
Fri Nov 16 07:32:44 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\ptilink.sys
Fri Nov 16 07:32:44 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\PxHelp20.sys
Fri Nov 16 07:32:44 2007 => Scanning File C:\WINDOWS\System32\DRIVERSasacd.sys
Fri Nov 16 07:32:44 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:44 2007 => Scanning File C:\WINDOWS\System32\DRIVERSasirda.sys
Fri Nov 16 07:32:44 2007 => Scanning File C:\WINDOWS\System32\DRIVERSasl2tp.sys
Fri Nov 16 07:32:44 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:44 2007 => Scanning File C:\WINDOWS\System32\DRIVERSaspppoe.sys
Fri Nov 16 07:32:44 2007 => Scanning File C:\WINDOWS\System32\DRIVERSaspti.sys
Fri Nov 16 07:32:44 2007 => Scanning File C:\WINDOWS\System32\DRIVERSdbss.sys
Fri Nov 16 07:32:44 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
Fri Nov 16 07:32:44 2007 => Scanning File C:\WINDOWS\system32\sessmgr.exe
Fri Nov 16 07:32:45 2007 => Scanning File C:\WINDOWS\System32\DRIVERSedbook.sys
Fri Nov 16 07:32:45 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:45 2007 => Scanning File C:\WINDOWS\System32\locator.exe
Fri Nov 16 07:32:45 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Fri Nov 16 07:32:45 2007 => Scanning File C:\WINDOWS\System32svp.exe
Fri Nov 16 07:32:45 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\R8139n51.SYS
Fri Nov 16 07:32:45 2007 => Scanning File C:\WINDOWS\system32\lsass.exe
Fri Nov 16 07:32:45 2007 => Scanning File C:\PROGRA~1\NORTON~1\SAVRT.SYS
Fri Nov 16 07:32:46 2007 => Scanning File C:\PROGRA~1\NORTON~1\SAVRTPEL.SYS
Fri Nov 16 07:32:46 2007 => Scanning File C:\PROGRA~1\NORTON~1\SAVScan.exe
Fri Nov 16 07:32:46 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
Fri Nov 16 07:32:46 2007 => Scanning File C:\WINDOWS\System32\SCardSvr.exe
Fri Nov 16 07:32:46 2007 => Scanning File C:\WINDOWS\System32\SCardSvr.exe
Fri Nov 16 07:32:46 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:46 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\secdrv.sys
Fri Nov 16 07:32:46 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:46 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Fri Nov 16 07:32:46 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\serenum.sys
Fri Nov 16 07:32:46 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\serial.sys
Fri Nov 16 07:32:46 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:46 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:46 2007 => Scanning File C:\WINDOWS\System32\drivers\smwdm.sys
Fri Nov 16 07:32:47 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\SNDSrvc.exe
Fri Nov 16 07:32:47 2007 => Scanning File C:\WINDOWS\System32\drivers\splitter.sys
Fri Nov 16 07:32:47 2007 => Scanning File C:\WINDOWS\system32\spoolsv.exe
Fri Nov 16 07:32:47 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\sr.sys
Fri Nov 16 07:32:47 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:47 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\srv.sys
Fri Nov 16 07:32:47 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:47 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:47 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\swenum.sys
Fri Nov 16 07:32:47 2007 => Scanning File C:\WINDOWS\System32\drivers\swmidi.sys
Fri Nov 16 07:32:47 2007 => Scanning File C:\WINDOWS\System32\dllhost.exe
Fri Nov 16 07:32:47 2007 => Scanning File C:\PROGRA~1\SYMANTEC\SYMEVENT.SYS
Fri Nov 16 07:32:48 2007 => Scanning File C:\WINDOWS\System32\Drivers\SYMREDRV.SYS
Fri Nov 16 07:32:48 2007 => Scanning File C:\WINDOWS\System32\Drivers\SYMTDI.SYS
Fri Nov 16 07:32:48 2007 => Scanning File C:\PROGRA~1\FICHIE~1\SYMANT~1\SECURI~1\SymWSC.exe
Fri Nov 16 07:32:48 2007 => Scanning File C:\WINDOWS\System32\drivers\sysaudio.sys
Fri Nov 16 07:32:48 2007 => Scanning File C:\WINDOWS\system32\smlogsvc.exe
Fri Nov 16 07:32:48 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:48 2007 => Scanning File C:\WINDOWS\System32\DRIVERS	cpip.sys
Fri Nov 16 07:32:48 2007 => Scanning File C:\WINDOWS\System32\DRIVERS	ermdd.sys
Fri Nov 16 07:32:48 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:48 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:48 2007 => Scanning File C:\WINDOWS\System32\drivers	iumfwl.sys
Fri Nov 16 07:32:49 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Fri Nov 16 07:32:49 2007 => Scanning File C:\WINDOWS\System32\wdfmgr.exe
Fri Nov 16 07:32:49 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\update.sys
Fri Nov 16 07:32:49 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:49 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:49 2007 => Scanning File C:\WINDOWS\System32\ups.exe
Fri Nov 16 07:32:49 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\usbccgp.sys
Fri Nov 16 07:32:49 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\usbehci.sys
Fri Nov 16 07:32:49 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\usbhub.sys
Fri Nov 16 07:32:49 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\usbohci.sys
Fri Nov 16 07:32:49 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\usbprint.sys
Fri Nov 16 07:32:49 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\usbscan.sys
Fri Nov 16 07:32:49 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS
Fri Nov 16 07:32:49 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\usbuhci.sys
Fri Nov 16 07:32:49 2007 => Scanning File C:\WINDOWS\System32\drivers\vga.sys
Fri Nov 16 07:32:49 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\viaide.sys
Fri Nov 16 07:32:49 2007 => Scanning File C:\WINDOWS\System32\vssvc.exe
Fri Nov 16 07:32:50 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:50 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\wanarp.sys
Fri Nov 16 07:32:50 2007 => Scanning File C:\WINDOWS\System32\drivers\wdmaud.sys
Fri Nov 16 07:32:50 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:50 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Fri Nov 16 07:32:50 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:32:50 2007 => Scanning File C:\WINDOWS\System32\DRIVERS\wmiacpi.sys
Fri Nov 16 07:32:50 2007 => Scanning File C:\WINDOWS\System32\wbem\wmiapsrv.exe
Fri Nov 16 07:32:50 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
Fri Nov 16 07:32:50 2007 => Scanning File C:\WINDOWS\System32\svchost.exe

havi · Answer

Partie 2 du rapport et , pour répondre à ta question , j'écris depuis les antilles .

En faite Tu es sur que tu veux absolument tout parce que c'est vachement long ...0__0 , au vu du bloc note ça finira par alourdir le topic:

Fri Nov 16 07:32:50 2007 => ***** Scanning System32 Folders *****
Fri Nov 16 07:32:50 2007 => Scanning C:\WINDOWS Directory
Fri Nov 16 07:32:50 2007 => Scanning Folder: C:\WINDOWS\*.*
Fri Nov 16 07:32:51 2007 => Scanning File C:\WINDOWS\0.log [**]
Fri Nov 16 07:32:51 2007 => Scanning File C:\WINDOWS\@@desktop.dat
Fri Nov 16 07:32:51 2007 => Scanning File C:\WINDOWS\@desktop@.dat
Fri Nov 16 07:32:51 2007 => Scanning File C:\WINDOWS\ActiveSkin.INI
Fri Nov 16 07:32:52 2007 => Scanning File C:\WINDOWS\agrsmdel.exe
Fri Nov 16 07:32:52 2007 => Scanning File C:\WINDOWS\AGRSMMSG.exe
Fri Nov 16 07:32:52 2007 => Scanning File C:\WINDOWS\bdoscandel.exe
Fri Nov 16 07:32:52 2007 => Scanning File C:\WINDOWS\bdoscandellang.ini
Fri Nov 16 07:32:52 2007 => Scanning File C:\WINDOWS\bootstat.dat
Fri Nov 16 07:32:52 2007 => Scanning File C:\WINDOWS\Bulles de savon.bmp
Fri Nov 16 07:32:52 2007 => Scanning File C:\WINDOWS\catchme.exe
Fri Nov 16 07:32:52 2007 => Scanning File C:\WINDOWS\CDProxyServ.exe
Fri Nov 16 07:32:52 2007 => Scanning File C:\WINDOWS\clock.avi
Fri Nov 16 07:32:53 2007 => Scanning File C:\WINDOWS\Clony2.ini
Fri Nov 16 07:32:53 2007 => Scanning File C:\WINDOWS\control.ini [**]
Fri Nov 16 07:32:53 2007 => *** File C:\WINDOWS\Crystal Rush.bmp having Size Restriction ***
Fri Nov 16 07:32:53 2007 => Scanning File C:\WINDOWS\Crystal Rush.bmp [**]
Fri Nov 16 07:32:53 2007 => Scanning File C:\WINDOWS\DbgHelp.dll
Fri Nov 16 07:32:53 2007 => Scanning File C:\WINDOWS\desktop.ini
Fri Nov 16 07:32:53 2007 => Scanning File C:\WINDOWS\DUMPb323.tmp
Fri Nov 16 07:32:53 2007 => Scanning File C:\WINDOWS\err.txt
Fri Nov 16 07:32:53 2007 => Scanning File C:\WINDOWS\explorer.exe
Fri Nov 16 07:32:53 2007 => Scanning File C:\WINDOWS\explorer.scf
Fri Nov 16 07:32:53 2007 => *** File C:\WINDOWS\Fractal Blue.bmp having Size Restriction ***
Fri Nov 16 07:32:53 2007 => Scanning File C:\WINDOWS\Fractal Blue.bmp [**]
Fri Nov 16 07:32:53 2007 => Scanning File C:\WINDOWS\Granit vert.bmp
Fri Nov 16 07:32:53 2007 => Scanning File C:\WINDOWS\Harry Potter Match.exe
Fri Nov 16 07:32:54 2007 => Scanning File C:\WINDOWS\Harry Potter Match.scr
Fri Nov 16 07:32:55 2007 => Scanning File C:\WINDOWS\Harry Potter.exe
Fri Nov 16 07:32:57 2007 => Scanning File C:\WINDOWS\Harry Potter.scr
Fri Nov 16 07:32:57 2007 => Scanning File C:\WINDOWS\hh.exe
Fri Nov 16 07:32:57 2007 => Scanning File C:\WINDOWS\HPHins01.dat
Fri Nov 16 07:32:57 2007 => Scanning File C:\WINDOWS\hphmdl01.dat
Fri Nov 16 07:32:57 2007 => Scanning File C:\WINDOWS\hpoins03.dat
Fri Nov 16 07:32:57 2007 => Scanning File C:\WINDOWS\hpomdl03.dat
Fri Nov 16 07:32:57 2007 => Scanning File C:\WINDOWS\HP_48BitScanUpdatePatch.ini
Fri Nov 16 07:32:57 2007 => Scanning File C:\WINDOWS\ieuninst.exe
Fri Nov 16 07:32:58 2007 => Scanning File C:\WINDOWS\iPlayer.INI
Fri Nov 16 07:32:58 2007 => Scanning File C:\WINDOWS\ipUnInst.exe
Fri Nov 16 07:32:58 2007 => Scanning File C:\WINDOWS\IsUn040c.exe
Fri Nov 16 07:32:59 2007 => Scanning File C:\WINDOWS\Jour de pêche.bmp
Fri Nov 16 07:32:59 2007 => Scanning File C:\WINDOWS\mickey32.dll
Fri Nov 16 07:32:59 2007 => Scanning File C:\WINDOWS\MLA3854BF.txt
Fri Nov 16 07:32:59 2007 => Scanning File C:\WINDOWS\msdfmap.ini
Fri Nov 16 07:32:59 2007 => Scanning File C:\WINDOWS\Mur de Santa Fe.bmp
Fri Nov 16 07:32:59 2007 => Scanning File C:\WINDOWS\NeroDigital.ini
Fri Nov 16 07:32:59 2007 => Scanning File C:\WINDOWS\NirCmd.exe
Fri Nov 16 07:32:59 2007 => Scanning File C:\WINDOWS\NOTEPAD.EXE
Fri Nov 16 07:32:59 2007 => Scanning File C:\WINDOWS
sreg.dat
Fri Nov 16 07:32:59 2007 => Scanning File C:\WINDOWS
tbtlog.txt
Fri Nov 16 07:33:00 2007 => Scanning File C:\WINDOWS\ODBC.INI
Fri Nov 16 07:33:00 2007 => Scanning File C:\WINDOWS\ODBCINST.INI
Fri Nov 16 07:33:00 2007 => Scanning File C:\WINDOWS\OptChecker.exe
Fri Nov 16 07:33:00 2007 => Scanning File C:\WINDOWS\OptRemove.exe
Fri Nov 16 07:33:00 2007 => Scanning File C:\WINDOWS\orun32.ini
Fri Nov 16 07:33:00 2007 => Scanning File C:\WINDOWS\orun32.isu
Fri Nov 16 07:33:00 2007 => Scanning File C:\WINDOWS\Papier peint de Picture It!.bmp
Fri Nov 16 07:33:00 2007 => *** File C:\WINDOWS\Papier-peint-PhotoFiltre.bmp having Size Restriction ***
Fri Nov 16 07:33:00 2007 => Scanning File C:\WINDOWS\Papier-peint-PhotoFiltre.bmp [**]
Fri Nov 16 07:33:00 2007 => Scanning File C:\WINDOWS\PCFriend.INI [**]
Fri Nov 16 07:33:00 2007 => Scanning File C:\WINDOWS\pdrinst1.dll
Fri Nov 16 07:33:00 2007 => Scanning File C:\WINDOWS\pdrinst2.dll
Fri Nov 16 07:33:01 2007 => Scanning File C:\WINDOWS\pfirewall.log
Fri Nov 16 07:33:01 2007 => Scanning File C:\WINDOWS\pfirewall.log.old
Fri Nov 16 07:33:01 2007 => Scanning File C:\WINDOWS\Plume.bmp
Fri Nov 16 07:33:01 2007 => Scanning File C:\WINDOWS\Q330994.exe
Fri Nov 16 07:33:01 2007 => Scanning File C:\WINDOWSegedit.exe
Fri Nov 16 07:33:01 2007 => Scanning File C:\WINDOWS\Rhododendron.bmp
Fri Nov 16 07:33:01 2007 => Scanning File C:\WINDOWS\Rivière Sumida.bmp
Fri Nov 16 07:33:01 2007 => Scanning File C:\WINDOWS\Rosace bleue 16.bmp
Fri Nov 16 07:33:01 2007 => Scanning File C:\WINDOWS\SchedLgU.Txt
Fri Nov 16 07:33:01 2007 => Scanning File C:\WINDOWS\setupact.log
Fri Nov 16 07:33:01 2007 => Scanning File C:\WINDOWS\setupapi.log
Fri Nov 16 07:33:02 2007 => Scanning File C:\WINDOWS\setupapi.log.0.old
Fri Nov 16 07:33:02 2007 => Scanning File C:\WINDOWS\setuperr.log [**]
Fri Nov 16 07:33:02 2007 => Scanning File C:\WINDOWS\smscfg.ini
Fri Nov 16 07:33:02 2007 => Scanning File C:\WINDOWS\StationRipper.INI
Fri Nov 16 07:33:02 2007 => Scanning File C:\WINDOWS\Sti_Trace.log [**]
Fri Nov 16 07:33:02 2007 => Scanning File C:\WINDOWS\system.ini
Fri Nov 16 07:33:02 2007 => Scanning File C:\WINDOWS\TASKMAN.EXE
Fri Nov 16 07:33:02 2007 => Scanning File C:\WINDOWS\Tasse à café.bmp
Fri Nov 16 07:33:02 2007 => Scanning File C:\WINDOWS	wain.dll
Fri Nov 16 07:33:02 2007 => Scanning File C:\WINDOWS	wain_32.dll
Fri Nov 16 07:33:02 2007 => Scanning File C:\WINDOWS	wunk_16.exe
Fri Nov 16 07:33:02 2007 => Scanning File C:\WINDOWS	wunk_32.exe
Fri Nov 16 07:33:02 2007 => Scanning File C:\WINDOWS\uninst.exe
Fri Nov 16 07:33:03 2007 => Scanning File C:\WINDOWS\unvise32qt.exe
Fri Nov 16 07:33:03 2007 => Scanning File C:\WINDOWS\Unwise.exe
Fri Nov 16 07:33:03 2007 => Scanning File C:\WINDOWS\vb.ini
Fri Nov 16 07:33:03 2007 => Scanning File C:\WINDOWS\vbaddin.ini
Fri Nov 16 07:33:03 2007 => Scanning File C:\WINDOWS\Vent de prairie.bmp
Fri Nov 16 07:33:03 2007 => Scanning File C:\WINDOWS\vmmreg32.dll
Fri Nov 16 07:33:03 2007 => Scanning File C:\WINDOWS\wiadebug.log
Fri Nov 16 07:33:03 2007 => Scanning File C:\WINDOWS\wiaservc.log
Fri Nov 16 07:33:03 2007 => Scanning File C:\WINDOWS\win.ini
Fri Nov 16 07:33:03 2007 => Scanning File C:\WINDOWS\WindowsShell.Manifest
Fri Nov 16 07:33:03 2007 => Scanning File C:\WINDOWS\WindowsUpdate.log
Fri Nov 16 07:33:03 2007 => Scanning File C:\WINDOWS\winhelp.exe
Fri Nov 16 07:33:03 2007 => Scanning File C:\WINDOWS\winhlp32.exe
Fri Nov 16 07:33:04 2007 => Scanning File C:\WINDOWS\winnt.bmp
Fri Nov 16 07:33:04 2007 => Scanning File C:\WINDOWS\winnt256.bmp
Fri Nov 16 07:33:04 2007 => Scanning File C:\WINDOWS\winxpmag1.ini
Fri Nov 16 07:33:04 2007 => Scanning File C:\WINDOWS\wmprfFRA.prx
Fri Nov 16 07:33:04 2007 => Scanning File C:\WINDOWS\WMSysPr9.prx
Fri Nov 16 07:33:04 2007 => Scanning File C:\WINDOWS\WMSysPrx.prx
Fri Nov 16 07:33:04 2007 => Scanning File C:\WINDOWS\Zapotec.bmp
Fri Nov 16 07:33:04 2007 => Scanning File C:\WINDOWS\_default.pif
Fri Nov 16 07:33:04 2007 => Scanning C:\WINDOWS\System32 Directory
Fri Nov 16 07:33:04 2007 => Scanning Folder: C:\WINDOWS\System32\*.*
Fri Nov 16 07:33:04 2007 => Scanning File C:\WINDOWS\System32\$ncsp$.inf
Fri Nov 16 07:33:04 2007 => Scanning File C:\WINDOWS\System32\$sys$caj.dll
Fri Nov 16 07:33:04 2007 => Scanning File C:\WINDOWS\System32\$sys$upgtool.exe
Fri Nov 16 07:33:05 2007 => Scanning File C:\WINDOWS\System32\$winnt$.inf
Fri Nov 16 07:33:05 2007 => Scanning File C:\WINDOWS\System32\12520437.cpx
Fri Nov 16 07:33:05 2007 => Scanning File C:\WINDOWS\System32\12520850.cpx
Fri Nov 16 07:33:05 2007 => Scanning File C:\WINDOWS\System32\6to4svc.dll
Fri Nov 16 07:33:05 2007 => Scanning File C:\WINDOWS\System32\9060AE1E38.sys
Fri Nov 16 07:33:05 2007 => Scanning File C:\WINDOWS\System32\a15.tbl
Fri Nov 16 07:33:05 2007 => Scanning File C:\WINDOWS\System32\a234.tbl
Fri Nov 16 07:33:05 2007 => Scanning File C:\WINDOWS\System32\a3d.dll
Fri Nov 16 07:33:05 2007 => Scanning File C:\WINDOWS\System32\aaaamon.dll
Fri Nov 16 07:33:05 2007 => Scanning File C:\WINDOWS\System32\access.cpl
Fri Nov 16 07:33:05 2007 => Scanning File C:\WINDOWS\System32\acctres.dll
Fri Nov 16 07:33:05 2007 => Scanning File C:\WINDOWS\System32\accwiz.exe
Fri Nov 16 07:33:05 2007 => Scanning File C:\WINDOWS\System32\acelpdec.ax
Fri Nov 16 07:33:06 2007 => Scanning File C:\WINDOWS\System32\acledit.dll
Fri Nov 16 07:33:06 2007 => Scanning File C:\WINDOWS\System32\aclui.dll
Fri Nov 16 07:33:06 2007 => Scanning File C:\WINDOWS\System32\acode.tbl
Fri Nov 16 07:33:06 2007 => Scanning File C:\WINDOWS\System32\activeds.dll
Fri Nov 16 07:33:06 2007 => Scanning File C:\WINDOWS\System32\activeds.tlb
Fri Nov 16 07:33:06 2007 => Scanning File C:\WINDOWS\System32\ActiveSkin.ocx
Fri Nov 16 07:33:07 2007 => Scanning File C:\WINDOWS\System32\actmovie.exe
Fri Nov 16 07:33:07 2007 => Scanning File C:\WINDOWS\System32\actxprxy.dll
Fri Nov 16 07:33:07 2007 => Scanning File C:\WINDOWS\System32\admparse.dll
Fri Nov 16 07:33:07 2007 => Scanning File C:\WINDOWS\System32\adptif.dll
Fri Nov 16 07:33:07 2007 => Scanning File C:\WINDOWS\System32\adsldp.dll
Fri Nov 16 07:33:07 2007 => Scanning File C:\WINDOWS\System32\adsldpc.dll
Fri Nov 16 07:33:07 2007 => Scanning File C:\WINDOWS\System32\adsmsext.dll
Fri Nov 16 07:33:08 2007 => Scanning File C:\WINDOWS\System32\adsnt.dll
Fri Nov 16 07:33:08 2007 => Scanning File C:\WINDOWS\System32\advapi32.dll
Fri Nov 16 07:33:08 2007 => Scanning File C:\WINDOWS\System32\advpack.dll
Fri Nov 16 07:33:08 2007 => Scanning File C:\WINDOWS\System32\ahui.exe
Fri Nov 16 07:33:08 2007 => Scanning File C:\WINDOWS\System32\alg.exe
Fri Nov 16 07:33:08 2007 => Scanning File C:\WINDOWS\System32\alrsvc.dll
Fri Nov 16 07:33:08 2007 => Scanning File C:\WINDOWS\System32\amcompat.tlb
Fri Nov 16 07:33:08 2007 => Scanning File C:\WINDOWS\System32\amstream.dll
Fri Nov 16 07:33:08 2007 => Scanning File C:\WINDOWS\System32\ansi.sys
Fri Nov 16 07:33:08 2007 => Scanning File C:\WINDOWS\System32\apcups.dll
Fri Nov 16 07:33:08 2007 => Scanning File C:\WINDOWS\System32\append.exe
Fri Nov 16 07:33:09 2007 => Scanning File C:\WINDOWS\System32\apphelp.dll
Fri Nov 16 07:33:09 2007 => Scanning File C:\WINDOWS\System32\appwiz.cpl
Fri Nov 16 07:33:09 2007 => Scanning File C:\WINDOWS\System32\arp.exe
Fri Nov 16 07:33:09 2007 => Scanning File C:\WINDOWS\System32\arphr.tbl
Fri Nov 16 07:33:09 2007 => Scanning File C:\WINDOWS\System32\arptr.tbl
Fri Nov 16 07:33:09 2007 => Scanning File C:\WINDOWS\System32\array30.tab
Fri Nov 16 07:33:09 2007 => Scanning File C:\WINDOWS\System32\arrayhw.tab
Fri Nov 16 07:33:09 2007 => Scanning File C:\WINDOWS\System32\asctrls.ocx
Fri Nov 16 07:33:09 2007 => Scanning File C:\WINDOWS\System32\asferror.dll
Fri Nov 16 07:33:09 2007 => Scanning File C:\WINDOWS\System32\asfsipc.dll
Fri Nov 16 07:33:09 2007 => Scanning File C:\WINDOWS\System32\asycfilt.dll
Fri Nov 16 07:33:10 2007 => Scanning File C:\WINDOWS\System32\at.exe
Fri Nov 16 07:33:10 2007 => Scanning File C:\WINDOWS\System32\ATHPRXY.DLL
Fri Nov 16 07:33:10 2007 => Scanning File C:\WINDOWS\System32\ati2dvag.dll
Fri Nov 16 07:33:10 2007 => Scanning File C:\WINDOWS\System32\ati2edxx.dll
Fri Nov 16 07:33:10 2007 => Scanning File C:\WINDOWS\System32\ati2evxx.dll
Fri Nov 16 07:33:10 2007 => Scanning File C:\WINDOWS\System32\ati2evxx.exe
Fri Nov 16 07:33:10 2007 => Scanning File C:\WINDOWS\System32\Ati2mdxx.exe
Fri Nov 16 07:33:10 2007 => Scanning File C:\WINDOWS\System32\ati3d1ag.dll
Fri Nov 16 07:33:10 2007 => Scanning File C:\WINDOWS\System32\ati3d2ag.dll
Fri Nov 16 07:33:11 2007 => Scanning File C:\WINDOWS\System32\ati3duag.dll
Fri Nov 16 07:33:11 2007 => Scanning File C:\WINDOWS\System32\atiiiexx.dll
Fri Nov 16 07:33:11 2007 => *** File C:\WINDOWS\System32\atioglxx.dll having Size Restriction ***
Fri Nov 16 07:33:11 2007 => Scanning File C:\WINDOWS\System32\atioglxx.dll [**]
Fri Nov 16 07:33:11 2007 => Scanning File C:\WINDOWS\System32\atitvo32.dll
Fri Nov 16 07:33:11 2007 => Scanning File C:\WINDOWS\System32\ativvaxx.dll
Fri Nov 16 07:33:11 2007 => Scanning File C:\WINDOWS\System32\atkctrs.dll
Fri Nov 16 07:33:11 2007 => Scanning File C:\WINDOWS\System32\atl.dll
Fri Nov 16 07:33:11 2007 => Scanning File C:\WINDOWS\System32\atl70.dll
Fri Nov 16 07:33:12 2007 => Scanning File C:\WINDOWS\System32\atl71.dll
Fri Nov 16 07:33:12 2007 => Scanning File C:\WINDOWS\System32\atmadm.exe
Fri Nov 16 07:33:12 2007 => Scanning File C:\WINDOWS\System32\atmfd.dll
Fri Nov 16 07:33:12 2007 => Scanning File C:\WINDOWS\System32\atmlib.dll
Fri Nov 16 07:33:12 2007 => Scanning File C:\WINDOWS\System32\atmpvcno.dll
Fri Nov 16 07:33:12 2007 => Scanning File C:\WINDOWS\System32\atrace.dll
Fri Nov 16 07:33:12 2007 => Scanning File C:\WINDOWS\System32\attrib.exe
Fri Nov 16 07:33:12 2007 => Scanning File C:\WINDOWS\System32\Audiodev.dll
Fri Nov 16 07:33:12 2007 => Scanning File C:\WINDOWS\System32\audiosrv.dll
Fri Nov 16 07:33:12 2007 => Scanning File C:\WINDOWS\System32\authz.dll
Fri Nov 16 07:33:12 2007 => Scanning File C:\WINDOWS\System32\autochk.exe
Fri Nov 16 07:33:12 2007 => Scanning File C:\WINDOWS\System32\autoconv.exe
Fri Nov 16 07:33:13 2007 => Scanning File C:\WINDOWS\System32\autodisc.dll
Fri Nov 16 07:33:13 2007 => Scanning File C:\WINDOWS\System32\AUTOEXEC.NT
Fri Nov 16 07:33:13 2007 => Scanning File C:\WINDOWS\System32\autofmt.exe
Fri Nov 16 07:33:13 2007 => Scanning File C:\WINDOWS\System32\autolfn.exe
Fri Nov 16 07:33:13 2007 => Scanning File C:\WINDOWS\System32\avicap.dll
Fri Nov 16 07:33:14 2007 => Scanning File C:\WINDOWS\System32\avicap32.dll
Fri Nov 16 07:33:14 2007 => Scanning File C:\WINDOWS\System32\avifil32.dll
Fri Nov 16 07:33:14 2007 => Scanning File C:\WINDOWS\System32\avifile.dll
Fri Nov 16 07:33:14 2007 => Scanning File C:\WINDOWS\System32\avmeter.dll
Fri Nov 16 07:33:14 2007 => Scanning File C:\WINDOWS\System32\avtapi.dll
Fri Nov 16 07:33:14 2007 => Scanning File C:\WINDOWS\System32\avwav.dll
Fri Nov 16 07:33:14 2007 => Scanning File C:\WINDOWS\System32\AXPSupport.dll
Fri Nov 16 07:33:15 2007 => Scanning File C:\WINDOWS\System32\basesrv.dll
Fri Nov 16 07:33:15 2007 => Scanning File C:\WINDOWS\System32\batmeter.dll
Fri Nov 16 07:33:15 2007 => Scanning File C:\WINDOWS\System32\batt.dll
Fri Nov 16 07:33:15 2007 => Scanning File C:\WINDOWS\System32\bdaplgin.ax
Fri Nov 16 07:33:15 2007 => Scanning File C:\WINDOWS\System32\bidispl.dll
Fri Nov 16 07:33:15 2007 => Scanning File C:\WINDOWS\System32\big5.nls
Fri Nov 16 07:33:15 2007 => Scanning File C:\WINDOWS\System32\bios1.rom
Fri Nov 16 07:33:15 2007 => Scanning File C:\WINDOWS\System32\bios4.rom
Fri Nov 16 07:33:15 2007 => Scanning File C:\WINDOWS\System32\bitsprx2.dll
Fri Nov 16 07:33:15 2007 => Scanning File C:\WINDOWS\System32\bitsprx3.dll
Fri Nov 16 07:33:15 2007 => Scanning File C:\WINDOWS\System32\blackbox.dll
Fri Nov 16 07:33:16 2007 => Scanning File C:\WINDOWS\System32\bootok.exe
Fri Nov 16 07:33:16 2007 => Scanning File C:\WINDOWS\System32\bootvid.dll
Fri Nov 16 07:33:16 2007 => Scanning File C:\WINDOWS\System32\bootvrfy.exe
Fri Nov 16 07:33:16 2007 => Scanning File C:\WINDOWS\System32\bopomofo.nls
Fri Nov 16 07:33:16 2007 => Scanning File C:\WINDOWS\System32\bopomofo.uce
Fri Nov 16 07:33:16 2007 => Scanning File C:\WINDOWS\System32\browselc.dll
Fri Nov 16 07:33:16 2007 => Scanning File C:\WINDOWS\System32\browser.dll
Fri Nov 16 07:33:16 2007 => Scanning File C:\WINDOWS\System32\browseui.dll
Fri Nov 16 07:33:16 2007 => Scanning File C:\WINDOWS\System32\browsewm.dll
Fri Nov 16 07:33:16 2007 => Scanning File C:\WINDOWS\System32\cabinet.dll
Fri Nov 16 07:33:16 2007 => Scanning File C:\WINDOWS\System32\cabview.dll
Fri Nov 16 07:33:17 2007 => Scanning File C:\WINDOWS\System32\cacls.exe
Fri Nov 16 07:33:17 2007 => Scanning File C:\WINDOWS\System32\calc.exe
Fri Nov 16 07:33:17 2007 => Scanning File C:\WINDOWS\System32\camocx.dll
Fri Nov 16 07:33:17 2007 => Scanning File C:\WINDOWS\System32\Cap.ocx
Fri Nov 16 07:33:17 2007 => Scanning File C:\WINDOWS\System32\capesnpn.dll
Fri Nov 16 07:33:17 2007 => Scanning File C:\WINDOWS\System32\capicom.dll
Fri Nov 16 07:33:18 2007 => Scanning File C:\WINDOWS\System32\cards.dll
Fri Nov 16 07:33:18 2007 => Scanning File C:\WINDOWS\System32\catsrv.dll
Fri Nov 16 07:33:18 2007 => Scanning File C:\WINDOWS\System32\catsrvps.dll
Fri Nov 16 07:33:18 2007 => Scanning File C:\WINDOWS\System32\catsrvut.dll
Fri Nov 16 07:33:18 2007 => Scanning File C:\WINDOWS\System32\CBC01B0909.ocx
Fri Nov 16 07:33:18 2007 => Scanning File C:\WINDOWS\System32\ccfgnt.dll
Fri Nov 16 07:33:19 2007 => Scanning File C:\WINDOWS\System32\CDFVIEW.DLL
Fri Nov 16 07:33:19 2007 => Scanning File C:\WINDOWS\System32\cdm.dll
Fri Nov 16 07:33:19 2007 => Scanning File C:\WINDOWS\System32\cdmodem.dll
Fri Nov 16 07:33:19 2007 => Scanning File C:\WINDOWS\System32\cdosys.dll
Fri Nov 16 07:33:19 2007 => Scanning File C:\WINDOWS\System32\cdplayer.exe.manifest
Fri Nov 16 07:33:19 2007 => Scanning File C:\WINDOWS\System32\certcli.dll
Fri Nov 16 07:33:19 2007 => Scanning File C:\WINDOWS\System32\certmgr.dll
Fri Nov 16 07:33:20 2007 => Scanning File C:\WINDOWS\System32\certmgr.msc
Fri Nov 16 07:33:20 2007 => Scanning File C:\WINDOWS\System32\cewmdm.dll
Fri Nov 16 07:33:20 2007 => Scanning File C:\WINDOWS\System32\cfgbkend.dll
Fri Nov 16 07:33:20 2007 => Scanning File C:\WINDOWS\System32\cfgmgr32.dll
Fri Nov 16 07:33:20 2007 => Scanning File C:\WINDOWS\System32\chajei.ime
Fri Nov 16 07:33:20 2007 => Scanning File C:\WINDOWS\System32\charmap.exe
Fri Nov 16 07:33:21 2007 => Scanning File C:\WINDOWS\System32\Chaînes.scf
Fri Nov 16 07:33:21 2007 => Scanning File C:\WINDOWS\System32\chcp.com
Fri Nov 16 07:33:21 2007 => Scanning File C:\WINDOWS\System32\chkdsk.exe
Fri Nov 16 07:33:21 2007 => Scanning File C:\WINDOWS\System32\chkntfs.exe
Fri Nov 16 07:33:21 2007 => Scanning File C:\WINDOWS\System32\chsbrkr.dll
Fri Nov 16 07:33:21 2007 => Scanning File C:\WINDOWS\System32\chtbrkr.dll
Fri Nov 16 07:33:21 2007 => Scanning File C:\WINDOWS\System32\ciadmin.dll
Fri Nov 16 07:33:21 2007 => Scanning File C:\WINDOWS\System32\ciadv.msc
Fri Nov 16 07:33:21 2007 => Scanning File C:\WINDOWS\System32\cic.dll
Fri Nov 16 07:33:22 2007 => Scanning File C:\WINDOWS\System32\cidaemon.exe
Fri Nov 16 07:33:22 2007 => Scanning File C:\WINDOWS\System32\CinemSup.sys
Fri Nov 16 07:33:22 2007 => Scanning File C:\WINDOWS\System32\CINTLGNT.IME
Fri Nov 16 07:33:22 2007 => Scanning File C:\WINDOWS\System32\ciodm.dll
Fri Nov 16 07:33:22 2007 => Scanning File C:\WINDOWS\System32\cisvc.exe
Fri Nov 16 07:33:22 2007 => Scanning File C:\WINDOWS\System32\ckcnv.exe
Fri Nov 16 07:33:22 2007 => Scanning File C:\WINDOWS\System32\clb.dll
Fri Nov 16 07:33:22 2007 => Scanning File C:\WINDOWS\System32\clbcatex.dll
Fri Nov 16 07:33:22 2007 => Scanning File C:\WINDOWS\System32\clbcatq.dll
Fri Nov 16 07:33:22 2007 => Scanning File C:\WINDOWS\System32\cleanmgr.exe
Fri Nov 16 07:33:22 2007 => Scanning File C:\WINDOWS\System32\cliconf.chm
Fri Nov 16 07:33:23 2007 => Scanning File C:\WINDOWS\System32\cliconfg.dll
Fri Nov 16 07:33:24 2007 => Scanning File C:\WINDOWS\System32\cliconfg.exe
Fri Nov 16 07:33:24 2007 => Scanning File C:\WINDOWS\System32\cliconfg.rll
Fri Nov 16 07:33:24 2007 => Scanning File C:\WINDOWS\System32\clipbrd.exe
Fri Nov 16 07:33:24 2007 => Scanning File C:\WINDOWS\System32\clipsrv.exe
Fri Nov 16 07:33:24 2007 => Scanning File C:\WINDOWS\System32\clusapi.dll
Fri Nov 16 07:33:24 2007 => Scanning File C:\WINDOWS\System32\cmcfg32.dll
Fri Nov 16 07:33:24 2007 => Scanning File C:\WINDOWS\System32\cmd.exe
Fri Nov 16 07:33:24 2007 => Scanning File C:\WINDOWS\System32\cmdial32.dll
Fri Nov 16 07:33:25 2007 => Scanning File C:\WINDOWS\System32\cmdl32.exe
Fri Nov 16 07:33:25 2007 => Scanning File C:\WINDOWS\System32\cmmgr32.hlp
Fri Nov 16 07:33:25 2007 => Scanning File C:\WINDOWS\System32\cmmon32.exe
Fri Nov 16 07:33:25 2007 => Scanning File C:\WINDOWS\System32\cmos.ram
Fri Nov 16 07:33:25 2007 => Scanning File C:\WINDOWS\System32\cmpbk32.dll
Fri Nov 16 07:33:25 2007 => Scanning File C:\WINDOWS\System32\cmprops.dll
Fri Nov 16 07:33:25 2007 => Scanning File C:\WINDOWS\System32\cmstp.exe
Fri Nov 16 07:33:25 2007 => Scanning File C:\WINDOWS\System32\cmutil.dll
Fri Nov 16 07:33:25 2007 => Scanning File C:\WINDOWS\System32\cnbjmon.dll
Fri Nov 16 07:33:25 2007 => Scanning File C:\WINDOWS\System32\cnetcfg.dll
Fri Nov 16 07:33:25 2007 => Scanning File C:\WINDOWS\System32\cnvfat.dll
Fri Nov 16 07:33:26 2007 => Scanning File C:\WINDOWS\System32\colbact.dll
Fri Nov 16 07:33:26 2007 => Scanning File C:\WINDOWS\System32\comaddin.dll
Fri Nov 16 07:33:26 2007 => Scanning File C:\WINDOWS\System32\comcat.dll
Fri Nov 16 07:33:26 2007 => Scanning File C:\WINDOWS\System32\comct332.ocx
Fri Nov 16 07:33:26 2007 => Scanning File C:\WINDOWS\System32\comctl32.dll
Fri Nov 16 07:33:26 2007 => Scanning File C:\WINDOWS\System32\comctl32.ocx
Fri Nov 16 07:33:27 2007 => Scanning File C:\WINDOWS\System32\comdlg32.dll
Fri Nov 16 07:33:27 2007 => Scanning File C:\WINDOWS\System32\comdlg32.ocx
Fri Nov 16 07:33:27 2007 => Scanning File C:\WINDOWS\System32\comm.drv
Fri Nov 16 07:33:27 2007 => Scanning File C:\WINDOWS\System32\command.com
Fri Nov 16 07:33:27 2007 => Scanning File C:\WINDOWS\System32\commdlg.dll
Fri Nov 16 07:33:27 2007 => Scanning File C:\WINDOWS\System32\comp.exe
Fri Nov 16 07:33:27 2007 => Scanning File C:\WINDOWS\System32\compact.exe
Fri Nov 16 07:33:27 2007 => Scanning File C:\WINDOWS\System32\compatUI.dll
Fri Nov 16 07:33:27 2007 => Scanning File C:\WINDOWS\System32\compmgmt.msc
Fri Nov 16 07:33:27 2007 => Scanning File C:\WINDOWS\System32\compobj.dll
Fri Nov 16 07:33:27 2007 => Scanning File C:\WINDOWS\System32\compstui.dll
Fri Nov 16 07:33:27 2007 => Scanning File C:\WINDOWS\System32\comrepl.dll
Fri Nov 16 07:33:27 2007 => Scanning File C:\WINDOWS\System32\comres.dll
Fri Nov 16 07:33:27 2007 => Scanning File C:\WINDOWS\System32\comsnap.dll
Fri Nov 16 07:33:28 2007 => Scanning File C:\WINDOWS\System32\comsvcs.dll
Fri Nov 16 07:33:28 2007 => Scanning File C:\WINDOWS\System32\comuid.dll
Fri Nov 16 07:33:28 2007 => Scanning File C:\WINDOWS\System32\CONFIG.NT
Fri Nov 16 07:33:28 2007 => Scanning File C:\WINDOWS\System32\CONFIG.TMP
Fri Nov 16 07:33:28 2007 => Scanning File C:\WINDOWS\System32\confmsp.dll
Fri Nov 16 07:33:29 2007 => Scanning File C:\WINDOWS\System32\conime.exe
Fri Nov 16 07:33:29 2007 => Scanning File C:\WINDOWS\System32\console.dll
Fri Nov 16 07:33:29 2007 => Scanning File C:\WINDOWS\System32\control.exe
Fri Nov 16 07:33:29 2007 => Scanning File C:\WINDOWS\System32\convert.exe
Fri Nov 16 07:33:29 2007 => Scanning File C:\WINDOWS\System32\corpol.dll
Fri Nov 16 07:33:29 2007 => Scanning File C:\WINDOWS\System32\country.sys
Fri Nov 16 07:33:29 2007 => Scanning File C:\WINDOWS\System32\credui.dll
Fri Nov 16 07:33:29 2007 => Scanning File C:\WINDOWS\System32\crtdll.dll
Fri Nov 16 07:33:29 2007 => Scanning File C:\WINDOWS\System32\crypt32.dll
Fri Nov 16 07:33:29 2007 => Scanning File C:\WINDOWS\System32\cryptdlg.dll
Fri Nov 16 07:33:29 2007 => Scanning File C:\WINDOWS\System32\cryptdll.dll
Fri Nov 16 07:33:29 2007 => Scanning File C:\WINDOWS\System32\cryptext.dll
Fri Nov 16 07:33:30 2007 => Scanning File C:\WINDOWS\System32\cryptnet.dll
Fri Nov 16 07:33:30 2007 => Scanning File C:\WINDOWS\System32\cryptsvc.dll
Fri Nov 16 07:33:30 2007 => Scanning File C:\WINDOWS\System32\cryptui.dll
Fri Nov 16 07:33:30 2007 => Scanning File C:\WINDOWS\System32\cscdll.dll
Fri Nov 16 07:33:30 2007 => Scanning File C:\WINDOWS\System32\cscript.exe
Fri Nov 16 07:33:30 2007 => Scanning File C:\WINDOWS\System32\cscui.dll
Fri Nov 16 07:33:30 2007 => Scanning File C:\WINDOWS\System32\csrsrv.dll
Fri Nov 16 07:33:30 2007 => Scanning File C:\WINDOWS\System32\csrss.exe
Fri Nov 16 07:33:30 2007 => Scanning File C:\WINDOWS\System32\csseqchk.dll
Fri Nov 16 07:33:30 2007 => Scanning File C:\WINDOWS\System32\Ctaa1.dat
Fri Nov 16 07:33:30 2007 => Scanning File C:\WINDOWS\System32\ctdvda32.dll
Fri Nov 16 07:33:30 2007 => Scanning File C:\WINDOWS\System32\ctfmon.exe
Fri Nov 16 07:33:30 2007 => Scanning File C:\WINDOWS\System32\ctl3d32.dll
Fri Nov 16 07:33:30 2007 => Scanning File C:\WINDOWS\System32\ctl3dv2.dll
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\ctype.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_037.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_10000.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_10001.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_10002.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_10003.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_10006.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_10007.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_10008.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_10010.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_10017.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_10029.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_10079.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_10081.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_10082.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_1026.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_1250.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_1251.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_1252.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_1253.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_1254.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_1255.nls
Fri Nov 16 07:33:31 2007 => Scanning File C:\WINDOWS\System32\c_1256.nls
Fri Nov 16 07:33:32 2007 => Scanning File C:\WINDOWS\System32\c_1257.nls
Fri Nov 16 07:33:32 2007 => Scanning File C:\WINDOWS\System32\c_1258.nls
Fri Nov 16 07:33:32 2007 => Scanning File C:\WINDOWS\System32\c_1361.nls
Fri Nov 16 07:33:32 2007 => Scanning File C:\WINDOWS\System32\c_20000.nls
Fri Nov 16 07:33:32 2007 => Scanning File C:\WINDOWS\System32\c_20127.nls
Fri Nov 16 07:33:32 2007 => Scanning File C:\WINDOWS\System32\c_20261.nls
Fri Nov 16 07:33:32 2007 => Scanning File C:\WINDOWS\System32\c_20290.nls
Fri Nov 16 07:33:32 2007 => Scanning File C:\WINDOWS\System32\c_20866.nls
Fri Nov 16 07:33:32 2007 => Scanning File C:\WINDOWS\System32\c_20905.nls
Fri Nov 16 07:33:32 2007 => Scanning File C:\WINDOWS\System32\c_20932.nls
Fri Nov 16 07:33:32 2007 => Scanning File C:\WINDOWS\System32\c_20936.nls
Fri Nov 16 07:33:32 2007 => Scanning File C:\WINDOWS\System32\c_20949.nls
Fri Nov 16 07:33:32 2007 => Scanning File C:\WINDOWS\System32\c_21027.nls
Fri Nov 16 07:33:32 2007 => Scanning File C:\WINDOWS\System32\c_21866.nls
Fri Nov 16 07:33:32 2007 => Scanning File C:\WINDOWS\System32\c_28591.nls
Fri Nov 16 07:33:32 2007 => Scanning File C:\WINDOWS\System32\c_28592.nls
Fri Nov 16 07:33:32 2007 => Scanning File C:\WINDOWS\System32\c_28593.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\C_28594.NLS
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\C_28595.NLS
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\C_28597.NLS
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_28598.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_28599.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_28603.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_28605.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_437.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_500.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_737.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_775.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_850.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_852.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_855.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_857.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_860.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_861.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_863.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_865.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_866.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_869.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_874.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_875.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_932.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_936.nls
Fri Nov 16 07:33:33 2007 => Scanning File C:\WINDOWS\System32\c_949.nls
Fri Nov 16 07:33:34 2007 => Scanning File C:\WINDOWS\System32\c_950.nls
Fri Nov 16 07:33:34 2007 => Scanning File C:\WINDOWS\System32\c_g18030.dll
Fri Nov 16 07:33:34 2007 => Scanning File C:\WINDOWS\System32\c_is2022.dll
Fri Nov 16 07:33:34 2007 => Scanning File C:\WINDOWS\System32\d3d8.dll
Fri Nov 16 07:33:34 2007 => Scanning File C:\WINDOWS\System32\d3d8thk.dll
Fri Nov 16 07:33:34 2007 => Scanning File C:\WINDOWS\System32\d3d9.dll
Fri Nov 16 07:33:35 2007 => Scanning File C:\WINDOWS\System32\d3dim.dll
Fri Nov 16 07:33:35 2007 => Scanning File C:\WINDOWS\System32\d3dim700.dll
Fri Nov 16 07:33:35 2007 => Scanning File C:\WINDOWS\System32\d3dpmesh.dll
Fri Nov 16 07:33:36 2007 => Scanning File C:\WINDOWS\System32\d3dramp.dll
Fri Nov 16 07:33:36 2007 => Scanning File C:\WINDOWS\System32\d3drm.dll
Fri Nov 16 07:33:36 2007 => Scanning File C:\WINDOWS\System32\d3dxof.dll
Fri Nov 16 07:33:36 2007 => Scanning File C:\WINDOWS\System32\DANIM.DLL
Fri Nov 16 07:33:37 2007 => Scanning File C:\WINDOWS\System32\dataclen.dll
Fri Nov 16 07:33:37 2007 => Scanning File C:\WINDOWS\System32\datime.dll
Fri Nov 16 07:33:37 2007 => Scanning File C:\WINDOWS\System32\davclnt.dll
Fri Nov 16 07:33:37 2007 => Scanning File C:\WINDOWS\System32\daxctle.ocx
Fri Nov 16 07:33:37 2007 => Scanning File C:\WINDOWS\System32\dayi.ime
Fri Nov 16 07:33:37 2007 => Scanning File C:\WINDOWS\System32\dayiphr.tbl
Fri Nov 16 07:33:37 2007 => Scanning File C:\WINDOWS\System32\dayiptr.tbl
Fri Nov 16 07:33:37 2007 => Scanning File C:\WINDOWS\System32\dbgeng.dll
Fri Nov 16 07:33:38 2007 => Scanning File C:\WINDOWS\System32\dbghelp.dll
Fri Nov 16 07:33:38 2007 => Scanning File C:\WINDOWS\System32\dbmsadsn.dll
Fri Nov 16 07:33:38 2007 => Scanning File C:\WINDOWS\System32\dbmsrpcn.dll
Fri Nov 16 07:33:38 2007 => Scanning File C:\WINDOWS\System32\dbmsvinn.dLL
Fri Nov 16 07:33:38 2007 => Scanning File C:\WINDOWS\System32\DBnetlib.dll
Fri Nov 16 07:33:38 2007 => Scanning File C:\WINDOWS\System32\dbnmpntw.dll
Fri Nov 16 07:33:38 2007 => Scanning File C:\WINDOWS\System32\Dcache.bin
Fri Nov 16 07:33:38 2007 => Scanning File C:\WINDOWS\System32\dciman32.dll
Fri Nov 16 07:33:38 2007 => Scanning File C:\WINDOWS\System32\dcomcnfg.exe
Fri Nov 16 07:33:38 2007 => Scanning File C:\WINDOWS\System32\ddeml.dll
Fri Nov 16 07:33:38 2007 => Scanning File C:\WINDOWS\System32\ddeshare.exe
Fri Nov 16 07:33:38 2007 => Scanning File C:\WINDOWS\System32\ddraw.dll
Fri Nov 16 07:33:38 2007 => Scanning File C:\WINDOWS\System32\ddrawex.dll
Fri Nov 16 07:33:38 2007 => Scanning File C:\WINDOWS\System32\debug.exe
Fri Nov 16 07:33:39 2007 => Scanning File C:\WINDOWS\System32\declrds.ax
Fri Nov 16 07:33:39 2007 => Scanning File C:\WINDOWS\System32\defrag.exe
Fri Nov 16 07:33:39 2007 => Scanning File C:\WINDOWS\System32\desk.cpl
Fri Nov 16 07:33:39 2007 => Scanning File C:\WINDOWS\System32\deskadp.dll
Fri Nov 16 07:33:39 2007 => Scanning File C:\WINDOWS\System32\deskmon.dll
Fri Nov 16 07:33:39 2007 => Scanning File C:\WINDOWS\System32\deskperf.dll
Fri Nov 16 07:33:39 2007 => Scanning File C:\WINDOWS\System32\desktop.ini
Fri Nov 16 07:33:39 2007 => Scanning File C:\WINDOWS\System32\devenum.dll
Fri Nov 16 07:33:39 2007 => Scanning File C:\WINDOWS\System32\devmgmt.msc
Fri Nov 16 07:33:39 2007 => Scanning File C:\WINDOWS\System32\devmgr.dll
Fri Nov 16 07:33:39 2007 => Scanning File C:\WINDOWS\System32\dfrg.msc
Fri Nov 16 07:33:39 2007 => Scanning File C:\WINDOWS\System32\dfrgfat.exe
Fri Nov 16 07:33:39 2007 => Scanning File C:\WINDOWS\System32\dfrgntfs.exe
Fri Nov 16 07:33:40 2007 => Scanning File C:\WINDOWS\System32\dfrgres.dll
Fri Nov 16 07:33:40 2007 => Scanning File C:\WINDOWS\System32\dfrgsnap.dll
Fri Nov 16 07:33:40 2007 => Scanning File C:\WINDOWS\System32\dfrgui.dll
Fri Nov 16 07:33:40 2007 => Scanning File C:\WINDOWS\System32\dfsshlex.dll
Fri Nov 16 07:33:40 2007 => Scanning File C:\WINDOWS\System32\dgnet.dll
Fri Nov 16 07:33:40 2007 => Scanning File C:\WINDOWS\System32\dgrpsetu.dll
Fri Nov 16 07:33:40 2007 => Scanning File C:\WINDOWS\System32\dgsetup.dll
Fri Nov 16 07:33:41 2007 => Scanning File C:\WINDOWS\System32\dhcpcsvc.dll
Fri Nov 16 07:33:41 2007 => Scanning File C:\WINDOWS\System32\dhcpmon.dll
Fri Nov 16 07:33:41 2007 => Scanning File C:\WINDOWS\System32\dhcpsapi.dll
Fri Nov 16 07:33:41 2007 => Scanning File C:\WINDOWS\System32\diactfrm.dll
Fri Nov 16 07:33:42 2007 => Scanning File C:\WINDOWS\System32\diantz.exe
Fri Nov 16 07:33:42 2007 => Scanning File C:\WINDOWS\System32\digest.dll
Fri Nov 16 07:33:42 2007 => Scanning File C:\WINDOWS\System32\dimap.dll
Fri Nov 16 07:33:42 2007 => Scanning File C:\WINDOWS\System32\dinput.dll
Fri Nov 16 07:33:42 2007 => Scanning File C:\WINDOWS\System32\dinput8.dll
Fri Nov 16 07:33:42 2007 => Scanning File C:\WINDOWS\System32\diskcomp.com
Fri Nov 16 07:33:43 2007 => Scanning File C:\WINDOWS\System32\diskcopy.com
Fri Nov 16 07:33:43 2007 => Scanning File C:\WINDOWS\System32\diskcopy.dll
Fri Nov 16 07:33:43 2007 => Scanning File C:\WINDOWS\System32\diskmgmt.msc
Fri Nov 16 07:33:43 2007 => Scanning File C:\WINDOWS\System32\diskpart.exe
Fri Nov 16 07:33:43 2007 => Scanning File C:\WINDOWS\System32\diskperf.exe
Fri Nov 16 07:33:43 2007 => Scanning File C:\WINDOWS\System32\dispex.dll
Fri Nov 16 07:33:43 2007 => Scanning File C:\WINDOWS\System32\DivX.dll
Fri Nov 16 07:33:44 2007 => Scanning File C:\WINDOWS\System32\divxdec.ax
Fri Nov 16 07:33:44 2007 => Scanning File C:\WINDOWS\System32\divxdec_0407.dll
Fri Nov 16 07:33:44 2007 => Scanning File C:\WINDOWS\System32\divxdec_040c.dll
Fri Nov 16 07:33:44 2007 => Scanning File C:\WINDOWS\System32\divxdec_0411.dll
Fri Nov 16 07:33:44 2007 => Scanning File C:\WINDOWS\System32\divxenc.ax
Fri Nov 16 07:33:45 2007 => Scanning File C:\WINDOWS\System32\divx_xx07.dll
Fri Nov 16 07:33:46 2007 => Scanning File C:\WINDOWS\System32\divx_xx0c.dll
Fri Nov 16 07:33:46 2007 => Scanning File C:\WINDOWS\System32\divx_xx11.dll
Fri Nov 16 07:33:47 2007 => Scanning File C:\WINDOWS\System32\dllhost.exe
Fri Nov 16 07:33:47 2007 => Scanning File C:\WINDOWS\System32\dllhst3g.exe
Fri Nov 16 07:33:47 2007 => Scanning File C:\WINDOWS\System32\dmadmin.exe
Fri Nov 16 07:33:47 2007 => Scanning File C:\WINDOWS\System32\dmband.dll
Fri Nov 16 07:33:47 2007 => Scanning File C:\WINDOWS\System32\dmcompos.dll
Fri Nov 16 07:33:47 2007 => Scanning File C:\WINDOWS\System32\dmconfig.dll
Fri Nov 16 07:33:47 2007 => Scanning File C:\WINDOWS\System32\dmdlgs.dll
Fri Nov 16 07:33:48 2007 => Scanning File C:\WINDOWS\System32\dmdskmgr.dll
Fri Nov 16 07:33:48 2007 => Scanning File C:\WINDOWS\System32\dmdskres.dll
Fri Nov 16 07:33:48 2007 => Scanning File C:\WINDOWS\System32\dmime.dll
Fri Nov 16 07:33:48 2007 => Scanning File C:\WINDOWS\System32\dmintf.dll
Fri Nov 16 07:33:48 2007 => Scanning File C:\WINDOWS\System32\dmloader.dll
Fri Nov 16 07:33:48 2007 => Scanning File C:\WINDOWS\System32\dmocx.dll
Fri Nov 16 07:33:49 2007 => Scanning File C:\WINDOWS\System32\dmremote.exe
Fri Nov 16 07:33:49 2007 => Scanning File C:\WINDOWS\System32\dmscript.dll
Fri Nov 16 07:33:49 2007 => Scanning File C:\WINDOWS\System32\dmserver.dll
Fri Nov 16 07:33:49 2007 => Scanning File C:\WINDOWS\System32\dmstyle.dll
Fri Nov 16 07:33:49 2007 => Scanning File C:\WINDOWS\System32\dmsynth.dll
Fri Nov 16 07:33:49 2007 => Scanning File C:\WINDOWS\System32\dmusic.dll
Fri Nov 16 07:33:49 2007 => Scanning File C:\WINDOWS\System32\dmutil.dll
Fri Nov 16 07:33:49 2007 => Scanning File C:\WINDOWS\System32\dmview.ocx
Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\dngknxww.dll
Fri Nov 16 07:33:50 2007 => File C:\WINDOWS\System32\dngknxww.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.aps. No Action Taken.

havi · Answer

Me revoilà apparemment je n'ai plus C:\WINDOWS\System32\ssqrp.dll  dans mon système j'ai fait regedit ainsi que tout ce que tu m'a dit et tout ce qui a après msv1_0 c'est  LsaPid (dans la colonne nom)   REG_DWORD  (dans la colonne type) et dans la colonne donnée 0x00000314 (788). je pense que tout a été effacé lors du prédédent nettoyage que j'ai effectué.

afideg · Answer

Re,

N'abandonne pas, ça commence à devenir intéressant ==> 
Fri Nov 16 07:33:50 2007 => File C:\WINDOWS\System32\dngknxww.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.aps. No Action Taken.

