SOS virus argneux

Résolu
ixilium -  
Bonjour,
j'ai un gros problem de virus ... en 6 ans d'info c'est la 1ere fois que ça marrive ... je copie colle le scan de kaspersky .
Merci d'avance ....

-------------------------------------------------------------------------------
KASPERSKY ON-LINE SCANNER REPORT
Tuesday, September 16, 2008 5:32:12 PM
Système d'exploitation : Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky On-line Scanner version : 5.0.84.2
Dernière mise à jour de la base antivirus Kaspersky : 16/09/2008
Enregistrements dans la base antivirus Kaspersky : 1240167
-------------------------------------------------------------------------------

Paramètres d'analyse:
Analyser avec la base antivirus suivante: étendue
Analyser les archives: vrai
Analyser les bases de messagerie: vrai

Cible de l'analyse - Poste de travail:
A:\
C:\
D:\
E:\
F:\

Statistiques de l'analyse:
Total d'objets analysés: 47541
Nombre de virus trouvés: 4
Nombre d'objets infectés: 25 / 0
Nombre d'objets suspects: 0
Durée de l'analyse: 02:43:15

Nom de l'objet infecté / Nom du virus / Dernière action
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\Cookies\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\NTUSER.DAT L'objet est verrouillé ignoré
C:\Documents and Settings\LocalService\ntuser.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\Nat\Cookies\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\Nat\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\Nat\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
C:\Documents and Settings\Nat\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\Nat\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\Nat\Local Settings\Historique\History.IE5\MSHist012008091620080917\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\Nat\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
C:\Documents and Settings\Nat\NTUSER.DAT L'objet est verrouillé ignoré
C:\Documents and Settings\Nat\ntuser.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\NTUSER.DAT L'objet est verrouillé ignoré
C:\Documents and Settings\NetworkService\ntuser.dat.LOG L'objet est verrouillé ignoré
C:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré
C:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP30\A0019432.exe Infecté : Worm.Win32.AutoRun.lk ignoré
C:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP30\A0019433.exe Infecté : Worm.Win32.AutoRun.lk ignoré
C:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP30\A0019434.exe Infecté : Worm.Win32.AutoRun.lk ignoré
C:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP30\A0019435.exe Infecté : Worm.Win32.AutoRun.lk ignoré
C:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP30\A0019436.exe Infecté : Worm.Win32.AutoRun.lk ignoré
C:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP30\A0019437.exe Infecté : Worm.Win32.AutoRun.lk ignoré
C:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP30\A0019441.EXE Infecté : Worm.Win32.AutoRun.aha ignoré
C:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP30\A0019833.exe/SmitfraudFix/Reboot.exe Infecté : not-a-virus:RiskTool.Win32.Reboot.f ignoré
C:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP30\A0019833.exe RAR: infecté - 1 ignoré
C:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP30\A0019850.exe Infecté : not-a-virus:RiskTool.Win32.Reboot.f ignoré
C:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP30\A0019863.exe/SmitfraudFix/Reboot.exe Infecté : not-a-virus:RiskTool.Win32.Reboot.f ignoré
C:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP30\A0019863.exe RAR: infecté - 1 ignoré
C:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP30\A0019876.exe Infecté : not-a-virus:RiskTool.Win32.Reboot.f ignoré
C:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP30\A0019943.exe Infecté : Worm.Win32.AutoRun.aha ignoré
C:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP30\A0020315.exe Infecté : Worm.Win32.AutoRun.aha ignoré
C:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP31\A0020381.exe Infecté : Worm.Win32.AutoRun.aha ignoré
C:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP31\A0020394.EXE Infecté : Worm.Win32.AutoRun.aha ignoré
C:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP38\change.log L'objet est verrouillé ignoré
C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré
C:\WINDOWS\KB951072-v2.log L'objet est verrouillé ignoré
C:\WINDOWS\OPTIONS\CABS\lanset64.exe Infecté : Virus.Win32.Virut.av ignoré
C:\WINDOWS\SchedLgU.Txt L'objet est verrouillé ignoré
C:\WINDOWS\SoftwareDistribution\EventCache\{B3CF6744-C722-4DAC-A9BC-4B5807AE3850}.bin L'objet est verrouillé ignoré
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré
C:\WINDOWS\Sti_Trace.log L'objet est verrouillé ignoré
C:\WINDOWS\system32\CatRoot2\edb.log L'objet est verrouillé ignoré
C:\WINDOWS\system32\CatRoot2\edbtmp.log L'objet est verrouillé ignoré
C:\WINDOWS\system32\CatRoot2\tmp.edb L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\default L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\Internet.evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\software L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\system L'objet est verrouillé ignoré
C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré
C:\WINDOWS\system32\h323log.txt L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP L'objet est verrouillé ignoré
C:\WINDOWS\wiadebug.log L'objet est verrouillé ignoré
C:\WINDOWS\wiaservc.log L'objet est verrouillé ignoré
C:\WINDOWS\WindowsUpdate.log L'objet est verrouillé ignoré
F:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré
F:\System Volume Information\_restore{1D01C484-3EC4-49AF-8CEC-CA3C0F665F22}\RP111\A0073861.EXE Infecté : Worm.Win32.AutoRun.aha ignoré
F:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP20\A0008792.EXE Infecté : Worm.Win32.AutoRun.aha ignoré
F:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP25\A0013115.EXE Infecté : Worm.Win32.AutoRun.aha ignoré
F:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP25\A0014114.EXE Infecté : Worm.Win32.AutoRun.aha ignoré
F:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP27\A0014497.EXE Infecté : Worm.Win32.AutoRun.aha ignoré
F:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP27\A0015327.EXE Infecté : Worm.Win32.AutoRun.aha ignoré
F:\System Volume Information\_restore{221D5670-37E2-444A-A493-72A0C14E2666}\RP30\A0019444.EXE Infecté : Worm.Win32.AutoRun.aha ignoré

Analyse terminée.

un gros merci d'avance a celui ou celle qui pourra m'aider !!

Bye
Configuration: Windows XP
Opera 9.52

38 réponses

Résumé de la discussion

Un utilisateur signale une infection virale sous Windows XP après un scan Kaspersky Online Scanner, avec Worm.Win32.AutoRun.lk détecté et de nombreux fichiers verrouillés dans des répertoires système. Des conseils convergent vers l'utilisation d OTMoveIt2 pour isoler les fichiers suspects et vers une analyse via VirusTotal afin d'identifier rapidement les éléments indésirables présents. D'autres propositions évoquent l'usage de HijackThis et MalwareBytes, puis le recours à un nettoyage en mode sans échec et éventuellement un reformatage si les traces résistent. Des rapports détaillés montrent que des composants verrouillés et des éléments de démarrage ont été identifiés, et que des mesures post-infection ont impliqué la suppression de clés et de services.

Bobot (l’IA à votre service)
  1. ixilium Auteur
    Voici le log Hijack This si jamais ça sert....

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18:05:52, on 16/09/2008
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16705)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\iSafer\iSaferSvr.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\WINDOWS\system32\PnkBstrB.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\VM_STI.EXE
    C:\WINDOWS\system32\tbctray.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\iSafer\iSafer.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    C:\Program Files\Opera\opera.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC210NC Webcam
    O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
    O4 - HKLM\..\Run: [TraySantaCruz] C:\WINDOWS\system32\tbctray.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: iSafer.lnk = C:\Program Files\iSafer\iSafer.exe
    O4 - Global Startup: TrayMin210.exe.lnk = ?
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
    O23 - Service: iSafer - Personal Firewall (iSafer) - http://winsockfirewall.sourceforge.net - C:\Program Files\iSafer\iSaferSvr.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
    0
    1. verni29 Contributeur sécurité
      Bonjour,

      Tu as dans ton PC un des pires virus qu'il peut y avoir :
      C:\WINDOWS\OPTIONS\CABS\lanset64.exe Infecté : Virus.Win32.Virut.av ignoré
      Il faut immédiatement traiter l'infection.
      Je ne sais pas si justement celle ci a commencé à se propager car sinon elle va te supprimer petit à petit tous les .exe de ton PC
      Parfois on arrive à l'enlever et parfois seul le formatage est la seule solution.

      1) Télécharge OTMoveIt (de Old_Timer) sur ton Bureau.
      http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe

      Double-clique sur OTMoveIt.exe pour le lancer.
      Copie la liste qui se trouve en citation ci-dessous et colle-la dans le cadre de gauche de OTMoveIt sous Paste List of Files/Folders to move.


      C:\WINDOWS\OPTIONS\CABS\lanset64.exe

      clique sur MoveIt! pour lancer la suppression.
      Le résultat apparaitra dans le cadre "Results".
      Clique sur Exit pour fermer.

      Poste le rapport situé dans C:\_OTMoveIt\MovedFiles.
      Il est possible que ton ordinateur redémarre pour supprimer les fichiers.

      2) Il est donc urgent de traiter l'infection car sinon il sera impossible de la traiter ultérieurement.

      Munis toi de ton CD d'installation car si il est impossible de supprimer l'infection, il te sera alors nécessaire de formater.
      Si ton PC est trop infecté, l'outil supprimera peut-être des fichiers système et il te faudra dans ce cas redémarrer avec tes CD d'installation.

      L'outil utilisé est un outil de kaspersky et il va scanner en profondeur ton PC
      Cela risque de prendre du temps ( plusieurs heures ) mais laisse faire l'outil.

      imprime ces instructions pour une lecture en mode Sans Échec.

      --> Télécharge et enregistre sur ton Bureau la version la plus récente d'AVP Tool ( sélection à partir des dates ) :
      http://downloads5.kaspersky-labs.com/devbuilds/AVPTool/

      --> branche tes périphériques amovibles (clés USB, disque dur externe...)

      --> Redémarre en mode Sans Échec et choisis ton compte usuel.

      - Lance l'exécutable intitulé "setup_7.0xxxxx"
      - Réponds "Oui" à la question "Do you want to continue installation?"
      - Clique sur "Next" pour les deux fenêtres suivantes: AVP TOOL s'installe sur ton Bureau dans un dossier nommé "Kaspersky Lab Tool"

      - L'outil se lance tout seul: coche toutes les cases dans l'onglet "Automatic Scan".
      * Clique maintenant sur "Security Level": une fenêtre de configuration s'ouvre: paramètre le scanner comme sur l'image :
      http://img381.imageshack.us/img381/2...1lt6rk1gw5.png

      - Valide avec "Apply" puis "OK"
      - L'outil est maintenant configuré : dans la fenêtre principale, clique sur "Scan". Le scan commence, une nouvelle fenêtre s'ouvre indiquant la progression du balayage en pourcentage.
      - A la fin du scan, AVP Tool signale les objets infectés par l'intermédiaire d'une pop-up: coche alors "Apply to all" et clique sur "Delete" ou "Disinfect" selon ce que propose la fenêtre :

      http://img179.imageshack.us/img179/9...2rd1gr4iy3.png

      - Une fois les infections traitées par l'intermédiaire des pop-ups, il se peut que des fichiers malsains n'aient pas été supprimés: ils apparaissent en rouge dans la liste: clique alors sur le bouton "Neutralize all" de la fenêtre de progression du scan: si un pop-up indique qu'il faut redémarrer, accepte en cliquant sur "OK"
      - Rends-toi maintenant dans l'onglet "Events" de la fenêtre de progression du scan, et décoche "Show all events"
      - Clique enfin sur "Reports" puis "Save to file" et enregistre le rapport sur ton Bureau sous le nom Rapport AVP TOOL
      - Redémarre ton PC sous windows.
      Poste le rapport.

      A+
      0
      1. ixilium Auteur
        J'en est deja enlever plein plein plien avec "rmvirut" mais il faudrai jarrive a suprimer les virus a la base ...
        En tous cas merci de ta reponse rapide je te tiens au courant quand j'aurai fini toutes tes instrution !! Grand merci !! je mis emploi de suite lol
        0
        1. ixilium Auteur
          Voici deja le rapport situé dans C:\_OTMoveIt\MovedFiles:

          C:\WINDOWS\OPTIONS\CABS\lanset64.exe moved successfully.

          OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 09162008_182449
          0
          2. verni29 Contributeur sécurité
            OK, le reste va te prendre plus de temps mais on en saura plus après avoir passé AVP Tool.

            A+
            0
            1. ixilium Auteur
              Re bonjour les gens voici le dernier scan ecffetuer avec kaspersky removal tool
              mais bizzarement il n'y avais que 1 virus alors que sur le 1er scan ils y en avaient 4 plus 24 ou 25 infecter.... louche n'es pas ??? si quelqu'un comprend ca serai cool de m'aider...
              Y en a marre des faux pirate

              Désoler le scan est poster en plusieur morceau sinon ca plante !! Merci d'avance
              Cordialement ixilium

              Scan
              ----
              Scanned: 101723
              Detected: 1
              Untreated: 0
              Start time: 16/09/2008 18:49:04
              Duration: 02:01:23
              Finish time: 16/09/2008 20:48:27

              Detected
              --------
              Status Object
              ------ ------
              disinfected: virus Virus.Win32.Virut.av File: C:\_OTMoveIt\MovedFiles\09162008_182449\WINDOWS\OPTIONS\CABS\lanset64.exe

