[infecté] sécurity center - Page 2

  1.  3v!ld3@d Auteur
    ComboFix 07-12-31.4 - Administrateur 2008-01-01 19:15:15.3 - NTFSx86
    Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.508 [GMT 1:00]
    Running from: C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe
    Command switches used :: C:\Documents and Settings\Administrateur\Bureau\CFScript.txt.txt
    * Created a new restore point

    FILE
    C:\WINDOWS\system32\dfuosyuk.ini
    C:\WINDOWS\system32\efcyxxw.dll
    C:\WINDOWS\system32\fbjtmoqn.ini
    C:\WINDOWS\system32\fjftbmlk.ini
    C:\WINDOWS\system32\hvdnwwuw.ini
    C:\WINDOWS\system32\iejfurri.ini
    C:\WINDOWS\system32\ifqdjtna.ini
    C:\WINDOWS\system32\mcrh.tmp
    C:\WINDOWS\system32\ndaTqsVqrX.dll
    C:\WINDOWS\system32\odrryclj.ini
    C:\WINDOWS\system32\pmnkkii.dll
    C:\WINDOWS\system32\pmnonno.dll
    C:\WINDOWS\system32\puraqrvk.ini
    C:\WINDOWS\system32\qlqrjxsw.ini
    C:\WINDOWS\system32\vdqeeoow.ini
    C:\WINDOWS\SYSTEM32\webhits32.dll
    C:\WINDOWS\system32\xlyfyhol.ini
    C:\WINDOWS\system32\xpbygurm.ini
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Program Files\Navilog1
    C:\Program Files\Navilog1\catchme.exe
    C:\Program Files\Navilog1\GetPaths.exe
    C:\Program Files\Navilog1\gnc.exe
    C:\Program Files\Navilog1\navilog1.bat
    C:\Program Files\Navilog1\oem2ansi.exe
    C:\Program Files\Navilog1\Process.exe
    C:\Program Files\Navilog1\reboot.exe
    C:\Program Files\Navilog1\recherok.txt
    C:\Program Files\Navilog1\reg.exe
    C:\Program Files\Navilog1\regnavi.reg
    C:\Program Files\Navilog1\traite.bat
    C:\Program Files\Navilog1\traite2.bat
    C:\Program Files\Navilog1\unins000.dat
    C:\Program Files\Navilog1\unins000.exe
    C:\VundoFix Backups
    C:\VundoFix Backups\dcbuecex.dll.bad
    C:\VundoFix Backups\dkqpopmi.ini.bad
    C:\VundoFix Backups\dsgfvuhf.dll.bad
    C:\VundoFix Backups\eajaubjs.exe.bad
    C:\VundoFix Backups\fhuvfgsd.ini.bad
    C:\VundoFix Backups\gebbxyy.dll.bad
    C:\VundoFix Backups\hggdefc.dll.bad
    C:\VundoFix Backups\hlujixga.dll.bad
    C:\VundoFix Backups\hobjxovq.exe.bad
    C:\VundoFix Backups\impopqkd.dll.bad
    C:\VundoFix Backups\jkhfg.dll.bad
    C:\VundoFix Backups\jlcyrrdo.dll.bad
    C:\VundoFix Backups\joatpcbj.exe.bad
    C:\VundoFix Backups\klmbtfjf.dll.bad
    C:\VundoFix Backups\kuysoufd.dll.bad
    C:\VundoFix Backups\kxgekxvx.exe.bad
    C:\VundoFix Backups\lohyfylx.dll.bad
    C:\VundoFix Backups\lwdjqsed.dll.bad
    C:\VundoFix Backups\mfdxfwka.exe.bad
    C:\VundoFix Backups\neltesti.dll.bad
    C:\VundoFix Backups\nqomtjbf.dll.bad
    C:\VundoFix Backups\pfeeaxrt.exe.bad
    C:\VundoFix Backups\rsklxstw.dll.bad
    C:\VundoFix Backups\smkcnxup.dll.bad
    C:\VundoFix Backups\sukwjbji.dll.bad
    C:\VundoFix Backups\uslxrgbt.dll.bad
    C:\VundoFix Backups\vlvrsfik.exe.bad
    C:\VundoFix Backups\winbjv32.dll.bad
    C:\VundoFix Backups\wooeeqdv.dll.bad
    C:\VundoFix Backups\wpqyiswg.exe.bad
    C:\WINDOWS\adaway.lic
    C:\WINDOWS\PerfInfo
    C:\WINDOWS\PerfInfo\Ir2ui8I3POuc.exe
    C:\WINDOWS\PerfInfo\Ir2ui8I3POud.exe
    C:\WINDOWS\ppqvmpqr
    C:\WINDOWS\ppqvmpqr\1.png
    C:\WINDOWS\ppqvmpqr\2.png
    C:\WINDOWS\ppqvmpqr\3.png
    C:\WINDOWS\ppqvmpqr\4.png
    C:\WINDOWS\ppqvmpqr\5.png
    C:\WINDOWS\ppqvmpqr\6.png
    C:\WINDOWS\ppqvmpqr\bottom-rc.gif
    C:\WINDOWS\ppqvmpqr\content.png
    C:\WINDOWS\ppqvmpqr\download.gif
    C:\WINDOWS\ppqvmpqr\frame-bottom-left.gif
    C:\WINDOWS\ppqvmpqr\frame-h1bg.gif
    C:\WINDOWS\ppqvmpqr\head.png
    C:\WINDOWS\ppqvmpqr\indexuc.html
    C:\WINDOWS\ppqvmpqr\indexud.html
    C:\WINDOWS\ppqvmpqr\main.css
    C:\WINDOWS\ppqvmpqr\net.png
    C:\WINDOWS\ppqvmpqr\pc-mag.gif
    C:\WINDOWS\ppqvmpqr\pc.gif
    C:\WINDOWS\ppqvmpqr\poloska1.png
    C:\WINDOWS\ppqvmpqr\poloska2.png
    C:\WINDOWS\ppqvmpqr\poloska3.png
    C:\WINDOWS\ppqvmpqr\promouc1.html
    C:\WINDOWS\ppqvmpqr\promouc2.html
    C:\WINDOWS\ppqvmpqr\promouc3.html
    C:\WINDOWS\ppqvmpqr\promouc4.html
    C:\WINDOWS\ppqvmpqr\promouc5.html
    C:\WINDOWS\ppqvmpqr\promoud1.html
    C:\WINDOWS\ppqvmpqr\promoud2.html
    C:\WINDOWS\ppqvmpqr\promoud3.html
    C:\WINDOWS\ppqvmpqr\promoud4.html
    C:\WINDOWS\ppqvmpqr\promoud5.html
    C:\WINDOWS\ppqvmpqr\reg.png
    C:\WINDOWS\ppqvmpqr\repair.png
    C:\WINDOWS\ppqvmpqr\scr-1.png
    C:\WINDOWS\ppqvmpqr\scr-2.png
    C:\WINDOWS\ppqvmpqr\styles.css
    C:\WINDOWS\ppqvmpqr\top-rc.gif
    C:\WINDOWS\ppqvmpqr\vline.gif
    C:\WINDOWS\system32\dfuosyuk.ini
    C:\WINDOWS\system32\efcyxxw.dll
    C:\WINDOWS\system32\fbjtmoqn.ini
    C:\WINDOWS\system32\fjftbmlk.ini
    C:\WINDOWS\system32\hvdnwwuw.ini
    C:\WINDOWS\system32\iejfurri.ini
    C:\WINDOWS\system32\ifqdjtna.ini
    C:\WINDOWS\system32\juvprpba
    C:\WINDOWS\system32\juvprpba\bg1.gif
    C:\WINDOWS\system32\juvprpba\bgtop.gif
    C:\WINDOWS\system32\juvprpba\bottom1.gif
    C:\WINDOWS\system32\juvprpba\essentials.gif
    C:\WINDOWS\system32\juvprpba\icon1.ico
    C:\WINDOWS\system32\juvprpba\install1.gif
    C:\WINDOWS\system32\juvprpba\left1.gif
    C:\WINDOWS\system32\juvprpba\li.gif
    C:\WINDOWS\system32\juvprpba\logo.gif
    C:\WINDOWS\system32\juvprpba\main.htm
    C:\WINDOWS\system32\juvprpba\mainframe.htm
    C:\WINDOWS\system32\juvprpba\reinstall1.gif
    C:\WINDOWS\system32\juvprpba\right1.gif
    C:\WINDOWS\system32\juvprpba\s1.htm
    C:\WINDOWS\system32\juvprpba\s2.htm
    C:\WINDOWS\system32\juvprpba\s3.htm
    C:\WINDOWS\system32\juvprpba\SMTop1.gif
    C:\WINDOWS\system32\juvprpba\SMTop2.gif
    C:\WINDOWS\system32\juvprpba\SMTop3.gif
    C:\WINDOWS\system32\juvprpba\SMTop4.gif
    C:\WINDOWS\system32\juvprpba\soft1_off.gif
    C:\WINDOWS\system32\juvprpba\soft1_off_ext.gif
    C:\WINDOWS\system32\juvprpba\soft1_on.gif
    C:\WINDOWS\system32\juvprpba\soft1_on_ext.gif
    C:\WINDOWS\system32\juvprpba\soft2_off.gif
    C:\WINDOWS\system32\juvprpba\soft2_off_ext.gif
    C:\WINDOWS\system32\juvprpba\soft2_on.gif
    C:\WINDOWS\system32\juvprpba\soft2_on_ext.gif
    C:\WINDOWS\system32\juvprpba\soft3_off.gif
    C:\WINDOWS\system32\juvprpba\soft3_off_ext.gif
    C:\WINDOWS\system32\juvprpba\soft3_on.gif
    C:\WINDOWS\system32\juvprpba\soft3_on_ext.gif
    C:\WINDOWS\system32\juvprpba\softbottom_off.gif
    C:\WINDOWS\system32\juvprpba\softbottom_on.gif
    C:\WINDOWS\system32\juvprpba\softleft_off.gif
    C:\WINDOWS\system32\juvprpba\softleft_on.gif
    C:\WINDOWS\system32\juvprpba\top1.gif
    C:\WINDOWS\system32\juvprpba\top2.gif
    C:\WINDOWS\system32\juvprpba\turnoff1.gif
    C:\WINDOWS\system32\juvprpba\turnon1.gif
    C:\WINDOWS\system32\mcrh.tmp
    C:\WINDOWS\system32\ndaTqsVqrX.dll
    C:\WINDOWS\system32\odrryclj.ini
    C:\WINDOWS\system32\pmnkkii.dll
    C:\WINDOWS\system32\pmnonno.dll
    C:\WINDOWS\system32\puraqrvk.ini
    C:\WINDOWS\system32\qlqrjxsw.ini
    C:\WINDOWS\system32\vdqeeoow.ini
    C:\WINDOWS\SYSTEM32\webhits32.dll
    C:\WINDOWS\system32\xlyfyhol.ini
    C:\WINDOWS\system32\xpbygurm.ini