Merci
Al

havi · Answer

Pour C:\WINDOWS\SYSTEM32\RMA01YY je l'ai effacé mais pour C:\WINDOWS\SYSTEM32\MQPLHVRX.EXE  , et ,C:\WINDOWS\SYSTEM32\UDXOLURP.EXE n'est pas présent dans  mon système; et il les deux icones Live Safety Center.lnk et Online Security Guide.lnk ont été effacé durant le précédent nettoyage .

Et pour C:\WINDOWS\SYSTEM32\$SYS$FILESYSTEM\$SYS$DRMSERVER.EXE  j'ai suivi le même chemin que toi c'est-à-dire
disque local C:, puis windows puis le dossier  SYSTEM 32  puis le dossier  $sys$filesystem puis j'ai une icône en forme de kadena qui apparait c'est le fichier $SYS$DRMSERVER.EXE. avec les $ voilà , en fait c'est quoi le rapport avec le virus trojan ? tu peux me l'expliqué plus clairement et ce truc étais aller si loin dans le système de mon ordi ?

Ah oui voilà le rapport virus total sur  $SYS$DRMSERVER.EXE.


Fichier _sys_DRMServer.exe reçu le 2007.11.16 20:41:42 (CET)Antivirus Version Dernière mise à jour Résultat 


AhnLab-V3 2007.11.17.0 2007.11.16 - 
AntiVir 7.6.0.34 2007.11.16 - 
Authentium 4.93.8 2007.11.16 - 
Avast 4.7.1074.0 2007.11.15 - 
AVG 7.5.0.503 2007.11.16 Generic6.AAOG 
BitDefender 7.2 2007.11.16 - 
CAT-QuickHeal 9.00 2007.11.16 - 
ClamAV 0.91.2 2007.11.16 - 
DrWeb 4.44.0.09170 2007.11.16 - 
eSafe 7.0.15.0 2007.11.14 - 
eTrust-Vet 31.2.5300 2007.11.16 - 
Ewido 4.0 2007.11.16 - 
FileAdvisor 1 2007.11.16 High threat detected 
Fortinet 3.11.0.0 2007.10.19 - 
F-Prot 4.4.2.54 2007.11.16 - 
F-Secure 6.70.13030.0 2007.11.16 W32/Malware.JR 
Ikarus T3.1.1.12 2007.11.16 - 
Kaspersky 7.0.0.125 2007.11.16 - 
McAfee 5165 2007.11.16 - 
Microsoft 1.3007 2007.11.12 - 
NOD32v2 2664 2007.11.16 - 
Norman 5.80.02 2007.11.16 W32/Malware.JR 
Panda 9.0.0.4 2007.11.16 Rootkit/XCP 
Prevx1 V2 2007.11.16 - 
Rising 20.18.40.00 2007.11.16 Trojan.Malware.fq 
Sophos 4.23.0 2007.11.16 - 
Sunbelt 2.2.907.0 2007.11.16 - 
Symantec 10 2007.11.16 - 
TheHacker 6.2.9.132 2007.11.16 - 
VBA32 3.12.2.5 2007.11.16 - 
VirusBuster 4.3.26:9 2007.11.16 - 
Webwasher-Gateway 6.0.1 2007.11.16 Riskware.Rootkit.XCP.1 
 
Information additionnelle 
File size: 307200 bytes 
MD5: 3692633395142b264b0a73e4994f657f 
SHA1: 8fe00da5f0b2114a132f41eb5e7065d46e7741fa 
Bit9 info: http://fileadvisor.bit9.com/services/extinfo.aspx?md5=3692633395142b264b0a73e4994f657f 
 
Antivirus	Version	Dernière mise à jour	Résultat
AhnLab-V3	2007.11.17.0	2007.11.16	-
AntiVir	7.6.0.34	2007.11.16	-
Authentium	4.93.8	2007.11.16	-
Avast	4.7.1074.0	2007.11.15	-
AVG	7.5.0.503	2007.11.16	Generic6.AAOG
BitDefender	7.2	2007.11.16	-
CAT-QuickHeal	9.00	2007.11.16	-
ClamAV	0.91.2	2007.11.16	-
DrWeb	4.44.0.09170	2007.11.16	-
eSafe	7.0.15.0	2007.11.14	-
eTrust-Vet	31.2.5300	2007.11.16	-
Ewido	4.0	2007.11.16	-
FileAdvisor	1	2007.11.16	High threat detected
Fortinet	3.11.0.0	2007.10.19	-
F-Prot	4.4.2.54	2007.11.16	-
F-Secure	6.70.13030.0	2007.11.16	W32/Malware.JR
Ikarus	T3.1.1.12	2007.11.16	-
Kaspersky	7.0.0.125	2007.11.16	-
McAfee	5165	2007.11.16	-
Microsoft	1.3007	2007.11.12	-
NOD32v2	2664	2007.11.16	-
Norman	5.80.02	2007.11.16	W32/Malware.JR
Panda	9.0.0.4	2007.11.16	Rootkit/XCP
Prevx1	V2	2007.11.16	-
Rising	20.18.40.00	2007.11.16	Trojan.Malware.fq
Sophos	4.23.0	2007.11.16	-
Sunbelt	2.2.907.0	2007.11.16	-
Symantec	10	2007.11.16	-
TheHacker	6.2.9.132	2007.11.16	-
VBA32	3.12.2.5	2007.11.16	-
VirusBuster	4.3.26:9	2007.11.16	-
Webwasher-Gateway	6.0.1	2007.11.16	Riskware.Rootkit.XCP.1

Information additionnelle
File size: 307200 bytes
MD5: 3692633395142b264b0a73e4994f657f
SHA1: 8fe00da5f0b2114a132f41eb5e7065d46e7741fa
Bit9 info: http://fileadvisor.bit9.com/services/extinfo.aspx?md5=3692633395142b264b0a73e4994f657f

havi · Answer

Partie 3 du rapport hyper long:

Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\dnsapi.dll
Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\dnsrslvr.dll
Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\docprop.dll
Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\docprop2.dll
Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\doskey.exe
Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\dosx.exe
Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\dpcdll.dll
Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\dplay.dll
Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\dplaysvr.exe
Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\dplayx.dll
Fri Nov 16 07:33:51 2007 => Scanning File C:\WINDOWS\System32\dpmodemx.dll
Fri Nov 16 07:33:51 2007 => Scanning File C:\WINDOWS\System32\dpnaddr.dll
Fri Nov 16 07:33:51 2007 => Scanning File C:\WINDOWS\System32\dpnet.dll
Fri Nov 16 07:33:52 2007 => Scanning File C:\WINDOWS\System32\dpnhpast.dll
Fri Nov 16 07:33:52 2007 => Scanning File C:\WINDOWS\System32\dpnhupnp.dll
Fri Nov 16 07:33:52 2007 => Scanning File C:\WINDOWS\System32\dpnlobby.dll
Fri Nov 16 07:33:52 2007 => Scanning File C:\WINDOWS\System32\dpnmodem.dll
Fri Nov 16 07:33:52 2007 => Scanning File C:\WINDOWS\System32\dpnsvr.exe
Fri Nov 16 07:33:52 2007 => Scanning File C:\WINDOWS\System32\dpnwsock.dll
Fri Nov 16 07:33:52 2007 => Scanning File C:\WINDOWS\System32\dpserial.dll
Fri Nov 16 07:33:52 2007 => Scanning File C:\WINDOWS\System32\dpu10.dll
Fri Nov 16 07:33:52 2007 => Scanning File C:\WINDOWS\System32\dpufr.qm
Fri Nov 16 07:33:52 2007 => Scanning File C:\WINDOWS\System32\dpuGUI10.dll
Fri Nov 16 07:33:53 2007 => Scanning File C:\WINDOWS\System32\dpus10.dll
Fri Nov 16 07:33:53 2007 => Scanning File C:\WINDOWS\System32\dpv10.dll
Fri Nov 16 07:33:53 2007 => Scanning File C:\WINDOWS\System32\dpvacm.dll
Fri Nov 16 07:33:53 2007 => Scanning File C:\WINDOWS\System32\dpvoice.dll
Fri Nov 16 07:33:54 2007 => Scanning File C:\WINDOWS\System32\dpvsetup.exe
Fri Nov 16 07:33:54 2007 => Scanning File C:\WINDOWS\System32\dpvvox.dll
Fri Nov 16 07:33:54 2007 => Scanning File C:\WINDOWS\System32\dpwsock.dll
Fri Nov 16 07:33:54 2007 => Scanning File C:\WINDOWS\System32\dpwsockx.dll
Fri Nov 16 07:33:54 2007 => Scanning File C:\WINDOWS\System32\drmclien.dll
Fri Nov 16 07:33:54 2007 => Scanning File C:\WINDOWS\System32\drmstor.dll
Fri Nov 16 07:33:54 2007 => Scanning File C:\WINDOWS\System32\drmv2clt.dll
Fri Nov 16 07:33:55 2007 => Scanning File C:\WINDOWS\System32\drprov.dll
Fri Nov 16 07:33:55 2007 => Scanning File C:\WINDOWS\System32\drwatson.exe
Fri Nov 16 07:33:55 2007 => Scanning File C:\WINDOWS\System32\drwtsn32.exe
Fri Nov 16 07:33:55 2007 => Scanning File C:\WINDOWS\System32\ds16gt.dLL
Fri Nov 16 07:33:55 2007 => Scanning File C:\WINDOWS\System32\ds32gt.dll
Fri Nov 16 07:33:55 2007 => Scanning File C:\WINDOWS\System32\dsauth.dll
Fri Nov 16 07:33:55 2007 => Scanning File C:\WINDOWS\System32\dsdmo.dll
Fri Nov 16 07:33:55 2007 => Scanning File C:\WINDOWS\System32\dsdmoprp.dll
Fri Nov 16 07:33:56 2007 => Scanning File C:\WINDOWS\System32\dskquota.dll
Fri Nov 16 07:33:56 2007 => Scanning File C:\WINDOWS\System32\dskquoui.dll
Fri Nov 16 07:33:56 2007 => Scanning File C:\WINDOWS\System32\dsound.dll
Fri Nov 16 07:33:57 2007 => Scanning File C:\WINDOWS\System32\dsound.vxd
Fri Nov 16 07:33:57 2007 => Scanning File C:\WINDOWS\System32\dsound3d.dll
Fri Nov 16 07:33:57 2007 => Scanning File C:\WINDOWS\System32\dsprop.dll
Fri Nov 16 07:33:57 2007 => Scanning File C:\WINDOWS\System32\dsprpres.dll
Fri Nov 16 07:33:57 2007 => Scanning File C:\WINDOWS\System32\dsquery.dll
Fri Nov 16 07:33:57 2007 => Scanning File C:\WINDOWS\System32\dssec.dat
Fri Nov 16 07:33:58 2007 => Scanning File C:\WINDOWS\System32\dssec.dll
Fri Nov 16 07:33:58 2007 => Scanning File C:\WINDOWS\System32\dssenh.dll
Fri Nov 16 07:33:58 2007 => Scanning File C:\WINDOWS\System32\dsuiext.dll
Fri Nov 16 07:33:58 2007 => Scanning File C:\WINDOWS\System32\dswave.dll
Fri Nov 16 07:33:58 2007 => Scanning File C:\WINDOWS\System32\dumphive.exe
Fri Nov 16 07:33:58 2007 => Scanning File C:\WINDOWS\System32\dumprep.exe
Fri Nov 16 07:33:58 2007 => Scanning File C:\WINDOWS\System32\duser.dll
Fri Nov 16 07:33:58 2007 => Scanning File C:\WINDOWS\System32\dvdplay.exe
Fri Nov 16 07:33:59 2007 => Scanning File C:\WINDOWS\System32\dvdupgrd.exe
Fri Nov 16 07:33:59 2007 => Scanning File C:\WINDOWS\System32\dwwin.exe
Fri Nov 16 07:33:59 2007 => Scanning File C:\WINDOWS\System32\dx7vb.dll
Fri Nov 16 07:33:59 2007 => Scanning File C:\WINDOWS\System32\dx8vb.dll
Fri Nov 16 07:33:59 2007 => Scanning File C:\WINDOWS\System32\dxdiag.exe
Fri Nov 16 07:34:02 2007 => Scanning File C:\WINDOWS\System32\dxdiagn.dll
Fri Nov 16 07:34:04 2007 => Scanning File C:\WINDOWS\System32\dxdllreg.exe
Fri Nov 16 07:34:04 2007 => Scanning File C:\WINDOWS\System32\dxmasf.dll
Fri Nov 16 07:34:04 2007 => Scanning File C:\WINDOWS\System32\dxmrtp.dll
Fri Nov 16 07:34:04 2007 => Scanning File C:\WINDOWS\System32\DXTMSFT.DLL
Fri Nov 16 07:34:04 2007 => Scanning File C:\WINDOWS\System32\dxtmsft3.dll
Fri Nov 16 07:34:05 2007 => Scanning File C:\WINDOWS\System32\DXTRANS.DLL
Fri Nov 16 07:34:05 2007 => Scanning File C:\WINDOWS\System32\eabcoins.dll
Fri Nov 16 07:34:05 2007 => Scanning File C:\WINDOWS\System32\ECDPlayerControl.ocx
Fri Nov 16 07:34:06 2007 => Scanning File C:\WINDOWS\System32\edit.com
Fri Nov 16 07:34:06 2007 => Scanning File C:\WINDOWS\System32\edit.hlp
Fri Nov 16 07:34:06 2007 => Scanning File C:\WINDOWS\System32\edlin.exe
Fri Nov 16 07:34:06 2007 => Scanning File C:\WINDOWS\System32\ega.cpi
Fri Nov 16 07:34:06 2007 => Scanning File C:\WINDOWS\System32\els.dll
Fri Nov 16 07:34:06 2007 => Scanning File C:\WINDOWS\System32\emptyregdb.dat
Fri Nov 16 07:34:07 2007 => Scanning File C:\WINDOWS\System32\encapi.dll
Fri Nov 16 07:34:07 2007 => Scanning File C:\WINDOWS\System32\encdec.dll
Fri Nov 16 07:34:07 2007 => Scanning File C:\WINDOWS\System32\EqnClass.Dll
Fri Nov 16 07:34:07 2007 => Scanning File C:\WINDOWS\System32\ersvc.dll
Fri Nov 16 07:34:07 2007 => Scanning File C:\WINDOWS\System32\es.dll
Fri Nov 16 07:34:07 2007 => Scanning File C:\WINDOWS\System32\esent.dll
Fri Nov 16 07:34:07 2007 => Scanning File C:\WINDOWS\System32\esent97.dll
Fri Nov 16 07:34:08 2007 => Scanning File C:\WINDOWS\System32\esentprf.dll
Fri Nov 16 07:34:08 2007 => Scanning File C:\WINDOWS\System32\esentprf.hxx
Fri Nov 16 07:34:08 2007 => Scanning File C:\WINDOWS\System32\esentprf.ini
Fri Nov 16 07:34:08 2007 => Scanning File C:\WINDOWS\System32\esentutl.exe
Fri Nov 16 07:34:08 2007 => Scanning File C:\WINDOWS\System32\eudcedit.exe
Fri Nov 16 07:34:08 2007 => Scanning File C:\WINDOWS\System32\eula.txt
Fri Nov 16 07:34:08 2007 => Scanning File C:\WINDOWS\System32\eventcls.dll
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\eventlog.dll
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\eventvwr.exe
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\eventvwr.msc
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\exe2bin.exe
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\expand.exe
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\expsrv.dll
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\extrac32.exe
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\exts.dll
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\f3ahvoas.dll
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\fastopen.exe
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\faultrep.dll
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\fc.exe
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\feclient.dll
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\filemgmt.dll
Fri Nov 16 07:34:10 2007 => Scanning File C:\WINDOWS\System32\find.exe
Fri Nov 16 07:34:10 2007 => Scanning File C:\WINDOWS\System32\findstr.exe
Fri Nov 16 07:34:10 2007 => Scanning File C:\WINDOWS\System32\finger.exe
Fri Nov 16 07:34:10 2007 => Scanning File C:\WINDOWS\System32\fixmapi.exe
Fri Nov 16 07:34:10 2007 => Scanning File C:\WINDOWS\System32\fldrclnr.dll
Fri Nov 16 07:34:10 2007 => Scanning File C:\WINDOWS\System32\FM20.DLL
Fri Nov 16 07:34:10 2007 => Scanning File C:\WINDOWS\System32\FM20FRA.DLL
Fri Nov 16 07:34:10 2007 => Scanning File C:\WINDOWS\System32\fmifs.dll
Fri Nov 16 07:34:10 2007 => Scanning File C:\WINDOWS\System32\FNTCACHE.DAT
Fri Nov 16 07:34:10 2007 => Scanning File C:\WINDOWS\System32\fontext.dll
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\fontsub.dll
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\fontview.exe
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\forcedos.exe
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\format.com
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\framebuf.dll
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\freecell.exe
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\fsmgmt.msc
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\fsusd.dll
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\fsutil.exe
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\ftp.exe
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\FTRTSVC.exe
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\ftsrch.dll
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\fxsapi.dll
Fri Nov 16 07:34:12 2007 => Scanning File C:\WINDOWS\System32\fxsclnt.exe
Fri Nov 16 07:34:12 2007 => Scanning File C:\WINDOWS\System32\fxscomex.dll
Fri Nov 16 07:34:12 2007 => Scanning File C:\WINDOWS\System32\fxscover.exe
Fri Nov 16 07:34:13 2007 => Scanning File C:\WINDOWS\System32\fxsdrv.dll
Fri Nov 16 07:34:13 2007 => Scanning File C:\WINDOWS\System32\fxsext32.dll
Fri Nov 16 07:34:13 2007 => Scanning File C:\WINDOWS\System32\fxsperf.dll
Fri Nov 16 07:34:13 2007 => Scanning File C:\WINDOWS\System32\fxsres.dll
Fri Nov 16 07:34:13 2007 => Scanning File C:\WINDOWS\System32\g711codc.ax
Fri Nov 16 07:34:13 2007 => Scanning File C:\WINDOWS\System32\gb2312.uce
Fri Nov 16 07:34:13 2007 => Scanning File C:\WINDOWS\System32\gcdef.dll
Fri Nov 16 07:34:13 2007 => Scanning File C:\WINDOWS\System32\gdi.exe
Fri Nov 16 07:34:14 2007 => Scanning File C:\WINDOWS\System32\gdi32.dll
Fri Nov 16 07:34:14 2007 => Scanning File C:\WINDOWS\System32\gdiplus.dll
Fri Nov 16 07:34:14 2007 => Scanning File C:\WINDOWS\System32\GEARAspi.dll
Fri Nov 16 07:34:14 2007 => Scanning File C:\WINDOWS\System32\gearsec.exe
Fri Nov 16 07:34:14 2007 => Scanning File C:\WINDOWS\System32\geo.nls
Fri Nov 16 07:34:14 2007 => Scanning File C:\WINDOWS\System32\getuname.dll
Fri Nov 16 07:34:15 2007 => Scanning File C:\WINDOWS\System32\glmf32.dll
Fri Nov 16 07:34:15 2007 => Scanning File C:\WINDOWS\System32\glu32.dll
Fri Nov 16 07:34:15 2007 => Scanning File C:\WINDOWS\System32\gpkcsp.dll
Fri Nov 16 07:34:15 2007 => Scanning File C:\WINDOWS\System32\gpkrsrc.dll
Fri Nov 16 07:34:15 2007 => Scanning File C:\WINDOWS\System32\graftabl.com
Fri Nov 16 07:34:15 2007 => Scanning File C:\WINDOWS\System32\graphics.com
Fri Nov 16 07:34:16 2007 => Scanning File C:\WINDOWS\System32\graphics.pro
Fri Nov 16 07:34:16 2007 => Scanning File C:\WINDOWS\System32\grpconv.exe
Fri Nov 16 07:34:16 2007 => Scanning File C:\WINDOWS\System32\h323.tsp
Fri Nov 16 07:34:16 2007 => Scanning File C:\WINDOWS\System32\h323log.txt [**]
Fri Nov 16 07:34:16 2007 => Scanning File C:\WINDOWS\System32\h323msp.dll
Fri Nov 16 07:34:16 2007 => Scanning File C:\WINDOWS\System32\HAL.DLL
Fri Nov 16 07:34:16 2007 => Scanning File C:\WINDOWS\System32\hccoin.dll
Fri Nov 16 07:34:16 2007 => Scanning File C:\WINDOWS\System32\hdwwiz.cpl
Fri Nov 16 07:34:16 2007 => Scanning File C:\WINDOWS\System32\help.exe
Fri Nov 16 07:34:17 2007 => Scanning File C:\WINDOWS\System32\HHActiveX.dll
Fri Nov 16 07:34:17 2007 => Scanning File C:\WINDOWS\System32\hhctrl.ocx
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\hhsetup.dll
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\hid.dll
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\hidphone.tsp
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\himem.sys
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\hlink.dll
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\hlp95en.dll
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\hnetcfg.dll
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\hnetmon.dll
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\hnetwiz.dll
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\homepage.inf
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\hostname.exe
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\hotplug.dll
Fri Nov 16 07:34:19 2007 => Scanning File C:\WINDOWS\System32\hpgwiamd.dll
Fri Nov 16 07:34:19 2007 => Scanning File C:\WINDOWS\System32\hphmon05.dat
Fri Nov 16 07:34:19 2007 => Scanning File C:\WINDOWS\System32\hphmon05.exe
Fri Nov 16 07:34:19 2007 => Scanning File C:\WINDOWS\System32\HPODStormEncoder.dll
Fri Nov 16 07:34:19 2007 => Scanning File C:\WINDOWS\System32\HPODXPAT.DLL
Fri Nov 16 07:34:19 2007 => Scanning File C:\WINDOWS\System32\hpotscl.dll
Fri Nov 16 07:34:20 2007 => Scanning File C:\WINDOWS\System32\hpovst08.dll
Fri Nov 16 07:34:20 2007 => Scanning File C:\WINDOWS\System32\HPZc3212.dll
Fri Nov 16 07:34:20 2007 => Scanning File C:\WINDOWS\System32\hpzcoi09.dll
Fri Nov 16 07:34:21 2007 => Scanning File C:\WINDOWS\System32\hpzcon09.dll
Fri Nov 16 07:34:21 2007 => Scanning File C:\WINDOWS\System32\hpzidr12.dll
Fri Nov 16 07:34:22 2007 => Scanning File C:\WINDOWS\System32\hpzinw12.exe
Fri Nov 16 07:34:22 2007 => Scanning File C:\WINDOWS\System32\hpzipm12.exe
Fri Nov 16 07:34:22 2007 => Scanning File C:\WINDOWS\System32\hpzipr12.dll
Fri Nov 16 07:34:22 2007 => Scanning File C:\WINDOWS\System32\hpzipt12.dll
Fri Nov 16 07:34:22 2007 => Scanning File C:\WINDOWS\System32\hpzisn12.dll
Fri Nov 16 07:34:22 2007 => Scanning File C:\WINDOWS\System32\hpzjrd01.dll
Fri Nov 16 07:34:22 2007 => Scanning File C:\WINDOWS\System32\hpzjsn01.dll
Fri Nov 16 07:34:23 2007 => Scanning File C:\WINDOWS\System32\hpzsnt09.dll
Fri Nov 16 07:34:23 2007 => Scanning File C:\WINDOWS\System32\hticons.dll
Fri Nov 16 07:34:23 2007 => Scanning File C:\WINDOWS\System32\htui.dll
Fri Nov 16 07:34:23 2007 => Scanning File C:\WINDOWS\System32\hxotdomp.dll.ren
Fri Nov 16 07:34:23 2007 => File C:\WINDOWS\System32\hxotdomp.dll.ren tagged as not-a-virus:AdWare.Win32.Virtumonde.aps. No Action Taken.

Fri Nov 16 07:34:23 2007 => Scanning File C:\WINDOWS\System32\hypertrm.dll
Fri Nov 16 07:34:23 2007 => Scanning File C:\WINDOWS\System32\iac25_32.ax
Fri Nov 16 07:34:23 2007 => Scanning File C:\WINDOWS\System32\iasacct.dll
Fri Nov 16 07:34:23 2007 => Scanning File C:\WINDOWS\System32\iasads.dll
Fri Nov 16 07:34:23 2007 => Scanning File C:\WINDOWS\System32\iashlpr.dll
Fri Nov 16 07:34:23 2007 => Scanning File C:\WINDOWS\System32\iasnap.dll
Fri Nov 16 07:34:24 2007 => Scanning File C:\WINDOWS\System32\iaspolcy.dll
Fri Nov 16 07:34:24 2007 => Scanning File C:\WINDOWS\System32\iasrad.dll
Fri Nov 16 07:34:24 2007 => Scanning File C:\WINDOWS\System32\iasrecst.dll
Fri Nov 16 07:34:24 2007 => Scanning File C:\WINDOWS\System32\iassam.dll
Fri Nov 16 07:34:24 2007 => Scanning File C:\WINDOWS\System32\iassdo.dll
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\iassvcs.dll
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\icaapi.dll
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\iccvid.dll
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\icfgnt5.dll
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\icm32.dll
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\icmp.dll
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\icmui.dll
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\icwdial.dll
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\icwphbk.dll
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\ideograf.uce
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\idq.dll
Fri Nov 16 07:34:26 2007 => Scanning File C:\WINDOWS\System32\ie4uinit.exe
Fri Nov 16 07:34:26 2007 => Scanning File C:\WINDOWS\System32\ieakeng.dll
Fri Nov 16 07:34:26 2007 => Scanning File C:\WINDOWS\System32\ieaksie.dll
Fri Nov 16 07:34:26 2007 => Scanning File C:\WINDOWS\System32\ieakui.dll
Fri Nov 16 07:34:27 2007 => Scanning File C:\WINDOWS\System32\iedkcs32.dll
Fri Nov 16 07:34:27 2007 => Scanning File C:\WINDOWS\System32\IEPEERS.DLL
Fri Nov 16 07:34:27 2007 => Scanning File C:\WINDOWS\System32\iernonce.dll
Fri Nov 16 07:34:27 2007 => Scanning File C:\WINDOWS\System32\iesetup.dll
Fri Nov 16 07:34:28 2007 => Scanning File C:\WINDOWS\System32\ieuinit.inf
Fri Nov 16 07:34:28 2007 => Scanning File C:\WINDOWS\System32\iexpress.exe
Fri Nov 16 07:34:28 2007 => Scanning File C:\WINDOWS\System32\IfHelper.dll
Fri Nov 16 07:34:28 2007 => Scanning File C:\WINDOWS\System32\ifmon.dll
Fri Nov 16 07:34:28 2007 => Scanning File C:\WINDOWS\System32\ifsutil.dll
Fri Nov 16 07:34:28 2007 => Scanning File C:\WINDOWS\System32\igmpagnt.dll
Fri Nov 16 07:34:28 2007 => Scanning File C:\WINDOWS\System32\ils.dll
Fri Nov 16 07:34:28 2007 => Scanning File C:\WINDOWS\System32\imaadp32.acm
Fri Nov 16 07:34:28 2007 => Scanning File C:\WINDOWS\System32\imagehlp.dll
Fri Nov 16 07:34:28 2007 => Scanning File C:\WINDOWS\System32\imagr5.dll
Fri Nov 16 07:34:29 2007 => Scanning File C:\WINDOWS\System32\imagx5.dll
Fri Nov 16 07:34:29 2007 => Scanning File C:\WINDOWS\System32\ImagXpr5.dll
Fri Nov 16 07:34:30 2007 => Scanning File C:\WINDOWS\System32\imapi.exe
Fri Nov 16 07:34:30 2007 => Scanning File C:\WINDOWS\System32\imekr61.ime
Fri Nov 16 07:34:30 2007 => Scanning File C:\WINDOWS\System32\imeshare.dll
Fri Nov 16 07:34:30 2007 => Scanning File C:\WINDOWS\System32\imgutil.dll
Fri Nov 16 07:34:30 2007 => Scanning File C:\WINDOWS\System32\imjp81.ime
Fri Nov 16 07:34:30 2007 => Scanning File C:\WINDOWS\System32\imjp81k.dll
Fri Nov 16 07:34:31 2007 => Scanning File C:\WINDOWS\System32\imm32.dll
Fri Nov 16 07:34:31 2007 => Scanning File C:\WINDOWS\System32\Indeo4.qtx
Fri Nov 16 07:34:31 2007 => Scanning File C:\WINDOWS\System32\inetcfg.dll
Fri Nov 16 07:34:31 2007 => Scanning File C:\WINDOWS\System32\INETCOMM.DLL
Fri Nov 16 07:34:31 2007 => Scanning File C:\WINDOWS\System32\inetcpl.cpl
Fri Nov 16 07:34:32 2007 => Scanning File C:\WINDOWS\System32\inetcplc.dll
Fri Nov 16 07:34:32 2007 => Scanning File C:\WINDOWS\System32\inetmib1.dll
Fri Nov 16 07:34:32 2007 => Scanning File C:\WINDOWS\System32\inetpp.dll
Fri Nov 16 07:34:32 2007 => Scanning File C:\WINDOWS\System32\inetppui.dll
Fri Nov 16 07:34:32 2007 => Scanning File C:\WINDOWS\System32\INETRES.DLL
Fri Nov 16 07:34:32 2007 => Scanning File C:\WINDOWS\System32\infosoft.dll
Fri Nov 16 07:34:32 2007 => Scanning File C:\WINDOWS\System32\initpki.dll
Fri Nov 16 07:34:33 2007 => Scanning File C:\WINDOWS\System32\INKED.DLL
Fri Nov 16 07:34:33 2007 => Scanning File C:\WINDOWS\System32\INLOADER.DLL
Fri Nov 16 07:34:33 2007 => Scanning File C:\WINDOWS\System32\input.dll
Fri Nov 16 07:34:33 2007 => Scanning File C:\WINDOWS\System32\INSENG.DLL
Fri Nov 16 07:34:33 2007 => Scanning File C:\WINDOWS\System32\InstallContinue.exe
Fri Nov 16 07:34:34 2007 => Scanning File C:\WINDOWS\System32\instcat.sql
Fri Nov 16 07:34:34 2007 => Scanning File C:\WINDOWS\System32\intl.cpl
Fri Nov 16 07:34:34 2007 => Scanning File C:\WINDOWS\System32\iologmsg.dll
Fri Nov 16 07:34:34 2007 => Scanning File C:\WINDOWS\System32\ipconf.tsp
Fri Nov 16 07:34:34 2007 => Scanning File C:\WINDOWS\System32\ipconfig.exe
Fri Nov 16 07:34:34 2007 => Scanning File C:\WINDOWS\System32\iphlpapi.dll
Fri Nov 16 07:34:34 2007 => Scanning File C:\WINDOWS\System32\ipmontr.dll
Fri Nov 16 07:34:35 2007 => Scanning File C:\WINDOWS\System32\ipnathlp.dll
Fri Nov 16 07:34:35 2007 => Scanning File C:\WINDOWS\System32\ippromon.dll
Fri Nov 16 07:34:35 2007 => Scanning File C:\WINDOWS\System32\iprop.dll
Fri Nov 16 07:34:35 2007 => Scanning File C:\WINDOWS\System32\iprtprio.dll
Fri Nov 16 07:34:35 2007 => Scanning File C:\WINDOWS\System32\iprtrmgr.dll
Fri Nov 16 07:34:36 2007 => Scanning File C:\WINDOWS\System32\ipsec6.exe
Fri Nov 16 07:34:36 2007 => Scanning File C:\WINDOWS\System32\ipsecsnp.dll
Fri Nov 16 07:34:36 2007 => Scanning File C:\WINDOWS\System32\ipsecsvc.dll
Fri Nov 16 07:34:36 2007 => Scanning File C:\WINDOWS\System32\ipsink.ax
Fri Nov 16 07:34:36 2007 => Scanning File C:\WINDOWS\System32\ipsmsnap.dll
Fri Nov 16 07:34:36 2007 => Scanning File C:\WINDOWS\System32\ipv6.exe
Fri Nov 16 07:34:36 2007 => Scanning File C:\WINDOWS\System32\ipv6mon.dll
Fri Nov 16 07:34:36 2007 => Scanning File C:\WINDOWS\System32\ipxmontr.dll
Fri Nov 16 07:34:36 2007 => Scanning File C:\WINDOWS\System32\ipxpromn.dll
Fri Nov 16 07:34:36 2007 => Scanning File C:\WINDOWS\System32\ipxrip.dll
Fri Nov 16 07:34:37 2007 => Scanning File C:\WINDOWS\System32\ipxroute.exe
Fri Nov 16 07:34:37 2007 => Scanning File C:\WINDOWS\System32\ipxrtmgr.dll
Fri Nov 16 07:34:37 2007 => Scanning File C:\WINDOWS\System32\ipxsap.dll
Fri Nov 16 07:34:37 2007 => Scanning File C:\WINDOWS\System32\ipxwan.dll
Fri Nov 16 07:34:37 2007 => Scanning File C:\WINDOWS\System32\ir32_32.dll
Fri Nov 16 07:34:37 2007 => Scanning File C:\WINDOWS\System32\ir41_32.ax
Fri Nov 16 07:34:37 2007 => Scanning File C:\WINDOWS\System32\ir41_qc.dll
Fri Nov 16 07:34:37 2007 => Scanning File C:\WINDOWS\System32\ir41_qcx.dll
Fri Nov 16 07:34:38 2007 => Scanning File C:\WINDOWS\System32\ir50_32.dll
Fri Nov 16 07:34:38 2007 => Scanning File C:\WINDOWS\System32\ir50_qc.dll
Fri Nov 16 07:34:38 2007 => Scanning File C:\WINDOWS\System32\ir50_qcx.dll
Fri Nov 16 07:34:38 2007 => Scanning File C:\WINDOWS\System32\irclass.dll
Fri Nov 16 07:34:38 2007 => Scanning File C:\WINDOWS\System32\irftp.exe
Fri Nov 16 07:34:38 2007 => Scanning File C:\WINDOWS\System32\irmon.dll
Fri Nov 16 07:34:38 2007 => Scanning File C:\WINDOWS\System32\irprops.cpl
Fri Nov 16 07:34:38 2007 => Scanning File C:\WINDOWS\System32\isign32.dll
Fri Nov 16 07:34:39 2007 => Scanning File C:\WINDOWS\System32\isrdbg32.dll
Fri Nov 16 07:34:39 2007 => Scanning File C:\WINDOWS\System32\Iticheck.dll
Fri Nov 16 07:34:39 2007 => Scanning File C:\WINDOWS\System32\itidat.dll
Fri Nov 16 07:34:39 2007 => Scanning File C:\WINDOWS\System32\itidib.dll
Fri Nov 16 07:34:39 2007 => Scanning File C:\WINDOWS\System32\itiimg2.dll
Fri Nov 16 07:34:39 2007 => Scanning File C:\WINDOWS\System32\itircl.dll
Fri Nov 16 07:34:39 2007 => Scanning File C:\WINDOWS\System32\itss.dll
Fri Nov 16 07:34:39 2007 => Scanning File C:\WINDOWS\System32\iuctl.dll
Fri Nov 16 07:34:39 2007 => Scanning File C:\WINDOWS\System32\iuengine.dll
Fri Nov 16 07:34:40 2007 => Scanning File C:\WINDOWS\System32\ivfsrc.ax
Fri Nov 16 07:34:40 2007 => Scanning File C:\WINDOWS\System32\ixsso.dll
Fri Nov 16 07:34:40 2007 => Scanning File C:\WINDOWS\System32\iyuv_32.dll
Fri Nov 16 07:34:40 2007 => Scanning File C:\WINDOWS\System32\java.exe
Fri Nov 16 07:34:40 2007 => Scanning File C:\WINDOWS\System32\javaw.exe
Fri Nov 16 07:34:40 2007 => Scanning File C:\WINDOWS\System32\jet500.dll
Fri Nov 16 07:34:40 2007 => Scanning File C:\WINDOWS\System32\jgaw400.dll
Fri Nov 16 07:34:40 2007 => Scanning File C:\WINDOWS\System32\JGDW400.DLL
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\jgmd400.dll
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\JGPL400.DLL
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\jgsd400.dll
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\jgsh400.dll
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\jobexec.dll
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\joy.cpl
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\jpicpl32.cpl
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\jscript.dll
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\jsfr.dll
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\JSPROXY.DLL
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\kanji_1.uce
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\kanji_2.uce
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\kb16.com
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\kbd101.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbd101a.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbd101b.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbd101c.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbd103.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbd106.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbd106n.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\KBDAL.DLL
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdax2.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdaze.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdazel.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdbe.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdbene.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdblr.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdbr.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdbu.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdca.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdcan.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdcr.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdcz.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdcz1.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdcz2.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdda.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbddv.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdes.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdest.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdfc.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdfi.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdfo.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdfr.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdgae.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdgkl.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdgr.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdgr1.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdhe.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdhe220.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdhe319.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdhela2.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdhela3.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdhept.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdhu.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdhu1.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdibm02.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdic.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdir.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdit.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdit142.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdjpn.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdkaz.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdkor.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdkyr.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdla.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdlk41a.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdlk41j.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdlt.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdlt1.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdlv.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdlv1.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdmac.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdmon.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdne.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdnec.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdnec95.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdnecAT.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdnecNT.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdno.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdpl.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdpl1.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdpo.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdro.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdru.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdru1.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdsf.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdsg.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdsl.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdsl1.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdsp.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdsw.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdtat.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdtuf.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdtuq.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbduk.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdur.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdus.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdusl.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\kbdusr.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\kbdusx.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\kbduzb.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\kbdycc.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\kbdycl.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\kd1394.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\kdcom.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\kerberos.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\kernel32.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\key01.sys
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\keyboard.drv
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\keyboard.sys
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\keymgr.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\KGyGaAvL.sys
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\khfcded.dll
Fri Nov 16 07:34:46 2007 => Scanning File C:\WINDOWS\System32\kmddsp.tsp
Fri Nov 16 07:34:46 2007 => Scanning File C:\WINDOWS\System32\korean.uce
Fri Nov 16 07:34:46 2007 => Scanning File C:\WINDOWS\System32\korwbrkr.dll
Fri Nov 16 07:34:46 2007 => Scanning File C:\WINDOWS\System32\korwbrkr.lex
Fri Nov 16 07:34:46 2007 => Scanning File C:\WINDOWS\System32\krnl386.exe
Fri Nov 16 07:34:46 2007 => Scanning File C:\WINDOWS\System32\ksc.nls
Fri Nov 16 07:34:46 2007 => Scanning File C:\WINDOWS\System32\ksproxy.ax
Fri Nov 16 07:34:46 2007 => Scanning File C:\WINDOWS\System32\kstvtune.ax
Fri Nov 16 07:34:47 2007 => Scanning File C:\WINDOWS\System32\ksuser.dll
Fri Nov 16 07:34:47 2007 => Scanning File C:\WINDOWS\System32\kswdmcap.ax
Fri Nov 16 07:34:47 2007 => Scanning File C:\WINDOWS\System32\ksxbar.ax
Fri Nov 16 07:34:47 2007 => Scanning File C:\WINDOWS\System32\l3codeca.acm
Fri Nov 16 07:34:47 2007 => Scanning File C:\WINDOWS\System32\l3codecp.acm
Fri Nov 16 07:34:47 2007 => Scanning File C:\WINDOWS\System32\l3codecx.ax
Fri Nov 16 07:34:47 2007 => Scanning File C:\WINDOWS\System32\label.exe
Fri Nov 16 07:34:47 2007 => Scanning File C:\WINDOWS\System32\langwrbk.dll
Fri Nov 16 07:34:48 2007 => Scanning File C:\WINDOWS\System32\lanman.drv
Fri Nov 16 07:34:48 2007 => Scanning File C:\WINDOWS\System32\laprxy.dll
Fri Nov 16 07:34:48 2007 => Scanning File C:\WINDOWS\System32\LCodcCMP.dll
Fri Nov 16 07:34:48 2007 => Scanning File C:\WINDOWS\System32\lcphrase.tbl
Fri Nov 16 07:34:48 2007 => Scanning File C:\WINDOWS\System32\lcptr.tbl
Fri Nov 16 07:34:48 2007 => Scanning File C:\WINDOWS\System32\LegitCheckControl.dll
Fri Nov 16 07:34:48 2007 => Scanning File C:\WINDOWS\System32\lfbmp11n.dll
Fri Nov 16 07:34:48 2007 => Scanning File C:\WINDOWS\System32\LFCMP11n.DLL
Fri Nov 16 07:34:48 2007 => Scanning File C:\WINDOWS\System32\lfeps11n.dll
Fri Nov 16 07:34:49 2007 => Scanning File C:\WINDOWS\System32\lffax11n.dll
Fri Nov 16 07:34:49 2007 => Scanning File C:\WINDOWS\System32\lfgif11n.dll
Fri Nov 16 07:34:49 2007 => Scanning File C:\WINDOWS\System32\lfpcd11n.dll
Fri Nov 16 07:34:49 2007 => Scanning File C:\WINDOWS\System32\lfpcx11n.dll
Fri Nov 16 07:34:49 2007 => Scanning File C:\WINDOWS\System32\Lfpng11n.dll
Fri Nov 16 07:34:49 2007 => Scanning File C:\WINDOWS\System32\lfpsd11n.dll
Fri Nov 16 07:34:49 2007 => Scanning File C:\WINDOWS\System32\lftga11n.dll
Fri Nov 16 07:34:49 2007 => Scanning File C:\WINDOWS\System32\lftif11n.dll
Fri Nov 16 07:34:49 2007 => Scanning File C:\WINDOWS\System32\lfwmf11n.dll
Fri Nov 16 07:34:49 2007 => Scanning File C:\WINDOWS\System32\libdivx.dll
Fri Nov 16 07:34:50 2007 => Scanning File C:\WINDOWS\System32\licdll.dll
Fri Nov 16 07:34:50 2007 => Scanning File C:\WINDOWS\System32\licmgr10.dll
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\licwmi.dll
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\lights.exe
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\linkinfo.dll
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\lmhsvc.dll
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\lmrt.dll
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\LMRTREND.dll
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\lnkstub.exe
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\loadfix.com
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\loadperf.dll
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\locale.nls
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\localsec.dll
Fri Nov 16 07:34:52 2007 => Scanning File C:\WINDOWS\System32\localspl.dll
Fri Nov 16 07:34:52 2007 => Scanning File C:\WINDOWS\System32\localui.dll
Fri Nov 16 07:34:52 2007 => Scanning File C:\WINDOWS\System32\locator.exe
Fri Nov 16 07:34:52 2007 => Scanning File C:\WINDOWS\System32\lodctr.exe
Fri Nov 16 07:34:52 2007 => Scanning File C:\WINDOWS\System32\logagent.exe
Fri Nov 16 07:34:52 2007 => Scanning File C:\WINDOWS\System32\loghours.dll
Fri Nov 16 07:34:52 2007 => Scanning File C:\WINDOWS\System32\logoff.exe
Fri Nov 16 07:34:52 2007 => Scanning File C:\WINDOWS\System32\logon.scr
Fri Nov 16 07:34:52 2007 => Scanning File C:\WINDOWS\System32\logonui.exe
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\logonui.exe.manifest
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\lpk.dll
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\lpq.exe
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\lpr.exe
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\lprhelp.dll
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\lprmonui.dll
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\lsasrv.dll
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\lsass.exe
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\LTDIS11n.dll
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\ltfil11n.DLL
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\ltimg11n.dll
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\ltkrn11n.dll
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\Ltwvc11n.dll
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\lusrmgr.msc
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\lz32.dll
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\lzexpand.dll
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\l_except.nls
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\l_intl.nls
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\magnify.exe
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\mag_hook.dll
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\main.cpl
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\makecab.exe
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\mapi32.dll
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\mapistub.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mcastmib.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mcd32.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mcdsrv32.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mchgrcoi.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mciavi.drv
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mciavi32.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mcicda.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mcict16.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mciole16.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mciole32.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mcipspct.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mcipspct.ini
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mcipspwa.dll
Fri Nov 16 07:34:56 2007 => Scanning File C:\WINDOWS\System32\mcipspwa.ini
Fri Nov 16 07:34:56 2007 => Scanning File C:\WINDOWS\System32\mciqtz.drv
Fri Nov 16 07:34:56 2007 => Scanning File C:\WINDOWS\System32\mciqtz32.dll
Fri Nov 16 07:34:56 2007 => Scanning File C:\WINDOWS\System32\mciseq.dll
Fri Nov 16 07:34:56 2007 => Scanning File C:\WINDOWS\System32\mciseq.drv
Fri Nov 16 07:34:56 2007 => Scanning File C:\WINDOWS\System32\mciwa16.dll
Fri Nov 16 07:34:56 2007 => Scanning File C:\WINDOWS\System32\mciwatbl.dll
Fri Nov 16 07:34:56 2007 => Scanning File C:\WINDOWS\System32\mciwave.dll
Fri Nov 16 07:34:56 2007 => Scanning File C:\WINDOWS\System32\mciwave.drv
Fri Nov 16 07:34:56 2007 => Scanning File C:\WINDOWS\System32\mciwaw95.dll
Fri Nov 16 07:34:57 2007 => Scanning File C:\WINDOWS\System32\mciwaw95.ini
Fri Nov 16 07:34:57 2007 => Scanning File C:\WINDOWS\System32\mcrh.tmp
Fri Nov 16 07:34:57 2007 => Scanning File C:\WINDOWS\System32\mdhcp.dll
Fri Nov 16 07:34:57 2007 => Scanning File C:\WINDOWS\System32\mdimon.dll
Fri Nov 16 07:34:57 2007 => Scanning File C:\WINDOWS\System32\mdminst.dll
Fri Nov 16 07:34:57 2007 => Scanning File C:\WINDOWS\System32\mdwmdmsp.dll
Fri Nov 16 07:34:57 2007 => Scanning File C:\WINDOWS\System32\mem.exe
Fri Nov 16 07:34:57 2007 => Scanning File C:\WINDOWS\System32\mf3216.dll
Fri Nov 16 07:34:57 2007 => Scanning File C:\WINDOWS\System32\mfc40.dll
Fri Nov 16 07:34:58 2007 => Scanning File C:\WINDOWS\System32\mfc40loc.dll
Fri Nov 16 07:34:58 2007 => Scanning File C:\WINDOWS\System32\mfc40u.dll
Fri Nov 16 07:34:59 2007 => Scanning File C:\WINDOWS\System32\mfc42.dll
Fri Nov 16 07:34:59 2007 => Scanning File C:\WINDOWS\System32\MFC42FRA.DLL
Fri Nov 16 07:34:59 2007 => Scanning File C:\WINDOWS\System32\mfc42loc.dll
Fri Nov 16 07:34:59 2007 => Scanning File C:\WINDOWS\System32\mfc42u.dll
Fri Nov 16 07:34:59 2007 => Scanning File C:\WINDOWS\System32\mfc70.dll
Fri Nov 16 07:35:00 2007 => Scanning File C:\WINDOWS\System32\mfc70u.dll
Fri Nov 16 07:35:01 2007 => Scanning File C:\WINDOWS\System32\mfc71.dll
Fri Nov 16 07:35:01 2007 => Scanning File C:\WINDOWS\System32\MFC71CHS.DLL
Fri Nov 16 07:35:01 2007 => Scanning File C:\WINDOWS\System32\MFC71CHT.DLL
Fri Nov 16 07:35:01 2007 => Scanning File C:\WINDOWS\System32\MFC71DEU.DLL
Fri Nov 16 07:35:01 2007 => Scanning File C:\WINDOWS\System32\MFC71ENU.DLL
Fri Nov 16 07:35:01 2007 => Scanning File C:\WINDOWS\System32\MFC71ESP.DLL
Fri Nov 16 07:35:01 2007 => Scanning File C:\WINDOWS\System32\MFC71FRA.DLL
Fri Nov 16 07:35:01 2007 => Scanning File C:\WINDOWS\System32\MFC71ITA.DLL
Fri Nov 16 07:35:02 2007 => Scanning File C:\WINDOWS\System32\MFC71JPN.DLL
Fri Nov 16 07:35:02 2007 => Scanning File C:\WINDOWS\System32\MFC71KOR.DLL
Fri Nov 16 07:35:02 2007 => Scanning File C:\WINDOWS\System32\mfc71u.dll
Fri Nov 16 07:35:02 2007 => Scanning File C:\WINDOWS\System32\mfcans32.dll
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\mfcsubs.dll
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\mfcuia32.dll
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\mgmtapi.dll
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\mib.bin
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\midimap.dll
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\miglibnt.dll
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\migpwd.exe
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\mimefilt.dll
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\mindex.dll
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\miniime.tpl
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\mlang.dat
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\mlang.dll
Fri Nov 16 07:35:04 2007 => Scanning File C:\WINDOWS\System32\mll_hp.dll
Fri Nov 16 07:35:04 2007 => Scanning File C:\WINDOWS\System32\mll_mtf.dll
Fri Nov 16 07:35:04 2007 => Scanning File C:\WINDOWS\System32\mll_qic.dll
Fri Nov 16 07:35:04 2007 => Scanning File C:\WINDOWS\System32\mmc.exe
Fri Nov 16 07:35:04 2007 => Scanning File C:\WINDOWS\System32\mmcbase.dll
Fri Nov 16 07:35:05 2007 => Scanning File C:\WINDOWS\System32\mmcndmgr.dll
Fri Nov 16 07:35:06 2007 => Scanning File C:\WINDOWS\System32\mmcshext.dll
Fri Nov 16 07:35:06 2007 => Scanning File C:\WINDOWS\System32\mmdriver.inf
Fri Nov 16 07:35:06 2007 => Scanning File C:\WINDOWS\System32\mmdrv.dll
Fri Nov 16 07:35:06 2007 => Scanning File C:\WINDOWS\System32\mmfutil.dll
Fri Nov 16 07:35:06 2007 => Scanning File C:\WINDOWS\System32\mmsys.cpl
Fri Nov 16 07:35:07 2007 => Scanning File C:\WINDOWS\System32\mmsystem.dll
Fri Nov 16 07:35:07 2007 => Scanning File C:\WINDOWS\System32\mmtask.tsk
Fri Nov 16 07:35:07 2007 => Scanning File C:\WINDOWS\System32\MMToolsX2.ocx
Fri Nov 16 07:35:09 2007 => Scanning File C:\WINDOWS\System32\MMTypesX2.ocx
Fri Nov 16 07:35:09 2007 => Scanning File C:\WINDOWS\System32\mmutilse.dll
Fri Nov 16 07:35:09 2007 => Scanning File C:\WINDOWS\System32\mnmdd.dll
Fri Nov 16 07:35:09 2007 => Scanning File C:\WINDOWS\System32\mnmsrvc.exe
Fri Nov 16 07:35:09 2007 => Scanning File C:\WINDOWS\System32\mobsync.dll
Fri Nov 16 07:35:10 2007 => Scanning File C:\WINDOWS\System32\mobsync.exe
Fri Nov 16 07:35:10 2007 => Scanning File C:\WINDOWS\System32\mode.com
Fri Nov 16 07:35:10 2007 => Scanning File C:\WINDOWS\System32\modemui.dll
Fri Nov 16 07:35:10 2007 => Scanning File C:\WINDOWS\System32\modex.dll
Fri Nov 16 07:35:10 2007 => Scanning File C:\WINDOWS\System32\more.com
Fri Nov 16 07:35:10 2007 => Scanning File C:\WINDOWS\System32\moricons.dll
Fri Nov 16 07:35:10 2007 => Scanning File C:\WINDOWS\System32\mountvol.exe
Fri Nov 16 07:35:11 2007 => Scanning File C:\WINDOWS\System32\mouse.drv
Fri Nov 16 07:35:11 2007 => Scanning File C:\WINDOWS\System32\mp43dmod.dll
Fri Nov 16 07:35:11 2007 => Scanning File C:\WINDOWS\System32\mp4sdmod.dll
Fri Nov 16 07:35:11 2007 => Scanning File C:\WINDOWS\System32\mpeg2data.ax
Fri Nov 16 07:35:11 2007 => Scanning File C:\WINDOWS\System32\mpg2splt.ax
Fri Nov 16 07:35:11 2007 => Scanning File C:\WINDOWS\System32\mpg4dmod.dll
Fri Nov 16 07:35:12 2007 => Scanning File C:\WINDOWS\System32\mpg4ds32.ax
Fri Nov 16 07:35:12 2007 => Scanning File C:\WINDOWS\System32\mplay32.exe
Fri Nov 16 07:35:12 2007 => Scanning File C:\WINDOWS\System32\mpnotify.exe
Fri Nov 16 07:35:12 2007 => Scanning File C:\WINDOWS\System32\mpr.dll
Fri Nov 16 07:35:12 2007 => Scanning File C:\WINDOWS\System32\mprapi.dll
Fri Nov 16 07:35:12 2007 => Scanning File C:\WINDOWS\System32\mprddm.dll
Fri Nov 16 07:35:12 2007 => Scanning File C:\WINDOWS\System32\mprdim.dll
Fri Nov 16 07:35:12 2007 => Scanning File C:\WINDOWS\System32\mprmsg.dll
Fri Nov 16 07:35:12 2007 => Scanning File C:\WINDOWS\System32\mprui.dll
Fri Nov 16 07:35:13 2007 => Scanning File C:\WINDOWS\System32\MQPLHVRX.0XE
Fri Nov 16 07:35:13 2007 => File C:\WINDOWS\System32\MQPLHVRX.0XE infected by "Trojan.Win32.Obfuscated.kp" Virus. Action Taken: File Deleted.