              Events
              ------
              Time Name Status Reason
              ---- ---- ------ ------
              16/09/2008 18:49:04 Running module: smss.exe\smss.exe ok scanned
              16/09/2008 18:49:05 File: C:\WINDOWS\System32\smss.exe ok scanned
              16/09/2008 18:49:06 Running module: smss.exe\ntdll.dll ok scanned
              16/09/2008 18:49:06 File: C:\WINDOWS\system32\ntdll.dll ok scanned
              16/09/2008 18:49:06 Running module: csrss.exe\csrss.exe ok scanned
              16/09/2008 18:49:06 File: C:\WINDOWS\system32\csrss.exe ok scanned
              16/09/2008 18:49:06 Running module: csrss.exe\ntdll.dll ok scanned
              16/09/2008 18:49:06 Running module: csrss.exe\CSRSRV.dll ok scanned
              16/09/2008 18:49:06 File: C:\WINDOWS\system32\CSRSRV.dll ok scanned
              16/09/2008 18:49:06 Running module: csrss.exe\basesrv.dll ok scanned
              16/09/2008 18:49:06 File: C:\WINDOWS\system32\basesrv.dll ok scanned
              16/09/2008 18:49:06 Running module: csrss.exe\winsrv.dll ok scanned
              16/09/2008 18:49:07 File: C:\WINDOWS\system32\winsrv.dll ok scanned
              16/09/2008 18:49:07 Running module: csrss.exe\GDI32.dll ok scanned
              16/09/2008 18:49:07 File: C:\WINDOWS\system32\GDI32.dll ok scanned
              16/09/2008 18:49:07 Running module: csrss.exe\KERNEL32.dll ok scanned
              16/09/2008 18:49:08 File: C:\WINDOWS\system32\KERNEL32.dll ok scanned
              16/09/2008 18:49:08 Running module: csrss.exe\USER32.dll ok scanned
              16/09/2008 18:49:09 File: C:\WINDOWS\system32\USER32.dll ok scanned
              16/09/2008 18:49:09 Running module: csrss.exe\sxs.dll ok scanned
              16/09/2008 18:49:10 File: C:\WINDOWS\system32\sxs.dll ok scanned
              16/09/2008 18:49:10 Running module: csrss.exe\ADVAPI32.dll ok scanned
              16/09/2008 18:49:10 File: C:\WINDOWS\system32\ADVAPI32.dll ok scanned
              16/09/2008 18:49:10 Running module: csrss.exe\RPCRT4.dll ok scanned
              16/09/2008 18:49:11 File: C:\WINDOWS\system32\RPCRT4.dll ok scanned
              16/09/2008 18:49:11 Running module: csrss.exe\Secur32.dll ok scanned
              16/09/2008 18:49:11 File: C:\WINDOWS\system32\Secur32.dll ok scanned
              16/09/2008 18:49:11 Running module: winlogon.exe\winlogon.exe ok scanned
              16/09/2008 18:49:13 File: C:\WINDOWS\system32\winlogon.exe ok scanned
              16/09/2008 18:49:13 Running module: winlogon.exe\ntdll.dll ok scanned
              16/09/2008 18:49:13 Running module: winlogon.exe\kernel32.dll ok scanned
              16/09/2008 18:49:13 File: C:\WINDOWS\system32\kernel32.dll ok iChecker
              16/09/2008 18:49:13 Running module: winlogon.exe\ADVAPI32.dll ok scanned
              16/09/2008 18:49:13 Running module: winlogon.exe\RPCRT4.dll ok scanned
              16/09/2008 18:49:13 Running module: winlogon.exe\Secur32.dll ok scanned
              16/09/2008 18:49:13 Running module: winlogon.exe\AUTHZ.dll ok scanned
              16/09/2008 18:49:13 File: C:\WINDOWS\system32\AUTHZ.dll ok scanned
              16/09/2008 18:49:13 Running module: winlogon.exe\msvcrt.dll ok scanned
              16/09/2008 18:49:14 File: C:\WINDOWS\system32\msvcrt.dll ok scanned
              16/09/2008 18:49:14 Running module: winlogon.exe\CRYPT32.dll ok scanned
              16/09/2008 18:49:14 File: C:\WINDOWS\system32\CRYPT32.dll ok scanned
              16/09/2008 18:49:14 Running module: winlogon.exe\MSASN1.dll ok scanned
              16/09/2008 18:49:14 File: C:\WINDOWS\system32\MSASN1.dll ok scanned
              16/09/2008 18:49:14 Running module: winlogon.exe\USER32.dll ok scanned
              16/09/2008 18:49:14 Running module: winlogon.exe\GDI32.dll ok scanned
              16/09/2008 18:49:14 Running module: winlogon.exe\NDdeApi.dll ok scanned
              16/09/2008 18:49:14 File: C:\WINDOWS\system32\NDdeApi.dll ok scanned
              16/09/2008 18:49:14 Running module: winlogon.exe\PROFMAP.dll ok scanned
              16/09/2008 18:49:15 File: C:\WINDOWS\system32\PROFMAP.dll ok scanned
              16/09/2008 18:49:15 Running module: winlogon.exe\NETAPI32.dll ok scanned
              16/09/2008 18:49:15 File: C:\WINDOWS\system32\NETAPI32.dll ok scanned
              16/09/2008 18:49:15 Running module: winlogon.exe\USERENV.dll ok scanned
              16/09/2008 18:49:15 File: C:\WINDOWS\system32\USERENV.dll ok scanned
              16/09/2008 18:49:15 Running module: winlogon.exe\PSAPI.DLL ok scanned
              16/09/2008 18:49:16 File: C:\WINDOWS\system32\PSAPI.DLL ok scanned
              16/09/2008 18:49:16 Running module: winlogon.exe\REGAPI.dll ok scanned
              16/09/2008 18:49:16 File: C:\WINDOWS\system32\REGAPI.dll ok scanned
              16/09/2008 18:49:16 Running module: winlogon.exe\SETUPAPI.dll ok scanned
              16/09/2008 18:49:16 File: C:\WINDOWS\system32\SETUPAPI.dll ok scanned
              16/09/2008 18:49:16 Running module: winlogon.exe\VERSION.dll ok scanned
              16/09/2008 18:49:17 File: C:\WINDOWS\system32\VERSION.dll ok scanned
              16/09/2008 18:49:17 Running module: winlogon.exe\WINSTA.dll ok scanned
              16/09/2008 18:49:17 File: C:\WINDOWS\system32\WINSTA.dll ok scanned
              16/09/2008 18:49:17 Running module: winlogon.exe\WINTRUST.dll ok scanned
              16/09/2008 18:49:17 File: C:\WINDOWS\system32\WINTRUST.dll ok scanned
              16/09/2008 18:49:17 Running module: winlogon.exe\IMAGEHLP.dll ok scanned
              16/09/2008 18:49:17 File: C:\WINDOWS\system32\IMAGEHLP.dll ok scanned
              16/09/2008 18:49:17 Running module: winlogon.exe\WS2_32.dll ok scanned
              16/09/2008 18:49:18 File: C:\WINDOWS\system32\WS2_32.dll ok scanned
              16/09/2008 18:49:18 Running module: winlogon.exe\WS2HELP.dll ok scanned
              16/09/2008 18:49:18 File: C:\WINDOWS\system32\WS2HELP.dll ok scanned
              16/09/2008 18:49:18 Running module: winlogon.exe\IMM32.DLL ok scanned
              16/09/2008 18:49:18 File: C:\WINDOWS\system32\IMM32.DLL ok scanned
              16/09/2008 18:49:18 Running module: winlogon.exe\MSGINA.dll ok scanned
              16/09/2008 18:49:18 File: C:\WINDOWS\system32\MSGINA.dll ok scanned
              16/09/2008 18:49:18 Running module: winlogon.exe\COMCTL32.dll ok scanned
              16/09/2008 18:49:19 File: C:\WINDOWS\system32\COMCTL32.dll ok scanned
              16/09/2008 18:49:19 Running module: winlogon.exe\ODBC32.dll ok scanned
              16/09/2008 18:49:19 File: C:\WINDOWS\system32\ODBC32.dll ok scanned
              16/09/2008 18:49:19 Running module: winlogon.exe\comdlg32.dll ok scanned
              16/09/2008 18:49:19 File: C:\WINDOWS\system32\comdlg32.dll ok scanned
              16/09/2008 18:49:19 Running module: winlogon.exe\SHELL32.dll ok scanned
              16/09/2008 18:49:23 File: C:\WINDOWS\system32\SHELL32.dll ok scanned
              16/09/2008 18:49:23 Running module: winlogon.exe\SHLWAPI.dll ok scanned
              16/09/2008 18:49:23 File: C:\WINDOWS\system32\SHLWAPI.dll ok scanned
              16/09/2008 18:49:23 Running module: winlogon.exe\comctl32.dll ok scanned
              16/09/2008 18:49:24 File: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll ok scanned
              16/09/2008 18:49:24 Running module: winlogon.exe\odbcint.dll ok scanned
              16/09/2008 18:49:24 File: C:\WINDOWS\system32\odbcint.dll ok scanned
              16/09/2008 18:49:24 Running module: winlogon.exe\SHSVCS.dll ok scanned
              16/09/2008 18:49:24 File: C:\WINDOWS\system32\SHSVCS.dll ok scanned
              16/09/2008 18:49:24 Running module: winlogon.exe\sfc.dll ok scanned
              16/09/2008 18:49:24 File: C:\WINDOWS\system32\sfc.dll ok scanned
              16/09/2008 18:49:24 Running module: winlogon.exe\sfc_os.dll ok scanned
              16/09/2008 18:49:25 File: C:\WINDOWS\system32\sfc_os.dll ok scanned
              16/09/2008 18:49:25 Running module: winlogon.exe\ole32.dll ok scanned
              16/09/2008 18:49:25 File: C:\WINDOWS\system32\ole32.dll ok scanned
              16/09/2008 18:49:25 Running module: winlogon.exe\Apphelp.dll ok scanned
              16/09/2008 18:49:25 File: C:\WINDOWS\system32\Apphelp.dll ok scanned
              16/09/2008 18:49:25 Running module: winlogon.exe\msctfime.ime ok scanned
              16/09/2008 18:49:25 File: C:\WINDOWS\system32\msctfime.ime ok scanned
              16/09/2008 18:49:25 Running module: winlogon.exe\WINMM.dll ok scanned
              16/09/2008 18:49:25 File: C:\WINDOWS\system32\WINMM.dll ok scanned
              16/09/2008 18:49:26 Running module: winlogon.exe\cscdll.dll ok scanned
              16/09/2008 18:49:26 File: C:\WINDOWS\system32\cscdll.dll ok scanned
              16/09/2008 18:49:26 Running module: winlogon.exe\dimsntfy.dll ok scanned
              16/09/2008 18:49:26 File: C:\WINDOWS\System32\dimsntfy.dll ok scanned
              16/09/2008 18:49:26 Running module: winlogon.exe\WlNotify.dll ok scanned
              16/09/2008 18:49:26 File: C:\WINDOWS\system32\WlNotify.dll ok scanned
              16/09/2008 18:49:26 Running module: winlogon.exe\MPR.dll ok scanned
              16/09/2008 18:49:26 File: C:\WINDOWS\system32\MPR.dll ok scanned
              16/09/2008 18:49:26 Running module: winlogon.exe\WinSCard.dll ok scanned
              16/09/2008 18:49:27 File: C:\WINDOWS\system32\WinSCard.dll ok scanned
              16/09/2008 18:49:27 Running module: winlogon.exe\WTSAPI32.dll ok scanned
              16/09/2008 18:49:27 File: C:\WINDOWS\system32\WTSAPI32.dll ok scanned
              16/09/2008 18:49:27 Running module: winlogon.exe\WINSPOOL.DRV ok scanned
              16/09/2008 18:49:27 File: C:\WINDOWS\system32\WINSPOOL.DRV ok scanned
              16/09/2008 18:49:27 Running module: winlogon.exe\rsaenh.dll ok scanned
              16/09/2008 18:49:27 File: C:\WINDOWS\system32\rsaenh.dll ok scanned
              16/09/2008 18:49:27 Running module: winlogon.exe\UxTheme.dll ok scanned
              16/09/2008 18:49:27 File: C:\WINDOWS\system32\UxTheme.dll ok scanned
              16/09/2008 18:49:28 Running module: winlogon.exe\SAMLIB.dll ok scanned
              16/09/2008 18:49:28 File: C:\WINDOWS\system32\SAMLIB.dll ok scanned
              16/09/2008 18:49:28 Running module: winlogon.exe\cscui.dll ok scanned
              16/09/2008 18:49:28 File: C:\WINDOWS\system32\cscui.dll ok scanned
              16/09/2008 18:49:28 Running module: winlogon.exe\NTMARTA.DLL ok scanned
              16/09/2008 18:49:28 File: C:\WINDOWS\system32\NTMARTA.DLL ok scanned
              16/09/2008 18:49:28 Running module: winlogon.exe\WLDAP32.dll ok scanned
              16/09/2008 18:49:28 File: C:\WINDOWS\system32\WLDAP32.dll ok scanned
              16/09/2008 18:49:28 Running module: winlogon.exe\COMRes.dll ok scanned
              16/09/2008 18:49:29 File: C:\WINDOWS\system32\COMRes.dll ok scanned
              16/09/2008 18:49:29 Running module: winlogon.exe\OLEAUT32.dll ok scanned
              16/09/2008 18:49:29 File: C:\WINDOWS\system32\OLEAUT32.dll ok scanned
              16/09/2008 18:49:29 Running module: winlogon.exe\CLBCATQ.DLL ok scanned
              16/09/2008 18:49:30 File: C:\WINDOWS\system32\CLBCATQ.DLL ok scanned
              16/09/2008 18:49:30 Running module: winlogon.exe\xpsp2res.dll ok scanned
              16/09/2008 18:49:33 File: C:\WINDOWS\system32\xpsp2res.dll ok scanned
              16/09/2008 18:49:33 Running module: services.exe\services.exe ok scanned
              16/09/2008 18:49:34 File: C:\WINDOWS\system32\services.exe ok scanned
              16/09/2008 18:49:34 Running module: services.exe\ntdll.dll ok scanned
              16/09/2008 18:49:34 Running module: services.exe\kernel32.dll ok scanned
              16/09/2008 18:49:34 Running module: services.exe\ADVAPI32.dll ok scanned
              16/09/2008 18:49:34 Running module: services.exe\RPCRT4.dll ok scanned
              16/09/2008 18:49:34 Running module: services.exe\Secur32.dll ok scanned
              16/09/2008 18:49:34 Running module: services.exe\msvcrt.dll ok scanned
              16/09/2008 18:49:34 Running module: services.exe\NCObjAPI.DLL ok scanned
              16/09/2008 18:49:34 File: C:\WINDOWS\system32\NCObjAPI.DLL ok scanned
              16/09/2008 18:49:34 Running module: services.exe\MSVCP60.dll ok scanned
              16/09/2008 18:49:35 File: C:\WINDOWS\system32\MSVCP60.dll ok scanned
              16/09/2008 18:49:35 Running module: services.exe\SCESRV.dll ok scanned
              16/09/2008 18:49:35 File: C:\WINDOWS\system32\SCESRV.dll ok scanned
              16/09/2008 18:49:35 Running module: services.exe\AUTHZ.dll ok scanned
              16/09/2008 18:49:35 Running module: services.exe\USER32.dll ok scanned
              16/09/2008 18:49:35 Running module: services.exe\GDI32.dll ok scanned
              16/09/2008 18:49:35 Running module: services.exe\USERENV.dll ok scanned
              16/09/2008 18:49:35 Running module: services.exe\umpnpmgr.dll ok scanned
              16/09/2008 18:49:35 File: C:\WINDOWS\system32\umpnpmgr.dll ok scanned
              16/09/2008 18:49:35 Running module: services.exe\WINSTA.dll ok scanned
              16/09/2008 18:49:35 Running module: services.exe\NETAPI32.dll ok scanned
              16/09/2008 18:49:36 Running module: services.exe\ShimEng.dll ok scanned
              16/09/2008 18:49:36 File: C:\WINDOWS\system32\ShimEng.dll ok scanned
              16/09/2008 18:49:36 Running module: services.exe\AcAdProc.dll ok scanned
              16/09/2008 18:49:36 File: C:\WINDOWS\AppPatch\AcAdProc.dll ok scanned
              16/09/2008 18:49:36 Running module: services.exe\IMM32.DLL ok scanned
              16/09/2008 18:49:36 Running module: services.exe\Apphelp.dll ok scanned
              16/09/2008 18:49:36 Running module: services.exe\VERSION.dll ok scanned
              16/09/2008 18:49:36 Running module: services.exe\eventlog.dll ok scanned
              16/09/2008 18:49:36 File: C:\WINDOWS\system32\eventlog.dll ok scanned
              16/09/2008 18:49:36 Running module: services.exe\PSAPI.DLL ok scanned
              16/09/2008 18:49:36 Running module: services.exe\WS2_32.dll ok scanned
              16/09/2008 18:49:36 Running module: services.exe\WS2HELP.dll ok scanned
              16/09/2008 18:49:36 Running module: services.exe\wtsapi32.dll ok scanned
              16/09/2008 18:49:36 File: C:\WINDOWS\system32\wtsapi32.dll ok iChecker
              16/09/2008 18:49:36 Running module: lsass.exe\lsass.exe ok scanned
              16/09/2008 18:49:36 File: C:\WINDOWS\system32\lsass.exe ok scanned
              16/09/2008 18:49:36 Running module: lsass.exe\ntdll.dll ok scanned
              16/09/2008 18:49:37 Running module: lsass.exe\kernel32.dll ok scanned
              16/09/2008 18:49:37 Running module: lsass.exe\ADVAPI32.dll ok scanned
              16/09/2008 18:49:37 Running module: lsass.exe\RPCRT4.dll ok scanned
              16/09/2008 18:49:37 Running module: lsass.exe\Secur32.dll ok scanned
              16/09/2008 18:49:37 Running module: lsass.exe\LSASRV.dll ok scanned
              16/09/2008 18:49:37 File: C:\WINDOWS\system32\LSASRV.dll ok scanned
              16/09/2008 18:49:37 Running module: lsass.exe\MPR.dll ok scanned
              16/09/2008 18:49:37 Running module: lsass.exe\USER32.dll ok scanned
              16/09/2008 18:49:37 Running module: lsass.exe\GDI32.dll ok scanned
              16/09/2008 18:49:37 Running module: lsass.exe\MSASN1.dll ok scanned
              16/09/2008 18:49:37 Running module: lsass.exe\msvcrt.dll ok scanned
              16/09/2008 18:49:37 Running module: lsass.exe\NETAPI32.dll ok scanned
              16/09/2008 18:49:37 Running module: lsass.exe\NTDSAPI.dll ok scanned
              16/09/2008 18:49:37 File: C:\WINDOWS\system32\NTDSAPI.dll ok scanned
              16/09/2008 18:49:37 Running module: lsass.exe\DNSAPI.dll ok scanned
              16/09/2008 18:49:37 File: C:\WINDOWS\system32\DNSAPI.dll ok scanned
              16/09/2008 18:49:37 Running module: lsass.exe\WS2_32.dll ok scanned
              16/09/2008 18:49:37 Running module: lsass.exe\WS2HELP.dll ok scanned
              16/09/2008 18:49:37 Running module: lsass.exe\WLDAP32.dll ok scanned
              16/09/2008 18:49:38 Running module: lsass.exe\SAMLIB.dll ok scanned
              16/09/2008 18:49:38 Running module: lsass.exe\SAMSRV.dll ok scanned
              16/09/2008 18:49:38 File: C:\WINDOWS\system32\SAMSRV.dll ok scanned
              16/09/2008 18:49:38 Running module: lsass.exe\cryptdll.dll ok scanned
              16/09/2008 18:49:38 File: C:\WINDOWS\system32\cryptdll.dll ok scanned
              16/09/2008 18:49:38 Running module: lsass.exe\ShimEng.dll ok scanned
              16/09/2008 18:49:38 Running module: lsass.exe\AcGenral.DLL ok scanned
              16/09/2008 18:49:39 File: C:\WINDOWS\AppPatch\AcGenral.DLL ok scanned
              16/09/2008 18:49:39 Running module: lsass.exe\WINMM.dll ok scanned
              16/09/2008 18:49:39 Running module: lsass.exe\ole32.dll ok scanned
              16/09/2008 18:49:39 Running module: lsass.exe\OLEAUT32.dll ok scanned
              16/09/2008 18:49:39 Running module: lsass.exe\MSACM32.dll ok scanned
              16/09/2008 18:49:39 File: C:\WINDOWS\system32\MSACM32.dll ok scanned
              16/09/2008 18:49:39 Running module: lsass.exe\VERSION.dll ok scanned
              16/09/2008 18:49:39 Running module: lsass.exe\SHELL32.dll ok scanned
              16/09/2008 18:49:39 Running module: lsass.exe\SHLWAPI.dll ok scanned
              16/09/2008 18:49:39 Running module: lsass.exe\USERENV.dll ok scanned
              16/09/2008 18:49:39 Running module: lsass.exe\UxTheme.dll ok scanned
              16/09/2008 18:49:39 Running module: lsass.exe\IMM32.DLL ok scanned
              16/09/2008 18:49:39 Running module: lsass.exe\comctl32.dll ok scanned
              16/09/2008 18:49:39 Running module: lsass.exe\comctl32.dll ok scanned
              16/09/2008 18:49:39 File: C:\WINDOWS\system32\comctl32.dll ok iChecker
              16/09/2008 18:49:39 Running module: lsass.exe\msprivs.dll ok scanned
              16/09/2008 18:49:39 File: C:\WINDOWS\system32\msprivs.dll ok scanned
              16/09/2008 18:49:39 Running module: lsass.exe\kerberos.dll ok scanned
              16/09/2008 18:49:39 File: C:\WINDOWS\system32\kerberos.dll ok scanned
              16/09/2008 18:49:39 Running module: lsass.exe\msv1_0.dll ok scanned
              16/09/2008 18:49:40 File: C:\WINDOWS\system32\msv1_0.dll ok scanned
              16/09/2008 18:49:40 Running module: lsass.exe\iphlpapi.dll ok scanned
              16/09/2008 18:49:40 File: C:\WINDOWS\system32\iphlpapi.dll ok scanned
              16/09/2008 18:49:40 Running module: lsass.exe\netlogon.dll ok scanned
              16/09/2008 18:49:40 File: C:\WINDOWS\system32\netlogon.dll ok scanned
              16/09/2008 18:49:40 Running module: lsass.exe\w32time.dll ok scanned
              16/09/2008 18:49:40 File: C:\WINDOWS\system32\w32time.dll ok scanned
              16/09/2008 18:49:40 Running module: lsass.exe\MSVCP60.dll ok scanned
              16/09/2008 18:49:40 Running module: lsass.exe\schannel.dll ok scanned
              16/09/2008 18:49:40 File: C:\WINDOWS\system32\schannel.dll ok scanned
              16/09/2008 18:49:40 Running module: lsass.exe\CRYPT32.dll ok scanned
              16/09/2008 18:49:40 Running module: lsass.exe\wdigest.dll ok scanned
              16/09/2008 18:49:41 File: C:\WINDOWS\system32\wdigest.dll ok scanned
              16/09/2008 18:49:41 Running module: lsass.exe\rsaenh.dll ok scanned
              16/09/2008 18:49:41 Running module: lsass.exe\setupapi.dll ok scanned
              16/09/2008 18:49:41 File: C:\WINDOWS\system32\setupapi.dll ok iChecker
              16/09/2008 18:49:41 Running module: lsass.exe\scecli.dll ok scanned
              16/09/2008 18:49:41 File: C:\WINDOWS\system32\scecli.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\svchost.exe ok scanned
              16/09/2008 18:49:41 File: C:\WINDOWS\system32\svchost.exe ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\ntdll.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\kernel32.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\ADVAPI32.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\RPCRT4.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\Secur32.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\ShimEng.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\AcGenral.DLL ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\USER32.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\GDI32.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\WINMM.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\ole32.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\msvcrt.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\OLEAUT32.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\MSACM32.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\VERSION.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\SHELL32.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\SHLWAPI.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\USERENV.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\UxTheme.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\IMM32.DLL ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\comctl32.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\comctl32.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\NTMARTA.DLL ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\SAMLIB.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\WLDAP32.dll ok scanned
              16/09/2008 18:49:41 Running module: svchost.exe\rpcss.dll ok scanned
              0
              1. ixilium Auteur
                16/09/2008 18:49:42 File: c:\windows\system32\rpcss.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\WS2_32.dll ok scanned
                16/09/2008 18:49:42 File: c:\windows\system32\WS2_32.dll ok iChecker
                16/09/2008 18:49:42 Running module: svchost.exe\WS2HELP.dll ok scanned
                16/09/2008 18:49:42 File: c:\windows\system32\WS2HELP.dll ok iChecker
                16/09/2008 18:49:42 Running module: svchost.exe\xpsp2res.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\CLBCATQ.DLL ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\COMRes.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\svchost.exe ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\ntdll.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\kernel32.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\ADVAPI32.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\RPCRT4.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\Secur32.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\ShimEng.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\AcGenral.DLL ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\USER32.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\GDI32.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\WINMM.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\ole32.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\msvcrt.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\OLEAUT32.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\MSACM32.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\VERSION.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\SHELL32.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\SHLWAPI.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\USERENV.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\UxTheme.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\IMM32.DLL ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\comctl32.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\comctl32.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\rpcss.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\WS2_32.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\WS2HELP.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\xpsp2res.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\rsaenh.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\mswsock.dll ok scanned
                16/09/2008 18:49:42 File: C:\WINDOWS\system32\mswsock.dll ok scanned
                16/09/2008 18:49:42 Running module: svchost.exe\hnetcfg.dll ok scanned
                16/09/2008 18:49:43 File: C:\WINDOWS\system32\hnetcfg.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\wshtcpip.dll ok scanned
                16/09/2008 18:49:43 File: C:\WINDOWS\System32\wshtcpip.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\DNSAPI.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\iphlpapi.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\winrnr.dll ok scanned
                16/09/2008 18:49:43 File: C:\WINDOWS\System32\winrnr.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\WLDAP32.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\rasadhlp.dll ok scanned
                16/09/2008 18:49:43 File: C:\WINDOWS\system32\rasadhlp.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\CLBCATQ.DLL ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\COMRes.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\svchost.exe ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\ntdll.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\kernel32.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\ADVAPI32.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\RPCRT4.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\Secur32.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\ShimEng.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\AcGenral.DLL ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\USER32.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\GDI32.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\WINMM.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\ole32.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\msvcrt.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\OLEAUT32.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\MSACM32.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\VERSION.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\SHELL32.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\SHLWAPI.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\USERENV.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\UxTheme.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\IMM32.DLL ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\comctl32.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\comctl32.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\NTMARTA.DLL ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\SAMLIB.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\WLDAP32.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\xpsp2res.dll ok scanned
                16/09/2008 18:49:43 Running module: svchost.exe\cryptsvc.dll ok scanned
                16/09/2008 18:49:44 File: c:\windows\system32\cryptsvc.dll ok scanned
                16/09/2008 18:49:44 Running module: svchost.exe\certcli.dll ok scanned
                16/09/2008 18:49:44 File: c:\windows\system32\certcli.dll ok scanned
                16/09/2008 18:49:44 Running module: svchost.exe\ATL.DLL ok scanned
                16/09/2008 18:49:44 File: c:\windows\system32\ATL.DLL ok scanned
                16/09/2008 18:49:44 Running module: svchost.exe\CRYPT32.dll ok scanned
                16/09/2008 18:49:44 Running module: svchost.exe\MSASN1.dll ok scanned
                16/09/2008 18:49:44 Running module: svchost.exe\CRYPTUI.dll ok scanned
                16/09/2008 18:49:45 File: C:\WINDOWS\system32\CRYPTUI.dll ok scanned
                16/09/2008 18:49:45 Running module: svchost.exe\NETAPI32.dll ok scanned
                16/09/2008 18:49:45 Running module: svchost.exe\WININET.dll ok scanned
                16/09/2008 18:49:45 File: C:\WINDOWS\system32\WININET.dll packed file PE_Patch
                16/09/2008 18:49:46 File: C:\WINDOWS\system32\WININET.dll//PE_Patch ok scanned
                16/09/2008 18:49:46 File: C:\WINDOWS\system32\WININET.dll ok scanned
                16/09/2008 18:49:46 Running module: svchost.exe\Normaliz.dll ok scanned
                16/09/2008 18:49:47 File: C:\WINDOWS\system32\Normaliz.dll ok scanned
                16/09/2008 18:49:47 Running module: svchost.exe\iertutil.dll ok scanned
                16/09/2008 18:49:47 File: C:\WINDOWS\system32\iertutil.dll ok scanned
                16/09/2008 18:49:47 Running module: svchost.exe\WINTRUST.dll ok scanned
                16/09/2008 18:49:47 Running module: svchost.exe\IMAGEHLP.dll ok scanned
                16/09/2008 18:49:47 Running module: svchost.exe\ESENT.dll ok scanned
                16/09/2008 18:49:47 File: c:\windows\system32\ESENT.dll ok scanned
                16/09/2008 18:49:47 Running module: svchost.exe\wmisvc.dll ok scanned
                16/09/2008 18:49:47 File: c:\windows\system32\wbem\wmisvc.dll ok scanned
                16/09/2008 18:49:47 Running module: svchost.exe\VSSAPI.DLL ok scanned
                16/09/2008 18:49:48 File: C:\WINDOWS\system32\VSSAPI.DLL ok scanned
                16/09/2008 18:49:48 Running module: svchost.exe\srsvc.dll ok scanned
                16/09/2008 18:49:48 File: c:\windows\system32\srsvc.dll ok scanned
                16/09/2008 18:49:48 Running module: svchost.exe\POWRPROF.dll ok scanned
                16/09/2008 18:49:48 File: c:\windows\system32\POWRPROF.dll ok scanned
                16/09/2008 18:49:48 Running module: svchost.exe\CLBCATQ.DLL ok scanned
                16/09/2008 18:49:48 Running module: svchost.exe\COMRes.dll ok scanned
                16/09/2008 18:49:48 Running module: svchost.exe\pchsvc.dll ok scanned
                16/09/2008 18:49:48 File: c:\windows\pchealth\helpctr\binaries\pchsvc.dll ok scanned
                16/09/2008 18:49:48 Running module: svchost.exe\WINSTA.dll ok scanned
                16/09/2008 18:49:48 Running module: svchost.exe\dmserver.dll ok scanned
                16/09/2008 18:49:48 File: c:\windows\system32\dmserver.dll ok scanned
                16/09/2008 18:49:48 Running module: svchost.exe\SETUPAPI.dll ok scanned
                16/09/2008 18:49:48 File: c:\windows\system32\SETUPAPI.dll ok iChecker
                16/09/2008 18:49:48 Running module: svchost.exe\wbemcore.dll ok scanned
                16/09/2008 18:49:49 File: C:\WINDOWS\system32\wbem\wbemcore.dll ok scanned
                16/09/2008 18:49:49 Running module: svchost.exe\MSVCP60.dll ok scanned
                16/09/2008 18:49:49 Running module: svchost.exe\esscli.dll ok scanned
                16/09/2008 18:49:49 File: C:\WINDOWS\system32\wbem\esscli.dll ok scanned
                16/09/2008 18:49:49 Running module: svchost.exe\wbemcomn.dll ok scanned
                16/09/2008 18:49:49 File: C:\WINDOWS\system32\wbem\wbemcomn.dll ok scanned
                16/09/2008 18:49:49 Running module: svchost.exe\FastProx.dll ok scanned
                16/09/2008 18:49:49 File: C:\WINDOWS\system32\wbem\FastProx.dll ok scanned
                16/09/2008 18:49:49 Running module: svchost.exe\NTDSAPI.dll ok scanned
                16/09/2008 18:49:49 Running module: svchost.exe\DNSAPI.dll ok scanned
                16/09/2008 18:49:49 Running module: svchost.exe\WS2_32.dll ok scanned
                16/09/2008 18:49:49 Running module: svchost.exe\WS2HELP.dll ok scanned
                16/09/2008 18:49:49 Running module: svchost.exe\wmiutils.dll ok scanned