    .
    ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-12-01 to 2008-01-01 ))))))))))))))))))))))))))))))))))))
    .

    2008-01-01 19:14 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe
    2007-12-25 22:44 . 2007-12-25 22:44 <REP> d-------- C:\winviftool
    2007-12-25 17:38 . 2007-12-25 17:38 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\TomTom Media Center
    2007-12-25 17:30 . 2007-12-25 17:33 <REP> d--hs---- C:\WINDOWS\system32\ShellDHCP
    2007-12-25 17:30 . 2007-12-25 17:30 <REP> d-------- C:\Program Files\AviSynth 2.5
    2007-12-25 17:27 . 2007-12-25 17:27 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\TomTom
    2007-12-25 17:27 . 2007-12-25 17:27 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\TomTom
    2007-12-25 17:25 . 2007-12-25 17:25 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\InstallShield
    2007-12-25 13:49 . 2007-12-25 13:49 <REP> d-------- C:\Program Files\MSN Messenger
    2007-12-25 13:44 . 2007-12-25 13:44 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
    2007-12-25 13:43 . 2007-12-25 13:43 <REP> d-------- C:\Program Files\Windows Live
    2007-12-25 13:43 . 2007-12-25 13:43 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\WLInstaller
    2007-12-22 14:05 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
    2007-12-22 14:05 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
    2007-12-22 14:05 . 2007-12-20 23:11 81,920 --a------ C:\WINDOWS\system32\IEDFix.exe
    2007-12-22 14:05 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
    2007-12-22 14:05 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
    2007-12-21 17:53 . 2007-12-22 14:06 1,992 --a------ C:\WINDOWS\system32\tmp.reg
    2007-12-21 12:13 . 2004-08-03 23:54 23,040 --a------ C:\WINDOWS\system32\AAP.DLL
    2007-12-21 12:11 . 2007-04-16 16:53 1,049,600 --a------ C:\WINDOWS\system32\AAK.dll
    2007-12-21 12:11 . 2004-08-03 23:54 685,056 --a------ C:\WINDOWS\system32\AAD.DLL
    2007-12-21 12:11 . 2007-12-21 12:11 255 --a------ C:\WINDOWS\system32\ad_away.lic
    2007-12-20 19:11 . 2007-12-20 19:11 23 --ahs---- C:\WINDOWS\system32\efefffdbee_r.dll
    2007-12-20 19:11 . 2007-12-20 19:11 23 --a------ C:\WINDOWS\system32\eafc0_r.ocx
    2007-12-20 18:50 . 2007-12-20 18:50 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\SUPERAntiSpyware.com
    2007-12-20 11:08 . 2007-12-20 11:08 22,328 --a------ C:\Documents and Settings\Administrateur\Application Data\PnkBstrK.sys
    2007-12-20 11:05 . 2007-07-19 18:14 3,727,720 --a------ C:\WINDOWS\system32\d3dx9_35.dll
    2007-12-20 11:05 . 2007-07-19 18:14 1,358,192 --a------ C:\WINDOWS\system32\D3DCompiler_35.dll
    2007-12-20 11:05 . 2007-07-19 18:14 444,776 --a------ C:\WINDOWS\system32\d3dx10_35.dll
    2007-12-20 11:05 . 2007-12-20 11:05 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe
    2007-12-16 18:06 . 2007-12-30 13:20 69 --a------ C:\WINDOWS\NeroDigital.ini
    2007-12-16 01:14 . 2007-12-16 01:14 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\SUPERAntiSpyware.com
    2007-12-14 19:59 . 2007-12-14 19:59 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Ahead
    2007-12-14 19:58 . 2007-12-14 19:58 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Ahead
    2007-12-14 19:00 . 2007-12-14 19:00 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Nero
    2007-12-14 18:52 . 2007-12-14 21:04 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Nero
    2007-12-12 18:37 . 2004-08-04 00:45 32,128 --a------ C:\WINDOWS\system32\drivers\wceusbsh.sys
    2007-12-12 18:37 . 2004-08-04 00:45 32,128 --a--c--- C:\WINDOWS\system32\dllcache\wceusbsh.sys
    2007-12-01 14:26 . 2005-05-26 15:34 2,297,552 --a------ C:\WINDOWS\system32\d3dx9_26.dll
    2007-12-01 14:25 . 2007-12-20 13:15 294 --a------ C:\WINDOWS\game.ini
    2007-12-01 13:51 . 2007-12-01 13:51 0 ---hs---- C:\WINDOWS\SFE75421C.tmp

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-01-01 18:16 --------- d-----w C:\Program Files\Mozilla Thunderbird
    2007-12-29 10:45 427,400 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx
    2007-12-29 10:45 36,112,416 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat
    2007-12-25 16:26 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2007-12-21 15:21 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy
    2007-12-21 08:42 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft Help
    2007-12-20 18:20 --------- d-----w C:\Documents and Settings\yannixme\Application Data\LimeWire
    2007-12-20 18:20 --------- d-----w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Application Data\LimeWire
    2007-12-16 11:24 --------- d-----w C:\Program Files\Windows Media Bonus Pack for Windows XP
    2007-12-14 20:10 --------- d-----w C:\Program Files\Fichiers communs\Ahead
    2007-12-04 14:56 93,264 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys
    2007-12-04 14:55 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
    2007-12-04 14:53 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
    2007-12-04 14:51 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
    2007-12-04 14:49 26,624 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
    2007-11-25 15:01 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Leadertech
    2007-11-24 22:19 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft
    2007-11-23 20:47 --------- d-----w C:\Program Files\Apple Software Update
    2007-11-23 20:47 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Apple
    2007-11-20 09:32 --------- d-----w C:\Program Files\Windows Media Connect 2
    2007-11-16 14:54 --------- d-----w C:\Program Files\Java
    2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
    2007-11-12 18:42 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\vlc
    2007-11-12 14:58 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\DivX
    2007-11-12 13:46 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Logitech
    2007-11-12 13:45 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Logitech
    2007-11-12 13:38 --------- d-----w C:\Program Files\Fichiers communs\Logitech
    2007-11-11 19:54 61,277 ----a-w C:\WINDOWS\BricoPackUninst.cmd
    2007-11-11 19:54 5,400 ----a-w C:\WINDOWS\BricoPackFoldersDelete.cmd
    2007-11-11 19:41 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Thunderbird
    2007-11-11 19:41 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Talkback
    2007-11-11 16:37 0 ---ha-w C:\WINDOWS\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
    2007-11-11 16:37 0 ---ha-w C:\WINDOWS\system32\drivers\Msft_Kernel_LMouFilt_01005.Wdf
    2007-10-15 21:00 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7046.bat
    2007-10-15 20:45 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\3776.bat
    2007-10-15 20:30 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\4763.bat
    2007-10-15 20:15 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9454.bat
    2007-10-15 20:00 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9289.bat
    2007-10-15 19:45 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\2323.bat
    2007-10-15 19:30 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\6208.bat
    2007-10-15 19:15 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7814.bat
    2007-10-15 19:00 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9708.bat
    2007-10-15 18:45 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7010.bat
    2007-10-15 18:30 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\6786.bat
    2007-10-15 18:14 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\6090.bat
    2007-10-15 17:59 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9540.bat
    2007-10-15 17:44 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\6360.bat
    2007-10-15 17:29 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9874.bat
    2007-10-15 17:14 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\5839.bat
    2007-10-15 16:59 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\8566.bat
    2007-10-15 16:44 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\5092.bat
    2007-10-15 16:29 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\8716.bat
    2007-10-15 16:14 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7884.bat
    2007-10-15 15:59 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\8309.bat
    2007-10-15 15:44 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9819.bat
    2007-10-15 15:29 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\2718.bat
    2007-10-15 15:14 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7806.bat
    2007-10-15 14:59 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\5964.bat
    2007-10-15 14:44 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7608.bat
    2007-10-15 14:29 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\8096.bat
    2007-10-15 14:14 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7364.bat
    2007-10-15 13:58 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9825.bat
    2007-10-15 13:43 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7244.bat
    2007-10-15 13:28 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\6651.bat
    2007-10-15 13:13 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\3114.bat
    2007-10-15 12:58 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\5041.bat
    2007-10-15 12:07 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\2277.bat
    2007-10-15 11:52 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7492.bat
    2007-10-15 07:56 56,320 ------w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\app.exe
    2007-10-15 07:56 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\4898.bat
    2007-10-14 12:51 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9122.bat
    2007-10-14 12:50 128 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\psw.exe
    2007-10-14 12:49 128 ----a-w C:\ps.exe
    2007-10-01 18:08 1,212 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Application Data\filterclsid.dat
    2005-05-13 16:12 217,073 --sha-r C:\WINDOWS\meta4.exe
    2005-10-24 10:13 66,560 --sha-r C:\WINDOWS\MOTA113.exe
    2005-10-13 20:27 422,400 --sha-r C:\WINDOWS\x2.64.exe
    2005-10-07 18:14 308,224 --sha-r C:\WINDOWS\system32\avisynth.dll
    2005-07-14 11:31 27,648 --sha-r C:\WINDOWS\system32\AVSredirect.dll
    2005-06-26 14:32 616,448 --sha-r C:\WINDOWS\system32\cygwin1.dll
    2005-06-21 21:37 45,568 --sha-r C:\WINDOWS\system32\cygz.dll
    2004-01-24 23:00 70,656 --sha-r C:\WINDOWS\system32\i420vfw.dll
    2006-04-27 09:24 2,945,024 --sha-r C:\WINDOWS\system32\Smab.dll
    2005-02-28 12:16 240,128 --sha-r C:\WINDOWS\system32\x.264.exe
    2004-01-24 23:00 217,088 --sha-r C:\WINDOWS\system32\yv12vfw.dll
    .