havi · Answer

Partie 4
Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\dnsapi.dll
Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\dnsrslvr.dll
Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\docprop.dll
Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\docprop2.dll
Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\doskey.exe
Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\dosx.exe
Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\dpcdll.dll
Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\dplay.dll
Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\dplaysvr.exe
Fri Nov 16 07:33:50 2007 => Scanning File C:\WINDOWS\System32\dplayx.dll
Fri Nov 16 07:33:51 2007 => Scanning File C:\WINDOWS\System32\dpmodemx.dll
Fri Nov 16 07:33:51 2007 => Scanning File C:\WINDOWS\System32\dpnaddr.dll
Fri Nov 16 07:33:51 2007 => Scanning File C:\WINDOWS\System32\dpnet.dll
Fri Nov 16 07:33:52 2007 => Scanning File C:\WINDOWS\System32\dpnhpast.dll
Fri Nov 16 07:33:52 2007 => Scanning File C:\WINDOWS\System32\dpnhupnp.dll
Fri Nov 16 07:33:52 2007 => Scanning File C:\WINDOWS\System32\dpnlobby.dll
Fri Nov 16 07:33:52 2007 => Scanning File C:\WINDOWS\System32\dpnmodem.dll
Fri Nov 16 07:33:52 2007 => Scanning File C:\WINDOWS\System32\dpnsvr.exe
Fri Nov 16 07:33:52 2007 => Scanning File C:\WINDOWS\System32\dpnwsock.dll
Fri Nov 16 07:33:52 2007 => Scanning File C:\WINDOWS\System32\dpserial.dll
Fri Nov 16 07:33:52 2007 => Scanning File C:\WINDOWS\System32\dpu10.dll
Fri Nov 16 07:33:52 2007 => Scanning File C:\WINDOWS\System32\dpufr.qm
Fri Nov 16 07:33:52 2007 => Scanning File C:\WINDOWS\System32\dpuGUI10.dll
Fri Nov 16 07:33:53 2007 => Scanning File C:\WINDOWS\System32\dpus10.dll
Fri Nov 16 07:33:53 2007 => Scanning File C:\WINDOWS\System32\dpv10.dll
Fri Nov 16 07:33:53 2007 => Scanning File C:\WINDOWS\System32\dpvacm.dll
Fri Nov 16 07:33:53 2007 => Scanning File C:\WINDOWS\System32\dpvoice.dll
Fri Nov 16 07:33:54 2007 => Scanning File C:\WINDOWS\System32\dpvsetup.exe
Fri Nov 16 07:33:54 2007 => Scanning File C:\WINDOWS\System32\dpvvox.dll
Fri Nov 16 07:33:54 2007 => Scanning File C:\WINDOWS\System32\dpwsock.dll
Fri Nov 16 07:33:54 2007 => Scanning File C:\WINDOWS\System32\dpwsockx.dll
Fri Nov 16 07:33:54 2007 => Scanning File C:\WINDOWS\System32\drmclien.dll
Fri Nov 16 07:33:54 2007 => Scanning File C:\WINDOWS\System32\drmstor.dll
Fri Nov 16 07:33:54 2007 => Scanning File C:\WINDOWS\System32\drmv2clt.dll
Fri Nov 16 07:33:55 2007 => Scanning File C:\WINDOWS\System32\drprov.dll
Fri Nov 16 07:33:55 2007 => Scanning File C:\WINDOWS\System32\drwatson.exe
Fri Nov 16 07:33:55 2007 => Scanning File C:\WINDOWS\System32\drwtsn32.exe
Fri Nov 16 07:33:55 2007 => Scanning File C:\WINDOWS\System32\ds16gt.dLL
Fri Nov 16 07:33:55 2007 => Scanning File C:\WINDOWS\System32\ds32gt.dll
Fri Nov 16 07:33:55 2007 => Scanning File C:\WINDOWS\System32\dsauth.dll
Fri Nov 16 07:33:55 2007 => Scanning File C:\WINDOWS\System32\dsdmo.dll
Fri Nov 16 07:33:55 2007 => Scanning File C:\WINDOWS\System32\dsdmoprp.dll
Fri Nov 16 07:33:56 2007 => Scanning File C:\WINDOWS\System32\dskquota.dll
Fri Nov 16 07:33:56 2007 => Scanning File C:\WINDOWS\System32\dskquoui.dll
Fri Nov 16 07:33:56 2007 => Scanning File C:\WINDOWS\System32\dsound.dll
Fri Nov 16 07:33:57 2007 => Scanning File C:\WINDOWS\System32\dsound.vxd
Fri Nov 16 07:33:57 2007 => Scanning File C:\WINDOWS\System32\dsound3d.dll
Fri Nov 16 07:33:57 2007 => Scanning File C:\WINDOWS\System32\dsprop.dll
Fri Nov 16 07:33:57 2007 => Scanning File C:\WINDOWS\System32\dsprpres.dll
Fri Nov 16 07:33:57 2007 => Scanning File C:\WINDOWS\System32\dsquery.dll
Fri Nov 16 07:33:57 2007 => Scanning File C:\WINDOWS\System32\dssec.dat
Fri Nov 16 07:33:58 2007 => Scanning File C:\WINDOWS\System32\dssec.dll
Fri Nov 16 07:33:58 2007 => Scanning File C:\WINDOWS\System32\dssenh.dll
Fri Nov 16 07:33:58 2007 => Scanning File C:\WINDOWS\System32\dsuiext.dll
Fri Nov 16 07:33:58 2007 => Scanning File C:\WINDOWS\System32\dswave.dll
Fri Nov 16 07:33:58 2007 => Scanning File C:\WINDOWS\System32\dumphive.exe
Fri Nov 16 07:33:58 2007 => Scanning File C:\WINDOWS\System32\dumprep.exe
Fri Nov 16 07:33:58 2007 => Scanning File C:\WINDOWS\System32\duser.dll
Fri Nov 16 07:33:58 2007 => Scanning File C:\WINDOWS\System32\dvdplay.exe
Fri Nov 16 07:33:59 2007 => Scanning File C:\WINDOWS\System32\dvdupgrd.exe
Fri Nov 16 07:33:59 2007 => Scanning File C:\WINDOWS\System32\dwwin.exe
Fri Nov 16 07:33:59 2007 => Scanning File C:\WINDOWS\System32\dx7vb.dll
Fri Nov 16 07:33:59 2007 => Scanning File C:\WINDOWS\System32\dx8vb.dll
Fri Nov 16 07:33:59 2007 => Scanning File C:\WINDOWS\System32\dxdiag.exe
Fri Nov 16 07:34:02 2007 => Scanning File C:\WINDOWS\System32\dxdiagn.dll
Fri Nov 16 07:34:04 2007 => Scanning File C:\WINDOWS\System32\dxdllreg.exe
Fri Nov 16 07:34:04 2007 => Scanning File C:\WINDOWS\System32\dxmasf.dll
Fri Nov 16 07:34:04 2007 => Scanning File C:\WINDOWS\System32\dxmrtp.dll
Fri Nov 16 07:34:04 2007 => Scanning File C:\WINDOWS\System32\DXTMSFT.DLL
Fri Nov 16 07:34:04 2007 => Scanning File C:\WINDOWS\System32\dxtmsft3.dll
Fri Nov 16 07:34:05 2007 => Scanning File C:\WINDOWS\System32\DXTRANS.DLL
Fri Nov 16 07:34:05 2007 => Scanning File C:\WINDOWS\System32\eabcoins.dll
Fri Nov 16 07:34:05 2007 => Scanning File C:\WINDOWS\System32\ECDPlayerControl.ocx
Fri Nov 16 07:34:06 2007 => Scanning File C:\WINDOWS\System32\edit.com
Fri Nov 16 07:34:06 2007 => Scanning File C:\WINDOWS\System32\edit.hlp
Fri Nov 16 07:34:06 2007 => Scanning File C:\WINDOWS\System32\edlin.exe
Fri Nov 16 07:34:06 2007 => Scanning File C:\WINDOWS\System32\ega.cpi
Fri Nov 16 07:34:06 2007 => Scanning File C:\WINDOWS\System32\els.dll
Fri Nov 16 07:34:06 2007 => Scanning File C:\WINDOWS\System32\emptyregdb.dat
Fri Nov 16 07:34:07 2007 => Scanning File C:\WINDOWS\System32\encapi.dll
Fri Nov 16 07:34:07 2007 => Scanning File C:\WINDOWS\System32\encdec.dll
Fri Nov 16 07:34:07 2007 => Scanning File C:\WINDOWS\System32\EqnClass.Dll
Fri Nov 16 07:34:07 2007 => Scanning File C:\WINDOWS\System32\ersvc.dll
Fri Nov 16 07:34:07 2007 => Scanning File C:\WINDOWS\System32\es.dll
Fri Nov 16 07:34:07 2007 => Scanning File C:\WINDOWS\System32\esent.dll
Fri Nov 16 07:34:07 2007 => Scanning File C:\WINDOWS\System32\esent97.dll
Fri Nov 16 07:34:08 2007 => Scanning File C:\WINDOWS\System32\esentprf.dll
Fri Nov 16 07:34:08 2007 => Scanning File C:\WINDOWS\System32\esentprf.hxx
Fri Nov 16 07:34:08 2007 => Scanning File C:\WINDOWS\System32\esentprf.ini
Fri Nov 16 07:34:08 2007 => Scanning File C:\WINDOWS\System32\esentutl.exe
Fri Nov 16 07:34:08 2007 => Scanning File C:\WINDOWS\System32\eudcedit.exe
Fri Nov 16 07:34:08 2007 => Scanning File C:\WINDOWS\System32\eula.txt
Fri Nov 16 07:34:08 2007 => Scanning File C:\WINDOWS\System32\eventcls.dll
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\eventlog.dll
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\eventvwr.exe
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\eventvwr.msc
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\exe2bin.exe
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\expand.exe
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\expsrv.dll
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\extrac32.exe
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\exts.dll
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\f3ahvoas.dll
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\fastopen.exe
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\faultrep.dll
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\fc.exe
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\feclient.dll
Fri Nov 16 07:34:09 2007 => Scanning File C:\WINDOWS\System32\filemgmt.dll
Fri Nov 16 07:34:10 2007 => Scanning File C:\WINDOWS\System32\find.exe
Fri Nov 16 07:34:10 2007 => Scanning File C:\WINDOWS\System32\findstr.exe
Fri Nov 16 07:34:10 2007 => Scanning File C:\WINDOWS\System32\finger.exe
Fri Nov 16 07:34:10 2007 => Scanning File C:\WINDOWS\System32\fixmapi.exe
Fri Nov 16 07:34:10 2007 => Scanning File C:\WINDOWS\System32\fldrclnr.dll
Fri Nov 16 07:34:10 2007 => Scanning File C:\WINDOWS\System32\FM20.DLL
Fri Nov 16 07:34:10 2007 => Scanning File C:\WINDOWS\System32\FM20FRA.DLL
Fri Nov 16 07:34:10 2007 => Scanning File C:\WINDOWS\System32\fmifs.dll
Fri Nov 16 07:34:10 2007 => Scanning File C:\WINDOWS\System32\FNTCACHE.DAT
Fri Nov 16 07:34:10 2007 => Scanning File C:\WINDOWS\System32\fontext.dll
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\fontsub.dll
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\fontview.exe
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\forcedos.exe
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\format.com
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\framebuf.dll
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\freecell.exe
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\fsmgmt.msc
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\fsusd.dll
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\fsutil.exe
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\ftp.exe
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\FTRTSVC.exe
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\ftsrch.dll
Fri Nov 16 07:34:11 2007 => Scanning File C:\WINDOWS\System32\fxsapi.dll
Fri Nov 16 07:34:12 2007 => Scanning File C:\WINDOWS\System32\fxsclnt.exe
Fri Nov 16 07:34:12 2007 => Scanning File C:\WINDOWS\System32\fxscomex.dll
Fri Nov 16 07:34:12 2007 => Scanning File C:\WINDOWS\System32\fxscover.exe
Fri Nov 16 07:34:13 2007 => Scanning File C:\WINDOWS\System32\fxsdrv.dll
Fri Nov 16 07:34:13 2007 => Scanning File C:\WINDOWS\System32\fxsext32.dll
Fri Nov 16 07:34:13 2007 => Scanning File C:\WINDOWS\System32\fxsperf.dll
Fri Nov 16 07:34:13 2007 => Scanning File C:\WINDOWS\System32\fxsres.dll
Fri Nov 16 07:34:13 2007 => Scanning File C:\WINDOWS\System32\g711codc.ax
Fri Nov 16 07:34:13 2007 => Scanning File C:\WINDOWS\System32\gb2312.uce
Fri Nov 16 07:34:13 2007 => Scanning File C:\WINDOWS\System32\gcdef.dll
Fri Nov 16 07:34:13 2007 => Scanning File C:\WINDOWS\System32\gdi.exe
Fri Nov 16 07:34:14 2007 => Scanning File C:\WINDOWS\System32\gdi32.dll
Fri Nov 16 07:34:14 2007 => Scanning File C:\WINDOWS\System32\gdiplus.dll
Fri Nov 16 07:34:14 2007 => Scanning File C:\WINDOWS\System32\GEARAspi.dll
Fri Nov 16 07:34:14 2007 => Scanning File C:\WINDOWS\System32\gearsec.exe
Fri Nov 16 07:34:14 2007 => Scanning File C:\WINDOWS\System32\geo.nls
Fri Nov 16 07:34:14 2007 => Scanning File C:\WINDOWS\System32\getuname.dll
Fri Nov 16 07:34:15 2007 => Scanning File C:\WINDOWS\System32\glmf32.dll
Fri Nov 16 07:34:15 2007 => Scanning File C:\WINDOWS\System32\glu32.dll
Fri Nov 16 07:34:15 2007 => Scanning File C:\WINDOWS\System32\gpkcsp.dll
Fri Nov 16 07:34:15 2007 => Scanning File C:\WINDOWS\System32\gpkrsrc.dll
Fri Nov 16 07:34:15 2007 => Scanning File C:\WINDOWS\System32\graftabl.com
Fri Nov 16 07:34:15 2007 => Scanning File C:\WINDOWS\System32\graphics.com
Fri Nov 16 07:34:16 2007 => Scanning File C:\WINDOWS\System32\graphics.pro
Fri Nov 16 07:34:16 2007 => Scanning File C:\WINDOWS\System32\grpconv.exe
Fri Nov 16 07:34:16 2007 => Scanning File C:\WINDOWS\System32\h323.tsp
Fri Nov 16 07:34:16 2007 => Scanning File C:\WINDOWS\System32\h323log.txt [**]
Fri Nov 16 07:34:16 2007 => Scanning File C:\WINDOWS\System32\h323msp.dll
Fri Nov 16 07:34:16 2007 => Scanning File C:\WINDOWS\System32\HAL.DLL
Fri Nov 16 07:34:16 2007 => Scanning File C:\WINDOWS\System32\hccoin.dll
Fri Nov 16 07:34:16 2007 => Scanning File C:\WINDOWS\System32\hdwwiz.cpl
Fri Nov 16 07:34:16 2007 => Scanning File C:\WINDOWS\System32\help.exe
Fri Nov 16 07:34:17 2007 => Scanning File C:\WINDOWS\System32\HHActiveX.dll
Fri Nov 16 07:34:17 2007 => Scanning File C:\WINDOWS\System32\hhctrl.ocx
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\hhsetup.dll
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\hid.dll
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\hidphone.tsp
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\himem.sys
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\hlink.dll
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\hlp95en.dll
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\hnetcfg.dll
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\hnetmon.dll
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\hnetwiz.dll
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\homepage.inf
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\hostname.exe
Fri Nov 16 07:34:18 2007 => Scanning File C:\WINDOWS\System32\hotplug.dll
Fri Nov 16 07:34:19 2007 => Scanning File C:\WINDOWS\System32\hpgwiamd.dll
Fri Nov 16 07:34:19 2007 => Scanning File C:\WINDOWS\System32\hphmon05.dat
Fri Nov 16 07:34:19 2007 => Scanning File C:\WINDOWS\System32\hphmon05.exe
Fri Nov 16 07:34:19 2007 => Scanning File C:\WINDOWS\System32\HPODStormEncoder.dll
Fri Nov 16 07:34:19 2007 => Scanning File C:\WINDOWS\System32\HPODXPAT.DLL
Fri Nov 16 07:34:19 2007 => Scanning File C:\WINDOWS\System32\hpotscl.dll
Fri Nov 16 07:34:20 2007 => Scanning File C:\WINDOWS\System32\hpovst08.dll
Fri Nov 16 07:34:20 2007 => Scanning File C:\WINDOWS\System32\HPZc3212.dll
Fri Nov 16 07:34:20 2007 => Scanning File C:\WINDOWS\System32\hpzcoi09.dll
Fri Nov 16 07:34:21 2007 => Scanning File C:\WINDOWS\System32\hpzcon09.dll
Fri Nov 16 07:34:21 2007 => Scanning File C:\WINDOWS\System32\hpzidr12.dll
Fri Nov 16 07:34:22 2007 => Scanning File C:\WINDOWS\System32\hpzinw12.exe
Fri Nov 16 07:34:22 2007 => Scanning File C:\WINDOWS\System32\hpzipm12.exe
Fri Nov 16 07:34:22 2007 => Scanning File C:\WINDOWS\System32\hpzipr12.dll
Fri Nov 16 07:34:22 2007 => Scanning File C:\WINDOWS\System32\hpzipt12.dll
Fri Nov 16 07:34:22 2007 => Scanning File C:\WINDOWS\System32\hpzisn12.dll
Fri Nov 16 07:34:22 2007 => Scanning File C:\WINDOWS\System32\hpzjrd01.dll
Fri Nov 16 07:34:22 2007 => Scanning File C:\WINDOWS\System32\hpzjsn01.dll
Fri Nov 16 07:34:23 2007 => Scanning File C:\WINDOWS\System32\hpzsnt09.dll
Fri Nov 16 07:34:23 2007 => Scanning File C:\WINDOWS\System32\hticons.dll
Fri Nov 16 07:34:23 2007 => Scanning File C:\WINDOWS\System32\htui.dll
Fri Nov 16 07:34:23 2007 => Scanning File C:\WINDOWS\System32\hxotdomp.dll.ren
Fri Nov 16 07:34:23 2007 => File C:\WINDOWS\System32\hxotdomp.dll.ren tagged as not-a-virus:AdWare.Win32.Virtumonde.aps. No Action Taken.

Fri Nov 16 07:34:23 2007 => Scanning File C:\WINDOWS\System32\hypertrm.dll
Fri Nov 16 07:34:23 2007 => Scanning File C:\WINDOWS\System32\iac25_32.ax
Fri Nov 16 07:34:23 2007 => Scanning File C:\WINDOWS\System32\iasacct.dll
Fri Nov 16 07:34:23 2007 => Scanning File C:\WINDOWS\System32\iasads.dll
Fri Nov 16 07:34:23 2007 => Scanning File C:\WINDOWS\System32\iashlpr.dll
Fri Nov 16 07:34:23 2007 => Scanning File C:\WINDOWS\System32\iasnap.dll
Fri Nov 16 07:34:24 2007 => Scanning File C:\WINDOWS\System32\iaspolcy.dll
Fri Nov 16 07:34:24 2007 => Scanning File C:\WINDOWS\System32\iasrad.dll
Fri Nov 16 07:34:24 2007 => Scanning File C:\WINDOWS\System32\iasrecst.dll
Fri Nov 16 07:34:24 2007 => Scanning File C:\WINDOWS\System32\iassam.dll
Fri Nov 16 07:34:24 2007 => Scanning File C:\WINDOWS\System32\iassdo.dll
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\iassvcs.dll
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\icaapi.dll
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\iccvid.dll
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\icfgnt5.dll
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\icm32.dll
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\icmp.dll
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\icmui.dll
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\icwdial.dll
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\icwphbk.dll
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\ideograf.uce
Fri Nov 16 07:34:25 2007 => Scanning File C:\WINDOWS\System32\idq.dll
Fri Nov 16 07:34:26 2007 => Scanning File C:\WINDOWS\System32\ie4uinit.exe
Fri Nov 16 07:34:26 2007 => Scanning File C:\WINDOWS\System32\ieakeng.dll
Fri Nov 16 07:34:26 2007 => Scanning File C:\WINDOWS\System32\ieaksie.dll
Fri Nov 16 07:34:26 2007 => Scanning File C:\WINDOWS\System32\ieakui.dll
Fri Nov 16 07:34:27 2007 => Scanning File C:\WINDOWS\System32\iedkcs32.dll
Fri Nov 16 07:34:27 2007 => Scanning File C:\WINDOWS\System32\IEPEERS.DLL
Fri Nov 16 07:34:27 2007 => Scanning File C:\WINDOWS\System32\iernonce.dll
Fri Nov 16 07:34:27 2007 => Scanning File C:\WINDOWS\System32\iesetup.dll
Fri Nov 16 07:34:28 2007 => Scanning File C:\WINDOWS\System32\ieuinit.inf
Fri Nov 16 07:34:28 2007 => Scanning File C:\WINDOWS\System32\iexpress.exe
Fri Nov 16 07:34:28 2007 => Scanning File C:\WINDOWS\System32\IfHelper.dll
Fri Nov 16 07:34:28 2007 => Scanning File C:\WINDOWS\System32\ifmon.dll
Fri Nov 16 07:34:28 2007 => Scanning File C:\WINDOWS\System32\ifsutil.dll
Fri Nov 16 07:34:28 2007 => Scanning File C:\WINDOWS\System32\igmpagnt.dll
Fri Nov 16 07:34:28 2007 => Scanning File C:\WINDOWS\System32\ils.dll
Fri Nov 16 07:34:28 2007 => Scanning File C:\WINDOWS\System32\imaadp32.acm
Fri Nov 16 07:34:28 2007 => Scanning File C:\WINDOWS\System32\imagehlp.dll
Fri Nov 16 07:34:28 2007 => Scanning File C:\WINDOWS\System32\imagr5.dll
Fri Nov 16 07:34:29 2007 => Scanning File C:\WINDOWS\System32\imagx5.dll
Fri Nov 16 07:34:29 2007 => Scanning File C:\WINDOWS\System32\ImagXpr5.dll
Fri Nov 16 07:34:30 2007 => Scanning File C:\WINDOWS\System32\imapi.exe
Fri Nov 16 07:34:30 2007 => Scanning File C:\WINDOWS\System32\imekr61.ime
Fri Nov 16 07:34:30 2007 => Scanning File C:\WINDOWS\System32\imeshare.dll
Fri Nov 16 07:34:30 2007 => Scanning File C:\WINDOWS\System32\imgutil.dll
Fri Nov 16 07:34:30 2007 => Scanning File C:\WINDOWS\System32\imjp81.ime
Fri Nov 16 07:34:30 2007 => Scanning File C:\WINDOWS\System32\imjp81k.dll
Fri Nov 16 07:34:31 2007 => Scanning File C:\WINDOWS\System32\imm32.dll
Fri Nov 16 07:34:31 2007 => Scanning File C:\WINDOWS\System32\Indeo4.qtx
Fri Nov 16 07:34:31 2007 => Scanning File C:\WINDOWS\System32\inetcfg.dll
Fri Nov 16 07:34:31 2007 => Scanning File C:\WINDOWS\System32\INETCOMM.DLL
Fri Nov 16 07:34:31 2007 => Scanning File C:\WINDOWS\System32\inetcpl.cpl
Fri Nov 16 07:34:32 2007 => Scanning File C:\WINDOWS\System32\inetcplc.dll
Fri Nov 16 07:34:32 2007 => Scanning File C:\WINDOWS\System32\inetmib1.dll
Fri Nov 16 07:34:32 2007 => Scanning File C:\WINDOWS\System32\inetpp.dll
Fri Nov 16 07:34:32 2007 => Scanning File C:\WINDOWS\System32\inetppui.dll
Fri Nov 16 07:34:32 2007 => Scanning File C:\WINDOWS\System32\INETRES.DLL
Fri Nov 16 07:34:32 2007 => Scanning File C:\WINDOWS\System32\infosoft.dll
Fri Nov 16 07:34:32 2007 => Scanning File C:\WINDOWS\System32\initpki.dll
Fri Nov 16 07:34:33 2007 => Scanning File C:\WINDOWS\System32\INKED.DLL
Fri Nov 16 07:34:33 2007 => Scanning File C:\WINDOWS\System32\INLOADER.DLL
Fri Nov 16 07:34:33 2007 => Scanning File C:\WINDOWS\System32\input.dll
Fri Nov 16 07:34:33 2007 => Scanning File C:\WINDOWS\System32\INSENG.DLL
Fri Nov 16 07:34:33 2007 => Scanning File C:\WINDOWS\System32\InstallContinue.exe
Fri Nov 16 07:34:34 2007 => Scanning File C:\WINDOWS\System32\instcat.sql
Fri Nov 16 07:34:34 2007 => Scanning File C:\WINDOWS\System32\intl.cpl
Fri Nov 16 07:34:34 2007 => Scanning File C:\WINDOWS\System32\iologmsg.dll
Fri Nov 16 07:34:34 2007 => Scanning File C:\WINDOWS\System32\ipconf.tsp
Fri Nov 16 07:34:34 2007 => Scanning File C:\WINDOWS\System32\ipconfig.exe
Fri Nov 16 07:34:34 2007 => Scanning File C:\WINDOWS\System32\iphlpapi.dll
Fri Nov 16 07:34:34 2007 => Scanning File C:\WINDOWS\System32\ipmontr.dll
Fri Nov 16 07:34:35 2007 => Scanning File C:\WINDOWS\System32\ipnathlp.dll
Fri Nov 16 07:34:35 2007 => Scanning File C:\WINDOWS\System32\ippromon.dll
Fri Nov 16 07:34:35 2007 => Scanning File C:\WINDOWS\System32\iprop.dll
Fri Nov 16 07:34:35 2007 => Scanning File C:\WINDOWS\System32\iprtprio.dll
Fri Nov 16 07:34:35 2007 => Scanning File C:\WINDOWS\System32\iprtrmgr.dll
Fri Nov 16 07:34:36 2007 => Scanning File C:\WINDOWS\System32\ipsec6.exe
Fri Nov 16 07:34:36 2007 => Scanning File C:\WINDOWS\System32\ipsecsnp.dll
Fri Nov 16 07:34:36 2007 => Scanning File C:\WINDOWS\System32\ipsecsvc.dll
Fri Nov 16 07:34:36 2007 => Scanning File C:\WINDOWS\System32\ipsink.ax
Fri Nov 16 07:34:36 2007 => Scanning File C:\WINDOWS\System32\ipsmsnap.dll
Fri Nov 16 07:34:36 2007 => Scanning File C:\WINDOWS\System32\ipv6.exe
Fri Nov 16 07:34:36 2007 => Scanning File C:\WINDOWS\System32\ipv6mon.dll
Fri Nov 16 07:34:36 2007 => Scanning File C:\WINDOWS\System32\ipxmontr.dll
Fri Nov 16 07:34:36 2007 => Scanning File C:\WINDOWS\System32\ipxpromn.dll
Fri Nov 16 07:34:36 2007 => Scanning File C:\WINDOWS\System32\ipxrip.dll
Fri Nov 16 07:34:37 2007 => Scanning File C:\WINDOWS\System32\ipxroute.exe
Fri Nov 16 07:34:37 2007 => Scanning File C:\WINDOWS\System32\ipxrtmgr.dll
Fri Nov 16 07:34:37 2007 => Scanning File C:\WINDOWS\System32\ipxsap.dll
Fri Nov 16 07:34:37 2007 => Scanning File C:\WINDOWS\System32\ipxwan.dll
Fri Nov 16 07:34:37 2007 => Scanning File C:\WINDOWS\System32\ir32_32.dll
Fri Nov 16 07:34:37 2007 => Scanning File C:\WINDOWS\System32\ir41_32.ax
Fri Nov 16 07:34:37 2007 => Scanning File C:\WINDOWS\System32\ir41_qc.dll
Fri Nov 16 07:34:37 2007 => Scanning File C:\WINDOWS\System32\ir41_qcx.dll
Fri Nov 16 07:34:38 2007 => Scanning File C:\WINDOWS\System32\ir50_32.dll
Fri Nov 16 07:34:38 2007 => Scanning File C:\WINDOWS\System32\ir50_qc.dll
Fri Nov 16 07:34:38 2007 => Scanning File C:\WINDOWS\System32\ir50_qcx.dll
Fri Nov 16 07:34:38 2007 => Scanning File C:\WINDOWS\System32\irclass.dll
Fri Nov 16 07:34:38 2007 => Scanning File C:\WINDOWS\System32\irftp.exe
Fri Nov 16 07:34:38 2007 => Scanning File C:\WINDOWS\System32\irmon.dll
Fri Nov 16 07:34:38 2007 => Scanning File C:\WINDOWS\System32\irprops.cpl
Fri Nov 16 07:34:38 2007 => Scanning File C:\WINDOWS\System32\isign32.dll
Fri Nov 16 07:34:39 2007 => Scanning File C:\WINDOWS\System32\isrdbg32.dll
Fri Nov 16 07:34:39 2007 => Scanning File C:\WINDOWS\System32\Iticheck.dll
Fri Nov 16 07:34:39 2007 => Scanning File C:\WINDOWS\System32\itidat.dll
Fri Nov 16 07:34:39 2007 => Scanning File C:\WINDOWS\System32\itidib.dll
Fri Nov 16 07:34:39 2007 => Scanning File C:\WINDOWS\System32\itiimg2.dll
Fri Nov 16 07:34:39 2007 => Scanning File C:\WINDOWS\System32\itircl.dll
Fri Nov 16 07:34:39 2007 => Scanning File C:\WINDOWS\System32\itss.dll
Fri Nov 16 07:34:39 2007 => Scanning File C:\WINDOWS\System32\iuctl.dll
Fri Nov 16 07:34:39 2007 => Scanning File C:\WINDOWS\System32\iuengine.dll
Fri Nov 16 07:34:40 2007 => Scanning File C:\WINDOWS\System32\ivfsrc.ax
Fri Nov 16 07:34:40 2007 => Scanning File C:\WINDOWS\System32\ixsso.dll
Fri Nov 16 07:34:40 2007 => Scanning File C:\WINDOWS\System32\iyuv_32.dll
Fri Nov 16 07:34:40 2007 => Scanning File C:\WINDOWS\System32\java.exe
Fri Nov 16 07:34:40 2007 => Scanning File C:\WINDOWS\System32\javaw.exe
Fri Nov 16 07:34:40 2007 => Scanning File C:\WINDOWS\System32\jet500.dll
Fri Nov 16 07:34:40 2007 => Scanning File C:\WINDOWS\System32\jgaw400.dll
Fri Nov 16 07:34:40 2007 => Scanning File C:\WINDOWS\System32\JGDW400.DLL
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\jgmd400.dll
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\JGPL400.DLL
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\jgsd400.dll
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\jgsh400.dll
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\jobexec.dll
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\joy.cpl
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\jpicpl32.cpl
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\jscript.dll
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\jsfr.dll
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\JSPROXY.DLL
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\kanji_1.uce
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\kanji_2.uce
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\kb16.com
Fri Nov 16 07:34:41 2007 => Scanning File C:\WINDOWS\System32\kbd101.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbd101a.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbd101b.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbd101c.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbd103.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbd106.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbd106n.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\KBDAL.DLL
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdax2.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdaze.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdazel.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdbe.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdbene.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdblr.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdbr.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdbu.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdca.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdcan.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdcr.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdcz.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdcz1.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdcz2.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdda.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbddv.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdes.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdest.dll
Fri Nov 16 07:34:42 2007 => Scanning File C:\WINDOWS\System32\kbdfc.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdfi.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdfo.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdfr.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdgae.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdgkl.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdgr.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdgr1.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdhe.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdhe220.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdhe319.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdhela2.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdhela3.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdhept.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdhu.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdhu1.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdibm02.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdic.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdir.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdit.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdit142.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdjpn.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdkaz.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdkor.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdkyr.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdla.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdlk41a.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdlk41j.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdlt.dll
Fri Nov 16 07:34:43 2007 => Scanning File C:\WINDOWS\System32\kbdlt1.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdlv.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdlv1.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdmac.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdmon.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdne.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdnec.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdnec95.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdnecAT.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdnecNT.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdno.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdpl.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdpl1.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdpo.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdro.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdru.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdru1.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdsf.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdsg.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdsl.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdsl1.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdsp.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdsw.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdtat.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdtuf.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdtuq.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbduk.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdur.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdus.dll
Fri Nov 16 07:34:44 2007 => Scanning File C:\WINDOWS\System32\kbdusl.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\kbdusr.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\kbdusx.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\kbduzb.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\kbdycc.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\kbdycl.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\kd1394.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\kdcom.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\kerberos.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\kernel32.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\key01.sys
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\keyboard.drv
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\keyboard.sys
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\keymgr.dll
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\KGyGaAvL.sys
Fri Nov 16 07:34:45 2007 => Scanning File C:\WINDOWS\System32\khfcded.dll
Fri Nov 16 07:34:46 2007 => Scanning File C:\WINDOWS\System32\kmddsp.tsp
Fri Nov 16 07:34:46 2007 => Scanning File C:\WINDOWS\System32\korean.uce
Fri Nov 16 07:34:46 2007 => Scanning File C:\WINDOWS\System32\korwbrkr.dll
Fri Nov 16 07:34:46 2007 => Scanning File C:\WINDOWS\System32\korwbrkr.lex
Fri Nov 16 07:34:46 2007 => Scanning File C:\WINDOWS\System32\krnl386.exe
Fri Nov 16 07:34:46 2007 => Scanning File C:\WINDOWS\System32\ksc.nls
Fri Nov 16 07:34:46 2007 => Scanning File C:\WINDOWS\System32\ksproxy.ax
Fri Nov 16 07:34:46 2007 => Scanning File C:\WINDOWS\System32\kstvtune.ax
Fri Nov 16 07:34:47 2007 => Scanning File C:\WINDOWS\System32\ksuser.dll
Fri Nov 16 07:34:47 2007 => Scanning File C:\WINDOWS\System32\kswdmcap.ax
Fri Nov 16 07:34:47 2007 => Scanning File C:\WINDOWS\System32\ksxbar.ax
Fri Nov 16 07:34:47 2007 => Scanning File C:\WINDOWS\System32\l3codeca.acm
Fri Nov 16 07:34:47 2007 => Scanning File C:\WINDOWS\System32\l3codecp.acm
Fri Nov 16 07:34:47 2007 => Scanning File C:\WINDOWS\System32\l3codecx.ax
Fri Nov 16 07:34:47 2007 => Scanning File C:\WINDOWS\System32\label.exe
Fri Nov 16 07:34:47 2007 => Scanning File C:\WINDOWS\System32\langwrbk.dll
Fri Nov 16 07:34:48 2007 => Scanning File C:\WINDOWS\System32\lanman.drv
Fri Nov 16 07:34:48 2007 => Scanning File C:\WINDOWS\System32\laprxy.dll
Fri Nov 16 07:34:48 2007 => Scanning File C:\WINDOWS\System32\LCodcCMP.dll
Fri Nov 16 07:34:48 2007 => Scanning File C:\WINDOWS\System32\lcphrase.tbl
Fri Nov 16 07:34:48 2007 => Scanning File C:\WINDOWS\System32\lcptr.tbl
Fri Nov 16 07:34:48 2007 => Scanning File C:\WINDOWS\System32\LegitCheckControl.dll
Fri Nov 16 07:34:48 2007 => Scanning File C:\WINDOWS\System32\lfbmp11n.dll
Fri Nov 16 07:34:48 2007 => Scanning File C:\WINDOWS\System32\LFCMP11n.DLL
Fri Nov 16 07:34:48 2007 => Scanning File C:\WINDOWS\System32\lfeps11n.dll
Fri Nov 16 07:34:49 2007 => Scanning File C:\WINDOWS\System32\lffax11n.dll
Fri Nov 16 07:34:49 2007 => Scanning File C:\WINDOWS\System32\lfgif11n.dll
Fri Nov 16 07:34:49 2007 => Scanning File C:\WINDOWS\System32\lfpcd11n.dll
Fri Nov 16 07:34:49 2007 => Scanning File C:\WINDOWS\System32\lfpcx11n.dll
Fri Nov 16 07:34:49 2007 => Scanning File C:\WINDOWS\System32\Lfpng11n.dll
Fri Nov 16 07:34:49 2007 => Scanning File C:\WINDOWS\System32\lfpsd11n.dll
Fri Nov 16 07:34:49 2007 => Scanning File C:\WINDOWS\System32\lftga11n.dll
Fri Nov 16 07:34:49 2007 => Scanning File C:\WINDOWS\System32\lftif11n.dll
Fri Nov 16 07:34:49 2007 => Scanning File C:\WINDOWS\System32\lfwmf11n.dll
Fri Nov 16 07:34:49 2007 => Scanning File C:\WINDOWS\System32\libdivx.dll
Fri Nov 16 07:34:50 2007 => Scanning File C:\WINDOWS\System32\licdll.dll
Fri Nov 16 07:34:50 2007 => Scanning File C:\WINDOWS\System32\licmgr10.dll
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\licwmi.dll
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\lights.exe
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\linkinfo.dll
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\lmhsvc.dll
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\lmrt.dll
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\LMRTREND.dll
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\lnkstub.exe
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\loadfix.com
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\loadperf.dll
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\locale.nls
Fri Nov 16 07:34:51 2007 => Scanning File C:\WINDOWS\System32\localsec.dll
Fri Nov 16 07:34:52 2007 => Scanning File C:\WINDOWS\System32\localspl.dll
Fri Nov 16 07:34:52 2007 => Scanning File C:\WINDOWS\System32\localui.dll
Fri Nov 16 07:34:52 2007 => Scanning File C:\WINDOWS\System32\locator.exe
Fri Nov 16 07:34:52 2007 => Scanning File C:\WINDOWS\System32\lodctr.exe
Fri Nov 16 07:34:52 2007 => Scanning File C:\WINDOWS\System32\logagent.exe
Fri Nov 16 07:34:52 2007 => Scanning File C:\WINDOWS\System32\loghours.dll
Fri Nov 16 07:34:52 2007 => Scanning File C:\WINDOWS\System32\logoff.exe
Fri Nov 16 07:34:52 2007 => Scanning File C:\WINDOWS\System32\logon.scr
Fri Nov 16 07:34:52 2007 => Scanning File C:\WINDOWS\System32\logonui.exe
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\logonui.exe.manifest
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\lpk.dll
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\lpq.exe
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\lpr.exe
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\lprhelp.dll
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\lprmonui.dll
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\lsasrv.dll
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\lsass.exe
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\LTDIS11n.dll
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\ltfil11n.DLL
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\ltimg11n.dll
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\ltkrn11n.dll
Fri Nov 16 07:34:53 2007 => Scanning File C:\WINDOWS\System32\Ltwvc11n.dll
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\lusrmgr.msc
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\lz32.dll
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\lzexpand.dll
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\l_except.nls
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\l_intl.nls
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\magnify.exe
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\mag_hook.dll
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\main.cpl
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\makecab.exe
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\mapi32.dll
Fri Nov 16 07:34:54 2007 => Scanning File C:\WINDOWS\System32\mapistub.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mcastmib.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mcd32.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mcdsrv32.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mchgrcoi.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mciavi.drv
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mciavi32.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mcicda.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mcict16.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mciole16.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mciole32.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mcipspct.dll
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mcipspct.ini
Fri Nov 16 07:34:55 2007 => Scanning File C:\WINDOWS\System32\mcipspwa.dll
Fri Nov 16 07:34:56 2007 => Scanning File C:\WINDOWS\System32\mcipspwa.ini
Fri Nov 16 07:34:56 2007 => Scanning File C:\WINDOWS\System32\mciqtz.drv
Fri Nov 16 07:34:56 2007 => Scanning File C:\WINDOWS\System32\mciqtz32.dll
Fri Nov 16 07:34:56 2007 => Scanning File C:\WINDOWS\System32\mciseq.dll
Fri Nov 16 07:34:56 2007 => Scanning File C:\WINDOWS\System32\mciseq.drv
Fri Nov 16 07:34:56 2007 => Scanning File C:\WINDOWS\System32\mciwa16.dll
Fri Nov 16 07:34:56 2007 => Scanning File C:\WINDOWS\System32\mciwatbl.dll
Fri Nov 16 07:34:56 2007 => Scanning File C:\WINDOWS\System32\mciwave.dll
Fri Nov 16 07:34:56 2007 => Scanning File C:\WINDOWS\System32\mciwave.drv
Fri Nov 16 07:34:56 2007 => Scanning File C:\WINDOWS\System32\mciwaw95.dll
Fri Nov 16 07:34:57 2007 => Scanning File C:\WINDOWS\System32\mciwaw95.ini
Fri Nov 16 07:34:57 2007 => Scanning File C:\WINDOWS\System32\mcrh.tmp
Fri Nov 16 07:34:57 2007 => Scanning File C:\WINDOWS\System32\mdhcp.dll
Fri Nov 16 07:34:57 2007 => Scanning File C:\WINDOWS\System32\mdimon.dll
Fri Nov 16 07:34:57 2007 => Scanning File C:\WINDOWS\System32\mdminst.dll
Fri Nov 16 07:34:57 2007 => Scanning File C:\WINDOWS\System32\mdwmdmsp.dll
Fri Nov 16 07:34:57 2007 => Scanning File C:\WINDOWS\System32\mem.exe
Fri Nov 16 07:34:57 2007 => Scanning File C:\WINDOWS\System32\mf3216.dll
Fri Nov 16 07:34:57 2007 => Scanning File C:\WINDOWS\System32\mfc40.dll
Fri Nov 16 07:34:58 2007 => Scanning File C:\WINDOWS\System32\mfc40loc.dll
Fri Nov 16 07:34:58 2007 => Scanning File C:\WINDOWS\System32\mfc40u.dll
Fri Nov 16 07:34:59 2007 => Scanning File C:\WINDOWS\System32\mfc42.dll
Fri Nov 16 07:34:59 2007 => Scanning File C:\WINDOWS\System32\MFC42FRA.DLL
Fri Nov 16 07:34:59 2007 => Scanning File C:\WINDOWS\System32\mfc42loc.dll
Fri Nov 16 07:34:59 2007 => Scanning File C:\WINDOWS\System32\mfc42u.dll
Fri Nov 16 07:34:59 2007 => Scanning File C:\WINDOWS\System32\mfc70.dll
Fri Nov 16 07:35:00 2007 => Scanning File C:\WINDOWS\System32\mfc70u.dll
Fri Nov 16 07:35:01 2007 => Scanning File C:\WINDOWS\System32\mfc71.dll
Fri Nov 16 07:35:01 2007 => Scanning File C:\WINDOWS\System32\MFC71CHS.DLL
Fri Nov 16 07:35:01 2007 => Scanning File C:\WINDOWS\System32\MFC71CHT.DLL
Fri Nov 16 07:35:01 2007 => Scanning File C:\WINDOWS\System32\MFC71DEU.DLL
Fri Nov 16 07:35:01 2007 => Scanning File C:\WINDOWS\System32\MFC71ENU.DLL
Fri Nov 16 07:35:01 2007 => Scanning File C:\WINDOWS\System32\MFC71ESP.DLL
Fri Nov 16 07:35:01 2007 => Scanning File C:\WINDOWS\System32\MFC71FRA.DLL
Fri Nov 16 07:35:01 2007 => Scanning File C:\WINDOWS\System32\MFC71ITA.DLL
Fri Nov 16 07:35:02 2007 => Scanning File C:\WINDOWS\System32\MFC71JPN.DLL
Fri Nov 16 07:35:02 2007 => Scanning File C:\WINDOWS\System32\MFC71KOR.DLL
Fri Nov 16 07:35:02 2007 => Scanning File C:\WINDOWS\System32\mfc71u.dll
Fri Nov 16 07:35:02 2007 => Scanning File C:\WINDOWS\System32\mfcans32.dll
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\mfcsubs.dll
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\mfcuia32.dll
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\mgmtapi.dll
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\mib.bin
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\midimap.dll
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\miglibnt.dll
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\migpwd.exe
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\mimefilt.dll
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\mindex.dll
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\miniime.tpl
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\mlang.dat
Fri Nov 16 07:35:03 2007 => Scanning File C:\WINDOWS\System32\mlang.dll
Fri Nov 16 07:35:04 2007 => Scanning File C:\WINDOWS\System32\mll_hp.dll
Fri Nov 16 07:35:04 2007 => Scanning File C:\WINDOWS\System32\mll_mtf.dll
Fri Nov 16 07:35:04 2007 => Scanning File C:\WINDOWS\System32\mll_qic.dll
Fri Nov 16 07:35:04 2007 => Scanning File C:\WINDOWS\System32\mmc.exe
Fri Nov 16 07:35:04 2007 => Scanning File C:\WINDOWS\System32\mmcbase.dll
Fri Nov 16 07:35:05 2007 => Scanning File C:\WINDOWS\System32\mmcndmgr.dll
Fri Nov 16 07:35:06 2007 => Scanning File C:\WINDOWS\System32\mmcshext.dll
Fri Nov 16 07:35:06 2007 => Scanning File C:\WINDOWS\System32\mmdriver.inf
Fri Nov 16 07:35:06 2007 => Scanning File C:\WINDOWS\System32\mmdrv.dll
Fri Nov 16 07:35:06 2007 => Scanning File C:\WINDOWS\System32\mmfutil.dll
Fri Nov 16 07:35:06 2007 => Scanning File C:\WINDOWS\System32\mmsys.cpl
Fri Nov 16 07:35:07 2007 => Scanning File C:\WINDOWS\System32\mmsystem.dll
Fri Nov 16 07:35:07 2007 => Scanning File C:\WINDOWS\System32\mmtask.tsk
Fri Nov 16 07:35:07 2007 => Scanning File C:\WINDOWS\System32\MMToolsX2.ocx
Fri Nov 16 07:35:09 2007 => Scanning File C:\WINDOWS\System32\MMTypesX2.ocx
Fri Nov 16 07:35:09 2007 => Scanning File C:\WINDOWS\System32\mmutilse.dll
Fri Nov 16 07:35:09 2007 => Scanning File C:\WINDOWS\System32\mnmdd.dll
Fri Nov 16 07:35:09 2007 => Scanning File C:\WINDOWS\System32\mnmsrvc.exe
Fri Nov 16 07:35:09 2007 => Scanning File C:\WINDOWS\System32\mobsync.dll
Fri Nov 16 07:35:10 2007 => Scanning File C:\WINDOWS\System32\mobsync.exe
Fri Nov 16 07:35:10 2007 => Scanning File C:\WINDOWS\System32\mode.com
Fri Nov 16 07:35:10 2007 => Scanning File C:\WINDOWS\System32\modemui.dll
Fri Nov 16 07:35:10 2007 => Scanning File C:\WINDOWS\System32\modex.dll
Fri Nov 16 07:35:10 2007 => Scanning File C:\WINDOWS\System32\more.com
Fri Nov 16 07:35:10 2007 => Scanning File C:\WINDOWS\System32\moricons.dll
Fri Nov 16 07:35:10 2007 => Scanning File C:\WINDOWS\System32\mountvol.exe
Fri Nov 16 07:35:11 2007 => Scanning File C:\WINDOWS\System32\mouse.drv
Fri Nov 16 07:35:11 2007 => Scanning File C:\WINDOWS\System32\mp43dmod.dll
Fri Nov 16 07:35:11 2007 => Scanning File C:\WINDOWS\System32\mp4sdmod.dll
Fri Nov 16 07:35:11 2007 => Scanning File C:\WINDOWS\System32\mpeg2data.ax
Fri Nov 16 07:35:11 2007 => Scanning File C:\WINDOWS\System32\mpg2splt.ax
Fri Nov 16 07:35:11 2007 => Scanning File C:\WINDOWS\System32\mpg4dmod.dll
Fri Nov 16 07:35:12 2007 => Scanning File C:\WINDOWS\System32\mpg4ds32.ax
Fri Nov 16 07:35:12 2007 => Scanning File C:\WINDOWS\System32\mplay32.exe
Fri Nov 16 07:35:12 2007 => Scanning File C:\WINDOWS\System32\mpnotify.exe
Fri Nov 16 07:35:12 2007 => Scanning File C:\WINDOWS\System32\mpr.dll
Fri Nov 16 07:35:12 2007 => Scanning File C:\WINDOWS\System32\mprapi.dll
Fri Nov 16 07:35:12 2007 => Scanning File C:\WINDOWS\System32\mprddm.dll
Fri Nov 16 07:35:12 2007 => Scanning File C:\WINDOWS\System32\mprdim.dll
Fri Nov 16 07:35:12 2007 => Scanning File C:\WINDOWS\System32\mprmsg.dll
Fri Nov 16 07:35:12 2007 => Scanning File C:\WINDOWS\System32\mprui.dll
Fri Nov 16 07:35:13 2007 => Scanning File C:\WINDOWS\System32\MQPLHVRX.0XE
Fri Nov 16 07:35:13 2007 => File C:\WINDOWS\System32\MQPLHVRX.0XE infected by "Trojan.Win32.Obfuscated.kp" Virus. Action Taken: File Deleted.