                16/09/2008 18:49:50 File: C:\WINDOWS\system32\wbem\wmiutils.dll ok scanned
                16/09/2008 18:49:50 Running module: svchost.exe\repdrvfs.dll ok scanned
                16/09/2008 18:49:50 File: C:\WINDOWS\system32\wbem\repdrvfs.dll ok scanned
                16/09/2008 18:49:50 Running module: svchost.exe\wmiprvsd.dll ok scanned
                16/09/2008 18:49:50 File: C:\WINDOWS\system32\wbem\wmiprvsd.dll ok scanned
                16/09/2008 18:49:50 Running module: svchost.exe\NCObjAPI.DLL ok scanned
                16/09/2008 18:49:50 Running module: svchost.exe\wbemess.dll ok scanned
                16/09/2008 18:49:50 File: C:\WINDOWS\system32\wbem\wbemess.dll ok scanned
                16/09/2008 18:49:50 Running module: svchost.exe\rsaenh.dll ok scanned
                16/09/2008 18:49:50 Running module: svchost.exe\ncprov.dll ok scanned
                16/09/2008 18:49:51 File: C:\WINDOWS\system32\wbem\ncprov.dll ok scanned
                16/09/2008 18:49:51 Running module: explorer.exe\Explorer.EXE ok scanned
                16/09/2008 18:49:53 File: C:\WINDOWS\Explorer.EXE ok scanned
                16/09/2008 18:49:53 Running module: explorer.exe\ntdll.dll ok scanned
                16/09/2008 18:49:53 Running module: explorer.exe\kernel32.dll ok scanned
                16/09/2008 18:49:53 Running module: explorer.exe\ADVAPI32.dll ok scanned
                16/09/2008 18:49:53 Running module: explorer.exe\RPCRT4.dll ok scanned
                16/09/2008 18:49:53 Running module: explorer.exe\Secur32.dll ok scanned
                16/09/2008 18:49:53 Running module: explorer.exe\BROWSEUI.dll ok scanned
                16/09/2008 18:49:53 File: C:\WINDOWS\system32\BROWSEUI.dll ok scanned
                16/09/2008 18:49:53 Running module: explorer.exe\GDI32.dll ok scanned
                16/09/2008 18:49:53 Running module: explorer.exe\USER32.dll ok scanned
                16/09/2008 18:49:53 Running module: explorer.exe\msvcrt.dll ok scanned
                16/09/2008 18:49:53 Running module: explorer.exe\ole32.dll ok scanned
                16/09/2008 18:49:53 Running module: explorer.exe\SHLWAPI.dll ok scanned
                16/09/2008 18:49:53 Running module: explorer.exe\OLEAUT32.dll ok scanned
                16/09/2008 18:49:53 Running module: explorer.exe\SHDOCVW.dll ok scanned
                16/09/2008 18:49:54 File: C:\WINDOWS\system32\SHDOCVW.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\CRYPT32.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\MSASN1.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\CRYPTUI.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\NETAPI32.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\VERSION.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\WININET.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\Normaliz.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\iertutil.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\WINTRUST.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\IMAGEHLP.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\WLDAP32.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\SHELL32.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\UxTheme.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\ShimEng.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\AcGenral.DLL ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\WINMM.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\MSACM32.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\USERENV.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\IMM32.DLL ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\comctl32.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\comctl32.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\msctfime.ime ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\appHelp.dll ok scanned
                16/09/2008 18:49:54 File: C:\WINDOWS\system32\appHelp.dll ok iChecker
                16/09/2008 18:49:54 Running module: explorer.exe\CLBCATQ.DLL ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\COMRes.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\cscui.dll ok scanned
                16/09/2008 18:49:54 File: C:\WINDOWS\System32\cscui.dll ok iChecker
                16/09/2008 18:49:54 Running module: explorer.exe\CSCDLL.dll ok scanned
                16/09/2008 18:49:54 File: C:\WINDOWS\System32\CSCDLL.dll ok iChecker
                16/09/2008 18:49:54 Running module: explorer.exe\themeui.dll ok scanned
                16/09/2008 18:49:54 File: C:\WINDOWS\system32\themeui.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\MSIMG32.dll ok scanned
                16/09/2008 18:49:54 File: C:\WINDOWS\system32\MSIMG32.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\xpsp2res.dll ok scanned
                16/09/2008 18:49:54 Running module: explorer.exe\msutb.dll ok scanned
                16/09/2008 18:49:55 File: C:\WINDOWS\system32\msutb.dll ok scanned
                16/09/2008 18:49:55 Running module: explorer.exe\MSCTF.dll ok scanned
                16/09/2008 18:49:55 File: C:\WINDOWS\system32\MSCTF.dll ok scanned
                16/09/2008 18:49:55 Running module: explorer.exe\LINKINFO.dll ok scanned
                16/09/2008 18:49:55 File: C:\WINDOWS\system32\LINKINFO.dll ok scanned
                16/09/2008 18:49:55 Running module: explorer.exe\ntshrui.dll ok scanned
                16/09/2008 18:49:55 File: C:\WINDOWS\system32\ntshrui.dll ok scanned
                16/09/2008 18:49:55 Running module: explorer.exe\ATL.DLL ok scanned
                16/09/2008 18:49:55 File: C:\WINDOWS\system32\ATL.DLL ok iChecker
                16/09/2008 18:49:55 Running module: explorer.exe\SAMLIB.dll ok scanned
                16/09/2008 18:49:55 Running module: explorer.exe\SETUPAPI.dll ok scanned
                16/09/2008 18:49:55 Running module: explorer.exe\ieframe.dll ok scanned
                16/09/2008 18:49:56 File: C:\WINDOWS\system32\ieframe.dll ok scanned
                16/09/2008 18:49:56 Running module: explorer.exe\PSAPI.DLL ok scanned
                16/09/2008 18:49:56 Running module: explorer.exe\WINSTA.dll ok scanned
                16/09/2008 18:49:56 Running module: explorer.exe\shmedia.dll ok scanned
                16/09/2008 18:49:56 File: C:\WINDOWS\system32\shmedia.dll ok scanned
                16/09/2008 18:49:56 Running module: explorer.exe\MSVFW32.dll ok scanned
                16/09/2008 18:49:56 File: C:\WINDOWS\system32\MSVFW32.dll ok scanned
                16/09/2008 18:49:56 Running module: explorer.exe\AVIFIL32.dll ok scanned
                16/09/2008 18:49:57 File: C:\WINDOWS\system32\AVIFIL32.dll ok scanned
                16/09/2008 18:49:57 Running module: explorer.exe\wmvcore.dll ok scanned
                16/09/2008 18:49:57 File: C:\WINDOWS\system32\wmvcore.dll ok scanned
                16/09/2008 18:49:57 Running module: explorer.exe\DRMClien.DLL ok scanned
                16/09/2008 18:49:57 File: C:\WINDOWS\system32\DRMClien.DLL ok scanned
                16/09/2008 18:49:57 Running module: explorer.exe\msdmo.dll ok scanned
                16/09/2008 18:49:57 File: C:\WINDOWS\system32\msdmo.dll ok scanned
                16/09/2008 18:49:57 Running module: explorer.exe\urlmon.dll ok scanned
                16/09/2008 18:49:57 File: C:\WINDOWS\system32\urlmon.dll ok scanned
                16/09/2008 18:49:57 Running module: explorer.exe\WMASF.DLL ok scanned
                16/09/2008 18:49:57 File: C:\WINDOWS\system32\WMASF.DLL ok scanned
                16/09/2008 18:49:57 Running module: explorer.exe\wmidx.dll ok scanned
                16/09/2008 18:49:58 File: C:\WINDOWS\system32\wmidx.dll ok scanned
                16/09/2008 18:49:58 Running module: explorer.exe\WSOCK32.dll ok scanned
                16/09/2008 18:49:58 File: C:\WINDOWS\system32\WSOCK32.dll ok scanned
                16/09/2008 18:49:58 Running module: explorer.exe\WS2_32.dll ok scanned
                16/09/2008 18:49:58 Running module: explorer.exe\WS2HELP.dll ok scanned
                16/09/2008 18:49:58 Running module: explorer.exe\mlang.dll ok scanned
                16/09/2008 18:49:58 File: C:\WINDOWS\system32\mlang.dll ok scanned
                16/09/2008 18:49:58 Running module: explorer.exe\PWRISOSH.DLL ok scanned
                16/09/2008 18:49:58 File: C:\Program Files\PowerISO\PWRISOSH.DLL ok scanned
                16/09/2008 18:49:58 Running module: explorer.exe\comdlg32.dll ok scanned
                16/09/2008 18:49:58 Running module: explorer.exe\WINSPOOL.DRV ok scanned
                16/09/2008 18:49:58 Running module: explorer.exe\7-zip.dll ok scanned
                16/09/2008 18:49:59 File: C:\Program Files\7-Zip\7-zip.dll ok scanned
                16/09/2008 18:49:59 Running module: explorer.exe\fzshellext.dll ok scanned
                16/09/2008 18:49:59 File: C:\Program Files\FileZilla FTP Client\fzshellext.dll ok scanned
                16/09/2008 18:49:59 Running module: explorer.exe\mydocs.dll ok scanned
                16/09/2008 18:49:59 File: C:\WINDOWS\system32\mydocs.dll ok scanned
                16/09/2008 18:49:59 Running module: explorer.exe\browselc.dll ok scanned
                16/09/2008 18:49:59 File: C:\WINDOWS\system32\browselc.dll archive EmbeddedHTML
                16/09/2008 18:49:59 File: C:\WINDOWS\system32\browselc.dll//data0001.html ok scanned
                16/09/2008 18:49:59 File: C:\WINDOWS\system32\browselc.dll//data0002.html ok scanned
                16/09/2008 18:49:59 File: C:\WINDOWS\system32\browselc.dll//data0003.html ok scanned
                16/09/2008 18:49:59 File: C:\WINDOWS\system32\browselc.dll ok scanned
                16/09/2008 18:49:59 Running module: explorer.exe\MPR.dll ok scanned
                16/09/2008 18:49:59 Running module: explorer.exe\drprov.dll ok scanned
                16/09/2008 18:49:59 File: C:\WINDOWS\System32\drprov.dll ok scanned
                16/09/2008 18:49:59 Running module: explorer.exe\ntlanman.dll ok scanned
                16/09/2008 18:50:00 File: C:\WINDOWS\System32\ntlanman.dll ok scanned
                16/09/2008 18:50:00 Running module: explorer.exe\NETUI0.dll ok scanned
                16/09/2008 18:50:00 File: C:\WINDOWS\System32\NETUI0.dll ok scanned
                16/09/2008 18:50:00 Running module: explorer.exe\NETUI1.dll ok scanned
                16/09/2008 18:50:00 File: C:\WINDOWS\System32\NETUI1.dll ok scanned
                16/09/2008 18:50:00 Running module: explorer.exe\NETRAP.dll ok scanned
                16/09/2008 18:50:00 File: C:\WINDOWS\System32\NETRAP.dll ok scanned
                16/09/2008 18:50:00 Running module: explorer.exe\davclnt.dll ok scanned
                16/09/2008 18:50:00 File: C:\WINDOWS\System32\davclnt.dll ok scanned
                16/09/2008 18:50:00 Running module: explorer.exe\MSGINA.dll ok scanned
                16/09/2008 18:50:00 Running module: explorer.exe\ODBC32.dll ok scanned
                16/09/2008 18:50:00 Running module: explorer.exe\odbcint.dll ok scanned
                16/09/2008 18:50:00 Running module: explorer.exe\shdoclc.dll ok scanned
                16/09/2008 18:50:01 File: C:\WINDOWS\system32\shdoclc.dll ok scanned
                16/09/2008 18:50:01 File: c:\windows\system32\mmdrv.dll ok scanned
                16/09/2008 18:50:01 File: c:\windows\system\timer.drv ok scanned
                16/09/2008 18:50:01 File: c:\windows\system32\mshta.exe ok scanned
                16/09/2008 18:50:02 File: c:\windows\system32\notepad.exe ok scanned
                16/09/2008 18:50:03 File: c:\windows\regedit.exe ok scanned
                16/09/2008 18:50:03 File: c:\windows\system32\accwiz.exe ok scanned
                16/09/2008 18:50:03 File: c:\program files\windows media player\wmplayer.exe ok scanned
                16/09/2008 18:50:04 File: c:\windows\system32\rundll32.exe ok scanned
                16/09/2008 18:50:04 File: c:\windows\system32\cryptext.dll ok scanned
                16/09/2008 18:50:04 File: C:\WINDOWS\system32\rundll32.exe ok iChecker
                16/09/2008 18:50:04 File: C:\WINDOWS\system32\cryptext.dll ok iChecker
                16/09/2008 18:50:04 File: c:\program files\outlook express\wab.exe ok scanned
                16/09/2008 18:50:05 File: c:\windows\system32\clipbrd.exe ok scanned
                16/09/2008 18:50:06 File: c:\windows\system32\netshell.dll ok scanned
                16/09/2008 18:50:06 File: c:\windows\system32\shimgvw.dll ok scanned
                16/09/2008 18:50:06 File: c:\windows\explorer.exe ok iChecker
                16/09/2008 18:50:06 File: c:\windows\system32\fontview.exe ok scanned
                16/09/2008 18:50:07 File: c:\program files\internet explorer\iexplore.exe ok scanned
                16/09/2008 18:50:07 File: c:\windows\system32\msconf.dll ok scanned
                16/09/2008 18:50:08 File: c:\windows\winhlp32.exe ok scanned
                16/09/2008 18:50:08 File: c:\windows\system32\winhlp32.exe ok scanned
                16/09/2008 18:50:09 File: c:\program files\windows nt\hypertrm.exe ok scanned
                16/09/2008 18:50:09 File: C:\WINDOWS\system32\msconf.dll ok iChecker
                16/09/2008 18:50:09 File: c:\windows\system32\wscript.exe ok scanned
                16/09/2008 18:50:10 File: c:\windows\system32\ntbackup.exe ok scanned
                16/09/2008 18:50:12 File: c:\windows\system32\mmc.exe ok scanned
                16/09/2008 18:50:12 File: c:\windows\system32\shell32.dll ok iChecker
                16/09/2008 18:50:12 File: c:\windows\system32\desk.cpl ok scanned
                16/09/2008 18:50:13 File: c:\windows\system32\nview.dll ok scanned
                16/09/2008 18:50:13 File: c:\windows\system\shell.dll ok scanned
                16/09/2008 18:50:14 File: c:\windows\system32\rasphone.exe ok scanned
                16/09/2008 18:50:14 File: c:\program files\sumatrapdf\sumatrapdf.exe packed file UPX
                16/09/2008 18:50:15 File: c:\program files\sumatrapdf\sumatrapdf.exe//UPX ok scanned
                16/09/2008 18:50:26 File: c:\program files\sumatrapdf\sumatrapdf.exe ok scanned
                16/09/2008 18:50:26 File: c:\windows\system32\perfmon.exe ok scanned
                16/09/2008 18:50:26 File: c:\windows\system32\msrating.dll ok scanned
                16/09/2008 18:50:26 File: C:\WINDOWS\system32\msrating.dll ok iChecker
                16/09/2008 18:50:26 File: C:\WINDOWS\regedit.exe ok iChecker
                16/09/2008 18:50:26 File: c:\program files\windows nt\accessoires\wordpad.exe ok scanned
                16/09/2008 18:50:27 File: c:\windows\notepad.exe ok iChecker
                16/09/2008 18:50:27 File: c:\windows\system32\wpnpinst.exe ok scanned
                16/09/2008 18:50:28 File: c:\windows\system32\drwtsn32.exe ok scanned
                16/09/2008 18:50:28 File: C:\WINDOWS\explorer.exe ok iChecker
                16/09/2008 18:50:28 File: c:\windows\system32\userinit.exe ok scanned
                16/09/2008 18:50:28 File: c:\windows\system32\crypt32.dll ok iChecker
                16/09/2008 18:50:28 File: c:\windows\system32\cryptnet.dll ok scanned
                16/09/2008 18:50:28 File: c:\windows\system32\cscdll.dll ok iChecker
                16/09/2008 18:50:28 File: c:\windows\system32\dimsntfy.dll ok iChecker
                16/09/2008 18:50:28 File: c:\windows\system32\wlnotify.dll ok iChecker
                16/09/2008 18:50:28 File: C:\WINDOWS\system32\wlnotify.dll ok iChecker
                16/09/2008 18:50:28 File: c:\windows\system32\sclgntfy.dll ok scanned
                16/09/2008 18:50:29 File: c:\windows\system32\nvcpl.dll ok scanned
                16/09/2008 18:50:31 File: c:\windows\system32\nwiz.exe ok scanned
                16/09/2008 18:50:31 File: c:\windows\system32\nvmctray.dll ok scanned
                16/09/2008 18:50:31 File: c:\windows\vm_sti.exe ok scanned
                16/09/2008 18:50:32 File: c:\program files\techcity solutions\alicesav\aliceagent.exe packed file UPX
                16/09/2008 18:50:32 File: c:\program files\techcity solutions\alicesav\aliceagent.exe//UPX ok scanned
                16/09/2008 18:50:33 File: c:\program files\techcity solutions\alicesav\aliceagent.exe ok
                0
                1. ixilium Auteur
                  16/09/2008 18:50:34 File: c:\windows\system32\tbctray.exe ok scanned
                  16/09/2008 18:50:34 File: c:\windows\system32\ctfmon.exe ok scanned
                  16/09/2008 18:50:34 File: c:\windows\system32\alrsvc.dll ok scanned
                  16/09/2008 18:50:35 File: c:\windows\system32\appmgmts.dll ok scanned
                  16/09/2008 18:50:35 File: c:\windows\system32\audiosrv.dll ok scanned
                  16/09/2008 18:50:35 File: c:\windows\system32\qmgr.dll ok scanned
                  16/09/2008 18:50:35 File: c:\windows\system32\browser.dll ok scanned
                  16/09/2008 18:50:35 File: c:\windows\system32\dhcpcsvc.dll ok scanned
                  16/09/2008 18:50:35 File: c:\windows\system32\dnsrslvr.dll ok scanned
                  16/09/2008 18:50:35 File: c:\windows\system32\dot3svc.dll ok scanned
                  16/09/2008 18:50:35 File: c:\windows\system32\eapsvc.dll ok scanned
                  16/09/2008 18:50:36 File: c:\windows\system32\ersvc.dll ok scanned
                  16/09/2008 18:50:36 File: c:\windows\system32\es.dll ok scanned
                  16/09/2008 18:50:36 File: c:\windows\system32\shsvcs.dll ok iChecker
                  16/09/2008 18:50:36 File: c:\windows\system32\kmsvc.dll ok scanned
                  16/09/2008 18:50:36 File: c:\windows\system32\w3ssl.dll ok scanned
                  16/09/2008 18:50:36 File: c:\windows\system32\srvsvc.dll ok scanned
                  16/09/2008 18:50:36 File: c:\windows\system32\wkssvc.dll ok scanned
                  16/09/2008 18:50:36 File: c:\windows\system32\lmhsvc.dll ok scanned
                  16/09/2008 18:50:36 File: c:\windows\system32\msgsvc.dll ok scanned
                  16/09/2008 18:50:37 File: c:\windows\system32\qagentrt.dll ok scanned
                  16/09/2008 18:50:37 File: c:\windows\system32\netman.dll ok scanned
                  16/09/2008 18:50:37 File: c:\windows\system32\mswsock.dll ok iChecker
                  16/09/2008 18:50:37 File: c:\windows\system32\ntmssvc.dll ok scanned
                  16/09/2008 18:50:37 File: c:\windows\system32\rasauto.dll ok scanned
                  16/09/2008 18:50:37 File: c:\windows\system32\rasmans.dll ok scanned
                  16/09/2008 18:50:37 File: c:\windows\system32\mprdim.dll ok scanned
                  16/09/2008 18:50:37 File: c:\windows\system32\regsvc.dll ok scanned
                  16/09/2008 18:50:37 File: c:\windows\system32\schedsvc.dll ok scanned
                  16/09/2008 18:50:38 File: c:\windows\system32\seclogon.dll ok scanned
                  16/09/2008 18:50:38 File: c:\windows\system32\sens.dll ok scanned
                  16/09/2008 18:50:38 File: c:\windows\system32\ipnathlp.dll ok scanned
                  16/09/2008 18:50:38 File: c:\windows\system32\ssdpsrv.dll ok scanned
                  16/09/2008 18:50:38 File: c:\windows\system32\wiaservc.dll ok scanned
                  16/09/2008 18:50:38 File: c:\windows\system32\tapisrv.dll ok scanned
                  16/09/2008 18:50:38 File: c:\windows\system32\termsrv.dll ok scanned
                  16/09/2008 18:50:38 File: c:\windows\system32\trkwks.dll ok scanned
                  16/09/2008 18:50:39 File: c:\windows\system32\upnphost.dll ok scanned
                  16/09/2008 18:50:39 File: c:\windows\system32\w32time.dll ok iChecker
                  16/09/2008 18:50:39 File: c:\windows\system32\webclnt.dll ok scanned
                  16/09/2008 18:50:39 File: c:\windows\system32\mspmsnsv.dll ok scanned
                  16/09/2008 18:50:39 File: c:\windows\system32\advapi32.dll ok iChecker
                  16/09/2008 18:50:39 File: c:\windows\system32\wscsvc.dll ok scanned
                  16/09/2008 18:50:39 File: c:\windows\system32\wuauserv.dll ok scanned
                  16/09/2008 18:50:39 File: c:\windows\system32\wzcsvc.dll ok scanned
                  16/09/2008 18:50:39 File: c:\windows\system32\xmlprov.dll ok scanned
                  16/09/2008 18:50:40 File: c:\windows\system32\drivers\acpi.sys ok scanned
                  16/09/2008 18:50:40 File: c:\windows\system32\drivers\aec.sys ok scanned
                  16/09/2008 18:50:40 File: c:\windows\system32\drivers\afd.sys ok scanned
                  16/09/2008 18:50:40 File: c:\windows\system32\svchost.exe ok iChecker
                  16/09/2008 18:50:40 File: c:\windows\system32\alg.exe ok scanned
                  16/09/2008 18:50:41 File: c:\windows\system32\drivers\asyncmac.sys ok scanned
                  16/09/2008 18:50:41 File: c:\windows\system32\drivers\atapi.sys ok scanned
                  16/09/2008 18:50:41 File: c:\windows\system32\drivers\atmarpc.sys ok scanned
                  16/09/2008 18:50:41 File: c:\windows\system32\drivers\audstub.sys ok scanned
                  16/09/2008 18:50:41 File: c:\windows\system32\drivers\ccdecode.sys ok scanned
                  16/09/2008 18:50:41 File: c:\windows\system32\drivers\cdrom.sys ok scanned
                  16/09/2008 18:50:41 File: c:\windows\system32\cisvc.exe ok scanned
                  16/09/2008 18:50:42 File: c:\windows\system32\clipsrv.exe ok scanned
                  16/09/2008 18:50:42 File: c:\windows\system32\dllhost.exe ok scanned
                  16/09/2008 18:50:42 File: c:\windows\system32\drivers\disk.sys ok scanned
                  16/09/2008 18:50:43 File: c:\windows\system32\dmadmin.exe ok scanned
                  16/09/2008 18:50:43 File: c:\windows\system32\drivers\dmboot.sys packed file PE_Patch
                  16/09/2008 18:50:43 File: c:\windows\system32\drivers\dmboot.sys//PE_Patch ok scanned
                  16/09/2008 18:50:43 File: c:\windows\system32\drivers\dmboot.sys ok scanned
                  16/09/2008 18:50:43 File: c:\windows\system32\drivers\dmio.sys ok scanned
                  16/09/2008 18:50:44 File: c:\windows\system32\drivers\dmload.sys ok scanned
                  16/09/2008 18:50:44 File: c:\windows\system32\drivers\dmusic.sys ok scanned
                  16/09/2008 18:50:44 File: c:\windows\system32\drivers\drmkaud.sys ok scanned
                  16/09/2008 18:50:44 File: c:\windows\system32\services.exe ok iChecker
                  16/09/2008 18:50:44 File: c:\windows\system32\drivers\fdc.sys ok scanned
                  16/09/2008 18:50:44 File: c:\windows\system32\drivers\flpydisk.sys ok scanned
                  16/09/2008 18:50:44 File: c:\windows\system32\drivers\fltmgr.sys packed file PE_Patch
                  16/09/2008 18:50:44 File: c:\windows\system32\drivers\fltmgr.sys//PE_Patch ok scanned
                  16/09/2008 18:50:44 File: c:\windows\system32\drivers\fltmgr.sys ok scanned
                  16/09/2008 18:50:44 File: c:\windows\system32\drivers\ftdisk.sys ok scanned
                  16/09/2008 18:50:44 File: c:\windows\system32\drivers\gameenum.sys ok scanned
                  16/09/2008 18:50:45 File: c:\windows\system32\drivers\msgpc.sys ok scanned
                  16/09/2008 18:50:45 File: c:\windows\system32\drivers\http.sys ok scanned
                  16/09/2008 18:50:45 File: c:\windows\system32\drivers\i8042prt.sys ok scanned
                  16/09/2008 18:50:45 File: c:\windows\system32\drivers\imapi.sys ok scanned
                  16/09/2008 18:50:46 File: c:\windows\system32\imapi.exe ok scanned
                  16/09/2008 18:50:46 File: c:\windows\system32\drivers\ip6fw.sys ok scanned
                  16/09/2008 18:50:46 File: c:\windows\system32\drivers\ipfltdrv.sys ok scanned
                  16/09/2008 18:50:46 File: c:\windows\system32\drivers\ipinip.sys ok scanned
                  16/09/2008 18:50:46 File: c:\windows\system32\drivers\ipnat.sys ok scanned
                  16/09/2008 18:50:46 File: c:\windows\system32\drivers\ipsec.sys ok scanned
                  16/09/2008 18:50:46 File: c:\windows\system32\drivers\irenum.sys ok scanned
                  16/09/2008 18:50:46 File: c:\windows\system32\drivers\35608005.sys ok scanned
                  16/09/2008 18:50:47 File: c:\program files\isafer\isafersvr.exe ok scanned
                  16/09/2008 18:50:47 File: c:\windows\system32\drivers\isapnp.sys ok scanned
                  16/09/2008 18:50:47 File: c:\windows\system32\drivers\kbdclass.sys ok scanned
                  16/09/2008 18:50:48 File: c:\windows\system32\drivers\kmixer.sys ok scanned
                  16/09/2008 18:50:48 File: c:\windows\system32\mnmsrvc.exe ok scanned
                  16/09/2008 18:50:48 File: c:\windows\system32\drivers\mouclass.sys ok scanned
                  16/09/2008 18:50:48 File: c:\windows\system32\drivers\mrxdav.sys packed file PE_Patch
                  16/09/2008 18:50:48 File: c:\windows\system32\drivers\mrxdav.sys//PE_Patch ok scanned
                  16/09/2008 18:50:48 File: c:\windows\system32\drivers\mrxdav.sys ok scanned
                  16/09/2008 18:50:49 File: c:\windows\system32\drivers\mrxsmb.sys packed file PE_Patch
                  16/09/2008 18:50:49 File: c:\windows\system32\drivers\mrxsmb.sys//PE_Patch ok scanned
                  16/09/2008 18:50:49 File: c:\windows\system32\drivers\mrxsmb.sys ok scanned
                  16/09/2008 18:50:49 File: c:\windows\system32\msdtc.exe ok scanned
                  16/09/2008 18:50:49 File: c:\windows\system32\msiexec.exe ok scanned
                  16/09/2008 18:50:49 File: c:\windows\system32\drivers\mskssrv.sys ok scanned
                  16/09/2008 18:50:50 File: c:\windows\system32\drivers\mspclock.sys ok scanned
                  16/09/2008 18:50:50 File: c:\windows\system32\drivers\mspqm.sys ok scanned
                  16/09/2008 18:50:50 File: c:\windows\system32\drivers\mssmbios.sys ok scanned
                  16/09/2008 18:50:50 File: c:\windows\system32\drivers\mstee.sys ok scanned
                  16/09/2008 18:50:50 File: c:\windows\system32\drivers\nabtsfec.sys ok scanned
                  16/09/2008 18:50:50 File: c:\windows\system32\drivers\ndisip.sys ok scanned
                  16/09/2008 18:50:50 File: c:\windows\system32\drivers\ndistapi.sys ok scanned
                  16/09/2008 18:50:50 File: c:\windows\system32\drivers\ndisuio.sys ok scanned
                  16/09/2008 18:50:50 File: c:\windows\system32\drivers\ndiswan.sys ok scanned
                  16/09/2008 18:50:51 File: c:\windows\system32\drivers\netbios.sys ok scanned
                  16/09/2008 18:50:51 File: c:\windows\system32\drivers\netbt.sys ok scanned
                  16/09/2008 18:50:51 File: c:\windows\system32\netdde.exe ok scanned
                  16/09/2008 18:50:51 File: c:\windows\system32\lsass.exe ok iChecker
                  16/09/2008 18:50:51 File: c:\windows\system32\drivers\nv4_mini.sys ok scanned
                  16/09/2008 18:50:52 File: c:\windows\system32\nvsvc32.exe ok scanned
                  16/09/2008 18:50:52 File: c:\windows\system32\drivers\nwlnkflt.sys ok scanned
                  16/09/2008 18:50:52 File: c:\windows\system32\drivers\nwlnkfwd.sys ok scanned
                  16/09/2008 18:50:52 File: c:\windows\system32\drivers\parport.sys ok scanned
                  16/09/2008 18:50:52 File: c:\windows\system32\drivers\pci.sys ok scanned
                  16/09/2008 18:50:52 File: c:\windows\system32\drivers\pctvvbi.sys ok scanned
                  16/09/2008 18:50:52 File: c:\windows\system32\drivers\pfc.sys ok scanned
                  16/09/2008 18:50:53 File: c:\windows\system32\pnkbstra.exe ok scanned
                  16/09/2008 18:50:53 File: c:\windows\system32\pnkbstrb.exe ok scanned
                  16/09/2008 18:50:53 File: c:\windows\system32\drivers\raspptp.sys ok scanned
                  16/09/2008 18:50:54 File: c:\windows\system32\drivers\processr.sys ok scanned
                  16/09/2008 18:50:54 File: c:\windows\system32\drivers\psched.sys ok scanned
                  16/09/2008 18:50:54 File: c:\windows\system32\drivers\ptilink.sys ok scanned
                  16/09/2008 18:50:54 File: c:\windows\system32\drivers\rasacd.sys ok scanned
                  16/09/2008 18:50:54 File: c:\windows\system32\drivers\rasl2tp.sys ok scanned
                  16/09/2008 18:50:54 File: c:\windows\system32\drivers\raspppoe.sys ok scanned
                  16/09/2008 18:50:54 File: c:\windows\system32\drivers\raspti.sys ok scanned
                  16/09/2008 18:50:54 File: c:\windows\system32\drivers\rdbss.sys ok scanned
                  16/09/2008 18:50:54 File: c:\windows\system32\drivers\rdpcdd.sys ok scanned
                  16/09/2008 18:50:55 File: c:\windows\system32\drivers\rdpdr.sys ok scanned
                  16/09/2008 18:50:55 File: c:\windows\system32\sessmgr.exe ok scanned
                  16/09/2008 18:50:55 File: c:\windows\system32\drivers\redbook.sys ok scanned
                  16/09/2008 18:50:55 File: c:\windows\system32\drivers\rob_a.sys ok scanned
                  16/09/2008 18:50:55 File: c:\windows\system32\drivers\rob_v.sys ok scanned
                  16/09/2008 18:50:56 File: c:\windows\system32\locator.exe ok scanned
                  16/09/2008 18:50:56 File: c:\windows\system32\rsvp.exe ok scanned
                  16/09/2008 18:50:56 File: c:\windows\system32\drivers\rtnicxp.sys ok scanned
                  16/09/2008 18:50:56 File: c:\windows\system32\drivers\rtl8139.sys ok scanned
                  16/09/2008 18:50:57 File: c:\windows\system32\scardsvr.exe ok scanned
                  16/09/2008 18:50:57 File: c:\windows\system32\drivers\scsiport.sys ok scanned
                  16/09/2008 18:50:57 File: c:\windows\system32\drivers\secdrv.sys ok scanned
                  16/09/2008 18:50:57 File: c:\windows\system32\drivers\serenum.sys ok scanned
                  16/09/2008 18:50:57 File: c:\windows\system32\drivers\serial.sys ok scanned
                  16/09/2008 18:50:57 File: c:\windows\system32\drivers\slip.sys ok scanned
                  16/09/2008 18:50:57 File: c:\windows\system32\drivers\splitter.sys ok scanned
                  16/09/2008 18:50:58 File: c:\windows\system32\spoolsv.exe ok scanned
                  16/09/2008 18:50:58 File: c:\windows\system32\drivers\sr.sys packed file PE_Patch
                  16/09/2008 18:50:58 File: c:\windows\system32\drivers\sr.sys//PE_Patch ok scanned
                  16/09/2008 18:50:58 File: c:\windows\system32\drivers\sr.sys ok scanned
                  16/09/2008 18:50:58 File: c:\windows\system32\drivers\srv.sys ok scanned
                  16/09/2008 18:50:58 File: c:\windows\system32\drivers\streamip.sys ok scanned
                  16/09/2008 18:50:58 File: c:\windows\system32\drivers\swenum.sys ok scanned
                  16/09/2008 18:50:59 File: c:\windows\system32\drivers\swmidi.sys ok scanned
                  16/09/2008 18:50:59 File: c:\windows\system32\drivers\sysaudio.sys ok scanned
                  16/09/2008 18:50:59 File: c:\windows\system32\smlogsvc.exe ok scanned
                  16/09/2008 18:50:59 File: c:\windows\system32\drivers\tbcspud.sys ok scanned
                  16/09/2008 18:51:00 File: c:\windows\system32\drivers\tbcwdm.sys ok scanned
                  16/09/2008 18:51:00 File: c:\windows\system32\drivers\tcpip.sys ok scanned
                  16/09/2008 18:51:00 File: c:\windows\system32\drivers\termdd.sys ok scanned
                  16/09/2008 18:51:00 File: c:\windows\system32\tlntsvr.exe ok scanned
                  16/09/2008 18:51:01 File: c:\windows\system32\drivers\update.sys ok scanned