    ((((((((((((((((((((((((((((( snapshot_2007-12-30_20.05.02.59 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2007-12-29 12:25:00 68,608 ----a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2007-12-31 16:33:39 68,608 ----a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2007-12-29 12:25:06 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2007-12-31 16:33:49 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2007-12-29 12:25:07 4,308,992 ----a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2007-12-31 16:33:50 4,308,992 ----a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    - 2007-12-29 12:25:08 482,304 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2007-12-31 16:33:51 482,304 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    - 2007-12-29 12:25:04 2,878,976 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2007-12-31 16:33:46 2,902,016 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    - 2007-12-29 12:24:57 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2007-12-31 16:33:34 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2007-12-29 12:24:57 114,176 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2007-12-31 16:33:34 114,176 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    - 2007-12-29 12:25:11 260,096 ----a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2007-12-31 16:33:57 260,096 ----a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2007-12-29 12:25:02 5,025,792 ----a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2007-12-31 16:33:42 5,156,864 ----a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    - 2007-12-29 12:25:00 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2007-12-31 16:33:39 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2007-12-29 12:24:57 503,808 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    + 2007-12-31 16:33:33 507,904 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2007-12-29 12:24:58 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2007-12-31 16:33:36 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    - 2007-12-29 12:25:05 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2007-12-31 16:33:48 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    - 2007-12-29 12:25:05 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2007-12-31 16:33:48 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    - 2007-12-29 12:25:06 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2007-12-31 16:33:49 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    - 2007-12-29 12:24:59 413,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2007-12-31 16:33:36 413,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    - 2007-12-29 12:24:59 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2007-12-31 16:33:37 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2007-12-29 12:24:59 647,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    + 2007-12-31 16:33:38 647,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    - 2007-12-29 12:24:59 73,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    + 2007-12-31 16:33:38 73,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    - 2007-12-29 12:24:58 745,472 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2007-12-31 16:33:36 749,568 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    - 2007-12-29 12:25:13 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2007-12-31 16:33:59 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2007-12-29 12:25:12 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2007-12-31 16:33:59 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    - 2007-12-29 12:24:53 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2007-12-31 16:33:30 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    - 2007-12-29 12:25:12 667,648 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2007-12-31 16:33:58 667,648 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2007-12-29 12:25:13 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2007-12-31 16:34:00 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2007-12-29 12:24:56 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2007-12-31 16:33:32 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2007-12-29 12:24:56 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2007-12-31 16:33:31 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2007-12-29 12:24:56 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2007-12-31 16:33:32 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    - 2007-12-29 12:25:10 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2007-12-31 16:33:54 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    - 2007-12-29 12:25:01 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2007-12-31 16:33:40 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2007-12-29 12:25:10 389,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2007-12-31 16:33:54 413,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    - 2007-12-29 12:25:08 716,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2007-12-31 16:33:52 716,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    - 2007-12-29 12:24:58 884,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2007-12-31 16:33:35 888,832 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    - 2007-12-29 12:25:05 5,050,368 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2007-12-31 16:33:47 5,001,216 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    - 2007-12-29 12:25:01 188,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    + 2007-12-31 16:33:41 188,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2007-12-29 12:25:01 397,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2007-12-31 16:33:40 397,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2007-12-29 12:25:02 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2007-12-31 16:33:41 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    - 2007-12-29 12:25:11 700,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2007-12-31 16:33:56 577,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    - 2007-12-29 12:25:08 368,640 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2007-12-31 16:33:52 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    - 2007-12-29 12:25:11 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2007-12-31 16:33:56 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2007-12-29 12:25:09 299,008 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2007-12-31 16:33:53 299,008 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    - 2007-12-29 12:25:09 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2007-12-31 16:33:53 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2007-12-29 12:25:00 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2007-12-31 16:33:39 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    - 2007-12-29 12:25:02 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2007-12-31 16:33:41 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    - 2007-12-29 12:25:12 835,584 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2007-12-31 16:33:58 835,584 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    - 2007-12-29 12:25:03 86,016 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2007-12-31 16:33:43 86,016 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    - 2007-12-29 12:25:03 823,296 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2007-12-31 16:33:43 823,296 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    - 2007-12-29 12:25:03 5,316,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2007-12-31 16:33:44 5,152,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    - 2007-12-29 12:25:04 2,035,712 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2007-12-31 16:33:45 2,027,520 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    - 2007-12-29 12:25:10 3,018,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    + 2007-12-31 16:33:55 2,940,928 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    + 2008-01-01 16:18:24 26,624 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\[u]0[/u]98320a51e15093768af6dbea2698286\Accessibility.ni.dll
    + 2008-01-01 16:18:25 888,832 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\18e4d36db38d68ef68cb7d8693e3ac2b\AspNetMMCExt.ni.dll
    + 2008-01-01 16:18:26 237,568 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\95a86df8520fb1da62180d8a6f172b05\CustomMarshalers.ni.dll
    + 2008-01-01 16:18:25 15,360 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\dfsvc\fb615b4576479434e7945244404d1cd1\dfsvc.ni.exe
    + 2008-01-01 16:18:27 880,640 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\d342a0e74f569bad915b2812f510f537\Microsoft.Build.Engine.ni.dll
    + 2008-01-01 16:18:27 81,920 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\62ea12c88550cb1f94c40f01ae7aa256\Microsoft.Build.Framework.ni.dll
    + 2008-01-01 16:18:29 1,687,552 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\[u]0[/u]5648fb588a6eadecf5df60c0790ba78\Microsoft.Build.Tasks.ni.dll
    + 2008-01-01 16:18:30 163,840 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\2ab977c414998bf47f60caff66d8e38e\Microsoft.Build.Utilities.ni.dll
    + 2008-01-01 16:18:32 1,720,320 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\26da7d726df064d1c302ae7f1107c08a\Microsoft.VisualBasic.ni.dll
    + 2008-01-01 16:05:05 11,304,960 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\390b613e75fb7982c25b17e60402e053\mscorlib.ni.dll
    + 2008-01-01 16:18:34 1,003,520 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\5f5caeeee8e80623dde6ac5e6eea1422\System.Configuration.ni.dll
    + 2008-01-01 16:06:01 6,676,480 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\32579c2391c6758fc2b66cd71c3146c5\System.Data.ni.dll
    + 2008-01-01 16:18:35 1,724,416 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\[u]0[/u]9fe14653141648ed0f1b1c1f19c312d\System.Deployment.ni.dll
    + 2008-01-01 16:06:27 10,702,848 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Design\eb7ff7c3ef5ee51b2904c49ce2c89bed\System.Design.ni.dll
    + 2008-01-01 16:18:37 1,216,512 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\4280288aec2d4b3a7665f1a7bb784558\System.DirectoryServices.ni.dll
    + 2008-01-01 16:18:38 512,000 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\5c08a595e172997b8e3a0aff5f1bf9fd\System.DirectoryServices.Protocols.ni.dll
    + 2008-01-01 16:06:36 229,376 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b1cdc7c41190b1202569d4c4face6cfe\System.Drawing.Design.ni.dll
    + 2008-01-01 16:06:33 1,601,536 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\[u]0[/u]8093480b73bf4668fdf2ed2a4f1c1e2\System.Drawing.ni.dll
    + 2008-01-01 16:18:39 659,456 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\3a476d569b3788fafcd7116ccfe47c38\System.EnterpriseServices.ni.dll
    + 2008-01-01 16:18:39 294,912 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\3a476d569b3788fafcd7116ccfe47c38\System.EnterpriseServices.Wrapper.dll
    + 2008-01-01 16:18:40 729,088 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Security\4139ea70cac8235e67aa2aa4e4265ea9\System.Security.ni.dll
    + 2008-01-01 16:18:41 684,032 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Transactions\8aa13ad03d5f9880bb75249ca1af662f\System.Transactions.ni.dll
    + 2008-01-01 16:18:57 2,306,048 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\f07150b46501bfbbd4cbc1e86d260184\System.Web.Mobile.ni.dll
    + 2008-01-01 16:18:58 237,568 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\8562d36617369dfdd001f258eacecf01\System.Web.RegularExpressions.ni.dll
    + 2008-01-01 16:19:00 1,941,504 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Services\df87cf95450c996d7e871f9b3c20729f\System.Web.Services.ni.dll
    + 2008-01-01 16:18:54 12,185,600 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\a4e3f8cc8542e3fc938deb52b2d695a5\System.Web.ni.dll
    + 2008-01-01 16:06:54 13,107,200 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\4c3ec74819e6028d00f7af73eaf59799\System.Windows.Forms.ni.dll
    + 2008-01-01 16:07:02 5,623,808 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\9717f5e89efdade9f252d903f4ad7427\System.Xml.ni.dll
    + 2008-01-01 16:05:46 8,130,560 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\d2d9082d3ef900c6bada95662ad4efd4\System.ni.dll
    - 2005-09-23 06:28:58 55,488 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
    + 2007-04-13 02:21:18 58,712 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
    - 2005-09-23 06:28:32 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
    + 2007-04-13 02:20:52 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
    - 2005-09-23 06:28:32 8,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
    + 2007-04-13 02:20:52 8,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
    - 2005-09-23 06:28:32 23,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
    + 2007-04-13 02:20:52 23,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
    - 2005-09-23 06:28:32 70,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
    + 2007-04-13 02:20:50 75,264 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
    - 2005-09-23 06:28:32 26,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
    + 2007-04-13 02:20:52 32,608 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
    - 2005-09-23 06:28:32 29,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
    + 2007-04-13 02:20:52 33,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
    - 2005-09-23 06:28:32 29,888 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    + 2007-04-13 02:20:52 32,600 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    - 2005-09-23 06:28:32 503,808 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
    + 2007-04-13 02:20:52 507,904 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
    - 2005-09-23 06:28:56 88,576 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
    + 2007-04-13 02:21:16 88,576 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
    - 2005-09-23 06:28:38 4,608 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
    + 2007-04-13 02:20:58 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
    - 2005-09-23 06:28:56 9,728 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
    + 2007-04-13 02:21:16 9,728 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
    - 2005-09-23 06:28:56 224,952 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
    + 2007-04-13 02:21:16 228,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
    - 2005-09-23 06:28:56 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    + 2007-04-13 02:21:16 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    - 2005-09-23 06:28:48 413,696 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
    + 2007-04-13 02:21:10 413,696 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
    - 2005-09-23 06:28:48 647,168 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
    + 2007-04-13 02:21:10 647,168 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
    - 2005-09-23 06:28:48 745,472 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
    + 2007-04-13 02:21:08 749,568 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
    - 2005-09-23 06:28:32 87,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
    + 2007-04-13 02:20:52 87,040 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
    - 2005-09-23 06:28:56 800,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2007-04-13 02:21:18 802,304 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    - 2005-09-23 06:28:56 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
    + 2007-04-13 02:21:16 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
    - 2005-09-23 06:28:56 326,144 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    + 2007-04-13 02:21:16 326,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    - 2005-09-23 06:28:56 4,308,992 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    + 2007-04-13 02:21:16 4,308,992 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    - 2005-09-23 06:28:56 102,400 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
    + 2007-04-13 02:21:16 102,912 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
    - 2005-09-23 06:28:56 226,816 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
    + 2007-04-13 02:21:18 227,328 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
    - 2005-09-23 06:28:56 66,240 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    + 2007-04-13 02:21:18 68,952 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    - 2005-09-23 06:28:50 5,615,616 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    + 2007-04-13 02:21:12 5,634,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    - 2005-09-23 06:28:56 96,440 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.exe
    + 2007-04-13 02:21:16 99,152 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.exe
    - 2005-09-23 06:28:56 14,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\normalization.dll
    + 2007-04-13 02:21:18 15,360 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\normalization.dll
    - 2005-09-23 06:28:50 136,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\peverify.dll
    + 2007-04-13 02:21:12 136,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\peverify.dll
    - 2005-09-23 06:28:56 377,344 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    + 2007-04-13 02:21:18 382,464 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    - 2005-09-23 06:28:56 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
    + 2007-04-13 02:21:18 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
    - 2005-09-23 06:28:58 389,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
    + 2007-04-13 02:21:18 413,696 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
    - 2005-09-23 06:28:56 2,878,976 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
    + 2007-04-13 02:21:16 2,902,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
    - 2005-09-23 06:28:56 482,304 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
    + 2007-04-13 02:21:18 482,304 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
    - 2005-09-23 06:28:56 716,800 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
    + 2007-04-13 02:21:18 716,800 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
    - 2005-09-23 06:28:38 884,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
    + 2007-04-13 02:20:58 888,832 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
    - 2005-09-23 06:28:56 5,050,368 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
    + 2007-04-13 02:21:16 5,001,216 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
    - 2005-09-23 06:28:56 188,416 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
    + 2007-04-13 02:21:18 188,416 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
    - 2005-09-23 06:28:56 3,018,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.dll
    + 2007-04-13 02:21:16 2,940,928 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.dll
    - 2005-09-23 06:28:56 700,416 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
    + 2007-04-13 02:21:16 577,536 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
    - 2005-09-23 06:28:56 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
    + 2007-04-13 02:21:16 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
    - 2005-09-23 06:28:56 47,616 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
    + 2007-04-13 02:21:18 47,616 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
    - 2005-09-23 06:28:56 114,176 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
    + 2007-04-13 02:21:18 114,176 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
    - 2005-09-23 06:28:56 368,640 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
    + 2007-04-13 02:21:16 372,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
    - 2005-09-23 06:28:56 299,008 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
    + 2007-04-13 02:21:16 299,008 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
    - 2005-09-23 06:28:56 260,096 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
    + 2007-04-13 02:21:18 260,096 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
    - 2005-09-23 06:28:56 5,025,792 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    + 2007-04-13 02:21:16 5,156,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    - 2005-09-23 06:28:56 5,316,608 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    + 2007-04-13 02:21:16 5,152,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    - 2005-09-23 06:28:56 2,035,712 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
    + 2007-04-13 02:21:16 2,027,520 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
    - 2005-09-23 06:29:06 1,140,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\vbc.exe
    + 2007-04-13 02:21:28 1,166,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\vbc.exe
    - 2005-09-23 06:28:30 1,306,624 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
    + 2007-04-13 02:20:50 1,330,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
    - 2005-09-23 06:28:32 298,496 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\webengine.dll
    + 2007-04-13 02:20:52 406,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\webengine.dll
    - 2006-12-22 11:28:14 271,360 ----a-w C:\WINDOWS\system32\mscoree.dll
    + 2007-04-13 02:21:14 271,360 ----a-w C:\WINDOWS\system32\mscoree.dll
    - 2007-12-29 12:26:53 62,344 ----a-w C:\WINDOWS\system32\perfc009.dat
    + 2007-12-31 16:34:12 62,344 ----a-w C:\WINDOWS\system32\perfc009.dat
    - 2007-12-29 12:26:53 75,266 ----a-w C:\WINDOWS\system32\perfc00C.dat
    + 2007-12-31 16:34:12 75,266 ----a-w C:\WINDOWS\system32\perfc00C.dat
    - 2007-12-29 12:26:53 401,064 ----a-w C:\WINDOWS\system32\perfh009.dat
    + 2007-12-31 16:34:12 401,064 ----a-w C:\WINDOWS\system32\perfh009.dat
    - 2007-12-29 12:26:53 468,072 ----a-w C:\WINDOWS\system32\perfh00C.dat
    + 2007-12-31 16:34:12 468,072 ----a-w C:\WINDOWS\system32\perfh00C.dat
    - 2007-12-13 20:26:50 156,160 ----a-w C:\WINDOWS\system32\swreg.exe
    + 2000-08-31 07:00:00 156,160 ----a-w C:\WINDOWS\system32\swreg.exe
    + 2008-01-01 18:21:26 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_674.dat
    - 2007-12-29 12:24:57 258,048 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    + 2007-12-31 16:33:34 258,048 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    - 2007-12-29 12:24:57 114,176 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    + 2007-12-31 16:33:34 114,176 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    .
    -- Snapshot reset to current date --
    .
    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{88107f94-97f1-43cf-93e1-8a39bf0ea96a}]
    C:\WINDOWS\system32\neltesti.dll