££££Fri Nov 16 07:35:13 2007 => Scanning File C:\WINDOWS\System32\mrinfo.exe
Fri Nov 16 07:35:13 2007 => *** File C:\WINDOWS\System32\MRT.exe having Size Restriction ***
Fri Nov 16 07:35:13 2007 => Scanning File C:\WINDOWS\System32\MRT.exe [**]
Fri Nov 16 07:35:13 2007 => Scanning File C:\WINDOWS\System32\MRT.INI
Fri Nov 16 07:35:13 2007 => Scanning File C:\WINDOWS\System32\msaatext.dll
Fri Nov 16 07:35:13 2007 => Scanning File C:\WINDOWS\System32\msacm.dll
Fri Nov 16 07:35:13 2007 => Scanning File C:\WINDOWS\System32\msacm32.dll
Fri Nov 16 07:35:13 2007 => Scanning File C:\WINDOWS\System32\msacm32.drv
Fri Nov 16 07:35:13 2007 => Scanning File C:\WINDOWS\System32\msadds32.ax
Fri Nov 16 07:35:14 2007 => Scanning File C:\WINDOWS\System32\msadp32.acm
Fri Nov 16 07:35:14 2007 => Scanning File C:\WINDOWS\System32\msafd.dll
Fri Nov 16 07:35:14 2007 => Scanning File C:\WINDOWS\System32\msapsspc.dll
Fri Nov 16 07:35:14 2007 => Scanning File C:\WINDOWS\System32\msasn1.dll
Fri Nov 16 07:35:14 2007 => Scanning File C:\WINDOWS\System32\msaud32.acm
Fri Nov 16 07:35:14 2007 => Scanning File C:\WINDOWS\System32\msaudite.dll
Fri Nov 16 07:35:14 2007 => Scanning File C:\WINDOWS\System32\mscat32.dll
Fri Nov 16 07:35:14 2007 => Scanning File C:\WINDOWS\System32\mscdexnt.exe
Fri Nov 16 07:35:14 2007 => Scanning File C:\WINDOWS\System32\mscms.dll
Fri Nov 16 07:35:14 2007 => Scanning File C:\WINDOWS\System32\mscomct2.ocx
Fri Nov 16 07:35:15 2007 => Scanning File C:\WINDOWS\System32\mscomctl.ocx
Fri Nov 16 07:35:15 2007 => Scanning File C:\WINDOWS\System32\msconf.dll
Fri Nov 16 07:35:15 2007 => Scanning File C:\WINDOWS\System32\mscoree.dll
Fri Nov 16 07:35:15 2007 => Scanning File C:\WINDOWS\System32\mscorier.dll
Fri Nov 16 07:35:15 2007 => Scanning File C:\WINDOWS\System32\mscories.dll
Fri Nov 16 07:35:15 2007 => Scanning File C:\WINDOWS\System32\mscpx32r.dLL
Fri Nov 16 07:35:15 2007 => Scanning File C:\WINDOWS\System32\mscpxl32.dLL
Fri Nov 16 07:35:15 2007 => Scanning File C:\WINDOWS\System32\MSCTF.dll
Fri Nov 16 07:35:15 2007 => Scanning File C:\WINDOWS\System32\MSCTFIME.IME
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\MSCTFP.dll
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\msdart.dll
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\msdatsrc.tlb
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\msdayi.tbl
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\msdmo.dll
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\msdtc.exe
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\msdtclog.dll
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\msdtcprf.h
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\msdtcprf.ini
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\msdtcprx.dll
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\msdtctm.dll
Fri Nov 16 07:35:17 2007 => Scanning File C:\WINDOWS\System32\msdtcuiu.dll
Fri Nov 16 07:35:17 2007 => Scanning File C:\WINDOWS\System32\msdvbnp.ax
Fri Nov 16 07:35:17 2007 => Scanning File C:\WINDOWS\System32\msdxm.ocx
Fri Nov 16 07:35:18 2007 => Scanning File C:\WINDOWS\System32\msdxmlc.dll
Fri Nov 16 07:35:18 2007 => Scanning File C:\WINDOWS\System32\msencode.dll
Fri Nov 16 07:35:18 2007 => Scanning File C:\WINDOWS\System32\msexch40.dll
Fri Nov 16 07:35:18 2007 => Scanning File C:\WINDOWS\System32\msexcl40.dll
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\msftedit.dll
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\msg.exe
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\msg711.acm
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\msg723.acm
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\msgina.dll
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\msgsm32.acm
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\msgsvc.dll
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\msh261.drv
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\msh263.drv
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\mshearts.exe
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\mshta.exe
Fri Nov 16 07:35:20 2007 => Scanning File C:\WINDOWS\System32\MSHTML.DLL
Fri Nov 16 07:35:20 2007 => Scanning File C:\WINDOWS\System32\mshtml.tlb
Fri Nov 16 07:35:20 2007 => Scanning File C:\WINDOWS\System32\mshtmled.dll
Fri Nov 16 07:35:20 2007 => Scanning File C:\WINDOWS\System32\mshtmler.dll
Fri Nov 16 07:35:20 2007 => Scanning File C:\WINDOWS\System32\msi.dll
Fri Nov 16 07:35:21 2007 => Scanning File C:\WINDOWS\System32\MSIDENT.DLL
Fri Nov 16 07:35:21 2007 => Scanning File C:\WINDOWS\System32\msidle.dll
Fri Nov 16 07:35:21 2007 => Scanning File C:\WINDOWS\System32\msidntld.dll
Fri Nov 16 07:35:21 2007 => Scanning File C:\WINDOWS\System32\msieftp.dll
Fri Nov 16 07:35:21 2007 => Scanning File C:\WINDOWS\System32\msiexec.exe
Fri Nov 16 07:35:21 2007 => Scanning File C:\WINDOWS\System32\msihnd.dll
Fri Nov 16 07:35:21 2007 => Scanning File C:\WINDOWS\System32\msimg32.dll
Fri Nov 16 07:35:21 2007 => Scanning File C:\WINDOWS\System32\msimsg.dll
Fri Nov 16 07:35:22 2007 => Scanning File C:\WINDOWS\System32\MSIMTF.dll
Fri Nov 16 07:35:22 2007 => Scanning File C:\WINDOWS\System32\MSINET.DEP
Fri Nov 16 07:35:22 2007 => Scanning File C:\WINDOWS\System32\MSINET.oca
Fri Nov 16 07:35:22 2007 => Scanning File C:\WINDOWS\System32\Msinet.ocx
Fri Nov 16 07:35:22 2007 => Scanning File C:\WINDOWS\System32\msir3jp.dll
Fri Nov 16 07:35:22 2007 => Scanning File C:\WINDOWS\System32\msir3jp.lex
Fri Nov 16 07:35:23 2007 => Scanning File C:\WINDOWS\System32\msisam11.dll
Fri Nov 16 07:35:23 2007 => Scanning File C:\WINDOWS\System32\msisip.dll
Fri Nov 16 07:35:23 2007 => Scanning File C:\WINDOWS\System32\msjet40.dll
Fri Nov 16 07:35:23 2007 => Scanning File C:\WINDOWS\System32\msjetoledb40.dll
Fri Nov 16 07:35:24 2007 => Scanning File C:\WINDOWS\System32\msjint40.dll
Fri Nov 16 07:35:24 2007 => Scanning File C:\WINDOWS\System32\msjter40.dll
Fri Nov 16 07:35:24 2007 => Scanning File C:\WINDOWS\System32\msjtes40.dll
Fri Nov 16 07:35:24 2007 => Scanning File C:\WINDOWS\System32\mslbui.dll
Fri Nov 16 07:35:24 2007 => Scanning File C:\WINDOWS\System32\msls2.dll
Fri Nov 16 07:35:24 2007 => Scanning File C:\WINDOWS\System32\msls31.dll
Fri Nov 16 07:35:24 2007 => Scanning File C:\WINDOWS\System32\msltus40.dll
Fri Nov 16 07:35:24 2007 => Scanning File C:\WINDOWS\System32\msnetobj.dll
Fri Nov 16 07:35:25 2007 => Scanning File C:\WINDOWS\System32\msnsspc.dll
Fri Nov 16 07:35:25 2007 => Scanning File C:\WINDOWS\System32\msobjs.dll
Fri Nov 16 07:35:25 2007 => Scanning File C:\WINDOWS\System32\MSOEACCT.DLL
Fri Nov 16 07:35:25 2007 => Scanning File C:\WINDOWS\System32\MSOERT2.DLL
Fri Nov 16 07:35:25 2007 => Scanning File C:\WINDOWS\System32\msorc32r.dll
Fri Nov 16 07:35:25 2007 => Scanning File C:\WINDOWS\System32\msorcl32.dll
Fri Nov 16 07:35:25 2007 => Scanning File C:\WINDOWS\System32\mspaint.exe
Fri Nov 16 07:35:26 2007 => Scanning File C:\WINDOWS\System32\mspatcha.dll
Fri Nov 16 07:35:26 2007 => Scanning File C:\WINDOWS\System32\mspbde40.dll
Fri Nov 16 07:35:26 2007 => Scanning File C:\WINDOWS\System32\MsPMSNSv.dll
Fri Nov 16 07:35:26 2007 => Scanning File C:\WINDOWS\System32\MsPMSP.dll
Fri Nov 16 07:35:26 2007 => Scanning File C:\WINDOWS\System32\mspmspsv.dll
Fri Nov 16 07:35:26 2007 => Scanning File C:\WINDOWS\System32\msports.dll
Fri Nov 16 07:35:26 2007 => Scanning File C:\WINDOWS\System32\msprivs.dll
Fri Nov 16 07:35:26 2007 => Scanning File C:\WINDOWS\System32\MSPRPFR.DLL
Fri Nov 16 07:35:26 2007 => Scanning File C:\WINDOWS\System32\msr2c.dll
Fri Nov 16 07:35:27 2007 => Scanning File C:\WINDOWS\System32\msr2cenu.dll
Fri Nov 16 07:35:27 2007 => Scanning File C:\WINDOWS\System32\msratelc.dll
Fri Nov 16 07:35:27 2007 => Scanning File C:\WINDOWS\System32\MSRATING.DLL
Fri Nov 16 07:35:27 2007 => Scanning File C:\WINDOWS\System32\msrclr40.dll
Fri Nov 16 07:35:27 2007 => Scanning File C:\WINDOWS\System32\msrd2x40.dll
Fri Nov 16 07:35:27 2007 => Scanning File C:\WINDOWS\System32\msrd3x40.dll
Fri Nov 16 07:35:27 2007 => Scanning File C:\WINDOWS\System32\MSRDO20.DLL
Fri Nov 16 07:35:28 2007 => Scanning File C:\WINDOWS\System32\msrecr40.dll
Fri Nov 16 07:35:28 2007 => Scanning File C:\WINDOWS\System32\msrepl40.dll
Fri Nov 16 07:35:28 2007 => Scanning File C:\WINDOWS\System32\msrle32.dll
Fri Nov 16 07:35:28 2007 => Scanning File C:\WINDOWS\System32\mssap.dll
Fri Nov 16 07:35:28 2007 => Scanning File C:\WINDOWS\System32\msscds32.ax
Fri Nov 16 07:35:28 2007 => Scanning File C:\WINDOWS\System32\MSSCP.dll
Fri Nov 16 07:35:28 2007 => Scanning File C:\WINDOWS\System32\msscript.ocx
Fri Nov 16 07:35:28 2007 => Scanning File C:\WINDOWS\System32\mssign32.dll
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\mssip32.dll
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\msssc.dll
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\MSSTDFMT.DLL
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\MSSTKPRP.DLL
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\msswch.dll
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\msswchx.exe
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\mstask.dll
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\mstext40.dll
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\MSTIME.DLL
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\mstinit.exe
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\mstlsapi.dll
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\mstsc.exe
Fri Nov 16 07:35:30 2007 => Scanning File C:\WINDOWS\System32\mstscax.dll
Fri Nov 16 07:35:30 2007 => Scanning File C:\WINDOWS\System32\msuni11.dll
Fri Nov 16 07:35:30 2007 => Scanning File C:\WINDOWS\System32\msutb.dll
Fri Nov 16 07:35:31 2007 => Scanning File C:\WINDOWS\System32\msv1_0.dll
Fri Nov 16 07:35:31 2007 => Scanning File C:\WINDOWS\System32\msvbvm50.dll
Fri Nov 16 07:35:31 2007 => Scanning File C:\WINDOWS\System32\msvbvm60.dll
Fri Nov 16 07:35:31 2007 => Scanning File C:\WINDOWS\System32\msvci70.dll
Fri Nov 16 07:35:31 2007 => Scanning File C:\WINDOWS\System32\msvcirt.dll
Fri Nov 16 07:35:31 2007 => Scanning File C:\WINDOWS\System32\msvcp50.dll
Fri Nov 16 07:35:31 2007 => Scanning File C:\WINDOWS\System32\msvcp60.dll
Fri Nov 16 07:35:32 2007 => Scanning File C:\WINDOWS\System32\msvcp70.dll
Fri Nov 16 07:35:32 2007 => Scanning File C:\WINDOWS\System32\MSVCP71.dll
Fri Nov 16 07:35:32 2007 => Scanning File C:\WINDOWS\System32\msvcr70.dll
Fri Nov 16 07:35:32 2007 => Scanning File C:\WINDOWS\System32\MSVCR71.dll
Fri Nov 16 07:35:32 2007 => Scanning File C:\WINDOWS\System32\msvcrt.dll
Fri Nov 16 07:35:32 2007 => Scanning File C:\WINDOWS\System32\msvcrt20.dll
Fri Nov 16 07:35:33 2007 => Scanning File C:\WINDOWS\System32\msvcrt40.dll
Fri Nov 16 07:35:33 2007 => Scanning File C:\WINDOWS\System32\msvfw32.dll
Fri Nov 16 07:35:33 2007 => Scanning File C:\WINDOWS\System32\msvidc32.dll
Fri Nov 16 07:35:33 2007 => Scanning File C:\WINDOWS\System32\msvidctl.dll
Fri Nov 16 07:35:34 2007 => Scanning File C:\WINDOWS\System32\msvideo.dll
Fri Nov 16 07:35:34 2007 => Scanning File C:\WINDOWS\System32\msw3prt.dll
Fri Nov 16 07:35:34 2007 => Scanning File C:\WINDOWS\System32\mswdat10.dll
Fri Nov 16 07:35:34 2007 => Scanning File C:\WINDOWS\System32\mswebdvd.dll
Fri Nov 16 07:35:35 2007 => Scanning File C:\WINDOWS\System32\MSWMDM.dll
Fri Nov 16 07:35:35 2007 => Scanning File C:\WINDOWS\System32\mswsock.dll
Fri Nov 16 07:35:35 2007 => Scanning File C:\WINDOWS\System32\mswstr10.dll
Fri Nov 16 07:35:35 2007 => Scanning File C:\WINDOWS\System32\msxbde40.dll
Fri Nov 16 07:35:35 2007 => Scanning File C:\WINDOWS\System32\msxml.dll
Fri Nov 16 07:35:35 2007 => Scanning File C:\WINDOWS\System32\msxml2.dll
Fri Nov 16 07:35:36 2007 => Scanning File C:\WINDOWS\System32\msxml2r.dll
Fri Nov 16 07:35:36 2007 => Scanning File C:\WINDOWS\System32\msxml3.dll
Fri Nov 16 07:35:36 2007 => Scanning File C:\WINDOWS\System32\msxml3a.dll
Fri Nov 16 07:35:36 2007 => Scanning File C:\WINDOWS\System32\msxml3r.dll
Fri Nov 16 07:35:36 2007 => Scanning File C:\WINDOWS\System32\MSXML4.DLL
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\msxml4.Manifest
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\MSXML4A.DLL
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\MSXML4R.DLL
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\msxml4r.Manifest
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\msxmlr.dll
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\msyuv.dll
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\mtxclu.dll
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\mtxdm.dll
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\mtxex.dll
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\mtxlegih.dll
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\mtxoci.dll
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\mycomput.dll
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\mydocs.dll
Fri Nov 16 07:35:37 2007 => Scanni

havi · Answer

Partie 5

Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32
arrator.exe
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
arrhook.dll
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
btstat.exe
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
cobjapi.dll
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
cpa.cpl
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
cpa.cpl.manifest
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
cxpnt.dll
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
ddeapi.dll
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
ddeapir.exe
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
ddenb32.dll
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
dptsp.tsp
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32\NeroCheck.exe
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
et.exe
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
et.hlp
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
et1.exe
Fri Nov 16 07:35:39 2007 => Scanning File C:\WINDOWS\System32
etapi.dll
Fri Nov 16 07:35:39 2007 => Scanning File C:\WINDOWS\System32
etapi32.dll
Fri Nov 16 07:35:39 2007 => Scanning File C:\WINDOWS\System32
etcfgx.dll
Fri Nov 16 07:35:39 2007 => Scanning File C:\WINDOWS\System32
etdde.exe
Fri Nov 16 07:35:39 2007 => Scanning File C:\WINDOWS\System32
etevent.dll
Fri Nov 16 07:35:39 2007 => Scanning File C:\WINDOWS\System32
etfxperf.dll
Fri Nov 16 07:35:39 2007 => Scanning File C:\WINDOWS\System32
eth.dll
Fri Nov 16 07:35:39 2007 => Scanning File C:\WINDOWS\System32
etid.dll
Fri Nov 16 07:35:40 2007 => Scanning File C:\WINDOWS\System32
etlogon.dll
Fri Nov 16 07:35:40 2007 => Scanning File C:\WINDOWS\System32
etman.dll
Fri Nov 16 07:35:40 2007 => Scanning File C:\WINDOWS\System32
etmsg.dll
Fri Nov 16 07:35:40 2007 => Scanning File C:\WINDOWS\System32
etplwiz.dll
Fri Nov 16 07:35:41 2007 => Scanning File C:\WINDOWS\System32
etrap.dll
Fri Nov 16 07:35:41 2007 => Scanning File C:\WINDOWS\System32
etsetup.exe
Fri Nov 16 07:35:42 2007 => Scanning File C:\WINDOWS\System32
etsh.exe
Fri Nov 16 07:35:42 2007 => Scanning File C:\WINDOWS\System32
etshell.dll
Fri Nov 16 07:35:42 2007 => Scanning File C:\WINDOWS\System32
etstat.exe
Fri Nov 16 07:35:42 2007 => Scanning File C:\WINDOWS\System32
etui0.dll
Fri Nov 16 07:35:42 2007 => Scanning File C:\WINDOWS\System32
etui1.dll
Fri Nov 16 07:35:42 2007 => Scanning File C:\WINDOWS\System32
etui2.dll
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
ewdev.dll
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
lhtml.dll
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
lsfunc.exe
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
mevtmsg.dll
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
mmkcert.dll
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
oise.chs
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
oise.cht
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
oise.dat
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
oise.deu
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
oise.eng
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
oise.enu
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
oise.esn
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
oise.fra
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
oise.ita
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
oise.jpn
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
oise.kor
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
oise.nld
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
oise.sve
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
oise.tha
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
otepad.exe
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
pptools.dll
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
scompat.tlb
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
slookup.exe
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
tdll.dll
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
tdos.sys
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
tdos404.sys
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
tdos411.sys
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
tdos412.sys
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
tdos804.sys
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
tdsapi.dll
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
timage.gif
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tio.sys
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tio404.sys
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tio411.sys
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tio412.sys
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tio804.sys
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tkrnlpa.exe
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tlanman.dll
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tlanui.dll
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tlanui2.dll
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tlsapi.dll
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tmarta.dll
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tmsapi.dll
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tmsdba.dll
Fri Nov 16 07:35:46 2007 => Scanning File C:\WINDOWS\System32
tmsevt.dll
Fri Nov 16 07:35:46 2007 => Scanning File C:\WINDOWS\System32
tmsmgr.dll
Fri Nov 16 07:35:46 2007 => Scanning File C:\WINDOWS\System32
tmsmgr.msc
Fri Nov 16 07:35:46 2007 => Scanning File C:\WINDOWS\System32
tmsoprq.msc
Fri Nov 16 07:35:46 2007 => Scanning File C:\WINDOWS\System32
tmssvc.dll
Fri Nov 16 07:35:47 2007 => Scanning File C:\WINDOWS\System32
toskrnl.exe
Fri Nov 16 07:35:47 2007 => Scanning File C:\WINDOWS\System32
tprint.dll
Fri Nov 16 07:35:47 2007 => Scanning File C:\WINDOWS\System32
tsd.exe
Fri Nov 16 07:35:47 2007 => Scanning File C:\WINDOWS\System32
tsdexts.dll
Fri Nov 16 07:35:47 2007 => Scanning File C:\WINDOWS\System32
tshrui.dll
Fri Nov 16 07:35:47 2007 => Scanning File C:\WINDOWS\System32
tvdm.exe
Fri Nov 16 07:35:47 2007 => Scanning File C:\WINDOWS\System32
tvdmd.dll
Fri Nov 16 07:35:48 2007 => Scanning File C:\WINDOWS\System32
usrmgr.cpl
Fri Nov 16 07:35:48 2007 => Scanning File C:\WINDOWS\System32
wc.cpl.manifest
Fri Nov 16 07:35:48 2007 => Scanning File C:\WINDOWS\System32
wprovau.dll
Fri Nov 16 07:35:48 2007 => Scanning File C:\WINDOWS\System32\oakley.dll
Fri Nov 16 07:35:48 2007 => Scanning File C:\WINDOWS\System32\objsel.dll
Fri Nov 16 07:35:49 2007 => Scanning File C:\WINDOWS\System32\occache.dll
Fri Nov 16 07:35:49 2007 => Scanning File C:\WINDOWS\System32\ochlp30e.dll
Fri Nov 16 07:35:49 2007 => Scanning File C:\WINDOWS\System32\ocmanage.dll
Fri Nov 16 07:35:49 2007 => Scanning File C:\WINDOWS\System32\odbc16gt.dll
Fri Nov 16 07:35:49 2007 => Scanning File C:\WINDOWS\System32\ODBC32.dll
Fri Nov 16 07:35:49 2007 => Scanning File C:\WINDOWS\System32\odbc32gt.dll
Fri Nov 16 07:35:49 2007 => Scanning File C:\WINDOWS\System32\odbcad32.exe
Fri Nov 16 07:35:49 2007 => Scanning File C:\WINDOWS\System32\odbcbcp.dll
Fri Nov 16 07:35:49 2007 => Scanning File C:\WINDOWS\System32\odbcconf.dll
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\odbcconf.exe
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\odbcconf.rsp
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\odbccp32.cpl
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\ODBCCP32.dll
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\odbccr32.dll
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\odbccu32.dll
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\odbcint.dll
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\odbcji32.dll
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\odbcjt32.dll
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\odbcp32r.dll
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\odbctrac.dll
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\oddbse32.dll
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\odexl32.dll
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\odfox32.dll
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\odpdx32.dll
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\odtext32.dll
Fri Nov 16 07:35:51 2007 => *** File C:\WINDOWS\System32\oembios.bin having Size Restriction ***
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\oembios.bin [**]
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\oembios.dat
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\oembios.sig
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\OEMFWALL.EXE
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\oeminfo.ini
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\OEMLogo.bmp
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\offfilt.dll
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\ogg.dll
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\OggDS.dll
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\ole2.dll
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\ole2disp.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\ole2nls.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\ole32.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\oleacc.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\oleaccrc.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\oleaut32.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\olecli.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\olecli32.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\olecnv32.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\oledlg.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\oleprn.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\olepro32.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\olesvr.dll
Fri Nov 16 07:35:53 2007 => Scanning File C:\WINDOWS\System32\olesvr32.dll
Fri Nov 16 07:35:53 2007 => Scanning File C:\WINDOWS\System32\olethk32.dll
Fri Nov 16 07:35:53 2007 => Scanning File C:\WINDOWS\System32\opengl32.dll
Fri Nov 16 07:35:53 2007 => Scanning File C:\WINDOWS\System32\osk.exe
Fri Nov 16 07:35:53 2007 => Scanning File C:\WINDOWS\System32\osuninst.dll
Fri Nov 16 07:35:53 2007 => Scanning File C:\WINDOWS\System32\osuninst.exe
Fri Nov 16 07:35:53 2007 => Scanning File C:\WINDOWS\System32\OUTLPERF.H
Fri Nov 16 07:35:53 2007 => Scanning File C:\WINDOWS\System32\OUTLPERF.INI
Fri Nov 16 07:35:53 2007 => Scanning File C:\WINDOWS\System32\owaxberp.dll
Fri Nov 16 07:35:53 2007 => File C:\WINDOWS\System32\owaxberp.dll tagged as not-a-virus:AdWare.Win32.SecToolBar.k. No Action Taken.

Fri Nov 16 07:35:53 2007 => Scanning File C:\WINDOWS\System32\packager.exe
Fri Nov 16 07:35:54 2007 => Scanning File C:\WINDOWS\System32\pandora_setup_mini.ocx
Fri Nov 16 07:35:54 2007 => Scanning File C:\WINDOWS\System32\panmap.dll
Fri Nov 16 07:35:54 2007 => Scanning File C:\WINDOWS\System32\paqsp.dll
Fri Nov 16 07:35:54 2007 => Scanning File C:\WINDOWS\System32\pathping.exe
Fri Nov 16 07:35:55 2007 => Scanning File C:\WINDOWS\System32\pautoenr.dll
Fri Nov 16 07:35:55 2007 => Scanning File C:\WINDOWS\System32\pavc.dll
Fri Nov 16 07:35:55 2007 => Scanning File C:\WINDOWS\System32\pbfkwprl.dll
Fri Nov 16 07:35:55 2007 => Scanning File C:\WINDOWS\System32\PCANDIS5.SYS
Fri Nov 16 07:35:55 2007 => Scanning File C:\WINDOWS\System32\PCDLIB32.DLL
Fri Nov 16 07:35:55 2007 => Scanning File C:\WINDOWS\System32\pcl.sep
Fri Nov 16 07:35:55 2007 => Scanning File C:\WINDOWS\System32\pdh.dll
Fri Nov 16 07:35:55 2007 => Scanning File C:\WINDOWS\System32\pdrtvae.ax
Fri Nov 16 07:35:55 2007 => Scanning File C:\WINDOWS\System32\pdrtvctl.dll
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\pdrtvdec.ax
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\pdrtvf1.dll
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\pdrtvf2.dll
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\pdrtvsvr.exe
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\pdrtvve.ax
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\pentnt.exe
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\perfc009.dat
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\perfc00C.dat
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\perfci.h
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\perfci.ini
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\perfctrs.dll
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\perfd009.dat
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfd00C.dat
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfdisk.dll
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perffilt.h
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perffilt.ini
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfh009.dat
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfh00C.dat
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfi009.dat
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfi00C.dat
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfmon.exe
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfmon.msc
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfnet.dll
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfos.dll
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfproc.dll
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\PerfStringBackup.INI
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfts.dll
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfwci.h
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfwci.ini
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\phon.ime
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\phon.tbl
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\phoncode.tbl
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\phonptr.tbl
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\photowiz.dll
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\picn20.dll
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\pid.dll
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\pidgen.dll
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\pifmgr.dll
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\ping.exe
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\ping6.exe
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\PINTLGNT.IME
Fri Nov 16 07:35:59 2007 => Scanning File C:\WINDOWS\System32\PINTLPAD.HLP
Fri Nov 16 07:35:59 2007 => Scanning File C:\WINDOWS\System32\PINTLPAE.HLP
Fri Nov 16 07:35:59 2007 => Scanning File C:\WINDOWS\System32\pjlmon.dll
Fri Nov 16 07:35:59 2007 => Scanning File C:\WINDOWS\System32\plugin.ocx
Fri Nov 16 07:35:59 2007 => Scanning File C:\WINDOWS\System32\plustab.dll
Fri Nov 16 07:35:59 2007 => Scanning File C:\WINDOWS\System32\pmodtoxh.ini.ren
Fri Nov 16 07:35:59 2007 => Scanning File C:\WINDOWS\System32\pmspl.dll
Fri Nov 16 07:35:59 2007 => Scanning File C:\WINDOWS\System32\PNGFILT.DLL
Fri Nov 16 07:35:59 2007 => Scanning File C:\WINDOWS\System32\polstore.dll
Fri Nov 16 07:35:59 2007 => Scanning File C:\WINDOWS\System32\powercfg.cpl
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\powrprof.dll
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\prc.nls
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\prcp.nls
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\prflbmsg.dll
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\print.exe
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\printui.dll
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\Process.exe
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\proctexe.ocx
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\prodspec.ini
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\profmap.dll
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\progman.exe
Fri Nov 16 07:36:01 2007 => Scanning File C:\WINDOWS\System32\proquota.exe
Fri Nov 16 07:36:01 2007 => Scanning File C:\WINDOWS\System32\prqss.ini.ren
Fri Nov 16 07:36:01 2007 => Scanning File C:\WINDOWS\System32\prqss.ini2.ren
Fri Nov 16 07:36:01 2007 => Scanning File C:\WINDOWS\System32\psapi.dll
Fri Nov 16 07:36:01 2007 => Scanning File C:\WINDOWS\System32\psbase.dll
Fri Nov 16 07:36:01 2007 => Scanning File C:\WINDOWS\System32\pschdcnt.h
Fri Nov 16 07:36:01 2007 => Scanning File C:\WINDOWS\System32\pschdprf.dll
Fri Nov 16 07:36:01 2007 => Scanning File C:\WINDOWS\System32\pschdprf.ini
Fri Nov 16 07:36:01 2007 => Scanning File C:\WINDOWS\System32\pscript.sep
Fri Nov 16 07:36:01 2007 => Scanning File C:\WINDOWS\System32\PSIKey.dll
Fri Nov 16 07:36:02 2007 => Scanning File C:\WINDOWS\System32\psisdecd.dll
Fri Nov 16 07:36:02 2007 => Scanning File C:\WINDOWS\System32\psisrndr.ax
Fri Nov 16 07:36:02 2007 => Scanning File C:\WINDOWS\System32\psnppagn.dll
Fri Nov 16 07:36:02 2007 => Scanning File C:\WINDOWS\System32\pspapdrv.dll
Fri Nov 16 07:36:02 2007 => Scanning File C:\WINDOWS\System32\pspapdrv.ini
Fri Nov 16 07:36:02 2007 => Scanning File C:\WINDOWS\System32\PSPAudio.inf
Fri Nov 16 07:36:02 2007 => Scanning File C:\WINDOWS\System32\pspaudrv.dll
Fri Nov 16 07:36:02 2007 => Scanning File C:\WINDOWS\System32\pspaudrv.ini
Fri Nov 16 07:36:03 2007 => Scanning File C:\WINDOWS\System32\pspddi.dll
Fri Nov 16 07:36:03 2007 => Scanning File C:\WINDOWS\System32\pspddi.ini
Fri Nov 16 07:36:03 2007 => Scanning File C:\WINDOWS\System32\pspdss.dll
Fri Nov 16 07:36:03 2007 => Scanning File C:\WINDOWS\System32\pspdss.ini
Fri Nov 16 07:36:03 2007 => Scanning File C:\WINDOWS\System32\pspfbase.ini
Fri Nov 16 07:36:03 2007 => Scanning File C:\WINDOWS\System32\pspfidrv.dll
Fri Nov 16 07:36:04 2007 => Scanning File C:\WINDOWS\System32\pspfidrv.ini
Fri Nov 16 07:36:04 2007 => Scanning File C:\WINDOWS\System32\psplog.dll
Fri Nov 16 07:36:04 2007 => Scanning File C:\WINDOWS\System32\pspsbext.dll
Fri Nov 16 07:36:04 2007 => Scanning File C:\WINDOWS\System32\pspsbext.ini
Fri Nov 16 07:36:04 2007 => Scanning File C:\WINDOWS\System32\pspwave.dll
Fri Nov 16 07:36:04 2007 => Scanning File C:\WINDOWS\System32\pspwave.ini
Fri Nov 16 07:36:04 2007 => Scanning File C:\WINDOWS\System32\pstorec.dll
Fri Nov 16 07:36:04 2007 => Scanning File C:\WINDOWS\System32\pstorsvc.dll
Fri Nov 16 07:36:04 2007 => Scanning File C:\WINDOWS\System32\Pubole32.dll
Fri Nov 16 07:36:04 2007 => Scanning File C:\WINDOWS\System32\pubprn.vbs
Fri Nov 16 07:36:05 2007 => Scanning File C:\WINDOWS\System32\pusbfd1.sys
Fri Nov 16 07:36:05 2007 => Scanning File C:\WINDOWS\System32\pusbfd2.vxd
Fri Nov 16 07:36:05 2007 => Scanning File C:\WINDOWS\System32\pvljpg20.dll
Fri Nov 16 07:36:05 2007 => Scanning File C:\WINDOWS\System32\pvmjpg21.dll
Fri Nov 16 07:36:05 2007 => Scanning File C:\WINDOWS\System32\pvmjpg21.hlp
Fri Nov 16 07:36:05 2007 => Scanning File C:\WINDOWS\System32\pvwv220.dll
Fri Nov 16 07:36:05 2007 => Scanning File C:\WINDOWS\System32\px.dll
Fri Nov 16 07:36:05 2007 => Scanning File C:\WINDOWS\System32\px.ini [**]
Fri Nov 16 07:36:05 2007 => Scanning File C:\WINDOWS\System32\pxdrv.dll
Fri Nov 16 07:36:06 2007 => Scanning File C:\WINDOWS\System32\pxmas.dll
Fri Nov 16 07:36:06 2007 => Scanning File C:\WINDOWS\System32\pxwave.dll
Fri Nov 16 07:36:06 2007 => Scanning File C:\WINDOWS\System32\pxwma.dll
Fri Nov 16 07:36:06 2007 => Scanning File C:\WINDOWS\System32\qappsrv.exe
Fri Nov 16 07:36:06 2007 => Scanning File C:\WINDOWS\System32\qasf.dll
Fri Nov 16 07:36:06 2007 => Scanning File C:\WINDOWS\System32\qcap.dll
Fri Nov 16 07:36:06 2007 => Scanning File C:\WINDOWS\System32\qcut.dll
Fri Nov 16 07:36:07 2007 => Scanning File C:\WINDOWS\System32\qdv.dll
Fri Nov 16 07:36:07 2007 => Scanning File C:\WINDOWS\System32\qdvd.dll
Fri Nov 16 07:36:07 2007 => Scanning File C:\WINDOWS\System32\qedit.dll
Fri Nov 16 07:36:07 2007 => Scanning File C:\WINDOWS\System32\qedwipes.dll
Fri Nov 16 07:36:09 2007 => Scanning File C:\WINDOWS\System32\QlbServr.exe
Fri Nov 16 07:36:09 2007 => Scanning File C:\WINDOWS\System32\qmgr.dll
Fri Nov 16 07:36:09 2007 => Scanning File C:\WINDOWS\System32\qmgrprxy.dll
Fri Nov 16 07:36:09 2007 => Scanning File C:\WINDOWS\System32\qosname.dll
Fri Nov 16 07:36:09 2007 => Scanning File C:\WINDOWS\System32\qprocess.exe
Fri Nov 16 07:36:09 2007 => Scanning File C:\WINDOWS\System32\qt-mt331.dll
Fri Nov 16 07:36:09 2007 => Scanning File C:\WINDOWS\System32\qtplugin.log
Fri Nov 16 07:36:09 2007 => Scanning File C:\WINDOWS\System32\quartz.dll
Fri Nov 16 07:36:10 2007 => Scanning File C:\WINDOWS\System32\quartz.vxd
Fri Nov 16 07:36:10 2007 => Scanning File C:\WINDOWS\System32\query.dll
Fri Nov 16 07:36:10 2007 => Scanning File C:\WINDOWS\System32\quick.ime
Fri Nov 16 07:36:10 2007 => Scanning File C:\WINDOWS\System32\QuickTime.ax
Fri Nov 16 07:36:10 2007 => Scanning File C:\WINDOWS\System32\QuickTime.cpl
Fri Nov 16 07:36:11 2007 => *** File C:\WINDOWS\System32\QuickTime.qts having Size Restriction ***
Fri Nov 16 07:36:11 2007 => Scanning File C:\WINDOWS\System32\QuickTime.qts [**]
Fri Nov 16 07:36:11 2007 => Scanning File C:\WINDOWS\System32\QuickTimeCheck.ocx
Fri Nov 16 07:36:11 2007 => Scanning File C:\WINDOWS\System32\QuickTimeMusicalInstruments.qtx
Fri Nov 16 07:36:11 2007 => Scanning File C:\WINDOWS\System32\QuickTimeVR.qtx
Fri Nov 16 07:36:11 2007 => Scanning File C:\WINDOWS\System32\qwinsta.exe
Fri Nov 16 07:36:11 2007 => Scanning File C:\WINDOWS\System32acpldlg.dll
Fri Nov 16 07:36:11 2007 => Scanning File C:\WINDOWS\System32asadhlp.dll
Fri Nov 16 07:36:11 2007 => Scanning File C:\WINDOWS\System32asapi32.dll
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asauto.dll
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asautou.exe
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32aschap.dll
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asctrnm.h
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asctrs.dll
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asctrs.ini
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asdial.exe
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asdlg.dll
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asman.dll
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asmans.dll
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asmontr.dll
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asmxs.dll
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32asphone.exe
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32asppp.dll
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32asrad.dll
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32assapi.dll
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32asser.dll
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32astapi.dll
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32astls.dll
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32cbdyctl.dll
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32cimlby.exe
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32cp.exe
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32dchost.dll
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32\RDOCURS.DLL
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32dpcfgex.dll
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32dpclip.exe
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32dpdd.dll
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32dpsnd.dll
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32dpwsx.dll
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32dsaddin.exe
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32dshost.exe
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32ecover.exe
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32edir.exe
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32eg.exe
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32egapi.dll
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32egedt32.exe
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32egini.exe
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32egsvc.dll
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32egsvr32.exe
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32egwiz.exe
Fri Nov 16 07:36:15 2007 => Scanning File C:\WINDOWS\System32egwizc.dll
Fri Nov 16 07:36:15 2007 => Scanning File C:\WINDOWS\System32emotepg.dll
Fri Nov 16 07:36:15 2007 => Scanning File C:\WINDOWS\System32emotesp.tsp
Fri Nov 16 07:36:15 2007 => Scanning File C:\WINDOWS\System32end.dll
Fri Nov 16 07:36:15 2007 => Scanning File C:\WINDOWS\System32eplace.exe
Fri Nov 16 07:36:15 2007 => Scanning File C:\WINDOWS\System32eset.exe
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32esutils.dll
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32exec.exe
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32iched20.dll
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32iched32.dll
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32nr20.dll
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32omanime.ime
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32oute.exe
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32outemon.exe
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32outetab.dll
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32pcns4.dll
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32pcrt4.dll
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32pcss.dll
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32saci.rat
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32saenh.dll
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32sh.exe
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32shx32.dll
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32sm.exe
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32smps.dll
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32smsink.exe
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32smui.exe
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32svp.exe
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32svp.ini
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32svpcnts.h
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32svpmsg.dll
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32svpperf.dll
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32svpsp.dll
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32tcdll.dll
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32tcshare.exe
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32tipxmib.dll
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32tm.dll
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32tutils.dll
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32unas.exe
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32undll32.exe
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32unonce.exe
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32winsta.exe
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32\S32EVNT1.DLL
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32\safrcdlg.dll
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32\safrdm.dll
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32\safrslv.dll
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32\samlib.dll
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32\samsrv.dll
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32\sapi.cpl.manifest
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32\savedump.exe
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32\sbe.dll
Fri Nov 16 07:36:19 2007 => Scanning File C:\WINDOWS\System32\sbeio.dll
Fri Nov 16 07:36:19 2007 => Scanning File C:\WINDOWS\System32\sc.exe
Fri Nov 16 07:36:19 2007 => Scanning File C:\WINDOWS\System32\scarddlg.dll
Fri Nov 16 07:36:19 2007 => Scanning File C:\WINDOWS\System32\scardssp.dll
Fri Nov 16 07:36:19 2007 => Scanning File C:\WINDOWS\System32\scardsvr.exe
Fri Nov 16 07:36:19 2007 => Scanning File C:\WINDOWS\System32\sccbase.dll
Fri Nov 16 07:36:19 2007 => Scanning File C:\WINDOWS\System32\sccsccp.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\scecli.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\scesrv.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\schannel.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\schedsvc.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\sclgntfy.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\scofr.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\SCP32.DLL
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\scredir.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\scripto.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\scrnsave.scr
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\scrobj.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\scrrnfr.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\scrrun.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\sdbinst.exe
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\sdpblb.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\seclogon.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\secupd.dat
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\secupd.sig
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\secur32.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\security.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\sendcmsg.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\sendmail.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\sens.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\sensapi.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\senscfg.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\serialui.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\servdeps.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\services.exe
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\services.msc
Fri Nov 16 07:36:22 2007 => Scanning File C:\WINDOWS\System32\serwvdrv.dll
Fri Nov 16 07:36:22 2007 => Scanning File C:\WINDOWS\System32\sessmgr.exe
Fri Nov 16 07:36:22 2007 => Scanning File C:\WINDOWS\System32\sethc.exe
Fri Nov 16 07:36:22 2007 => Scanning File C:\WINDOWS\System32\setup.bmp
Fri Nov 16 07:36:22 2007 => Scanning File C:\WINDOWS\System32\setup.exe
Fri Nov 16 07:36:22 2007 => Scanning File C:\WINDOWS\System32\setupapi.dll
Fri Nov 16 07:36:22 2007 => Scanning File C:\WINDOWS\System32\setupdll.dll
Fri Nov 16 07:36:23 2007 => Scanning File C:\WINDOWS\System32\setver.exe
Fri Nov 16 07:36:23 2007 => Scanning File C:\WINDOWS\System32\sfc.dll
Fri Nov 16 07:36:23 2007 => Scanning File C:\WINDOWS\System32\sfc.exe
Fri Nov 16 07:36:23 2007 => Scanning File C:\WINDOWS\System32\sfcfiles.dll
Fri Nov 16 07:36:23 2007 => Scanning File C:\WINDOWS\System32\sfc_os.dll
Fri Nov 16 07:36:23 2007 => Scanning File C:\WINDOWS\System32\sfmapi.dll
Fri Nov 16 07:36:23 2007 => Scanning File C:\WINDOWS\System32\shadow.exe
Fri Nov 16 07:36:23 2007 => Scanning File C:\WINDOWS\System32\share.exe
Fri Nov 16 07:36:23 2007 => Scanning File C:\WINDOWS\System32\shdoclc.dll
Fri Nov 16 07:36:24 2007 => Scanning File C:\WINDOWS\System32\shdocvw.dll
Fri Nov 16 07:36:24 2007 => Scanning File C:\WINDOWS\System32\shell.dll
Fri Nov 16 07:36:24 2007 => *** File C:\WINDOWS\System32\shell32.dll having Size Restriction ***
Fri Nov 16 07:36:24 2007 => Scanning File C:\WINDOWS\System32\shell32.dll [**]
Fri Nov 16 07:36:24 2007 => Scanning File C:\WINDOWS\System32\shellstyle.dll
Fri Nov 16 07:36:24 2007 => Scanning File C:\WINDOWS\System32\shfolder.dll
Fri Nov 16 07:36:24 2007 => Scanning File C:\WINDOWS\System32\shgina.dll
Fri Nov 16 07:36:24 2007 => Scanning File C:\WINDOWS\System32\shiftjis.uce
Fri Nov 16 07:36:24 2007 => Scanning File C:\WINDOWS\System32\shimeng.dll
Fri Nov 16 07:36:24 2007 => Scanning File C:\WINDOWS\System32\shimgvw.dll
Fri Nov 16 07:36:24 2007 => Scanning File C:\WINDOWS\System32\SHLWAPI.DLL
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\shmedia.dll
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\shmgrate.exe
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\shrpubw.exe
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\shscrap.dll
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\shsvcs.dll
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\shutdown.exe
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\sigtab.dll
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\sigverif.exe
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\simpdata.tlb
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\sisbkup.dll
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\skdll.dll
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\skeys.exe
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\slayerxp.dll
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\slbcsp.dll
Fri Nov 16 07:36:26 2007 => Scanning File C:\WINDOWS\System32\slbiop.dll
Fri Nov 16 07:36:26 2007 => Scanning File C:\WINDOWS\System32\slbrccsp.dll
Fri Nov 16 07:36:26 2007 => Scanning File C:\WINDOWS\System32\sl_anet.acm
Fri Nov 16 07:36:26 2007 => Scanning File C:\WINDOWS\System32\smlogcfg.dll
Fri Nov 16 07:36:26 2007 => Scanning File C:\WINDOWS\System32\smlogsvc.exe
Fri Nov 16 07:36:26 2007 => Scanning File C:\WINDOWS\System32\smss.exe
Fri Nov 16 07:36:26 2007 => Scanning File C:\WINDOWS\System32\sndrec32.exe
Fri Nov 16 07:36:27 2007 => Scanning File C:\WINDOWS\System32\sndvol32.exe
Fri Nov 16 07:36:27 2007 => Scanning File C:\WINDOWS\System32\snmpapi.dll
Fri Nov 16 07:36:27 2007 => Scanning File C:\WINDOWS\System32\snmpsnap.dll
Fri Nov 16 07:36:27 2007 => Scanning File C:\WINDOWS\System32\softpub.dll
Fri Nov 16 07:36:27 2007 => Scanning File C:\WINDOWS\System32\sol.exe
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\sort.exe
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\sortkey.nls
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\sorttbls.nls
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\sound.drv
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\spider.exe
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\spiisupd.exe
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\spmsg.dll
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\spnike.dll
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\spoolss.dll
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\spoolsv.exe
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\sprestrt.exe
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\sprio600.dll
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\sprio800.dll
Fri Nov 16 07:36:29 2007 => Scanning File C:\WINDOWS\System32\spupdsvc.exe
Fri Nov 16 07:36:29 2007 => Scanning File C:\WINDOWS\System32\spxcoins.dll
Fri Nov 16 07:36:29 2007 => Scanning File C:\WINDOWS\System32\sqlsodbc.chm
Fri Nov 16 07:36:29 2007 => Scanning File C:\WINDOWS\System32\SQLSRV32.dll
Fri Nov 16 07:36:29 2007 => Scanning File C:\WINDOWS\System32\sqlsrv32.rll
Fri Nov 16 07:36:30 2007 => Scanning File C:\WINDOWS\System32\sqlunirl.dll
Fri Nov 16 07:36:30 2007 => Scanning File C:\WINDOWS\System32\sqlwid.dll
Fri Nov 16 07:36:30 2007 => Scanning File C:\WINDOWS\System32\sqlwoa.dll
Fri Nov 16 07:36:30 2007 => Scanning File C:\WINDOWS\System32\SrchSTS.exe
Fri Nov 16 07:36:30 2007 => Scanning File C:\WINDOWS\System32\srclient.dll
Fri Nov 16 07:36:30 2007 => Scanning File C:\WINDOWS\System32\srrstr.dll
Fri Nov 16 07:36:31 2007 => Scanning File C:\WINDOWS\System32\srsvc.dll
Fri Nov 16 07:36:31 2007 => Scanning File C:\WINDOWS\System32\srvsvc.dll
Fri Nov 16 07:36:31 2007 => Scanning File C:\WINDOWS\System32\ss3dfo.scr
Fri Nov 16 07:36:31 2007 => Scanning File C:\WINDOWS\System32\ssbezier.scr
Fri Nov 16 07:36:31 2007 => Scanning File C:\WINDOWS\System32\ssdpapi.dll
Fri Nov 16 07:36:31 2007 => Scanning File C:\WINDOWS\System32\ssdpsrv.dll
Fri Nov 16 07:36:31 2007 => Scanning File C:\WINDOWS\System32\ssflwbox.scr
Fri Nov 16 07:36:32 2007 => Scanning File C:\WINDOWS\System32\ssldivx.dll
Fri Nov 16 07:36:33 2007 => Scanning File C:\WINDOWS\System32\ssmarque.scr
Fri Nov 16 07:36:33 2007 => Scanning File C:\WINDOWS\System32\ssmypics.scr
Fri Nov 16 07:36:33 2007 => Scanning File C:\WINDOWS\System32\ssmyst.scr
Fri Nov 16 07:36:33 2007 => Scanning File C:\WINDOWS\System32\sspipes.scr
Fri Nov 16 07:36:35 2007 => Scanning File C:\WINDOWS\System32\ssstars.scr
Fri Nov 16 07:36:35 2007 => Scanning File C:\WINDOWS\System32\sstext3d.scr
Fri Nov 16 07:36:37 2007 => Scanning File C:\WINDOWS\System32\stclient.dll
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\stdole2.tlb
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\stdole32.tlb
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\sti.dll
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\stimon.exe
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\sti_ci.dll
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\stobject.dll
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\storage.dll
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\storprop.dll
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\streamci.dll
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\strmdll.dll
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\subrange.uce
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\subst.exe
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\svcpack.dll
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\swprv.dll
Fri Nov 16 07:36:39 2007 => Scanning File C:\WINDOWS\System32\swreg.exe
Fri Nov 16 07:36:39 2007 => Scanning File C:\WINDOWS\System32\swsc.exe
Fri Nov 16 07:36:39 2007 => Scanning File C:\WINDOWS\System32\swxcacls.exe
Fri Nov 16 07:36:40 2007 => Scanning File C:\WINDOWS\System32\sxs.dll
Fri Nov 16 07:36:40 2007 => Scanning File C:\WINDOWS\System32\SymNeti.dll
Fri Nov 16 07:36:40 2007 => Scanning File C:\WINDOWS\System32\SymRedir.dll
Fri Nov 16 07:36:40 2007 => Scanning File C:\WINDOWS\System32\SymTdiRg.exe
Fri Nov 16 07:36:40 2007 => Scanning File C:\WINDOWS\System32\syncapp.exe
Fri Nov 16 07:36:40 2007 => Scanning File C:\WINDOWS\System32\synceng.dll
Fri Nov 16 07:36:40 2007 => Scanning File C:\WINDOWS\System32\syncui.dll
Fri Nov 16 07:36:40 2007 => Scanning File C:\WINDOWS\System32\sysdm.cpl
Fri Nov 16 07:36:41 2007 => Scanning File C:\WINDOWS\System32\sysedit.exe
Fri Nov 16 07:36:41 2007 => Scanning File C:\WINDOWS\System32\sysinv.dll
Fri Nov 16 07:36:41 2007 => Scanning File C:\WINDOWS\System32\syskey.exe
Fri Nov 16 07:36:41 2007 => Scanning File C:\WINDOWS\System32\sysmon.ocx
Fri Nov 16 07:36:42 2007 => Scanning File C:\WINDOWS\System32\sysocmgr.exe
Fri Nov 16 07:36:42 2007 => Scanning File C:\WINDOWS\System32\sysprint.sep
Fri Nov 16 07:36:42 2007 => Scanning File C:\WINDOWS\System32\sysprtj.sep
Fri Nov 16 07:36:42 2007 => Scanning File C:\WINDOWS\System32\syssetup.dll
Fri Nov 16 07:36:42 2007 => Scanning File C:\WINDOWS\System32\system.drv
Fri Nov 16 07:36:42 2007 => Scanning File C:\WINDOWS\System32\systray.exe
Fri Nov 16 07:36:42 2007 => Scanning File C:\WINDOWS\System32	2embed.dll
Fri Nov 16 07:36:42 2007 => Scanning File C:\WINDOWS\System32	abctl32.ocx
Fri Nov 16 07:36:43 2007 => Scanning File C:\WINDOWS\System32	api.dll
Fri Nov 16 07:36:43 2007 => Scanning File C:\WINDOWS\System32	api3.dll
Fri Nov 16 07:36:43 2007 => Scanning File C:\WINDOWS\System32	api32.dll
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	apiperf.dll
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	apisrv.dll
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	apiui.dll
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	askman.exe
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	askmgr.exe
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	cmsetup.exe
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	cpmib.dll
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	cpmon.dll
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	cpmon.ini
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	cpmonui.dll
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	cpsvcs.exe
Fri Nov 16 07:36:45 2007 => Scanning File C:\WINDOWS\System32	dc.ocx
Fri Nov 16 07:36:45 2007 => Scanning File C:\WINDOWS\System32	elephon.cpl
Fri Nov 16 07:36:45 2007 => Scanning File C:\WINDOWS\System32	elnet.exe
Fri Nov 16 07:36:45 2007 => Scanning File C:\WINDOWS\System32	ermmgr.dll
Fri Nov 16 07:36:45 2007 => Scanning File C:\WINDOWS\System32	ermsrv.dll
Fri Nov 16 07:36:45 2007 => Scanning File C:\WINDOWS\System32	ftp.exe
Fri Nov 16 07:36:45 2007 => Scanning File C:\WINDOWS\System32	hemeui.dll
Fri Nov 16 07:36:45 2007 => Scanning File C:\WINDOWS\System32	ifmicon.dll
Fri Nov 16 07:36:45 2007 => Scanning File C:\WINDOWS\System32	imedate.cpl
Fri Nov 16 07:36:45 2007 => Scanning File C:\WINDOWS\System32	imer.drv
Fri Nov 16 07:36:46 2007 => Scanning File C:\WINDOWS\System32\TINTLGNT.IME
Fri Nov 16 07:36:46 2007 => Scanning File C:\WINDOWS\System32	m20dec.ax
Fri Nov 16 07:36:46 2007 => Scanning File C:\WINDOWS\System32	mp.reg
Fri Nov 16 07:36:46 2007 => Scanning File C:\WINDOWS\System32	mp.txt [**]
Fri Nov 16 07:36:46 2007 => Scanning File C:\WINDOWS\System32	ngygkox.dll
Fri Nov 16 07:36:46 2007 => Scanning File C:\WINDOWS\System32	oolhelp.dll
Fri Nov 16 07:36:46 2007 => Scanning File C:\WINDOWS\System32	ourstart.exe
Fri Nov 16 07:36:46 2007 => Scanning File C:\WINDOWS\System32	racert.exe
Fri Nov 16 07:36:46 2007 => Scanning File C:\WINDOWS\System32	racert6.exe
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	raffic.dll
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	ree.com
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	rkwks.dll
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	sappcmp.dll
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	sbyuv.dll
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	scfgwmi.dll
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	scon.exe
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	scupgrd.exe
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	sd32.dll
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	sddd.dll
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	sdiscon.exe
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	skill.exe
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	slabels.h
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	slabels.ini
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	sshutdn.exe
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	ssoft32.acm
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32\TwnLib20.dll
Fri Nov 16 07:36:48 2007 => Scanning File C:\WINDOWS\System32	xflog.dll
Fri Nov 16 07:36:48 2007 => Scanning File C:\WINDOWS\System32	ypelib.dll
Fri Nov 16 07:36:48 2007 => Scanning File C:\WINDOWS\System32\udhisapi.dll
Fri Nov 16 07:36:48 2007 => Scanning File C:\WINDOWS\System32\UDXOLURP.0XE
Fri Nov 16 07:36:48 2007 => File C:\WINDOWS\System32\UDXOLURP.0XE infected by "Trojan.Win32.Obfuscated.kp" Virus. Action Taken: File Deleted.