                  16/09/2008 18:51:01 File: c:\windows\system32\ups.exe ok scanned
                  16/09/2008 18:51:01 File: c:\windows\system32\drivers\usbhub.sys ok scanned
                  16/09/2008 18:51:01 File: c:\windows\system32\drivers\usbstor.sys ok scanned
                  16/09/2008 18:51:01 File: c:\windows\system32\drivers\usbuhci.sys ok scanned
                  16/09/2008 18:51:02 File: c:\program files\windows live\messenger\usnsvc.exe ok scanned
                  16/09/2008 18:51:02 File: c:\windows\system32\drivers\vga.sys ok scanned
                  16/09/2008 18:51:02 File: c:\windows\system32\drivers\viaagp.sys ok scanned
                  16/09/2008 18:51:02 File: c:\windows\system32\drivers\viaide.sys ok scanned
                  16/09/2008 18:51:02 File: c:\windows\system32\vssvc.exe ok scanned
                  16/09/2008 18:51:02 File: c:\windows\system32\drivers\wanarp.sys ok scanned
                  16/09/2008 18:51:02 File: c:\windows\system32\drivers\wdmaud.sys ok scanned
                  16/09/2008 18:51:03 File: c:\program files\windows live\installer\wlsetupsvc.exe ok scanned
                  16/09/2008 18:51:04 File: c:\windows\system32\wbem\wmiapsrv.exe ok scanned
                  16/09/2008 18:51:04 File: c:\windows\system32\drivers\wstcodec.sys ok scanned
                  16/09/2008 18:51:04 File: c:\windows\system32\drivers\usbvm31b.sys ok scanned
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\acpi.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\aec.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\asyncmac.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\atapi.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\atmarpc.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\audstub.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ccdecode.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\cdrom.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\disk.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\dmboot.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\dmio.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\dmload.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\dmusic.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\dot3svc.dll ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\drmkaud.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\fdc.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\flpydisk.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\fltmgr.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ftdisk.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\gameenum.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\msgpc.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\http.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\i8042prt.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\imapi.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ip6fw.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ipfltdrv.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ipinip.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ipnat.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ipsec.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\irenum.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\isapnp.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\kbdclass.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\kmixer.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\mouclass.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\mrxdav.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\mrxsmb.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\mskssrv.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\mspclock.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\mspqm.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\mssmbios.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\mstee.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\nabtsfec.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ndisip.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ndistapi.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ndisuio.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ndiswan.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\netbios.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\netbt.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\nv4_mini.sys ok scanned
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\nwlnkflt.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\nwlnkfwd.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\parport.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\pci.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\pctvvbi.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\pfc.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\raspptp.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\processr.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\psched.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ptilink.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\rasacd.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\rasl2tp.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\raspppoe.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\raspti.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\rdbss.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\rdpcdd.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\rdpdr.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\redbook.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\rob_a.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\rob_v.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\rpcss.dll ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\rtnicxp.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\rtl8139.sys ok iChecker
                  16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\secdrv.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\serenum.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\serial.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\slip.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\splitter.sys ok iChecker
                  16/09/2008 18:51:05 File: c:\windows\system32\spupdsvc.exe ok scanned
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\sr.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\srv.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\streamip.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\swenum.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\swmidi.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\sysaudio.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\tbcspud.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\tbcwdm.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\tcpip.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\termdd.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\update.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\usbhub.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\usbstor.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\usbuhci.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\viaagp.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\viaide.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\wanarp.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\wdmaud.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\wstcodec.sys ok iChecker
                  16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\usbvm31b.sys ok iChecker
                  16/09/2008 18:51:05 File: c:\windows\system32\ieudinit.exe ok scanned
                  16/09/2008 18:51:06 File: c:\windows\inf\unregmp2.exe ok scanned
                  16/09/2008 18:51:06 File: c:\windows\system32\shmgrate.exe ok scanned
                  16/09/2008 18:51:06 File: c:\windows\system32\iedkcs32.dll ok scanned
                  16/09/2008 18:51:07 File: c:\windows\system32\regsvr32.exe ok scanned
                  16/09/2008 18:51:07 File: c:\windows\system32\themeui.dll ok iChecker
                  16/09/2008 18:51:07 File: c:\program files\outlook express\setup50.exe//# ok scanned
                  16/09/2008 18:51:07 File: c:\program files\outlook express\setup50.exe ok scanned
                  16/09/2008 18:51:07 File: c:\windows\system32\user.exe ok scanned
                  16/09/2008 18:51:08 File: c:\windows\system32\advpack.dll ok scanned
                  16/09/2008 18:51:08 File: c:\windows\inf\msnetmtg.inf ok scanned
                  16/09/2008 18:51:08 File: C:\WINDOWS\system32\advpack.dll ok iChecker
                  16/09/2008 18:51:08 File: c:\windows\inf\msmsgs.inf ok scanned
                  16/09/2008 18:51:08 File: c:\windows\inf\wmp.inf ok scanned
                  16/09/2008 18:51:08 File: C:\WINDOWS\system32\user.exe ok iChecker
                  16/09/2008 18:51:08 File: C:\WINDOWS\system32\shell32.dll ok iChecker
                  16/09/2008 18:51:08 File: c:\windows\system32\ie4uinit.exe ok scanned
                  16/09/2008 18:51:08 File: c:\windows\system32\comm.drv ok scanned
                  16/09/2008 18:51:08 File: c:\windows\system\vga.drv ok scanned
                  16/09/2008 18:51:09 File: c:\windows\system\mmsystem.dll ok scanned
                  16/09/2008 18:51:09 File: c:\windows\system\keyboard.drv ok scanned
                  16/09/2008 18:51:09 File: c:\windows\system\mouse.drv ok scanned
                  16/09/2008 18:51:09 File: c:\windows\system\wfwnet.drv ok scanned
                  16/09/2008 18:51:09 File: c:\windows\system32\progman.exe ok scanned
                  16/09/2008 18:51:09 File: c:\windows\system\sound.drv ok scanned
                  16/09/2008 18:51:09 File: c:\windows\system\system.drv ok scanned
                  16/09/2008 18:51:09 File: C:\WINDOWS\system32\timer.drv ok iChecker
                  16/09/2008 18:51:09 File: c:\windows\system32\midimap.dll ok scanned
                  16/09/2008 18:51:09 File: c:\windows\system32\imaadp32.acm ok scanned
                  16/09/2008 18:51:09 File: c:\windows\system32\msadp32.acm ok scanned
                  16/09/2008 18:51:10 File: c:\windows\system32\msg711.acm ok scanned
                  16/09/2008 18:51:10 File: c:\windows\system32\msgsm32.acm ok scanned
                  16/09/2008 18:51:10 File: c:\windows\system32\tssoft32.acm ok scanned
                  16/09/2008 18:51:10 File: c:\windows\system32\iccvid.dll ok scanned
                  16/09/2008 18:51:10 File: c:\windows\system32\msh263.drv ok scanned
                  16/09/2008 18:51:10 File: c:\windows\system32\ir32_32.dll ok scanned
                  16/09/2008 18:51:10 File: C:\WINDOWS\system32\ir32_32.dll ok iChecker
                  16/09/2008 18:51:10 File: c:\windows\system32\ir41_32.ax ok scanned
                  16/09/2008 18:51:10 File: c:\windows\system32\iyuv_32.dll ok scanned
                  16/09/2008 18:51:10 File: c:\windows\system32\msrle32.dll ok scanned
                  16/09/2008 18:51:10 File: c:\windows\system32\msvidc32.dll ok scanned
                  16/09/2008 18:51:11 File: c:\windows\system32\msyuv.dll ok scanned
                  16/09/2008 18:51:11 File: C:\WINDOWS\system32\msyuv.dll ok iChecker
                  16/09/2008 18:51:11 File: c:\windows\system32\tsbyuv.dll ok scanned
                  16/09/2008 18:51:11 File: c:\windows\system32\msacm32.drv ok scanned
                  16/09/2008 18:51:11 File: c:\windows\system32\msg723.acm ok scanned
                  16/09/2008 18:51:11 File: C:\WINDOWS\system32\msh263.drv ok iChecker
                  16/09/2008 18:51:11 File: c:\windows\system32\msh261.drv ok scanned
                  16/09/2008 18:51:11 File: c:\windows\system32\msaud32.acm ok scanned
                  16/09/2008 18:51:11 File: c:\windows\system32\sl_anet.acm ok scanned
                  16/09/2008 18:51:11 File: c:\windows\system32\iac25_32.ax ok scanned
                  16/09/2008 18:51:12 File: c:\windows\system32\ir50_32.dll ok scanned
                  16/09/2008 18:51:12 File: c:\windows\system32\l3codeca.acm ok scanned
                  16/09/2008 18:51:12 File: c:\windows\system32\wdmaud.drv ok scanned
                  16/09/2008 18:51:12 File: C:\WINDOWS\system32\wdmaud.drv ok iChecker
                  16/09/2008 18:51:12 File: c:\windows\system32\mpg4c32.dll ok scanned
                  16/09/2008 18:51:12 File: C:\WINDOWS\system32\mpg4c32.dll ok iChecker
                  16/09/2008 18:51:12 File: c:\windows\system32\pclepim1.dll ok scanned
                  16/09/2008 18:51:12 File: c:\windows\system32\vfwwdm32.dll ok scanned
                  16/09/2008 18:51:12 File: c:\windows\system32\sirenacm.dll ok scanned
                  16/09/2008 18:51:13 File: c:\windows\system32\webcheck.dll ok scanned
                  16/09/2008 18:51:13 File: c:\windows\system32\stobject.dll ok scanned
                  16/09/2008 18:51:13 File: c:\windows\system32\logon.scr ok scanned
                  16/09/2008 18:51:13 File: C:\WINDOWS\system32\logon.scr ok iChecker
                  16/09/2008 18:51:13 File: c:\windows\system32\browseui.dll ok iChecker
                  16/09/2008 18:51:13 File: c:\program files\greatis\regrunsuite\rrshell.dll ok scanned
                  16/09/2008 18:51:14 File: c:\windows\system32\mmsys.cpl ok scanned
                  16/09/2008 18:51:14 File: c:\windows\system32\icmui.dll ok scanned
                  16/09/2008 18:51:14 File: c:\windows\system32\rshx32.dll ok scanned
                  16/09/2008 18:51:14 File: c:\windows\system32\docprop.dll ok scanned
                  16/09/2008 18:51:14 File: c:\windows\system32\ntshrui.dll ok iChecker
                  16/09/2008 18:51:14 File: c:\windows\system32\deskadp.dll ok scanned
                  16/09/2008 18:51:14 File: c:\windows\system32\deskmon.dll ok scanned
                  16/09/2008 18:51:14 File: c:\windows\system32\dssec.dll ok scanned
                  16/09/2008 18:51:14 File: c:\windows\system32\slayerxp.dll ok scanned
                  16/09/2008 18:51:14 File: c:\windows\system32\shscrap.dll ok scanned
                  16/09/2008 18:51:15 File: c:\windows\system32\diskcopy.dll ok scanned
                  16/09/2008 18:51:15 File: c:\windows\system32\ntlanui2.dll ok scanned
                  16/09/2008 18:51:15 File: c:\windows\system32\printui.dll ok scanned
                  16/09/2008 18:51:15 File: c:\windows\system32\dskquoui.dll ok scanned
                  16/09/2008 18:51:15 File: c:\windows\system32\syncui.dll ok scanned
                  16/09/2008 18:51:15 File: c:\windows\system32\hticons.dll ok scanned
                  16/09/2008 18:51:15 File: c:\windows\system32\fontext.dll ok scanned
                  16/09/2008 18:51:15 File: C:\WINDOWS\system32\rshx32.dll ok iChecker
                  16/09/2008 18:51:16 File: c:\windows\system32\deskperf.dll ok scanned
                  16/09/2008 18:51:16 File: c:\windows\system32\wiashext.dll ok scanned
                  16/09/2008 18:51:16 File: C:\WINDOWS\system32\wiashext.dll ok iChecker
                  16/09/2008 18:51:16 File: c:\windows\system32\remotepg.dll ok scanned
                  16/09/2008 18:51:16 File: c:\windows\system32\wshext.dll ok scanned
                  16/09/2008 18:51:16 File: c:\program files\fichiers communs\system\ole db\oledb32.dll ok scanned
                  16/09/2008 18:51:16 File: c:\windows\system32\mstask.dll ok scanned
                  16/09/2008 18:51:16 File: c:\windows\system32\shdocvw.dll ok iChecker
                  16/09/2008 18:51:17 File: c:\windows\system32\wuaucpl.cpl ok scanned
                  16/09/2008 18:51:17 File: c:\windows\system32\twext.dll ok scanned
                  16/09/2008 18:51:17 File: c:\windows\system32\shmedia.dll ok iChecker
                  16/09/2008 18:51:17 File: c:\windows\system32\ieframe.dll ok iChecker
                  16/09/2008 18:51:17 File: c:\windows\system32\sendmail.dll ok scanned
                  16/09/2008 18:51:17 File: c:\windows\system32\occache.dll ok scanned
                  16/09/2008 18:51:17 File: c:\windows\system32\appwiz.cpl ok scanned
                  16/09/2008 18:51:18 File: c:\windows\system32\netplwiz.dll ok scanned
                  16/09/2008 18:51:18 File: c:\windows\system32\zipfldr.dll ok scanned
                  16/09/2008 18:51:18 File: c:\windows\system32\extmgr.dll ok scanned
                  16/09/2008 18:51:18 File: c:\windows\system32\msieftp.dll ok scanned
                  16/09/2008 18:51:18 File: c:\windows\system32\docprop2.dll ok scanned
                  16/09/2008 18:51:18 File: c:\windows\system32\dsquery.dll ok scanned
                  16/09/2008 18:51:18 File: c:\windows\system32\dsuiext.dll ok scanned
                  16/09/2008 18:51:18 File: c:\windows\system32\mydocs.dll ok iChecker
                  16/09/2008 18:51:18 File: c:\windows\system32\cscui.dll ok iChecker
                  16/09/2008 18:51:19 File: c:\windows\msagent\agentpsh.dll ok scanned
                  16/09/2008 18:51:19 File: c:\windows\system32\dfsshlex.dll ok scanned
                  16/09/2008 18:51:19 File: c:\windows\system32\photowiz.dll ok scanned
                  16/09/2008 18:51:19 File: c:\windows\system32\mmcshext.dll ok scanned
                  16/09/2008 18:51:19 File: c:\windows\system32\cabview.dll ok scanned
                  16/09/2008 18:51:19 File: c:\program files\outlook express\wabfind.dll ok scanned
                  16/09/2008 18:51:19 File: c:\windows\system32\wmpshell.dll ok scanned
                  16/09/2008 18:51:20 File: c:\windows\system32\nvshell.dll ok scanned
                  16/09/2008 18:51:20 File: c:\program files\poweriso\pwrisosh.dll ok iChecker
                  16/09/2008 18:51:20 File: c:\program files\7-zip\7-zip.dll ok iChecker
                  16/09/2008 18:51:20 File: c:\program files\windows live\messenger\fsshext.8.5.1302.1018.dll ok scanned
                  16/09/2008 18:51:20 File: c:\program files\fichiers communs\microsoft shared\windows live\windowslivelogin.dll ok scanned
                  16/09/2008 18:51:21 File: c:\program files\7-zip\7zfm.exe ok scanned
                  16/09/2008 18:51:21 File: c:\program files\techcity solutions\alicesav\alicebrain.exe packed file UPX
                  16/09/2008 18:51:21 File: c:\program files\techcity solutions\alicesav\alicebrain.exe//UPX ok scanned
                  16/09/2008 18:51:21 File: c:\program files\techcity solutions\alicesav\alicebrain.exe//# ok scanned
                  16/09/2008 18:51:21 File: c:\program files\techcity solutions\alicesav\alicebrain.exe ok scanned
                  16/09/2008 18:51:21 File: c:\documents and settings\nat\menu démarrer\programmes\alice\alice auto-diagnostic.lnk ok scanned
                  16/09/2008 18:51:22 File: c:\program files\msn gaming zone\windows\bckgzm.exe ok scanned
                  16/09/2008 18:51:24 File: c:\program files\ea games\battlefield 1942\bf1942.exe ok scanned
                  16/09/2008 18:51:25 File: c:\program files\ccleaner\ccleaner.exe ok scanned
                  16/09/2008 18:51:25 File: c:\program files\msn gaming zone\windows\chkrzm.exe ok scanned
                  16/09/2008 18:51:26 File: c:\program files\netmeeting\conf.exe ok scanned
                  16/09/2008 18:51:27 File: c:\program files\windows nt\dialer.exe ok scanned
                  16/09/2008 18:51:28 File: c:\sierra\empire earth\empire earth.exe ok scanned
                  16/09/2008 18:51:29 File: c:\windows\pchealth\helpctr\binaries\helpctr.exe ok scanned
                  16/09/2008 18:51:29 File: c:\program files\trend micro\hijackthis\hijackthis.exe packed file PE_Patch.UPX
                  16/09/2008 18:51:30 File: c:\program files\trend micro\hijackthis\hijackthis.exe//PE_Patch.UPX packed file UPX
                  16/09/2008 18:51:30 File: c:\program files\trend micro\hijackthis\hijackthis.exe//PE_Patch.UPX//UPX ok scanned
                  16/09/2008 18:51:30 File: c:\program files\trend micro\hijackthis\hijackthis.exe//PE_Patch.UPX ok scanned
                  16/09/2008 18:51:33 File: c:\program files\trend micro\hijackthis\hijackthis.exe ok scanned
                  16/09/2008 18:51:34 File: c:\program files\msn gaming zone\windows\hrtzzm.exe ok scanned
                  16/09/2008 18:51:34 File: c:\program files\internet explorer\connection wizard\icwconn1.exe ok scanned
                  16/09/2008 18:51:34 File: c:\program files\internet explorer\connection wizard\icwconn2.exe ok scanned
                  16/09/2008 18:51:35 File: c:\program files\internet explorer\connection wizard\inetwiz.exe ok scanned
                  16/09/2008 18:51:35 File: c:\program files\internet explorer\connection wizard\isignup.exe ok scanned
                  16/09/2008 18:51:36 File: c:\windows\system32\usmt\migwiz.exe ok scanned
                  16/09/2008 18:51:38 File: c:\program files\movie maker\moviemk.exe ok scanned
                  16/09/2008 18:51:38 File: c:\program files\windows media player\mplayer2.exe ok scanned
                  16/09/2008 18:51:38 File: c:\windows\pchealth\helpctr\binaries\msconfig.exe ok scanned
                  16/09/2008 18:51:39 File: c:\program files\outlook express\msimn.exe ok scanned
                  16/09/2008 18:51:39 File: c:\program files\fichiers communs\microsoft shared\msinfo\msinfo32.exe ok scanned
                  16/09/2008 18:51:40 File: c:\program files\messenger\msmsgs.exe ok scanned
                  16/09/2008 18:51:42 File: c:\program files\windows live\messenger\msnmsgr.exe ok scanned
                  16/09/2008 18:51:43 File: c:\windows\system32\mspaint.exe ok scanned
                  16/09/2008 18:51:43 File: c:\program files\windows nt\pinball\pinball.exe ok scanned
                  16/09/2008 18:51:43 File: c:\program files\msn gaming zone\windows\rvsezm.exe ok scanned
                  16/09/2008 18:51:44 File: c:\program files\msn gaming zone\windows\shvlzm.exe ok scanned
                  16/09/2008 18:51:44 File: c:\program files\outlook express\wabmig.exe ok scanned
                  16/09/2008 18:51:44 File: c:\windows\system32\ntsd.exe ok scanned
                  16/09/2008 18:51:45 File: c:\windows\network diagnostic\xpnetdiag.exe ok scanned
                  16/09/2008 18:51:45 File: c:\windows\system32\wuweb.dll ok scanned
                  16/09/2008 18:51:46 File: c:\windows\downloaded program files\fp_ax_cab_installer.exe ok scanned
                  16/09/2008 18:51:47 File: c:\windows\system32\kaspersky lab\kaspersky online scanner\kavwebscan.dll ok scanned
                  16/09/2008 18:51:47 File: c:\windows\system32\rsvpsp.dll ok scanned
                  16/09/2008 18:51:47 File: c:\windows\system32\winrnr.dll ok iChecker
                  16/09/2008 18:51:47 File: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\desktop.ini ok scanned
                  16/09/2008 18:51:48 File: c:\program files\isafer\isafer.exe ok scanned
                  16/09/2008 18:51:48 File: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\iSafer.lnk ok scanned
                  16/09/2008 18:51:48 File: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\TrayMin210.exe.lnk ok scanned
                  16/09/2008 18:51:49 File: C:\Documents and Settings\Nat\Menu Démarrer\Programmes\Démarrage\desktop.ini ok scanned
                  16/09/2008 18:51:51 Logical disk sector: C ok scanned
                  16/09/2008 18:51:51 Logical disk sector: F ok scanned
                  16/09/2008 18:51:52 Physical disk sector: \\.\PHYSICALDRIVE0 ok scanned
                  16/09/2008 18:51:53 Physical disk sector: \\.\PHYSICALDRIVE1 ok scanned
                  16/09/2008 18:51:53 File: C:\AUTOEXEC.BAT ok scanned
                  16/09/2008 18:51:53 File: C:\boot.ini ok scanned
                  16/09/2008 18:51:53 File: C:\Bootfont.bin ok scanned
                  16/09/2008 18:51:53 File: C:\IO.SYS ok iChecker
                  16/09/2008 18:51:53 File: C:\MSDOS.SYS ok iChecker
                  16/09/2008 18:51:53 File: C:\NTDETECT.COM ok scanned
                  16/09/2008 18:51:53 File: C:\ntldr ok scanned
                  16/09/2008 18:51:53 File: C:\pagefile.sys skipped locked
                  16/09/2008 18:51:53 File: C:\rapport.txt ok scanned
                  16/09/2008 18:51:53 File: C:\resultat-scan-oad.txt ok scanned
                  16/09/2008 18:51:53 File: C:\resultat.txt ok scanned
                  16/09/2008 18:51:53 File: C:\sqmdata00.sqm ok scanned
                  16/09/2008 18:51:53 File: C:\sqmnoopt00.sqm ok scanned
                  16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\NTUSER.DAT ok scanned
                  16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\ntuser.dat.LOG ok scanned
                  16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\ntuser.ini ok scanned
                  16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\Application Data\desktop.ini ok scanned
                  16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\Application Data\Microsoft\Internet Explorer\brndlog.bak ok scanned
                  16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\Application Data\Microsoft\Internet Explorer\brndlog.txt ok scanned
                  16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\Cookies\index.dat ok scanned
                  16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\Favoris\Site Unicornis par Virginie64700.url ok scanned
                  16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\Favoris\•°•° UNICORNIS °•°•.url ok scanned
                  16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\Local Settings\desktop.ini ok scanned
                  16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\Local Settings\Application Data\IconCache.db ok scanned
                  16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\Local Settings\Application Data\ShLog.txt ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_59R.wmdb ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.DTD ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.XML ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Historique\desktop.ini ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Historique\History.IE5\desktop.ini ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Historique\History.IE5\index.dat ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\desktop.ini ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\index.dat ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\0LUV8TEJ\desktop.ini ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\6F23GRI7\desktop.ini ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\GLCR0VIF\desktop.ini ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\UTW3EL25\desktop.ini ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Menu Démarrer\desktop.ini ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Assistance à distance.lnk ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\desktop.ini ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Lecteur Windows Media.lnk ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Assistant Compatibilité des programmes.lnk ok scanned
                  16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Bloc-notes.lnk ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\desktop.ini ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Explorateur Windows.lnk ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Invite de commandes.lnk ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Synchroniser.lnk ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Visite guidée de Windows XP.lnk ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Accessibilité\Clavier visuel.lnk ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Accessibilité\desktop.ini ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Accessibilité\Gestionnaire d'utilitaires.lnk ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Accessibilité\Loupe.lnk ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Divertissement\desktop.ini ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Divertissement\Lecteur Windows Media.lnk ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Démarrage\desktop.ini ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\amipro.sam ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\excel.xls ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\excel4.xls ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\lotus.wk4 ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\powerpnt.ppt ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\presenta.shw ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\quattro.wb2 ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\sndrec.wav ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\winword.doc ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\winword2.doc ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\wordpfct.wpd ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\wordpfct.wpg ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\SendTo\Bureau (créer un raccourci).DeskLink ok iChecker
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\SendTo\desktop.ini ok scanned
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\SendTo\Destinataire.MAPIMail ok iChecker
                  16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\SendTo\Dossier compressé.ZFSendToTarget ok iChecker
                  16/09/2008 18:51:56 File: C:\Documents and Settings\All Users\Application Data\desktop.ini ok scanned
                  16/09/2008 18:51:57 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav6\kav6-0607g.xml ok scanned
                  16/09/2008 18:51:57 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav6\kav6-0607g.xml.klz ok scanned
                  16/09/2008 18:51:57 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\av-i386-0607g.xml ok scanned
                  16/09/2008 18:51:57 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\av-i386-0607g.xml.klz ok scanned
                  16/09/2008 18:51:57 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base001c.avc ok scanned
                  16/09/2008 18:51:57 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base002c.avc ok scanned
                  16/09/2008 18:51:57 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base003c.avc ok scanned
                  16/09/2008 18:51:58 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base004c.avc ok scanned
                  16/09/2008 18:51:58 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base005c.avc ok scanned
                  16/09/2008 18:51:58 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base006c.avc ok scanned
                  16/09/2008 18:51:58 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base007c.avc ok scanned
                  16/09/2008 18:51:58 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base008c.avc ok scanned
                  16/09/2008 18:51:58 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base009c.avc ok scanned
                  16/09/2008 18:51:58 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base010c.avc ok scanned
                  16/09/2008 18:51:58 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base011c.avc ok scanned
                  16/09/2008 18:51:58 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base012c.avc ok scanned
                  16/09/2008 18:51:58 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base013c.avc ok scanned
                  16/09/2008 18:51:59 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base014c.avc ok scanned
                  16/09/2008 18:51:59 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base015c.avc ok scanned