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E6B9C29B-3D66-4825-BC5B-63388BCDCB1A}]
    C:\WINDOWS\system32\jkhfg.dll

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "RocketDock"="E:\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe" [2007-03-18 23:05 630784]
    "SuperCopier2.exe"="E:\SuperCopier2\SuperCopier2.exe" [2006-07-07 17:45 1052672]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ZoneAlarm Client"="e:\ZoneAlarm\zlclient.exe" [2007-06-21 21:54 919016]
    "Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-01-23 14:44 101136 C:\WINDOWS\KHALMNPR.Exe]
    "avast!"="e:\Avast\ashDisp.exe" [2007-12-04 14:00 79224]
    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
    @=""

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^Démarrage rapide du logiciel HP Image Zone.lnk]
    path=C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Démarrage rapide du logiciel HP Image Zone.lnk
    backup=C:\WINDOWS\pss\Démarrage rapide du logiciel HP Image Zone.lnkCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk]
    path=C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\HP Digital Imaging Monitor.lnk
    backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^HPZRCV01.LNK]
    path=C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\HPZRCV01.LNK
    backup=C:\WINDOWS\pss\HPZRCV01.LNKCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^Logitech Desktop Messenger.lnk]
    path=C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Logitech Desktop Messenger.lnk
    backup=C:\WINDOWS\pss\Logitech Desktop Messenger.lnkCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    2007-10-10 19:51 39792 --a------ E:\Adobe\Reader 8.0\Reader\Reader_sl.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
    c:\program files\fichiers communs\ahead\lib\nmbgmonitor.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Component Manager]
    2004-05-12 14:18 241664 --a------ C:\Program Files\HP\hpcoretech\hpcmpmgr.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
    2004-02-12 12:38 49152 --a------ E:\HP\HP Software Update\HPWuSchd2.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer]
    KHALMNPR.EXE