havi · Answer

Partie 6


ri Nov 16 07:36:48 2007 => Scanning File C:\WINDOWS\System32\ufat.dll
Fri Nov 16 07:36:48 2007 => Scanning File C:\WINDOWS\System32\ulib.dll
Fri Nov 16 07:36:48 2007 => Scanning File C:\WINDOWS\System32\umandlg.dll
Fri Nov 16 07:36:48 2007 => Scanning File C:\WINDOWS\System32\umdmxfrm.dll
Fri Nov 16 07:36:49 2007 => Scanning File C:\WINDOWS\System32\umloader.dll
Fri Nov 16 07:36:49 2007 => Scanning File C:\WINDOWS\System32\umpnpmgr.dll
Fri Nov 16 07:36:49 2007 => Scanning File C:\WINDOWS\System32\unacev2.dll
Fri Nov 16 07:36:49 2007 => Scanning File C:\WINDOWS\System32\unam4ie.exe
Fri Nov 16 07:36:49 2007 => Scanning File C:\WINDOWS\System32\unicdime.ime
Fri Nov 16 07:36:49 2007 => Scanning File C:\WINDOWS\System32\unicode.nls
Fri Nov 16 07:36:49 2007 => Scanning File C:\WINDOWS\System32\Unicows.dll
Fri Nov 16 07:36:49 2007 => Scanning File C:\WINDOWS\System32\uniime.dll
Fri Nov 16 07:36:50 2007 => Scanning File C:\WINDOWS\System32\unimdm.tsp
Fri Nov 16 07:36:50 2007 => Scanning File C:\WINDOWS\System32\unimdmat.dll
Fri Nov 16 07:36:50 2007 => Scanning File C:\WINDOWS\System32\uniplat.dll
Fri Nov 16 07:36:50 2007 => Scanning File C:\WINDOWS\System32\unlodctr.exe
Fri Nov 16 07:36:50 2007 => Scanning File C:\WINDOWS\System32\UNPICVID2.EXE
Fri Nov 16 07:36:50 2007 => Scanning File C:\WINDOWS\System32\UNRAR3.dll
Fri Nov 16 07:36:50 2007 => Scanning File C:\WINDOWS\System32\untfs.dll
Fri Nov 16 07:36:51 2007 => Scanning File C:\WINDOWS\System32\UNWISE.EXE
Fri Nov 16 07:36:51 2007 => Scanning File C:\WINDOWS\System32\upnp.dll
Fri Nov 16 07:36:51 2007 => Scanning File C:\WINDOWS\System32\upnpcont.exe
Fri Nov 16 07:36:51 2007 => Scanning File C:\WINDOWS\System32\upnphost.dll
Fri Nov 16 07:36:51 2007 => Scanning File C:\WINDOWS\System32\upnpui.dll
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\ups.exe
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\ureg.dll
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\url.dll
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\URLMON.DLL
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\usbmon.dll
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\usbui.dll
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\user.exe
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\user32.dll
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\userenv.dll
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\userinit.exe
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\usp10.dll
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\usrcntra.dll
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\usrcoina.dll
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\usrdpa.dll
Fri Nov 16 07:36:53 2007 => Scanning File C:\WINDOWS\System32\usrdtea.dll
Fri Nov 16 07:36:53 2007 => Scanning File C:\WINDOWS\System32\usrfaxa.dll
Fri Nov 16 07:36:53 2007 => Scanning File C:\WINDOWS\System32\usrlbva.dll
Fri Nov 16 07:36:53 2007 => Scanning File C:\WINDOWS\System32\usrlogon.cmd
Fri Nov 16 07:36:53 2007 => Scanning File C:\WINDOWS\System32\usrmlnka.exe
Fri Nov 16 07:36:53 2007 => Scanning File C:\WINDOWS\System32\usrprbda.exe
Fri Nov 16 07:36:53 2007 => Scanning File C:\WINDOWS\System32\usrrtosa.dll
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\usrsdpia.dll
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\usrshuta.exe
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\usrsvpia.dll
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\usrv42a.dll
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\usrv80a.dll
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\usrvoica.dll
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\usrvpa.dll
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\utildll.dll
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\utilman.exe
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\uwdf.exe
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\uxtheme.dll
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\v7vga.rom
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\VB6fr.DLL
Fri Nov 16 07:36:55 2007 => Scanning File C:\WINDOWS\System32\VBAEN32.OLB
Fri Nov 16 07:36:55 2007 => Scanning File C:\WINDOWS\System32\VBAEND32.OLB
Fri Nov 16 07:36:55 2007 => Scanning File C:\WINDOWS\System32\VBAFR32.OLB
Fri Nov 16 07:36:55 2007 => Scanning File C:\WINDOWS\System32\vbajet32.dll
Fri Nov 16 07:36:55 2007 => Scanning File C:\WINDOWS\System32\VBAME.DLL
Fri Nov 16 07:36:55 2007 => Scanning File C:\WINDOWS\System32\vbisurf.ax
Fri Nov 16 07:36:55 2007 => Scanning File C:\WINDOWS\System32\vbscript.dll
Fri Nov 16 07:36:55 2007 => Scanning File C:\WINDOWS\System32\vbsfr.dll
Fri Nov 16 07:36:55 2007 => Scanning File C:\WINDOWS\System32\VCCLSID.exe
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\vcdex.dll
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\vdmdbg.dll
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\vdmredir.dll
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\VEN2232.OLB
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\ver.dll
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\verclsid.exe
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\verifier.dll
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\verifier.exe
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\version.dll
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\VFind.exe
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\vfpodbc.dll
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\vga.dll
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\vga.drv
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\vga256.dll
Fri Nov 16 07:36:57 2007 => Scanning File C:\WINDOWS\System32\vga64k.dll
Fri Nov 16 07:36:57 2007 => Scanning File C:\WINDOWS\System32\VideoEdit.lic
Fri Nov 16 07:36:57 2007 => Scanning File C:\WINDOWS\System32\VideoEdit.ocx
Fri Nov 16 07:36:57 2007 => Scanning File C:\WINDOWS\System32\VIDINS2.LOG
Fri Nov 16 07:36:57 2007 => Scanning File C:\WINDOWS\System32\vidx16.dll
Fri Nov 16 07:36:57 2007 => Scanning File C:\WINDOWS\System32\viscomwave.dll
Fri Nov 16 07:36:57 2007 => Scanning File C:\WINDOWS\System32\vjoy.dll
Fri Nov 16 07:36:57 2007 => Scanning File C:\WINDOWS\System32\vorbis.dll
Fri Nov 16 07:36:57 2007 => Scanning File C:\WINDOWS\System32\vorbisenc.dll
Fri Nov 16 07:36:57 2007 => Scanning File C:\WINDOWS\System32\VSFLEX3.OCX
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\vssadmin.exe
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\vssapi.dll
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\vssvc.exe
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\vss_ps.dll
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\vtuvvwv.dll
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\VXBLOCK.dll
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\Vxdif.dll
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\W32n50.dll
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\w32time.dll
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\w32tm.exe
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\w32topl.dll
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\w95inf16.dll
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\w95inf32.dll
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\watchdog.sys
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wavemsp.dll
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wbcache.deu
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wbcache.enu
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wbcache.esn
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wbcache.fra
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wbcache.ita
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wbcache.nld
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wbcache.sve
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wbdbase.deu
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wbdbase.enu
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wbdbase.esn
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\wbdbase.fra
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\wbdbase.ita
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\wbdbase.nld
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\wbdbase.sve
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\wbemdisp.tlb
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\wdfapi.dll
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\wdfmgr.exe
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\wdigest.dll
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\wdl.trm
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\wdmaud.drv
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\webcheck.dll
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\webclnt.dll
Fri Nov 16 07:37:01 2007 => Scanning File C:\WINDOWS\System32\webfldrs.msi
Fri Nov 16 07:37:02 2007 => Scanning File C:\WINDOWS\System32\webhits.dll
Fri Nov 16 07:37:02 2007 => Scanning File C:\WINDOWS\System32\webvw.dll
Fri Nov 16 07:37:02 2007 => Scanning File C:\WINDOWS\System32\wextract.exe
Fri Nov 16 07:37:02 2007 => Scanning File C:\WINDOWS\System32\wfwnet.drv
Fri Nov 16 07:37:02 2007 => Scanning File C:\WINDOWS\System32\WgaLogon.dll
Fri Nov 16 07:37:03 2007 => Scanning File C:\WINDOWS\System32\WgaTray.exe
Fri Nov 16 07:37:03 2007 => Scanning File C:\WINDOWS\System32\wiaacmgr.exe
Fri Nov 16 07:37:03 2007 => Scanning File C:\WINDOWS\System32\wiadefui.dll
Fri Nov 16 07:37:03 2007 => Scanning File C:\WINDOWS\System32\wiadss.dll
Fri Nov 16 07:37:03 2007 => Scanning File C:\WINDOWS\System32\wiascr.dll
Fri Nov 16 07:37:03 2007 => Scanning File C:\WINDOWS\System32\wiaservc.dll
Fri Nov 16 07:37:03 2007 => Scanning File C:\WINDOWS\System32\wiasf.ax
Fri Nov 16 07:37:03 2007 => Scanning File C:\WINDOWS\System32\wiashext.dll
Fri Nov 16 07:37:04 2007 => Scanning File C:\WINDOWS\System32\wiavideo.dll
Fri Nov 16 07:37:04 2007 => Scanning File C:\WINDOWS\System32\wiavusd.dll
Fri Nov 16 07:37:04 2007 => Scanning File C:\WINDOWS\System32\wifeman.dll
Fri Nov 16 07:37:04 2007 => Scanning File C:\WINDOWS\System32\win.com
Fri Nov 16 07:37:04 2007 => Scanning File C:\WINDOWS\System32\win32k.sys
Fri Nov 16 07:37:04 2007 => Scanning File C:\WINDOWS\System32\win32spl.dll
Fri Nov 16 07:37:04 2007 => Scanning File C:\WINDOWS\System32\win87em.dll
Fri Nov 16 07:37:04 2007 => Scanning File C:\WINDOWS\System32\winar30.ime
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\winbrand.dll
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\winchat.exe
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\WindowsLogon.manifest
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\winfax.dll
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\WINGB.IME
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\winhelp.hlp
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\winhlp32.exe
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\winhttp.dll
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\winime.ime
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\WININET.DLL
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\winipsec.dll
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\winlogon.exe
Fri Nov 16 07:37:06 2007 => Scanning File C:\WINDOWS\System32\winmine.exe
Fri Nov 16 07:37:06 2007 => Scanning File C:\WINDOWS\System32\winmm.dll
Fri Nov 16 07:37:06 2007 => Scanning File C:\WINDOWS\System32\winmsd.exe
Fri Nov 16 07:37:06 2007 => Scanning File C:\WINDOWS\System32\winnls.dll
Fri Nov 16 07:37:06 2007 => Scanning File C:\WINDOWS\System32\winntbbu.dll
Fri Nov 16 07:37:06 2007 => Scanning File C:\WINDOWS\System32\winoldap.mod
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\WINPY.IME
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\WINPY.MB
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\winrnr.dll
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\winscard.dll
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\winsock.dll
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\WINSP.IME
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\WINSP.MB
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\winspool.drv
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\winspool.exe
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\winsrv.dll
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\winsta.dll
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\winstrm.dll
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\wintrust.dll
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\winver.exe
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\WINZM.IME
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\WINZM.MB
Fri Nov 16 07:37:08 2007 => Scanning File C:\WINDOWS\System32\WISPTIS.EXE
Fri Nov 16 07:37:08 2007 => Scanning File C:\WINDOWS\System32\wkssvc.dll
Fri Nov 16 07:37:08 2007 => Scanning File C:\WINDOWS\System32\wldap32.dll
Fri Nov 16 07:37:08 2007 => Scanning File C:\WINDOWS\System32\wlnotify.dll
Fri Nov 16 07:37:08 2007 => Scanning File C:\WINDOWS\System32\wmadmod.dll
Fri Nov 16 07:37:08 2007 => Scanning File C:\WINDOWS\System32\wmadmoe.dll
Fri Nov 16 07:37:08 2007 => Scanning File C:\WINDOWS\System32\wmasf.dll
Fri Nov 16 07:37:08 2007 => Scanning File C:\WINDOWS\System32\WMDMLOG.dll
Fri Nov 16 07:37:08 2007 => Scanning File C:\WINDOWS\System32\WMDMPS.dll
Fri Nov 16 07:37:08 2007 => Scanning File C:\WINDOWS\System32\WMDRMdev.dll
Fri Nov 16 07:37:09 2007 => Scanning File C:\WINDOWS\System32\WMDRMNet.dll
Fri Nov 16 07:37:09 2007 => Scanning File C:\WINDOWS\System32\wmerrFRA.dll
Fri Nov 16 07:37:09 2007 => Scanning File C:\WINDOWS\System32\wmerror.dll
Fri Nov 16 07:37:09 2007 => Scanning File C:\WINDOWS\System32\wmi.dll
Fri Nov 16 07:37:09 2007 => Scanning File C:\WINDOWS\System32\wmidx.dll
Fri Nov 16 07:37:09 2007 => Scanning File C:\WINDOWS\System32\wmidx.ocx
Fri Nov 16 07:37:09 2007 => Scanning File C:\WINDOWS\System32\wmimgmt.msc
Fri Nov 16 07:37:09 2007 => Scanning File C:\WINDOWS\System32\wmiprop.dll
Fri Nov 16 07:37:10 2007 => Scanning File C:\WINDOWS\System32\wmnetmgr.dll
Fri Nov 16 07:37:10 2007 => *** File C:\WINDOWS\System32\wmp.dll having Size Restriction ***
Fri Nov 16 07:37:10 2007 => Scanning File C:\WINDOWS\System32\wmp.dll [**]
Fri Nov 16 07:37:10 2007 => Scanning File C:\WINDOWS\System32\wmp.ocx
Fri Nov 16 07:37:10 2007 => Scanning File C:\WINDOWS\System32\wmpasf.dll
Fri Nov 16 07:37:10 2007 => Scanning File C:\WINDOWS\System32\wmpcd.dll
Fri Nov 16 07:37:10 2007 => Scanning File C:\WINDOWS\System32\wmpcore.dll
Fri Nov 16 07:37:10 2007 => Scanning File C:\WINDOWS\System32\wmpdxm.dll
Fri Nov 16 07:37:10 2007 => Scanning File C:\WINDOWS\System32\wmpencen.dll
Fri Nov 16 07:37:11 2007 => Scanning File C:\WINDOWS\System32\wmploc.dll
Fri Nov 16 07:37:12 2007 => Scanning File C:\WINDOWS\System32\wmpns.dll
Fri Nov 16 07:37:12 2007 => Scanning File C:\WINDOWS\System32\wmpscheme.xml
Fri Nov 16 07:37:12 2007 => Scanning File C:\WINDOWS\System32\wmpshell.dll
Fri Nov 16 07:37:12 2007 => Scanning File C:\WINDOWS\System32\wmpsrcwp.dll
Fri Nov 16 07:37:13 2007 => Scanning File C:\WINDOWS\System32\wmpstub.exe
Fri Nov 16 07:37:13 2007 => Scanning File C:\WINDOWS\System32\wmpui.dll
Fri Nov 16 07:37:13 2007 => Scanning File C:\WINDOWS\System32\wmsdmod.dll
Fri Nov 16 07:37:13 2007 => Scanning File C:\WINDOWS\System32\wmsdmoe.dll
Fri Nov 16 07:37:13 2007 => Scanning File C:\WINDOWS\System32\wmsdmoe2.dll
Fri Nov 16 07:37:13 2007 => Scanning File C:\WINDOWS\System32\wmserror.dll
Fri Nov 16 07:37:14 2007 => Scanning File C:\WINDOWS\System32\wmspdmod.dll
Fri Nov 16 07:37:14 2007 => Scanning File C:\WINDOWS\System32\wmspdmoe.dll
Fri Nov 16 07:37:14 2007 => Scanning File C:\WINDOWS\System32\wmstream.dll
Fri Nov 16 07:37:14 2007 => Scanning File C:\WINDOWS\System32\wmv8dmod.dll
Fri Nov 16 07:37:15 2007 => Scanning File C:\WINDOWS\System32\wmv8ds32.ax
Fri Nov 16 07:37:15 2007 => Scanning File C:\WINDOWS\System32\wmvadvd.dll
Fri Nov 16 07:37:15 2007 => Scanning File C:\WINDOWS\System32\WMVADVE.DLL
Fri Nov 16 07:37:15 2007 => Scanning File C:\WINDOWS\System32\wmvcore.dll
Fri Nov 16 07:37:16 2007 => Scanning File C:\WINDOWS\System32\wmvcore2.dll
Fri Nov 16 07:37:16 2007 => Scanning File C:\WINDOWS\System32\wmvdmod.dll
Fri Nov 16 07:37:17 2007 => Scanning File C:\WINDOWS\System32\wmvdmoe.dll
Fri Nov 16 07:37:17 2007 => Scanning File C:\WINDOWS\System32\wmvdmoe2.dll
Fri Nov 16 07:37:17 2007 => Scanning File C:\WINDOWS\System32\wmvds32.ax
Fri Nov 16 07:37:17 2007 => Scanning File C:\WINDOWS\System32\WooDial2000.dll
Fri Nov 16 07:37:17 2007 => Scanning File C:\WINDOWS\System32\wow32.dll
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wowdeb.exe
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wowexec.exe
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wowfax.dll
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wowfaxui.dll
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wpa.dbl
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wpabaln.exe
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wpdconns.dll
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wpdmtp.dll
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wpdmtpdr.dll
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wpdmtpus.dll
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wpdsp.dll
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\wpdtrace.dll
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\wpd_ci.dll
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\wpnpinst.exe
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\write.exe
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\WS2Fix.exe
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\ws2help.dll
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\ws2_32.dll
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\wscript.exe
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\wshatm.dll
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\wshcon.dll
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\wshext.dll
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\wshfr.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wship6.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wshirda.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wshisn.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wshnetbs.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wshom.ocx
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\WshRm.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wshtcpip.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wsnmp32.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wsock32.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wstdecod.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wtsapi32.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wuapi.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wuapi.dll.mui
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wuauclt.exe
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wuauclt1.exe
Fri Nov 16 07:37:21 2007 => Scanning File C:\WINDOWS\System32\wuaucpl.cpl
Fri Nov 16 07:37:21 2007 => Scanning File C:\WINDOWS\System32\wuaucpl.cpl.manifest
Fri Nov 16 07:37:21 2007 => Scanning File C:\WINDOWS\System32\wuaucpl.cpl.mui
Fri Nov 16 07:37:21 2007 => Scanning File C:\WINDOWS\System32\wuaueng.dll
Fri Nov 16 07:37:21 2007 => Scanning File C:\WINDOWS\System32\wuaueng.dll.mui
Fri Nov 16 07:37:21 2007 => Scanning File C:\WINDOWS\System32\wuaueng1.dll
Fri Nov 16 07:37:21 2007 => Scanning File C:\WINDOWS\System32\wuauserv.dll
Fri Nov 16 07:37:21 2007 => Scanning File C:\WINDOWS\System32\wucltui.dll
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\wucltui.dll.mui
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\wupdmgr.exe
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\wups.dll
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\wups2.dll
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\wuweb.dll
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\wvuusrq.dll
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\wwxnkgnd.ini
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\wzcdlg.dll
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\wzcsapi.dll
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\wzcsvc.dll
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\xactsrv.dll
Fri Nov 16 07:37:23 2007 => Scanning File C:\WINDOWS\System32\xcopy.exe
Fri Nov 16 07:37:23 2007 => Scanning File C:\WINDOWS\System32\xenroll.dll
Fri Nov 16 07:37:23 2007 => Scanning File C:\WINDOWS\System32\xjis.nls
Fri Nov 16 07:37:23 2007 => Scanning File C:\WINDOWS\System32\xolehlp.dll
Fri Nov 16 07:37:23 2007 => Scanning File C:\WINDOWS\System32\xpob2res.dll
Fri Nov 16 07:37:23 2007 => Scanning File C:\WINDOWS\System32\xpsp1hfm.exe
Fri Nov 16 07:37:23 2007 => Scanning File C:\WINDOWS\System32\xpsp1res.dll
Fri Nov 16 07:37:23 2007 => Scanning File C:\WINDOWS\System32\xpsp2res.dll
Fri Nov 16 07:37:24 2007 => Scanning File C:\WINDOWS\System32\xpsp3res.dll
Fri Nov 16 07:37:24 2007 => Scanning File C:\WINDOWS\System32\xvidcore.dll
Fri Nov 16 07:37:24 2007 => Scanning File C:\WINDOWS\System32\xvidvfw.dll
Fri Nov 16 07:37:24 2007 => Scanning File C:\WINDOWS\System32\zipfldr.dll
Fri Nov 16 07:37:25 2007 => Scanning File C:\WINDOWS\System32\zobhdqqo.dll.vir
Fri Nov 16 07:37:25 2007 => File C:\WINDOWS\System32\zobhdqqo.dll.vir tagged as not-a-virus:AdWare.Win32.SecToolBar.k. No Action Taken.

Fri Nov 16 07:37:25 2007 => Scanning File C:\WINDOWS\System32\zobhdqqo.dllbox
Fri Nov 16 07:37:25 2007 => Scanning File C:\WINDOWS\System32\ztvcabinet.dll
Fri Nov 16 07:37:25 2007 => Scanning File C:\WINDOWS\System32\ztvunace26.dll
Fri Nov 16 07:37:25 2007 => Scanning File C:\WINDOWS\System32\ztvunrar36.dll

havi · Answer

J'essayerais de poster le reste de la partie 7 mais avant je dois m'y retrouvé car je crois que je me suis perdu dans le rapport!!!

afideg · Answer

Re,
C'est bon, ça avance.

A)- CIT. « mais pour C:\WINDOWS\SYSTEM32\MQPLHVRX.EXE , et ,C:\WINDOWS\SYSTEM32\UDXOLURP.EXE n'est pas présent dans mon système »

Pour C:\WINDOWS\SYSTEM32\MQPLHVRX.EXE  ==> il a été effacé par  "eScan Antivirus Toolkit" 
==> regarde ici comment il avait été renommé:
Fri Nov 16 07:35:13 2007 => File C:\WINDOWS\System32\MQPLHVRX.0XE
infected by "Trojan.Win32.Obfuscated.kp" Virus. 
Action Taken: File Deleted.


B)- Tu peux lancer l'analyse avec VundoFix.


C)- Et chez VirusTotal, comme tout à l'heure, fais analyser ces trois fichiers:

C:\WINDOWS\system32\pbfkwprl.dll 
C:\WINDOWS\system32\dngknxww.dll 
C:\WINDOWS\system32	ngygkox.dll

Merci pour ta collaboration.


D)- Lance une "recherche Windows" pour trouver ces deux dossiers, et supprime-les si tu les trouves:
Online Security Guide
Live Safety Center



E)- Mais poursuis la livraison de ce rapport en cours SVP.


Ne ferme pas ton PC SVP

Merci
Al.

havi · Answer

l'analyse avec VundoFix pour : n'a rien donné aucun fichier n'est apparu dans l'encadré au cours du scan:

POUR L'ANALYSE AVEC VIRUS TOTAL

 POUR C:\WINDOWS\system32\pbfkwprl.dll 


Fichier pbfkwprl.dll reçu le 2007.11.16 23:19:25 (CET)Antivirus Version Dernière mise à jour Résultat 
AhnLab-V3 2007.11.17.0 2007.11.16 - 
AntiVir 7.6.0.34 2007.11.16 TR/Dldr.ConHook.Gen 
Authentium 4.93.8 2007.11.16 - 
Avast 4.7.1074.0 2007.11.16 - 
AVG 7.5.0.503 2007.11.16 Lop 
BitDefender 7.2 2007.11.16 - 
CAT-QuickHeal 9.00 2007.11.16 - 
ClamAV 0.91.2 2007.11.16 - 
DrWeb 4.44.0.09170 2007.11.16 - 
eSafe 7.0.15.0 2007.11.14 - 
eTrust-Vet 31.2.5300 2007.11.16 - 
Ewido 4.0 2007.11.16 - 
FileAdvisor 1 2007.11.16 - 
Fortinet 3.11.0.0 2007.10.19 - 
F-Prot 4.4.2.54 2007.11.16 - 
F-Secure 6.70.13030.0 2007.11.16 - 
Ikarus T3.1.1.12 2007.11.16 - 
Kaspersky 7.0.0.125 2007.11.16 - 
McAfee 5165 2007.11.16 Vundo 
Microsoft 1.3007 2007.11.16 - 
NOD32v2 2664 2007.11.16 - 
Norman 5.80.02 2007.11.16 - 
Panda 9.0.0.4 2007.11.16 Suspicious file 
Prevx1 V2 2007.11.16 Trojan.Vundo 
Rising 20.18.40.00 2007.11.16 - 
Sophos 4.23.0 2007.11.16 - 
Sunbelt 2.2.907.0 2007.11.16 - 
Symantec 10 2007.11.16 - 
TheHacker 6.2.9.132 2007.11.16 - 
VBA32 3.12.2.5 2007.11.16 - 
VirusBuster 4.3.26:9 2007.11.16 Adware.Vundo.V.Gen 
Webwasher-Gateway 6.0.1 2007.11.16 Trojan.Dldr.ConHook.Gen 
 
Information additionnelle 
File size: 79936 bytes 
MD5: e4ee97a32264529d9e894e3a2f62f2ae 
SHA1: 0703e638cca1fb2e86e6309abf12d0a63e936ac0 
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PX5=1ECB8F72409901223867012855BA58001AB3FB17 
 
Antivirus	Version	Dernière mise à jour	Résultat
AhnLab-V3	2007.11.17.0	2007.11.16	-
AntiVir	7.6.0.34	2007.11.16	TR/Dldr.ConHook.Gen
Authentium	4.93.8	2007.11.16	-
Avast	4.7.1074.0	2007.11.16	-
AVG	7.5.0.503	2007.11.16	Lop
BitDefender	7.2	2007.11.16	-
CAT-QuickHeal	9.00	2007.11.16	-
ClamAV	0.91.2	2007.11.16	-
DrWeb	4.44.0.09170	2007.11.16	-
eSafe	7.0.15.0	2007.11.14	-
eTrust-Vet	31.2.5300	2007.11.16	-
Ewido	4.0	2007.11.16	-
FileAdvisor	1	2007.11.16	-
Fortinet	3.11.0.0	2007.10.19	-
F-Prot	4.4.2.54	2007.11.16	-
F-Secure	6.70.13030.0	2007.11.16	-
Ikarus	T3.1.1.12	2007.11.16	-
Kaspersky	7.0.0.125	2007.11.16	-
McAfee	5165	2007.11.16	Vundo
Microsoft	1.3007	2007.11.16	-
NOD32v2	2664	2007.11.16	-
Norman	5.80.02	2007.11.16	-
Panda	9.0.0.4	2007.11.16	Suspicious file
Prevx1	V2	2007.11.16	Trojan.Vundo
Rising	20.18.40.00	2007.11.16	-
Sophos	4.23.0	2007.11.16	-
Sunbelt	2.2.907.0	2007.11.16	-
Symantec	10	2007.11.16	-
TheHacker	6.2.9.132	2007.11.16	-
VBA32	3.12.2.5	2007.11.16	-
VirusBuster	4.3.26:9	2007.11.16	Adware.Vundo.V.Gen
Webwasher-Gateway	6.0.1	2007.11.16	Trojan.Dldr.ConHook.Gen

Information additionnelle
File size: 79936 bytes
MD5: e4ee97a32264529d9e894e3a2f62f2ae
SHA1: 0703e638cca1fb2e86e6309abf12d0a63e936ac0
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PX5=1ECB8F72409901223867012855BA58001AB3FB17



POUR  C:\WINDOWS\system32\dngknxww.dll 


Fichier dngknxww.dll reçu le 2007.11.16 23:33:20 (CET)Antivirus Version Dernière mise à jour Résultat 
AhnLab-V3 2007.11.16.0 2007.11.16 - 
AntiVir 7.6.0.34 2007.11.16 TR/Vundo.AU 
Authentium 4.93.8 2007.11.16 - 
Avast 4.7.1074.0 2007.11.16 - 
AVG 7.5.0.503 2007.11.16 Lop 
BitDefender 7.2 2007.11.16 - 
CAT-QuickHeal 9.00 2007.11.16 - 
ClamAV 0.91.2 2007.11.16 - 
DrWeb 4.44.0.09170 2007.11.16 - 
eSafe 7.0.15.0 2007.11.14 - 
eTrust-Vet 31.2.5300 2007.11.16 - 
Ewido 4.0 2007.11.16 - 
FileAdvisor 1 2007.11.16 - 
Fortinet 3.11.0.0 2007.10.19 - 
F-Prot 4.4.2.54 2007.11.16 - 
F-Secure 6.70.13030.0 2007.11.16 - 
Ikarus T3.1.1.12 2007.11.16 not-a-virus:AdWare.Win32.Virtumonde.aps 
Kaspersky 7.0.0.125 2007.11.16 not-a-virus:AdWare.Win32.Virtumonde.aps 
McAfee 5165 2007.11.16 - 
Microsoft 1.3007 2007.11.16 - 
NOD32v2 2664 2007.11.16 - 
Norman 5.80.02 2007.11.16 W32/Virtumonde.IME 
Panda 9.0.0.4 2007.11.16 - 
Prevx1 V2 2007.11.16 Trojan.Vundo 
Rising 20.18.40.00 2007.11.16 - 
Sophos 4.23.0 2007.11.16 - 
Sunbelt 2.2.907.0 2007.11.15 - 
Symantec 10 2007.11.16 Trojan.Vundo 
TheHacker 6.2.9.132 2007.11.16 - 
VBA32 3.12.2.5 2007.11.16 - 
VirusBuster 4.3.26:9 2007.11.16 Adware.Vundo.V.Gen 
Webwasher-Gateway 6.0.1 2007.11.16 Trojan.Vundo.AU 
 
Information additionnelle 
File size: 85056 bytes 
MD5: 4ce2a4dd27f610d5f9aa7ed7dbba921b 
SHA1: a748606dcbca6973da90e83752e229dae5c921f5 
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PX5=27FE2CC940AA4F114C82013EBAD71D00F5B930E5 
 
Antivirus	Version	Dernière mise à jour	Résultat
AhnLab-V3	2007.11.16.0	2007.11.16	-
AntiVir	7.6.0.34	2007.11.16	TR/Vundo.AU
Authentium	4.93.8	2007.11.16	-
Avast	4.7.1074.0	2007.11.16	-
AVG	7.5.0.503	2007.11.16	Lop
BitDefender	7.2	2007.11.16	-
CAT-QuickHeal	9.00	2007.11.16	-
ClamAV	0.91.2	2007.11.16	-
DrWeb	4.44.0.09170	2007.11.16	-
eSafe	7.0.15.0	2007.11.14	-
eTrust-Vet	31.2.5300	2007.11.16	-
Ewido	4.0	2007.11.16	-
FileAdvisor	1	2007.11.16	-
Fortinet	3.11.0.0	2007.10.19	-
F-Prot	4.4.2.54	2007.11.16	-
F-Secure	6.70.13030.0	2007.11.16	-
Ikarus	T3.1.1.12	2007.11.16	not-a-virus:AdWare.Win32.Virtumonde.aps
Kaspersky	7.0.0.125	2007.11.16	not-a-virus:AdWare.Win32.Virtumonde.aps
McAfee	5165	2007.11.16	-
Microsoft	1.3007	2007.11.16	-
NOD32v2	2664	2007.11.16	-
Norman	5.80.02	2007.11.16	W32/Virtumonde.IME
Panda	9.0.0.4	2007.11.16	-
Prevx1	V2	2007.11.16	Trojan.Vundo
Rising	20.18.40.00	2007.11.16	-
Sophos	4.23.0	2007.11.16	-
Sunbelt	2.2.907.0	2007.11.15	-
Symantec	10	2007.11.16	Trojan.Vundo
TheHacker	6.2.9.132	2007.11.16	-
VBA32	3.12.2.5	2007.11.16	-
VirusBuster	4.3.26:9	2007.11.16	Adware.Vundo.V.Gen
Webwasher-Gateway	6.0.1	2007.11.16	Trojan.Vundo.AU

Information additionnelle
File size: 85056 bytes
MD5: 4ce2a4dd27f610d5f9aa7ed7dbba921b
SHA1: a748606dcbca6973da90e83752e229dae5c921f5
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PX5=27FE2CC940AA4F114C82013EBAD71D00F5B930E5

 

Pour C:\WINDOWS\system32	ngygkox.dll 



Fichier tngygkox.dll reçu le 2007.11.16 23:40:22 (CET)Antivirus Version Dernière mise à jour Résultat 
AhnLab-V3 2007.11.17.0 2007.11.16 - 
AntiVir 7.6.0.34 2007.11.16 TR/Dldr.ConHook.Gen 
Authentium 4.93.8 2007.11.16 - 
Avast 4.7.1074.0 2007.11.16 - 
AVG 7.5.0.503 2007.11.16 Lop 
BitDefender 7.2 2007.11.16 - 
CAT-QuickHeal 9.00 2007.11.16 - 
ClamAV 0.91.2 2007.11.16 - 
DrWeb 4.44.0.09170 2007.11.16 - 
eSafe 7.0.15.0 2007.11.14 - 
eTrust-Vet 31.2.5300 2007.11.16 - 
Ewido 4.0 2007.11.16 - 
FileAdvisor 1 2007.11.16 - 
Fortinet 3.11.0.0 2007.10.19 - 
F-Prot 4.4.2.54 2007.11.16 - 
F-Secure 6.70.13030.0 2007.11.16 - 
Ikarus T3.1.1.12 2007.11.16 - 
Kaspersky 7.0.0.125 2007.11.16 - 
McAfee 5165 2007.11.16 Vundo 
Microsoft 1.3007 2007.11.16 - 
NOD32v2 2664 2007.11.16 - 
Norman 5.80.02 2007.11.16 W32/Virtumonde.IMF 
Panda 9.0.0.4 2007.11.16 Suspicious file 
Prevx1 V2 2007.11.16 Trojan.Vundo 
Rising 20.18.40.00 2007.11.16 - 
Sophos 4.23.0 2007.11.16 - 
Sunbelt 2.2.907.0 2007.11.16 - 
Symantec 10 2007.11.16 - 
TheHacker 6.2.9.132 2007.11.16 - 
VBA32 3.12.2.5 2007.11.16 - 
VirusBuster 4.3.26:9 2007.11.16 Adware.Vundo.V.Gen 
Webwasher-Gateway 6.0.1 2007.11.16 Trojan.Dldr.ConHook.Gen 
 
Information additionnelle 
File size: 79424 bytes 
MD5: 3dd21de09c3655b6017a99a3a37ae9bb 
SHA1: 21ba14bc197969c63cd8b02f678a27b235658286 
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PX5=B1AAEF5940B08B68366B013EEA5974003D17DC3E 
 
Antivirus	Version	Dernière mise à jour	Résultat
AhnLab-V3	2007.11.17.0	2007.11.16	-
AntiVir	7.6.0.34	2007.11.16	TR/Dldr.ConHook.Gen
Authentium	4.93.8	2007.11.16	-
Avast	4.7.1074.0	2007.11.16	-
AVG	7.5.0.503	2007.11.16	Lop
BitDefender	7.2	2007.11.16	-
CAT-QuickHeal	9.00	2007.11.16	-
ClamAV	0.91.2	2007.11.16	-
DrWeb	4.44.0.09170	2007.11.16	-
eSafe	7.0.15.0	2007.11.14	-
eTrust-Vet	31.2.5300	2007.11.16	-
Ewido	4.0	2007.11.16	-
FileAdvisor	1	2007.11.16	-
Fortinet	3.11.0.0	2007.10.19	-
F-Prot	4.4.2.54	2007.11.16	-
F-Secure	6.70.13030.0	2007.11.16	-
Ikarus	T3.1.1.12	2007.11.16	-
Kaspersky	7.0.0.125	2007.11.16	-
McAfee	5165	2007.11.16	Vundo
Microsoft	1.3007	2007.11.16	-
NOD32v2	2664	2007.11.16	-
Norman	5.80.02	2007.11.16	W32/Virtumonde.IMF
Panda	9.0.0.4	2007.11.16	Suspicious file
Prevx1	V2	2007.11.16	Trojan.Vundo
Rising	20.18.40.00	2007.11.16	-
Sophos	4.23.0	2007.11.16	-
Sunbelt	2.2.907.0	2007.11.16	-
Symantec	10	2007.11.16	-
TheHacker	6.2.9.132	2007.11.16	-
VBA32	3.12.2.5	2007.11.16	-
VirusBuster	4.3.26:9	2007.11.16	Adware.Vundo.V.Gen
Webwasher-Gateway	6.0.1	2007.11.16	Trojan.Dldr.ConHook.Gen

Information additionnelle
File size: 79424 bytes
MD5: 3dd21de09c3655b6017a99a3a37ae9bb
SHA1: 21ba14bc197969c63cd8b02f678a27b235658286
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PX5=B1AAEF5940B08B68366B013EEA5974003D17DC3E

havi · Answer

Partie 7


Fri Nov 16 07:35:13 2007 => Scanning File C:\WINDOWS\System32\mrinfo.exe
Fri Nov 16 07:35:13 2007 => *** File C:\WINDOWS\System32\MRT.exe having Size Restriction ***
Fri Nov 16 07:35:13 2007 => Scanning File C:\WINDOWS\System32\MRT.exe [**]
Fri Nov 16 07:35:13 2007 => Scanning File C:\WINDOWS\System32\MRT.INI
Fri Nov 16 07:35:13 2007 => Scanning File C:\WINDOWS\System32\msaatext.dll
Fri Nov 16 07:35:13 2007 => Scanning File C:\WINDOWS\System32\msacm.dll
Fri Nov 16 07:35:13 2007 => Scanning File C:\WINDOWS\System32\msacm32.dll
Fri Nov 16 07:35:13 2007 => Scanning File C:\WINDOWS\System32\msacm32.drv
Fri Nov 16 07:35:13 2007 => Scanning File C:\WINDOWS\System32\msadds32.ax
Fri Nov 16 07:35:14 2007 => Scanning File C:\WINDOWS\System32\msadp32.acm
Fri Nov 16 07:35:14 2007 => Scanning File C:\WINDOWS\System32\msafd.dll
Fri Nov 16 07:35:14 2007 => Scanning File C:\WINDOWS\System32\msapsspc.dll
Fri Nov 16 07:35:14 2007 => Scanning File C:\WINDOWS\System32\msasn1.dll
Fri Nov 16 07:35:14 2007 => Scanning File C:\WINDOWS\System32\msaud32.acm
Fri Nov 16 07:35:14 2007 => Scanning File C:\WINDOWS\System32\msaudite.dll
Fri Nov 16 07:35:14 2007 => Scanning File C:\WINDOWS\System32\mscat32.dll
Fri Nov 16 07:35:14 2007 => Scanning File C:\WINDOWS\System32\mscdexnt.exe
Fri Nov 16 07:35:14 2007 => Scanning File C:\WINDOWS\System32\mscms.dll
Fri Nov 16 07:35:14 2007 => Scanning File C:\WINDOWS\System32\mscomct2.ocx
Fri Nov 16 07:35:15 2007 => Scanning File C:\WINDOWS\System32\mscomctl.ocx
Fri Nov 16 07:35:15 2007 => Scanning File C:\WINDOWS\System32\msconf.dll
Fri Nov 16 07:35:15 2007 => Scanning File C:\WINDOWS\System32\mscoree.dll
Fri Nov 16 07:35:15 2007 => Scanning File C:\WINDOWS\System32\mscorier.dll
Fri Nov 16 07:35:15 2007 => Scanning File C:\WINDOWS\System32\mscories.dll
Fri Nov 16 07:35:15 2007 => Scanning File C:\WINDOWS\System32\mscpx32r.dLL
Fri Nov 16 07:35:15 2007 => Scanning File C:\WINDOWS\System32\mscpxl32.dLL
Fri Nov 16 07:35:15 2007 => Scanning File C:\WINDOWS\System32\MSCTF.dll
Fri Nov 16 07:35:15 2007 => Scanning File C:\WINDOWS\System32\MSCTFIME.IME
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\MSCTFP.dll
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\msdart.dll
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\msdatsrc.tlb
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\msdayi.tbl
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\msdmo.dll
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\msdtc.exe
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\msdtclog.dll
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\msdtcprf.h
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\msdtcprf.ini
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\msdtcprx.dll
Fri Nov 16 07:35:16 2007 => Scanning File C:\WINDOWS\System32\msdtctm.dll
Fri Nov 16 07:35:17 2007 => Scanning File C:\WINDOWS\System32\msdtcuiu.dll
Fri Nov 16 07:35:17 2007 => Scanning File C:\WINDOWS\System32\msdvbnp.ax
Fri Nov 16 07:35:17 2007 => Scanning File C:\WINDOWS\System32\msdxm.ocx
Fri Nov 16 07:35:18 2007 => Scanning File C:\WINDOWS\System32\msdxmlc.dll
Fri Nov 16 07:35:18 2007 => Scanning File C:\WINDOWS\System32\msencode.dll
Fri Nov 16 07:35:18 2007 => Scanning File C:\WINDOWS\System32\msexch40.dll
Fri Nov 16 07:35:18 2007 => Scanning File C:\WINDOWS\System32\msexcl40.dll
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\msftedit.dll
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\msg.exe
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\msg711.acm
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\msg723.acm
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\msgina.dll
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\msgsm32.acm
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\msgsvc.dll
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\msh261.drv
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\msh263.drv
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\mshearts.exe
Fri Nov 16 07:35:19 2007 => Scanning File C:\WINDOWS\System32\mshta.exe
Fri Nov 16 07:35:20 2007 => Scanning File C:\WINDOWS\System32\MSHTML.DLL
Fri Nov 16 07:35:20 2007 => Scanning File C:\WINDOWS\System32\mshtml.tlb
Fri Nov 16 07:35:20 2007 => Scanning File C:\WINDOWS\System32\mshtmled.dll
Fri Nov 16 07:35:20 2007 => Scanning File C:\WINDOWS\System32\mshtmler.dll
Fri Nov 16 07:35:20 2007 => Scanning File C:\WINDOWS\System32\msi.dll
Fri Nov 16 07:35:21 2007 => Scanning File C:\WINDOWS\System32\MSIDENT.DLL
Fri Nov 16 07:35:21 2007 => Scanning File C:\WINDOWS\System32\msidle.dll
Fri Nov 16 07:35:21 2007 => Scanning File C:\WINDOWS\System32\msidntld.dll
Fri Nov 16 07:35:21 2007 => Scanning File C:\WINDOWS\System32\msieftp.dll
Fri Nov 16 07:35:21 2007 => Scanning File C:\WINDOWS\System32\msiexec.exe
Fri Nov 16 07:35:21 2007 => Scanning File C:\WINDOWS\System32\msihnd.dll
Fri Nov 16 07:35:21 2007 => Scanning File C:\WINDOWS\System32\msimg32.dll
Fri Nov 16 07:35:21 2007 => Scanning File C:\WINDOWS\System32\msimsg.dll
Fri Nov 16 07:35:22 2007 => Scanning File C:\WINDOWS\System32\MSIMTF.dll
Fri Nov 16 07:35:22 2007 => Scanning File C:\WINDOWS\System32\MSINET.DEP
Fri Nov 16 07:35:22 2007 => Scanning File C:\WINDOWS\System32\MSINET.oca
Fri Nov 16 07:35:22 2007 => Scanning File C:\WINDOWS\System32\Msinet.ocx
Fri Nov 16 07:35:22 2007 => Scanning File C:\WINDOWS\System32\msir3jp.dll
Fri Nov 16 07:35:22 2007 => Scanning File C:\WINDOWS\System32\msir3jp.lex
Fri Nov 16 07:35:23 2007 => Scanning File C:\WINDOWS\System32\msisam11.dll
Fri Nov 16 07:35:23 2007 => Scanning File C:\WINDOWS\System32\msisip.dll
Fri Nov 16 07:35:23 2007 => Scanning File C:\WINDOWS\System32\msjet40.dll
Fri Nov 16 07:35:23 2007 => Scanning File C:\WINDOWS\System32\msjetoledb40.dll
Fri Nov 16 07:35:24 2007 => Scanning File C:\WINDOWS\System32\msjint40.dll
Fri Nov 16 07:35:24 2007 => Scanning File C:\WINDOWS\System32\msjter40.dll
Fri Nov 16 07:35:24 2007 => Scanning File C:\WINDOWS\System32\msjtes40.dll
Fri Nov 16 07:35:24 2007 => Scanning File C:\WINDOWS\System32\mslbui.dll
Fri Nov 16 07:35:24 2007 => Scanning File C:\WINDOWS\System32\msls2.dll
Fri Nov 16 07:35:24 2007 => Scanning File C:\WINDOWS\System32\msls31.dll
Fri Nov 16 07:35:24 2007 => Scanning File C:\WINDOWS\System32\msltus40.dll
Fri Nov 16 07:35:24 2007 => Scanning File C:\WINDOWS\System32\msnetobj.dll
Fri Nov 16 07:35:25 2007 => Scanning File C:\WINDOWS\System32\msnsspc.dll
Fri Nov 16 07:35:25 2007 => Scanning File C:\WINDOWS\System32\msobjs.dll
Fri Nov 16 07:35:25 2007 => Scanning File C:\WINDOWS\System32\MSOEACCT.DLL
Fri Nov 16 07:35:25 2007 => Scanning File C:\WINDOWS\System32\MSOERT2.DLL
Fri Nov 16 07:35:25 2007 => Scanning File C:\WINDOWS\System32\msorc32r.dll
Fri Nov 16 07:35:25 2007 => Scanning File C:\WINDOWS\System32\msorcl32.dll
Fri Nov 16 07:35:25 2007 => Scanning File C:\WINDOWS\System32\mspaint.exe
Fri Nov 16 07:35:26 2007 => Scanning File C:\WINDOWS\System32\mspatcha.dll
Fri Nov 16 07:35:26 2007 => Scanning File C:\WINDOWS\System32\mspbde40.dll
Fri Nov 16 07:35:26 2007 => Scanning File C:\WINDOWS\System32\MsPMSNSv.dll
Fri Nov 16 07:35:26 2007 => Scanning File C:\WINDOWS\System32\MsPMSP.dll
Fri Nov 16 07:35:26 2007 => Scanning File C:\WINDOWS\System32\mspmspsv.dll
Fri Nov 16 07:35:26 2007 => Scanning File C:\WINDOWS\System32\msports.dll
Fri Nov 16 07:35:26 2007 => Scanning File C:\WINDOWS\System32\msprivs.dll
Fri Nov 16 07:35:26 2007 => Scanning File C:\WINDOWS\System32\MSPRPFR.DLL
Fri Nov 16 07:35:26 2007 => Scanning File C:\WINDOWS\System32\msr2c.dll
Fri Nov 16 07:35:27 2007 => Scanning File C:\WINDOWS\System32\msr2cenu.dll
Fri Nov 16 07:35:27 2007 => Scanning File C:\WINDOWS\System32\msratelc.dll
Fri Nov 16 07:35:27 2007 => Scanning File C:\WINDOWS\System32\MSRATING.DLL
Fri Nov 16 07:35:27 2007 => Scanning File C:\WINDOWS\System32\msrclr40.dll
Fri Nov 16 07:35:27 2007 => Scanning File C:\WINDOWS\System32\msrd2x40.dll
Fri Nov 16 07:35:27 2007 => Scanning File C:\WINDOWS\System32\msrd3x40.dll
Fri Nov 16 07:35:27 2007 => Scanning File C:\WINDOWS\System32\MSRDO20.DLL
Fri Nov 16 07:35:28 2007 => Scanning File C:\WINDOWS\System32\msrecr40.dll
Fri Nov 16 07:35:28 2007 => Scanning File C:\WINDOWS\System32\msrepl40.dll
Fri Nov 16 07:35:28 2007 => Scanning File C:\WINDOWS\System32\msrle32.dll
Fri Nov 16 07:35:28 2007 => Scanning File C:\WINDOWS\System32\mssap.dll
Fri Nov 16 07:35:28 2007 => Scanning File C:\WINDOWS\System32\msscds32.ax
Fri Nov 16 07:35:28 2007 => Scanning File C:\WINDOWS\System32\MSSCP.dll
Fri Nov 16 07:35:28 2007 => Scanning File C:\WINDOWS\System32\msscript.ocx
Fri Nov 16 07:35:28 2007 => Scanning File C:\WINDOWS\System32\mssign32.dll
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\mssip32.dll
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\msssc.dll
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\MSSTDFMT.DLL
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\MSSTKPRP.DLL
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\msswch.dll
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\msswchx.exe
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\mstask.dll
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\mstext40.dll
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\MSTIME.DLL
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\mstinit.exe
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\mstlsapi.dll
Fri Nov 16 07:35:29 2007 => Scanning File C:\WINDOWS\System32\mstsc.exe
Fri Nov 16 07:35:30 2007 => Scanning File C:\WINDOWS\System32\mstscax.dll
Fri Nov 16 07:35:30 2007 => Scanning File C:\WINDOWS\System32\msuni11.dll
Fri Nov 16 07:35:30 2007 => Scanning File C:\WINDOWS\System32\msutb.dll
Fri Nov 16 07:35:31 2007 => Scanning File C:\WINDOWS\System32\msv1_0.dll
Fri Nov 16 07:35:31 2007 => Scanning File C:\WINDOWS\System32\msvbvm50.dll
Fri Nov 16 07:35:31 2007 => Scanning File C:\WINDOWS\System32\msvbvm60.dll
Fri Nov 16 07:35:31 2007 => Scanning File C:\WINDOWS\System32\msvci70.dll
Fri Nov 16 07:35:31 2007 => Scanning File C:\WINDOWS\System32\msvcirt.dll
Fri Nov 16 07:35:31 2007 => Scanning File C:\WINDOWS\System32\msvcp50.dll
Fri Nov 16 07:35:31 2007 => Scanning File C:\WINDOWS\System32\msvcp60.dll
Fri Nov 16 07:35:32 2007 => Scanning File C:\WINDOWS\System32\msvcp70.dll
Fri Nov 16 07:35:32 2007 => Scanning File C:\WINDOWS\System32\MSVCP71.dll
Fri Nov 16 07:35:32 2007 => Scanning File C:\WINDOWS\System32\msvcr70.dll
Fri Nov 16 07:35:32 2007 => Scanning File C:\WINDOWS\System32\MSVCR71.dll
Fri Nov 16 07:35:32 2007 => Scanning File C:\WINDOWS\System32\msvcrt.dll
Fri Nov 16 07:35:32 2007 => Scanning File C:\WINDOWS\System32\msvcrt20.dll
Fri Nov 16 07:35:33 2007 => Scanning File C:\WINDOWS\System32\msvcrt40.dll
Fri Nov 16 07:35:33 2007 => Scanning File C:\WINDOWS\System32\msvfw32.dll
Fri Nov 16 07:35:33 2007 => Scanning File C:\WINDOWS\System32\msvidc32.dll
Fri Nov 16 07:35:33 2007 => Scanning File C:\WINDOWS\System32\msvidctl.dll
Fri Nov 16 07:35:34 2007 => Scanning File C:\WINDOWS\System32\msvideo.dll
Fri Nov 16 07:35:34 2007 => Scanning File C:\WINDOWS\System32\msw3prt.dll
Fri Nov 16 07:35:34 2007 => Scanning File C:\WINDOWS\System32\mswdat10.dll
Fri Nov 16 07:35:34 2007 => Scanning File C:\WINDOWS\System32\mswebdvd.dll
Fri Nov 16 07:35:35 2007 => Scanning File C:\WINDOWS\System32\MSWMDM.dll
Fri Nov 16 07:35:35 2007 => Scanning File C:\WINDOWS\System32\mswsock.dll
Fri Nov 16 07:35:35 2007 => Scanning File C:\WINDOWS\System32\mswstr10.dll
Fri Nov 16 07:35:35 2007 => Scanning File C:\WINDOWS\System32\msxbde40.dll
Fri Nov 16 07:35:35 2007 => Scanning File C:\WINDOWS\System32\msxml.dll
Fri Nov 16 07:35:35 2007 => Scanning File C:\WINDOWS\System32\msxml2.dll
Fri Nov 16 07:35:36 2007 => Scanning File C:\WINDOWS\System32\msxml2r.dll
Fri Nov 16 07:35:36 2007 => Scanning File C:\WINDOWS\System32\msxml3.dll
Fri Nov 16 07:35:36 2007 => Scanning File C:\WINDOWS\System32\msxml3a.dll
Fri Nov 16 07:35:36 2007 => Scanning File C:\WINDOWS\System32\msxml3r.dll
Fri Nov 16 07:35:36 2007 => Scanning File C:\WINDOWS\System32\MSXML4.DLL
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\msxml4.Manifest
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\MSXML4A.DLL
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\MSXML4R.DLL
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\msxml4r.Manifest
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\msxmlr.dll
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\msyuv.dll
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\mtxclu.dll
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\mtxdm.dll
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\mtxex.dll
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\mtxlegih.dll
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\mtxoci.dll
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\mycomput.dll
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32\mydocs.dll
Fri Nov 16 07:35:37 2007 => Scanning File C:\WINDOWS\System32
arrator.exe
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
arrhook.dll
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
btstat.exe
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
cobjapi.dll
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
cpa.cpl
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
cpa.cpl.manifest
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
cxpnt.dll
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
ddeapi.dll
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
ddeapir.exe
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
ddenb32.dll
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
dptsp.tsp
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32\NeroCheck.exe
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
et.exe
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
et.hlp
Fri Nov 16 07:35:38 2007 => Scanning File C:\WINDOWS\System32
et1.exe
Fri Nov 16 07:35:39 2007 => Scanning File C:\WINDOWS\System32
etapi.dll
Fri Nov 16 07:35:39 2007 => Scanning File C:\WINDOWS\System32
etapi32.dll
Fri Nov 16 07:35:39 2007 => Scanning File C:\WINDOWS\System32
etcfgx.dll
Fri Nov 16 07:35:39 2007 => Scanning File C:\WINDOWS\System32
etdde.exe
Fri Nov 16 07:35:39 2007 => Scanning File C:\WINDOWS\System32
etevent.dll
Fri Nov 16 07:35:39 2007 => Scanning File C:\WINDOWS\System32
etfxperf.dll
Fri Nov 16 07:35:39 2007 => Scanning File C:\WINDOWS\System32
eth.dll
Fri Nov 16 07:35:39 2007 => Scanning File C:\WINDOWS\System32
etid.dll
Fri Nov 16 07:35:40 2007 => Scanning File C:\WINDOWS\System32
etlogon.dll
Fri Nov 16 07:35:40 2007 => Scanning File C:\WINDOWS\System32
etman.dll
Fri Nov 16 07:35:40 2007 => Scanning File C:\WINDOWS\System32
etmsg.dll
Fri Nov 16 07:35:40 2007 => Scanning File C:\WINDOWS\System32
etplwiz.dll
Fri Nov 16 07:35:41 2007 => Scanning File C:\WINDOWS\System32
etrap.dll
Fri Nov 16 07:35:41 2007 => Scanning File C:\WINDOWS\System32
etsetup.exe
Fri Nov 16 07:35:42 2007 => Scanning File C:\WINDOWS\System32
etsh.exe
Fri Nov 16 07:35:42 2007 => Scanning File C:\WINDOWS\System32
etshell.dll
Fri Nov 16 07:35:42 2007 => Scanning File C:\WINDOWS\System32
etstat.exe
Fri Nov 16 07:35:42 2007 => Scanning File C:\WINDOWS\System32
etui0.dll
Fri Nov 16 07:35:42 2007 => Scanning File C:\WINDOWS\System32
etui1.dll
Fri Nov 16 07:35:42 2007 => Scanning File C:\WINDOWS\System32
etui2.dll
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
ewdev.dll
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
lhtml.dll
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
lsfunc.exe
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
mevtmsg.dll
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
mmkcert.dll
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
oise.chs
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
oise.cht
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
oise.dat
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
oise.deu
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
oise.eng
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
oise.enu
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
oise.esn
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
oise.fra
Fri Nov 16 07:35:43 2007 => Scanning File C:\WINDOWS\System32
oise.ita
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
oise.jpn
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
oise.kor
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
oise.nld
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
oise.sve
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
oise.tha
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
otepad.exe
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
pptools.dll
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
scompat.tlb
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
slookup.exe
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
tdll.dll
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
tdos.sys
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
tdos404.sys
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
tdos411.sys
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
tdos412.sys
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
tdos804.sys
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
tdsapi.dll
Fri Nov 16 07:35:44 2007 => Scanning File C:\WINDOWS\System32
timage.gif
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tio.sys
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tio404.sys
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tio411.sys
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tio412.sys
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tio804.sys
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tkrnlpa.exe
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tlanman.dll
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tlanui.dll
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tlanui2.dll
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tlsapi.dll
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tmarta.dll
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tmsapi.dll
Fri Nov 16 07:35:45 2007 => Scanning File C:\WINDOWS\System32
tmsdba.dll
Fri Nov 16 07:35:46 2007 => Scanning File C:\WINDOWS\System32
tmsevt.dll
Fri Nov 16 07:35:46 2007 => Scanning File C:\WINDOWS\System32
tmsmgr.dll
Fri Nov 16 07:35:46 2007 => Scanning File C:\WINDOWS\System32
tmsmgr.msc
Fri Nov 16 07:35:46 2007 => Scanning File C:\WINDOWS\System32
tmsoprq.msc
Fri Nov 16 07:35:46 2007 => Scanning File C:\WINDOWS\System32
tmssvc.dll
Fri Nov 16 07:35:47 2007 => Scanning File C:\WINDOWS\System32
toskrnl.exe
Fri Nov 16 07:35:47 2007 => Scanning File C:\WINDOWS\System32
tprint.dll
Fri Nov 16 07:35:47 2007 => Scanning File C:\WINDOWS\System32
tsd.exe
Fri Nov 16 07:35:47 2007 => Scanning File C:\WINDOWS\System32
tsdexts.dll
Fri Nov 16 07:35:47 2007 => Scanning File C:\WINDOWS\System32
tshrui.dll
Fri Nov 16 07:35:47 2007 => Scanning File C:\WINDOWS\System32
tvdm.exe
Fri Nov 16 07:35:47 2007 => Scanning File C:\WINDOWS\System32
tvdmd.dll
Fri Nov 16 07:35:48 2007 => Scanning File C:\WINDOWS\System32
usrmgr.cpl
Fri Nov 16 07:35:48 2007 => Scanning File C:\WINDOWS\System32
wc.cpl.manifest
Fri Nov 16 07:35:48 2007 => Scanning File C:\WINDOWS\System32
wprovau.dll
Fri Nov 16 07:35:48 2007 => Scanning File C:\WINDOWS\System32\oakley.dll
Fri Nov 16 07:35:48 2007 => Scanning File C:\WINDOWS\System32\objsel.dll
Fri Nov 16 07:35:49 2007 => Scanning File C:\WINDOWS\System32\occache.dll
Fri Nov 16 07:35:49 2007 => Scanning File C:\WINDOWS\System32\ochlp30e.dll
Fri Nov 16 07:35:49 2007 => Scanning File C:\WINDOWS\System32\ocmanage.dll
Fri Nov 16 07:35:49 2007 => Scanning File C:\WINDOWS\System32\odbc16gt.dll
Fri Nov 16 07:35:49 2007 => Scanning File C:\WINDOWS\System32\ODBC32.dll
Fri Nov 16 07:35:49 2007 => Scanning File C:\WINDOWS\System32\odbc32gt.dll
Fri Nov 16 07:35:49 2007 => Scanning File C:\WINDOWS\System32\odbcad32.exe
Fri Nov 16 07:35:49 2007 => Scanning File C:\WINDOWS\System32\odbcbcp.dll
Fri Nov 16 07:35:49 2007 => Scanning File C:\WINDOWS\System32\odbcconf.dll
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\odbcconf.exe
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\odbcconf.rsp
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\odbccp32.cpl
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\ODBCCP32.dll
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\odbccr32.dll
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\odbccu32.dll
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\odbcint.dll
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\odbcji32.dll
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\odbcjt32.dll
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\odbcp32r.dll
Fri Nov 16 07:35:50 2007 => Scanning File C:\WINDOWS\System32\odbctrac.dll
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\oddbse32.dll
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\odexl32.dll
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\odfox32.dll
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\odpdx32.dll
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\odtext32.dll
Fri Nov 16 07:35:51 2007 => *** File C:\WINDOWS\System32\oembios.bin having Size Restriction ***
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\oembios.bin [**]
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\oembios.dat
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\oembios.sig
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\OEMFWALL.EXE
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\oeminfo.ini
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\OEMLogo.bmp
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\offfilt.dll
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\ogg.dll
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\OggDS.dll
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\ole2.dll
Fri Nov 16 07:35:51 2007 => Scanning File C:\WINDOWS\System32\ole2disp.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\ole2nls.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\ole32.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\oleacc.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\oleaccrc.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\oleaut32.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\olecli.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\olecli32.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\olecnv32.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\oledlg.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\oleprn.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\olepro32.dll
Fri Nov 16 07:35:52 2007 => Scanning File C:\WINDOWS\System32\olesvr.dll
Fri Nov 16 07:35:53 2007 => Scanning File C:\WINDOWS\System32\olesvr32.dll
Fri Nov 16 07:35:53 2007 => Scanning File C:\WINDOWS\System32\olethk32.dll
Fri Nov 16 07:35:53 2007 => Scanning File C:\WINDOWS\System32\opengl32.dll
Fri Nov 16 07:35:53 2007 => Scanning File C:\WINDOWS\System32\osk.exe
Fri Nov 16 07:35:53 2007 => Scanning File C:\WINDOWS\System32\osuninst.dll
Fri Nov 16 07:35:53 2007 => Scanning File C:\WINDOWS\System32\osuninst.exe
Fri Nov 16 07:35:53 2007 => Scanning File C:\WINDOWS\System32\OUTLPERF.H
Fri Nov 16 07:35:53 2007 => Scanning File C:\WINDOWS\System32\OUTLPERF.INI
Fri Nov 16 07:35:53 2007 => Scanning File C:\WINDOWS\System32\owaxberp.dll
Fri Nov 16 07:35:53 2007 => File C:\WINDOWS\System32\owaxberp.dll tagged as not-a-virus:AdWare.Win32.SecToolBar.k. No Action Taken.