                  16/09/2008 18:51:59 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base016c.avc ok scanned
                  16/09/2008 18:51:59 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base017c.avc ok scanned
                  16/09/2008 18:51:59 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base018c.avc ok scanned
                  16/09/2008 18:51:59 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base019c.avc ok scanned
                  16/09/2008 18:51:59 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base020c.avc ok scanned
                  16/09/2008 18:51:59 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base021c.avc ok scanned
                  16/09/2008 18:51:59 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base022c.avc ok scanned
                  16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base023c.avc ok scanned
                  16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base024c.avc ok scanned
                  16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base025c.avc ok scanned
                  16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base026c.avc ok scanned
                  16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base027c.avc ok scanned
                  16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base028c.avc ok scanned
                  16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base029c.avc ok scanned
                  16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base030c.avc ok scanned
                  16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\chuka.avc ok scanned
                  16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\fa001.avc ok scanned
                  16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\kernel.avc ok scanned
                  16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krn001.avc ok scanned
                  16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krn002.avc ok scanned
                  16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krn003.avc ok scanned
                  16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krn004.avc ok scanned
                  16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krn005.avc ok scanned
                  16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krndos.avc ok scanned
                  16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krnengn.avc ok scanned
                  16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krnexe.avc ok scanned
                  16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krnexe32.avc ok scanned
                  16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krngen.avc ok scanned
                  16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krnjava.avc ok scanned
                  16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krnmacro.avc ok scanned
                  16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krnun001.avc ok scanned
                  16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krnun002.avc ok scanned
                  16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krnun003.avc ok scanned
                  16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krnun004.avc ok scanned
                  16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\ocr.avc ok scanned
                  16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\smart.avc ok scanned
                  16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\klava\emu\i386\emu-i386-0607g.xml ok scanned
                  16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\klava\emu\i386\emu-i386-0607g.xml.klz ok scanned
                  16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\klava\wa\i386\wa-i386-0607g.xml ok scanned
                  16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\klava\wa\i386\wa-i386-0607g.xml.klz ok scanned
                  16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\blst\black.lst ok scanned
                  16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\blst\blst-0607g.xml ok scanned
                  16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\blst\blst-0607g.xml.klz ok scanned
                  16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\ah-i386-0607g.krg ok scanned
                  16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\ah-i386-0607g.pbv ok scanned
                  16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\ah-i386-0607g.xml ok scanned
                  16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\ah-i386-0607g.xml.klz ok scanned
                  16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\ckah.set ok scanned
                  16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\fwpresets.ini ok scanned
                  16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\fwpresets.xms ok scanned
                  16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\ids00234.kdz archive ZIP
                  16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\ids00234.kdz/ids00234.sys ok scanned
                  16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\ids00234.kdz/ids00234.vxd ok scanned
                  16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\ids00234.kdz ok scanned
                  16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz archive ZIP
                  16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_actn.kdb ok scanned
                  16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_lbcf.kdb ok scanned
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_objci386.kdb ok scanned
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_ocroi386.kdb ok scanned
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_ocrti386.kdb ok scanned
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_proci386.kdb ok scanned
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_sget.kdb ok scanned
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_sgnt.kdb ok scanned
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_sgtt.kdb ok scanned
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_strt.kdb ok scanned
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_vdci.kdb ok scanned
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_vdct.kdb ok scanned
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids__mft.kdb ok scanned
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz ok scanned
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\klcr.kdz archive ZIP
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\klcr.kdz/klcr.vxd ok scanned
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\klcr.kdz/klcr.sys ok scanned
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\klcr.kdz ok scanned
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\klfw.kdz archive ZIP
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\klfw.kdz/klfw.vxd ok scanned
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\klfw.kdz/klfw.sys ok scanned
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\klfw.kdz ok scanned
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\klick.kdz archive ZIP
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\klick.kdz/klick.vxd ok scanned
                  16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\
                  0
                  1. ixilium Auteur
                    16/09/2008 18:50:34 File: c:\windows\system32\tbctray.exe ok scanned
                    16/09/2008 18:50:34 File: c:\windows\system32\ctfmon.exe ok scanned
                    16/09/2008 18:50:34 File: c:\windows\system32\alrsvc.dll ok scanned
                    16/09/2008 18:50:35 File: c:\windows\system32\appmgmts.dll ok scanned
                    16/09/2008 18:50:35 File: c:\windows\system32\audiosrv.dll ok scanned
                    16/09/2008 18:50:35 File: c:\windows\system32\qmgr.dll ok scanned
                    16/09/2008 18:50:35 File: c:\windows\system32\browser.dll ok scanned
                    16/09/2008 18:50:35 File: c:\windows\system32\dhcpcsvc.dll ok scanned
                    16/09/2008 18:50:35 File: c:\windows\system32\dnsrslvr.dll ok scanned
                    16/09/2008 18:50:35 File: c:\windows\system32\dot3svc.dll ok scanned
                    16/09/2008 18:50:35 File: c:\windows\system32\eapsvc.dll ok scanned
                    16/09/2008 18:50:36 File: c:\windows\system32\ersvc.dll ok scanned
                    16/09/2008 18:50:36 File: c:\windows\system32\es.dll ok scanned
                    16/09/2008 18:50:36 File: c:\windows\system32\shsvcs.dll ok iChecker
                    16/09/2008 18:50:36 File: c:\windows\system32\kmsvc.dll ok scanned
                    16/09/2008 18:50:36 File: c:\windows\system32\w3ssl.dll ok scanned
                    16/09/2008 18:50:36 File: c:\windows\system32\srvsvc.dll ok scanned
                    16/09/2008 18:50:36 File: c:\windows\system32\wkssvc.dll ok scanned
                    16/09/2008 18:50:36 File: c:\windows\system32\lmhsvc.dll ok scanned
                    16/09/2008 18:50:36 File: c:\windows\system32\msgsvc.dll ok scanned
                    16/09/2008 18:50:37 File: c:\windows\system32\qagentrt.dll ok scanned
                    16/09/2008 18:50:37 File: c:\windows\system32\netman.dll ok scanned
                    16/09/2008 18:50:37 File: c:\windows\system32\mswsock.dll ok iChecker
                    16/09/2008 18:50:37 File: c:\windows\system32\ntmssvc.dll ok scanned
                    16/09/2008 18:50:37 File: c:\windows\system32\rasauto.dll ok scanned
                    16/09/2008 18:50:37 File: c:\windows\system32\rasmans.dll ok scanned
                    16/09/2008 18:50:37 File: c:\windows\system32\mprdim.dll ok scanned
                    16/09/2008 18:50:37 File: c:\windows\system32\regsvc.dll ok scanned
                    16/09/2008 18:50:37 File: c:\windows\system32\schedsvc.dll ok scanned
                    16/09/2008 18:50:38 File: c:\windows\system32\seclogon.dll ok scanned
                    16/09/2008 18:50:38 File: c:\windows\system32\sens.dll ok scanned
                    16/09/2008 18:50:38 File: c:\windows\system32\ipnathlp.dll ok scanned
                    16/09/2008 18:50:38 File: c:\windows\system32\ssdpsrv.dll ok scanned
                    16/09/2008 18:50:38 File: c:\windows\system32\wiaservc.dll ok scanned
                    16/09/2008 18:50:38 File: c:\windows\system32\tapisrv.dll ok scanned
                    16/09/2008 18:50:38 File: c:\windows\system32\termsrv.dll ok scanned
                    16/09/2008 18:50:38 File: c:\windows\system32\trkwks.dll ok scanned
                    16/09/2008 18:50:39 File: c:\windows\system32\upnphost.dll ok scanned
                    16/09/2008 18:50:39 File: c:\windows\system32\w32time.dll ok iChecker
                    16/09/2008 18:50:39 File: c:\windows\system32\webclnt.dll ok scanned
                    16/09/2008 18:50:39 File: c:\windows\system32\mspmsnsv.dll ok scanned
                    16/09/2008 18:50:39 File: c:\windows\system32\advapi32.dll ok iChecker
                    16/09/2008 18:50:39 File: c:\windows\system32\wscsvc.dll ok scanned
                    16/09/2008 18:50:39 File: c:\windows\system32\wuauserv.dll ok scanned
                    16/09/2008 18:50:39 File: c:\windows\system32\wzcsvc.dll ok scanned
                    16/09/2008 18:50:39 File: c:\windows\system32\xmlprov.dll ok scanned
                    16/09/2008 18:50:40 File: c:\windows\system32\drivers\acpi.sys ok scanned
                    16/09/2008 18:50:40 File: c:\windows\system32\drivers\aec.sys ok scanned
                    16/09/2008 18:50:40 File: c:\windows\system32\drivers\afd.sys ok scanned
                    16/09/2008 18:50:40 File: c:\windows\system32\svchost.exe ok iChecker
                    16/09/2008 18:50:40 File: c:\windows\system32\alg.exe ok scanned
                    16/09/2008 18:50:41 File: c:\windows\system32\drivers\asyncmac.sys ok scanned
                    16/09/2008 18:50:41 File: c:\windows\system32\drivers\atapi.sys ok scanned
                    16/09/2008 18:50:41 File: c:\windows\system32\drivers\atmarpc.sys ok scanned
                    16/09/2008 18:50:41 File: c:\windows\system32\drivers\audstub.sys ok scanned
                    16/09/2008 18:50:41 File: c:\windows\system32\drivers\ccdecode.sys ok scanned
                    16/09/2008 18:50:41 File: c:\windows\system32\drivers\cdrom.sys ok scanned
                    16/09/2008 18:50:41 File: c:\windows\system32\cisvc.exe ok scanned
                    16/09/2008 18:50:42 File: c:\windows\system32\clipsrv.exe ok scanned
                    16/09/2008 18:50:42 File: c:\windows\system32\dllhost.exe ok scanned
                    16/09/2008 18:50:42 File: c:\windows\system32\drivers\disk.sys ok scanned
                    16/09/2008 18:50:43 File: c:\windows\system32\dmadmin.exe ok scanned
                    16/09/2008 18:50:43 File: c:\windows\system32\drivers\dmboot.sys packed file PE_Patch
                    16/09/2008 18:50:43 File: c:\windows\system32\drivers\dmboot.sys//PE_Patch ok scanned
                    16/09/2008 18:50:43 File: c:\windows\system32\drivers\dmboot.sys ok scanned
                    16/09/2008 18:50:43 File: c:\windows\system32\drivers\dmio.sys ok scanned
                    16/09/2008 18:50:44 File: c:\windows\system32\drivers\dmload.sys ok scanned
                    16/09/2008 18:50:44 File: c:\windows\system32\drivers\dmusic.sys ok scanned
                    16/09/2008 18:50:44 File: c:\windows\system32\drivers\drmkaud.sys ok scanned
                    16/09/2008 18:50:44 File: c:\windows\system32\services.exe ok iChecker
                    16/09/2008 18:50:44 File: c:\windows\system32\drivers\fdc.sys ok scanned
                    16/09/2008 18:50:44 File: c:\windows\system32\drivers\flpydisk.sys ok scanned
                    16/09/2008 18:50:44 File: c:\windows\system32\drivers\fltmgr.sys packed file PE_Patch
                    16/09/2008 18:50:44 File: c:\windows\system32\drivers\fltmgr.sys//PE_Patch ok scanned
                    16/09/2008 18:50:44 File: c:\windows\system32\drivers\fltmgr.sys ok scanned
                    16/09/2008 18:50:44 File: c:\windows\system32\drivers\ftdisk.sys ok scanned
                    16/09/2008 18:50:44 File: c:\windows\system32\drivers\gameenum.sys ok scanned
                    16/09/2008 18:50:45 File: c:\windows\system32\drivers\msgpc.sys ok scanned
                    16/09/2008 18:50:45 File: c:\windows\system32\drivers\http.sys ok scanned
                    16/09/2008 18:50:45 File: c:\windows\system32\drivers\i8042prt.sys ok scanned
                    16/09/2008 18:50:45 File: c:\windows\system32\drivers\imapi.sys ok scanned
                    16/09/2008 18:50:46 File: c:\windows\system32\imapi.exe ok scanned
                    16/09/2008 18:50:46 File: c:\windows\system32\drivers\ip6fw.sys ok scanned
                    16/09/2008 18:50:46 File: c:\windows\system32\drivers\ipfltdrv.sys ok scanned
                    16/09/2008 18:50:46 File: c:\windows\system32\drivers\ipinip.sys ok scanned
                    16/09/2008 18:50:46 File: c:\windows\system32\drivers\ipnat.sys ok scanned
                    16/09/2008 18:50:46 File: c:\windows\system32\drivers\ipsec.sys ok scanned
                    16/09/2008 18:50:46 File: c:\windows\system32\drivers\irenum.sys ok scanned
                    16/09/2008 18:50:46 File: c:\windows\system32\drivers\35608005.sys ok scanned
                    16/09/2008 18:50:47 File: c:\program files\isafer\isafersvr.exe ok scanned
                    16/09/2008 18:50:47 File: c:\windows\system32\drivers\isapnp.sys ok scanned
                    16/09/2008 18:50:47 File: c:\windows\system32\drivers\kbdclass.sys ok scanned
                    16/09/2008 18:50:48 File: c:\windows\system32\drivers\kmixer.sys ok scanned
                    16/09/2008 18:50:48 File: c:\windows\system32\mnmsrvc.exe ok scanned
                    16/09/2008 18:50:48 File: c:\windows\system32\drivers\mouclass.sys ok scanned
                    16/09/2008 18:50:48 File: c:\windows\system32\drivers\mrxdav.sys packed file PE_Patch
                    16/09/2008 18:50:48 File: c:\windows\system32\drivers\mrxdav.sys//PE_Patch ok scanned
                    16/09/2008 18:50:48 File: c:\windows\system32\drivers\mrxdav.sys ok scanned
                    16/09/2008 18:50:49 File: c:\windows\system32\drivers\mrxsmb.sys packed file PE_Patch
                    16/09/2008 18:50:49 File: c:\windows\system32\drivers\mrxsmb.sys//PE_Patch ok scanned
                    16/09/2008 18:50:49 File: c:\windows\system32\drivers\mrxsmb.sys ok scanned
                    16/09/2008 18:50:49 File: c:\windows\system32\msdtc.exe ok scanned
                    16/09/2008 18:50:49 File: c:\windows\system32\msiexec.exe ok scanned
                    16/09/2008 18:50:49 File: c:\windows\system32\drivers\mskssrv.sys ok scanned
                    16/09/2008 18:50:50 File: c:\windows\system32\drivers\mspclock.sys ok scanned
                    16/09/2008 18:50:50 File: c:\windows\system32\drivers\mspqm.sys ok scanned
                    16/09/2008 18:50:50 File: c:\windows\system32\drivers\mssmbios.sys ok scanned
                    16/09/2008 18:50:50 File: c:\windows\system32\drivers\mstee.sys ok scanned
                    16/09/2008 18:50:50 File: c:\windows\system32\drivers\nabtsfec.sys ok scanned
                    16/09/2008 18:50:50 File: c:\windows\system32\drivers\ndisip.sys ok scanned
                    16/09/2008 18:50:50 File: c:\windows\system32\drivers\ndistapi.sys ok scanned
                    16/09/2008 18:50:50 File: c:\windows\system32\drivers\ndisuio.sys ok scanned
                    16/09/2008 18:50:50 File: c:\windows\system32\drivers\ndiswan.sys ok scanned
                    16/09/2008 18:50:51 File: c:\windows\system32\drivers\netbios.sys ok scanned
                    16/09/2008 18:50:51 File: c:\windows\system32\drivers\netbt.sys ok scanned
                    16/09/2008 18:50:51 File: c:\windows\system32\netdde.exe ok scanned
                    16/09/2008 18:50:51 File: c:\windows\system32\lsass.exe ok iChecker
                    16/09/2008 18:50:51 File: c:\windows\system32\drivers\nv4_mini.sys ok scanned
                    16/09/2008 18:50:52 File: c:\windows\system32\nvsvc32.exe ok scanned
                    16/09/2008 18:50:52 File: c:\windows\system32\drivers\nwlnkflt.sys ok scanned
                    16/09/2008 18:50:52 File: c:\windows\system32\drivers\nwlnkfwd.sys ok scanned
                    16/09/2008 18:50:52 File: c:\windows\system32\drivers\parport.sys ok scanned
                    16/09/2008 18:50:52 File: c:\windows\system32\drivers\pci.sys ok scanned
                    16/09/2008 18:50:52 File: c:\windows\system32\drivers\pctvvbi.sys ok scanned
                    16/09/2008 18:50:52 File: c:\windows\system32\drivers\pfc.sys ok scanned
                    16/09/2008 18:50:53 File: c:\windows\system32\pnkbstra.exe ok scanned
                    16/09/2008 18:50:53 File: c:\windows\system32\pnkbstrb.exe ok scanned
                    16/09/2008 18:50:53 File: c:\windows\system32\drivers\raspptp.sys ok scanned
                    16/09/2008 18:50:54 File: c:\windows\system32\drivers\processr.sys ok scanned
                    16/09/2008 18:50:54 File: c:\windows\system32\drivers\psched.sys ok scanned
                    16/09/2008 18:50:54 File: c:\windows\system32\drivers\ptilink.sys ok scanned
                    16/09/2008 18:50:54 File: c:\windows\system32\drivers\rasacd.sys ok scanned
                    16/09/2008 18:50:54 File: c:\windows\system32\drivers\rasl2tp.sys ok scanned
                    16/09/2008 18:50:54 File: c:\windows\system32\drivers\raspppoe.sys ok scanned
                    16/09/2008 18:50:54 File: c:\windows\system32\drivers\raspti.sys ok scanned
                    16/09/2008 18:50:54 File: c:\windows\system32\drivers\rdbss.sys ok scanned
                    16/09/2008 18:50:54 File: c:\windows\system32\drivers\rdpcdd.sys ok scanned
                    16/09/2008 18:50:55 File: c:\windows\system32\drivers\rdpdr.sys ok scanned
                    16/09/2008 18:50:55 File: c:\windows\system32\sessmgr.exe ok scanned
                    16/09/2008 18:50:55 File: c:\windows\system32\drivers\redbook.sys ok scanned
                    16/09/2008 18:50:55 File: c:\windows\system32\drivers\rob_a.sys ok scanned
                    16/09/2008 18:50:55 File: c:\windows\system32\drivers\rob_v.sys ok scanned
                    16/09/2008 18:50:56 File: c:\windows\system32\locator.exe ok scanned
                    16/09/2008 18:50:56 File: c:\windows\system32\rsvp.exe ok scanned
                    16/09/2008 18:50:56 File: c:\windows\system32\drivers\rtnicxp.sys ok scanned
                    16/09/2008 18:50:56 File: c:\windows\system32\drivers\rtl8139.sys ok scanned
                    16/09/2008 18:50:57 File: c:\windows\system32\scardsvr.exe ok scanned
                    16/09/2008 18:50:57 File: c:\windows\system32\drivers\scsiport.sys ok scanned
                    16/09/2008 18:50:57 File: c:\windows\system32\drivers\secdrv.sys ok scanned
                    16/09/2008 18:50:57 File: c:\windows\system32\drivers\serenum.sys ok scanned
                    16/09/2008 18:50:57 File: c:\windows\system32\drivers\serial.sys ok scanned
                    16/09/2008 18:50:57 File: c:\windows\system32\drivers\slip.sys ok scanned
                    16/09/2008 18:50:57 File: c:\windows\system32\drivers\splitter.sys ok scanned
                    16/09/2008 18:50:58 File: c:\windows\system32\spoolsv.exe ok scanned
                    16/09/2008 18:50:58 File: c:\windows\system32\drivers\sr.sys packed file PE_Patch
                    16/09/2008 18:50:58 File: c:\windows\system32\drivers\sr.sys//PE_Patch ok scanned
                    16/09/2008 18:50:58 File: c:\windows\system32\drivers\sr.sys ok scanned
                    16/09/2008 18:50:58 File: c:\windows\system32\drivers\srv.sys ok scanned
                    16/09/2008 18:50:58 File: c:\windows\system32\drivers\streamip.sys ok scanned
                    16/09/2008 18:50:58 File: c:\windows\system32\drivers\swenum.sys ok scanned
                    16/09/2008 18:50:59 File: c:\windows\system32\drivers\swmidi.sys ok scanned
                    16/09/2008 18:50:59 File: c:\windows\system32\drivers\sysaudio.sys ok scanned
                    16/09/2008 18:50:59 File: c:\windows\system32\smlogsvc.exe ok scanned
                    16/09/2008 18:50:59 File: c:\windows\system32\drivers\tbcspud.sys ok scanned
                    16/09/2008 18:51:00 File: c:\windows\system32\drivers\tbcwdm.sys ok scanned
                    16/09/2008 18:51:00 File: c:\windows\system32\drivers\tcpip.sys ok scanned
                    16/09/2008 18:51:00 File: c:\windows\system32\drivers\termdd.sys ok scanned
                    16/09/2008 18:51:00 File: c:\windows\system32\tlntsvr.exe ok scanned
                    16/09/2008 18:51:01 File: c:\windows\system32\drivers\update.sys ok scanned
                    16/09/2008 18:51:01 File: c:\windows\system32\ups.exe ok scanned
                    16/09/2008 18:51:01 File: c:\windows\system32\drivers\usbhub.sys ok scanned
                    16/09/2008 18:51:01 File: c:\windows\system32\drivers\usbstor.sys ok scanned
                    16/09/2008 18:51:01 File: c:\windows\system32\drivers\usbuhci.sys ok scanned
                    16/09/2008 18:51:02 File: c:\program files\windows live\messenger\usnsvc.exe ok scanned
                    16/09/2008 18:51:02 File: c:\windows\system32\drivers\vga.sys ok scanned
                    16/09/2008 18:51:02 File: c:\windows\system32\drivers\viaagp.sys ok scanned
                    16/09/2008 18:51:02 File: c:\windows\system32\drivers\viaide.sys ok scanned
                    16/09/2008 18:51:02 File: c:\windows\system32\vssvc.exe ok scanned
                    16/09/2008 18:51:02 File: c:\windows\system32\drivers\wanarp.sys ok scanned
                    16/09/2008 18:51:02 File: c:\windows\system32\drivers\wdmaud.sys ok scanned
                    16/09/2008 18:51:03 File: c:\program files\windows live\installer\wlsetupsvc.exe ok scanned
                    16/09/2008 18:51:04 File: c:\windows\system32\wbem\wmiapsrv.exe ok scanned
                    16/09/2008 18:51:04 File: c:\windows\system32\drivers\wstcodec.sys ok scanned
                    16/09/2008 18:51:04 File: c:\windows\system32\drivers\usbvm31b.sys ok scanned
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\acpi.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\aec.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\asyncmac.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\atapi.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\atmarpc.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\audstub.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ccdecode.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\cdrom.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\disk.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\dmboot.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\dmio.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\dmload.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\dmusic.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\dot3svc.dll ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\drmkaud.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\fdc.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\flpydisk.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\fltmgr.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ftdisk.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\gameenum.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\msgpc.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\http.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\i8042prt.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\imapi.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ip6fw.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ipfltdrv.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ipinip.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ipnat.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ipsec.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\irenum.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\isapnp.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\kbdclass.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\kmixer.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\mouclass.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\mrxdav.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\mrxsmb.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\mskssrv.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\mspclock.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\mspqm.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\mssmbios.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\mstee.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\nabtsfec.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ndisip.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ndistapi.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ndisuio.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ndiswan.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\netbios.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\netbt.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\nv4_mini.sys ok scanned
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\nwlnkflt.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\nwlnkfwd.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\parport.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\pci.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\pctvvbi.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\pfc.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\raspptp.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\processr.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\psched.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\ptilink.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\rasacd.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\rasl2tp.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\raspppoe.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\raspti.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\rdbss.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\rdpcdd.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\rdpdr.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\redbook.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\rob_a.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\rob_v.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\rpcss.dll ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\rtnicxp.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\rtl8139.sys ok iChecker
                    16/09/2008 18:51:04 File: C:\WINDOWS\system32\drivers\secdrv.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\serenum.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\serial.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\slip.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\splitter.sys ok iChecker
                    16/09/2008 18:51:05 File: c:\windows\system32\spupdsvc.exe ok scanned
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\sr.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\srv.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\streamip.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\swenum.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\swmidi.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\sysaudio.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\tbcspud.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\tbcwdm.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\tcpip.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\termdd.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\update.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\usbhub.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\usbstor.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\usbuhci.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\viaagp.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\viaide.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\wanarp.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\wdmaud.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\wstcodec.sys ok iChecker
                    16/09/2008 18:51:05 File: C:\WINDOWS\system32\drivers\usbvm31b.sys ok iChecker
                    16/09/2008 18:51:05 File: c:\windows\system32\ieudinit.exe ok scanned
                    16/09/2008 18:51:06 File: c:\windows\inf\unregmp2.exe ok scanned
                    16/09/2008 18:51:06 File: c:\windows\system32\shmgrate.exe ok scanned
                    16/09/2008 18:51:06 File: c:\windows\system32\iedkcs32.dll ok scanned
                    16/09/2008 18:51:07 File: c:\windows\system32\regsvr32.exe ok scanned
                    16/09/2008 18:51:07 File: c:\windows\system32\themeui.dll ok iChecker
                    16/09/2008 18:51:07 File: c:\program files\outlook express\setup50.exe//# ok scanned
                    16/09/2008 18:51:07 File: c:\program files\outlook express\setup50.exe ok scanned
                    16/09/2008 18:51:07 File: c:\windows\system32\user.exe ok scanned
                    16/09/2008 18:51:08 File: c:\windows\system32\advpack.dll ok scanned
