Cheval de troie win 32

Bonjour,

Commence par poster un rapport HijackThis stp,
>Télécharge HiJackThis : https://www.commentcamarche.net/telecharger/securite/11747-hijackthis/
- Lance Hijackthis, sélectionne < Scan > puis < save log >
- Enregistre le rapport sur ton bureau.
Et envoie stp, par collier/coller, ton log Hijackthis sur le forum,

;)

A+

Voila, j'ai téléchargé hijackthis comme convenu, voici mon log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:17:09, on 01/03/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\QuickTime\qttask.exe
C:\Windows\WindowsMobile\wmdSync.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Common Files\microsoft shared\Works Shared\WkCalRem.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\conime.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\sdclt.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Windows\Explorer.EXE
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live Toolbar\msn_sl.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = free.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [MODE FREE BIRD SURF] "C:\ProgramData\Part flap more.zlef2o"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: wkcalrem.LNK = C:\Program Files\Common Files\microsoft shared\Works Shared\WkCalRem.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://maximum2phase3.spaces.live.com/PhotoUpload/VistaMsnPUpldfr-fr.cab
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\Windows\System32\StkCSrv.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

Re,
merci,
pas besoin d'envoyer deux fois le rapport .... lol :)))
> Les logiciels suivants (AVG et Ccleaner) te seront utiles par la suite - ils sont à conserver...

> Télécharge et installe sur ton PC AVG anti-spyware (si tu as déjà les programmes alors fais juste les mises à jour) : http://www.commentcamarche.net/telecharger/telecharger 218 avg anti spyware, fais les mises à jour puis ferme le programme.

> Télécharge et installe Ccleaner : https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html fais les mises à jour puis ferme le programme.
Si besoin est tu trouveras des Tutoriaux ici :
https://kerio.probb.fr/t242-tuto-ccleaner-v-2 , https://www.malekal.com/tutoriel-ccleaner/ et [http://perso.orange.fr/jesses/Docs/Logiciels/CCleaner

> Télécharge Cleaner : http://www.malekal.com/download/clean.zip (différent de Ccleaner),

> Télécharge SDFix sur ton bureau
- Double clique sur l'archive SDFix qui à été créé sur le Bureau et installe le programme (l'installation va créer un dossier (à la racine du disque dur par défaut) nommé SDFix). Ferme ensuite le programme.

> Commence par faire un copier/coller de ce poste : (conseillé)
Ouvre un nouveau fichier Bloc notes (clique sur "Démarrer" => "Programmes" =>"Accessoires" => "Bloc notes"),
puis fait un copier/coller de tout le contenu de la fenêtre de ce poste dans le fichier texte.
Sauvegarde le sur le bureau, tu pourras y avoir accès même déconnecté ou en mode sans échec.

> Démarre en mode sans échec : (image). Si problème : tuto ici

> Lance AVG,
- Clique sur le menu Analyse (de la barre d'outils). Clique après sur l'onglet Paramètres, puis <Dans Comment réagir?> clique sur <Actions recommandées> et choisi <Quarantaine>.
- Vérifie que toutes les cases sont cochées dans <Comment faire l'analyse ?> et dans <Programmes potentiellement dangereux> et vérifie que le bouton-radio <Générer un rapport après chaque analyse> soit aussi coché.
- Vas dans l'onglet 'Analyse', puis clique <Analyse complète du système>.
Remarque : Une fois l'analyse terminée, il faut faire un clique droit sur un fichier infecté et demander à "AVG Anti-Spyware 7.5" de le supprimer.
Puis clique sur "Appliquer toutes les actions" afin de tout supprimer automatiquement.
- Clique sur "Enregistrer le rapport" puis enregistre le sur ton bureau.
- Fais un copier/coller du rapport généré dans ton prochain poste.

> Lance Ccleaner,
- Choisi l’onglet "Options" puis clique sur "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier temp de Windows, plus vieux que 48 heures" (tout doit être supprimé).
- Dans l'onglet "Nettoyeur" clique sur "Analyse".
- Une fois l'analyse terminée, clique sur "Lancer le Nettoyage".
- Dans l'onglet "registre" => Recherches des erreurs => Réparer les erreurs sélectionnées => enregistre une sauvegarde => corriger toutes erreurs sélectionnées => ok => fermer.
N.B : Si Ccleaner te propose d'enregistrer une sauvegarde, reponds oui et enregistre sous 'Bureau'
Recommence jusqu’à ce qu’il ne trouve plus rien (cela varie en général entre 1 et 4 fois).

> Pour Clean (encore en mode sans échec) :
- Double-clic sur clean.cmd
- Une fenêtre va apparaître, choisis l'option 2, suis les consignes et poste le rapport clean
NB : Si besoin, clean : http://mickael.barroux.free.fr/securite/clean.php

> Pour SDFix (toujours en mode sans échec) :
- Vas dans c:/SDFix et double-clique sur RunThis.bat
- Appuie sur < Y > puis < Entrée >....Le nettoyage commance....patience...
- Le programme va te demander de relancer le PC, frappe une touche...
- Le nettoyage se termine...un rapport apparait...
-Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse

> Relance ton PC en mode normal

> Relance Hijackthis :
Puis sélectionne < do a system scan and save a logfile >,

Et envoie moi, par collier/coller, ton log Hijackthis stp,

Bon courage,

:)

bonjour,
bien j'ai suivi vos instructions, ce n'était pas évident!
d'ailleurs problème avec clean qui ne voulait pas envoyer le rapport, étant donné que je ne pouvais pas me connecter sur internet en mode sans échec, problème aussi avec sdfix, qui ne voulait pas ouvrir le dossier runthisbat, j'ai réussi à faire une analyse, mais c'est douteux!!
voici quand même mon log hitjackthis: (on sait jamais)
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\QuickTime\qttask.exe
C:\Windows\WindowsMobile\wmdSync.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Common Files\microsoft shared\Works Shared\WkCalRem.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\conime.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\sdclt.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Windows\Explorer.EXE
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live Toolbar\msn_sl.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = free.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [MODE FREE BIRD SURF] "C:\ProgramData\Part flap more.zlef2o"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: wkcalrem.LNK = C:\Program Files\Common Files\microsoft shared\Works Shared\WkCalRem.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://maximum2phase3.spaces.live.com/PhotoUpload/VistaMsnPUpldfr-fr.cab
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\Windows\System32\StkCSrv.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

Bonjour,

Très bien...

Mais j'ai besoin des autres rapports pour pouvoir continuer....

comme indiqué ici : http://www.commentcamarche.net/forum/affich 5262993 cheval de troie win 32#3

3 rapports stp : AVG, clean et SDFix (ne refais pas les manip !.... les rapports se situent déjà sur C:/)

A+

voici mon rapport clean:
Script executed in Safe Mode
Rapport clean par Malekal_morte - http://www.malekal.com
Script executed in Safe Mode 02/03/2008 a 13:49:49,64

Microsoft Windows [version 6.0.6000]

*** Suppression C:
tentative de suppression de C:\autorun.inf
Impossible de supprimer C:\autorun.inf

*** Suppression C:\Windows\

*** Suppression C:\Windows\system32
tentative de suppression de C:\Windows\system32\bdod.bin
tentative de suppression de C:\Windows\system32\wininit.exe
Impossible de supprimer C:\Windows\system32\wininit.exe
tentative de suppression de C:\Windows\system32\wininit.exe
Impossible de supprimer C:\Windows\system32\wininit.exe

*** Suppression C:\Program Files

*** Deletion of the registry keys successful..
Script executed in Safe Mode
Rapport clean par Malekal_morte - http://www.malekal.com
Script executed in Safe Mode 02/03/2008 a 13:55:17,74

Microsoft Windows [version 6.0.6000]

*** Suppression C:
tentative de suppression de C:\autorun.inf
Impossible de supprimer C:\autorun.inf

*** Suppression C:\Windows\

*** Suppression C:\Windows\system32
tentative de suppression de C:\Windows\system32\wininit.exe
Impossible de supprimer C:\Windows\system32\wininit.exe
tentative de suppression de C:\Windows\system32\wininit.exe
Impossible de supprimer C:\Windows\system32\wininit.exe

*** Suppression C:\Program Files

*** Deletion of the registry keys successful..

alors g réussi a obtenir le rapport sdfix mais pas elui dAVG, pourtantjai bien cliké sur loption enregistrer un rapport! AVG avait déceler un trojan téléchargeur nommé wimar
voici celui de sdfix:

[b]System Report[/b]
*************

Run on 02/03/2008 at 14:24

Microsoft Windows [version 6.0.6000]

Current user is not an administrator

[b]Running Processes[/b]:

C:\Windows\system32\Dwm.exe [448]
C:\Windows\Explorer.EXE [528]
C:\Windows\system32\taskeng.exe [1332]
C:\Program Files\QuickTime\qttask.exe [2092]
C:\Windows\WindowsMobile\wmdSync.exe [2164]
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2188]
C:\Program Files\Alwil Software\Avast4\ashDisp.exe [2208]
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe [2216]
C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2236]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2256]
C:\Windows\ehome\ehtray.exe [2272]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2344]
C:\Program Files\Windows Media Player\wmpnscfg.exe [2356]
C:\Program Files\Common Files\microsoft shared\Works Shared\WkCalRem.exe [2376]
C:\Windows\ehome\ehmsas.exe [2432]
C:\Program Files\Internet Explorer\iexplore.exe [2440]
C:\Windows\System32\mobsync.exe [4520]
C:\Windows\system32\conime.exe [4436]

[b]Drivers - Running[/b]:

ACPI
AFD
AmdK8
aswMonFlt
aswRdr
aswTdi
atapi
athr
AVer3xEn
AVG
AvgAsCln
Beep
bowser
BthEnum
BTHMODEM
BthPan
BTHUSB
cdfs
cdrom
circlass
CLFS
CmBatt
Compbatt
crcdisk
DfsC
disk
DXGKrnl
Ecache
fastfat
FileInfo
FltMgr
ghaio
HDAudBus
HSF_DPV
HSXHWAZL
HTTP
i8042prt
IntcAzAudAddService
irda
IRENUM
irsir
iScsiPrt
itecir
kbdclass
KSecDD
lltdio
luafv
mdmxsdk
Modem
MODEMCSA
monitor
mouclass
MountMgr
mpsdrv
MRxDAV
mrxsmb
mrxsmb10
mrxsmb20
Msfs
msisadrv
mssmbios
MTsensor
Mup
NativeWifiP
NDIS
NdisTapi
Ndisuio
NdisWan
NDProxy
NetBIOS
netbt
Npfs
nsiproxy
Ntfs
Null
nvlddmkm
nvsmu
nvstor
nvstor32
ohci1394
partmgr
pci
pciide
PEAUTH
PptpMiniport
PSched
PxHelp20
RasAcd
Rasl2tp
RasPppoe
rdbss
RDPCDD
RDPENCDD
RFCOMM
rimmptsk
rimsptsk
rismxdp
rspndr
RTL8169
sdbus
secdrv
Serial
Smb
spldr
srv
srv2
srvnet
StkCMini
swenum
SynTP
Tcpip
tcpipreg
tdx
TermDD
tunnel
umbus
usbehci
usbhub
usbohci
VgaSave
volmgr
volmgrx
volsnap
Wanarpv6
WCPU
Wdf01000
winachsf
XAudio

[b]Drivers - Stopped[/b]:

adp94xx
adpahci
adpu160m
adpu320
agp440
aic78xx
aliide
amdagp
amdide
AmdK7
arc
arcsas
AsyncMac
BDRSDRV
blbdrive
BrFiltLo
BrFiltUp
Brserid
BrSerWdm
BrUsbMdm
BrUsbSer
BTHPORT
cmdide
Crusoe
drmkaud
E1G60
elxstor
fbxusb
fdc
Filetrace
flpydisk
gagp30kx
HdAudAddService
HidBth
HidIr
HidUsb
HpCISSs
HSFHWAZL
i2omp
ialm
iaStorV
iirsp
intelide
intelppm
IpFilterDriver
IpInIp
IPMIDRV
IPNAT
isapnp
iteatapi
iteraid
kbdhid
LSI_FC
LSI_SAS
LSI_SCSI
megasas
mouhid
mpio
Mraid35x
msahci
msdsm
MSKSSRV
MSPCLOCK
MSPQM
MsRPC
MSTEE
NETw3v32
nfrd960
ntrigdigi
nvraid
nv_agp
NwlnkFlt
NwlnkFwd
Parport
Parvdm
pcmcia
Processor
ql2300
ql40xx
QWAVEdrv
rdpdr
RDPWD
RTL8023xp
sbp2port
Serenum
sermouse
sffdisk
sffp_mmc
sffp_sd
sfloppy
sisagp
SiSRaid2
SiSRaid4
smserial
Symc8xx
Sym_hi
Sym_u3
Tcpip6
TDPIPE
TDTCP
tssecsrv
uagp35
udfs
uliagpkx
uliahci
UlSata
ulsata2
usbccgp
usbcir
usbprint
USBSTOR
usbuhci
usb_rndisx
vga
viaagp
ViaC7
viaide
vsmraid
WacomPen
Wanarp
Wd
WmiAcpi
WpdUsb
ws2ifsl
WUDFRd

[b]Services - Running[/b]:

a2free
aawservice
AeLookupSvc
Appinfo
ASLDRService
aswUpdSv
AudioEndpointBuilder
Audiosrv
avast!
avast!
avast!
AVG
BFE
BITS
Browser
BthServ
CryptSvc
DcomLaunch
Dhcp
Dnscache
DPS
EapHost
ehRecvr
ehSched
EMDMgmt
Eventlog
EventSystem
fdPHost
FDResPub
gpsvc
gusvc
hidserv
IKEEXT
iphlpsvc
Irmon
KeyIso
KtmRm
LanmanServer
LanmanWorkstation
LightScribeService
lmhosts
MMCSS
MpsSvc
Netman
netprofm
NlaSvc
nsi
PcaSvc
PlugPlay
PolicyAgent
ProfSvc
RapiMgr
RasMan
RpcSs
SamSs
SBSDWSCService
Schedule
seclogon
SENS
ShellHWDetection
slsvc
spmgr
Spooler
SSDPSRV
stisvc
StkSSrv
SysMain
TabletInputService
TapiSrv
TermService
Themes
TrkWks
TrustedInstaller
upnphost
UxSms
W32Time
WcesComm
WdiSystemHost
WebClient
WerSvc
WinDefend
WinHttpAutoProxySvc
Winmgmt
Wlansvc
WMPNetworkSvc
WPDBusEnum
wscsvc
WSearch
wuauserv
wudfsvc
XAudioService

[b]Services - Stopped[/b]:

ALG
CertPropSvc
clr_optimization_v2.0.50727_32
COMSysApp
DFSR
dot3svc
ehstart
FontCache3.0.0.0
hkmsvc
IDriverT
idsvc
IPBusEnum
lltdsvc
Mcx2Svc
MSCSPTISRV
MSDTC
MSiSCSI
msiserver
napagent
NBService
Netlogon
NetTcpPortSharing
NMIndexingService
p2pimsvc
p2psvc
PACSPTISVR
pla
PNRPAutoReg
PNRPsvc
ProtectedStorage
QWAVE
RasAuto
RemoteAccess
RemoteRegistry
RpcLocator
SCardSvr
SCPolicySvc
SDRSVC
SessionEnv
SharedAccess
SLUINotify
SNMPTRAP
SPTISRV
swprv
TBS
THREADORDER
UI0Detect
usnjsvc
vds
VSS
wcncsvc
WcsPlugInService
WdiServiceHost
Wecsvc
wercplsupport
WinRM
WLSetupSvc
wmiApSrv
WPCSvc

[b]Files Created/Modified - 60 Days[/b]:

C:\

2 Mar 2008 14:16:54 2 460 745 728 A.SH. "C:\pagefile.sys"
2 Mar 2008 13:55:30 1 473 A.... "C:\rapport_clean.txt"
22 Feb 2008 13:55:44 91 A.... "C:\setuplog"