Fri Nov 16 07:35:53 2007 => Scanning File C:\WINDOWS\System32\packager.exe
Fri Nov 16 07:35:54 2007 => Scanning File C:\WINDOWS\System32\pandora_setup_mini.ocx
Fri Nov 16 07:35:54 2007 => Scanning File C:\WINDOWS\System32\panmap.dll
Fri Nov 16 07:35:54 2007 => Scanning File C:\WINDOWS\System32\paqsp.dll
Fri Nov 16 07:35:54 2007 => Scanning File C:\WINDOWS\System32\pathping.exe
Fri Nov 16 07:35:55 2007 => Scanning File C:\WINDOWS\System32\pautoenr.dll
Fri Nov 16 07:35:55 2007 => Scanning File C:\WINDOWS\System32\pavc.dll
Fri Nov 16 07:35:55 2007 => Scanning File C:\WINDOWS\System32\pbfkwprl.dll
Fri Nov 16 07:35:55 2007 => Scanning File C:\WINDOWS\System32\PCANDIS5.SYS
Fri Nov 16 07:35:55 2007 => Scanning File C:\WINDOWS\System32\PCDLIB32.DLL
Fri Nov 16 07:35:55 2007 => Scanning File C:\WINDOWS\System32\pcl.sep
Fri Nov 16 07:35:55 2007 => Scanning File C:\WINDOWS\System32\pdh.dll
Fri Nov 16 07:35:55 2007 => Scanning File C:\WINDOWS\System32\pdrtvae.ax
Fri Nov 16 07:35:55 2007 => Scanning File C:\WINDOWS\System32\pdrtvctl.dll
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\pdrtvdec.ax
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\pdrtvf1.dll
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\pdrtvf2.dll
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\pdrtvsvr.exe
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\pdrtvve.ax
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\pentnt.exe
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\perfc009.dat
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\perfc00C.dat
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\perfci.h
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\perfci.ini
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\perfctrs.dll
Fri Nov 16 07:35:56 2007 => Scanning File C:\WINDOWS\System32\perfd009.dat
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfd00C.dat
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfdisk.dll
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perffilt.h
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perffilt.ini
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfh009.dat
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfh00C.dat
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfi009.dat
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfi00C.dat
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfmon.exe
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfmon.msc
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfnet.dll
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfos.dll
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfproc.dll
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\PerfStringBackup.INI
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfts.dll
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfwci.h
Fri Nov 16 07:35:57 2007 => Scanning File C:\WINDOWS\System32\perfwci.ini
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\phon.ime
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\phon.tbl
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\phoncode.tbl
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\phonptr.tbl
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\photowiz.dll
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\picn20.dll
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\pid.dll
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\pidgen.dll
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\pifmgr.dll
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\ping.exe
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\ping6.exe
Fri Nov 16 07:35:58 2007 => Scanning File C:\WINDOWS\System32\PINTLGNT.IME
Fri Nov 16 07:35:59 2007 => Scanning File C:\WINDOWS\System32\PINTLPAD.HLP
Fri Nov 16 07:35:59 2007 => Scanning File C:\WINDOWS\System32\PINTLPAE.HLP
Fri Nov 16 07:35:59 2007 => Scanning File C:\WINDOWS\System32\pjlmon.dll
Fri Nov 16 07:35:59 2007 => Scanning File C:\WINDOWS\System32\plugin.ocx
Fri Nov 16 07:35:59 2007 => Scanning File C:\WINDOWS\System32\plustab.dll
Fri Nov 16 07:35:59 2007 => Scanning File C:\WINDOWS\System32\pmodtoxh.ini.ren
Fri Nov 16 07:35:59 2007 => Scanning File C:\WINDOWS\System32\pmspl.dll
Fri Nov 16 07:35:59 2007 => Scanning File C:\WINDOWS\System32\PNGFILT.DLL
Fri Nov 16 07:35:59 2007 => Scanning File C:\WINDOWS\System32\polstore.dll
Fri Nov 16 07:35:59 2007 => Scanning File C:\WINDOWS\System32\powercfg.cpl
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\powrprof.dll
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\prc.nls
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\prcp.nls
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\prflbmsg.dll
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\print.exe
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\printui.dll
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\Process.exe
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\proctexe.ocx
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\prodspec.ini
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\profmap.dll
Fri Nov 16 07:36:00 2007 => Scanning File C:\WINDOWS\System32\progman.exe
Fri Nov 16 07:36:01 2007 => Scanning File C:\WINDOWS\System32\proquota.exe
Fri Nov 16 07:36:01 2007 => Scanning File C:\WINDOWS\System32\prqss.ini.ren
Fri Nov 16 07:36:01 2007 => Scanning File C:\WINDOWS\System32\prqss.ini2.ren
Fri Nov 16 07:36:01 2007 => Scanning File C:\WINDOWS\System32\psapi.dll
Fri Nov 16 07:36:01 2007 => Scanning File C:\WINDOWS\System32\psbase.dll
Fri Nov 16 07:36:01 2007 => Scanning File C:\WINDOWS\System32\pschdcnt.h
Fri Nov 16 07:36:01 2007 => Scanning File C:\WINDOWS\System32\pschdprf.dll
Fri Nov 16 07:36:01 2007 => Scanning File C:\WINDOWS\System32\pschdprf.ini
Fri Nov 16 07:36:01 2007 => Scanning File C:\WINDOWS\System32\pscript.sep
Fri Nov 16 07:36:01 2007 => Scanning File C:\WINDOWS\System32\PSIKey.dll
Fri Nov 16 07:36:02 2007 => Scanning File C:\WINDOWS\System32\psisdecd.dll
Fri Nov 16 07:36:02 2007 => Scanning File C:\WINDOWS\System32\psisrndr.ax
Fri Nov 16 07:36:02 2007 => Scanning File C:\WINDOWS\System32\psnppagn.dll
Fri Nov 16 07:36:02 2007 => Scanning File C:\WINDOWS\System32\pspapdrv.dll
Fri Nov 16 07:36:02 2007 => Scanning File C:\WINDOWS\System32\pspapdrv.ini
Fri Nov 16 07:36:02 2007 => Scanning File C:\WINDOWS\System32\PSPAudio.inf
Fri Nov 16 07:36:02 2007 => Scanning File C:\WINDOWS\System32\pspaudrv.dll
Fri Nov 16 07:36:02 2007 => Scanning File C:\WINDOWS\System32\pspaudrv.ini
Fri Nov 16 07:36:03 2007 => Scanning File C:\WINDOWS\System32\pspddi.dll
Fri Nov 16 07:36:03 2007 => Scanning File C:\WINDOWS\System32\pspddi.ini
Fri Nov 16 07:36:03 2007 => Scanning File C:\WINDOWS\System32\pspdss.dll
Fri Nov 16 07:36:03 2007 => Scanning File C:\WINDOWS\System32\pspdss.ini
Fri Nov 16 07:36:03 2007 => Scanning File C:\WINDOWS\System32\pspfbase.ini
Fri Nov 16 07:36:03 2007 => Scanning File C:\WINDOWS\System32\pspfidrv.dll
Fri Nov 16 07:36:04 2007 => Scanning File C:\WINDOWS\System32\pspfidrv.ini
Fri Nov 16 07:36:04 2007 => Scanning File C:\WINDOWS\System32\psplog.dll
Fri Nov 16 07:36:04 2007 => Scanning File C:\WINDOWS\System32\pspsbext.dll
Fri Nov 16 07:36:04 2007 => Scanning File C:\WINDOWS\System32\pspsbext.ini
Fri Nov 16 07:36:04 2007 => Scanning File C:\WINDOWS\System32\pspwave.dll
Fri Nov 16 07:36:04 2007 => Scanning File C:\WINDOWS\System32\pspwave.ini
Fri Nov 16 07:36:04 2007 => Scanning File C:\WINDOWS\System32\pstorec.dll
Fri Nov 16 07:36:04 2007 => Scanning File C:\WINDOWS\System32\pstorsvc.dll
Fri Nov 16 07:36:04 2007 => Scanning File C:\WINDOWS\System32\Pubole32.dll
Fri Nov 16 07:36:04 2007 => Scanning File C:\WINDOWS\System32\pubprn.vbs
Fri Nov 16 07:36:05 2007 => Scanning File C:\WINDOWS\System32\pusbfd1.sys
Fri Nov 16 07:36:05 2007 => Scanning File C:\WINDOWS\System32\pusbfd2.vxd
Fri Nov 16 07:36:05 2007 => Scanning File C:\WINDOWS\System32\pvljpg20.dll
Fri Nov 16 07:36:05 2007 => Scanning File C:\WINDOWS\System32\pvmjpg21.dll
Fri Nov 16 07:36:05 2007 => Scanning File C:\WINDOWS\System32\pvmjpg21.hlp
Fri Nov 16 07:36:05 2007 => Scanning File C:\WINDOWS\System32\pvwv220.dll
Fri Nov 16 07:36:05 2007 => Scanning File C:\WINDOWS\System32\px.dll
Fri Nov 16 07:36:05 2007 => Scanning File C:\WINDOWS\System32\px.ini [**]
Fri Nov 16 07:36:05 2007 => Scanning File C:\WINDOWS\System32\pxdrv.dll
Fri Nov 16 07:36:06 2007 => Scanning File C:\WINDOWS\System32\pxmas.dll
Fri Nov 16 07:36:06 2007 => Scanning File C:\WINDOWS\System32\pxwave.dll
Fri Nov 16 07:36:06 2007 => Scanning File C:\WINDOWS\System32\pxwma.dll
Fri Nov 16 07:36:06 2007 => Scanning File C:\WINDOWS\System32\qappsrv.exe
Fri Nov 16 07:36:06 2007 => Scanning File C:\WINDOWS\System32\qasf.dll
Fri Nov 16 07:36:06 2007 => Scanning File C:\WINDOWS\System32\qcap.dll
Fri Nov 16 07:36:06 2007 => Scanning File C:\WINDOWS\System32\qcut.dll
Fri Nov 16 07:36:07 2007 => Scanning File C:\WINDOWS\System32\qdv.dll
Fri Nov 16 07:36:07 2007 => Scanning File C:\WINDOWS\System32\qdvd.dll
Fri Nov 16 07:36:07 2007 => Scanning File C:\WINDOWS\System32\qedit.dll
Fri Nov 16 07:36:07 2007 => Scanning File C:\WINDOWS\System32\qedwipes.dll
Fri Nov 16 07:36:09 2007 => Scanning File C:\WINDOWS\System32\QlbServr.exe
Fri Nov 16 07:36:09 2007 => Scanning File C:\WINDOWS\System32\qmgr.dll
Fri Nov 16 07:36:09 2007 => Scanning File C:\WINDOWS\System32\qmgrprxy.dll
Fri Nov 16 07:36:09 2007 => Scanning File C:\WINDOWS\System32\qosname.dll
Fri Nov 16 07:36:09 2007 => Scanning File C:\WINDOWS\System32\qprocess.exe
Fri Nov 16 07:36:09 2007 => Scanning File C:\WINDOWS\System32\qt-mt331.dll
Fri Nov 16 07:36:09 2007 => Scanning File C:\WINDOWS\System32\qtplugin.log
Fri Nov 16 07:36:09 2007 => Scanning File C:\WINDOWS\System32\quartz.dll
Fri Nov 16 07:36:10 2007 => Scanning File C:\WINDOWS\System32\quartz.vxd
Fri Nov 16 07:36:10 2007 => Scanning File C:\WINDOWS\System32\query.dll
Fri Nov 16 07:36:10 2007 => Scanning File C:\WINDOWS\System32\quick.ime
Fri Nov 16 07:36:10 2007 => Scanning File C:\WINDOWS\System32\QuickTime.ax
Fri Nov 16 07:36:10 2007 => Scanning File C:\WINDOWS\System32\QuickTime.cpl
Fri Nov 16 07:36:11 2007 => *** File C:\WINDOWS\System32\QuickTime.qts having Size Restriction ***
Fri Nov 16 07:36:11 2007 => Scanning File C:\WINDOWS\System32\QuickTime.qts [**]
Fri Nov 16 07:36:11 2007 => Scanning File C:\WINDOWS\System32\QuickTimeCheck.ocx
Fri Nov 16 07:36:11 2007 => Scanning File C:\WINDOWS\System32\QuickTimeMusicalInstruments.qtx
Fri Nov 16 07:36:11 2007 => Scanning File C:\WINDOWS\System32\QuickTimeVR.qtx
Fri Nov 16 07:36:11 2007 => Scanning File C:\WINDOWS\System32\qwinsta.exe
Fri Nov 16 07:36:11 2007 => Scanning File C:\WINDOWS\System32acpldlg.dll
Fri Nov 16 07:36:11 2007 => Scanning File C:\WINDOWS\System32asadhlp.dll
Fri Nov 16 07:36:11 2007 => Scanning File C:\WINDOWS\System32asapi32.dll
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asauto.dll
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asautou.exe
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32aschap.dll
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asctrnm.h
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asctrs.dll
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asctrs.ini
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asdial.exe
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asdlg.dll
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asman.dll
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asmans.dll
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asmontr.dll
Fri Nov 16 07:36:12 2007 => Scanning File C:\WINDOWS\System32asmxs.dll
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32asphone.exe
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32asppp.dll
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32asrad.dll
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32assapi.dll
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32asser.dll
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32astapi.dll
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32astls.dll
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32cbdyctl.dll
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32cimlby.exe
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32cp.exe
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32dchost.dll
Fri Nov 16 07:36:13 2007 => Scanning File C:\WINDOWS\System32\RDOCURS.DLL
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32dpcfgex.dll
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32dpclip.exe
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32dpdd.dll
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32dpsnd.dll
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32dpwsx.dll
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32dsaddin.exe
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32dshost.exe
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32ecover.exe
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32edir.exe
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32eg.exe
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32egapi.dll
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32egedt32.exe
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32egini.exe
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32egsvc.dll
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32egsvr32.exe
Fri Nov 16 07:36:14 2007 => Scanning File C:\WINDOWS\System32egwiz.exe
Fri Nov 16 07:36:15 2007 => Scanning File C:\WINDOWS\System32egwizc.dll
Fri Nov 16 07:36:15 2007 => Scanning File C:\WINDOWS\System32emotepg.dll
Fri Nov 16 07:36:15 2007 => Scanning File C:\WINDOWS\System32emotesp.tsp
Fri Nov 16 07:36:15 2007 => Scanning File C:\WINDOWS\System32end.dll
Fri Nov 16 07:36:15 2007 => Scanning File C:\WINDOWS\System32eplace.exe
Fri Nov 16 07:36:15 2007 => Scanning File C:\WINDOWS\System32eset.exe
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32esutils.dll
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32exec.exe
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32iched20.dll
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32iched32.dll
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32nr20.dll
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32omanime.ime
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32oute.exe
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32outemon.exe
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32outetab.dll
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32pcns4.dll
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32pcrt4.dll
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32pcss.dll
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32saci.rat
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32saenh.dll
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32sh.exe
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32shx32.dll
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32sm.exe
Fri Nov 16 07:36:16 2007 => Scanning File C:\WINDOWS\System32smps.dll
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32smsink.exe
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32smui.exe
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32svp.exe
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32svp.ini
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32svpcnts.h
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32svpmsg.dll
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32svpperf.dll
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32svpsp.dll
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32tcdll.dll
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32tcshare.exe
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32tipxmib.dll
Fri Nov 16 07:36:17 2007 => Scanning File C:\WINDOWS\System32tm.dll
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32tutils.dll
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32unas.exe
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32undll32.exe
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32unonce.exe
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32winsta.exe
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32\S32EVNT1.DLL
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32\safrcdlg.dll
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32\safrdm.dll
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32\safrslv.dll
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32\samlib.dll
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32\samsrv.dll
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32\sapi.cpl.manifest
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32\savedump.exe
Fri Nov 16 07:36:18 2007 => Scanning File C:\WINDOWS\System32\sbe.dll
Fri Nov 16 07:36:19 2007 => Scanning File C:\WINDOWS\System32\sbeio.dll
Fri Nov 16 07:36:19 2007 => Scanning File C:\WINDOWS\System32\sc.exe
Fri Nov 16 07:36:19 2007 => Scanning File C:\WINDOWS\System32\scarddlg.dll
Fri Nov 16 07:36:19 2007 => Scanning File C:\WINDOWS\System32\scardssp.dll
Fri Nov 16 07:36:19 2007 => Scanning File C:\WINDOWS\System32\scardsvr.exe
Fri Nov 16 07:36:19 2007 => Scanning File C:\WINDOWS\System32\sccbase.dll
Fri Nov 16 07:36:19 2007 => Scanning File C:\WINDOWS\System32\sccsccp.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\scecli.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\scesrv.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\schannel.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\schedsvc.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\sclgntfy.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\scofr.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\SCP32.DLL
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\scredir.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\scripto.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\scrnsave.scr
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\scrobj.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\scrrnfr.dll
Fri Nov 16 07:36:20 2007 => Scanning File C:\WINDOWS\System32\scrrun.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\sdbinst.exe
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\sdpblb.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\seclogon.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\secupd.dat
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\secupd.sig
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\secur32.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\security.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\sendcmsg.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\sendmail.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\sens.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\sensapi.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\senscfg.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\serialui.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\servdeps.dll
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\services.exe
Fri Nov 16 07:36:21 2007 => Scanning File C:\WINDOWS\System32\services.msc
Fri Nov 16 07:36:22 2007 => Scanning File C:\WINDOWS\System32\serwvdrv.dll
Fri Nov 16 07:36:22 2007 => Scanning File C:\WINDOWS\System32\sessmgr.exe
Fri Nov 16 07:36:22 2007 => Scanning File C:\WINDOWS\System32\sethc.exe
Fri Nov 16 07:36:22 2007 => Scanning File C:\WINDOWS\System32\setup.bmp
Fri Nov 16 07:36:22 2007 => Scanning File C:\WINDOWS\System32\setup.exe
Fri Nov 16 07:36:22 2007 => Scanning File C:\WINDOWS\System32\setupapi.dll
Fri Nov 16 07:36:22 2007 => Scanning File C:\WINDOWS\System32\setupdll.dll
Fri Nov 16 07:36:23 2007 => Scanning File C:\WINDOWS\System32\setver.exe
Fri Nov 16 07:36:23 2007 => Scanning File C:\WINDOWS\System32\sfc.dll
Fri Nov 16 07:36:23 2007 => Scanning File C:\WINDOWS\System32\sfc.exe
Fri Nov 16 07:36:23 2007 => Scanning File C:\WINDOWS\System32\sfcfiles.dll
Fri Nov 16 07:36:23 2007 => Scanning File C:\WINDOWS\System32\sfc_os.dll
Fri Nov 16 07:36:23 2007 => Scanning File C:\WINDOWS\System32\sfmapi.dll
Fri Nov 16 07:36:23 2007 => Scanning File C:\WINDOWS\System32\shadow.exe
Fri Nov 16 07:36:23 2007 => Scanning File C:\WINDOWS\System32\share.exe
Fri Nov 16 07:36:23 2007 => Scanning File C:\WINDOWS\System32\shdoclc.dll
Fri Nov 16 07:36:24 2007 => Scanning File C:\WINDOWS\System32\shdocvw.dll
Fri Nov 16 07:36:24 2007 => Scanning File C:\WINDOWS\System32\shell.dll
Fri Nov 16 07:36:24 2007 => *** File C:\WINDOWS\System32\shell32.dll having Size Restriction ***
Fri Nov 16 07:36:24 2007 => Scanning File C:\WINDOWS\System32\shell32.dll [**]
Fri Nov 16 07:36:24 2007 => Scanning File C:\WINDOWS\System32\shellstyle.dll
Fri Nov 16 07:36:24 2007 => Scanning File C:\WINDOWS\System32\shfolder.dll
Fri Nov 16 07:36:24 2007 => Scanning File C:\WINDOWS\System32\shgina.dll
Fri Nov 16 07:36:24 2007 => Scanning File C:\WINDOWS\System32\shiftjis.uce
Fri Nov 16 07:36:24 2007 => Scanning File C:\WINDOWS\System32\shimeng.dll
Fri Nov 16 07:36:24 2007 => Scanning File C:\WINDOWS\System32\shimgvw.dll
Fri Nov 16 07:36:24 2007 => Scanning File C:\WINDOWS\System32\SHLWAPI.DLL
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\shmedia.dll
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\shmgrate.exe
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\shrpubw.exe
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\shscrap.dll
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\shsvcs.dll
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\shutdown.exe
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\sigtab.dll
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\sigverif.exe
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\simpdata.tlb
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\sisbkup.dll
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\skdll.dll
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\skeys.exe
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\slayerxp.dll
Fri Nov 16 07:36:25 2007 => Scanning File C:\WINDOWS\System32\slbcsp.dll
Fri Nov 16 07:36:26 2007 => Scanning File C:\WINDOWS\System32\slbiop.dll
Fri Nov 16 07:36:26 2007 => Scanning File C:\WINDOWS\System32\slbrccsp.dll
Fri Nov 16 07:36:26 2007 => Scanning File C:\WINDOWS\System32\sl_anet.acm
Fri Nov 16 07:36:26 2007 => Scanning File C:\WINDOWS\System32\smlogcfg.dll
Fri Nov 16 07:36:26 2007 => Scanning File C:\WINDOWS\System32\smlogsvc.exe
Fri Nov 16 07:36:26 2007 => Scanning File C:\WINDOWS\System32\smss.exe
Fri Nov 16 07:36:26 2007 => Scanning File C:\WINDOWS\System32\sndrec32.exe
Fri Nov 16 07:36:27 2007 => Scanning File C:\WINDOWS\System32\sndvol32.exe
Fri Nov 16 07:36:27 2007 => Scanning File C:\WINDOWS\System32\snmpapi.dll
Fri Nov 16 07:36:27 2007 => Scanning File C:\WINDOWS\System32\snmpsnap.dll
Fri Nov 16 07:36:27 2007 => Scanning File C:\WINDOWS\System32\softpub.dll
Fri Nov 16 07:36:27 2007 => Scanning File C:\WINDOWS\System32\sol.exe
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\sort.exe
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\sortkey.nls
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\sorttbls.nls
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\sound.drv
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\spider.exe
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\spiisupd.exe
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\spmsg.dll
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\spnike.dll
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\spoolss.dll
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\spoolsv.exe
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\sprestrt.exe
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\sprio600.dll
Fri Nov 16 07:36:28 2007 => Scanning File C:\WINDOWS\System32\sprio800.dll
Fri Nov 16 07:36:29 2007 => Scanning File C:\WINDOWS\System32\spupdsvc.exe
Fri Nov 16 07:36:29 2007 => Scanning File C:\WINDOWS\System32\spxcoins.dll
Fri Nov 16 07:36:29 2007 => Scanning File C:\WINDOWS\System32\sqlsodbc.chm
Fri Nov 16 07:36:29 2007 => Scanning File C:\WINDOWS\System32\SQLSRV32.dll
Fri Nov 16 07:36:29 2007 => Scanning File C:\WINDOWS\System32\sqlsrv32.rll
Fri Nov 16 07:36:30 2007 => Scanning File C:\WINDOWS\System32\sqlunirl.dll
Fri Nov 16 07:36:30 2007 => Scanning File C:\WINDOWS\System32\sqlwid.dll
Fri Nov 16 07:36:30 2007 => Scanning File C:\WINDOWS\System32\sqlwoa.dll
Fri Nov 16 07:36:30 2007 => Scanning File C:\WINDOWS\System32\SrchSTS.exe
Fri Nov 16 07:36:30 2007 => Scanning File C:\WINDOWS\System32\srclient.dll
Fri Nov 16 07:36:30 2007 => Scanning File C:\WINDOWS\System32\srrstr.dll
Fri Nov 16 07:36:31 2007 => Scanning File C:\WINDOWS\System32\srsvc.dll
Fri Nov 16 07:36:31 2007 => Scanning File C:\WINDOWS\System32\srvsvc.dll
Fri Nov 16 07:36:31 2007 => Scanning File C:\WINDOWS\System32\ss3dfo.scr
Fri Nov 16 07:36:31 2007 => Scanning File C:\WINDOWS\System32\ssbezier.scr
Fri Nov 16 07:36:31 2007 => Scanning File C:\WINDOWS\System32\ssdpapi.dll
Fri Nov 16 07:36:31 2007 => Scanning File C:\WINDOWS\System32\ssdpsrv.dll
Fri Nov 16 07:36:31 2007 => Scanning File C:\WINDOWS\System32\ssflwbox.scr
Fri Nov 16 07:36:32 2007 => Scanning File C:\WINDOWS\System32\ssldivx.dll
Fri Nov 16 07:36:33 2007 => Scanning File C:\WINDOWS\System32\ssmarque.scr
Fri Nov 16 07:36:33 2007 => Scanning File C:\WINDOWS\System32\ssmypics.scr
Fri Nov 16 07:36:33 2007 => Scanning File C:\WINDOWS\System32\ssmyst.scr
Fri Nov 16 07:36:33 2007 => Scanning File C:\WINDOWS\System32\sspipes.scr
Fri Nov 16 07:36:35 2007 => Scanning File C:\WINDOWS\System32\ssstars.scr
Fri Nov 16 07:36:35 2007 => Scanning File C:\WINDOWS\System32\sstext3d.scr
Fri Nov 16 07:36:37 2007 => Scanning File C:\WINDOWS\System32\stclient.dll
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\stdole2.tlb
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\stdole32.tlb
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\sti.dll
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\stimon.exe
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\sti_ci.dll
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\stobject.dll
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\storage.dll
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\storprop.dll
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\streamci.dll
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\strmdll.dll
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\subrange.uce
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\subst.exe
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\svcpack.dll
Fri Nov 16 07:36:38 2007 => Scanning File C:\WINDOWS\System32\swprv.dll
Fri Nov 16 07:36:39 2007 => Scanning File C:\WINDOWS\System32\swreg.exe
Fri Nov 16 07:36:39 2007 => Scanning File C:\WINDOWS\System32\swsc.exe
Fri Nov 16 07:36:39 2007 => Scanning File C:\WINDOWS\System32\swxcacls.exe
Fri Nov 16 07:36:40 2007 => Scanning File C:\WINDOWS\System32\sxs.dll
Fri Nov 16 07:36:40 2007 => Scanning File C:\WINDOWS\System32\SymNeti.dll
Fri Nov 16 07:36:40 2007 => Scanning File C:\WINDOWS\System32\SymRedir.dll
Fri Nov 16 07:36:40 2007 => Scanning File C:\WINDOWS\System32\SymTdiRg.exe
Fri Nov 16 07:36:40 2007 => Scanning File C:\WINDOWS\System32\syncapp.exe
Fri Nov 16 07:36:40 2007 => Scanning File C:\WINDOWS\System32\synceng.dll
Fri Nov 16 07:36:40 2007 => Scanning File C:\WINDOWS\System32\syncui.dll
Fri Nov 16 07:36:40 2007 => Scanning File C:\WINDOWS\System32\sysdm.cpl
Fri Nov 16 07:36:41 2007 => Scanning File C:\WINDOWS\System32\sysedit.exe
Fri Nov 16 07:36:41 2007 => Scanning File C:\WINDOWS\System32\sysinv.dll
Fri Nov 16 07:36:41 2007 => Scanning File C:\WINDOWS\System32\syskey.exe
Fri Nov 16 07:36:41 2007 => Scanning File C:\WINDOWS\System32\sysmon.ocx
Fri Nov 16 07:36:42 2007 => Scanning File C:\WINDOWS\System32\sysocmgr.exe
Fri Nov 16 07:36:42 2007 => Scanning File C:\WINDOWS\System32\sysprint.sep
Fri Nov 16 07:36:42 2007 => Scanning File C:\WINDOWS\System32\sysprtj.sep
Fri Nov 16 07:36:42 2007 => Scanning File C:\WINDOWS\System32\syssetup.dll
Fri Nov 16 07:36:42 2007 => Scanning File C:\WINDOWS\System32\system.drv
Fri Nov 16 07:36:42 2007 => Scanning File C:\WINDOWS\System32\systray.exe
Fri Nov 16 07:36:42 2007 => Scanning File C:\WINDOWS\System32	2embed.dll
Fri Nov 16 07:36:42 2007 => Scanning File C:\WINDOWS\System32	abctl32.ocx
Fri Nov 16 07:36:43 2007 => Scanning File C:\WINDOWS\System32	api.dll
Fri Nov 16 07:36:43 2007 => Scanning File C:\WINDOWS\System32	api3.dll
Fri Nov 16 07:36:43 2007 => Scanning File C:\WINDOWS\System32	api32.dll
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	apiperf.dll
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	apisrv.dll
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	apiui.dll
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	askman.exe
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	askmgr.exe
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	cmsetup.exe
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	cpmib.dll
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	cpmon.dll
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	cpmon.ini
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	cpmonui.dll
Fri Nov 16 07:36:44 2007 => Scanning File C:\WINDOWS\System32	cpsvcs.exe
Fri Nov 16 07:36:45 2007 => Scanning File C:\WINDOWS\System32	dc.ocx
Fri Nov 16 07:36:45 2007 => Scanning File C:\WINDOWS\System32	elephon.cpl
Fri Nov 16 07:36:45 2007 => Scanning File C:\WINDOWS\System32	elnet.exe
Fri Nov 16 07:36:45 2007 => Scanning File C:\WINDOWS\System32	ermmgr.dll
Fri Nov 16 07:36:45 2007 => Scanning File C:\WINDOWS\System32	ermsrv.dll
Fri Nov 16 07:36:45 2007 => Scanning File C:\WINDOWS\System32	ftp.exe
Fri Nov 16 07:36:45 2007 => Scanning File C:\WINDOWS\System32	hemeui.dll
Fri Nov 16 07:36:45 2007 => Scanning File C:\WINDOWS\System32	ifmicon.dll
Fri Nov 16 07:36:45 2007 => Scanning File C:\WINDOWS\System32	imedate.cpl
Fri Nov 16 07:36:45 2007 => Scanning File C:\WINDOWS\System32	imer.drv
Fri Nov 16 07:36:46 2007 => Scanning File C:\WINDOWS\System32\TINTLGNT.IME
Fri Nov 16 07:36:46 2007 => Scanning File C:\WINDOWS\System32	m20dec.ax
Fri Nov 16 07:36:46 2007 => Scanning File C:\WINDOWS\System32	mp.reg
Fri Nov 16 07:36:46 2007 => Scanning File C:\WINDOWS\System32	mp.txt [**]
Fri Nov 16 07:36:46 2007 => Scanning File C:\WINDOWS\System32	ngygkox.dll
Fri Nov 16 07:36:46 2007 => Scanning File C:\WINDOWS\System32	oolhelp.dll
Fri Nov 16 07:36:46 2007 => Scanning File C:\WINDOWS\System32	ourstart.exe
Fri Nov 16 07:36:46 2007 => Scanning File C:\WINDOWS\System32	racert.exe
Fri Nov 16 07:36:46 2007 => Scanning File C:\WINDOWS\System32	racert6.exe
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	raffic.dll
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	ree.com
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	rkwks.dll
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	sappcmp.dll
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	sbyuv.dll
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	scfgwmi.dll
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	scon.exe
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	scupgrd.exe
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	sd32.dll
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	sddd.dll
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	sdiscon.exe
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	skill.exe
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	slabels.h
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	slabels.ini
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	sshutdn.exe
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32	ssoft32.acm
Fri Nov 16 07:36:47 2007 => Scanning File C:\WINDOWS\System32\TwnLib20.dll
Fri Nov 16 07:36:48 2007 => Scanning File C:\WINDOWS\System32	xflog.dll
Fri Nov 16 07:36:48 2007 => Scanning File C:\WINDOWS\System32	ypelib.dll
Fri Nov 16 07:36:48 2007 => Scanning File C:\WINDOWS\System32\udhisapi.dll
Fri Nov 16 07:36:48 2007 => Scanning File C:\WINDOWS\System32\UDXOLURP.0XE
Fri Nov 16 07:36:48 2007 => File C:\WINDOWS\System32\UDXOLURP.0XE infected by "Trojan.Win32.Obfuscated.kp" Virus. Action Taken: File Deleted.

havi · Answer

PARTIE 8

ri Nov 16 07:36:48 2007 => Scanning File C:\WINDOWS\System32\ufat.dll
Fri Nov 16 07:36:48 2007 => Scanning File C:\WINDOWS\System32\ulib.dll
Fri Nov 16 07:36:48 2007 => Scanning File C:\WINDOWS\System32\umandlg.dll
Fri Nov 16 07:36:48 2007 => Scanning File C:\WINDOWS\System32\umdmxfrm.dll
Fri Nov 16 07:36:49 2007 => Scanning File C:\WINDOWS\System32\umloader.dll
Fri Nov 16 07:36:49 2007 => Scanning File C:\WINDOWS\System32\umpnpmgr.dll
Fri Nov 16 07:36:49 2007 => Scanning File C:\WINDOWS\System32\unacev2.dll
Fri Nov 16 07:36:49 2007 => Scanning File C:\WINDOWS\System32\unam4ie.exe
Fri Nov 16 07:36:49 2007 => Scanning File C:\WINDOWS\System32\unicdime.ime
Fri Nov 16 07:36:49 2007 => Scanning File C:\WINDOWS\System32\unicode.nls
Fri Nov 16 07:36:49 2007 => Scanning File C:\WINDOWS\System32\Unicows.dll
Fri Nov 16 07:36:49 2007 => Scanning File C:\WINDOWS\System32\uniime.dll
Fri Nov 16 07:36:50 2007 => Scanning File C:\WINDOWS\System32\unimdm.tsp
Fri Nov 16 07:36:50 2007 => Scanning File C:\WINDOWS\System32\unimdmat.dll
Fri Nov 16 07:36:50 2007 => Scanning File C:\WINDOWS\System32\uniplat.dll
Fri Nov 16 07:36:50 2007 => Scanning File C:\WINDOWS\System32\unlodctr.exe
Fri Nov 16 07:36:50 2007 => Scanning File C:\WINDOWS\System32\UNPICVID2.EXE
Fri Nov 16 07:36:50 2007 => Scanning File C:\WINDOWS\System32\UNRAR3.dll
Fri Nov 16 07:36:50 2007 => Scanning File C:\WINDOWS\System32\untfs.dll
Fri Nov 16 07:36:51 2007 => Scanning File C:\WINDOWS\System32\UNWISE.EXE
Fri Nov 16 07:36:51 2007 => Scanning File C:\WINDOWS\System32\upnp.dll
Fri Nov 16 07:36:51 2007 => Scanning File C:\WINDOWS\System32\upnpcont.exe
Fri Nov 16 07:36:51 2007 => Scanning File C:\WINDOWS\System32\upnphost.dll
Fri Nov 16 07:36:51 2007 => Scanning File C:\WINDOWS\System32\upnpui.dll
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\ups.exe
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\ureg.dll
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\url.dll
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\URLMON.DLL
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\usbmon.dll
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\usbui.dll
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\user.exe
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\user32.dll
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\userenv.dll
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\userinit.exe
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\usp10.dll
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\usrcntra.dll
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\usrcoina.dll
Fri Nov 16 07:36:52 2007 => Scanning File C:\WINDOWS\System32\usrdpa.dll
Fri Nov 16 07:36:53 2007 => Scanning File C:\WINDOWS\System32\usrdtea.dll
Fri Nov 16 07:36:53 2007 => Scanning File C:\WINDOWS\System32\usrfaxa.dll
Fri Nov 16 07:36:53 2007 => Scanning File C:\WINDOWS\System32\usrlbva.dll
Fri Nov 16 07:36:53 2007 => Scanning File C:\WINDOWS\System32\usrlogon.cmd
Fri Nov 16 07:36:53 2007 => Scanning File C:\WINDOWS\System32\usrmlnka.exe
Fri Nov 16 07:36:53 2007 => Scanning File C:\WINDOWS\System32\usrprbda.exe
Fri Nov 16 07:36:53 2007 => Scanning File C:\WINDOWS\System32\usrrtosa.dll
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\usrsdpia.dll
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\usrshuta.exe
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\usrsvpia.dll
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\usrv42a.dll
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\usrv80a.dll
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\usrvoica.dll
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\usrvpa.dll
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\utildll.dll
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\utilman.exe
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\uwdf.exe
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\uxtheme.dll
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\v7vga.rom
Fri Nov 16 07:36:54 2007 => Scanning File C:\WINDOWS\System32\VB6fr.DLL
Fri Nov 16 07:36:55 2007 => Scanning File C:\WINDOWS\System32\VBAEN32.OLB
Fri Nov 16 07:36:55 2007 => Scanning File C:\WINDOWS\System32\VBAEND32.OLB
Fri Nov 16 07:36:55 2007 => Scanning File C:\WINDOWS\System32\VBAFR32.OLB
Fri Nov 16 07:36:55 2007 => Scanning File C:\WINDOWS\System32\vbajet32.dll
Fri Nov 16 07:36:55 2007 => Scanning File C:\WINDOWS\System32\VBAME.DLL
Fri Nov 16 07:36:55 2007 => Scanning File C:\WINDOWS\System32\vbisurf.ax
Fri Nov 16 07:36:55 2007 => Scanning File C:\WINDOWS\System32\vbscript.dll
Fri Nov 16 07:36:55 2007 => Scanning File C:\WINDOWS\System32\vbsfr.dll
Fri Nov 16 07:36:55 2007 => Scanning File C:\WINDOWS\System32\VCCLSID.exe
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\vcdex.dll
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\vdmdbg.dll
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\vdmredir.dll
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\VEN2232.OLB
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\ver.dll
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\verclsid.exe
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\verifier.dll
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\verifier.exe
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\version.dll
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\VFind.exe
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\vfpodbc.dll
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\vga.dll
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\vga.drv
Fri Nov 16 07:36:56 2007 => Scanning File C:\WINDOWS\System32\vga256.dll
Fri Nov 16 07:36:57 2007 => Scanning File C:\WINDOWS\System32\vga64k.dll
Fri Nov 16 07:36:57 2007 => Scanning File C:\WINDOWS\System32\VideoEdit.lic
Fri Nov 16 07:36:57 2007 => Scanning File C:\WINDOWS\System32\VideoEdit.ocx
Fri Nov 16 07:36:57 2007 => Scanning File C:\WINDOWS\System32\VIDINS2.LOG
Fri Nov 16 07:36:57 2007 => Scanning File C:\WINDOWS\System32\vidx16.dll
Fri Nov 16 07:36:57 2007 => Scanning File C:\WINDOWS\System32\viscomwave.dll
Fri Nov 16 07:36:57 2007 => Scanning File C:\WINDOWS\System32\vjoy.dll
Fri Nov 16 07:36:57 2007 => Scanning File C:\WINDOWS\System32\vorbis.dll
Fri Nov 16 07:36:57 2007 => Scanning File C:\WINDOWS\System32\vorbisenc.dll
Fri Nov 16 07:36:57 2007 => Scanning File C:\WINDOWS\System32\VSFLEX3.OCX
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\vssadmin.exe
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\vssapi.dll
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\vssvc.exe
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\vss_ps.dll
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\vtuvvwv.dll
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\VXBLOCK.dll
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\Vxdif.dll
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\W32n50.dll
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\w32time.dll
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\w32tm.exe
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\w32topl.dll
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\w95inf16.dll
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\w95inf32.dll
Fri Nov 16 07:36:58 2007 => Scanning File C:\WINDOWS\System32\watchdog.sys
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wavemsp.dll
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wbcache.deu
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wbcache.enu
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wbcache.esn
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wbcache.fra
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wbcache.ita
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wbcache.nld
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wbcache.sve
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wbdbase.deu
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wbdbase.enu
Fri Nov 16 07:36:59 2007 => Scanning File C:\WINDOWS\System32\wbdbase.esn
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\wbdbase.fra
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\wbdbase.ita
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\wbdbase.nld
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\wbdbase.sve
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\wbemdisp.tlb
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\wdfapi.dll
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\wdfmgr.exe
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\wdigest.dll
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\wdl.trm
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\wdmaud.drv
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\webcheck.dll
Fri Nov 16 07:37:00 2007 => Scanning File C:\WINDOWS\System32\webclnt.dll
Fri Nov 16 07:37:01 2007 => Scanning File C:\WINDOWS\System32\webfldrs.msi
Fri Nov 16 07:37:02 2007 => Scanning File C:\WINDOWS\System32\webhits.dll
Fri Nov 16 07:37:02 2007 => Scanning File C:\WINDOWS\System32\webvw.dll
Fri Nov 16 07:37:02 2007 => Scanning File C:\WINDOWS\System32\wextract.exe
Fri Nov 16 07:37:02 2007 => Scanning File C:\WINDOWS\System32\wfwnet.drv
Fri Nov 16 07:37:02 2007 => Scanning File C:\WINDOWS\System32\WgaLogon.dll
Fri Nov 16 07:37:03 2007 => Scanning File C:\WINDOWS\System32\WgaTray.exe
Fri Nov 16 07:37:03 2007 => Scanning File C:\WINDOWS\System32\wiaacmgr.exe
Fri Nov 16 07:37:03 2007 => Scanning File C:\WINDOWS\System32\wiadefui.dll
Fri Nov 16 07:37:03 2007 => Scanning File C:\WINDOWS\System32\wiadss.dll
Fri Nov 16 07:37:03 2007 => Scanning File C:\WINDOWS\System32\wiascr.dll
Fri Nov 16 07:37:03 2007 => Scanning File C:\WINDOWS\System32\wiaservc.dll
Fri Nov 16 07:37:03 2007 => Scanning File C:\WINDOWS\System32\wiasf.ax
Fri Nov 16 07:37:03 2007 => Scanning File C:\WINDOWS\System32\wiashext.dll
Fri Nov 16 07:37:04 2007 => Scanning File C:\WINDOWS\System32\wiavideo.dll
Fri Nov 16 07:37:04 2007 => Scanning File C:\WINDOWS\System32\wiavusd.dll
Fri Nov 16 07:37:04 2007 => Scanning File C:\WINDOWS\System32\wifeman.dll
Fri Nov 16 07:37:04 2007 => Scanning File C:\WINDOWS\System32\win.com
Fri Nov 16 07:37:04 2007 => Scanning File C:\WINDOWS\System32\win32k.sys
Fri Nov 16 07:37:04 2007 => Scanning File C:\WINDOWS\System32\win32spl.dll
Fri Nov 16 07:37:04 2007 => Scanning File C:\WINDOWS\System32\win87em.dll
Fri Nov 16 07:37:04 2007 => Scanning File C:\WINDOWS\System32\winar30.ime
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\winbrand.dll
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\winchat.exe
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\WindowsLogon.manifest
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\winfax.dll
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\WINGB.IME
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\winhelp.hlp
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\winhlp32.exe
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\winhttp.dll
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\winime.ime
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\WININET.DLL
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\winipsec.dll
Fri Nov 16 07:37:05 2007 => Scanning File C:\WINDOWS\System32\winlogon.exe
Fri Nov 16 07:37:06 2007 => Scanning File C:\WINDOWS\System32\winmine.exe
Fri Nov 16 07:37:06 2007 => Scanning File C:\WINDOWS\System32\winmm.dll
Fri Nov 16 07:37:06 2007 => Scanning File C:\WINDOWS\System32\winmsd.exe
Fri Nov 16 07:37:06 2007 => Scanning File C:\WINDOWS\System32\winnls.dll
Fri Nov 16 07:37:06 2007 => Scanning File C:\WINDOWS\System32\winntbbu.dll
Fri Nov 16 07:37:06 2007 => Scanning File C:\WINDOWS\System32\winoldap.mod
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\WINPY.IME
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\WINPY.MB
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\winrnr.dll
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\winscard.dll
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\winsock.dll
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\WINSP.IME
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\WINSP.MB
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\winspool.drv
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\winspool.exe
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\winsrv.dll
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\winsta.dll
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\winstrm.dll
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\wintrust.dll
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\winver.exe
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\WINZM.IME
Fri Nov 16 07:37:07 2007 => Scanning File C:\WINDOWS\System32\WINZM.MB
Fri Nov 16 07:37:08 2007 => Scanning File C:\WINDOWS\System32\WISPTIS.EXE
Fri Nov 16 07:37:08 2007 => Scanning File C:\WINDOWS\System32\wkssvc.dll
Fri Nov 16 07:37:08 2007 => Scanning File C:\WINDOWS\System32\wldap32.dll
Fri Nov 16 07:37:08 2007 => Scanning File C:\WINDOWS\System32\wlnotify.dll
Fri Nov 16 07:37:08 2007 => Scanning File C:\WINDOWS\System32\wmadmod.dll
Fri Nov 16 07:37:08 2007 => Scanning File C:\WINDOWS\System32\wmadmoe.dll
Fri Nov 16 07:37:08 2007 => Scanning File C:\WINDOWS\System32\wmasf.dll
Fri Nov 16 07:37:08 2007 => Scanning File C:\WINDOWS\System32\WMDMLOG.dll
Fri Nov 16 07:37:08 2007 => Scanning File C:\WINDOWS\System32\WMDMPS.dll
Fri Nov 16 07:37:08 2007 => Scanning File C:\WINDOWS\System32\WMDRMdev.dll
Fri Nov 16 07:37:09 2007 => Scanning File C:\WINDOWS\System32\WMDRMNet.dll
Fri Nov 16 07:37:09 2007 => Scanning File C:\WINDOWS\System32\wmerrFRA.dll
Fri Nov 16 07:37:09 2007 => Scanning File C:\WINDOWS\System32\wmerror.dll
Fri Nov 16 07:37:09 2007 => Scanning File C:\WINDOWS\System32\wmi.dll
Fri Nov 16 07:37:09 2007 => Scanning File C:\WINDOWS\System32\wmidx.dll
Fri Nov 16 07:37:09 2007 => Scanning File C:\WINDOWS\System32\wmidx.ocx
Fri Nov 16 07:37:09 2007 => Scanning File C:\WINDOWS\System32\wmimgmt.msc
Fri Nov 16 07:37:09 2007 => Scanning File C:\WINDOWS\System32\wmiprop.dll
Fri Nov 16 07:37:10 2007 => Scanning File C:\WINDOWS\System32\wmnetmgr.dll
Fri Nov 16 07:37:10 2007 => *** File C:\WINDOWS\System32\wmp.dll having Size Restriction ***
Fri Nov 16 07:37:10 2007 => Scanning File C:\WINDOWS\System32\wmp.dll [**]
Fri Nov 16 07:37:10 2007 => Scanning File C:\WINDOWS\System32\wmp.ocx
Fri Nov 16 07:37:10 2007 => Scanning File C:\WINDOWS\System32\wmpasf.dll
Fri Nov 16 07:37:10 2007 => Scanning File C:\WINDOWS\System32\wmpcd.dll
Fri Nov 16 07:37:10 2007 => Scanning File C:\WINDOWS\System32\wmpcore.dll
Fri Nov 16 07:37:10 2007 => Scanning File C:\WINDOWS\System32\wmpdxm.dll
Fri Nov 16 07:37:10 2007 => Scanning File C:\WINDOWS\System32\wmpencen.dll
Fri Nov 16 07:37:11 2007 => Scanning File C:\WINDOWS\System32\wmploc.dll
Fri Nov 16 07:37:12 2007 => Scanning File C:\WINDOWS\System32\wmpns.dll
Fri Nov 16 07:37:12 2007 => Scanning File C:\WINDOWS\System32\wmpscheme.xml
Fri Nov 16 07:37:12 2007 => Scanning File C:\WINDOWS\System32\wmpshell.dll
Fri Nov 16 07:37:12 2007 => Scanning File C:\WINDOWS\System32\wmpsrcwp.dll
Fri Nov 16 07:37:13 2007 => Scanning File C:\WINDOWS\System32\wmpstub.exe
Fri Nov 16 07:37:13 2007 => Scanning File C:\WINDOWS\System32\wmpui.dll
Fri Nov 16 07:37:13 2007 => Scanning File C:\WINDOWS\System32\wmsdmod.dll
Fri Nov 16 07:37:13 2007 => Scanning File C:\WINDOWS\System32\wmsdmoe.dll
Fri Nov 16 07:37:13 2007 => Scanning File C:\WINDOWS\System32\wmsdmoe2.dll
Fri Nov 16 07:37:13 2007 => Scanning File C:\WINDOWS\System32\wmserror.dll
Fri Nov 16 07:37:14 2007 => Scanning File C:\WINDOWS\System32\wmspdmod.dll
Fri Nov 16 07:37:14 2007 => Scanning File C:\WINDOWS\System32\wmspdmoe.dll
Fri Nov 16 07:37:14 2007 => Scanning File C:\WINDOWS\System32\wmstream.dll
Fri Nov 16 07:37:14 2007 => Scanning File C:\WINDOWS\System32\wmv8dmod.dll
Fri Nov 16 07:37:15 2007 => Scanning File C:\WINDOWS\System32\wmv8ds32.ax
Fri Nov 16 07:37:15 2007 => Scanning File C:\WINDOWS\System32\wmvadvd.dll
Fri Nov 16 07:37:15 2007 => Scanning File C:\WINDOWS\System32\WMVADVE.DLL
Fri Nov 16 07:37:15 2007 => Scanning File C:\WINDOWS\System32\wmvcore.dll
Fri Nov 16 07:37:16 2007 => Scanning File C:\WINDOWS\System32\wmvcore2.dll
Fri Nov 16 07:37:16 2007 => Scanning File C:\WINDOWS\System32\wmvdmod.dll
Fri Nov 16 07:37:17 2007 => Scanning File C:\WINDOWS\System32\wmvdmoe.dll
Fri Nov 16 07:37:17 2007 => Scanning File C:\WINDOWS\System32\wmvdmoe2.dll
Fri Nov 16 07:37:17 2007 => Scanning File C:\WINDOWS\System32\wmvds32.ax
Fri Nov 16 07:37:17 2007 => Scanning File C:\WINDOWS\System32\WooDial2000.dll
Fri Nov 16 07:37:17 2007 => Scanning File C:\WINDOWS\System32\wow32.dll
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wowdeb.exe
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wowexec.exe
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wowfax.dll
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wowfaxui.dll
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wpa.dbl
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wpabaln.exe
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wpdconns.dll
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wpdmtp.dll
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wpdmtpdr.dll
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wpdmtpus.dll
Fri Nov 16 07:37:18 2007 => Scanning File C:\WINDOWS\System32\wpdsp.dll
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\wpdtrace.dll
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\wpd_ci.dll
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\wpnpinst.exe
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\write.exe
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\WS2Fix.exe
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\ws2help.dll
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\ws2_32.dll
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\wscript.exe
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\wshatm.dll
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\wshcon.dll
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\wshext.dll
Fri Nov 16 07:37:19 2007 => Scanning File C:\WINDOWS\System32\wshfr.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wship6.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wshirda.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wshisn.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wshnetbs.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wshom.ocx
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\WshRm.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wshtcpip.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wsnmp32.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wsock32.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wstdecod.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wtsapi32.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wuapi.dll
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wuapi.dll.mui
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wuauclt.exe
Fri Nov 16 07:37:20 2007 => Scanning File C:\WINDOWS\System32\wuauclt1.exe
Fri Nov 16 07:37:21 2007 => Scanning File C:\WINDOWS\System32\wuaucpl.cpl
Fri Nov 16 07:37:21 2007 => Scanning File C:\WINDOWS\System32\wuaucpl.cpl.manifest
Fri Nov 16 07:37:21 2007 => Scanning File C:\WINDOWS\System32\wuaucpl.cpl.mui
Fri Nov 16 07:37:21 2007 => Scanning File C:\WINDOWS\System32\wuaueng.dll
Fri Nov 16 07:37:21 2007 => Scanning File C:\WINDOWS\System32\wuaueng.dll.mui
Fri Nov 16 07:37:21 2007 => Scanning File C:\WINDOWS\System32\wuaueng1.dll
Fri Nov 16 07:37:21 2007 => Scanning File C:\WINDOWS\System32\wuauserv.dll
Fri Nov 16 07:37:21 2007 => Scanning File C:\WINDOWS\System32\wucltui.dll
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\wucltui.dll.mui
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\wupdmgr.exe
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\wups.dll
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\wups2.dll
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\wuweb.dll
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\wvuusrq.dll
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\wwxnkgnd.ini
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\wzcdlg.dll
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\wzcsapi.dll
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\wzcsvc.dll
Fri Nov 16 07:37:22 2007 => Scanning File C:\WINDOWS\System32\xactsrv.dll
Fri Nov 16 07:37:23 2007 => Scanning File C:\WINDOWS\System32\xcopy.exe
Fri Nov 16 07:37:23 2007 => Scanning File C:\WINDOWS\System32\xenroll.dll
Fri Nov 16 07:37:23 2007 => Scanning File C:\WINDOWS\System32\xjis.nls
Fri Nov 16 07:37:23 2007 => Scanning File C:\WINDOWS\System32\xolehlp.dll
Fri Nov 16 07:37:23 2007 => Scanning File C:\WINDOWS\System32\xpob2res.dll
Fri Nov 16 07:37:23 2007 => Scanning File C:\WINDOWS\System32\xpsp1hfm.exe
Fri Nov 16 07:37:23 2007 => Scanning File C:\WINDOWS\System32\xpsp1res.dll
Fri Nov 16 07:37:23 2007 => Scanning File C:\WINDOWS\System32\xpsp2res.dll
Fri Nov 16 07:37:24 2007 => Scanning File C:\WINDOWS\System32\xpsp3res.dll
Fri Nov 16 07:37:24 2007 => Scanning File C:\WINDOWS\System32\xvidcore.dll
Fri Nov 16 07:37:24 2007 => Scanning File C:\WINDOWS\System32\xvidvfw.dll
Fri Nov 16 07:37:24 2007 => Scanning File C:\WINDOWS\System32\zipfldr.dll
Fri Nov 16 07:37:25 2007 => Scanning File C:\WINDOWS\System32\zobhdqqo.dll.vir
Fri Nov 16 07:37:25 2007 => File C:\WINDOWS\System32\zobhdqqo.dll.vir tagged as not-a-virus:AdWare.Win32.SecToolBar.k. No Action Taken.