                    16/09/2008 18:51:08 File: c:\windows\inf\msnetmtg.inf ok scanned
                    16/09/2008 18:51:08 File: C:\WINDOWS\system32\advpack.dll ok iChecker
                    16/09/2008 18:51:08 File: c:\windows\inf\msmsgs.inf ok scanned
                    16/09/2008 18:51:08 File: c:\windows\inf\wmp.inf ok scanned
                    16/09/2008 18:51:08 File: C:\WINDOWS\system32\user.exe ok iChecker
                    16/09/2008 18:51:08 File: C:\WINDOWS\system32\shell32.dll ok iChecker
                    16/09/2008 18:51:08 File: c:\windows\system32\ie4uinit.exe ok scanned
                    16/09/2008 18:51:08 File: c:\windows\system32\comm.drv ok scanned
                    16/09/2008 18:51:08 File: c:\windows\system\vga.drv ok scanned
                    16/09/2008 18:51:09 File: c:\windows\system\mmsystem.dll ok scanned
                    16/09/2008 18:51:09 File: c:\windows\system\keyboard.drv ok scanned
                    16/09/2008 18:51:09 File: c:\windows\system\mouse.drv ok scanned
                    16/09/2008 18:51:09 File: c:\windows\system\wfwnet.drv ok scanned
                    16/09/2008 18:51:09 File: c:\windows\system32\progman.exe ok scanned
                    16/09/2008 18:51:09 File: c:\windows\system\sound.drv ok scanned
                    16/09/2008 18:51:09 File: c:\windows\system\system.drv ok scanned
                    16/09/2008 18:51:09 File: C:\WINDOWS\system32\timer.drv ok iChecker
                    16/09/2008 18:51:09 File: c:\windows\system32\midimap.dll ok scanned
                    16/09/2008 18:51:09 File: c:\windows\system32\imaadp32.acm ok scanned
                    16/09/2008 18:51:09 File: c:\windows\system32\msadp32.acm ok scanned
                    16/09/2008 18:51:10 File: c:\windows\system32\msg711.acm ok scanned
                    16/09/2008 18:51:10 File: c:\windows\system32\msgsm32.acm ok scanned
                    16/09/2008 18:51:10 File: c:\windows\system32\tssoft32.acm ok scanned
                    16/09/2008 18:51:10 File: c:\windows\system32\iccvid.dll ok scanned
                    16/09/2008 18:51:10 File: c:\windows\system32\msh263.drv ok scanned
                    16/09/2008 18:51:10 File: c:\windows\system32\ir32_32.dll ok scanned
                    16/09/2008 18:51:10 File: C:\WINDOWS\system32\ir32_32.dll ok iChecker
                    16/09/2008 18:51:10 File: c:\windows\system32\ir41_32.ax ok scanned
                    16/09/2008 18:51:10 File: c:\windows\system32\iyuv_32.dll ok scanned
                    16/09/2008 18:51:10 File: c:\windows\system32\msrle32.dll ok scanned
                    16/09/2008 18:51:10 File: c:\windows\system32\msvidc32.dll ok scanned
                    16/09/2008 18:51:11 File: c:\windows\system32\msyuv.dll ok scanned
                    16/09/2008 18:51:11 File: C:\WINDOWS\system32\msyuv.dll ok iChecker
                    16/09/2008 18:51:11 File: c:\windows\system32\tsbyuv.dll ok scanned
                    16/09/2008 18:51:11 File: c:\windows\system32\msacm32.drv ok scanned
                    16/09/2008 18:51:11 File: c:\windows\system32\msg723.acm ok scanned
                    16/09/2008 18:51:11 File: C:\WINDOWS\system32\msh263.drv ok iChecker
                    16/09/2008 18:51:11 File: c:\windows\system32\msh261.drv ok scanned
                    16/09/2008 18:51:11 File: c:\windows\system32\msaud32.acm ok scanned
                    16/09/2008 18:51:11 File: c:\windows\system32\sl_anet.acm ok scanned
                    16/09/2008 18:51:11 File: c:\windows\system32\iac25_32.ax ok scanned
                    16/09/2008 18:51:12 File: c:\windows\system32\ir50_32.dll ok scanned
                    16/09/2008 18:51:12 File: c:\windows\system32\l3codeca.acm ok scanned
                    16/09/2008 18:51:12 File: c:\windows\system32\wdmaud.drv ok scanned
                    16/09/2008 18:51:12 File: C:\WINDOWS\system32\wdmaud.drv ok iChecker
                    16/09/2008 18:51:12 File: c:\windows\system32\mpg4c32.dll ok scanned
                    16/09/2008 18:51:12 File: C:\WINDOWS\system32\mpg4c32.dll ok iChecker
                    16/09/2008 18:51:12 File: c:\windows\system32\pclepim1.dll ok scanned
                    16/09/2008 18:51:12 File: c:\windows\system32\vfwwdm32.dll ok scanned
                    16/09/2008 18:51:12 File: c:\windows\system32\sirenacm.dll ok scanned
                    16/09/2008 18:51:13 File: c:\windows\system32\webcheck.dll ok scanned
                    16/09/2008 18:51:13 File: c:\windows\system32\stobject.dll ok scanned
                    16/09/2008 18:51:13 File: c:\windows\system32\logon.scr ok scanned
                    16/09/2008 18:51:13 File: C:\WINDOWS\system32\logon.scr ok iChecker
                    16/09/2008 18:51:13 File: c:\windows\system32\browseui.dll ok iChecker
                    16/09/2008 18:51:13 File: c:\program files\greatis\regrunsuite\rrshell.dll ok scanned
                    16/09/2008 18:51:14 File: c:\windows\system32\mmsys.cpl ok scanned
                    16/09/2008 18:51:14 File: c:\windows\system32\icmui.dll ok scanned
                    16/09/2008 18:51:14 File: c:\windows\system32\rshx32.dll ok scanned
                    16/09/2008 18:51:14 File: c:\windows\system32\docprop.dll ok scanned
                    16/09/2008 18:51:14 File: c:\windows\system32\ntshrui.dll ok iChecker
                    16/09/2008 18:51:14 File: c:\windows\system32\deskadp.dll ok scanned
                    16/09/2008 18:51:14 File: c:\windows\system32\deskmon.dll ok scanned
                    16/09/2008 18:51:14 File: c:\windows\system32\dssec.dll ok scanned
                    16/09/2008 18:51:14 File: c:\windows\system32\slayerxp.dll ok scanned
                    16/09/2008 18:51:14 File: c:\windows\system32\shscrap.dll ok scanned
                    16/09/2008 18:51:15 File: c:\windows\system32\diskcopy.dll ok scanned
                    16/09/2008 18:51:15 File: c:\windows\system32\ntlanui2.dll ok scanned
                    16/09/2008 18:51:15 File: c:\windows\system32\printui.dll ok scanned
                    16/09/2008 18:51:15 File: c:\windows\system32\dskquoui.dll ok scanned
                    16/09/2008 18:51:15 File: c:\windows\system32\syncui.dll ok scanned
                    16/09/2008 18:51:15 File: c:\windows\system32\hticons.dll ok scanned
                    16/09/2008 18:51:15 File: c:\windows\system32\fontext.dll ok scanned
                    16/09/2008 18:51:15 File: C:\WINDOWS\system32\rshx32.dll ok iChecker
                    16/09/2008 18:51:16 File: c:\windows\system32\deskperf.dll ok scanned
                    16/09/2008 18:51:16 File: c:\windows\system32\wiashext.dll ok scanned
                    16/09/2008 18:51:16 File: C:\WINDOWS\system32\wiashext.dll ok iChecker
                    16/09/2008 18:51:16 File: c:\windows\system32\remotepg.dll ok scanned
                    16/09/2008 18:51:16 File: c:\windows\system32\wshext.dll ok scanned
                    16/09/2008 18:51:16 File: c:\program files\fichiers communs\system\ole db\oledb32.dll ok scanned
                    16/09/2008 18:51:16 File: c:\windows\system32\mstask.dll ok scanned
                    16/09/2008 18:51:16 File: c:\windows\system32\shdocvw.dll ok iChecker
                    16/09/2008 18:51:17 File: c:\windows\system32\wuaucpl.cpl ok scanned
                    16/09/2008 18:51:17 File: c:\windows\system32\twext.dll ok scanned
                    16/09/2008 18:51:17 File: c:\windows\system32\shmedia.dll ok iChecker
                    16/09/2008 18:51:17 File: c:\windows\system32\ieframe.dll ok iChecker
                    16/09/2008 18:51:17 File: c:\windows\system32\sendmail.dll ok scanned
                    16/09/2008 18:51:17 File: c:\windows\system32\occache.dll ok scanned
                    16/09/2008 18:51:17 File: c:\windows\system32\appwiz.cpl ok scanned
                    16/09/2008 18:51:18 File: c:\windows\system32\netplwiz.dll ok scanned
                    16/09/2008 18:51:18 File: c:\windows\system32\zipfldr.dll ok scanned
                    16/09/2008 18:51:18 File: c:\windows\system32\extmgr.dll ok scanned
                    16/09/2008 18:51:18 File: c:\windows\system32\msieftp.dll ok scanned
                    16/09/2008 18:51:18 File: c:\windows\system32\docprop2.dll ok scanned
                    16/09/2008 18:51:18 File: c:\windows\system32\dsquery.dll ok scanned
                    16/09/2008 18:51:18 File: c:\windows\system32\dsuiext.dll ok scanned
                    16/09/2008 18:51:18 File: c:\windows\system32\mydocs.dll ok iChecker
                    16/09/2008 18:51:18 File: c:\windows\system32\cscui.dll ok iChecker
                    16/09/2008 18:51:19 File: c:\windows\msagent\agentpsh.dll ok scanned
                    16/09/2008 18:51:19 File: c:\windows\system32\dfsshlex.dll ok scanned
                    16/09/2008 18:51:19 File: c:\windows\system32\photowiz.dll ok scanned
                    16/09/2008 18:51:19 File: c:\windows\system32\mmcshext.dll ok scanned
                    16/09/2008 18:51:19 File: c:\windows\system32\cabview.dll ok scanned
                    16/09/2008 18:51:19 File: c:\program files\outlook express\wabfind.dll ok scanned
                    16/09/2008 18:51:19 File: c:\windows\system32\wmpshell.dll ok scanned
                    16/09/2008 18:51:20 File: c:\windows\system32\nvshell.dll ok scanned
                    16/09/2008 18:51:20 File: c:\program files\poweriso\pwrisosh.dll ok iChecker
                    16/09/2008 18:51:20 File: c:\program files\7-zip\7-zip.dll ok iChecker
                    16/09/2008 18:51:20 File: c:\program files\windows live\messenger\fsshext.8.5.1302.1018.dll ok scanned
                    16/09/2008 18:51:20 File: c:\program files\fichiers communs\microsoft shared\windows live\windowslivelogin.dll ok scanned
                    16/09/2008 18:51:21 File: c:\program files\7-zip\7zfm.exe ok scanned
                    16/09/2008 18:51:21 File: c:\program files\techcity solutions\alicesav\alicebrain.exe packed file UPX
                    16/09/2008 18:51:21 File: c:\program files\techcity solutions\alicesav\alicebrain.exe//UPX ok scanned
                    16/09/2008 18:51:21 File: c:\program files\techcity solutions\alicesav\alicebrain.exe//# ok scanned
                    16/09/2008 18:51:21 File: c:\program files\techcity solutions\alicesav\alicebrain.exe ok scanned
                    16/09/2008 18:51:21 File: c:\documents and settings\nat\menu démarrer\programmes\alice\alice auto-diagnostic.lnk ok scanned
                    16/09/2008 18:51:22 File: c:\program files\msn gaming zone\windows\bckgzm.exe ok scanned
                    16/09/2008 18:51:24 File: c:\program files\ea games\battlefield 1942\bf1942.exe ok scanned
                    16/09/2008 18:51:25 File: c:\program files\ccleaner\ccleaner.exe ok scanned
                    16/09/2008 18:51:25 File: c:\program files\msn gaming zone\windows\chkrzm.exe ok scanned
                    16/09/2008 18:51:26 File: c:\program files\netmeeting\conf.exe ok scanned
                    16/09/2008 18:51:27 File: c:\program files\windows nt\dialer.exe ok scanned
                    16/09/2008 18:51:28 File: c:\sierra\empire earth\empire earth.exe ok scanned
                    16/09/2008 18:51:29 File: c:\windows\pchealth\helpctr\binaries\helpctr.exe ok scanned
                    16/09/2008 18:51:29 File: c:\program files\trend micro\hijackthis\hijackthis.exe packed file PE_Patch.UPX
                    16/09/2008 18:51:30 File: c:\program files\trend micro\hijackthis\hijackthis.exe//PE_Patch.UPX packed file UPX
                    16/09/2008 18:51:30 File: c:\program files\trend micro\hijackthis\hijackthis.exe//PE_Patch.UPX//UPX ok scanned
                    16/09/2008 18:51:30 File: c:\program files\trend micro\hijackthis\hijackthis.exe//PE_Patch.UPX ok scanned
                    16/09/2008 18:51:33 File: c:\program files\trend micro\hijackthis\hijackthis.exe ok scanned
                    16/09/2008 18:51:34 File: c:\program files\msn gaming zone\windows\hrtzzm.exe ok scanned
                    16/09/2008 18:51:34 File: c:\program files\internet explorer\connection wizard\icwconn1.exe ok scanned
                    16/09/2008 18:51:34 File: c:\program files\internet explorer\connection wizard\icwconn2.exe ok scanned
                    16/09/2008 18:51:35 File: c:\program files\internet explorer\connection wizard\inetwiz.exe ok scanned
                    16/09/2008 18:51:35 File: c:\program files\internet explorer\connection wizard\isignup.exe ok scanned
                    16/09/2008 18:51:36 File: c:\windows\system32\usmt\migwiz.exe ok scanned
                    16/09/2008 18:51:38 File: c:\program files\movie maker\moviemk.exe ok scanned
                    16/09/2008 18:51:38 File: c:\program files\windows media player\mplayer2.exe ok scanned
                    16/09/2008 18:51:38 File: c:\windows\pchealth\helpctr\binaries\msconfig.exe ok scanned
                    16/09/2008 18:51:39 File: c:\program files\outlook express\msimn.exe ok scanned
                    16/09/2008 18:51:39 File: c:\program files\fichiers communs\microsoft shared\msinfo\msinfo32.exe ok scanned
                    16/09/2008 18:51:40 File: c:\program files\messenger\msmsgs.exe ok scanned
                    16/09/2008 18:51:42 File: c:\program files\windows live\messenger\msnmsgr.exe ok scanned
                    16/09/2008 18:51:43 File: c:\windows\system32\mspaint.exe ok scanned
                    16/09/2008 18:51:43 File: c:\program files\windows nt\pinball\pinball.exe ok scanned
                    16/09/2008 18:51:43 File: c:\program files\msn gaming zone\windows\rvsezm.exe ok scanned
                    16/09/2008 18:51:44 File: c:\program files\msn gaming zone\windows\shvlzm.exe ok scanned
                    16/09/2008 18:51:44 File: c:\program files\outlook express\wabmig.exe ok scanned
                    16/09/2008 18:51:44 File: c:\windows\system32\ntsd.exe ok scanned
                    16/09/2008 18:51:45 File: c:\windows\network diagnostic\xpnetdiag.exe ok scanned
                    16/09/2008 18:51:45 File: c:\windows\system32\wuweb.dll ok scanned
                    16/09/2008 18:51:46 File: c:\windows\downloaded program files\fp_ax_cab_installer.exe ok scanned
                    16/09/2008 18:51:47 File: c:\windows\system32\kaspersky lab\kaspersky online scanner\kavwebscan.dll ok scanned
                    16/09/2008 18:51:47 File: c:\windows\system32\rsvpsp.dll ok scanned
                    16/09/2008 18:51:47 File: c:\windows\system32\winrnr.dll ok iChecker
                    16/09/2008 18:51:47 File: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\desktop.ini ok scanned
                    16/09/2008 18:51:48 File: c:\program files\isafer\isafer.exe ok scanned
                    16/09/2008 18:51:48 File: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\iSafer.lnk ok scanned
                    16/09/2008 18:51:48 File: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\TrayMin210.exe.lnk ok scanned
                    16/09/2008 18:51:49 File: C:\Documents and Settings\Nat\Menu Démarrer\Programmes\Démarrage\desktop.ini ok scanned
                    16/09/2008 18:51:51 Logical disk sector: C ok scanned
                    16/09/2008 18:51:51 Logical disk sector: F ok scanned
                    16/09/2008 18:51:52 Physical disk sector: \\.\PHYSICALDRIVE0 ok scanned
                    16/09/2008 18:51:53 Physical disk sector: \\.\PHYSICALDRIVE1 ok scanned
                    16/09/2008 18:51:53 File: C:\AUTOEXEC.BAT ok scanned
                    16/09/2008 18:51:53 File: C:\boot.ini ok scanned
                    16/09/2008 18:51:53 File: C:\Bootfont.bin ok scanned
                    16/09/2008 18:51:53 File: C:\IO.SYS ok iChecker
                    16/09/2008 18:51:53 File: C:\MSDOS.SYS ok iChecker
                    16/09/2008 18:51:53 File: C:\NTDETECT.COM ok scanned
                    16/09/2008 18:51:53 File: C:\ntldr ok scanned
                    16/09/2008 18:51:53 File: C:\pagefile.sys skipped locked
                    16/09/2008 18:51:53 File: C:\rapport.txt ok scanned
                    16/09/2008 18:51:53 File: C:\resultat-scan-oad.txt ok scanned
                    16/09/2008 18:51:53 File: C:\resultat.txt ok scanned
                    16/09/2008 18:51:53 File: C:\sqmdata00.sqm ok scanned
                    16/09/2008 18:51:53 File: C:\sqmnoopt00.sqm ok scanned
                    16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\NTUSER.DAT ok scanned
                    16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\ntuser.dat.LOG ok scanned
                    16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\ntuser.ini ok scanned
                    16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\Application Data\desktop.ini ok scanned
                    16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\Application Data\Microsoft\Internet Explorer\brndlog.bak ok scanned
                    16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\Application Data\Microsoft\Internet Explorer\brndlog.txt ok scanned
                    16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\Cookies\index.dat ok scanned
                    16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\Favoris\Site Unicornis par Virginie64700.url ok scanned
                    16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\Favoris\•°•° UNICORNIS °•°•.url ok scanned
                    16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\Local Settings\desktop.ini ok scanned
                    16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\Local Settings\Application Data\IconCache.db ok scanned
                    16/09/2008 18:51:54 File: C:\Documents and Settings\Administrateur\Local Settings\Application Data\ShLog.txt ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_59R.wmdb ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.DTD ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.XML ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Historique\desktop.ini ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Historique\History.IE5\desktop.ini ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Historique\History.IE5\index.dat ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\desktop.ini ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\index.dat ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\0LUV8TEJ\desktop.ini ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\6F23GRI7\desktop.ini ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\GLCR0VIF\desktop.ini ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\UTW3EL25\desktop.ini ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Menu Démarrer\desktop.ini ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Assistance à distance.lnk ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\desktop.ini ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Lecteur Windows Media.lnk ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Assistant Compatibilité des programmes.lnk ok scanned
                    16/09/2008 18:51:55 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Bloc-notes.lnk ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\desktop.ini ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Explorateur Windows.lnk ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Invite de commandes.lnk ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Synchroniser.lnk ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Visite guidée de Windows XP.lnk ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Accessibilité\Clavier visuel.lnk ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Accessibilité\desktop.ini ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Accessibilité\Gestionnaire d'utilitaires.lnk ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Accessibilité\Loupe.lnk ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Divertissement\desktop.ini ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Divertissement\Lecteur Windows Media.lnk ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Démarrage\desktop.ini ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\amipro.sam ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\excel.xls ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\excel4.xls ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\lotus.wk4 ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\powerpnt.ppt ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\presenta.shw ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\quattro.wb2 ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\sndrec.wav ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\winword.doc ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\winword2.doc ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\wordpfct.wpd ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\Modèles\wordpfct.wpg ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\SendTo\Bureau (créer un raccourci).DeskLink ok iChecker
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\SendTo\desktop.ini ok scanned
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\SendTo\Destinataire.MAPIMail ok iChecker
                    16/09/2008 18:51:56 File: C:\Documents and Settings\Administrateur\SendTo\Dossier compressé.ZFSendToTarget ok iChecker
                    16/09/2008 18:51:56 File: C:\Documents and Settings\All Users\Application Data\desktop.ini ok scanned
                    16/09/2008 18:51:57 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav6\kav6-0607g.xml ok scanned
                    16/09/2008 18:51:57 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav6\kav6-0607g.xml.klz ok scanned
                    16/09/2008 18:51:57 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\av-i386-0607g.xml ok scanned
                    16/09/2008 18:51:57 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\av-i386-0607g.xml.klz ok scanned
                    16/09/2008 18:51:57 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base001c.avc ok scanned
                    16/09/2008 18:51:57 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base002c.avc ok scanned
                    16/09/2008 18:51:57 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base003c.avc ok scanned
                    16/09/2008 18:51:58 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base004c.avc ok scanned
                    16/09/2008 18:51:58 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base005c.avc ok scanned
                    16/09/2008 18:51:58 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base006c.avc ok scanned
                    16/09/2008 18:51:58 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base007c.avc ok scanned
                    16/09/2008 18:51:58 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base008c.avc ok scanned
                    16/09/2008 18:51:58 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base009c.avc ok scanned
                    16/09/2008 18:51:58 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base010c.avc ok scanned
                    16/09/2008 18:51:58 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base011c.avc ok scanned
                    16/09/2008 18:51:58 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base012c.avc ok scanned
                    16/09/2008 18:51:58 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base013c.avc ok scanned
                    16/09/2008 18:51:59 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base014c.avc ok scanned
                    16/09/2008 18:51:59 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base015c.avc ok scanned
                    16/09/2008 18:51:59 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base016c.avc ok scanned
                    16/09/2008 18:51:59 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base017c.avc ok scanned
                    16/09/2008 18:51:59 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base018c.avc ok scanned
                    16/09/2008 18:51:59 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base019c.avc ok scanned
                    16/09/2008 18:51:59 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base020c.avc ok scanned
                    16/09/2008 18:51:59 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base021c.avc ok scanned
                    16/09/2008 18:51:59 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base022c.avc ok scanned
                    16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base023c.avc ok scanned
                    16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base024c.avc ok scanned
                    16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base025c.avc ok scanned
                    16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base026c.avc ok scanned
                    16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base027c.avc ok scanned
                    16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base028c.avc ok scanned
                    16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base029c.avc ok scanned
                    16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\base030c.avc ok scanned
                    16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\chuka.avc ok scanned
                    16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\fa001.avc ok scanned
                    16/09/2008 18:52:00 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\kernel.avc ok scanned
                    16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krn001.avc ok scanned
                    16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krn002.avc ok scanned
                    16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krn003.avc ok scanned
                    16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krn004.avc ok scanned
                    16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krn005.avc ok scanned
                    16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krndos.avc ok scanned
                    16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krnengn.avc ok scanned
                    16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krnexe.avc ok scanned
                    16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krnexe32.avc ok scanned
                    16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krngen.avc ok scanned
                    16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krnjava.avc ok scanned
                    16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krnmacro.avc ok scanned
                    16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krnun001.avc ok scanned
                    16/09/2008 18:52:01 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krnun002.avc ok scanned
                    16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krnun003.avc ok scanned
                    16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\krnun004.avc ok scanned
                    16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\ocr.avc ok scanned
                    16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\avc\i386\smart.avc ok scanned
                    16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\klava\emu\i386\emu-i386-0607g.xml ok scanned
                    16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\klava\emu\i386\emu-i386-0607g.xml.klz ok scanned
                    16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\klava\wa\i386\wa-i386-0607g.xml ok scanned
                    16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\av\klava\wa\i386\wa-i386-0607g.xml.klz ok scanned
                    16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\blst\black.lst ok scanned
                    16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\blst\blst-0607g.xml ok scanned
                    16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\blst\blst-0607g.xml.klz ok scanned
                    16/09/2008 18:52:02 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\ah-i386-0607g.krg ok scanned
                    16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\ah-i386-0607g.pbv ok scanned
                    16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\ah-i386-0607g.xml ok scanned
                    16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\ah-i386-0607g.xml.klz ok scanned
                    16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\ckah.set ok scanned
                    16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\fwpresets.ini ok scanned
                    16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\fwpresets.xms ok scanned
                    16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\ids00234.kdz archive ZIP
                    16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\ids00234.kdz/ids00234.sys ok scanned
                    16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\ids00234.kdz/ids00234.vxd ok scanned
                    16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\ids00234.kdz ok scanned
                    16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz archive ZIP
                    16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_actn.kdb ok scanned
                    16/09/2008 18:52:03 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_lbcf.kdb ok scanned
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_objci386.kdb ok scanned
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_ocroi386.kdb ok scanned
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_ocrti386.kdb ok scanned
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_proci386.kdb ok scanned
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_sget.kdb ok scanned
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_sgnt.kdb ok scanned
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_sgtt.kdb ok scanned
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_strt.kdb ok scanned
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_vdci.kdb ok scanned
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids_vdct.kdb ok scanned
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz/ids__mft.kdb ok scanned
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\idsbase.kdz ok scanned
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\klcr.kdz archive ZIP
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\klcr.kdz/klcr.vxd ok scanned
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\klcr.kdz/klcr.sys ok scanned
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\klcr.kdz ok scanned
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\klfw.kdz archive ZIP
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\klfw.kdz/klfw.vxd ok scanned
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\klfw.kdz/klfw.sys ok scanned
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\klfw.kdz ok scanned
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\klick.kdz archive ZIP
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\ids\i386\klick.kdz/klick.vxd ok scanned
                    16/09/2008 18:52:04 File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\bases\
                    0
                    1. verni29 Contributeur sécurité
                      ixillum,