C:\Windows\

2 Mar 2008 14:17:02 67 584 A.S.. "C:\Windows\bootstat.dat"
2 Mar 2008 12:25:30 4 132 A.... "C:\Windows\bthservsdp.dat"
1 Mar 2008 23:31:04 69 A.... "C:\Windows\NeroDigital.ini"
2 Mar 2008 13:56:58 814 A.... "C:\Windows\ntbtlog.txt"
1 Mar 2008 16:23:36 2 539 A.... "C:\Windows\unins000.dat"
1 Mar 2008 16:23:06 691 545 A.... "C:\Windows\unins000.exe"
2 Mar 2008 14:20:50 0 A.... "C:\Windows\WindowsUpdate.log"
1 Feb 2008 11:17:40 587 264 A.... "C:\Windows\WLXPGSS.SCR"
14 Feb 2008 11:26:14 2 144 256 A.... "C:\Windows\AppPatch\AcGenral.dll"
14 Feb 2008 11:26:14 537 600 A.... "C:\Windows\AppPatch\AcLayers.dll"
14 Feb 2008 11:26:16 2 560 A.... "C:\Windows\AppPatch\AcRes.dll"
14 Feb 2008 11:26:14 449 536 A.... "C:\Windows\AppPatch\AcSpecfc.dll"
14 Feb 2008 11:26:14 173 056 A.... "C:\Windows\AppPatch\AcXtrnal.dll"
14 Feb 2008 11:26:14 82 194 A.... "C:\Windows\AppPatch\drvmain.sdb"
14 Feb 2008 11:19:40 52 736 A.... "C:\Windows\AppPatch\iebrshim.dll"
14 Feb 2008 11:26:16 1 534 322 A.... "C:\Windows\AppPatch\msimain.sdb"
14 Feb 2008 11:26:12 22 618 A.... "C:\Windows\AppPatch\pcamain.sdb"
14 Feb 2008 11:26:16 3 217 016 A.... "C:\Windows\AppPatch\sysmain.sdb"
14 Feb 2008 11:26:14 2 144 256 A.... "C:\Windows\AppPatch\AcGenral.dll"
14 Feb 2008 11:26:14 537 600 A.... "C:\Windows\AppPatch\AcLayers.dll"
14 Feb 2008 11:26:16 2 560 A.... "C:\Windows\AppPatch\AcRes.dll"
14 Feb 2008 11:26:14 449 536 A.... "C:\Windows\AppPatch\AcSpecfc.dll"
14 Feb 2008 11:26:14 173 056 A.... "C:\Windows\AppPatch\AcXtrnal.dll"
14 Feb 2008 11:26:14 82 194 A.... "C:\Windows\AppPatch\drvmain.sdb"
14 Feb 2008 11:19:40 52 736 A.... "C:\Windows\AppPatch\iebrshim.dll"
14 Feb 2008 11:26:16 1 534 322 A.... "C:\Windows\AppPatch\msimain.sdb"
14 Feb 2008 11:26:12 22 618 A.... "C:\Windows\AppPatch\pcamain.sdb"
14 Feb 2008 11:26:16 3 217 016 A.... "C:\Windows\AppPatch\sysmain.sdb"
12 Feb 2008 16:12:12 357 020 A.... "C:\Windows\Debug\Dfsr00001.log"
2 Mar 2008 14:17:00 0 A.... "C:\Windows\Debug\PASSWD.LOG"
12 Feb 2008 16:12:12 357 020 A.... "C:\Windows\Debug\Dfsr00001.log"
2 Mar 2008 14:17:00 0 A.... "C:\Windows\Debug\PASSWD.LOG"
10 Jan 2008 6:50:48 21 504 A.... "C:\Windows\ehome\ehdebug.dll"
10 Jan 2008 6:51:28 864 256 A.... "C:\Windows\ehome\ehepg.dll"
10 Jan 2008 6:50:48 252 416 A.... "C:\Windows\ehome\ehReplay.dll"
10 Jan 2008 6:46:18 10 094 080 A.... "C:\Windows\ehome\ehres.dll"
10 Jan 2008 6:51:34 4 370 432 A.... "C:\Windows\ehome\ehshell.dll"
10 Jan 2008 6:50:48 18 944 A.... "C:\Windows\ehome\ehtrace.dll"
10 Jan 2008 6:50:48 517 120 A.... "C:\Windows\ehome\ehui.dll"
10 Jan 2008 6:50:48 1 497 600 A.... "C:\Windows\ehome\ehuihlp.dll"
10 Jan 2008 6:50:50 6 656 A.... "C:\Windows\ehome\McrMgr.dll"
10 Jan 2008 6:50:26 173 056 A.... "C:\Windows\ehome\McrMgr.exe"
14 Feb 2008 11:49:52 665 600 A.... "C:\Windows\inf\drvindex.dat"
27 Feb 2008 19:58:06 1 849 272 A.... "C:\Windows\inf\INFCACHE.1"
27 Feb 2008 19:58:06 51 200 A.... "C:\Windows\inf\infpub.dat"
27 Feb 2008 19:58:06 86 016 A.... "C:\Windows\inf\infstor.dat"
27 Feb 2008 19:58:06 86 016 A.... "C:\Windows\inf\infstrng.dat"
14 Feb 2008 11:49:52 65 966 A.... "C:\Windows\inf\keyboard.inf"
14 Feb 2008 12:00:20 96 504 A.... "C:\Windows\inf\keyboard.PNF"
14 Feb 2008 11:49:36 47 458 A.... "C:\Windows\inf\mshdc.inf"
14 Feb 2008 11:49:38 82 344 A.... "C:\Windows\inf\mshdc.PNF"
14 Feb 2008 11:49:52 56 342 A.... "C:\Windows\inf\msmouse.inf"
14 Feb 2008 11:50:20 99 376 A.... "C:\Windows\inf\msmouse.PNF"
25 Jan 2008 7:22:50 8 836 A.... "C:\Windows\inf\netrndis.PNF"
22 Jan 2008 2:10:14 104 251 A.... "C:\Windows\inf\oem35.inf"
22 Jan 2008 2:10:22 158 776 A.... "C:\Windows\inf\oem35.PNF"
16 Feb 2008 2:14:30 1 887 A.... "C:\Windows\inf\oem36.inf"
16 Feb 2008 2:14:30 7 716 A.... "C:\Windows\inf\oem36.PNF"
16 Feb 2008 2:14:44 1 624 A.... "C:\Windows\inf\oem37.inf"
16 Feb 2008 2:14:44 6 988 A.... "C:\Windows\inf\oem37.PNF"
27 Feb 2008 17:40:20 35 940 A.... "C:\Windows\inf\oem38.inf"
27 Feb 2008 17:40:20 25 216 A.... "C:\Windows\inf\oem38.PNF"
27 Feb 2008 19:57:52 3 310 A.... "C:\Windows\inf\oem39.inf"
27 Feb 2008 19:57:54 11 884 A.... "C:\Windows\inf\oem39.PNF"
27 Feb 2008 19:58:06 104 008 A.... "C:\Windows\inf\oem40.inf"
27 Feb 2008 19:58:08 158 080 A.... "C:\Windows\inf\oem40.PNF"
27 Feb 2008 19:58:06 25 056 A.... "C:\Windows\inf\setupapi.ev1"
27 Feb 2008 19:58:10 18 936 A.... "C:\Windows\inf\setupapi.ev2"
27 Feb 2008 19:58:10 143 360 A.... "C:\Windows\inf\setupapi.ev3"
2 Mar 2008 14:19:08 32 375 571 A.... "C:\Windows\inf\setupapi.app.log"
29 Feb 2008 19:03:36 13 961 247 A.... "C:\Windows\inf\setupapi.dev.log"
16 Feb 2008 15:46:54 13 780 A.... "C:\Windows\inf\sffdisk.PNF"
14 Feb 2008 12:00:22 98 088 A.... "C:\Windows\inf\usbport.PNF"
11 Jan 2008 13:22:48 2 062 A.... "C:\Windows\inf\volume.inf"
11 Jan 2008 13:22:48 6 260 A.... "C:\Windows\inf\volume.PNF"
25 Jan 2008 7:22:48 7 416 A.... "C:\Windows\inf\wcerndis.PNF"
25 Jan 2008 7:22:50 50 636 A.... "C:\Windows\inf\winmobil.PNF"
25 Jan 2008 7:25:22 8 492 A.... "C:\Windows\inf\wpdrapi.PNF"
14 Feb 2008 11:58:06 1 939 288 A.... "C:\Windows\rescache\ResCache.mni"
14 Feb 2008 11:32:22 18 432 A.... "C:\Windows\servicing\CbsMsg.dll"
2 Mar 2008 14:17:24 3 200 A..H. "C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0"
2 Mar 2008 14:17:24 3 200 A..H. "C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0"
2 Mar 2008 14:17:20 45 056 A.... "C:\Windows\System32\acovcnt.exe"
14 Feb 2008 11:19:44 124 928 A.... "C:\Windows\System32\advpack.dll"
14 Feb 2008 11:32:18 12 800 A.... "C:\Windows\System32\batt.dll"
14 Feb 2008 11:32:24 19 456 A.... "C:\Windows\System32\cfgmgr32.dll"
14 Feb 2008 11:32:24 224 824 A.... "C:\Windows\System32\clfs.sys"
29 Feb 2008 0:24:52 2 577 A.... "C:\Windows\System32\config.nt"
14 Feb 2008 11:32:18 35 328 A.... "C:\Windows\System32\dispci.dll"
14 Feb 2008 11:32:22 260 096 A.... "C:\Windows\System32\dpx.dll"
14 Feb 2008 11:32:24 101 888 A.... "C:\Windows\System32\drvinst.exe"
14 Feb 2008 11:19:38 347 136 A.... "C:\Windows\System32\dxtmsft.dll"
14 Feb 2008 11:19:38 214 528 A.... "C:\Windows\System32\dxtrans.dll"
14 Feb 2008 11:32:20 7 168 A.... "C:\Windows\System32\f3ahvoas.dll"
12 Jan 2008 22:09:38 273 792 A.... "C:\Windows\System32\FNTCACHE.DAT"
14 Feb 2008 11:26:12 1 686 528 A.... "C:\Windows\System32\gameux.dll"
12 Jan 2008 22:12:00 66 568 A.... "C:\Windows\System32\GDIPFONTCACHEV1.DAT"
14 Feb 2008 11:19:36 63 488 A.... "C:\Windows\System32\icardie.dll"
14 Feb 2008 11:19:26 70 656 A.... "C:\Windows\System32\ie4uinit.exe"
14 Feb 2008 11:19:40 383 488 A.... "C:\Windows\System32\ieapfltr.dll"
14 Feb 2008 11:19:54 6 066 176 A.... "C:\Windows\System32\ieframe.dll"
14 Feb 2008 11:19:26 44 544 A.... "C:\Windows\System32\iernonce.dll"
14 Feb 2008 11:19:26 56 320 A.... "C:\Windows\System32\iesetup.dll"
14 Feb 2008 11:19:56 180 736 A.... "C:\Windows\System32\ieui.dll"
14 Feb 2008 11:19:30 26 624 A.... "C:\Windows\System32\ieUnatt.exe"
27 Feb 2008 20:02:54 5 072 A.... "C:\Windows\System32\iklog.log"
14 Feb 2008 11:19:34 1 831 424 A.... "C:\Windows\System32\inetcpl.cpl"
14 Feb 2008 11:19:42 27 648 A.... "C:\Windows\System32\jsproxy.dll"
14 Feb 2008 11:32:18 6 656 A.... "C:\Windows\System32\kbd106.dll"
14 Feb 2008 11:32:22 6 656 A.... "C:\Windows\System32\kbd106n.dll"
14 Feb 2008 11:32:14 115 200 A.... "C:\Windows\System32\loadperf.dll"
14 Feb 2008 11:32:14 39 424 A.... "C:\Windows\System32\lodctr.exe"
10 Jan 2008 6:50:50 1 244 672 A.... "C:\Windows\System32\mcmde.dll"
5 Feb 2008 0:09:46 18 214 008 A.... "C:\Windows\System32\mrt.exe"
14 Feb 2008 11:19:48 3 592 192 A.... "C:\Windows\System32\mshtml.dll"
14 Feb 2008 11:19:48 1 383 424 A.... "C:\Windows\System32\mshtml.tlb"
14 Feb 2008 11:19:50 478 208 A.... "C:\Windows\System32\mshtmled.dll"
14 Feb 2008 11:19:36 671 232 A.... "C:\Windows\System32\mstime.dll"
14 Feb 2008 11:26:54 24 064 A.... "C:\Windows\System32\netcfg.exe"
14 Feb 2008 11:26:54 22 016 A.... "C:\Windows\System32\netiougc.exe"
14 Feb 2008 11:32:16 23 552 A.... "C:\Windows\System32\nshhttp.dll"
14 Feb 2008 11:27:40 3 504 696 A.... "C:\Windows\System32\ntkrnlpa.exe"
14 Feb 2008 11:27:38 3 470 392 A.... "C:\Windows\System32\ntoskrnl.exe"
14 Feb 2008 11:32:22 558 080 A.... "C:\Windows\System32\oleaut32.dll"
29 Feb 2008 14:31:46 103 924 A.... "C:\Windows\System32\perfc009.dat"
29 Feb 2008 14:31:46 117 572 A.... "C:\Windows\System32\perfc00C.dat"
29 Feb 2008 14:31:46 610 142 A.... "C:\Windows\System32\perfh009.dat"