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCommunicationsManager]
    2007-04-05 09:46 488984 --a------ c:\program files\fichiers communs\logishrd\lcommgr\communications_helper.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
    C:\Program Files\Messenger\msmsgs.exe /background

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
    C:\Program Files\MSN Messenger\MsnMsgr.Exe /background

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
    C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SC2]
    C:\Program Files\SecCenter\scprot4.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
    SOUNDMAN.EXE

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]
    e:\TomTom HOME 2\HOMERunner.exe -s

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirtualCloneDrive]

    S3 SetupNTGLM7X;SetupNTGLM7X;F:\NTGLM7X.sys []

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{de5760ad-b533-11dc-bcbe-001109893b1e}]
    \Shell\AutoRun\command - J:\InstallTomTomHOME.exe

    .
    Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
    "2007-12-19 11:57:40 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
    - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
    "2007-12-20 15:32:00 C:\WINDOWS\Tasks\WebReg 20030101163220.job"
    - E:\HP\Digital Imaging\bin\hpqwrg.exeh/TaskName 20030101163220 /N
    .
    **************************************************************************

    catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-01-01 19:21:56
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    PROCESS: C:\WINDOWS\Explorer.EXE [6.00.2900.3156]
    -> E:\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon.dll
    -> E:\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.dll
    .
    Completion time: 2008-01-01 19:24:00 - machine was rebooted
    C:\qoobox\ComboFix-quarantined-files.txt 2008-01-01 18:23:56
    C:\qoobox\ComboFix2.txt 2007-12-30 19:05:56
    C:\qoobox\ComboFix3.txt 2007-12-29 10:48:38
    .
    2007-12-31 16:34:29 --- E O F ---
    0
    1. 3v!ld3@d Auteur
      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 19:55, on 2008-01-01
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      e:\Avast\aswUpdSv.exe
      e:\Avast\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      E:\ZoneAlarm\zlclient.exe
      E:\Avast\ashDisp.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      E:\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
      E:\SuperCopier2\SuperCopier2.exe
      e:\a-squared\a2service.exe
      E:\Logitech\SetPoint\SetPoint.exe
      E:\Ad-Aware 2007\aawservice.exe
      E:\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
      E:\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE
      e:\Avast\ashMaiSv.exe
      e:\Avast\ashWebSv.exe
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      E:\TomTom HOME 2\HOMERunner.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      E:\TomTom HOME 2\xulrunner\xulrunner.exe
      D:\Utilitaires\HiJackThis\PROUT.exe.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - e:\Spybot\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: {a69ae0fb-93a8-1e39-fc34-1f7949f70188} - {88107f94-97f1-43cf-93e1-8a39bf0ea96a} - C:\WINDOWS\system32\neltesti.dll (file missing)
      O2 - BHO: (no name) - {E6B9C29B-3D66-4825-BC5B-63388BCDCB1A} - C:\WINDOWS\system32\jkhfg.dll (file missing)
      O4 - HKLM\..\Run: [ZoneAlarm Client] "e:\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
      O4 - HKLM\..\Run: [avast!] e:\Avast\ashDisp.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKCU\..\Run: [RocketDock] "E:\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe"
      O4 - HKCU\..\Run: [SuperCopier2.exe] E:\SuperCopier2\SuperCopier2.exe
      O4 - Startup: RocketDock.lnk = E:\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
      O4 - Startup: UberIcon.lnk = E:\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
      O4 - Startup: Y'z Shadow.lnk = E:\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
      O4 - Global Startup: Logitech SetPoint.lnk = ?
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
      O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - e:\a-squared\a2service.exe
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - E:\Ad-Aware 2007\aawservice.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - e:\Avast\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - e:\Avast\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - e:\Avast\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - e:\Avast\ashWebSv.exe
      O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      0
      1. ^^Marie^^
        Bonsoir

        Il serait judicieux de donner les symptômes de ton pc aussi

        A++
        0
        1. 3v!ld3@d Auteur
          bin les symptômes (à part un ralentissement de mon pc) c est cette petite fenêtre qui apparait en bas a gauche de mon écran pour me dire que j ai des virus...
          0
          2. afideg Contributeur sécurité
            Salut,

            RAPPEL

            ... Et poursuis ensuite les analyses du post # 20, § D et suivants.
            Merci
            à+..
            0
            1. ^^Marie^^
              --

              Je suis entrée dans CCM, La cigarette dans une main,
              Les Tongs dans l’autre main, Les ***** nus sous la chemise
              0
              1. 3v!ld3@d Auteur
                RAPPORT COMBO FIX

                ComboFix 07-12-31.4 - Administrateur 2008-01-03 16:39:37.4 - NTFSx86
                Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.601 [GMT 1:00]
                Running from: C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe
                .

                ((((((((((((((((((((((((((((( Fichiers créés 2007-12-03 to 2008-01-03 ))))))))))))))))))))))))))))))))))))
                .

                2008-01-01 19:27 . 2008-01-01 19:27 <REP> d-------- C:\VundoFix Backups
                2008-01-01 19:14 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe
                2007-12-25 22:44 . 2007-12-25 22:44 <REP> d-------- C:\winviftool
                2007-12-25 17:38 . 2007-12-25 17:38 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\TomTom Media Center
                2007-12-25 17:30 . 2007-12-25 17:33 <REP> d--hs---- C:\WINDOWS\system32\ShellDHCP
                2007-12-25 17:30 . 2007-12-25 17:30 <REP> d-------- C:\Program Files\AviSynth 2.5
                2007-12-25 17:27 . 2007-12-25 17:27 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\TomTom
                2007-12-25 17:27 . 2007-12-25 17:27 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\TomTom
                2007-12-25 17:25 . 2007-12-25 17:25 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\InstallShield
                2007-12-25 13:49 . 2007-12-25 13:49 <REP> d-------- C:\Program Files\MSN Messenger
                2007-12-25 13:44 . 2007-12-25 13:44 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
                2007-12-25 13:43 . 2007-12-25 13:43 <REP> d-------- C:\Program Files\Windows Live
                2007-12-25 13:43 . 2007-12-25 13:43 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\WLInstaller
                2007-12-22 14:05 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
                2007-12-22 14:05 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
                2007-12-22 14:05 . 2007-12-20 23:11 81,920 --a------ C:\WINDOWS\system32\IEDFix.exe
                2007-12-22 14:05 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
                2007-12-22 14:05 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
                2007-12-21 17:53 . 2007-12-22 14:06 1,992 --a------ C:\WINDOWS\system32\tmp.reg
                2007-12-21 12:13 . 2004-08-03 23:54 23,040 --a------ C:\WINDOWS\system32\AAP.DLL
                2007-12-21 12:11 . 2007-04-16 16:53 1,049,600 --a------ C:\WINDOWS\system32\AAK.dll
                2007-12-21 12:11 . 2004-08-03 23:54 685,056 --a------ C:\WINDOWS\system32\AAD.DLL
                2007-12-21 12:11 . 2007-12-21 12:11 255 --a------ C:\WINDOWS\system32\ad_away.lic
                2007-12-20 19:11 . 2007-12-20 19:11 23 --ahs---- C:\WINDOWS\system32\efefffdbee_r.dll
                2007-12-20 19:11 . 2007-12-20 19:11 23 --a------ C:\WINDOWS\system32\eafc0_r.ocx
                2007-12-20 18:50 . 2007-12-20 18:50 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\SUPERAntiSpyware.com
                2007-12-20 11:08 . 2007-12-20 11:08 22,328 --a------ C:\Documents and Settings\Administrateur\Application Data\PnkBstrK.sys
                2007-12-20 11:05 . 2007-07-19 18:14 3,727,720 --a------ C:\WINDOWS\system32\d3dx9_35.dll
                2007-12-20 11:05 . 2007-07-19 18:14 1,358,192 --a------ C:\WINDOWS\system32\D3DCompiler_35.dll
                2007-12-20 11:05 . 2007-07-19 18:14 444,776 --a------ C:\WINDOWS\system32\d3dx10_35.dll
                2007-12-20 11:05 . 2007-12-20 11:05 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe
                2007-12-16 18:06 . 2008-01-03 14:44 69 --a------ C:\WINDOWS\NeroDigital.ini
                2007-12-16 01:14 . 2007-12-16 01:14 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\SUPERAntiSpyware.com
                2007-12-14 19:59 . 2007-12-14 19:59 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Ahead
                2007-12-14 19:58 . 2007-12-14 19:58 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Ahead
                2007-12-14 19:00 . 2007-12-14 19:00 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Nero
                2007-12-14 18:52 . 2007-12-14 21:04 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Nero
                2007-12-12 18:37 . 2004-08-04 00:45 32,128 --a------ C:\WINDOWS\system32\drivers\wceusbsh.sys
                2007-12-12 18:37 . 2004-08-04 00:45 32,128 --a--c--- C:\WINDOWS\system32\dllcache\wceusbsh.sys