                      l'explication est simple.
                      Lors de ton scan en ligne, il a trouvé le fichier qu'on a supprimé et qui a été supprimé par OTmoveIT2 ( en fait placé en quarantaine ) et les 24 autres étaient dans les points de restauration de ton PC.

                      Tu me dis avaoir supprimé une bonne partie de virus. Quels outils avais-tu utilisé ?
                      0
                      1. verni29 Contributeur sécurité
                        ixillum,

                        si tu arrives à lire le message, peux -tu attendre que les problèmes sur le forum pour reprendre la discussion ?
                        Cela arrive parfois et dans ce cas il est impossible de visualiser les réponses dans une discussion.

                        En attendant, AVPTool n'a rien trouvé.

                        Tu vas télécharger ComBoFix sur le bureau.
                        http://download.bleepingcomputer.com/sUBs/ComboFix.exe

                        Pour un meilleur résultat, on va le passer aussi en mode sans échec.

                        Redémarre l'ordinateur en mode sans échec ( touche F8 ) et choisis ton compte.

                        Double sur Combofix.exe et suis les invites.
                        Une fois le scan fini, un rapport va apparaitre.

                        Copie/colle ce rapport dans ta prochaine réponse.
                        Si tu ne le trouves pas, il est à C:\ComboFix.txt.

                        A+
                        0
                        1. ixilium Auteur
                          Voici le scan malheureusement je pourrai mettre que le debut et la fin du scan car j'arrive pas a tous mettre il est trop long .. plus de 100 000 fichier scanner....
                          donc bizzare ce scan il me dit ke j'ai que 1 virus alors que le 1er scan me disait 4 virus et 24 ou 25 fichier infecté!!!
                          Conclusion je sais plus quoi pensée........ HELP ME SVP
                          Merci a ces âmes charitable qui voudron bien m'aider .....

                          Scan
                          ----
                          Scanned: 101723
                          Detected: 1
                          Untreated: 0
                          Start time: 16/09/2008 18:49:04
                          Duration: 02:01:23
                          Finish time: 16/09/2008 20:48:27

                          Detected
                          --------
                          Status Object
                          ------ ------
                          disinfected: virus Virus.Win32.Virut.av File: C:\_OTMoveIt\MovedFiles\09162008_182449\WINDOWS\OPTIONS\CABS\lanset64.exe

                          Events
                          ------
                          Time Name Status Reason
                          ---- ---- ------ ------
                          16/09/2008 18:49:04 Running module: smss.exe\smss.exe ok scanned
                          16/09/2008 18:49:05 File: C:\WINDOWS\System32\smss.exe ok scanned
                          16/09/2008 18:49:06 Running module: smss.exe\ntdll.dll ok scanned
                          16/09/2008 18:49:06 File: C:\WINDOWS\system32\ntdll.dll ok scanned
                          16/09/2008 18:49:06 Running module: csrss.exe\csrss.exe ok scanned
                          16/09/2008 18:49:06 File: C:\WINDOWS\system32\csrss.exe ok scanned
                          16/09/2008 18:49:06 Running module: csrss.exe\ntdll.dll ok scanned

                          16/09/2008 20:44:14 File: F:\RECYCLER\S-1-5-21-960813188-2920054522-1095206701-1008\Df16\Piste audio 14.wav ok scanned
                          16/09/2008 20:44:14 File: F:\RECYCLER\S-1-5-21-960813188-2920054522-1095206701-1008\Df17\Track01.cda ok scanned
                          16/09/2008 20:44:14 File: F:\RECYCLER\S-1-5-21-960813188-2920054522-1095206701-1008\Df7\Thumbs.db ok scanned
                          16/09/2008 20:44:14 File: F:\RECYCLER\S-1-5-21-960813188-2920054522-1095206701-1008\Df7\Thumbs.db:encryptable ok iChecker
                          16/09/2008 20:44:15 File: F:\System Volume Information\ skipped by rights
                          16/09/2008 20:44:15 File: c:\_otmoveit\movedfiles\09162008_182449\windows\options\cabs\lanset64.exe detected virus 'Virus.Win32.Virut.av'
                          16/09/2008 20:48:27 File: c:\_otmoveit\movedfiles\09162008_182449\windows\options\cabs\lanset64.exe backed up
                          16/09/2008 20:48:27 File: c:\_otmoveit\movedfiles\09162008_182449\windows\options\cabs\lanset64.exe disinfected virus 'Virus.Win32.Virut.av'

                          Statistics
                          ----------
                          Object Scanned Detected Untreated Deleted Moved to Quarantine Archives Packed files Password protected Corrupted
                          ------ ------- -------- --------- ------- ------------------- -------- ------------ ------------------ ---------
                          All objects 101723 1 0 0 0 1624 311 8 0
                          System memory 535 0 0 0 0 1 1 0 0
                          Startup objects 499 0 0 0 0 0 10 0 0
                          Disk boot sectors 4 0 0 0 0 0 0 0 0
                          Disque local (C:) 93568 1 0 0 0 1576 298 8 0
                          Externe... (F:) 7117 0 0 0 0 47 2 0 0

                          Settings
                          --------
                          Parameter Value
                          --------- -----
                          Security Level High
                          Action Prompt for action when the scan is complete
                          Run mode Manually
                          File types Scan all files
                          Scan only new and changed files No
                          Scan archives All
                          Scan embedded OLE objects All
                          Skip if object is larger than No
                          Skip if scan takes longer than No
                          Parse email formats Yes
                          Scan password-protected archives No
                          Enable iChecker technology Yes
                          Enable iSwift technology Yes
                          Show detected threats on "Detected" tab Yes
                          Rootkits search Yes
                          Deep rootkits search No
                          Use heuristic analyzer Yes

                          Quarantine
                          ----------
                          Status Object Size Added
                          ------ ------ ---- -----

                          Backup
                          ------
                          Status Object Size
                          ------ ------ ----
                          0
                          1. verni29 Contributeur sécurité
                            Je poste un message. Parfois cette astuce permet de visualisé les messages en cas de dysfonctionnement sur le forum.
                            0
                            1. verni29 Contributeur sécurité
                              ixillium,

                              Le forum est unn peu en bazard ce soir.
                              As-tu vu le message sur combofix ?
                              passe cet outil, stp.

                              A+
                              0
                              1. ixilium Auteur
                                j'arrive pas a mettre le rapport de mon scan .. le fichier txt et trod enorme.. comment faire une idée svp??? Merci d'avance!!
                                Cordialement ixilium
                                0
                                1. ixilium Auteur
                                  ha oué y a eu gros bug..... erf dsl pour ces post inutile et merci verni29 je telecharge desuite cela!!
                                  et bien le piti log que j'ai utiliser c'etait "rmvirut.exe" je dl ca desuite merci de m'aider !!
                                  0
                                  1. verni29 Contributeur sécurité
                                    OK, continuons, on va voir si le forum fonctionne correctemment maintenant.

                                    A+
                                    0
                                    1. ixilium Auteur
                                      Bon scan avec combo terminer rapport dans le message suivant !!
                                      0
                                      1. ixilium Auteur
                                        je pense que c'est ça qui fallai faire avec combo :

                                        ComboFix 08-09-15.02 - Nat 2008-09-16 22:41:59.1 - NTFSx86 MINIMAL
                                        Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.142 [GMT 2:00]
                                        Lancé depuis: C:\Documents and Settings\Nat\Bureau\ComboFix.exe

                                        [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
                                        .

                                        (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                                        .

                                        C:\Documents and Settings\Nat\Cookies\nat@clickintext[2].txt

                                        .
                                        ((((((((((((((((((((((((((((( Fichiers créés du 2008-08-16 au 2008-09-16 ))))))))))))))))))))))))))))))))))))
                                        .

                                        2008-09-16 18:31 . 2008-09-16 18:43 137,248 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
                                        2008-09-16 18:31 . 2008-09-16 18:43 3,728 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
                                        2008-09-16 18:30 . 2008-09-16 18:46 <REP> d-------- C:\WINDOWS\LastGood
                                        2008-09-16 18:24 . 2008-09-16 18:24 <REP> d-------- C:\_OTMoveIt
                                        2008-09-16 18:05 . 2008-09-16 18:05 <REP> d-------- C:\Program Files\Trend Micro
                                        2008-09-16 13:26 . 2008-09-16 13:26 <REP> d-------- C:\WINDOWS\system32\fr
                                        2008-09-16 13:26 . 2008-09-16 13:26 <REP> d-------- C:\WINDOWS\system32\bits
                                        2008-09-16 13:26 . 2008-09-16 13:26 <REP> d-------- C:\WINDOWS\l2schemas
                                        2008-09-16 13:22 . 2008-09-16 13:27 <REP> d-------- C:\WINDOWS\ServicePackFiles
                                        2008-09-16 13:21 . 2008-09-16 13:21 <REP> d-------- C:\Program Files\SumatraPDF
                                        2008-09-16 13:21 . 2008-09-16 13:22 <REP> d-------- C:\Documents and Settings\Nat\Application Data\SumatraPDF
                                        2008-09-16 08:57 . 2004-08-03 22:41 1,309,184 --------- C:\WINDOWS\system32\drivers\mtlstrm.sys
                                        2008-09-15 15:47 . 2008-06-23 18:28 6,066,176 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll
                                        2008-09-15 15:47 . 2007-04-17 11:32 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat
                                        2008-09-15 15:47 . 2007-03-08 07:10 1,048,576 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui
                                        2008-09-15 15:47 . 2008-06-23 18:28 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll
                                        2008-09-15 15:47 . 2008-06-23 18:28 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll
                                        2008-09-15 15:47 . 2008-06-23 18:28 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll
                                        2008-09-15 15:47 . 2008-06-23 18:28 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll
                                        2008-09-15 15:47 . 2008-06-23 18:28 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll
                                        2008-09-15 15:47 . 2008-06-23 11:20 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe
                                        2008-09-15 15:46 . 2008-09-16 13:26 <REP> d-------- C:\WINDOWS\system32\fr-fr
                                        2008-09-14 02:14 . 2008-09-14 02:17 <REP> d-------- C:\Program Files\Yahoo!
                                        2008-09-14 02:14 . 2008-09-14 02:14 <REP> d-------- C:\Program Files\CCleaner
                                        2008-09-14 02:09 . 2008-09-14 02:09 <REP> d-------- C:\WINDOWS\system32\Kaspersky Lab
                                        2008-09-14 01:51 . 2008-09-16 20:16 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
                                        2008-09-14 01:20 . 2008-08-23 01:09 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage réseau
                                        2008-09-14 01:20 . 2008-08-23 01:09 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
                                        2008-09-14 01:20 . 2008-08-22 23:16 <REP> d--h----- C:\Documents and Settings\Administrateur\Modèles
                                        2008-09-14 01:20 . 2008-08-23 01:09 <REP> d-------- C:\Documents and Settings\Administrateur\Mes documents
                                        2008-09-14 01:20 . 2008-08-23 01:09 <REP> dr------- C:\Documents and Settings\Administrateur\Menu Démarrer
                                        2008-09-14 01:20 . 2008-08-22 23:23 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
                                        2008-09-14 01:20 . 2008-08-23 01:09 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
                                        2008-09-14 01:20 . 2008-09-14 01:20 <REP> d-------- C:\Documents and Settings\Administrateur
                                        2008-09-13 21:44 . 2008-09-13 21:44 2,855 --a------ C:\WINDOWS\system32\svchost.PIF
                                        2008-09-13 21:43 . 2008-09-13 21:43 <REP> d--h----- C:\WINDOWS\PIF
                                        2008-09-13 20:15 . 2008-09-13 20:15 <REP> d-------- C:\Program Files\Kaspersky Lab
                                        2008-09-13 20:11 . 2008-09-13 20:11 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
                                        2008-09-13 17:13 . 2008-09-14 01:56 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
                                        2008-09-13 16:38 . 2008-09-13 21:24 <REP> d-------- C:\Program Files\FileZilla FTP Client
                                        2008-09-13 16:38 . 2008-09-13 20:50 <REP> d-------- C:\Documents and Settings\Nat\Application Data\FileZilla
                                        2008-09-13 15:48 . 2008-09-13 15:48 (2) -rahs-ot- C:\WINDOWS\winstart.bat
                                        2008-09-13 15:47 . 2008-09-13 16:56 <REP> d-------- C:\Program Files\UnHackMe
                                        2008-09-13 15:44 . 2008-09-13 21:13 445,440 --a------ C:\WINDOWS\RunGuard.exe
                                        2008-09-13 15:44 . 2003-09-06 16:55 57,556 --a------ C:\WINDOWS\guard.bmp
                                        2008-09-13 15:44 . 2000-12-12 20:56 16,384 --a------ C:\WINDOWS\WinBait.org
                                        2008-09-13 15:44 . 2008-09-13 21:13 16,384 --a------ C:\WINDOWS\WinBait.exe
                                        2008-09-13 15:43 . 2008-09-13 15:43 <REP> d-------- C:\Program Files\Greatis
                                        2008-09-13 15:34 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
                                        2008-09-13 15:34 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
                                        2008-09-13 15:34 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
                                        2008-09-12 20:53 . 2008-09-12 20:58 972 --a------ C:\WINDOWS\system32\tmp.reg
                                        2008-09-12 19:03 . 2008-09-14 01:56 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
                                        2008-09-12 15:07 . 2008-09-12 15:07 <REP> d-------- C:\Program Files\Opera
                                        2008-09-08 18:51 . 2008-09-08 18:51 <REP> d-------- C:\Documents and Settings\Nat\Application Data\vlc
                                        2008-09-08 17:36 . 2008-09-08 17:36 <REP> d-------- C:\Program Files\VideoLAN
                                        2008-09-06 19:24 . 2008-09-06 19:44 <REP> d-------- C:\Program Files\Alice
                                        2008-09-06 19:17 . 2008-09-06 19:17 <REP> d-------- C:\WINDOWS\OPTIONS
                                        2008-09-06 19:17 . 2008-09-06 19:17 <REP> d-------- C:\Program Files\Realtek
                                        2008-09-06 19:17 . 2006-06-16 19:56 83,968 --a------ C:\WINDOWS\system32\drivers\Rtnicxp.sys
                                        2008-08-25 01:44 . 2008-08-25 01:44 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
                                        2008-08-24 23:51 . 2008-08-24 23:52 <REP> d-------- C:\Program Files\Messenger Plus! Live
                                        2008-08-23 21:43 . 2008-09-14 19:28 <REP> d-------- C:\Documents and Settings\Nat\Contacts
                                        2008-08-23 21:43 . 2008-08-23 21:43 268 --ah----- C:\sqmdata00.sqm
                                        2008-08-23 21:43 . 2008-08-23 21:43 244 --ah----- C:\sqmnoopt00.sqm
                                        2008-08-23 21:38 . 2006-08-01 10:40 262,254 --a------ C:\WINDOWS\system32\VM31bPrp.Ax
                                        2008-08-23 21:38 . 2008-09-13 21:13 147,456 --a------ C:\WINDOWS\VMCap.exe
                                        2008-08-23 21:38 . 2003-05-15 17:17 61,440 --a------ C:\WINDOWS\system32\VM31bSTI.dll
                                        2008-08-23 21:38 . 2008-09-13 20:45 40,960 --a------ C:\WINDOWS\vm_sti.exe
                                        2008-08-23 21:37 . 2008-08-23 21:37 <REP> d-------- C:\Program Files\Philips
                                        2008-08-23 21:37 . 2005-02-26 16:25 91,527 --a------ C:\WINDOWS\system32\drivers\usbVM31b.sys
                                        2008-08-23 21:37 . 2008-09-13 21:13 53,248 --a------ C:\WINDOWS\amcap.exe
                                        2008-08-23 21:34 . 2008-08-23 21:34 <REP> d----c--- C:\WINDOWS\system32\DRVSTORE
                                        2008-08-23 21:27 . 2008-08-23 21:33 <REP> d-------- C:\Program Files\Windows Live
                                        2008-08-23 21:27 . 2008-08-23 21:32 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
                                        2008-08-23 21:26 . 2008-08-23 21:26 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
                                        2008-08-23 21:07 . 2008-06-14 19:33 272,768 --------- C:\WINDOWS\system32\drivers\bthport.sys
                                        2008-08-23 21:07 . 2008-06-14 19:33 272,768 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys
                                        2008-08-23 21:07 . 2008-05-08 16:02 203,136 -----c--- C:\WINDOWS\system32\dllcache\rmcast.sys
                                        2008-08-23 21:06 . 2008-04-11 21:05 691,712 -----c--- C:\WINDOWS\system32\dllcache\inetcomm.dll
                                        2008-08-23 21:04 . 2008-09-16 09:27 <REP> d--h----- C:\WINDOWS\$hf_mig$
                                        2008-08-23 21:04 . 2007-08-10 08:18 26,488 --a------ C:\WINDOWS\system32\spupdsvc.exe
                                        2008-08-23 20:55 . 2007-07-30 19:19 43,352 --a------ C:\WINDOWS\system32\wups2.dll
                                        2008-08-23 20:55 . 2007-07-30 19:19 38,232 --a------ C:\WINDOWS\system32\wucltui.dll.mui
                                        2008-08-23 20:55 . 2007-07-30 19:20 30,040 --a------ C:\WINDOWS\system32\wuaucpl.cpl.mui
                                        2008-08-23 20:55 . 2007-07-30 19:19 30,040 --a------ C:\WINDOWS\system32\wuapi.dll.mui
                                        2008-08-23 20:55 . 2007-07-30 19:18 21,336 --a------ C:\WINDOWS\system32\wuaueng.dll.mui
                                        2008-08-23 20:41 . 2008-08-23 20:41 <REP> d--hs---- C:\Documents and Settings\Nat\UserData
                                        2008-08-23 02:46 . 2008-08-23 02:46 111,928 --a------ C:\WINDOWS\system32\PnkBstrB.exe
                                        2008-08-23 02:45 . 2008-08-23 02:45 <REP> d-------- C:\WINDOWS\system32\LogFiles
                                        2008-08-23 02:45 . 2008-08-23 02:45 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe
                                        2008-08-23 00:49 . 2008-08-23 00:49 <REP> d-------- C:\Program Files\directx
                                        2008-08-23 00:42 . 2008-08-23 01:09 <REP> d-------- C:\Sierra
                                        2008-08-23 00:42 . 2008-08-23 01:10 507 --a------ C:\WINDOWS\SIERRA.INI
                                        2008-08-23 00:41 . 2008-09-14 00:45 1,133,568 --a------ C:\Program Files\SumatraPDF.exe
                                        2008-08-23 00:39 . 2008-08-23 00:39 <REP> d-------- C:\Program Files\Gadwin Systems
                                        2008-08-23 00:33 . 2008-08-23 00:33 <REP> d-------- C:\Program Files\PowerISO
                                        2008-08-23 00:28 . 2008-08-23 00:28 <REP> d-------- C:\Program Files\TechCity Solutions
                                        2008-08-23 00:19 . 2008-09-13 21:24 <REP> d-------- C:\Program Files\iSafer
                                        2008-08-23 00:01 . 2008-04-14 04:34 16,384 --a------ C:\WINDOWS\system32\ipsink.ax
                                        2008-08-23 00:01 . 2008-04-13 20:46 15,232 --a------ C:\WINDOWS\system32\drivers\streamip.sys
                                        2008-08-23 00:01 . 1995-05-05 11:50 14,025 --------- C:\WINDOWS\TWAINCAP.INI
                                        2008-08-23 00:01 . 2008-04-13 20:46 11,136 --a------ C:\WINDOWS\system32\drivers\slip.sys
                                        2008-08-23 00:01 . 2008-04-13 20:46 10,880 --a------ C:\WINDOWS\system32\drivers\ndisip.sys
                                        2008-08-23 00:01 . 1997-06-11 09:02 5,526 --------- C:\WINDOWS\TWAINCAP.SRC
                                        2008-08-23 00:01 . 2008-04-13 20:39 5,504 --a------ C:\WINDOWS\system32\drivers\mstee.sys

                                        .
                                        (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                                        .
                                        2008-09-13 19:24 290,816 ----a-w C:\WINDOWS\system32\tbctray.exe
                                        2008-09-13 19:20 51,712 ----a-w C:\WINDOWS\system32\w32tm.exe
                                        2008-09-13 19:20 5,632 ----a-w C:\WINDOWS\system32\write.exe
                                        2008-09-13 19:20 34,304 ----a-w C:\WINDOWS\system32\vssadmin.exe
                                        2008-09-13 19:20 32,256 ----a-w C:\WINDOWS\system32\wupdmgr.exe
                                        2008-09-13 19:20 258,048 ----a-w C:\WINDOWS\system32\vlwbsf.exe
                                        2008-09-13 19:20 119,808 ----a-w C:\WINDOWS\system32\winmine.exe
                                        2008-09-13 19:20 11,776 ----a-w C:\WINDOWS\system32\winmsd.exe
                                        2008-09-13 19:18 62,976 ----a-w C:\WINDOWS\system32\rsopprov.exe
                                        2008-09-13 19:18 57,344 ----a-w C:\WINDOWS\system32\sol.exe
                                        2008-09-13 19:18 53,248 ----a-w C:\WINDOWS\system32\rsm.exe
                                        2008-09-13 19:18 49,664 ----a-w C:\WINDOWS\system32\rsmui.exe
                                        2008-09-13 19:18 31,232 ----a-w C:\WINDOWS\system32\sc.exe
                                        2008-09-13 19:18 25,600 ----a-w C:\WINDOWS\system32\routemon.exe
                                        2008-09-13 19:18 24,576 ----a-w C:\WINDOWS\system32\rsmsink.exe
                                        2008-09-13 19:18 21,504 ----a-w C:\WINDOWS\system32\route.exe
                                        2008-09-13 19:18 17,408 ----a-w C:\WINDOWS\system32\runas.exe
                                        2008-09-13 19:18 16,384 ----a-w C:\WINDOWS\system32\rwinsta.exe
                                        2008-09-13 19:18 15,360 ----a-w C:\WINDOWS\system32\shadow.exe
                                        2008-09-13 19:18 139,264 ----a-w C:\WINDOWS\system32\sndvol32.exe
                                        2008-09-13 19:18 10,240 ----a-w C:\WINDOWS\system32\sfc.exe
                                        2008-09-13 19:16 9,216 ----a-w C:\WINDOWS\system32\lpr.exe
                                        2008-09-13 19:15 9,728 ----a-w C:\WINDOWS\system32\label.exe
                                        2008-09-13 19:14 80,896 ----a-w C:\WINDOWS\system32\charmap.exe
                                        2008-09-13 19:13 37,888 ----a-w C:\WINDOWS\system32\asr_ldm.exe
                                        2008-09-13 19:13 305,664 ----a-w C:\WINDOWS\IsUn040c.exe
                                        2008-09-13 19:13 25,600 ----a-w C:\WINDOWS\twunk_32.exe
                                        2008-09-13 19:13 19,968 ----a-w C:\WINDOWS\system32\arp.exe
                                        2008-09-13 19:13 15,872 ----a-w C:\WINDOWS\TASKMAN.EXE
                                        2008-09-13 18:54 31,744 ----a-w C:\WINDOWS\system32\ntsd.exe
                                        2008-09-13 18:51 132,608 ----a-w C:\WINDOWS\system32\rsvp.exe
                                        2008-09-13 18:48 47,104 ----a-w C:\WINDOWS\system32\drwtsn32.exe
                                        2008-09-13 18:48 1,622,016 ----a-w C:\WINDOWS\system32\nwiz.exe
                                        2008-09-13 18:47 8,192 ----a-w C:\WINDOWS\system32\winhlp32.exe
                                        2008-09-13 18:45 159,744 ----a-w C:\WINDOWS\system32\nvsvc32.exe
                                        2008-09-06 17:25 --------- d--h--w C:\Program Files\InstallShield Installation Information
                                        2008-08-22 23:31 --------- d-----w C:\Program Files\GameSpy Arcade
                                        2008-08-22 23:31 --------- d-----w C:\Program Files\EA GAMES
                                        2008-08-22 23:18 --------- d-----w C:\Program Files\7-Zip
                                        2008-08-22 23:09 --------- d-----w C:\Program Files\Sierra On-Line
                                        2008-08-22 21:59 --------- d-----w C:\Program Files\Pinnacle
                                        2008-08-22 21:55 --------- d-----w C:\Documents and Settings\All Users\Application Data\NVIDIA
                                        2008-08-22 21:54 --------- d-----w C:\Documents and Settings\All Users\Application Data\nView_Profiles
                                        2008-08-22 21:52 --------- d-----w C:\Program Files\Fichiers communs\Voyetra
                                        2008-08-22 21:49 --------- d-----w C:\Program Files\VideoLogic
                                        2008-08-22 21:49 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
                                        2008-08-22 21:24 --------- d-----w C:\Program Files\microsoft frontpage
                                        2008-08-22 21:20 --------- d-----w C:\Program Files\Services en ligne
                                        2008-07-07 20:28 253,952 ----a-w C:\WINDOWS\system32\es.dll
                                        2008-06-24 16:44 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
                                        2008-06-23 16:28 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
                                        2008-06-20 17:47 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll
                                        .