29 Feb 2008 14:31:46 690 832 A.... "C:\Windows\System32\perfh00C.dat"
29 Feb 2008 14:31:46 1 512 256 A.... "C:\Windows\System32\PerfStringBackup.INI"
14 Feb 2008 11:19:44 44 544 A.... "C:\Windows\System32\pngfilt.dll"
14 Feb 2008 11:32:14 17 408 A.... "C:\Windows\System32\prflbmsg.dll"
14 Feb 2008 11:32:12 595 456 A.... "C:\Windows\System32\schedsvc.dll"
14 Feb 2008 11:32:20 1 585 664 A.... "C:\Windows\System32\setupapi.dll"
14 Feb 2008 11:26:54 167 424 A.... "C:\Windows\System32\tcpipcfg.dll"
14 Feb 2008 11:32:24 221 696 A.... "C:\Windows\System32\umpnpmgr.dll"
14 Feb 2008 11:32:14 32 256 A.... "C:\Windows\System32\unlodctr.exe"
14 Feb 2008 11:19:42 1 159 680 A.... "C:\Windows\System32\urlmon.dll"
14 Feb 2008 11:34:42 194 560 A.... "C:\Windows\System32\WebClnt.dll"
14 Feb 2008 11:19:42 824 832 A.... "C:\Windows\System32\wininet.dll"
14 Feb 2008 11:32:16 943 800 A.... "C:\Windows\System32\winload.exe"
14 Feb 2008 11:32:26 613 888 A.... "C:\Windows\System32\wpd_ci.dll"
2 Mar 2008 14:17:22 6 A..H. "C:\Windows\Tasks\SA.DAT"
2 Mar 2008 12:25:30 32 576 A.... "C:\Windows\Tasks\SCHEDLGU.TXT"
1 Mar 2008 14:48:22 414 A..H. "C:\Windows\Tasks\User_Feed_Synchronization-{A144C2B9-8A14-4284-B28E-C53E2A187CF0}.job"
2 Mar 2008 14:20:02 422 A..H. "C:\Windows\Tasks\User_Feed_Synchronization-{AC811BFE-F3E6-43DB-9560-BF5025597A49}.job"
2 Mar 2008 2:08:02 256 A.... "C:\Windows\Tasks\V‚rifier les mises … jour de Windows Live Toolbar.job"
14 Feb 2008 11:51:40 2 556 A.... "C:\Windows\winsxs\cleanup.xml"
29 Feb 2008 14:19:50 164 A.... "C:\Windows\winsxs\poqexec.log"
2 Mar 2008 14:17:06 0 A.... "C:\Windows\Debug\UserMode\ChkAcc.log"
2 Mar 2008 14:17:06 0 A.... "C:\Windows\Debug\UserMode\ChkAcc.log"
29 Feb 2008 14:29:08 3 953 A.... "C:\Windows\inf\WmiApRpl\WmiApRpl.h"
2 Mar 2008 14:22:58 25 936 333 A.... "C:\Windows\Logs\CBS\CBS.log"
14 Feb 2008 11:51:42 56 265 778 A.... "C:\Windows\Logs\CBS\CBS.persist.log"
18 Feb 2008 11:56:56 16 102 A.... "C:\Windows\Logs\DPX\setupact.log"
18 Feb 2008 11:56:56 16 102 A.... "C:\Windows\Logs\DPX\setuperr.log"
14 Feb 2008 11:58:06 1 120 262 A.... "C:\Windows\rescache\rc0004\Segment0.cmf"
14 Feb 2008 11:58:06 48 064 A.... "C:\Windows\rescache\rc0004\Segment0.toc"
14 Feb 2008 11:58:06 959 872 A.... "C:\Windows\rescache\rc0004\Segment1.cmf"
14 Feb 2008 11:58:06 48 064 A.... "C:\Windows\rescache\rc0004\Segment1.toc"
14 Feb 2008 11:58:08 1 254 866 A.... "C:\Windows\rescache\rc0004\Segment2.cmf"
14 Feb 2008 11:58:08 48 064 A.... "C:\Windows\rescache\rc0004\Segment2.toc"
14 Feb 2008 11:58:08 955 504 A.... "C:\Windows\rescache\rc0004\Segment3.cmf"
14 Feb 2008 11:58:08 48 064 A.... "C:\Windows\rescache\rc0004\Segment3.toc"
14 Feb 2008 11:58:08 1 141 490 A.... "C:\Windows\rescache\rc0004\Segment4.cmf"
14 Feb 2008 11:58:08 48 064 A.... "C:\Windows\rescache\rc0004\Segment4.toc"
14 Feb 2008 11:58:08 718 360 A.... "C:\Windows\rescache\rc0004\Segment5.cmf"
14 Feb 2008 11:58:08 48 064 A.... "C:\Windows\rescache\rc0004\Segment5.toc"
14 Feb 2008 11:58:10 855 554 A.... "C:\Windows\rescache\rc0004\Segment6.cmf"
14 Feb 2008 11:58:10 48 064 A.... "C:\Windows\rescache\rc0004\Segment6.toc"
14 Feb 2008 11:58:10 1 313 717 A.... "C:\Windows\rescache\rc0004\Segment7.cmf"
14 Feb 2008 11:58:10 48 064 A.... "C:\Windows\rescache\rc0004\Segment7.toc"
14 Feb 2008 11:58:10 924 827 A.... "C:\Windows\rescache\rc0004\Segment8.cmf"
14 Feb 2008 11:58:10 48 064 A.... "C:\Windows\rescache\rc0004\Segment8.toc"
14 Feb 2008 11:58:12 1 163 209 A.... "C:\Windows\rescache\rc0004\Segment9.cmf"
14 Feb 2008 11:58:12 48 064 A.... "C:\Windows\rescache\rc0004\Segment9.toc"
14 Feb 2008 11:58:12 1 062 433 A.... "C:\Windows\rescache\rc0004\Segment10.cmf"
14 Feb 2008 11:58:12 48 064 A.... "C:\Windows\rescache\rc0004\Segment10.toc"
14 Feb 2008 11:58:12 1 098 755 A.... "C:\Windows\rescache\rc0004\Segment11.cmf"
14 Feb 2008 11:58:12 48 064 A.... "C:\Windows\rescache\rc0004\Segment11.toc"
14 Feb 2008 11:58:12 1 148 176 A.... "C:\Windows\rescache\rc0004\Segment12.cmf"
14 Feb 2008 11:58:12 48 064 A.... "C:\Windows\rescache\rc0004\Segment12.toc"
14 Feb 2008 11:58:14 445 864 A.... "C:\Windows\rescache\rc0004\Segment13.cmf"
14 Feb 2008 11:58:14 48 064 A.... "C:\Windows\rescache\rc0004\Segment13.toc"
8 Jan 2008 14:35:10 5 278 A.... "C:\Windows\servicing\Packages\Package_2_for_KB944533~31bf3856ad364e35~x86~~6.0.1.1.mum"
19 Jan 2008 3:36:58 10 964 A.... "C:\Windows\servicing\Packages\Package_for_KB937287_client~31bf3856ad364e35~x86~~6.0.1.18000.cat"
10 Jan 2008 23:59:32 52 993 A.... "C:\Windows\servicing\Packages\Package_1_for_KB947172~31bf3856ad364e35~x86~~6.0.1.0.cat"
15 Jan 2008 2:48:30 4 745 A.... "C:\Windows\servicing\Packages\Package_1_for_KB946456~31bf3856ad364e35~x86~~6.0.1.4.mum"
19 Jan 2008 3:36:58 10 964 A.... "C:\Windows\servicing\Packages\Package_for_KB937287_client_0~31bf3856ad364e35~x86~~6.0.1.18000.cat"
14 Jan 2008 2:05:46 3 504 A.... "C:\Windows\servicing\Packages\Package_1_for_KB946026~31bf3856ad364e35~x86~~6.0.1.3.mum"
8 Jan 2008 14:32:04 43 345 A.... "C:\Windows\servicing\Packages\Package_2_for_KB944533~31bf3856ad364e35~x86~~6.0.1.1.cat"
15 Jan 2008 2:45:06 17 696 A.... "C:\Windows\servicing\Packages\Package_1_for_KB946456~31bf3856ad364e35~x86~~6.0.1.4.cat"
19 Jan 2008 3:36:38 1 889 A.... "C:\Windows\servicing\Packages\Package_1_for_KB937287~31bf3856ad364e35~x86~~6.0.1.18000.mum"
30 Jan 2008 19:20:20 2 408 A.... "C:\Windows\servicing\Packages\Package_1_for_KB905866~31bf3856ad364e35~x86~~6.0.16.0.mum"
19 Jan 2008 21:04:14 7 815 A.... "C:\Windows\servicing\Packages\Package_2_for_KB943899~31bf3856ad364e35~x86~~6.0.2.1.mum"
14 Jan 2008 2:01:46 14 740 A.... "C:\Windows\servicing\Packages\Package_1_for_KB946026~31bf3856ad364e35~x86~~6.0.1.3.cat"
30 Jan 2008 19:39:38 1 897 A.... "C:\Windows\servicing\Packages\Package_for_KB943302~31bf3856ad364e35~x86~~6.0.2.1.mum"
19 Jan 2008 3:36:58 24 195 A.... "C:\Windows\servicing\Packages\Package_1_for_KB937287~31bf3856ad364e35~x86~~6.0.1.18000.cat"
19 Jan 2008 21:00:20 33 241 A.... "C:\Windows\servicing\Packages\Package_2_for_KB943899~31bf3856ad364e35~x86~~6.0.2.1.cat"
19 Jan 2008 21:04:14 2 400 A.... "C:\Windows\servicing\Packages\Package_1_for_KB943899~31bf3856ad364e35~x86~~6.0.2.1.mum"
8 Jan 2008 14:35:10 6 438 A.... "C:\Windows\servicing\Packages\Package_3_for_KB944533~31bf3856ad364e35~x86~~6.0.1.1.mum"
30 Jan 2008 19:40:42 10 930 A.... "C:\Windows\servicing\Packages\Package_for_KB943302~31bf3856ad364e35~x86~~6.0.2.1.cat"
8 Jan 2008 14:35:10 2 334 A.... "C:\Windows\servicing\Packages\Package_for_KB944533~31bf3856ad364e35~x86~~6.0.1.1.mum"
19 Jan 2008 21:00:14 12 686 A.... "C:\Windows\servicing\Packages\Package_1_for_KB943899~31bf3856ad364e35~x86~~6.0.2.1.cat"
19 Jan 2008 21:04:14 2 108 A.... "C:\Windows\servicing\Packages\Package_for_KB943899~31bf3856ad364e35~x86~~6.0.2.1.mum"
8 Jan 2008 14:32:12 135 621 A.... "C:\Windows\servicing\Packages\Package_3_for_KB944533~31bf3856ad364e35~x86~~6.0.1.1.cat"
8 Jan 2008 14:31:56 10 930 A.... "C:\Windows\servicing\Packages\Package_for_KB944533~31bf3856ad364e35~x86~~6.0.1.1.cat"
19 Jan 2008 3:36:38 1 565 A.... "C:\Windows\servicing\Packages\Package_for_KB937287~31bf3856ad364e35~x86~~6.0.1.18000.mum"
19 Jan 2008 21:00:08 10 930 A.... "C:\Windows\servicing\Packages\Package_for_KB943899~31bf3856ad364e35~x86~~6.0.2.1.cat"
8 Jan 2008 14:35:10 17 810 A.... "C:\Windows\servicing\Packages\Package_1_for_KB944533~31bf3856ad364e35~x86~~6.0.1.1.mum"
30 Jan 2008 19:16:16 12 686 A.... "C:\Windows\servicing\Packages\Package_1_for_KB905866~31bf3856ad364e35~x86~~6.0.16.0.cat"
19 Jan 2008 3:36:38 1 556 A.... "C:\Windows\servicing\Packages\Package_for_KB937287_client~31bf3856ad364e35~x86~~6.0.1.18000.mum"
19 Jan 2008 3:36:38 1 551 A.... "C:\Windows\servicing\Packages\Package_for_KB937287_client_0~31bf3856ad364e35~x86~~6.0.1.18000.mum"
30 Jan 2008 19:39:38 7 768 A.... "C:\Windows\servicing\Packages\Package_2_for_KB943302~31bf3856ad364e35~x86~~6.0.2.1.mum"
19 Jan 2008 3:36:58 10 964 A.... "C:\Windows\servicing\Packages\Package_for_KB937287~31bf3856ad364e35~x86~~6.0.1.18000.cat"
8 Jan 2008 14:32:02 37 850 A.... "C:\Windows\servicing\Packages\Package_1_for_KB944533~31bf3856ad364e35~x86~~6.0.1.1.cat"
30 Jan 2008 19:39:38 3 764 A.... "C:\Windows\servicing\Packages\Package_1_for_KB943302~31bf3856ad364e35~x86~~6.0.2.1.mum"
30 Jan 2008 19:40:56 21 450 A.... "C:\Windows\servicing\Packages\Package_2_for_KB943302~31bf3856ad364e35~x86~~6.0.2.1.cat"