                .
                (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                .
                2008-01-03 09:23 --------- d-----w C:\Program Files\Mozilla Thunderbird
                2008-01-01 18:21 1,625,525 ----a-w C:\WINDOWS\Internet Logs\tvDebug.zip
                2007-12-29 10:45 427,400 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx
                2007-12-29 10:45 36,112,416 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat
                2007-12-25 16:26 --------- d--h--w C:\Program Files\InstallShield Installation Information
                2007-12-21 15:21 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy
                2007-12-21 08:42 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft Help
                2007-12-20 18:20 --------- d-----w C:\Documents and Settings\yannixme\Application Data\LimeWire
                2007-12-20 18:20 --------- d-----w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Application Data\LimeWire
                2007-12-16 11:24 --------- d-----w C:\Program Files\Windows Media Bonus Pack for Windows XP
                2007-12-14 20:10 --------- d-----w C:\Program Files\Fichiers communs\Ahead
                2007-12-04 14:56 93,264 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys
                2007-12-04 14:55 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
                2007-12-04 14:53 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
                2007-12-04 14:51 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
                2007-12-04 14:49 26,624 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
                2007-12-04 13:04 837,496 ----a-w C:\WINDOWS\system32\aswBoot.exe
                2007-12-04 12:54 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr
                2007-11-25 15:01 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Leadertech
                2007-11-24 22:19 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft
                2007-11-23 20:47 --------- d-----w C:\Program Files\Apple Software Update
                2007-11-23 20:47 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Apple
                2007-11-20 09:32 --------- d-----w C:\Program Files\Windows Media Connect 2
                2007-11-16 14:54 --------- d-----w C:\Program Files\Java
                2007-11-14 04:57 223,744 ----a-w C:\WINDOWS\system32\b4fm.dll
                2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
                2007-11-12 18:42 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\vlc
                2007-11-12 14:58 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\DivX
                2007-11-12 13:46 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Logitech
                2007-11-12 13:45 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Logitech
                2007-11-12 13:38 --------- d-----w C:\Program Files\Fichiers communs\Logitech
                2007-11-11 19:54 61,277 ----a-w C:\WINDOWS\BricoPackUninst.cmd
                2007-11-11 19:54 5,400 ----a-w C:\WINDOWS\BricoPackFoldersDelete.cmd
                2007-11-11 19:54 219,648 ----a-w C:\WINDOWS\system32\uxtheme.dll
                2007-11-11 19:41 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Thunderbird
                2007-11-11 19:41 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Talkback
                2007-11-11 16:37 0 ---ha-w C:\WINDOWS\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
                2007-11-11 16:37 0 ---ha-w C:\WINDOWS\system32\drivers\Msft_Kernel_LMouFilt_01005.Wdf
                2007-10-29 22:43 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll
                2007-10-25 08:28 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll
                2007-10-15 21:00 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7046.bat
                2007-10-15 20:45 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\3776.bat
                2007-10-15 20:30 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\4763.bat
                2007-10-15 20:15 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9454.bat
                2007-10-15 20:00 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9289.bat
                2007-10-15 19:45 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\2323.bat
                2007-10-15 19:30 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\6208.bat
                2007-10-15 19:15 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7814.bat
                2007-10-15 19:00 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9708.bat
                2007-10-15 18:45 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7010.bat
                2007-10-15 18:30 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\6786.bat
                2007-10-15 18:14 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\6090.bat
                2007-10-15 17:59 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9540.bat
                2007-10-15 17:44 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\6360.bat
                2007-10-15 17:29 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9874.bat
                2007-10-15 17:14 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\5839.bat
                2007-10-15 16:59 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\8566.bat
                2007-10-15 16:44 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\5092.bat
                2007-10-15 16:29 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\8716.bat
                2007-10-15 16:14 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7884.bat
                2007-10-15 15:59 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\8309.bat
                2007-10-15 15:44 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9819.bat
                2007-10-15 15:29 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\2718.bat
                2007-10-15 15:14 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7806.bat
                2007-10-15 14:59 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\5964.bat
                2007-10-15 14:44 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7608.bat
                2007-10-15 14:29 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\8096.bat
                2007-10-15 14:14 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7364.bat
                2007-10-15 13:58 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9825.bat
                2007-10-15 13:43 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7244.bat
                2007-10-15 13:28 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\6651.bat
                2007-10-15 13:13 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\3114.bat
                2007-10-15 12:58 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\5041.bat
                2007-10-15 12:07 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\2277.bat
                2007-10-15 11:52 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7492.bat
                2007-10-15 07:56 56,320 ------w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\app.exe
                2007-10-15 07:56 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\4898.bat
                2007-10-14 12:51 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9122.bat
                2007-10-14 12:50 128 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\psw.exe
                2007-10-14 12:49 128 ----a-w C:\ps.exe
                2007-10-01 18:08 1,212 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Application Data\filterclsid.dat
                2005-05-13 16:12 217,073 --sha-r C:\WINDOWS\meta4.exe
                2005-10-24 10:13 66,560 --sha-r C:\WINDOWS\MOTA113.exe
                2005-10-13 20:27 422,400 --sha-r C:\WINDOWS\x2.64.exe
                2005-10-07 18:14 308,224 --sha-r C:\WINDOWS\system32\avisynth.dll
                2005-07-14 11:31 27,648 --sha-r C:\WINDOWS\system32\AVSredirect.dll
                2005-06-26 14:32 616,448 --sha-r C:\WINDOWS\system32\cygwin1.dll
                2005-06-21 21:37 45,568 --sha-r C:\WINDOWS\system32\cygz.dll
                2004-01-24 23:00 70,656 --sha-r C:\WINDOWS\system32\i420vfw.dll
                2006-04-27 09:24 2,945,024 --sha-r C:\WINDOWS\system32\Smab.dll
                2005-02-28 12:16 240,128 --sha-r C:\WINDOWS\system32\x.264.exe
                2004-01-24 23:00 217,088 --sha-r C:\WINDOWS\system32\yv12vfw.dll
                .

                ((((((((((((((((((((((((((((( snapshot_2008-01-01_19.23.29.25 )))))))))))))))))))))))))))))))))))))))))
                .
                + 2008-01-02 08:03:48 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_68c.dat
                .
                ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
                .
                .
                REGEDIT4
                *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

                [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{88107f94-97f1-43cf-93e1-8a39bf0ea96a}]
                C:\WINDOWS\system32\neltesti.dll

                [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E6B9C29B-3D66-4825-BC5B-63388BCDCB1A}]
                C:\WINDOWS\system32\jkhfg.dll

                [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                "RocketDock"="E:\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe" [2007-03-18 23:05 630784]
                "SuperCopier2.exe"="E:\SuperCopier2\SuperCopier2.exe" [2006-07-07 17:45 1052672]

                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                "ZoneAlarm Client"="e:\ZoneAlarm\zlclient.exe" [2007-06-21 21:54 919016]
                "Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-01-23 14:44 101136 C:\WINDOWS\KHALMNPR.Exe]
                "avast!"="e:\Avast\ashDisp.exe" [2007-12-04 14:00 79224]
                "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]

                C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Menu D‚marrer\Programmes\D‚marrage\
                RocketDock.lnk - E:\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe [2006-05-14 21:47:48]
                Y'z Toolbar.lnk - E:\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe [2002-09-29 13:41:10]

                C:\Documents and Settings\yannixme.UNICORNI-6138C1\Menu D‚marrer\Programmes\D‚marrage\
                RocketDock.lnk - E:\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe [2006-05-14 21:47:48]
                UberIcon.lnk - E:\BricoPacks\Crystal Clear\UberIcon\UberIcon Manager.exe [2006-02-05 13:20:14]
                Y'z Shadow.lnk - E:\BricoPacks\Crystal Clear\YzShadow\YzShadow.exe [2002-09-30 20:09:06]
                Y'z Toolbar.lnk - E:\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe [2002-09-29 13:41:10]

                C:\Documents and Settings\Administrateur\Menu D‚marrer\Programmes\D‚marrage\
                RocketDock.lnk - E:\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe [2007-03-18 23:05:02]
                UberIcon.lnk - E:\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe [2006-05-21 08:43:08]
                Y'z Shadow.lnk - E:\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe [2006-05-21 08:43:14]

                C:\Documents and Settings\All Users.WINDOWS\Menu D‚marrer\Programmes\D‚marrage\
                Logitech SetPoint.lnk - E:\Logitech\SetPoint\SetPoint.exe [2007-11-12 14:45:43]

                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
                @=""

                [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^Démarrage rapide du logiciel HP Image Zone.lnk]
                path=C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Démarrage rapide du logiciel HP Image Zone.lnk
                backup=C:\WINDOWS\pss\Démarrage rapide du logiciel HP Image Zone.lnkCommon Startup

                [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk]
                path=C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\HP Digital Imaging Monitor.lnk
                backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup

                [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^HPZRCV01.LNK]
                path=C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\HPZRCV01.LNK
                backup=C:\WINDOWS\pss\HPZRCV01.LNKCommon Startup

                [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^Logitech Desktop Messenger.lnk]
                path=C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Logitech Desktop Messenger.lnk
                backup=C:\WINDOWS\pss\Logitech Desktop Messenger.lnkCommon Startup

                [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
                2007-10-10 19:51 39792 --a------ E:\Adobe\Reader 8.0\Reader\Reader_sl.exe

                [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
                c:\program files\fichiers communs\ahead\lib\nmbgmonitor.exe

                [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Component Manager]
                2004-05-12 14:18 241664 --a------ C:\Program Files\HP\hpcoretech\hpcmpmgr.exe

                [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
                2004-02-12 12:38 49152 --a------ E:\HP\HP Software Update\HPWuSchd2.exe

                [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer]
                KHALMNPR.EXE

                [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCommunicationsManager]
                2007-04-05 09:46 488984 --a------ c:\program files\fichiers communs\logishrd\lcommgr\communications_helper.exe

                [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
                C:\Program Files\Messenger\msmsgs.exe /background

                [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
                C:\Program Files\MSN Messenger\MsnMsgr.Exe /background

                [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]

                [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
                C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe

                [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SC2]
                C:\Program Files\SecCenter\scprot4.exe