Fri Nov 16 07:37:25 2007 => Scanning File C:\WINDOWS\System32\zobhdqqo.dllbox
Fri Nov 16 07:37:25 2007 => Scanning File C:\WINDOWS\System32\ztvcabinet.dll
Fri Nov 16 07:37:25 2007 => Scanning File C:\WINDOWS\System32\ztvunace26.dll
Fri Nov 16 07:37:25 2007 => Scanning File C:\WINDOWS\System32\ztvunrar36.dll

havi · Answer

PARTIE 09


$$$Fri Nov 16 07:37:25 2007 => ***** Scanning Drive C:\ *****
Fri Nov 16 07:37:25 2007 => Scanning Folder: C:\*.*
Fri Nov 16 07:37:25 2007 => Scanning Folder: C:\!KillBox\*.*
Fri Nov 16 07:37:25 2007 => Scanning Folder: C:\!KillBox\Logs\*.*
Fri Nov 16 07:37:25 2007 => Scanning File C:\!KillBox\Logs\kb.log
Fri Nov 16 07:37:25 2007 => Scanning File C:\Auth.prof
Fri Nov 16 07:37:25 2007 => Scanning Folder: C:\Bases\*.*
Fri Nov 16 07:37:25 2007 => Scanning File C:\Bases\avp.klb
Fri Nov 16 07:37:26 2007 => Scanning File C:\Bases\avp.set
Fri Nov 16 07:37:26 2007 => Scanning File C:\Bases\avp.vnd
Fri Nov 16 07:37:26 2007 => Scanning File C:\Bases\base001.avc
Fri Nov 16 07:37:26 2007 => Scanning File C:\Bases\base001c.avc
Fri Nov 16 07:37:26 2007 => Scanning File C:\Bases\base002.avc
Fri Nov 16 07:37:26 2007 => Scanning File C:\Bases\base002c.avc
Fri Nov 16 07:37:26 2007 => Scanning File C:\Bases\base003.avc
Fri Nov 16 07:37:26 2007 => Scanning File C:\Bases\base003c.avc
Fri Nov 16 07:37:26 2007 => Scanning File C:\Bases\base004.avc
Fri Nov 16 07:37:26 2007 => Scanning File C:\Bases\base004c.avc
Fri Nov 16 07:37:26 2007 => Scanning File C:\Bases\base005.avc
Fri Nov 16 07:37:27 2007 => Scanning File C:\Bases\base005c.avc
Fri Nov 16 07:37:27 2007 => Scanning File C:\Bases\base006.avc
Fri Nov 16 07:37:27 2007 => Scanning File C:\Bases\base006c.avc
Fri Nov 16 07:37:27 2007 => Scanning File C:\Bases\base007.avc
Fri Nov 16 07:37:27 2007 => Scanning File C:\Bases\base007c.avc
Fri Nov 16 07:37:27 2007 => Scanning File C:\Bases\base008.avc
Fri Nov 16 07:37:27 2007 => Scanning File C:\Bases\base008c.avc
Fri Nov 16 07:37:27 2007 => Scanning File C:\Bases\base009.avc
Fri Nov 16 07:37:27 2007 => Scanning File C:\Bases\base009c.avc
Fri Nov 16 07:37:27 2007 => Scanning File C:\Bases\base010.avc
Fri Nov 16 07:37:28 2007 => Scanning File C:\Bases\base010c.avc
Fri Nov 16 07:37:28 2007 => Scanning File C:\Bases\base011.avc
Fri Nov 16 07:37:28 2007 => Scanning File C:\Bases\base011c.avc
Fri Nov 16 07:37:28 2007 => Scanning File C:\Bases\base012.avc
Fri Nov 16 07:37:28 2007 => Scanning File C:\Bases\base012c.avc
Fri Nov 16 07:37:28 2007 => Scanning File C:\Bases\base013.avc
Fri Nov 16 07:37:28 2007 => Scanning File C:\Bases\base013c.avc
Fri Nov 16 07:37:28 2007 => Scanning File C:\Bases\base014.avc
Fri Nov 16 07:37:28 2007 => Scanning File C:\Bases\base014c.avc
Fri Nov 16 07:37:28 2007 => Scanning File C:\Bases\base015.avc
Fri Nov 16 07:37:29 2007 => Scanning File C:\Bases\base015c.avc
Fri Nov 16 07:37:29 2007 => Scanning File C:\Bases\base016.avc
Fri Nov 16 07:37:29 2007 => Scanning File C:\Bases\base016c.avc
Fri Nov 16 07:37:29 2007 => Scanning File C:\Bases\base017.avc
Fri Nov 16 07:37:29 2007 => Scanning File C:\Bases\base017c.avc
Fri Nov 16 07:37:29 2007 => Scanning File C:\Bases\base018.avc
Fri Nov 16 07:37:29 2007 => Scanning File C:\Bases\base018c.avc
Fri Nov 16 07:37:29 2007 => Scanning File C:\Bases\base019.avc
Fri Nov 16 07:37:29 2007 => Scanning File C:\Bases\base019c.avc
Fri Nov 16 07:37:30 2007 => Scanning File C:\Bases\base020.avc
Fri Nov 16 07:37:30 2007 => Scanning File C:\Bases\base020c.avc
Fri Nov 16 07:37:30 2007 => Scanning File C:\Bases\base021.avc
Fri Nov 16 07:37:30 2007 => Scanning File C:\Bases\base021c.avc
Fri Nov 16 07:37:30 2007 => Scanning File C:\Bases\base022.avc
Fri Nov 16 07:37:30 2007 => Scanning File C:\Bases\base022c.avc
Fri Nov 16 07:37:30 2007 => Scanning File C:\Bases\base023.avc
Fri Nov 16 07:37:30 2007 => Scanning File C:\Bases\base023c.avc
Fri Nov 16 07:37:30 2007 => Scanning File C:\Bases\base024.avc
Fri Nov 16 07:37:31 2007 => Scanning File C:\Bases\base024c.avc
Fri Nov 16 07:37:31 2007 => Scanning File C:\Bases\base025.avc
Fri Nov 16 07:37:31 2007 => Scanning File C:\Bases\base025c.avc
Fri Nov 16 07:37:31 2007 => Scanning File C:\Bases\base026.avc
Fri Nov 16 07:37:31 2007 => Scanning File C:\Bases\base026c.avc
Fri Nov 16 07:37:31 2007 => Scanning File C:\Bases\base027.avc
Fri Nov 16 07:37:31 2007 => Scanning File C:\Bases\base027c.avc
Fri Nov 16 07:37:31 2007 => Scanning File C:\Bases\base028.avc
Fri Nov 16 07:37:31 2007 => Scanning File C:\Bases\base028c.avc
Fri Nov 16 07:37:31 2007 => Scanning File C:\Bases\base029.avc
Fri Nov 16 07:37:31 2007 => Scanning File C:\Bases\base029c.avc
Fri Nov 16 07:37:32 2007 => Scanning File C:\Bases\base030.avc
Fri Nov 16 07:37:32 2007 => Scanning File C:\Bases\base030c.avc
Fri Nov 16 07:37:32 2007 => Scanning File C:\Bases\base031.avc
Fri Nov 16 07:37:32 2007 => Scanning File C:\Bases\base031c.avc
Fri Nov 16 07:37:32 2007 => Scanning File C:\Bases\base032.avc
Fri Nov 16 07:37:32 2007 => Scanning File C:\Bases\base032c.avc
Fri Nov 16 07:37:32 2007 => Scanning File C:\Bases\base033.avc
Fri Nov 16 07:37:32 2007 => Scanning File C:\Bases\base033c.avc
Fri Nov 16 07:37:33 2007 => Scanning File C:\Bases\base034.avc
Fri Nov 16 07:37:33 2007 => Scanning File C:\Bases\base034c.avc
Fri Nov 16 07:37:33 2007 => Scanning File C:\Bases\base035.avc
Fri Nov 16 07:37:33 2007 => Scanning File C:\Bases\base035c.avc
Fri Nov 16 07:37:33 2007 => Scanning File C:\Bases\base036.avc
Fri Nov 16 07:37:33 2007 => Scanning File C:\Bases\base036c.avc
Fri Nov 16 07:37:33 2007 => Scanning File C:\Bases\base037.avc
Fri Nov 16 07:37:33 2007 => Scanning File C:\Bases\base037c.avc
Fri Nov 16 07:37:33 2007 => Scanning File C:\Bases\base038.avc
Fri Nov 16 07:37:34 2007 => Scanning File C:\Bases\base038c.avc
Fri Nov 16 07:37:34 2007 => Scanning File C:\Bases\base039.avc
Fri Nov 16 07:37:34 2007 => Scanning File C:\Bases\base039c.avc
Fri Nov 16 07:37:34 2007 => Scanning File C:\Bases\base040.avc
Fri Nov 16 07:37:34 2007 => Scanning File C:\Bases\base040c.avc
Fri Nov 16 07:37:34 2007 => Scanning File C:\Bases\base041.avc
Fri Nov 16 07:37:34 2007 => Scanning File C:\Bases\base041c.avc
Fri Nov 16 07:37:34 2007 => Scanning File C:\Bases\base042.avc
Fri Nov 16 07:37:35 2007 => Scanning File C:\Bases\base042c.avc
Fri Nov 16 07:37:35 2007 => Scanning File C:\Bases\base043.avc
Fri Nov 16 07:37:35 2007 => Scanning File C:\Bases\base043c.avc
Fri Nov 16 07:37:35 2007 => Scanning File C:\Bases\base044.avc
Fri Nov 16 07:37:36 2007 => Scanning File C:\Bases\base044c.avc
Fri Nov 16 07:37:36 2007 => Scanning File C:\Bases\base045.avc
Fri Nov 16 07:37:36 2007 => Scanning File C:\Bases\base045c.avc
Fri Nov 16 07:37:36 2007 => Scanning File C:\Bases\base046.avc
Fri Nov 16 07:37:36 2007 => Scanning File C:\Bases\base046c.avc
Fri Nov 16 07:37:36 2007 => Scanning File C:\Bases\base047.avc
Fri Nov 16 07:37:36 2007 => Scanning File C:\Bases\base047c.avc
Fri Nov 16 07:37:37 2007 => Scanning File C:\Bases\base048.avc
Fri Nov 16 07:37:37 2007 => Scanning File C:\Bases\base048c.avc
Fri Nov 16 07:37:37 2007 => Scanning File C:\Bases\base049.avc
Fri Nov 16 07:37:37 2007 => Scanning File C:\Bases\base049c.avc
Fri Nov 16 07:37:37 2007 => Scanning File C:\Bases\base050.avc
Fri Nov 16 07:37:37 2007 => Scanning File C:\Bases\base050c.avc
Fri Nov 16 07:37:37 2007 => Scanning File C:\Bases\base051.avc
Fri Nov 16 07:37:37 2007 => Scanning File C:\Bases\base051c.avc
Fri Nov 16 07:37:37 2007 => Scanning File C:\Bases\base052.avc
Fri Nov 16 07:37:38 2007 => Scanning File C:\Bases\base052c.avc
Fri Nov 16 07:37:38 2007 => Scanning File C:\Bases\base053.avc
Fri Nov 16 07:37:38 2007 => Scanning File C:\Bases\base053c.avc
Fri Nov 16 07:37:38 2007 => Scanning File C:\Bases\base054.avc
Fri Nov 16 07:37:38 2007 => Scanning File C:\Bases\base054c.avc
Fri Nov 16 07:37:38 2007 => Scanning File C:\Bases\base055.avc
Fri Nov 16 07:37:38 2007 => Scanning File C:\Bases\base055c.avc
Fri Nov 16 07:37:38 2007 => Scanning File C:\Bases\base056.avc
Fri Nov 16 07:37:38 2007 => Scanning File C:\Bases\base056c.avc
Fri Nov 16 07:37:38 2007 => Scanning File C:\Bases\base057.avc
Fri Nov 16 07:37:39 2007 => Scanning File C:\Bases\base057c.avc
Fri Nov 16 07:37:39 2007 => Scanning File C:\Bases\base058.avc
Fri Nov 16 07:37:39 2007 => Scanning File C:\Bases\base058c.avc
Fri Nov 16 07:37:39 2007 => Scanning File C:\Bases\base059.avc
Fri Nov 16 07:37:39 2007 => Scanning File C:\Bases\base059c.avc
Fri Nov 16 07:37:39 2007 => Scanning File C:\Bases\base060.avc
Fri Nov 16 07:37:39 2007 => Scanning File C:\Bases\base060c.avc
Fri Nov 16 07:37:39 2007 => Scanning File C:\Bases\base061.avc
Fri Nov 16 07:37:39 2007 => Scanning File C:\Bases\base061c.avc
Fri Nov 16 07:37:39 2007 => Scanning File C:\Bases\base062.avc
Fri Nov 16 07:37:40 2007 => Scanning File C:\Bases\base062c.avc
Fri Nov 16 07:37:40 2007 => Scanning File C:\Bases\base063.avc
Fri Nov 16 07:37:40 2007 => Scanning File C:\Bases\base063c.avc
Fri Nov 16 07:37:40 2007 => Scanning File C:\Bases\base064.avc
Fri Nov 16 07:37:40 2007 => Scanning File C:\Bases\base064c.avc
Fri Nov 16 07:37:40 2007 => Scanning File C:\Bases\base065.avc
Fri Nov 16 07:37:40 2007 => Scanning File C:\Bases\base065c.avc
Fri Nov 16 07:37:40 2007 => Scanning File C:\Bases\base066.avc
Fri Nov 16 07:37:40 2007 => Scanning File C:\Bases\base067.avc
Fri Nov 16 07:37:41 2007 => Scanning File C:\Bases\base068.avc
Fri Nov 16 07:37:41 2007 => Scanning File C:\Bases\base069.avc
Fri Nov 16 07:37:41 2007 => Scanning File C:\Bases\base070.avc
Fri Nov 16 07:37:41 2007 => Scanning File C:\Bases\base071.avc
Fri Nov 16 07:37:41 2007 => Scanning File C:\Bases\base072.avc
Fri Nov 16 07:37:41 2007 => Scanning File C:\Bases\base073.avc
Fri Nov 16 07:37:41 2007 => Scanning File C:\Bases\base074.avc
Fri Nov 16 07:37:41 2007 => Scanning File C:\Bases\base075.avc
Fri Nov 16 07:37:41 2007 => Scanning File C:\Bases\base076.avc
Fri Nov 16 07:37:41 2007 => Scanning File C:\Bases\base077.avc
Fri Nov 16 07:37:42 2007 => Scanning File C:\Bases\base078.avc
Fri Nov 16 07:37:42 2007 => Scanning File C:\Bases\base079.avc
Fri Nov 16 07:37:42 2007 => Scanning File C:\Bases\base080.avc
Fri Nov 16 07:37:42 2007 => Scanning File C:\Bases\base081.avc
Fri Nov 16 07:37:42 2007 => Scanning File C:\Bases\base082.avc
Fri Nov 16 07:37:42 2007 => Scanning File C:\Bases\base083.avc
Fri Nov 16 07:37:42 2007 => Scanning File C:\Bases\base084.avc
Fri Nov 16 07:37:42 2007 => Scanning File C:\Bases\base085.avc
Fri Nov 16 07:37:42 2007 => Scanning File C:\Bases\base086.avc
Fri Nov 16 07:37:42 2007 => Scanning File C:\Bases\base087.avc
Fri Nov 16 07:37:42 2007 => Scanning File C:\Bases\base088.avc
Fri Nov 16 07:37:43 2007 => Scanning File C:\Bases\base089.avc
Fri Nov 16 07:37:43 2007 => Scanning File C:\Bases\base090.avc
Fri Nov 16 07:37:43 2007 => Scanning File C:\Bases\base091.avc
Fri Nov 16 07:37:43 2007 => Scanning File C:\Bases\base092.avc
Fri Nov 16 07:37:43 2007 => Scanning File C:\Bases\base093.avc
Fri Nov 16 07:37:43 2007 => Scanning File C:\Bases\base094.avc
Fri Nov 16 07:37:43 2007 => Scanning File C:\Bases\base095.avc
Fri Nov 16 07:37:43 2007 => Scanning File C:\Bases\base096.avc
Fri Nov 16 07:37:43 2007 => Scanning File C:\Bases\base097.avc
Fri Nov 16 07:37:43 2007 => Scanning File C:\Bases\base098.avc
Fri Nov 16 07:37:44 2007 => Scanning File C:\Bases\base099.avc
Fri Nov 16 07:37:44 2007 => Scanning File C:\Bases\base100.avc
Fri Nov 16 07:37:44 2007 => Scanning File C:\Bases\base101.avc
Fri Nov 16 07:37:44 2007 => Scanning File C:\Bases\base102.avc
Fri Nov 16 07:37:44 2007 => Scanning File C:\Bases\base103.avc
Fri Nov 16 07:37:44 2007 => Scanning File C:\Bases\base104.avc
Fri Nov 16 07:37:44 2007 => Scanning File C:\Bases\base105.avc
Fri Nov 16 07:37:44 2007 => Scanning File C:\Bases\base106.avc
Fri Nov 16 07:37:44 2007 => Scanning File C:\Bases\base107.avc
Fri Nov 16 07:37:44 2007 => Scanning File C:\Bases\base108.avc
Fri Nov 16 07:37:44 2007 => Scanning File C:\Bases\base109.avc
Fri Nov 16 07:37:45 2007 => Scanning File C:\Bases\base110.avc
Fri Nov 16 07:37:45 2007 => Scanning File C:\Bases\base111.avc
Fri Nov 16 07:37:45 2007 => Scanning File C:\Bases\base112.avc
Fri Nov 16 07:37:45 2007 => Scanning File C:\Bases\base113.avc
Fri Nov 16 07:37:45 2007 => Scanning File C:\Bases\base114.avc
Fri Nov 16 07:37:45 2007 => Scanning File C:\Bases\base115.avc
Fri Nov 16 07:37:45 2007 => Scanning File C:\Bases\base116.avc
Fri Nov 16 07:37:45 2007 => Scanning File C:\Bases\base117.avc
Fri Nov 16 07:37:45 2007 => Scanning File C:\Bases\base118.avc
Fri Nov 16 07:37:45 2007 => Scanning File C:\Bases\base119.avc
Fri Nov 16 07:37:45 2007 => Scanning File C:\Bases\base120.avc
Fri Nov 16 07:37:46 2007 => Scanning File C:\Bases\base121.avc
Fri Nov 16 07:37:46 2007 => Scanning File C:\Bases\base122.avc
Fri Nov 16 07:37:46 2007 => Scanning File C:\Bases\base123.avc
Fri Nov 16 07:37:46 2007 => Scanning File C:\Bases\base124.avc
Fri Nov 16 07:37:46 2007 => Scanning File C:\Bases\base125.avc
Fri Nov 16 07:37:46 2007 => Scanning File C:\Bases\base126.avc
Fri Nov 16 07:37:46 2007 => Scanning File C:\Bases\base127.avc
Fri Nov 16 07:37:46 2007 => Scanning File C:\Bases\base128.avc
Fri Nov 16 07:37:46 2007 => Scanning File C:\Bases\base129.avc
Fri Nov 16 07:37:46 2007 => Scanning File C:\Bases\base130.avc
Fri Nov 16 07:37:47 2007 => Scanning File C:\Bases\base131.avc
Fri Nov 16 07:37:47 2007 => Scanning File C:\Bases\base132.avc
Fri Nov 16 07:37:47 2007 => Scanning File C:\Bases\base133.avc
Fri Nov 16 07:37:47 2007 => Scanning File C:\Bases\base134.avc
Fri Nov 16 07:37:47 2007 => Scanning File C:\Bases\base135.avc
Fri Nov 16 07:37:47 2007 => Scanning File C:\Bases\base136.avc
Fri Nov 16 07:37:47 2007 => Scanning File C:\Bases\base137.avc
Fri Nov 16 07:37:47 2007 => Scanning File C:\Bases\base138.avc
Fri Nov 16 07:37:47 2007 => Scanning File C:\Bases\base139.avc
Fri Nov 16 07:37:47 2007 => Scanning File C:\Bases\base140.avc
Fri Nov 16 07:37:47 2007 => Scanning File C:\Bases\base141.avc
Fri Nov 16 07:37:48 2007 => Scanning File C:\Bases\base142.avc
Fri Nov 16 07:37:48 2007 => Scanning File C:\Bases\base143.avc
Fri Nov 16 07:37:48 2007 => Scanning File C:\Bases\base144.avc
Fri Nov 16 07:37:48 2007 => Scanning File C:\Bases\base145.avc
Fri Nov 16 07:37:48 2007 => Scanning File C:\Bases\base146.avc
Fri Nov 16 07:37:48 2007 => Scanning File C:\Bases\base147.avc
Fri Nov 16 07:37:48 2007 => Scanning File C:\Bases\base148.avc
Fri Nov 16 07:37:48 2007 => Scanning File C:\Bases\base149.avc
Fri Nov 16 07:37:48 2007 => Scanning File C:\Bases\base150.avc
Fri Nov 16 07:37:48 2007 => Scanning File C:\Bases\base151.avc
Fri Nov 16 07:37:49 2007 => Scanning File C:\Bases\base152.avc
Fri Nov 16 07:37:49 2007 => Scanning File C:\Bases\base153.avc
Fri Nov 16 07:37:49 2007 => Scanning File C:\Bases\base154.avc
Fri Nov 16 07:37:49 2007 => Scanning File C:\Bases\base155.avc
Fri Nov 16 07:37:49 2007 => Scanning File C:\Bases\base156.avc
Fri Nov 16 07:37:49 2007 => Scanning File C:\Bases\base157.avc
Fri Nov 16 07:37:49 2007 => Scanning File C:\Bases\base158.avc
Fri Nov 16 07:37:49 2007 => Scanning File C:\Bases\base159.avc
Fri Nov 16 07:37:49 2007 => Scanning File C:\Bases\base999.avc
Fri Nov 16 07:37:49 2007 => Scanning File C:\Bases\ca.avc
Fri Nov 16 07:37:50 2007 => Scanning File C:\Bases\chuka.avc
Fri Nov 16 07:37:50 2007 => Scanning File C:\Bases\daily-ec.avc
Fri Nov 16 07:37:50 2007 => Scanning File C:\Bases\daily-ex.avc
Fri Nov 16 07:37:50 2007 => Scanning File C:\Bases\daily.avc
Fri Nov 16 07:37:50 2007 => Scanning File C:\Bases\dailyc.avc
Fri Nov 16 07:37:50 2007 => Scanning File C:\Bases\eicar.avc
Fri Nov 16 07:37:50 2007 => Scanning File C:\Bases\engine.cfg
Fri Nov 16 07:37:50 2007 => Scanning File C:\Bases\engine.dt
Fri Nov 16 07:37:50 2007 => Scanning File C:\Bases\ext001.avc
Fri Nov 16 07:37:50 2007 => Scanning File C:\Bases\ext001c.avc
Fri Nov 16 07:37:50 2007 => Scanning File C:\Bases\ext002.avc
Fri Nov 16 07:37:50 2007 => Scanning File C:\Bases\ext002c.avc
Fri Nov 16 07:37:50 2007 => Scanning File C:\Bases\ext003.avc
Fri Nov 16 07:37:50 2007 => Scanning File C:\Bases\ext003c.avc
Fri Nov 16 07:37:51 2007 => Scanning File C:\Bases\ext004.avc
Fri Nov 16 07:37:51 2007 => Scanning File C:\Bases\ext004c.avc
Fri Nov 16 07:37:51 2007 => Scanning File C:\Bases\ext005.avc
Fri Nov 16 07:37:51 2007 => Scanning File C:\Bases\ext005c.avc
Fri Nov 16 07:37:51 2007 => Scanning File C:\Bases\ext006.avc
Fri Nov 16 07:37:51 2007 => Scanning File C:\Bases\ext006c.avc
Fri Nov 16 07:37:51 2007 => Scanning File C:\Bases\ext007.avc
Fri Nov 16 07:37:51 2007 => Scanning File C:\Bases\ext008.avc
Fri Nov 16 07:37:51 2007 => Scanning File C:\Bases\ext009.avc
Fri Nov 16 07:37:51 2007 => Scanning File C:\Bases\ext999.avc
Fri Nov 16 07:37:51 2007 => Scanning File C:\Bases\fa.avc
Fri Nov 16 07:37:51 2007 => Scanning File C:\Bases\fa001.avc
Fri Nov 16 07:37:52 2007 => Scanning File C:\Bases\gen001.avc
Fri Nov 16 07:37:52 2007 => Scanning File C:\Bases\gen002.avc
Fri Nov 16 07:37:52 2007 => Scanning File C:\Bases\gen003.avc
Fri Nov 16 07:37:52 2007 => Scanning File C:\Bases\gen004.avc
Fri Nov 16 07:37:52 2007 => Scanning File C:\Bases\gen005.avc
Fri Nov 16 07:37:52 2007 => Scanning File C:\Bases\gen999.avc
Fri Nov 16 07:37:52 2007 => Scanning File C:\Bases\kernel.avc
Fri Nov 16 07:37:52 2007 => Scanning File C:\Bases\krn001.avc
Fri Nov 16 07:37:52 2007 => Scanning File C:\Bases\krn002.avc
Fri Nov 16 07:37:52 2007 => Scanning File C:\Bases\krn003.avc
Fri Nov 16 07:37:52 2007 => Scanning File C:\Bases\krn004.avc
Fri Nov 16 07:37:52 2007 => Scanning File C:\Bases\krn005.avc
Fri Nov 16 07:37:53 2007 => Scanning File C:\Bases\krndos.avc
Fri Nov 16 07:37:53 2007 => Scanning File C:\Bases\krnengn.avc
Fri Nov 16 07:37:53 2007 => Scanning File C:\Bases\krnexe.avc
Fri Nov 16 07:37:53 2007 => Scanning File C:\Bases\krnexe32.avc
Fri Nov 16 07:37:53 2007 => Scanning File C:\Bases\krnjava.avc
Fri Nov 16 07:37:53 2007 => Scanning File C:\Bases\krnmacro.avc
Fri Nov 16 07:37:53 2007 => Scanning File C:\Bases\krnunp.avc
Fri Nov 16 07:37:54 2007 => Scanning File C:\Bases\mail.avc
Fri Nov 16 07:37:54 2007 => Scanning File C:\Bases\ocr.avc
Fri Nov 16 07:37:54 2007 => Scanning File C:\Bases\smart.avc
Fri Nov 16 07:37:54 2007 => Scanning File C:\Bases\unp000.avc
Fri Nov 16 07:37:54 2007 => Scanning File C:\Bases\unp001.avc
Fri Nov 16 07:37:54 2007 => Scanning File C:\Bases\unp002.avc
Fri Nov 16 07:37:54 2007 => Scanning File C:\Bases\unp003.avc
Fri Nov 16 07:37:54 2007 => Scanning File C:\Bases\unp004.avc
Fri Nov 16 07:37:54 2007 => Scanning File C:\Bases\unp005.avc
Fri Nov 16 07:37:54 2007 => Scanning File C:\Bases\unp006.avc
Fri Nov 16 07:37:54 2007 => Scanning File C:\Bases\unp007.avc
Fri Nov 16 07:37:55 2007 => Scanning File C:\Bases\unp008.avc
Fri Nov 16 07:37:55 2007 => Scanning File C:\Bases\unp009.avc
Fri Nov 16 07:37:55 2007 => Scanning File C:\Bases\unp010.avc
Fri Nov 16 07:37:55 2007 => Scanning File C:\Bases\unp011.avc
Fri Nov 16 07:37:55 2007 => Scanning File C:\Bases\unp012.avc
Fri Nov 16 07:37:55 2007 => Scanning File C:\Bases\unp013.avc
Fri Nov 16 07:37:55 2007 => Scanning File C:\Bases\unp014.avc
Fri Nov 16 07:37:55 2007 => Scanning File C:\Bases\unp015.avc
Fri Nov 16 07:37:55 2007 => Scanning File C:\Bases\unp016.avc
Fri Nov 16 07:37:55 2007 => Scanning File C:\Bases\unp017.avc
Fri Nov 16 07:37:55 2007 => Scanning File C:\Bases\unp018.avc
Fri Nov 16 07:37:56 2007 => Scanning File C:\Bases\unp019.avc
Fri Nov 16 07:37:56 2007 => Scanning File C:\Bases\unp020.avc
Fri Nov 16 07:37:56 2007 => Scanning File C:\Bases\unp021.avc
Fri Nov 16 07:37:56 2007 => Scanning File C:\Bases\unp022.avc
Fri Nov 16 07:37:56 2007 => Scanning File C:\Bases\unp023.avc
Fri Nov 16 07:37:56 2007 => Scanning File C:\Bases\unp024.avc
Fri Nov 16 07:37:56 2007 => Scanning File C:\Bases\unp025.avc
Fri Nov 16 07:37:56 2007 => Scanning File C:\Bases\unp026.avc
Fri Nov 16 07:37:56 2007 => Scanning File C:\Bases\unp027.avc
Fri Nov 16 07:37:56 2007 => Scanning File C:\Bases\unp028.avc
Fri Nov 16 07:37:56 2007 => Scanning File C:\Bases\unp029.avc
Fri Nov 16 07:37:57 2007 => Scanning File C:\Bases\unp030.avc
Fri Nov 16 07:37:57 2007 => Scanning File C:\Bases\unp031.avc
Fri Nov 16 07:37:57 2007 => Scanning File C:\Bases\unp032.avc
Fri Nov 16 07:37:57 2007 => Scanning File C:\Bases\unp033.avc
Fri Nov 16 07:37:57 2007 => Scanning File C:\Bases\unp034.avc
Fri Nov 16 07:37:57 2007 => Scanning File C:\Bases\unp035.avc
Fri Nov 16 07:37:57 2007 => Scanning File C:\Bases\unp036.avc
Fri Nov 16 07:37:57 2007 => Scanning File C:\Bases\unp037.avc
Fri Nov 16 07:37:57 2007 => Scanning File C:\Bases\unp038.avc
Fri Nov 16 07:37:57 2007 => Scanning File C:\Bases\unp039.avc
Fri Nov 16 07:37:57 2007 => Scanning File C:\boot.ini
Fri Nov 16 07:37:57 2007 => Scanning File C:\Bootfont.bin
Fri Nov 16 07:37:57 2007 => Scanning File C:\ComboFix.txt
Fri Nov 16 07:37:58 2007 => Scanning File C:\ComboFix2.txt
Fri Nov 16 07:37:58 2007 => Scanning Folder: C:\Config.Msi\*.*
Fri Nov 16 07:37:58 2007 => Scanning Folder: C:\Dev-Cpp\*.*
Fri Nov 16 07:37:58 2007 => Scanning Folder: C:\Dev-Cpp\bin\*.*
Fri Nov 16 07:37:58 2007 => Scanning File C:\Dev-Cpp\bin\addr2line.exe
Fri Nov 16 07:37:58 2007 => Scanning File C:\Dev-Cpp\bin\ar.exe
Fri Nov 16 07:37:59 2007 => Scanning File C:\Dev-Cpp\bin\as.exe
Fri Nov 16 07:37:59 2007 => Scanning File C:\Dev-Cpp\bin\c++.exe
Fri Nov 16 07:37:59 2007 => Scanning File C:\Dev-Cpp\bin\c++filt.exe
Fri Nov 16 07:38:00 2007 => Scanning File C:\Dev-Cpp\bin\cpp.exe
Fri Nov 16 07:38:00 2007 => Scanning File C:\Dev-Cpp\bin\dlltool.exe
Fri Nov 16 07:38:00 2007 => Scanning File C:\Dev-Cpp\bin\dllwrap.exe
Fri Nov 16 07:38:00 2007 => Scanning File C:\Dev-Cpp\bin\g++.exe
Fri Nov 16 07:38:01 2007 => Scanning File C:\Dev-Cpp\bin\gcc.exe
Fri Nov 16 07:38:01 2007 => Scanning File C:\Dev-Cpp\bin\gccbug
Fri Nov 16 07:38:01 2007 => Scanning File C:\Dev-Cpp\bin\gcov.exe
Fri Nov 16 07:38:01 2007 => Scanning File C:\Dev-Cpp\bin\gdb.exe
Fri Nov 16 07:38:01 2007 => Scanning File C:\Dev-Cpp\bin\gprof.exe
Fri Nov 16 07:38:02 2007 => Scanning File C:\Dev-Cpp\bin\ld.exe
Fri Nov 16 07:38:02 2007 => Scanning File C:\Dev-Cpp\bin\make.exe
Fri Nov 16 07:38:03 2007 => Scanning File C:\Dev-Cpp\bin\mingw32-c++.exe
Fri Nov 16 07:38:03 2007 => Scanning File C:\Dev-Cpp\bin\mingw32-g++.exe
Fri Nov 16 07:38:03 2007 => Scanning File C:\Dev-Cpp\bin\mingw32-gcc-3.4.2
Fri Nov 16 07:38:03 2007 => Scanning File C:\Dev-Cpp\bin\mingw32-gcc.exe
Fri Nov 16 07:38:03 2007 => Scanning File C:\Dev-Cpp\bin\mingw32-make.exe
Fri Nov 16 07:38:03 2007 => Scanning File C:\Dev-Cpp\bin\mingwm10.dll
Fri Nov 16 07:38:03 2007 => Scanning File C:\Dev-Cpp\bin
m.exe
Fri Nov 16 07:38:04 2007 => Scanning File C:\Dev-Cpp\bin\objcopy.exe
Fri Nov 16 07:38:04 2007 => Scanning File C:\Dev-Cpp\bin\objdump.exe
Fri Nov 16 07:38:05 2007 => Scanning File C:\Dev-Cpp\binanlib.exe
Fri Nov 16 07:38:05 2007 => Scanning File C:\Dev-Cpp\bineadelf.exe
Fri Nov 16 07:38:06 2007 => Scanning File C:\Dev-Cpp\binm.exe
Fri Nov 16 07:38:06 2007 => Scanning File C:\Dev-Cpp\bin\size.exe
Fri Nov 16 07:38:06 2007 => Scanning File C:\Dev-Cpp\bin\strings.exe
Fri Nov 16 07:38:07 2007 => Scanning File C:\Dev-Cpp\bin\strip.exe
Fri Nov 16 07:38:07 2007 => Scanning File C:\Dev-Cpp\bin\windres.exe
Fri Nov 16 07:38:08 2007 => Scanning File C:\Dev-Cpp\copying.txt
Fri Nov 16 07:38:08 2007 => Scanning File C:\Dev-Cpp\devcpp.exe
Fri Nov 16 07:38:11 2007 => Scanning File C:\Dev-Cpp\devcpp.map
Fri Nov 16 07:38:11 2007 => Scanning Folder: C:\Dev-Cpp\Examples\*.*
Fri Nov 16 07:38:11 2007 => Scanning Folder: C:\Dev-Cpp\Examples\FileEditor\*.*
Fri Nov 16 07:38:11 2007 => Scanning File C:\Dev-Cpp\Examples\FileEditor\FileEditor.dev
Fri Nov 16 07:38:11 2007 => Scanning File C:\Dev-Cpp\Examples\FileEditor\FileEditor.ico
Fri Nov 16 07:38:11 2007 => Scanning File C:\Dev-Cpp\Examples\FileEditor\FileEditor.rc
Fri Nov 16 07:38:11 2007 => Scanning File C:\Dev-Cpp\Examples\FileEditor\Main.c
Fri Nov 16 07:38:11 2007 => Scanning File C:\Dev-Cpp\Examples\FileEditor\Main.h
Fri Nov 16 07:38:11 2007 => Scanning File C:\Dev-Cpp\Examples\FileEditor\Menu.rc
Fri Nov 16 07:38:12 2007 => Scanning Folder: C:\Dev-Cpp\Examples\Hello\*.*
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\Hello\Hello.cpp
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\Hello\Hello.dev
Fri Nov 16 07:38:12 2007 => Scanning Folder: C:\Dev-Cpp\Examples\Jackpot\*.*
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\Jackpot\Jackpot.dev
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\Jackpot\main.cpp
Fri Nov 16 07:38:12 2007 => Scanning Folder: C:\Dev-Cpp\Examples\MDIApp\*.*
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\MDIApp\MdiApp.dev
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\MDIApp\MdiApp.rc
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\MDIApp\mdi_res.rc
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\MDIApp\mdi_unit.c
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\MDIApp\mdi_unit.h
Fri Nov 16 07:38:12 2007 => Scanning Folder: C:\Dev-Cpp\Examples\OpenGL\*.*
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\OpenGL\Main.cpp
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\OpenGL\mainicon.ico
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\OpenGL\OpenGL.dev
Fri Nov 16 07:38:12 2007 => Scanning Folder: C:\Dev-Cpp\Examples\Simpwin\*.*
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\Simpwin\Main.cpp
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\Simpwin\Simple.dev
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\Simpwin\Simple.ico
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\Simpwin\Simple.rc
Fri Nov 16 07:38:12 2007 => Scanning Folder: C:\Dev-Cpp\Examples\WinAnim\*.*
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\WinAnim\Anim.dev
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\WinAnim\Anim.ico
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\WinAnim\Anim.rc
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\WinAnim\ball.bmp
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\WinAnim\ballmask.bmp
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\WinAnim\Images.rc
Fri Nov 16 07:38:12 2007 => Scanning File C:\Dev-Cpp\Examples\WinAnim\Main.c
Fri Nov 16 07:38:12 2007 => Scanning Folder: C:\Dev-Cpp\Examples\WinMenu\*.*
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Examples\WinMenu\main.cpp
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Examples\WinMenu\main.h
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Examples\WinMenu\Rsrc.rc
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Examples\WinMenu\WinMenu.dev
Fri Nov 16 07:38:13 2007 => Scanning Folder: C:\Dev-Cpp\Examples\WinTest\*.*
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Examples\WinTest\Test.c
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Examples\WinTest\WinTest.dev
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Examples\WinTest\WinTest.ico
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Examples\WinTest\WinTest.rc
Fri Nov 16 07:38:13 2007 => Scanning Folder: C:\Dev-Cpp\Help\*.*
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Help\devcpp.CNT
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Help\devcpp.HLP
Fri Nov 16 07:38:13 2007 => Scanning Folder: C:\Dev-Cpp\Icons\*.*
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Icons\Book.ico
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Icons\Communication.ico
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Icons\Console.ico
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Icons\Crazy.ico
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Icons\Danger.ico
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Icons\Documentation.ico
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Icons\Edit.ico
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Icons\Editor.ico
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Icons\File Management.ico
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Icons\Folder.ico
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Icons\Food.ico
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Icons\Games.ico
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Icons\Goofy.ico
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Icons\mainicon.ico
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Icons\Movie.ico
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Icons\Multimedia.ico
Fri Nov 16 07:38:13 2007 => Scanning File C:\Dev-Cpp\Icons\Paint.ico
Fri Nov 16 07:38:14 2007 => Scanning File C:\Dev-Cpp\Icons\Rescue.ico
Fri Nov 16 07:38:14 2007 => Scanning File C:\Dev-Cpp\Icons\Smile.ico
Fri Nov 16 07:38:14 2007 => Scanning File C:\Dev-Cpp\Icons\Software.ico
Fri Nov 16 07:38:14 2007 => Scanning File C:\Dev-Cpp\Icons\Ufo.ico
Fri Nov 16 07:38:14 2007 => Scanning File C:\Dev-Cpp\Icons\Window.ico
Fri Nov 16 07:38:14 2007 => Scanning Folder: C:\Dev-Cpp\include\*.*
Fri Nov 16 07:38:14 2007 => Scanning File C:\Dev-Cpp\include\accctrl.h
Fri Nov 16 07:38:14 2007 => Scanning File C:\Dev-Cpp\include\aclapi.h
Fri Nov 16 07:38:14 2007 => Scanning File C:\Dev-Cpp\include\aclui.h
Fri Nov 16 07:38:14 2007 => Scanning File C:\Dev-Cpp\include\afxres.h
Fri Nov 16 07:38:14 2007 => Scanning File C:\Dev-Cpp\include\ansidecl.h
Fri Nov 16 07:38:14 2007 => Scanning File C:\Dev-Cpp\include\assert.h
Fri Nov 16 07:38:14 2007 => Scanning File C:\Dev-Cpp\include\basetsd.h
Fri Nov 16 07:38:14 2007 => Scanning File C:\Dev-Cpp\include\basetyps.h
Fri Nov 16 07:38:14 2007 => Scanning File C:\Dev-Cpp\include\bfd.h
Fri Nov 16 07:38:14 2007 => Scanning File C:\Dev-Cpp\include\bfdlink.h
Fri Nov 16 07:38:14 2007 => Scanning Folder: C:\Dev-Cpp\include\c++\*.*
Fri Nov 16 07:38:15 2007 => Scanning Folder: C:\Dev-Cpp\include\c++\3.4.2\*.*
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\algorithm
Fri Nov 16 07:38:15 2007 => Scanning Folder: C:\Dev-Cpp\include\c++\3.4.2\backward\*.*
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\algo.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\algobase.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\alloc.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\backward_warning.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\bvector.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\complex.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\defalloc.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\deque.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\fstream.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\function.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\hashtable.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\hash_map.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\hash_set.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\heap.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\iomanip.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\iostream.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\istream.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\iterator.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\list.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\map.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\multimap.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\multiset.h
Fri Nov 16 07:38:15 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward
ew.h
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\ostream.h
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\pair.h
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\queue.h
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backwardope.h
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\set.h
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\slist.h
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\stack.h
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\stream.h
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\streambuf.h
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\strstream
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward	empbuf.h
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward	ree.h
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\backward\vector.h
Fri Nov 16 07:38:16 2007 => Scanning Folder: C:\Dev-Cpp\include\c++\3.4.2\bits\*.*
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\allocator.h
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\atomicity.h
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\basic_ios.h
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\basic_ios.tcc
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\basic_string.h
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\basic_string.tcc
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\boost_concept_check.h
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\char_traits.h
Fri Nov 16 07:38:16 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\cmath.tcc
Fri Nov 16 07:38:17 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\codecvt.h
Fri Nov 16 07:38:17 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\concept_check.h
Fri Nov 16 07:38:17 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\concurrence.h
Fri Nov 16 07:38:17 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\cpp_type_traits.h
Fri Nov 16 07:38:17 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\deque.tcc
Fri Nov 16 07:38:17 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\fstream.tcc
Fri Nov 16 07:38:17 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\functexcept.h
Fri Nov 16 07:38:17 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\gslice.h
Fri Nov 16 07:38:17 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\gslice_array.h
Fri Nov 16 07:38:17 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\indirect_array.h
Fri Nov 16 07:38:17 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\ios_base.h
Fri Nov 16 07:38:17 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\istream.tcc
Fri Nov 16 07:38:17 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\list.tcc
Fri Nov 16 07:38:17 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\localefwd.h
Fri Nov 16 07:38:17 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\locale_classes.h
Fri Nov 16 07:38:17 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\locale_facets.h
Fri Nov 16 07:38:17 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\locale_facets.tcc
Fri Nov 16 07:38:17 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\mask_array.h
Fri Nov 16 07:38:17 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\ostream.tcc
Fri Nov 16 07:38:18 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\postypes.h
Fri Nov 16 07:38:18 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\slice_array.h
Fri Nov 16 07:38:18 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\sstream.tcc
Fri Nov 16 07:38:18 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_algo.h
Fri Nov 16 07:38:18 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_algobase.h
Fri Nov 16 07:38:18 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_bvector.h
Fri Nov 16 07:38:18 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_construct.h
Fri Nov 16 07:38:18 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_deque.h
Fri Nov 16 07:38:18 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_function.h
Fri Nov 16 07:38:18 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_heap.h
Fri Nov 16 07:38:18 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_iterator.h
Fri Nov 16 07:38:18 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_iterator_base_funcs.h
Fri Nov 16 07:38:18 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_iterator_base_types.h
Fri Nov 16 07:38:18 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_list.h
Fri Nov 16 07:38:18 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_map.h
Fri Nov 16 07:38:18 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_multimap.h
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_multiset.h
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_numeric.h
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_pair.h
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_queue.h
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_raw_storage_iter.h
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_relops.h
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_set.h
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_stack.h
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_tempbuf.h
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_threads.h
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_tree.h
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_uninitialized.h
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stl_vector.h
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\streambuf.tcc
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\streambuf_iterator.h
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stream_iterator.h
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\stringfwd.h
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits	ype_traits.h
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\valarray_after.h
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\valarray_array.h
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\valarray_array.tcc
Fri Nov 16 07:38:19 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\valarray_before.h
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bits\vector.tcc
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\bitset
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\cassert
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\cctype
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\cerrno
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\cfloat
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ciso646
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\climits
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\clocale
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\cmath
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\complex
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\csetjmp
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\csignal
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\cstdarg
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\cstddef
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\cstdio
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\cstdlib
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\cstring
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ctime
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\cwchar
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\cwctype
Fri Nov 16 07:38:20 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\cxxabi.h
Fri Nov 16 07:38:21 2007 => Scanning Folder: C:\Dev-Cpp\include\c++\3.4.2\debug\*.*
Fri Nov 16 07:38:21 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\bitset
Fri Nov 16 07:38:21 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\debug.h
Fri Nov 16 07:38:21 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\deque
Fri Nov 16 07:38:21 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\formatter.h
Fri Nov 16 07:38:21 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\hash_map
Fri Nov 16 07:38:21 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\hash_map.h
Fri Nov 16 07:38:21 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\hash_multimap.h
Fri Nov 16 07:38:21 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\hash_multiset.h
Fri Nov 16 07:38:21 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\hash_set
Fri Nov 16 07:38:21 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\hash_set.h
Fri Nov 16 07:38:21 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\list
Fri Nov 16 07:38:21 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\map
Fri Nov 16 07:38:21 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\map.h
Fri Nov 16 07:38:21 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\multimap.h
Fri Nov 16 07:38:21 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\multiset.h
Fri Nov 16 07:38:21 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\safe_base.h
Fri Nov 16 07:38:21 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\safe_iterator.h
Fri Nov 16 07:38:21 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\safe_iterator.tcc
Fri Nov 16 07:38:21 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\safe_sequence.h
Fri Nov 16 07:38:21 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\set
Fri Nov 16 07:38:22 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\set.h
Fri Nov 16 07:38:22 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\string
Fri Nov 16 07:38:22 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\debug\vector
Fri Nov 16 07:38:22 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\deque
Fri Nov 16 07:38:22 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\exception
Fri Nov 16 07:38:22 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\exception_defines.h
Fri Nov 16 07:38:22 2007 => Scanning Folder: C:\Dev-Cpp\include\c++\3.4.2\ext\*.*
Fri Nov 16 07:38:22 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext\algorithm
Fri Nov 16 07:38:22 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext\bitmap_allocator.h
Fri Nov 16 07:38:22 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext\debug_allocator.h
Fri Nov 16 07:38:22 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext\demangle.h
Fri Nov 16 07:38:22 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext\enc_filebuf.h
Fri Nov 16 07:38:22 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext\functional
Fri Nov 16 07:38:22 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext\hashtable.h
Fri Nov 16 07:38:22 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext\hash_fun.h
Fri Nov 16 07:38:22 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext\hash_map
Fri Nov 16 07:38:22 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext\hash_set
Fri Nov 16 07:38:22 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext\iterator
Fri Nov 16 07:38:22 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext\malloc_allocator.h
Fri Nov 16 07:38:23 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext\memory
Fri Nov 16 07:38:23 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext\mt_allocator.h
Fri Nov 16 07:38:23 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext
ew_allocator.h
Fri Nov 16 07:38:23 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext
umeric
Fri Nov 16 07:38:23 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext\pod_char_traits.h
Fri Nov 16 07:38:23 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext\pool_allocator.h
Fri Nov 16 07:38:23 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\extb_tree
Fri Nov 16 07:38:23 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\extope
Fri Nov 16 07:38:23 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\extopeimpl.h
Fri Nov 16 07:38:23 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext\slist
Fri Nov 16 07:38:23 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext\stdio_filebuf.h
Fri Nov 16 07:38:23 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ext\stdio_sync_filebuf.h
Fri Nov 16 07:38:23 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\fstream
Fri Nov 16 07:38:23 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\functional
Fri Nov 16 07:38:23 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\iomanip
Fri Nov 16 07:38:23 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ios
Fri Nov 16 07:38:23 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\iosfwd
Fri Nov 16 07:38:23 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\iostream
Fri Nov 16 07:38:23 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\istream
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\iterator
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\limits
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\list
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\locale
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\map
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\memory
Fri Nov 16 07:38:24 2007 => Scanning Folder: C:\Dev-Cpp\include\c++\3.4.2\mingw32\*.*
Fri Nov 16 07:38:24 2007 => Scanning Folder: C:\Dev-Cpp\include\c++\3.4.2\mingw32\bits\*.*
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\mingw32\bits\atomic_word.h
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\mingw32\bits\basic_file.h
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\mingw32\bits\c++allocator.h
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\mingw32\bits\c++config.h
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\mingw32\bits\c++io.h
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\mingw32\bits\c++locale.h
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\mingw32\bits\codecvt_specializations.h
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\mingw32\bits\ctype_base.h
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\mingw32\bits\ctype_inline.h
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\mingw32\bits\ctype_noninline.h
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\mingw32\bits\gthr-default.h
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\mingw32\bits\gthr-posix.h
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\mingw32\bits\gthr-single.h
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\mingw32\bits\gthr.h
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\mingw32\bits\messages_members.h
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\mingw32\bits\os_defines.h
Fri Nov 16 07:38:24 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\mingw32\bits	ime_members.h
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2
ew
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2
umeric
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\ostream
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\queue
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\set
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\sstream
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\stack
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\stdexcept
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\streambuf
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\string
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2	ypeinfo
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\utility
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\valarray
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\c++\3.4.2\vector
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\cderr.h
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\cguid.h
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\comcat.h
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\commctrl.h
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\commdlg.h
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\complex.h
Fri Nov 16 07:38:25 2007 => Scanning File C:\Dev-Cpp\include\conio.h
Fri Nov 16 07:38:26 2007 => Scanning File C:\Dev-Cpp\include\cpl.h
Fri Nov 16 07:38:26 2007 => Scanning File C:\Dev-Cpp\include\cplext.h
Fri Nov 16 07:38:26 2007 => Scanning File C:\Dev-Cpp\include\ctype.h
Fri Nov 16 07:38:26 2007 => Scanning File C:\Dev-Cpp\include\custcntl.h
Fri Nov 16 07:38:26 2007 => Scanning File C:\Dev-Cpp\include\d3d9.h
Fri Nov 16 07:38:26 2007 => Scanning File C:\Dev-Cpp\include\d3d9caps.h
Fri Nov 16 07:38:26 2007 => Scanning File C:\Dev-Cpp\include\d3d9types.h
Fri Nov 16 07:38:26 2007 => Scanning File C:\Dev-Cpp\include\DbgHelp.h
Fri Nov 16 07:38:26 2007 => Scanning File C:\Dev-Cpp\include\dbt.h
Fri Nov 16 07:38:26 2007 => Scanning File C:\Dev-Cpp\include\dde.h
Fri Nov 16 07:38:26 2007 => Scanning File C:\Dev-Cpp\include\ddeml.h
Fri Nov 16 07:38:26 2007 => Scanning Folder: C:\Dev-Cpp\include\ddk\*.*
Fri Nov 16 07:38:26 2007 => Scanning File C:\Dev-Cpp\include\ddk\atm.h
Fri Nov 16 07:38:26 2007 => Scanning File C:\Dev-Cpp\include\ddk\batclass.h
Fri Nov 16 07:38:26 2007 => Scanning File C:\Dev-Cpp\include\ddk\cfg.h
Fri Nov 16 07:38:26 2007 => Scanning File C:\Dev-Cpp\include\ddk\cfgmgr32.h
Fri Nov 16 07:38:26 2007 => Scanning File C:\Dev-Cpp\include\ddk\d4drvif.h
Fri Nov 16 07:38:26 2007 => Scanning File C:\Dev-Cpp\include\ddk\d4iface.h
Fri Nov 16 07:38:26 2007 => Scanning File C:\Dev-Cpp\include\ddk\ddkmapi.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk\hidclass.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk\hidpi.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk\hidusage.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk\kbdmou.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk\mcd.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk\miniport.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk\minitape.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk\mountdev.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk\mountmgr.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk
dis.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk
disguid.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk
distapi.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk
diswan.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk
etevent.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk
etpnp.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk
ewdev.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk
tapi.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk
tdd8042.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk
tddbeep.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk
tddcdrm.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk
tddcdvd.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk
tddchgr.h
Fri Nov 16 07:38:27 2007 => Scanning File C:\Dev-Cpp\include\ddk
tdddisk.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk
tddk.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk
tddkbd.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk
tddmou.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk
tddndis.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk
tddpar.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk
tddpcm.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk
tddscsi.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk
tddser.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk
tddstor.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk
tddtape.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk
tddtdi.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk
tddvdeo.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk
tddvol.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk
tifs.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk
tpoapi.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk
tstatus.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk\parallel.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk\pfhook.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk\poclass.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk\scsi.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk\scsiscan.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk\scsiwmi.h
Fri Nov 16 07:38:28 2007 => Scanning File C:\Dev-Cpp\include\ddk\smbus.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk\srb.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk\storport.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk	di.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk	diinfo.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk	dikrnl.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk	distat.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk	vout.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk\upssvc.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk\usb.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk\usb100.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk\usbcamdi.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk\usbdi.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk\usbioctl.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk\usbiodef.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk\usbscan.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk\usbuser.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk\video.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk\videoagp.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk\win2k.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk\winddi.h
Fri Nov 16 07:38:29 2007 => Scanning File C:\Dev-Cpp\include\ddk\winddk.h
Fri Nov 16 07:38:30 2007 => Scanning File C:\Dev-Cpp\include\ddk\winnt4.h
Fri Nov 16 07:38:30 2007 => Scanning File C:\Dev-Cpp\include\ddk\winxp.h
Fri Nov 16 07:38:30 2007 => Scanning File C:\Dev-Cpp\include\ddk\ws2san.h
Fri Nov 16 07:38:30 2007 => Scanning File C:\Dev-Cpp\include\ddk\xfilter.h
Fri Nov 16 07:38:30 2007 => Scanning File C:\Dev-Cpp\include\dhcpcsdk.h
Fri Nov 16 07:38:30 2007 => Scanning File C:\Dev-Cpp\include\dir.h
Fri Nov 16 07:38:30 2007 => Scanning File C:\Dev-Cpp\include\direct.h
Fri Nov 16 07:38:30 2007 => Scanning File C:\Dev-Cpp\include\dirent.h
Fri Nov 16 07:38:30 2007 => Scanning File C:\Dev-Cpp\include\dis-asm.h
Fri Nov 16 07:38:30 2007 => Scanning File C:\Dev-Cpp\include\dlgs.h
Fri Nov 16 07:38:30 2007 => Scanning File C:\Dev-Cpp\include\docobj.h
Fri Nov 16 07:38:30 2007 => Scanning File C:\Dev-Cpp\include\dos.h
Fri Nov 16 07:38:30 2007 => Scanning File C:\Dev-Cpp\include\dxerr8.h
Fri Nov 16 07:38:30 2007 => Scanning File C:\Dev-Cpp\include\dxerr9.h
Fri Nov 16 07:38:30 2007 => Scanning File C:\Dev-Cpp\include\errno.h
Fri Nov 16 07:38:31 2007 => Scanning File C:\Dev-Cpp\include\errorrep.h
Fri Nov 16 07:38:31 2007 => Scanning File C:\Dev-Cpp\include\excpt.h
Fri Nov 16 07:38:31 2007 => Scanning File C:\Dev-Cpp\include\exdisp.h
Fri Nov 16 07:38:31 2007 => Scanning File C:\Dev-Cpp\include\exdispid.h
Fri Nov 16 07:38:31 2007 => Scanning File C:\Dev-Cpp\include\fcntl.h
Fri Nov 16 07:38:31 2007 => Scanning File C:\Dev-Cpp\include\fenv.h
Fri Nov 16 07:38:31 2007 => Scanning File C:\Dev-Cpp\include\float.h
Fri Nov 16 07:38:31 2007 => Scanning File C:\Dev-Cpp\include\getopt.h
Fri Nov 16 07:38:31 2007 => Scanning Folder: C:\Dev-Cpp\include\GL\*.*
Fri Nov 16 07:38:31 2007 => Scanning File C:\Dev-Cpp\include\GL\gl.h
Fri Nov 16 07:38:31 2007 => Scanning File C:\Dev-Cpp\include\GL\glext.h
Fri Nov 16 07:38:31 2007 => Scanning File C:\Dev-Cpp\include\GL\glu.h
Fri Nov 16 07:38:31 2007 => Scanning File C:\Dev-Cpp\include\gmon.h
Fri Nov 16 07:38:31 2007 => Scanning File C:\Dev-Cpp\include\httpext.h
Fri Nov 16 07:38:31 2007 => Scanning File C:\Dev-Cpp\include\idispids.h
Fri Nov 16 07:38:31 2007 => Scanning File C:\Dev-Cpp\include\imagehlp.h
Fri Nov 16 07:38:31 2007 => Scanning File C:\Dev-Cpp\include\imm.h
Fri Nov 16 07:38:32 2007 => Scanning File C:\Dev-Cpp\include\initguid.h
Fri Nov 16 07:38:32 2007 => Scanning File C:\Dev-Cpp\include\intshcut.h
Fri Nov 16 07:38:32 2007 => Scanning File C:\Dev-Cpp\include\inttypes.h
Fri Nov 16 07:38:32 2007 => Scanning File C:\Dev-Cpp\include\io.h
Fri Nov 16 07:38:32 2007 => Scanning File C:\Dev-Cpp\include\ipexport.h
Fri Nov 16 07:38:32 2007 => Scanning File C:\Dev-Cpp\include\iphlpapi.h
Fri Nov 16 07:38:32 2007 => Scanning File C:\Dev-Cpp\include\ipifcons.h
Fri Nov 16 07:38:32 2007 => Scanning File C:\Dev-Cpp\include\iprtrmib.h
Fri Nov 16 07:38:32 2007 => Scanning File C:\Dev-Cpp\include\iptypes.h
Fri Nov 16 07:

havi · Answer

Même en recherchant avec windows ces deux fichiers ou autres  Online Security Guide ET
Live Safety Center ne sont pas présents dans mon systèmes il ont donc été effacé alors?

afideg · Answer

C'est bon
Merci pour ton courage.

Peux-tu ajouter ces deux fichiers (si tu les trouves) pour analyse chez VirusTotal, SVP:

C:\WINDOWS\system32\pdrtvsvr.exe
C:\WINDOWS\system32\pavc.dll

Mon plan de travail pour ce samedi est presque terminé ==> mais je me glisse au lit.

A)- Je crois qu'il serait préférable que tu "scrutes" attentivement le solde du rapport, et n'en copier que les éléments infectés qui se présentent comme ceci par exemple: 

• Fri Nov 16 07:32:36 2007 => ERROR!!! Invalid Entry \??\C:\DOCUME~1\VALRIE~1\LOCALS~1\Temp\catchme.sys in SYSTEM\CurrentControlSet\Services\catchme...
•- Fri Nov 16 07:33:50 2007 => File C:\WINDOWS\System32\dngknxww.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.aps. No Action Taken



B)- Post # 16 § B- "Authentication Packages"= msv1_0  ; 
... tu m'écris ceci ==>  CIT. « je n'ai plus C:\WINDOWS\System32\ssqrp.dll dans mon système j'ai fait regedit ainsi que tout ce que tu m'a dit et tout ce qui a après msv1_0 c'est LsaPid (dans la colonne nom) REG_DWORD (dans la colonne type) et dans la colonne donnée 0x00000314 (788). je pense que tout a été effacé lors du prédédent nettoyage que j'ai effectué » . 

===> De quel nettoyage parles-tu ? Avec quel outil ?



C) - Faire le post # 17 § C & D-  ==> Supprimer le ComboFix et lancer VundoFix.


D) Lance une "Recherche Windows" pour trouver ces deux dossiers, et supprime-les:
Online Security Guide
Live Safety Center

+++ EDIT +++
Tu as été plus rapide que moi.
Il y aura moyen de rechercher les traces dans la Base de Registres, via la commande REGEDIT, puis dans EDITION, lancer la commande RECHERCHER et coller les mots Online Security Guide. Supprimer alors tous les éléments qui seront un à un en surbrillance (après chaque effacement, NE PAS SUPPRIMER LA PROCHAINE SURBRILLANCE !!).
Après chaque effacement il faut cliquer sur F3 pour relancer la recherche, et supprimer le seul nouveau élément en surbrillance; ainsi de suite jusqu'au message "la recherche est terminée".
Recommencer pour l'autre dossier Live Safety Center.
Attention DANGER!
Je te dirai comment préalablement sauvegarder ta BdR en cas d'erreurs.


"Demain" on terminera cette question.
Ce ne fut pas un cadeau (ça m'a permis de cerner quelques questions en suspens); donc, je te remercie.
Bonne nuit.
Al.

havi · Answer

j'ai trouvé les deux fichiers en questions grâce au registre mais en relançant j'ai eu en surbrillance cette donnée que j'hésite à supprimer:

colonne nom (par défaut) , type (REG_SZ), en donnée (valeur nom définie) alors je l'efface ? et pour mon post N° 16 PARTB c'est avec le logiciel mwav je crois j'en suis pas sur, mais  il a pris énormément de temps en analysant et en nettoyant mon ordi donc c'était juste une supposition.

afideg · Answer

Bonjour havi,

1°- CIT. « pour mon post N° 16 PARTB c'est avec le logiciel mwav je crois j'en suis pas sur, mais il a pris énormément de temps en analysant et en nettoyant mon ordi donc c'était juste une supposition. »

Merci, je préfère cette explication.



2°- Je suppose qu'il est question de ces deux DOSSIERS : "Online Security Guide"  et "Live Safety Center"

CIT. « j'ai trouvé les deux fichiers en questions grâce au registre mais en relançant j'ai eu en surbrillance cette donnée que j'hésite à supprimer: colonne nom (par défaut) , type (REG_SZ), en donnée (valeur nom définie)==> alors je l'efface ? »

Si c'est bien de ces deux dossiers qu'il s'agit, alors c'est une bonne nouvelle.
Réponse: non, ne supprime pas cette donnée vierge.
ATTENTION: Mais dès lors que tu as "calé" sur cette question, as-tu bien poursuivi la recherche par des clic F3 comme je l'avais indiqué?
( autrement dit: es-tu passé outre de cette question "de savoir quoi faire"; et as-tu poursuivi la recherche via F3 ?? »



3°- Termine SVP le poste # 34 quand tu le peux. (je serais absent un moment cette journée => emplettes!)
Je dois encore en tirer des enseignements, et des éléments à joindre à mon script, pour conclure. Merci.


On termine ça aujourd'hui.
Al.

havi · Answer

Bonjour afideg, 

J'ai bien suivi ce que tu m'a dit , mais c'est que j'ai juste un peu peur de faire là gaffe qu'il faut pas faire , vu que dans certains cas je peux être vraiment maladroite alors la prudence est de mise ici tu es d'accord avec moi ? ; pour les deux analyses je te les donnerais plus tard car d'après leur dire , chez virus total il sont en surcharge de travail et je suis là attendre pour environ une heure maximum!!!!donc à plus tard!!!

afideg · Answer

Re,

Fais-les analyser chez Jotti (c'est le même principe de fonctionnement)  ici:
https://virusscan.jotti.org/
(= Virusscan.jotti-maxi 15mb)

Dis-moi ce que contient ce dossier  ==>  C:\WINDOWS\dmFs6XJpZQ 
(en pointant la souris dessus, que lis-tu dans la bulle) = Reconnais-tu ce dossier ?
Merci.

Al

havi · Answer

le dossier C:\WINDOWS\dmFs6XJpZQ lorsque je pointe la souris dessus c'est écris "dossier vide" et de plus je ne le reconnais pas pour autant que je sache, par contre pour le site virusscan jotti c'est la même chose le serveur est trè occupé pour l'analyse , et j'attends depuis pas mal de temps déja alors je fait quoi ?

havi · Answer

HA!!!jotti passe enfin je te donne les résultats dans un moment :

 Pour C:\WINDOWS\system32\pdrtvsvr.exe  :


File:  pdrtvsvr.exe  
Status:  OK  
MD5:  d603ce649b33a01f4deee7b1010301b4  
Packers detected:  - 
Bit9 reports:  File not found  
 
Scanner results  
Scan taken on 17 Nov 2007 17:18:52 (GMT)  
A-Squared  Found nothing 
AntiVir  Found nothing 
ArcaVir  Found nothing 
Avast  Found nothing 
AVG Antivirus  Found nothing 
BitDefender  Found nothing 
ClamAV  Found nothing 
CPsecure  Found nothing 
Dr.Web  Found nothing 
F-Prot Antivirus  Found nothing 
F-Secure Anti-Virus  Found nothing 
Fortinet  Found nothing 
Kaspersky Anti-Virus  Found nothing 
NOD32  Found nothing 
Norman Virus Control  Found nothing 
Panda Antivirus  Found nothing 
Rising Antivirus  Found nothing 
Sophos Antivirus  Found nothing 
VirusBuster  Found nothing 
VBA32  Found nothing 


Pour C:\WINDOWS\system32\pavc.dll   :

File:  pavc.dll  
Status:  OK  
MD5:  c318469798cafe71b702d51eca2f449b  
Packers detected:  - 
Bit9 reports:  File not found  
 
Scanner results  
Scan taken on 17 Nov 2007 17:30:01 (GMT)  
A-Squared  Found nothing 
AntiVir  Found nothing 
ArcaVir  Found nothing 
Avast  Found nothing 
AVG Antivirus  Found nothing 
BitDefender  Found nothing 
ClamAV  Found nothing 
CPsecure  Found nothing 
Dr.Web  Found nothing 
F-Prot Antivirus  Found nothing 
F-Secure Anti-Virus  Found nothing 
Fortinet  Found nothing 
Kaspersky Anti-Virus  Found nothing 
NOD32  Found nothing 
Norman Virus Control  Found nothing 
Panda Antivirus  Found nothing 
Rising Antivirus  Found nothing 
Sophos Antivirus  Found nothing 
VirusBuster  Found nothing 
VBA32  Found nothing 


C'EST ENFIN FAIT !!!!

afideg · Answer

(suite)

1°- « le dossier C:\WINDOWS\dmFs6XJpZQ lorsque je pointe la souris dessus c'est écris "dossier vide" »
Parfait; merci.

2°- Pour C:\WINDOWS\system32\pdrtvsvr.exe :  ==> RAS
Pour C:\WINDOWS\system32\pavc.dll :  ==> idem.
Merci;

3°- Rappel: 
Faire le post # 17 § C & D- ==> Supprimer le ComboFix et lancer VundoFix. 
==> Indispensable SVP !
Pour Vundo, il s'agira de la dernière version 6.6.0.2 - Taille 115 Ko.

Je dois terminer ce topic ce soir.
Il me reste 2 heures disponibles.
Désolé.

Al.

havi · Answer

J'ai fais vundo il m'a éliminer trois éléments dans c :windows system 32 tous se terminant par ddl.

afideg · Answer

Re

Mais sapristi, vas-tu me répondre ?

As-tu oui ou non supprimé ComboFix et tous ses composants comme je l'ai demandé ?

Je souhaite vivement le rapport de l'analyse VundoFix, avec le détail des fichiers supprimés.
==> de surcroît, ces fichiers ne se terminaient pas par "ddl" comme tu l'indiques, mais par "DLL".
Cela te fait mieux comprendre pourquoi je veux lire moi-même de log VundoFix.

Je souhaite que ce soit ces trois-ci:
C:\WINDOWS\system32\vtuvvwv.dll
C:\WINDOWS\system32\wvuusrq.dll
C:\WINDOWS\system32\khfcded.dll



Merci


Al.

havi · Answer

désolé , désolé je suis là c'est bien ce que j'ai enlevé!!!!

havi · Answer

Et combofix et ses éléments ont bien été enlevé correctement !!!

afideg · Answer

Re, Merci Voici le gros morceau. Je te fais confiance. 1°- Télécharge ComboFix.exe (par sUBs) et enregistre-le sur le Bureau: < http://download.bleepingcomputer.com/sUBs/ComboFix.exe > 2°- Désactive ta restauration système Clic sur « Démarrer » Clic droit sur « Poste de travail », puis sur « Propriétés », Vas sur l’onglet « Restauration système » Tu y coches la case « Désactiver la restauration » Termine par [Appliquer] [OK] 3°- Sélectionne (mettre en surbrillance) tout le texte en caractères gras suivant : File:: c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe C:\WINDOWS\SYSTEM32\$SYS$FILESYSTEM\$SYS$DRMSERVER.EXE C:\ Documents and Settings\valérie\Local Settings\Temp\catchme.sys C:\WINDOWS\System32\ssqrp.dll C:\WINDOWS\System32\dngknxww.dll C:\WINDOWS\System32\hxotdomp.dll.ren C:\WINDOWS\System32\hxotdomp.dll.ren C:\WINDOWS\System32\owaxberp.dll C:\WINDOWS\System32\zobhdqqo.dll.vir C:\WINDOWS\system32\pmodtoxh.ini.ren C:\WINDOWS\system32\hxotdomp.dll.ren C:\WINDOWS\system32\zobhdqqo.dll C:\WINDOWS\system32\owaxberp.dll C:\WINDOWS\system32\prqss.ini2.ren C:\WINDOWS\system32\prqss.ini.ren C:\WINDOWS\System32\pbfkwprl.dll C:\WINDOWS\system32 ngygkox.dll C:\hijackthis_199.zip Folder:: C:\WINDOWS\SYSTEM32 Ma01yy C:\Temp\abW9 C:\WINDOWS\dmFs6XJpZQ C:\hijackthis_199 C:\SmitfraudFix C:\!KillBox C:\Program Files\RogueRemover FREE C:\Program Files\Trojan Remover Registry:: [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4ec34730-1724-4592-b5aa-e6560066ea37}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "71553283"=- [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RecordNow!"="" 4°- Copie le texte sélectionné (CTRL+C). Ouvre le bloc-notes (programme>Accessoires >bloc-notes). Colle (bien dans le coin supérieur gauche) ce texte dans ce bloc-notes (CTRL+V). Sauvegarde (enregistre-le sur le bureau) sous le nom ComboFix-Do.txt 5°- Ensuite, dépose ce fichier texte sur l'application de ComboFix (icône rouge “ComboFix.exe” sur le bureau) en faisant un “glisser/déposer” de ce fichier “ComboFix-Do.txt” sur le fichier “ComboFix.exe” comme sur la capture: < http://img.photobucket.com/albums/v666/sUBs/Combo-Do.gif > ( ou < http://img254.imageshack.us/img254/5844/screenshot167lw0.png >) Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide. Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises: c'est normal! (CAUTION: Do not mouse-click ComboFix's window while it is running. = Ne touche à rien tant que le scan n'est pas terminé. That may cause it to stall.) 6°- Une fois le scan achevé, un rapport va s'afficher: poste son contenu sur le forum. Si le fichier n'apparaît pas, il se trouve ici > C:\ComboFix.txt 7°- Arrêter puis redémarrer le PC 8°- Ensuite réactive ta restauration système Clic droit sur « Poste de travail », puis sur « Propriétés », Vas sur l’onglet « Restauration système » Tu décoches la case « Désactiver la restauration » Termine par [Appliquer] [OK] 9°- Poste un nouveau rapport ComboFix.txt comme ceci : - Double clique sur l'icône de ComboFix.exe du bureau, [Exécuter] et suis les invites. Tape 1 puis [Enter] . Accepter les alertes éventuelles. Laisse se dérouler le scan. Lorsque le scan sera complété, un rapport apparaîtra sur le bureau. Tu copies et colles ce rapport sur le forum Bonne chance Al

havi · Answer

j'ai tout fait jusqu'au poste 5 jusqu'à  l'apparition de la fenête bleue et la "erreur de nom CFscript " étiez vous entrain exécutez CFScript? le nom CFScript semble être incorrectement écrit" , je ferme la fenêtre et la tout s'arrête!!!
j'ai pourtant tout fait avec attention !!!!

afideg · Answer

As-tu bien dénommé le fichier texte (contenant le script) ComboFix-Do.txt  (sans les guillemets) ??

En english ==> Save this as ComboFix-Do.txt and change the "Save as type" to "All Files" and place it on your desktop.
Regarde ici  http://img225.imageshack.us/img225/6237/screenshot169qy8.png


Contrôle également le contenu de ComboFix-Do.txt
(Si tu veux, tu peux l'appeler CFScript.txt) mais je n'en vois pas la raison.
Des centaines utilisent ComboFix-Do.txt sans cet avertissement.

Edit: 
Supprime ces 2  lignes dans le script et comble l'espace interligne créé éventuellement lors de ces suppressions :
C:\ Documents and Settings\valérie\Local Settings\Temp\catchme.sys 
C:\hijackthis_199.zip 


Désolé, je vais au lit
Al.

moe · Answer

Bonsoir à tout les deux

Juste un petit message perso pour Afideg, le code de combo à bougé, l'option ComboFix-Do.txt a été retiré et génère un message d'erreur aujourd'hui, ne reste plus que CFScript.txt maintenant.
Par contre les délimiteurs de catégories utilisables restent les mêmes qu'avant:
File::
Folder::
System.Ini::
NetSvc::
ADS::
Registry::
FileLook::
DirLook::

Avec en bonus quelques petits nouveaux, comme par exemple:
killall::
SnapShot::
SnapShotB::


Bonne fin de soirée :-)

havi · Answer

J'ai fait le changement et ça passe enfin ,merci pour la confirmation du changement de combofix moe,  j'ai cru que c'était moi qui avait fait l'erreur!!!

havi · Answer

Eh bien , fait un bon gros dodo et moi je te poste ça !!! le rapport combofix : Pour les deux lignes je crois que je les ai laissé dans le script je m'en suis aperçu que lorsque que j'ai bien relu ton post désolé U___u , la fatigue a eu raison de moi alors : ComboFix 07-11-08.1 - valérie 2007-11-18 7:37:03.4 - NTFSx86 Running from: C:\Documents and Settings\valérie\Bureau\ComboFix.exe Command switches used :: C:\Documents and Settings\valérie\Bureau\CFScript.txt * Created a new restore point FILE C:\ Documents and Settings\valérie\Local Settings\Temp\catchme.sys C:\hijackthis_199.zip c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe C:\WINDOWS\SYSTEM32\$SYS$FILESYSTEM\$SYS$DRMSERVER.EXE C:\WINDOWS\System32\dngknxww.dll C:\WINDOWS\System32\hxotdomp.dll.ren C:\WINDOWS\system32\hxotdomp.dll.ren C:\WINDOWS\System32\hxotdomp.dll.ren C:\WINDOWS\System32\owaxberp.dll C:\WINDOWS\system32\owaxberp.dll C:\WINDOWS\System32\pbfkwprl.dll C:\WINDOWS\system32\pmodtoxh.ini.ren C:\WINDOWS\system32\prqss.ini.ren C:\WINDOWS\system32\prqss.ini2.ren C:\WINDOWS\System32\ssqrp.dll C:\WINDOWS\system32 ngygkox.dll C:\WINDOWS\system32\zobhdqqo.dll C:\WINDOWS\System32\zobhdqqo.dll.vir . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\!KillBox C:\!KillBox\Logs\kb.log C:\hijackthis_199 C:\hijackthis_199.zip C:\hijackthis_199\hijackthis RAPPORT 1.txt C:\hijackthis_199\hijackthis RAPPORT 2.txt C:\hijackthis_199\HijackThis.exe C:\hijackthis_199\hijackthis.log C:\Program Files\RogueRemover FREE C:\Program Files\RogueRemover FREE\COMCTL32.OCX C:\Program Files\RogueRemover FREE\Excludes.dat C:\Program Files\RogueRemover FREE\License.txt C:\Program Files\RogueRemover FREE\manual.chm C:\Program Files\RogueRemover FREE\RogueRemover.dll C:\Program Files\RogueRemover FREE\RogueRemover.exe C:\Program Files\RogueRemover FREE\RRLog02531.txt C:\Program Files\RogueRemover FREE ules.dat C:\Program Files\RogueRemover FREE\unins000.dat C:\Program Files\RogueRemover FREE\unins000.exe C:\Program Files\Trojan Remover C:\Program Files\Trojan Remover\epack.dta C:\Program Files\Trojan Remover eflist.dta C:\Program Files\Trojan Remover mt.dta C:\Program Files\Trojan Remover\Rmvtrjan.exe C:\Program Files\Trojan Remover\Sschk.exe C:\Program Files\Trojan Remover r.bmp C:\Program Files\Trojan Remover rj_list.dta C:\Program Files\Trojan Remover rjhelp.chm C:\Program Files\Trojan Remover rjlist2.dta C:\Program Files\Trojan Remover rjlist3.dta C:\Program Files\Trojan Remover rjlist4.dta C:\Program Files\Trojan Remover rjlist5.dta C:\Program Files\Trojan Remover rjlist6.dta C:\Program Files\Trojan Remover rjlist7.dta C:\Program Files\Trojan Remover\Trjscan.exe C:\Program Files\Trojan Remover\Trshlex.dll C:\Program Files\Trojan Remover runins.exe C:\Program Files\Trojan Remover rupd.exe C:\Program Files\Trojan Remover rweb.dta C:\Program Files\Trojan Remover\unins000.dat C:\Program Files\Trojan Remover\unins000.exe C:\Program Files\Trojan Remover\unins000.msg C:\SmitfraudFix C:\SmitfraudFix\dumphive.exe C:\SmitfraudFix\exit.exe C:\SmitfraudFix\GenericRenosFix.exe C:\SmitfraudFix\HostsChk.exe C:\SmitfraudFix\Process.exe C:\SmitfraudFix\Reboot.exe C:\SmitfraudFix estart.exe C:\SmitfraudFix\SmitfraudFix.cmd C:\SmitfraudFix\SmiUpdate.exe C:\SmitfraudFix\SrchSTS.exe C:\SmitfraudFix\swreg.exe C:\SmitfraudFix\swsc.exe C:\SmitfraudFix\swxcacls.exe C:\SmitfraudFix\unzip.exe C:\SmitfraudFix\VCCLSID.exe C:\SmitfraudFix\WS2Fix.exe C:\Temp\abW9 C:\Temp\abW9 OasF.log C:\WINDOWS\cookies.ini C:\WINDOWS\dmFs6XJpZQ C:\WINDOWS\SYSTEM32\$SYS$FILESYSTEM\$SYS$DRMSERVER.EXE C:\WINDOWS\System32\dngknxww.dll C:\WINDOWS\System32\hxotdomp.dll.ren C:\WINDOWS\System32\pbfkwprl.dll C:\WINDOWS\system32\pmodtoxh.ini.ren C:\WINDOWS\system32\prqss.ini.ren C:\WINDOWS\system32\prqss.ini2.ren C:\WINDOWS\system32 ngygkox.dll C:\WINDOWS\System32\zobhdqqo.dll.vir . ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-10-17 to 2007-11-17 )))))))))))))))))))))))))))))))))))) . 2007-11-17 04:20 d----c--- C:\VundoFix Backups 2007-11-16 06:52 d----c--- C:\Kaspersky 2007-11-16 02:48 d-------- C:\Program Files\Panda Security 2007-11-15 23:40 d-------- C:\Program Files\a-squared Anti-Malware 2007-11-15 22:03 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-11-15 06:54 4,528 --a------ C:\WINDOWS\system32 mp.reg 2007-11-15 06:52 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe 2007-11-15 06:52 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe 2007-11-15 06:52 53,248 --a------ C:\WINDOWS\system32\Process.exe 2007-11-15 06:52 51,200 --a------ C:\WINDOWS\system32\dumphive.exe 2007-11-15 06:52 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe 2007-11-15 06:25 d-a--c--- C:\Documents and Settings\All Users\Application Data\TEMP 2007-11-15 06:24 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll 2007-11-15 06:24 153,088 --a------ C:\WINDOWS\system32\UNRAR3.dll 2007-11-15 06:24 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll 2007-11-15 06:24 75,264 --a------ C:\WINDOWS\system32\unacev2.dll 2007-11-15 06:24 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll 2007-11-15 06:23 d----c--- C:\Documents and Settings\All Users\Application Data\Simply Super Software 2007-11-15 05:01 d-------- C:\WINDOWS\BDOSCAN8 2007-11-14 08:08 d----c--- C:\Documents and Settings\All Users\Application Data\Grisoft 2007-11-14 08:08 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2007-11-14 07:47 d----c--- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion 2007-11-14 07:46 d-------- C:\Program Files\Yahoo! 2007-11-14 07:46 d-------- C:\Program Files\CCleaner 2007-11-12 17:22 d----c--- C:\Temp 2007-10-25 10:26 53,248 --a------ C:\WINDOWS\bdoscandel.exe 2007-10-22 00:46 d-------- C:\WINDOWS\system32\AlertModule 2007-10-22 00:46 40,960 --a------ C:\WINDOWS\system32\FTRTSVC.exe 2007-10-22 00:46 36,864 --a------ C:\WINDOWS\system32\IfHelper.dll . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-17 22:19 --------- d-----w C:\Program Files\Wanadoo 2007-11-13 23:41 --------- dc----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2007-11-13 09:00 --------- d-----w C:\Program Files\Microsoft Picture It! 9 2007-10-20 19:10 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-08-02 13:43 282,624 ----a-w C:\Program Files\TTC.dll 1999-07-07 00:00:00 6 --sh--r C:\WINDOWS\@@desktop.dat 1999-07-07 00:00:00 6 --sh--r C:\WINDOWS\@desktop@.dat 2005-08-11 13:48:57 104 -csh--r C:\WINDOWS\system32\9060AE1E38.sys 2006-05-30 11:35:34 4,704 -csha-w C:\WINDOWS\system32\KGyGaAvL.sys . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Apoint"="C:\Program Files\Apoint2K\Apoint.exe" [2003-10-08 11:40] "ATIModeChange"="Ati2mdxx.exe" [2004-04-02 15:16 C:\WINDOWS\system32\Ati2mdxx.exe] "Cpqset"="C:\Program Files\HPQ\Default Settings\cpqset.exe" [2004-03-01 22:05] "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-03-26 03:00] "SunJavaUpdateSched"="C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe" [2004-05-13 18:34] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2004-01-27 22:52] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2004-05-13 18:54] "eabconfg.cpl"="C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe" [2004-01-13 15:21] "UpdateManager"="C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" [2003-08-19 07:01] "HPHmon05"="C:\WINDOWS\System32\hphmon05.exe" [2003-05-23 01:56] "ccApp"="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" [2006-04-04 11:55] "AGRSMMSG"="AGRSMMSG.exe" [2003-10-30 21:40 C:\WINDOWS\AGRSMMSG.exe] "Microsoft Works Update Detection"="C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe" [2003-06-11 00:49] "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50] "Symantec NetDriver Monitor"="C:\PROGRA~1\SYMNET~1\SNDMon.exe" [2006-11-16 00:18] "HP Software Update"="C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" [2005-02-16 23:11] "WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-08-23 14:49] "WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\GestMaj.exe" [2004-10-14 16:55] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 17:25] "TrojanScanner"="C:\Program Files\Trojan Remover\Trjscan.exe" [] "a-squared"="C:\Program Files\a-squared Anti-Malware\a2guard.exe" [2007-08-31 20:24] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RecordNow!"="" [] "WOOKIT"="C:\PROGRA~1\Wanadoo\Shell.exe" [2004-08-23 14:50] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-05-21 09:38] "updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 15:45] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-11-15 16:18] R0 $sys$cor;$sys$cor;C:\WINDOWS\System32\Drivers\$sys$cor.sys R1 $sys$crater;$sys$crater;\??\C:\WINDOWS\System32\$sys$filesystem\crater.sys R1 Cinemsup;Cinemsup;C:\WINDOWS\System32\drivers\Cinemsup.sys R2 $sys$DRMServer;Plug and Play Device Manager;C:\WINDOWS\System32\$sys$filesystem\$sys$DRMServer.exe R2 CD_Proxy;XCP CD Proxy;C:\WINDOWS\CDProxyServ.exe S3 CE3;Service de la carte Xircom Ethernet 10/100;C:\WINDOWS\System32\DRIVERS\ce3n5.sys S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\System32\DRIVERS\usbscan.sys S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS . Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es' "2006-10-27 13:39:26 C:\WINDOWS\Tasks\Connexion Facile à Internet.job" "2005-11-02 08:45:30 C:\WINDOWS\Tasks\Norton AntiVirus - Analyser mon ordinateur - valérie.job" "2007-11-17 23:43:00 C:\WINDOWS\Tasks\Symantec NetDetect.job" - C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE . ************************************************************************** catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-18 07:42:08 Windows 5.1.2600 Service Pack 1 NTFS scanning hidden processes ... scanning hidden autostart entries ... HKLM\Software\Microsoft\Windows\CurrentVersion\Run Cpqset = C:\Program Files\HPQ\Default Settings\cpqset.exe?????????A)w?????????? ???B???????????????B? ?????? scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-11-18 7:44:57 - machine was rebooted . --- E O F --- A demain...

afideg · Answer

Bonjour moe,

Merci à toi moe pour ton œil connaisseur et protecteur.
Je n'avais aucune info sur cette "modification dans l'intitulé du script.txt".

C'est, compte tenu de ce message d'erreur, mais tout à fait hypocritement -je le reconnais humblement- que sans grande conviction j'ai écrit ceci à tester,  : « (Si tu veux, tu peux l'appeler CFScript.txt) mais je n'en vois pas la raison. »

J'ai surtout pensé que le coupable était ce "fichier en .sys" contenu dans cette ligne: 
C:\ Documents and Settings\valérie\Local Settings\Temp\catchme.sys 
et dont je voulais sans risque (parce que localisé en Temp) tester la suppression de "fichier en .sys" par cette méthode CF-Do.

Dans ta liste "délimiteurs de catégories utilisables", que devient " Driver:: " ?

Je suis satisfait de constater que cette saleté a été traitée ==> C:\WINDOWS\SYSTEM32\$SYS$FILESYSTEM\$SYS$DRMSERVER.EXE 

As-tu des commentaires à propos de ceci, SVP : 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
"RecordNow!"=""  []     ?? 
==> il n'a pas été supprimé cette fois.



Merci encore  
Respectueusement
Bon dimanche
Al

afideg · Answer

Bonjour havi, Encore bravo pour ta patience, et ton interactivité dans la conduite de ce topic. Mais as-tu bien terminé la procédure décrite comme ceci : « 7°- Arrêter puis redémarrer le PC 8°- Ensuite réactive ta restauration système Clic droit sur « Poste de travail », puis sur « Propriétés », Vas sur l’onglet « Restauration système » Tu décoches la case « Désactiver la restauration » Termine par [Appliquer] [OK] » ? C'est important. Maintenant, fais ceci, s'il te plaît : 1°- Supprime le ComboFix que tu possèdes, ainsi que ses composants dont les quarantaines ou backups; comme ceci: Supprime le dossier Qoobox (il est à la racine de ton disque dur c:\) Supprime tous les rapports situés. (C:\ComboFix-quarantined-files.txt ; C:\ComboFix.txt ; C:\ComboFix2.txt ; C:\ComboFix3.txt ... ; C:\ComboFix-Do.txt) Supprime l'application téléchargée. (ComboFix.exe) Supprime ce fichier CFScript.txt s'il existe encore. Vérifie si ces éléments existent encore ; si oui, supprime-les: C:\Program Files\Trojan Remover C:\WINDOWS\System32\MQPLHVRX.0XE C:\WINDOWS\System32\UDXOLURP.0XE 2°- Télécharge ComboFix.exe (par sUBs) et enregistre-le sur le Bureau: < http://download.bleepingcomputer.com/sUBs/ComboFix.exe > Poste un nouveau rapport ComboFix.txt comme ceci : - Double clique sur l'icône de ComboFix.exe du bureau, [Exécuter] et suis les invites. Tape 1 puis [Enter] . Accepter les alertes éventuelles. Laisse se dérouler le scan. Lorsque le scan sera complété, un rapport apparaîtra sur le bureau. Tu copies et colles ce rapport sur le forum 3°- Relance un ScanOnline PANDA ( sous Internet explorer donc ) < https://www.pandasecurity.com/?ref=www.pandasoftware.com/activescan/fr/activescan_principal.htm > •- Procédure : "Analyser votre pc" -> "suivant" -> remplir adresse mail (factice) -> Pays/Etat-région -> envoyer -> laisser se dérouler le téléchargement du contrôle ActiveX -> sélectionner "Poste de Travail" -> fermer la popup. •- Un tuto < https://www.malekal.com/scan-antivirus-ligne-nod32/ > ) ou là < https://www.malekal.com/scan-antivirus-ligne-nod32/#mozTocId23736 > NOTE* A la fin du scanning, sauvegarde et fais un copier/coller du rapport d'analyse dans ta prochaine réponse Attention!! Panda peut entrer en conflit avec autre antivirus . Par exemple, pour pouvoir télécharger le contrôle active x de Panda, il faut que tu désactives le bouclier web d'Avast le temps du scan. Merci et bon dimanche. PS Pourquoi ton PC es-il toujours sous SP1 ? Windows Version: 5.1.2600, Service Pack 1 ==> Le service Pack 2 de Windows XP est une mise à jour majeure du système de Microsoft. À télécharger là : https://www.01net.com/telecharger/windows/Utilitaire/dll_librairies/fiches/29989.html (aucun problème d’authentification de ta version Windows) Attention : Patienter. Ça dure longtemps (voire ± 1 heure) même quand on croit que c’est fini. Il faut savoir attendre le message final, ou le redémarrage du PC. Il faudra bien y penser un jour . Al.

afideg · Answer

Havi,
J'ai une question en suspens.
Elle concerne le fonctionnement de la fonction CFScript.

Récapitulatif de l'utilisation de ComboFix dans ce topic:

# 6     ComboFix 07-11-08.1 - valou 2007-11-15 22:06:19.1 -
# 5     ComboFix 07-11-08.1 - valou 2007-11-16 0:46:44.2 -
# 15   ComboFix 07-11-08.1 - valérie 2007-11-16 10:32:44.3 -
# 43 (par afideg) « As-tu oui ou non supprimé ComboFix et tous ses composants comme je l'ai demandé ? »
# 45 (par havi)   « Et combofix et ses éléments ont bien été enlevé correctement !!! »
# 51 (avec la fonction CFScript activée)  ComboFix 07-11-08.1 - valérie 2007-11-18 7:37:03.4 -

C'est-à-dire qu'au #51, on lit que le même ComboFix est lancé pour la quatrième fois.
( et sous un autre nom d'utilisateur que les deux premières fois )

Ce qui veut bien dire que ComboFix n'avait pas été supprimé . 
Mais question est : « Pourquoi ? »

Recevais-tu parallèlement d'autres conseils, par messagerie privée (par exemple) ?
J'essaie uniquement de comprendre.

Merci pour ta réponse.
Al.
-

havi · Answer

Bonjour afideg et Merci Moe , je fais de mon mieux , en ce moment je fais l'analyse sous panda mais combofix me fait un quelquechose de bizarre , j'ai effacé tout les composants de combofix sur mon ordi et la ça me dit après avoir commencé à le démarrer que " la date actuelle est 18/11/2007 cette copie de combofix  a expiré supprimer cette copie avant de télécharger une copie à jour."

havi · Answer

Non je ne reçois pas de conseils par messagerie privé , je suis ce que tu me dis  , pour mon ordi j'utilise différents  pseudo , alors dans toute cette affaire je me suis emmelé les pinceaux , désolé pour ça !!! 0_0 si ça te dérange pour les analyses je resterais sous un pseudo bien défini.Ok

afideg · Answer

Re,

Je reçois la même chose http://img134.imageshack.us/img134/6733/screenshot170dt5.png

Supprime ce téléchargement, y compris l'icône sur le bureau.
Et refais un nouveau téléchargement.
Nous verrons si c'est ce lien qui a été modifié pour associer la nouvelle procédure.

Merci
Al.

havi · Answer

voilà le rapport sous panda:


;***********************************************************************************************************************************************************************************
ANALYSIS: 2007-11-18 23:00:26
PROTECTIONS: 1
MALWARE: 14
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description                                  Version                       Active    Updated
;===================================================================================================================================================================================
Norton Antivirus 2004                        10.00.10                      No        No
;===================================================================================================================================================================================
MALWARE
Id        Description                        Type                Active    Severity  Disinfectable  Disinfected Location
;===================================================================================================================================================================================
00139061  Cookie/Doubleclick                 TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@doubleclick[1].txt
00139064  Cookie/Atlas DMT                   TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@atdmt[1].txt
00139535  Application/Processor              HackTools           No        0         Yes            No           C:\WINDOWS\system32\Process.exe
00145393  Cookie/Tradedoubler                TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@tradedoubler[1].txt
00167704  Cookie/Xiti                        TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@xiti[1].txt
00167749  Cookie/Toplist                     TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@toplist[1].txt
00168090  Cookie/Serving-sys                 TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@serving-sys[1].txt
00168093  Cookie/Serving-sys                 TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@bs.serving-sys[1].txt
00168116  Cookie/Comclick                    TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@fl01.ct2.comclick[1].txt
00169190  Cookie/Advertising                 TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@advertising[2].txt
00170554  Cookie/Overture                    TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@overture[1].txt
00173520  Cookie/Bluestreak                  TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@bluestreak[2].txt
00262020  Cookie/Atwola                      TrackingCookie      No        0         Yes            No           C:\Documents and Settings\valÃ©rie\Cookies\valÃ©rie@atwola[1].txt
01262593  Application/NirCmd.A               HackTools           No        0         Yes            No           C:\WINDOWS\NirCmd.exe
;===================================================================================================================================================================================
SUSPECTS
Location
;===================================================================================================================================================================================
;===================================================================================================================================================================================

havi · Answer

Après ton conseil c'est la même chose qui se passe!!!

afideg · Answer

Re

Chez moi aussi
J'ai transmis l'info
J'attends réponse

Ceci 00139535 Application/Processor HackTools No 0 Yes No C:\WINDOWS\system32\Process.exe 
... correspond à SmitfraudFix qui pourtant a été supprimé (je pense).

Ceci 01262593 Application/NirCmd.A HackTools No 0 Yes No C:\WINDOWS\NirCmd.exe 
... correspond à ComboFix qui apparemment n'est pas supprimé.

J'attends.
Al.

afideg · Answer

(suite) En attendant, peux-tu faire cette mise à jour importante, à cause de ceci: C:\Program Files\Java supprimer j2re1.4.2_03 Les mises à jour Java ne sont pas des mises à jour de confort ; ce sont des mises à jour de SÉCURITÉ . En effet, une vulnérabilité a été identifiée dans Sun JDK et JRE, elle pourrait être exploitée par des attaquants distants afin de compromettre un système vulnérable. Une vulnérabilité a été identifiée dans Sun JDK et JRE, elle pourrait être exploitée par des attaquants distants afin de compromettre un système vulnérable. Vas chez Java Sun < https://www.oracle.com/java/technologies/javase-downloads.html > et clic sur ce Téléchargement < http://img529.imageshack.us/img529/3066/screenshot085lp5.png > Après installation et redémarrage, vas dans le "panneau de configuration"/"Ajout-Suppr. de programmes" afin de désinstaller les anciennes versions. Ceci pour récupérer de l'espace disque et éventuellement pour virer les failles présentes dans ces anciennes versions. Une fois JRE installé, dans votre « console de paramétrage », accessible depuis le « Panneau de configuration », choisir l’onglet "Java", puis dans "paramètres de l'application Java Runtime", clic sur bouton "afficher", vous accédez à cet écran." Source: http://www.libellules.ch/dotclear/index.php?2007/02/03/1671-java-toutes-petites-astuces Vous pouvez « Désactiver la console = Ne pas lancer la console » et « Désactiver l'icône de la Systray depuis l'onglet "avancé" ( http://www.java.com/fr/download/help/5000021000.xml ). Reste à supprimer dans "C:\" > "Program Files" > "Dossier Java" le vieux dossier qui n'est pas ôter lors de la désinstallation. Tu m'aiderais en répondant à ma question # 56. Al.

havi · Answer

Ceci 01262593 Application/NirCmd.A HackTools No 0 Yes No C:\WINDOWS\NirCmd.exe 
... correspond à ComboFix qui apparemment n'est pas supprimé. 
Bizarre je pensais avoir supprimer Combofix ? 

et pour java je n'arrive pas à le lancer car ça m'écris " avertissement : une erreur d'analyse de ce certificat interdit d'en vérifier l'authenticité. Aucune assertion sur l'origine ou la validité du code n'est possible.

L'installatiion et l'exécution de ce code ne sont pas autorisées." 

Et pour ta réponse peut tu relire le poste 58 j'y ai répondu.

afideg · Answer

Merci Je n'avais pas lu # 58. Sorry. A)- Pour Java: Vas chez Java Sun < https://www.java.com/fr/download/manual.jsp > et télécharge la dernière version 1°- après avoir testé ceci : http://img471.imageshack.us/img471/6472/screenshot002sy6.png ( compatibilités ) 2°- choisir le deuxième lien de téléchargement < http://img181.imageshack.us/img181/7987/screenshot079oe6.png >( pour installation hors ligne = non automatique ) Ce qui signifie qu'une fois le téléchargement terminé, se déconnecter du Net et désactiver Antivirus et Pare-feu pour lancer l'installation. Et suivre les instructions Et télécharge la dernière Version 6 Update3. B)- Supprimer les outils utilisés devenus inutiles, ainsi que les quarantaines éventuelles; comme ceci: •- Télécharger _OTMoveIt sur ton bureau > < http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe > •- Lance OTMoveIt.exe par double-clic [*]Clique sur CleanUp! (le programme va télécharger un fichier texte qui servira à nettoyer les programmes que l'on a téléchargés). NOTE : Normalement, ton Firewall (parefeu) devrait te demander si _OTMoveIt peut accéder à Internet. Autorise-le. [*]Une liste apparaît dans la partie gauche d' _OTMoveIt. [*]Un message apparaît pour confirmer le nettoyage. Confirme Ce programme supprime les outils utilisés ainsi que les quarantaines éventuelles. ==> J'aurai besoin du rapport SVP. La manoeuvre nécessitera un reboot (=redémarrage) initié par le programme. Merci Sur d'autres sites, ils ont également souci avec ComboFix. ==> attendre. à+..

havi · Answer

C'est fait !!!!

afideg · Answer

Re

==> J'aurai besoin du rapport _OTMoveIt SVP
Soit  cleanup.txt  je pense
Merci

Al.


Merci

havi · Answer

voilà le rapport de clean up: [nobackups] avenger.zip Avenger avenger.txt bfu.zip BFU combofix.exe QooBox ComboFix*.txt catchme.exe nircmd.exe swreg.exe Swxcacls.exe Swsc.exe dss.exe Deckard FindAWF.exe AWF.txt fixwareout.exe fixwareout fsbl.exe fsbl*.log gmer.exe gmer.dll gmer.ini gmer.log gmer_uninstall.cmd gmer.sys gmer haxfix.exe haxfix.txt killbox.exe !Killbox NoLop.exe NoLop.txt NoLopOLD.txt delete.bat OTMoveIt.exe _OTMoveIt rustbfix.exe Rustbfix sdfix.exe SDFix SmitfraudFix.exe SmitfraudFix rapport.txt SysInsite VundoFix.exe VundoFix Backups vundofix.txt win32delfkil.exe _backupD windelf.txt winpfind.exe WinPfind winpfind3u.exe WinPFind3u cleanup.txt [deleteself]

afideg · Answer

(fin)
Comment va ton PC?
As-tu encore des soucis ?
Bonne nuit
Al

moe · Answer

re,

Pour Combofix, avant de le lancer, double clic sur l'horloge et change la date, recule-là d'un jour par exemple et valide.
Combo tournera normalement ensuite, sans le message d'erreur.
Remets ensuite la date telle quelle était.

C'est du provisoire en attendant que la nouvelle version du fix arrive en téléchargement, car il doit surement y avoir une raison pour que les auteurs aient voulu que celle-ci ne soit valide jusqu'à aujourd'hui.

@++

havi · Answer

Non je n'ai  plus de soucis avec mon pc , et merci merci encore pour ta patience , ça me fais plaisir , mon ordi est en forme!!! et pour moe : merci pour l'info!!

ouinouin2 · Answer

salut, allez sur http://gregoire-aribaut.fr/index.html ça explique tout tres bien !

Un trojan qui persiste depuis quatre jours!!!

70 réponses

Discussions similaires