11 Jan 2008 0:03:12 16 799 A.... "C:\Windows\servicing\Packages\Package_1_for_KB947172~31bf3856ad364e35~x86~~6.0.1.0.mum"
30 Jan 2008 19:40:50 16 182 A.... "C:\Windows\servicing\Packages\Package_1_for_KB943302~31bf3856ad364e35~x86~~6.0.2.1.cat"
29 Feb 2008 14:31:44 9 637 951 A.... "C:\Windows\System32\CodeIntegrity\bootcat.cache"
14 Feb 2008 11:27:36 21 560 A.... "C:\Windows\System32\drivers\atapi.sys"
14 Feb 2008 11:27:36 109 624 A.... "C:\Windows\System32\drivers\ataport.sys"
30 Jan 2008 10:11:06 764 416 A.... "C:\Windows\System32\drivers\athr.sys"
14 Feb 2008 11:32:18 54 784 A.... "C:\Windows\System32\drivers\i8042prt.sys"
14 Feb 2008 11:32:18 35 384 A.... "C:\Windows\System32\drivers\kbdclass.sys"
14 Feb 2008 11:32:18 15 872 A.... "C:\Windows\System32\drivers\kbdhid.sys"
14 Feb 2008 11:32:18 34 360 A.... "C:\Windows\System32\drivers\mouclass.sys"
14 Feb 2008 11:32:18 15 872 A.... "C:\Windows\System32\drivers\mouhid.sys"
14 Feb 2008 11:34:42 110 080 A.... "C:\Windows\System32\drivers\mrxdav.sys"
14 Feb 2008 11:26:54 216 632 A.... "C:\Windows\System32\drivers\netio.sys"
11 Jan 2008 13:14:58 1 060 920 A.... "C:\Windows\System32\drivers\ntfs.sys"
14 Feb 2008 11:27:34 154 624 A.... "C:\Windows\System32\drivers\nwifi.sys"
14 Feb 2008 11:27:36 15 928 A.... "C:\Windows\System32\drivers\pciide.sys"
14 Feb 2008 11:27:36 45 112 A.... "C:\Windows\System32\drivers\pciidex.sys"
14 Feb 2008 11:32:18 19 968 A.... "C:\Windows\System32\drivers\sermouse.sys"
14 Feb 2008 11:26:54 803 328 A.... "C:\Windows\System32\drivers\tcpip.sys"
11 Jan 2008 13:14:56 211 000 A.... "C:\Windows\System32\drivers\volsnap.sys"
14 Feb 2008 11:32:20 495 160 A.... "C:\Windows\System32\drivers\Wdf01000.sys"
14 Feb 2008 11:32:20 35 384 A.... "C:\Windows\System32\drivers\WdfLdr.sys"
22 Jan 2008 2:09:28 127 A.... "C:\Windows\System32\GroupPolicy\gpt.ini"
14 Feb 2008 11:26:54 49 152 A.... "C:\Windows\System32\migration\netiomig.dll"
2 Mar 2008 14:22:12 5 479 A.... "C:\Windows\System32\spool\spooler.xml"
2 Mar 2008 14:19:48 0 ..... "C:\Windows\System32\spool\SpoolerETW.etl"
14 Feb 2008 11:33:46 101 888 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23_drvinst.exe_6593e92a"
14 Feb 2008 11:33:46 3 692 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23_umpnpmgr.mof_112f9e6c"
14 Feb 2008 11:33:48 39 424 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_lodctr.exe_b02cefba"
14 Feb 2008 11:24:04 195 203 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-htmlactivexcompat_31bf3856ad364e35_6.0.6000.16609_none_1592313b129ab58c.manifest"
14 Feb 2008 11:33:44 3 726 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.16609_fr-fr_173e50dcd9ce3198.manifest"
14 Feb 2008 11:33:48 53 248 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-setupapi.resources_31bf3856ad364e35_6.0.6000.16609_fr-fr_0b0664296d2c92b1_setupapi.dll.mui_bcc172a4"
14 Feb 2008 11:33:48 88 936 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ole-automation_31bf3856ad364e35_6.0.6000.16609_none_bb22ee81fe4b8646.manifest"
14 Feb 2008 11:27:00 22 016 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16627_none_5f90b964923d030a_netiougc.exe_94123cfe"
14 Feb 2008 11:33:48 30 674 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_perfd.dat_f1e3dfd2"
14 Feb 2008 11:27:50 3 470 392 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16584_none_69f7a2dcb739c934_ntoskrnl.exe_0fb0ab79"
14 Feb 2008 11:27:00 167 424 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16627_none_5f90b964923d030a_tcpipcfg.dll_e3a99e8a"
14 Feb 2008 11:33:46 3 472 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-commonlog_31bf3856ad364e35_6.0.6000.16609_none_7ca55ea12a5d5913_clfs.mof_04dfde60"
14 Feb 2008 11:24:10 3 592 192 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16609_none_1165d69024face3a_mshtml.dll_fab8f891"
14 Feb 2008 11:27:52 3 504 696 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16584_none_69f7a2dcb739c934_ntkrnlpa.exe_165c312a"
14 Feb 2008 11:33:48 287 440 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_perfi.dat_e3a35ecf"
14 Feb 2008 11:27:00 216 632 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.16627_none_54a6905db830dfb1_netio.sys_a06e75d0"
14 Feb 2008 11:24:16 64 512 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16609_none_000bb771a4a46504_wininetplugin.dll_f2ff35f9"
14 Feb 2008 11:24:06 6 066 176 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16609_none_62c53093b0f05c67_ieframe.dll_c6cbe33f"
14 Feb 2008 11:24:16 824 832 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16609_none_000bb771a4a46504_wininet.dll_790e2e3a"
11 Jan 2008 13:15:02 15 275 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6000.16586_none_a43a6b8d2000830d.manifest"
14 Feb 2008 11:33:46 17 524 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23.manifest"
14 Feb 2008 11:33:46 8 279 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-commonlog_31bf3856ad364e35_6.0.6000.16609_none_7ca55ea12a5d5913.manifest"
14 Feb 2008 11:33:46 3 685 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23_drvinst.mof_6593cf80"
14 Feb 2008 11:24:04 829 928 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16609_none_62c53093b0f05c67.manifest"
14 Feb 2008 11:33:46 3 689 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-setupapi_31bf3856ad364e35_6.0.6000.16609_none_33181da4c90f2d73_setupapi.mof_8d9de59f"
14 Feb 2008 11:24:16 347 136 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16609_none_95e9130384756585_dxtmsft.dll_4b67eac6"
14 Feb 2008 11:33:48 120 320 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_cntrtextmig.dll_08675f2d"
14 Feb 2008 11:24:10 1 383 424 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16609_none_1165d69024face3a_mshtml.tlb_fab8f577"
29 Feb 2008 14:05:22 621 056 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-lddmcore_31bf3856ad364e35_6.0.6000.20648_none_aa48b77dff9d11aa_dxgkrnl.sys_8aad3dfb"
14 Feb 2008 11:33:48 287 440 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_perfh.dat_e67d1236"
14 Feb 2008 11:25:04 124 928 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.16609_none_a9ee296df5a1e10e_advpack.dll_8c6ea088"
14 Feb 2008 11:24:22 283 492 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16609_none_b305dbcfd99b3e71.manifest"
11 Jan 2008 13:15:02 1 060 920 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6000.16586_none_a43a6b8d2000830d_ntfs.sys_e80dca04"
14 Feb 2008 11:27:00 28 871 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16627_none_5f90b964923d030a.manifest"
14 Feb 2008 11:24:16 463 701 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16609_none_95e9130384756585.manifest"
14 Feb 2008 11:33:48 17 408 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_prflbmsg.dll_2e46e937"
14 Feb 2008 11:33:48 558 080 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ole-automation_31bf3856ad364e35_6.0.6000.16609_none_bb22ee81fe4b8646_oleaut32.dll_730e3d41"
14 Feb 2008 11:25:04 7 571 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.16609_none_a9ee296df5a1e10e.manifest"
14 Feb 2008 11:33:46 17 408 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.16609_fr-fr_173e50dcd9ce3198_winresume.exe.mui_ff8b5358"
14 Feb 2008 11:27:48 18 778 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16584_none_69f7a2dcb739c934.manifest"
14 Feb 2008 11:33:46 19 532 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-setupapi_31bf3856ad364e35_6.0.6000.16609_none_33181da4c90f2d73.manifest"
14 Feb 2008 11:24:04 42 229 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-extcompat_31bf3856ad364e35_6.0.6000.16609_none_3ad26ff6d96b5938.manifest"
14 Feb 2008 11:26:58 3 908 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.16627_none_54a6905db830dfb1.manifest"
14 Feb 2008 11:24:06 180 736 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16609_none_62c53093b0f05c67_ieui.dll_f0fcf806"
14 Feb 2008 11:33:48 32 256 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_unlodctr.exe_69df45bb"
14 Feb 2008 11:33:50 943 800 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.16609_none_59497e266f783366_winload.exe_75835076"
14 Feb 2008 11:33:48 115 200 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_loadperf.dll_3a569bab"
14 Feb 2008 11:33:44 28 672 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.16609_fr-fr_173e50dcd9ce3198_winload.exe.mui_3bc5b827"
29 Feb 2008 14:05:22 8 958 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-lddmcore_31bf3856ad364e35_6.0.6000.20648_none_aa48b77dff9d11aa.manifest"