                [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
                SOUNDMAN.EXE

                [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]
                e:\TomTom HOME 2\HOMERunner.exe -s

                [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirtualCloneDrive]

                S3 SetupNTGLM7X;SetupNTGLM7X;F:\NTGLM7X.sys []

                .
                Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
                "2007-12-19 11:57:40 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
                - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
                "2007-12-20 15:32:00 C:\WINDOWS\Tasks\WebReg 20030101163220.job"
                - E:\HP\Digital Imaging\bin\hpqwrg.exeh/TaskName 20030101163220 /N
                .
                **************************************************************************

                catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                Rootkit scan 2008-01-03 16:42:16
                Windows 5.1.2600 Service Pack 2 NTFS

                scanning hidden processes ...

                scanning hidden autostart entries ...

                scanning hidden files ...

                scan completed successfully
                hidden files: 0

                **************************************************************************
                .
                --------------------- DLLs Loaded Under Running Processes ---------------------

                PROCESS: C:\WINDOWS\explorer.exe [6.00.2900.3156]
                -> E:\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.dll
                -> E:\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon.dll
                .
                Completion time: 2008-01-03 16:43:15
                C:\qoobox\ComboFix-quarantined-files.txt 2008-01-03 15:43:11
                C:\qoobox\ComboFix2.txt 2008-01-01 18:24:01
                C:\qoobox\ComboFix3.txt 2007-12-30 19:05:56
                C:\qoobox\ComboFix4.txt 2007-12-29 10:48:38
                .
                2007-12-31 16:34:29 --- E O F ---
                0
                2. 3v!ld3@d Auteur
                  RAPPORT HIJACKTHIS

                  Logfile of Trend Micro HijackThis v2.0.2
                  Scan saved at 16:49, on 03/01/2008
                  Platform: Windows XP SP2 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
                  Boot mode: Normal

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\csrss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\system32\svchost.exe
                  e:\Avast\aswUpdSv.exe
                  e:\Avast\ashServ.exe
                  E:\Avast\ashDisp.exe
                  C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
                  E:\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
                  C:\WINDOWS\system32\spoolsv.exe
                  E:\Logitech\SetPoint\SetPoint.exe
                  E:\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
                  E:\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
                  C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE
                  e:\a-squared\a2service.exe
                  E:\Ad-Aware 2007\aawservice.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\alg.exe
                  C:\Program Files\MSN Messenger\usnsvc.exe
                  C:\WINDOWS\explorer.exe
                  C:\WINDOWS\system32\wscntfy.exe
                  D:\Utilitaires\HiJackThis\PROUT.exe.exe
                  C:\WINDOWS\system32\wbem\wmiprvse.exe

                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                  O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                  O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - e:\Spybot\SDHelper.dll
                  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                  O4 - HKLM\..\Run: [ZoneAlarm Client] "e:\ZoneAlarm\zlclient.exe"
                  O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
                  O4 - HKLM\..\Run: [avast!] e:\Avast\ashDisp.exe
                  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
                  O4 - HKCU\..\Run: [RocketDock] "E:\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe"
                  O4 - HKCU\..\Run: [SuperCopier2.exe] E:\SuperCopier2\SuperCopier2.exe
                  O4 - Startup: RocketDock.lnk = E:\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
                  O4 - Startup: UberIcon.lnk = E:\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
                  O4 - Startup: Y'z Shadow.lnk = E:\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
                  O4 - Global Startup: Logitech SetPoint.lnk = ?
                  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
                  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
                  O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - e:\a-squared\a2service.exe
                  O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - E:\Ad-Aware 2007\aawservice.exe
                  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - e:\Avast\aswUpdSv.exe
                  O23 - Service: avast! Antivirus - ALWIL Software - e:\Avast\ashServ.exe
                  O23 - Service: avast! Mail Scanner - ALWIL Software - e:\Avast\ashMaiSv.exe
                  O23 - Service: avast! Web Scanner - ALWIL Software - e:\Avast\ashWebSv.exe
                  O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)
                  O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                  O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
                  0
                  1. 3v!ld3@d Auteur
                    Nouveaux problèmes:

                    J avais désinstallé NERO avant que j ai tout ces problèmes que vous m avez aidé à régler et maintenant j ai ce message d erreur qui apparait a chaque fois que j ai lance une musique ou une vidéo...

                    http://img530.imageshack.us/img530/7757/sanstitre1bb5.png

                    Je dirai rien si j avais juste a cliquer OK et voilà, mais le soucis c est que lorsque je clique sur OK il réapparait aussitôt ! Et ce au moins 10 ou 15 fois de suite !
                    C est un peu lourd a force !
                    0
                    1. afideg Contributeur sécurité
                      Bonsoir,

                      1°- J'ai moi-même NERO, et je n'ai pas ce DLL advrcntr2.dll

                      2°- Pour ce service O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)

                      As-tu installé Nero Scout ?
                      Si oui, NMIndexingService.exe est nécessaire à son bon fonctionnement .
                      Sinon, je pense que tu peux le désactiver le désactiver comme ceci:

                      Démarrer==> Exécuter ==> taper : NMIndexingService.exe > Valider par [OK]
                      La fenêtre des Services s'ouvre => vérifier dans la partie inférieure que l'onglet "Etendu" est bien sélectionné, sinon faites-le.
                      Pour modifier n'importe lequel de ces services, il suffit de faire un clic-droit sur celui que vous voulez modifier, et d'aller sur "Propriétés".
                      Ensuite le désactiver.
                      Tuto en image ici : https://www.zebulon.fr/dossiers/windows/31-services.html

                      3°- Fais ce scanKaspersky en ligne …< https://www.kaspersky.fr/downloads >
                      Branche ton Disque E
                      En bas de page, clique sur > Accept.
                      Laisse faire les définitions, mises à jour et installation d' ActiveX.
                      Puis, clique sur Next > My Computer.
                      Patiente.
                      Une fois le scan achevé, clique sur > Save report et enregistre-le
                      quelque part (p.ex. ==> bureau).

                      Poste-le dans ta prochaine réponse. Merci.

                      4°- Avais-tu exécuté ceci :
                      E)- Relance HijackThis « Do a system Scan only », sur la page/rapport qui s'affiche ( laisse-lui le temps de tout scanner ), et coche la case devant ces lignes (si elles existent encore):

                      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                      O2 - BHO: {a69ae0fb-93a8-1e39-fc34-1f7949f70188} - {88107f94-97f1-43cf-93e1-8a39bf0ea96a} - C:\WINDOWS\system32\neltesti.dll (file missing)
                      O2 - BHO: (no name) - {D2BDA2A8-03C6-472E-BC3B-642FC6318AB7} - C:\WINDOWS\system32\awtsr.dll
                      O2 - BHO: (no name) - {E6B9C29B-3D66-4825-BC5B-63388BCDCB1A} - C:\WINDOWS\system32\jkhfg.dll (file missing)
                      O2 - BHO: (no name) - {FF64059D-4D2A-4D6B-AA0F-2EE4A2FE3856} - C:\WINDOWS\system32\gebbxyy.dll
                      O4 - HKLM\..\Run: [tmxevulk] rundll32.exe "C:\Program Files\ohkvwnor\mribejsv.dll",Init
                      O4 - HKLM\..\Run: [74841975] rundll32.exe "C:\WINDOWS\system32\jlcyrrdo.dll",b

                      Ensuite ferme tes programmes en cours, SURTOUT LES LOGICIELs AVEC PROTECTION EN TEMPS REEL, (antivirus, tea timer, ewido, ad-watch)... ( seul HijackThis doit être ouvert ) , et ensuite Clic [Fix checked] ==> (fixer =corriger)

                      ????

                      À suivre ...
                      Al.
                      0
                      1. afideg Contributeur sécurité
                        (suite)

                        A)- Quelque chose me dérange; c'est ceci :

                        2007-12-20 18:20 --------- d-----w C:\Documents and Settings\yannixme\Application Data\LimeWire
                        2007-12-20 18:20 --------- d-----w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Application Data\LimeWire

                        Donc, "LimeWire" te sert-il en " P2P" ?
                        Peux-tu m'expliquer la présence de "LimeWire" dans le dossier "yannixme.UNICORNI-3A2F8C" ?

                        Peux-tu m'expliquer ce que sont tous ces fichiers ".bat" ci-dessous ?
                        C'est quoi ce dossier "yannixme.UNICORNI-3A2F8C" ?

                        2007-10-15 21:00 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7046.bat
                        2007-10-15 20:45 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\3776.bat
                        2007-10-15 20:30 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\4763.bat
                        2007-10-15 20:15 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9454.bat
                        2007-10-15 20:00 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9289.bat
                        2007-10-15 19:45 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\2323.bat
                        2007-10-15 19:30 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\6208.bat
                        2007-10-15 19:15 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7814.bat
                        2007-10-15 19:00 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9708.bat
                        2007-10-15 18:45 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7010.bat
                        2007-10-15 18:30 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\6786.bat
                        2007-10-15 18:14 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\6090.bat
                        2007-10-15 17:59 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9540.bat
                        2007-10-15 17:44 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\6360.bat
                        2007-10-15 17:29 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9874.bat
                        2007-10-15 17:14 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\5839.bat
                        2007-10-15 16:59 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\8566.bat
                        2007-10-15 16:44 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\5092.bat
                        2007-10-15 16:29 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\8716.bat
                        2007-10-15 16:14 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7884.bat
                        2007-10-15 15:59 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\8309.bat
                        2007-10-15 15:44 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9819.bat
                        2007-10-15 15:29 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\2718.bat
                        2007-10-15 15:14 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7806.bat
                        2007-10-15 14:59 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\5964.bat
                        2007-10-15 14:44 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7608.bat
                        2007-10-15 14:29 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\8096.bat
                        2007-10-15 14:14 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7364.bat
                        2007-10-15 13:58 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9825.bat
                        2007-10-15 13:43 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7244.bat
                        2007-10-15 13:28 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\6651.bat
                        2007-10-15 13:13 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\3114.bat
                        2007-10-15 12:58 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\5041.bat
                        2007-10-15 12:07 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\2277.bat
                        2007-10-15 11:52 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\7492.bat
                        2007-10-15 07:56 56,320 ------w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\app.exe
                        2007-10-15 07:56 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\4898.bat
                        2007-10-14 12:51 255 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\9122.bat
                        2007-10-14 12:50 128 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\psw.exe
                        2007-10-01 18:08 1,212 ----a-w C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Application Data\filterclsid.dat

                        B)- Peux-tu lancer cette analyse SVP ?

                        Télécharge Panda Anti-Rootkit
                        http://research.pandasoftware.com/blogs/images/AntiRootkit.zip
                        Dézippe-le sur ton bureau.
                        * Ouvre le dossier "AntiRootkit" créé,
                        * Double-clique sur le fichier PAVARK.exe et suis les instructions.
                        * Clique ensuite sur Start Scan et patiente.
                        Lorsque c'est terminé, clique sur "Advanced report", puis sur "Export CSV" ; nomme le fichier PandaRK, et clique sur "enregistrer" ; il se situe par défaut dans le dossier "Mes documents".
                        Ouvre-le et poste son contenu dans ta prochaine réponse.

                        Merci.
                        Al.
                        0
                        1. 3v!ld3@d Auteur
                          A) limewire n est pas installé sur mon pc... (Il a été mais n est plus...)

                          C'est quoi ce dossier "yannixme.UNICORNI-3A2F8C" ?
                          ---> J en sais rien !

                          Peux-tu m'expliquer ce que sont tous ces fichiers ".bat" ci-dessous ?
                          ---> Je sais même pas ce que c est un fichier.bat !

                          Pour Panda Anti-Rootkit, lorsque le scan est terminé j ai ca et c est tout !

                          http://images2.photomania.com/326524/1/radB6EDC.png
                          0
                          1. afideg Contributeur sécurité
                            Merci
                            Je prépare rapidement une procédure pour supprimer ce dossier INCONNU.

                            Voilà.
                            Fais ceci SVP :

                            1°- Télécharger _OTMoveIt (de Old_Timer) sur ton Bureau.
                            http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe

                            2°- •- Lance OTMoveIt.exe par double-clic
                            [*]Clique sur CleanUp! (le programme va télécharger un fichier texte qui servira à nettoyer les programmes que l'on a téléchargés).
                            NOTE : Normalement, ton Firewall (parefeu) devrait te demander si _OTMoveIt peut accéder à Internet. Autorise-le.
                            [*]Une liste apparaît dans la partie gauche d' _OTMoveIt.
                            [*]Un message apparaît pour confirmer le nettoyage. Confirme
                            Ce programme supprime les outils utilisés ainsi que les quarantaines éventuelles.

                            La manoeuvre nécessitera un reboot (=redémarrage) initié par le programme.

                            3°- Télécharger à nouveau _OTMoveIt (de Old_Timer) sur ton Bureau.
                            http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe

                            Double-cliquer sur OTMoveIt.exe pour le lancer.
                            -copier/coller cette liste en une fois ... :

                            C:\Documents and Settings\yannixme\Application Data\LimeWire
                            C:\Documents and Settings\yannixme.UNICORNI-3A2F8C

                            - ... dans le cadre de gauche de _OTMoveIt: " Paste List of Files/Folders to be moved ".

                            - clique sur MoveIt! pour lancer la suppression.
                            - le résultat apparaitra dans le cadre "Results".
                            - clique sur "Exit" pour fermer.
                            - un rapport est situé dans C:\_OTMoveIt\MovedFiles.
                            - tu ouvres le dossier et tu trouveras le rapport
                            Poste-le SVP, merci

                            Il te sera peut-être demandé de redémarrer le pc pour achever la suppression.
                            Si c'est le cas accepte par Yes.

                            4°- •- As-tu encore cette alerte de DLL manquant ? (après désactivation du service)

                            5°- •- Relance une analyse avec ComboFix, SVP, comme précédemment.

                            Bonne soirée
                            Al.
                            0
                            1. 3v!ld3@d Auteur
                              C:\Documents and Settings\yannixme\Application Data\LimeWire\xml\schemas moved successfully.
                              C:\Documents and Settings\yannixme\Application Data\LimeWire\xml\misc moved successfully.
                              Folder move failed. C:\Documents and Settings\yannixme\Application Data\LimeWire\xml\data\delete_me scheduled to be moved on reboot.
                              C:\Documents and Settings\yannixme\Application Data\LimeWire\xml\data moved successfully.
                              C:\Documents and Settings\yannixme\Application Data\LimeWire\xml moved successfully.
                              C:\Documents and Settings\yannixme\Application Data\LimeWire\themes\windows_theme moved successfully.
                              C:\Documents and Settings\yannixme\Application Data\LimeWire\themes moved successfully.
                              C:\Documents and Settings\yannixme\Application Data\LimeWire\.AppSpecialShare moved successfully.
                              C:\Documents and Settings\yannixme\Application Data\LimeWire moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Start Menu\Programs\Games moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Start Menu\Programs moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Start Menu moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents\Zoom Book Saved Games moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents\Samsung PC Studio\Text moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents\Samsung PC Studio\Sound moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents\Samsung PC Studio\Photo moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents\Samsung PC Studio\Movie moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents\Samsung PC Studio\Image moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents\Samsung PC Studio\Clip moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents\Samsung PC Studio moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents\PacificPoker\3vildead moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents\PacificPoker moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents\My Art moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents\Mes vidéos moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents\Mes images moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents\Mes fichiers reçus moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents\Ma musique\Mes sélections moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents\Ma musique moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents\a-squared\Scansets moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents\a-squared\Reports moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents\a-squared\Logs moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents\a-squared moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Mes documents moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Menu Démarrer\Programmes\WinRAR moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Menu Démarrer\Programmes\SuperCopier2 moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Menu Démarrer\Programmes\IrfanView moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Menu Démarrer\Programmes\HP moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Menu Démarrer\Programmes\Démarrage moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Menu Démarrer\Programmes\BricoPacks\Crystal Clear moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Menu Démarrer\Programmes\BricoPacks moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Menu Démarrer\Programmes\Accessoires\Divertissement moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Menu Démarrer\Programmes\Accessoires\Accessibilité moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Menu Démarrer\Programmes\Accessoires moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Menu Démarrer\Programmes moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Menu Démarrer moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Incomplete moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Favoris\Liens moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Favoris moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Contacts moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C\Bureau moved successfully.
                              C:\Documents and Settings\yannixme.UNICORNI-3A2F8C moved successfully.

                              Created on 01/04/2008 09:47:48
                              0
                              1. 3v!ld3@d Auteur
                                J ai toujours cette fenêtre qui me dit qu il manque advrcntr2.dll
                                0
                                1. !^^![ME] Contributeur
                                  Salut,

                                  Cette dll est en rapport avec quel logiciel?
                                  Elle apparait a quel moment?

                                  Apart ca avez vous encore des soucis?
                                  0
                                  2. !^^![ME] Contributeur
                                    Bonjour,

                                    si tu veux garder Nero:

                                    Vous pouvez télécharger "advrcntr2.dll" sur ce lien :
                                    https://www.dll-files.com/advrcntr2.dll.html

                                    Puis le copier-coller dans C:\Program Files \Fichiers communs\Ahead\Lib
                                    si vous avez ce dossier

                                    @++
                                    0
                                    2. !^^![ME] Contributeur
                                      @^^Marie^^Salut Marie,

                                      désolé, autant pour moi =/
                                      Ensin, au moins il/elle a le lien si il lui manque une dll ;-)

                                      @++
                                      0
                                  3. afideg Contributeur sécurité
                                    Bonjour "!^^![ME] et Marie,

                                    Rappel: J'ai moi-même Nero, et je n'ai pas ce DLL advrcntr2.dll

                                    Salut 3v!ld3@d ,

                                    Merci pour ton boulot, bien réalisé.
                                    À part ce foutu message DLL advrcntr2.dll, comment va le PC ?

                                    Souhaites-tu supprimer totalement Nero ?
                                    Marie, je ne vois pas comment fair à partir de ton lien.
                                    On peut le faire avec Regedit

                                    Sur mon PC, j'ai Nero StartSmart et pas de problème de gravure (jusqu'à présent) ;)

                                    Al.
                                    0
                                    1. ^^Marie^^
                                      Salut Afifi

                                      Est-ce que cela ne dépend pas de la version (si tu vois ce que je veux dire ;;)))))

                                      0
                                  Précédent
                                  • 1
                                  • 2
                                  • 3

                                  Discussions similaires

                                  Security boot fail lors du démarrage
                                  Steu

                                  5 réponses
                                  SecurityHealth est a désactiver ou pas au démarrage de W10 Pro 64 ?
                                  Walti55

                                  2 réponses
                                  A quoi sert ETDctrl ? Peut-on le supprimer ?
                                  Siempre2407

                                  2 réponses
                                  Comment retirer le SECURE BOOT ?
                                  Elparigo60

                                  10 réponses
                                  A quoi sert ATI Catalyst Control Center ?
                                  Ryder-SCS

                                  16 réponses