14 Feb 2008 11:33:46 123 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-commonlog_31bf3856ad364e35_6.0.6000.16609_none_7ca55ea12a5d5913_clfsuninstall.mof_d0605990"
14 Feb 2008 11:33:46 224 824 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-commonlog_31bf3856ad364e35_6.0.6000.16609_none_7ca55ea12a5d5913_clfs.sys_04dfdff9"
14 Feb 2008 11:24:10 928 494 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16609_none_1165d69024face3a.manifest"
14 Feb 2008 11:24:16 27 648 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16609_none_000bb771a4a46504_jsproxy.dll_3cc8d651"
14 Feb 2008 11:27:00 803 328 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16627_none_5f90b964923d030a_tcpip.sys_3339bd51"
14 Feb 2008 11:33:46 1 585 664 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-setupapi_31bf3856ad364e35_6.0.6000.16609_none_33181da4c90f2d73_setupapi.dll_8d9de2e7"
14 Feb 2008 11:33:48 20 589 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f.manifest"
14 Feb 2008 11:24:22 1 159 680 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16609_none_b305dbcfd99b3e71_urlmon.dll_95c89473"
14 Feb 2008 11:24:16 56 602 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16609_none_000bb771a4a46504.manifest"
14 Feb 2008 11:33:48 30 674 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_perfc.dat_f4bd9339"
14 Feb 2008 11:33:46 19 456 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23_cfgmgr32.dll_7bc7e545"
14 Feb 2008 11:27:00 49 152 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16627_none_5f90b964923d030a_netiomig.dll_917b9a36"
14 Feb 2008 11:33:46 221 696 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23_umpnpmgr.dll_112f9bb4"
14 Feb 2008 11:24:16 214 528 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16609_none_95e9130384756585_dxtrans.dll_814d2aee"
14 Feb 2008 11:33:48 3 034 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-setupapi.resources_31bf3856ad364e35_6.0.6000.16609_fr-fr_0b0664296d2c92b1.manifest"
14 Feb 2008 11:33:48 5 227 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.16609_none_59497e266f783366.manifest"
29 Feb 2008 14:05:22 36 864 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-lddmcore_31bf3856ad364e35_6.0.6000.20648_none_aa48b77dff9d11aa_cdd.dll_01f58cd5"
14 Feb 2008 11:33:50 905 400 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.16609_none_59497e266f783366_winresume.exe_85cd1215"
13 Feb 2008 5:59:54 23 834 A.... "C:\Windows\winsxs\Catalogs\050b2a0163102501b05d9e43ac4c53e538cd93c9907b91c69907b04c365369b4.cat"
13 Feb 2008 5:59:32 26 186 A.... "C:\Windows\winsxs\Catalogs\0ad6f09f2b2b39e5e7cfc19103cb31b78ead81597edba64691c6a502ae1f996d.cat"
13 Feb 2008 5:57:48 24 195 A.... "C:\Windows\winsxs\Catalogs\10338debac71ca966896e544f26291a99bf38cc4b87e69c1798037b49a292a3d.cat"
13 Feb 2008 5:54:22 43 345 A.... "C:\Windows\winsxs\Catalogs\1418952aacdf47d43eff052dd144e84b0acf1e45aa1af266830a59fcd6a881da.cat"
9 Jan 2008 14:41:12 17 696 A.... "C:\Windows\winsxs\Catalogs\144add7cd07655ed578cb47f1cc1af21a113f3d9e2042b41c53a5b11600f4b46.cat"
13 Feb 2008 5:59:06 23 834 A.... "C:\Windows\winsxs\Catalogs\19c7a4321d55036bd0f9aa87035a15ad62ec65e1d2d9c17978a81ef9ad0ea40f.cat"
13 Feb 2008 6:05:24 14 740 A.... "C:\Windows\winsxs\Catalogs\1a3194f88073e6c03595db376a21306107a54b38fed11cf525c81d285871cd2f.cat"
13 Feb 2008 5:59:16 23 834 A.... "C:\Windows\winsxs\Catalogs\1d6ebd3202f0931663348dc7328a614a25f513295a47a6ad3a50c4d64d4bab0f.cat"
13 Feb 2008 5:59:08 14 442 A.... "C:\Windows\winsxs\Catalogs\37ae5936ba24fa473a5cbf11576ea349e1104dd54e48677cd2f844436c5633c1.cat"
13 Feb 2008 5:59:22 23 834 A.... "C:\Windows\winsxs\Catalogs\3c6df958a8804ac9c1ad4af40edf97584f03fd8c1e911630f2ccbd82efea2704.cat"
13 Feb 2008 5:59:28 23 834 A.... "C:\Windows\winsxs\Catalogs\417ad390502bf43875823bf5f549ab2031ac7531b518a2c50999f9e6b7735ce7.cat"
13 Feb 2008 5:58:52 14 442 A.... "C:\Windows\winsxs\Catalogs\42820e7ec5f40412f525313282e3275550b72cda5621575a2fa437ad0849bbde.cat"
13 Feb 2008 5:59:20 23 834 A.... "C:\Windows\winsxs\Catalogs\4548a2d79a4c9b0b9c97427ef50d1dec446548527929bf413532f9b5b0f70b39.cat"
13 Feb 2008 6:00:08 14 442 A.... "C:\Windows\winsxs\Catalogs\45693e0f2c4ab93267df6ea67e58f33aaee6d12f796be1d26e196d7ba2f419fd.cat"
13 Feb 2008 6:00:12 14 442 A.... "C:\Windows\winsxs\Catalogs\4600288784bed7de0849a49ca0c3e2569b02a27c1e54f448a61f3ea736f3c442.cat"
13 Feb 2008 5:59:58 23 834 A.... "C:\Windows\winsxs\Catalogs\5658d911f1157c47dc0eec0603e9cff03918bdbcde0f5d6cee0a501a1c7d60d2.cat"
13 Feb 2008 5:59:10 26 186 A.... "C:\Windows\winsxs\Catalogs\5a7b34dcbe7ba738719fa5c490ed3c0f863becc4844a8be011b0732be3678c34.cat"
13 Feb 2008 5:59:36 26 186 A.... "C:\Windows\winsxs\Catalogs\64b20eb1d2e76ffad87d8824e80145679bfc0ef3a93bfcc5c70a688fad06aef0.cat"
13 Feb 2008 5:54:18 37 850 A.... "C:\Windows\winsxs\Catalogs\6d88c5f3d266b8fa19190a8adae6f1729d1b8d51b9e698e9d358c4551bbce86e.cat"
13 Feb 2008 6:00:26 23 834 A.... "C:\Windows\winsxs\Catalogs\6eb7ed514cde77a2b0b27813ebb2e1db09baa5c81e84869d5a16681d77cfe733.cat"
13 Feb 2008 5:58:50 23 834 A.... "C:\Windows\winsxs\Catalogs\6ef00608b280e84f38da471beccf79ecd2613cbcc5b10d869ef11b83445afcfe.cat"
9 Jan 2008 14:41:18 12 686 A.... "C:\Windows\winsxs\Catalogs\721b79404ce8eb73db117e5cbed562cb30a2d670af42bb601de55e6c5de56807.cat"
13 Feb 2008 5:59:02 26 186 A.... "C:\Windows\winsxs\Catalogs\7329a042cd17487bca411bd79b935eff81009162f092c3775e1c4a995eb24837.cat"
13 Feb 2008 6:00:02 23 834 A.... "C:\Windows\winsxs\Catalogs\74c0aef9ec661126070eb1e01c25a94f7477f36dd92f4fde5f53fa4fbf8087c6.cat"
13 Feb 2008 5:57:46 12 686 A.... "C:\Windows\winsxs\Catalogs\78ecd2524726f1a0c1e523bc98da9f8a18869029da0d1358c503666105e376ca.cat"
9 Jan 2008 14:40:12 13 282 A.... "C:\Windows\winsxs\Catalogs\7b1489f0e63de7c78cf25db1961cc7ac18ba2145b4859f7b9c9f827689a57021.cat"
13 Feb 2008 6:00:16 23 834 A.... "C:\Windows\winsxs\Catalogs\7c34856c5ef792d12929068d0871b07a0451fbe6d33b6dbca3d9e90b71c37db9.cat"
13 Feb 2008 5:57:28 12 686 A.... "C:\Windows\winsxs\Catalogs\8272c03d107e462deb7a0bed70335833781b7e27bc6bbd24470701f9e4facde2.cat"
13 Feb 2008 5:57:30 33 241 A.... "C:\Windows\winsxs\Catalogs\8370ceeeb1349c4051a13b0a8753199ed1063b831be02bc998a7b5f966a35489.cat"
13 Feb 2008 5:58:46 72 898 A.... "C:\Windows\winsxs\Catalogs\8c45ae5136ba70d66ebd5d754502ba5aad0011368f20c209d5c4b7a661be76f6.cat"
18 Feb 2008 11:56:46 52 993 A.... "C:\Windows\winsxs\Catalogs\8e55939bd6c074103de36cb213bfa07d8cfbf7928d83a060d68096ac44489951.cat"
13 Feb 2008 5:59:52 26 186 A.... "C:\Windows\winsxs\Catalogs\9af3bcd7926ed3769be7ca1c9c967f346042206de363e8cec87759471fc2e059.cat"
13 Feb 2008 5:54:32 135 621 A.... "C:\Windows\winsxs\Catalogs\9d67ac47c38b8b86cf4684bbbeefd4c02a2becb4bf536c9d5567eab3c4e45ee0.cat"
13 Feb 2008 5:58:56 23 834 A.... "C:\Windows\winsxs\Catalogs\a22903d5ce47e64f53d64ca264f0fe9bdc3d309bc27878173df6509a55d87729.cat"
13 Feb 2008 5:56:40 19 793 A.... "C:\Windows\winsxs\Catalogs\a3ddc45e866caf08b16911853771af9f2be815846bc1188b56bfe7d8800a6f46.cat"
13 Feb 2008 5:57:16 17 696 A.... "C:\Windows\winsxs\Catalogs\a67bee86f4ddd7b5d823b4e3bdc802cc51e9ac59d1a9702c462926470bd9affe.cat"
13 Feb 2008 5:58:46 13 282 A.... "C:\Windows\winsxs\Catalogs\aa7aebb6803806c5595bd9dfe773adbcb09a7478108e82c6364cce00c671fa85.cat"
13 Feb 2008 5:58:46 13 282 A.... "C:\Windows\winsxs\Catalogs\aa98d2ed5f12ce319929af0c609bdd90da0afadb196555adeaf3b5ccd90e7a16.cat"
13 Feb 2008 5:59:46 23 834 A.... "C:\Windows\winsxs\Catalogs\af48385c27977533539131f64eebfac116ddf3837fd1af1799c0bb1c77416716.cat"
13 Feb 2008 6:00:04 14 442 A.... "C:\Windows\winsxs\Catalogs\b049af84ba1425fc9b9ef81afa8f496db0b39af2cd3784fe4d9175eb872a3bd2.cat"
13 Feb 2008 5:58:52 20 322 A.... "C:\Windows\winsxs\Catalogs\b6f4dc620eb230c19e41e48651d27e52ce429a0cb349a5f5cad42c8918e2f783.cat"
13 Feb 2008 6:00:08 23 834 A.... "C:\Windows\winsxs\Catalogs\b7e9df7d9dc37f7ce4badbb1a6f553e03dac91ba167cd6e71ddbbb4214e25ec1.cat"
13 Feb 2008 5:56:52 16 182 A.... "C:\Windows\winsxs\Catalogs\b9512f562dea4141303c7b5a6839b26be7af70cee01f22eccf3b3bc96075e5a9.cat"
13 Feb 2008 5:58:38 23 834 A.... "C:\Windows\winsxs\Catalogs\bb9dda7c7260df71c58f5fec039df5ff56ca2f8ba4e8528bdcd933fd6908c8f7.cat"
9 Jan 2008 14:40:14 14 458 A.... "C:\Windows\winsxs\Catalogs\be4dc3a2321d774ec966b8e917ee8a4a95088fce80b9c9bc7e017de5dce37905.cat"
13 Feb 2008 6:00:30 23 834 A.... "C:\Windows\winsxs\Catalogs\be62bbebe6895b3b4a10caa29a66b4ac1f2ff18b34578a0735de6107bfe57bef.cat"
13 Feb 2008 6:00:12 14 442 A.... "C:\Windows\winsxs\Catalogs\beeec77608220868bda528bf899948046b3b922ffded14465988afcd1c3db193.cat"
9 Jan 2008 14:40:48 24 378 A.... "C:\Windows\winsxs\Catalogs\bf34311b425c99bd6e567b7c5a8324409809ceca64a6a1d9bb68ffb696267248.cat"
13 Feb 2008 5:58:58 23 834 A.... "C:\Windows\winsxs\Catalogs\cd1c81d8d2b9a09313dec1f96bad03f3c0446b80bc3cefe68b80b9ff92b4a6c1.cat"
13 Feb 2008 5:59:14 14 442 A.... "C:\Windows\winsxs\Catalogs\d137bdccc0a688379a7fadf76fd5f8945454e1b2ec7cd5efe20b5f2cc2538d65.cat"
13 Feb 2008 5:56:56 21 450 A.... "C:\Windows\winsxs\Catalogs\d2826c9bef8a60d97fbc60ec225f6a331abcc9015baa15c33dbc463d7b932585.cat"
29 Feb 2008 14:05:08 11 939 A.... "C:\Windows\winsxs\Catalogs\dae870eb2d1601bf35170f7bfb9d4b4213bcc0379f2b4b68b18d7b9d6b189828.cat"
9 Jan 2008 14:40:12 12 090 A.... "C:\Windows\winsxs\Catalogs\db322104f6c64f6a821eaf7110abbbb5743736121ec99f17f0de297433a31e57.cat"
13 Feb 2008 6:00:20 23 834 A.... "C:\Windows\winsxs\Catalogs\dc9f831dbef1aa69e0d852ff6968383bc9f93a79a37f78f5b51d7180fe80a255.cat"
13 Feb 2008 5:59:42 14 442 A.... "C:\Windows\winsxs\Catalogs\e322773900b5ffb47a594c2d040319ad91ed21f9a2e99155d5a3e8f0288d525f.cat"
13 Feb 2008 5:59:40 14 442 A.... "C:\Windows\winsxs\Catalogs\ec2e1f4cf320b916e9c2f8fd0a93e216815f9a8f1160d9f2e2ff48f7d1a51bd1.cat"
13 Feb 2008 6:00:22 14 442 A.... "C:\Windows\winsxs\Catalogs\f235f9917f5f5e390695388f3fe6eaefd57ff66be6d15f9dbded5420abffada5.cat"
13 Feb 2008 5:59:40 23 834 A.... "C:\Windows\winsxs\Catalogs\f2703bd4476843033e9c5e86d1a16bc0490a60ac6d8c4cd775cea1a2f7658a02.cat"
13 Feb 2008 5:59:24 14 442 A.... "C:\Windows\winsxs\Catalogs\ff85065990d8f9f0c6e7c21f66cf710d21290f0d872754c1c805fae5ab687be7.cat"
13 Feb 2008 6:00:18 14 442 A.... "C:\Windows\winsxs\Catalogs\ffd3b8c1b322e41065c4049efd21125369dad80be8d6c03e707f02f1f5bd8f8a.cat"
14 Feb 2008 11:33:50 14 984 A.... "C:\Windows\winsxs\FileMaps\$$_system32_drivers_fr-fr_4d9f89205bdfbc76.cdf-ms"
19 Feb 2008 9:57:52 676 A.... "C:\Windows\winsxs\FileMaps\$$_ehome_mcx_x02_7afb1a3b86c42e5e.cdf-ms"
14 Feb 2008 11:33:50 219 400 A.... "C:\Windows\winsxs\FileMaps\$$_system32_fr-fr_448347788202c03b.cdf-ms"
14 Feb 2008 11:33:50 67 356 A.... "C:\Windows\winsxs\FileMaps\$$_system32_driverstore_fr-fr_f89b2012d73af418.cdf-ms"
14 Feb 2008 11:33:50 6 072 A.... "C:\Windows\winsxs\FileMaps\$$_system32_migration_927a21df1acd7c18.cdf-ms"
29 Feb 2008 14:05:22 23 520 A.... "C:\Windows\winsxs\FileMaps\$$_system32_drivers_dc1b782427b5ee1b.cdf-ms"
19 Feb 2008 9:57:52 672 A.... "C:\Windows\winsxs\FileMaps\$$_ehome_mcx_022df17cf4546600.cdf-ms"
29 Feb 2008 14:05:22 3 564 A.... "C:\Windows\winsxs\FileMaps\$$.cdf-ms"
14 Feb 2008 11:26:22 3 080 A.... "C:\Windows\winsxs\FileMaps\$$_apppatch_1143992cbbbebcab.cdf-ms"
19 Feb 2008 9:57:52 18 476 A.... "C:\Windows\winsxs\FileMaps\$$_ehome_40103e2da1d121de.cdf-ms"
15 Feb 2008 11:51:48 1 344 A.... "C:\Windows\winsxs\FileMaps\$$_servicing_fc2045b9046cc796.cdf-ms"
14 Feb 2008 11:33:50 1 040 A.... "C:\Windows\winsxs\FileMaps\$$_servicing_fr-fr_626f794e6d096759.cdf-ms"
15 Feb 2008 11:51:48 692 A.... "C:\Windows\winsxs\FileMaps\$$_servicing_version_6.0.6001.18000_ace7738cfc7e50ca.cdf-ms"
29 Feb 2008 14:05:22 389 772 A.... "C:\Windows\winsxs\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms"
11 Jan 2008 10:16:50 700 A.... "C:\Windows\winsxs\FileMaps\program_files_windows_sidebar_shared_gadgets_5e8909726fa64128.cdf-ms"
11 Jan 2008 10:16:50 1 236 A.... "C:\Windows\winsxs\FileMaps\program_files_windows_sidebar_8d6dbc4becba56da.cdf-ms"
11 Jan 2008 10:16:50 1 048 A.... "C:\Windows\winsxs\FileMaps\program_files_windows_sidebar_fr-fr_467f8d09f4362fe5.cdf-ms"
14 Feb 2008 11:25:06 680 A.... "C:\Windows\winsxs\FileMaps\program_files_ffd0cbfc813cc4f1.cdf-ms"
14 Feb 2008 11:25:06 2 280 A.... "C:\Windows\winsxs\FileMaps\program_files_internet_explorer_a421d1bfaf856e2b.cdf-ms"
10 Jan 2008 6:13:52 2 492 A.... "C:\Windows\winsxs\FileMaps\program_files_windows_mail_e07902f329fe05e9.cdf-ms"
29 Feb 2008 14:05:22 856 A.... "C:\Windows\winsxs\FileMaps\_0000000000000000.cdf-ms"
10 Jan 2008 7:10:38 3 128 ..... "C:\Windows\winsxs\Manifests\msil_microsoft.mediacenter.ui_31bf3856ad364e35_6.0.6000.16625_none_312b694a5a1995c3.manifest"
10 Jan 2008 7:05:24 7 660 ..... "C:\Windows\winsxs\Manifests\msil_ehshell_31bf3856ad364e35_6.0.6000.20750_none_8a03a2785dbb96fd.manifest"
10 Jan 2008 7:05:14 3 926 ..... "C:\Windows\winsxs\Manifests\msil_microsoft.mediacenter_31bf3856ad364e35_6.0.6000.20750_none_23eaedd2e86c76c3.manifest"
10 Jan 2008 7:06:24 3 128 ..... "C:\Windows\winsxs\Manifests\msil_microsoft.mediacenter.ui_31bf3856ad364e35_6.0.6000.20750_none_318f94df73540aad.manifest"
10 Jan 2008 7:09:38 7 688 ..... "C:\Windows\winsxs\Manifests\msil_ehshell_31bf3856ad364e35_6.0.6000.16625_none_899f76e344812213.manifest"
10 Jan 2008 7:11:04 3 023 ..... "C:\Windows\winsxs\Manifests\msil_ehepg_31bf3856ad364e35_6.0.6000.16625_none_d9ac5ba2d1cd93c1.manifest"
10 Jan 2008 7:11:42 3 137 ..... "C:\Windows\winsxs\Manifests\msil_microsoft.mediacenter.shell_31bf3856ad364e35_6.0.6000.16625_none_4e9d1a9a98c598a9.manifest"
10 Jan 2008 7:06:52 3 023 ..... "C:\Windows\winsxs\Manifests\msil_ehepg_31bf3856ad364e35_6.0.6000.20750_none_da108737eb0808ab.manifest"
10 Jan 2008 7:07:38 3 137 ..... "C:\Windows\winsxs\Manifests\msil_microsoft.mediacenter.shell_31bf3856ad364e35_6.0.6000.20750_none_4f01462fb2000d93.manifest"
10 Jan 2008 7:08:02 11 836 ..... "C:\Windows\winsxs\Manifests\msil_ehexthost_31bf3856ad364e35_6.0.6000.16625_none_bcf1d858c1bcf70c.manifest"
10 Jan 2008 7:03:56 11 836 ..... "C:\Windows\winsxs\Manifests\msil_ehexthost_31bf3856ad364e35_6.0.6000.20750_none_bd5603eddaf76bf6.manifest"
10 Jan 2008 7:08:20 3 023 ..... "C:\Windows\winsxs\Manifests\msil_ehiextens_31bf3856ad364e35_6.0.6000.16625_none_fbd4df3d09c25501.manifest"
10 Jan 2008 7:04:12 3 023 ..... "C:\Windows\winsxs\Manifests\msil_ehiextens_31bf3856ad364e35_6.0.6000.20750_none_fc390ad222fcc9eb.manifest"
10 Jan 2008 7:09:26 3 926 ..... "C:\Windows\winsxs\Manifests\msil_microsoft.mediacenter_31bf3856ad364e35_6.0.6000.16625_none_2386c23dcf3201d9.manifest"
13 Feb 2008 5:58:54 714 A.... "C:\Windows\winsxs\Manifests\x86_eb4ae9c87b1ad98dd78232703b1286b6_31bf3856ad364e35_6.0.6000.20734_none_35edac12437778fd.manifest"
13 Feb 2008 6:00:02 2 674 A.... "C:\Windows\winsxs\Manifests\x86_microsoft-windows-s..stack-msg.resources_31bf3856ad364e35_6.0.6000.16609_pt-pt_62e65870024822b4.manifest"
13 Feb 2008 6:00:18 6 228 A.... "C:\Windows\winsxs\Manifests\x86_msmouse.inf.resources_31bf3856ad364e35_6.0.6000.20734_tr-tr_5e1ff0dce90d8663.manifest"
13 Feb 2008 5:58:42 19 532 A.... "C:\Windows\winsxs\Manifests\x86_microsoft-windows-setupapi_31bf3856ad364e35_6.0.6000.20734_none_337c4939e249a25d.manifest"
13 Feb 2008 5:58:54 6 228 A.... "C:\Windows\winsxs\Manifests\x86_msmouse.inf.resources_31bf3856ad364e35_6.0.6000.20734_cs-cz_8ca05910cb292212.manifest"
13 Feb 2008 5:59:08 2 093 A.... "C:\Windows\winsxs\Manifests\x86_usbport.inf.resources_31bf3856ad364e35_6.0.6000.20734_es-es_ec5f1016c309b7eb.manifest"
13 Feb 2008 5:59:40 5 214 A.... "C:\Windows\winsxs\Manifests\x86_keyboard.inf.resources_31bf3856ad364e35_6.0.6000.16609_ko-kr_ff05ba691ee64e3c.manifest"
13 Feb 2008 6:00:08 5 214 A.... "C:\Windows\winsxs\Manifests\x86_keyboard.inf.resources_31bf3856ad364e35_6.0.6000.20734_ru-ru_7650d8c6d96ef857.manifest"
13 Feb 2008 5:59:46 704 A.... "C:\Windows\winsxs\Manifests\x86_5dd0f50bf7e030f4cf1a289f91a7ba0d_31bf3856ad364e35_6.0.6000.16609_none_769fb3b246e9b743.manifest"
13 Feb 2008 5:57:50 45 290 A.... "C:\Windows\winsxs\Manifests\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6001.18000_none_095f6148c74a7a64.manifest"
13 Feb 2008 6:00:20 5 214 A.... "C:\Windows\winsxs\Manifests\x86_keyboard.inf.resources_31bf3856ad364e35_6.0.6000.16609_tr-tr_baf4e1eda6198fb9.manifest"
9 Jan 2008 14:40:48 15 275 A.... "C:\Windows\winsxs\Manifests\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6000.20709_none_a51d8a7c38da8c7b.manifest"
13 Feb 2008 5:59:12 3 034 A.... "C:\Windows\winsxs\Manifests\x86_microsoft-windows-setupapi.resources_31bf3856ad364e35_6.0.6000.16609_et-ee_620eb9ba7e6058de.manifest"
13 Feb 2008 5:58:44 3 636 A.... "C:\Windows\winsxs\Manifests\x86_microsoft-windows-i..rd-japanese_106_key_31bf3856ad364e35_6.0.6000.20734_none_db8e59fc2fa737ae.manifest"
13 Feb 2008 5:59:36 650 A.... "C:\Windows\winsxs\Manifests\x86_3813705a22550aab3e2721edbdc81963_31bf3856ad364e35_6.0.6000.16609_none_4c

voila j'ai réussi a avoir un rapport AVG:
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 23:59:36 02/03/2008

+ Résultat de l'analyse:

F:\trie\03 Track 3.wma -> Downloader.Wimad.l : Nettoyé.
:mozilla.12:C:\Users\kro\AppData\Roaming\Mozilla\Firefox\Profiles\9qpwf23x.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.9:C:\Users\kro\AppData\Roaming\Mozilla\Firefox\Profiles\9qpwf23x.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.

Fin du rapport
merci d'avance!!!

Salut,

En fait SDFix ne fonctionne pas sous Vista. Pour AVG c'est pas grave tant que tu as bien supprimé les éléments découvert. Tu l'as fait ?

> Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):
- Vas dans démarrer puis panneau de configuration
- Double Clique sur l'icône "Comptes d'utilisateurs"
- Clique ensuite sur désactiver et valide.
- Un redemarrage est nécessaire.

> Télécharge ComboFix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe (par sUBs) sur ton Bureau.
Déconnecte toi du net et désactive ton antivirus pour que Combofix puisse s'exécuter normalement.
- Double clique combofix.exe :
- Tape sur la touche 1 (Yes) pour démarrer le scan.
- Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.
NOTE : Le rapport se trouve également ici : C:\Combofix.txt
Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

Ensuite,
Poste un nouveau rapport HiJAckT stp.

A+