                                        ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
                                        .
                                        .
                                        *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
                                        REGEDIT4

                                        [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                                        "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360]

                                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                                        "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-10-22 7700480]
                                        "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-10-22 86016]
                                        "BigDogPath"="C:\WINDOWS\VM_STI.EXE" [2008-09-13 40960]
                                        "AliceSAV"="C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe" [2008-09-13 84480]
                                        "TraySantaCruz"="C:\WINDOWS\system32\tbctray.exe" [2008-09-13 290816]
                                        "nwiz"="nwiz.exe" [2008-09-13 C:\WINDOWS\system32\nwiz.exe]

                                        C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
                                        iSafer.lnk - C:\Program Files\iSafer\iSafer.exe [2008-08-23 1015808]
                                        TrayMin210.exe.lnk - C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe [2008-08-23 278528]

                                        [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
                                        "{F552DDE6-2090-4bf4-B924-6141E87789A5}"= "C:\Program Files\Greatis\RegRunSuite\RRShell.dll" [2004-11-02 368711]

                                        [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
                                        "VIDC.PIM1"= PCLEPIM1.dll

                                        [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Pinnacle Scheduler.lnk]
                                        path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Pinnacle Scheduler.lnk
                                        backup=C:\WINDOWS\pss\Pinnacle Scheduler.lnkCommon Startup

                                        [HKEY_LOCAL_MACHINE\software\microsoft\security center]
                                        "AntiVirusDisableNotify"=dword:00000001
                                        "AntiVirusOverride"=dword:00000001
                                        "FirewallOverride"=dword:00000001

                                        [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
                                        "EnableFirewall"= 0 (0x0)

                                        [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
                                        "%windir%\\system32\\sessmgr.exe"=
                                        "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
                                        "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
                                        "C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"=
                                        "%windir%\\Network Diagnostic\\xpnetdiag.exe"=

                                        S2 iSafer;iSafer - Personal Firewall;C:\Program Files\iSafer\iSaferSvr.exe [2008-09-13 495104]
                                        S3 pctvvbi;PCTVVBI;C:\WINDOWS\system32\DRIVERS\pctvvbi.sys [2002-11-11 6400]
                                        S3 tbcspud;Santa Cruz Driver;C:\WINDOWS\system32\drivers\tbcspud.sys [2001-12-15 144512]
                                        S3 tbcwdm;Santa Cruz WDM Driver;C:\WINDOWS\system32\drivers\tbcwdm.sys [2001-12-15 536768]
                                        .
                                        .
                                        ------- Examen supplémentaire -------
                                        .
                                        R0 -: HKCU-Main,Start Page = hxxp://www.google.fr/
                                        .
                                        .
                                        ------- File Associations -------
                                        .
                                        chm.file=%1
                                        .

                                        **************************************************************************

                                        catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                                        Rootkit scan 2008-09-16 22:45:18
                                        Windows 5.1.2600 Service Pack 3 NTFS

                                        Recherche de processus cachés ...

                                        Recherche d'éléments en démarrage automatique cachés ...

                                        HKLM\Software\Microsoft\Windows\CurrentVersion\Run
                                        AliceSAV = C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

                                        Recherche de fichiers cachés ...

                                        Scan terminé avec succès
                                        Fichiers cachés: 0

                                        **************************************************************************
                                        .
                                        Heure de fin: 2008-09-16 22:47:24
                                        ComboFix-quarantined-files.txt 2008-09-16 20:47:20

                                        Avant-CF: 148,616,613,888 octets libres
                                        AprŠs-CF: 149,196,046,336 octets libres

                                        241 --- E O F --- 2008-09-16 12:49:56

                                        Perso je comprend rien a ce qui est ecrie une tite explication au passage serai la bienevenu :) c'est toujour bien d'en apprendre plus !! Cordialement ixilium
                                        0
                                        1. ixilium Auteur
                                          je pense que c'est ça qui fallai faire avec combo :

                                          ComboFix 08-09-15.02 - Nat 2008-09-16 22:41:59.1 - NTFSx86 MINIMAL
                                          Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.142 [GMT 2:00]
                                          Lancé depuis: C:\Documents and Settings\Nat\Bureau\ComboFix.exe

                                          [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
                                          .

                                          (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                                          .

                                          C:\Documents and Settings\Nat\Cookies\nat@clickintext[2].txt

                                          .
                                          ((((((((((((((((((((((((((((( Fichiers créés du 2008-08-16 au 2008-09-16 ))))))))))))))))))))))))))))))))))))
                                          .

                                          2008-09-16 18:31 . 2008-09-16 18:43 137,248 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
                                          2008-09-16 18:31 . 2008-09-16 18:43 3,728 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
                                          2008-09-16 18:30 . 2008-09-16 18:46 <REP> d-------- C:\WINDOWS\LastGood
                                          2008-09-16 18:24 . 2008-09-16 18:24 <REP> d-------- C:\_OTMoveIt
                                          2008-09-16 18:05 . 2008-09-16 18:05 <REP> d-------- C:\Program Files\Trend Micro
                                          2008-09-16 13:26 . 2008-09-16 13:26 <REP> d-------- C:\WINDOWS\system32\fr
                                          2008-09-16 13:26 . 2008-09-16 13:26 <REP> d-------- C:\WINDOWS\system32\bits
                                          2008-09-16 13:26 . 2008-09-16 13:26 <REP> d-------- C:\WINDOWS\l2schemas
                                          2008-09-16 13:22 . 2008-09-16 13:27 <REP> d-------- C:\WINDOWS\ServicePackFiles
                                          2008-09-16 13:21 . 2008-09-16 13:21 <REP> d-------- C:\Program Files\SumatraPDF
                                          2008-09-16 13:21 . 2008-09-16 13:22 <REP> d-------- C:\Documents and Settings\Nat\Application Data\SumatraPDF
                                          2008-09-16 08:57 . 2004-08-03 22:41 1,309,184 --------- C:\WINDOWS\system32\drivers\mtlstrm.sys
                                          2008-09-15 15:47 . 2008-06-23 18:28 6,066,176 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll
                                          2008-09-15 15:47 . 2007-04-17 11:32 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat
                                          2008-09-15 15:47 . 2007-03-08 07:10 1,048,576 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui
                                          2008-09-15 15:47 . 2008-06-23 18:28 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll
                                          2008-09-15 15:47 . 2008-06-23 18:28 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll
                                          2008-09-15 15:47 . 2008-06-23 18:28 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll
                                          2008-09-15 15:47 . 2008-06-23 18:28 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll
                                          2008-09-15 15:47 . 2008-06-23 18:28 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll
                                          2008-09-15 15:47 . 2008-06-23 11:20 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe
                                          2008-09-15 15:46 . 2008-09-16 13:26 <REP> d-------- C:\WINDOWS\system32\fr-fr
                                          2008-09-14 02:14 . 2008-09-14 02:17 <REP> d-------- C:\Program Files\Yahoo!
                                          2008-09-14 02:14 . 2008-09-14 02:14 <REP> d-------- C:\Program Files\CCleaner
                                          2008-09-14 02:09 . 2008-09-14 02:09 <REP> d-------- C:\WINDOWS\system32\Kaspersky Lab
                                          2008-09-14 01:51 . 2008-09-16 20:16 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
                                          2008-09-14 01:20 . 2008-08-23 01:09 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage réseau
                                          2008-09-14 01:20 . 2008-08-23 01:09 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
                                          2008-09-14 01:20 . 2008-08-22 23:16 <REP> d--h----- C:\Documents and Settings\Administrateur\Modèles
                                          2008-09-14 01:20 . 2008-08-23 01:09 <REP> d-------- C:\Documents and Settings\Administrateur\Mes documents
                                          2008-09-14 01:20 . 2008-08-23 01:09 <REP> dr------- C:\Documents and Settings\Administrateur\Menu Démarrer
                                          2008-09-14 01:20 . 2008-08-22 23:23 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
                                          2008-09-14 01:20 . 2008-08-23 01:09 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
                                          2008-09-14 01:20 . 2008-09-14 01:20 <REP> d-------- C:\Documents and Settings\Administrateur
                                          2008-09-13 21:44 . 2008-09-13 21:44 2,855 --a------ C:\WINDOWS\system32\svchost.PIF
                                          2008-09-13 21:43 . 2008-09-13 21:43 <REP> d--h----- C:\WINDOWS\PIF
                                          2008-09-13 20:15 . 2008-09-13 20:15 <REP> d-------- C:\Program Files\Kaspersky Lab
                                          2008-09-13 20:11 . 2008-09-13 20:11 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
                                          2008-09-13 17:13 . 2008-09-14 01:56 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
                                          2008-09-13 16:38 . 2008-09-13 21:24 <REP> d-------- C:\Program Files\FileZilla FTP Client
                                          2008-09-13 16:38 . 2008-09-13 20:50 <REP> d-------- C:\Documents and Settings\Nat\Application Data\FileZilla
                                          2008-09-13 15:48 . 2008-09-13 15:48 (2) -rahs-ot- C:\WINDOWS\winstart.bat
                                          2008-09-13 15:47 . 2008-09-13 16:56 <REP> d-------- C:\Program Files\UnHackMe
                                          2008-09-13 15:44 . 2008-09-13 21:13 445,440 --a------ C:\WINDOWS\RunGuard.exe
                                          2008-09-13 15:44 . 2003-09-06 16:55 57,556 --a------ C:\WINDOWS\guard.bmp
                                          2008-09-13 15:44 . 2000-12-12 20:56 16,384 --a------ C:\WINDOWS\WinBait.org
                                          2008-09-13 15:44 . 2008-09-13 21:13 16,384 --a------ C:\WINDOWS\WinBait.exe
                                          2008-09-13 15:43 . 2008-09-13 15:43 <REP> d-------- C:\Program Files\Greatis
                                          2008-09-13 15:34 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
                                          2008-09-13 15:34 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
                                          2008-09-13 15:34 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
                                          2008-09-12 20:53 . 2008-09-12 20:58 972 --a------ C:\WINDOWS\system32\tmp.reg
                                          2008-09-12 19:03 . 2008-09-14 01:56 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
                                          2008-09-12 15:07 . 2008-09-12 15:07 <REP> d-------- C:\Program Files\Opera
                                          2008-09-08 18:51 . 2008-09-08 18:51 <REP> d-------- C:\Documents and Settings\Nat\Application Data\vlc
                                          2008-09-08 17:36 . 2008-09-08 17:36 <REP> d-------- C:\Program Files\VideoLAN
                                          2008-09-06 19:24 . 2008-09-06 19:44 <REP> d-------- C:\Program Files\Alice
                                          2008-09-06 19:17 . 2008-09-06 19:17 <REP> d-------- C:\WINDOWS\OPTIONS
                                          2008-09-06 19:17 . 2008-09-06 19:17 <REP> d-------- C:\Program Files\Realtek
                                          2008-09-06 19:17 . 2006-06-16 19:56 83,968 --a------ C:\WINDOWS\system32\drivers\Rtnicxp.sys
                                          2008-08-25 01:44 . 2008-08-25 01:44 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
                                          2008-08-24 23:51 . 2008-08-24 23:52 <REP> d-------- C:\Program Files\Messenger Plus! Live
                                          2008-08-23 21:43 . 2008-09-14 19:28 <REP> d-------- C:\Documents and Settings\Nat\Contacts
                                          2008-08-23 21:43 . 2008-08-23 21:43 268 --ah----- C:\sqmdata00.sqm
                                          2008-08-23 21:43 . 2008-08-23 21:43 244 --ah----- C:\sqmnoopt00.sqm
                                          2008-08-23 21:38 . 2006-08-01 10:40 262,254 --a------ C:\WINDOWS\system32\VM31bPrp.Ax
                                          2008-08-23 21:38 . 2008-09-13 21:13 147,456 --a------ C:\WINDOWS\VMCap.exe
                                          2008-08-23 21:38 . 2003-05-15 17:17 61,440 --a------ C:\WINDOWS\system32\VM31bSTI.dll
                                          2008-08-23 21:38 . 2008-09-13 20:45 40,960 --a------ C:\WINDOWS\vm_sti.exe
                                          2008-08-23 21:37 . 2008-08-23 21:37 <REP> d-------- C:\Program Files\Philips
                                          2008-08-23 21:37 . 2005-02-26 16:25 91,527 --a------ C:\WINDOWS\system32\drivers\usbVM31b.sys
                                          2008-08-23 21:37 . 2008-09-13 21:13 53,248 --a------ C:\WINDOWS\amcap.exe
                                          2008-08-23 21:34 . 2008-08-23 21:34 <REP> d----c--- C:\WINDOWS\system32\DRVSTORE
                                          2008-08-23 21:27 . 2008-08-23 21:33 <REP> d-------- C:\Program Files\Windows Live
                                          2008-08-23 21:27 . 2008-08-23 21:32 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
                                          2008-08-23 21:26 . 2008-08-23 21:26 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
                                          2008-08-23 21:07 . 2008-06-14 19:33 272,768 --------- C:\WINDOWS\system32\drivers\bthport.sys
                                          2008-08-23 21:07 . 2008-06-14 19:33 272,768 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys
                                          2008-08-23 21:07 . 2008-05-08 16:02 203,136 -----c--- C:\WINDOWS\system32\dllcache\rmcast.sys
                                          2008-08-23 21:06 . 2008-04-11 21:05 691,712 -----c--- C:\WINDOWS\system32\dllcache\inetcomm.dll
                                          2008-08-23 21:04 . 2008-09-16 09:27 <REP> d--h----- C:\WINDOWS\$hf_mig$
                                          2008-08-23 21:04 . 2007-08-10 08:18 26,488 --a------ C:\WINDOWS\system32\spupdsvc.exe
                                          2008-08-23 20:55 . 2007-07-30 19:19 43,352 --a------ C:\WINDOWS\system32\wups2.dll
                                          2008-08-23 20:55 . 2007-07-30 19:19 38,232 --a------ C:\WINDOWS\system32\wucltui.dll.mui
                                          2008-08-23 20:55 . 2007-07-30 19:20 30,040 --a------ C:\WINDOWS\system32\wuaucpl.cpl.mui
                                          2008-08-23 20:55 . 2007-07-30 19:19 30,040 --a------ C:\WINDOWS\system32\wuapi.dll.mui
                                          2008-08-23 20:55 . 2007-07-30 19:18 21,336 --a------ C:\WINDOWS\system32\wuaueng.dll.mui
                                          2008-08-23 20:41 . 2008-08-23 20:41 <REP> d--hs---- C:\Documents and Settings\Nat\UserData
                                          2008-08-23 02:46 . 2008-08-23 02:46 111,928 --a------ C:\WINDOWS\system32\PnkBstrB.exe
                                          2008-08-23 02:45 . 2008-08-23 02:45 <REP> d-------- C:\WINDOWS\system32\LogFiles
                                          2008-08-23 02:45 . 2008-08-23 02:45 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe
                                          2008-08-23 00:49 . 2008-08-23 00:49 <REP> d-------- C:\Program Files\directx
                                          2008-08-23 00:42 . 2008-08-23 01:09 <REP> d-------- C:\Sierra
                                          2008-08-23 00:42 . 2008-08-23 01:10 507 --a------ C:\WINDOWS\SIERRA.INI
                                          2008-08-23 00:41 . 2008-09-14 00:45 1,133,568 --a------ C:\Program Files\SumatraPDF.exe
                                          2008-08-23 00:39 . 2008-08-23 00:39 <REP> d-------- C:\Program Files\Gadwin Systems
                                          2008-08-23 00:33 . 2008-08-23 00:33 <REP> d-------- C:\Program Files\PowerISO
                                          2008-08-23 00:28 . 2008-08-23 00:28 <REP> d-------- C:\Program Files\TechCity Solutions
                                          2008-08-23 00:19 . 2008-09-13 21:24 <REP> d-------- C:\Program Files\iSafer
                                          2008-08-23 00:01 . 2008-04-14 04:34 16,384 --a------ C:\WINDOWS\system32\ipsink.ax
                                          2008-08-23 00:01 . 2008-04-13 20:46 15,232 --a------ C:\WINDOWS\system32\drivers\streamip.sys
                                          2008-08-23 00:01 . 1995-05-05 11:50 14,025 --------- C:\WINDOWS\TWAINCAP.INI
                                          2008-08-23 00:01 . 2008-04-13 20:46 11,136 --a------ C:\WINDOWS\system32\drivers\slip.sys
                                          2008-08-23 00:01 . 2008-04-13 20:46 10,880 --a------ C:\WINDOWS\system32\drivers\ndisip.sys
                                          2008-08-23 00:01 . 1997-06-11 09:02 5,526 --------- C:\WINDOWS\TWAINCAP.SRC
                                          2008-08-23 00:01 . 2008-04-13 20:39 5,504 --a------ C:\WINDOWS\system32\drivers\mstee.sys

                                          .
                                          (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                                          .
                                          2008-09-13 19:24 290,816 ----a-w C:\WINDOWS\system32\tbctray.exe
                                          2008-09-13 19:20 51,712 ----a-w C:\WINDOWS\system32\w32tm.exe
                                          2008-09-13 19:20 5,632 ----a-w C:\WINDOWS\system32\write.exe
                                          2008-09-13 19:20 34,304 ----a-w C:\WINDOWS\system32\vssadmin.exe
                                          2008-09-13 19:20 32,256 ----a-w C:\WINDOWS\system32\wupdmgr.exe
                                          2008-09-13 19:20 258,048 ----a-w C:\WINDOWS\system32\vlwbsf.exe
                                          2008-09-13 19:20 119,808 ----a-w C:\WINDOWS\system32\winmine.exe
                                          2008-09-13 19:20 11,776 ----a-w C:\WINDOWS\system32\winmsd.exe
                                          2008-09-13 19:18 62,976 ----a-w C:\WINDOWS\system32\rsopprov.exe
                                          2008-09-13 19:18 57,344 ----a-w C:\WINDOWS\system32\sol.exe
                                          2008-09-13 19:18 53,248 ----a-w C:\WINDOWS\system32\rsm.exe
                                          2008-09-13 19:18 49,664 ----a-w C:\WINDOWS\system32\rsmui.exe
                                          2008-09-13 19:18 31,232 ----a-w C:\WINDOWS\system32\sc.exe
                                          2008-09-13 19:18 25,600 ----a-w C:\WINDOWS\system32\routemon.exe
                                          2008-09-13 19:18 24,576 ----a-w C:\WINDOWS\system32\rsmsink.exe
                                          2008-09-13 19:18 21,504 ----a-w C:\WINDOWS\system32\route.exe
                                          2008-09-13 19:18 17,408 ----a-w C:\WINDOWS\system32\runas.exe
                                          2008-09-13 19:18 16,384 ----a-w C:\WINDOWS\system32\rwinsta.exe
                                          2008-09-13 19:18 15,360 ----a-w C:\WINDOWS\system32\shadow.exe
                                          2008-09-13 19:18 139,264 ----a-w C:\WINDOWS\system32\sndvol32.exe
                                          2008-09-13 19:18 10,240 ----a-w C:\WINDOWS\system32\sfc.exe
                                          2008-09-13 19:16 9,216 ----a-w C:\WINDOWS\system32\lpr.exe
                                          2008-09-13 19:15 9,728 ----a-w C:\WINDOWS\system32\label.exe
                                          2008-09-13 19:14 80,896 ----a-w C:\WINDOWS\system32\charmap.exe
                                          2008-09-13 19:13 37,888 ----a-w C:\WINDOWS\system32\asr_ldm.exe
                                          2008-09-13 19:13 305,664 ----a-w C:\WINDOWS\IsUn040c.exe
                                          2008-09-13 19:13 25,600 ----a-w C:\WINDOWS\twunk_32.exe
                                          2008-09-13 19:13 19,968 ----a-w C:\WINDOWS\system32\arp.exe
                                          2008-09-13 19:13 15,872 ----a-w C:\WINDOWS\TASKMAN.EXE
                                          2008-09-13 18:54 31,744 ----a-w C:\WINDOWS\system32\ntsd.exe
                                          2008-09-13 18:51 132,608 ----a-w C:\WINDOWS\system32\rsvp.exe
                                          2008-09-13 18:48 47,104 ----a-w C:\WINDOWS\system32\drwtsn32.exe
                                          2008-09-13 18:48 1,622,016 ----a-w C:\WINDOWS\system32\nwiz.exe
                                          2008-09-13 18:47 8,192 ----a-w C:\WINDOWS\system32\winhlp32.exe
                                          2008-09-13 18:45 159,744 ----a-w C:\WINDOWS\system32\nvsvc32.exe
                                          2008-09-06 17:25 --------- d--h--w C:\Program Files\InstallShield Installation Information
                                          2008-08-22 23:31 --------- d-----w C:\Program Files\GameSpy Arcade
                                          2008-08-22 23:31 --------- d-----w C:\Program Files\EA GAMES
                                          2008-08-22 23:18 --------- d-----w C:\Program Files\7-Zip
                                          2008-08-22 23:09 --------- d-----w C:\Program Files\Sierra On-Line
                                          2008-08-22 21:59 --------- d-----w C:\Program Files\Pinnacle
                                          2008-08-22 21:55 --------- d-----w C:\Documents and Settings\All Users\Application Data\NVIDIA
                                          2008-08-22 21:54 --------- d-----w C:\Documents and Settings\All Users\Application Data\nView_Profiles
                                          2008-08-22 21:52 --------- d-----w C:\Program Files\Fichiers communs\Voyetra
                                          2008-08-22 21:49 --------- d-----w C:\Program Files\VideoLogic
                                          2008-08-22 21:49 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
                                          2008-08-22 21:24 --------- d-----w C:\Program Files\microsoft frontpage
                                          2008-08-22 21:20 --------- d-----w C:\Program Files\Services en ligne
                                          2008-07-07 20:28 253,952 ----a-w C:\WINDOWS\system32\es.dll
                                          2008-06-24 16:44 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
                                          2008-06-23 16:28 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
                                          2008-06-20 17:47 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll
                                          .

                                          ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
                                          .
                                          .
                                          *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
                                          REGEDIT4

                                          [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                                          "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360]

                                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                                          "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-10-22 7700480]
                                          "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-10-22 86016]
                                          "BigDogPath"="C:\WINDOWS\VM_STI.EXE" [2008-09-13 40960]
                                          "AliceSAV"="C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe" [2008-09-13 84480]
                                          "TraySantaCruz"="C:\WINDOWS\system32\tbctray.exe" [2008-09-13 290816]
                                          "nwiz"="nwiz.exe" [2008-09-13 C:\WINDOWS\system32\nwiz.exe]

                                          C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
                                          iSafer.lnk - C:\Program Files\iSafer\iSafer.exe [2008-08-23 1015808]
                                          TrayMin210.exe.lnk - C:\Program Files\Philips\Philips SPC210NC Webcam\TrayMin210.exe [2008-08-23 278528]

                                          [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
                                          "{F552DDE6-2090-4bf4-B924-6141E87789A5}"= "C:\Program Files\Greatis\RegRunSuite\RRShell.dll" [2004-11-02 368711]

                                          [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
                                          "VIDC.PIM1"= PCLEPIM1.dll

                                          [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Pinnacle Scheduler.lnk]
                                          path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Pinnacle Scheduler.lnk
                                          backup=C:\WINDOWS\pss\Pinnacle Scheduler.lnkCommon Startup

                                          [HKEY_LOCAL_MACHINE\software\microsoft\security center]
                                          "AntiVirusDisableNotify"=dword:00000001
                                          "AntiVirusOverride"=dword:00000001
                                          "FirewallOverride"=dword:00000001

                                          [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
                                          "EnableFirewall"= 0 (0x0)

                                          [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
                                          "%windir%\\system32\\sessmgr.exe"=
                                          "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
                                          "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
                                          "C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"=
                                          "%windir%\\Network Diagnostic\\xpnetdiag.exe"=

                                          S2 iSafer;iSafer - Personal Firewall;C:\Program Files\iSafer\iSaferSvr.exe [2008-09-13 495104]
                                          S3 pctvvbi;PCTVVBI;C:\WINDOWS\system32\DRIVERS\pctvvbi.sys [2002-11-11 6400]
                                          S3 tbcspud;Santa Cruz Driver;C:\WINDOWS\system32\drivers\tbcspud.sys [2001-12-15 144512]
                                          S3 tbcwdm;Santa Cruz WDM Driver;C:\WINDOWS\system32\drivers\tbcwdm.sys [2001-12-15 536768]
                                          .
                                          .
                                          ------- Examen supplémentaire -------
                                          .
                                          R0 -: HKCU-Main,Start Page = hxxp://www.google.fr/
                                          .
                                          .
                                          ------- File Associations -------
                                          .
                                          chm.file=%1
                                          .

                                          **************************************************************************

                                          catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                                          Rootkit scan 2008-09-16 22:45:18
                                          Windows 5.1.2600 Service Pack 3 NTFS

                                          Recherche de processus cachés ...

                                          Recherche d'éléments en démarrage automatique cachés ...

                                          HKLM\Software\Microsoft\Windows\CurrentVersion\Run
                                          AliceSAV = C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

                                          Recherche de fichiers cachés ...

                                          Scan terminé avec succès
                                          Fichiers cachés: 0

                                          **************************************************************************
                                          .
                                          Heure de fin: 2008-09-16 22:47:24
                                          ComboFix-quarantined-files.txt 2008-09-16 20:47:20

                                          Avant-CF: 148,616,613,888 octets libres
                                          AprŠs-CF: 149,196,046,336 octets libres

                                          241 --- E O F --- 2008-09-16 12:49:56

                                          Perso je comprend rien a ce qui est ecrie une tite explication au passage serai la bienevenu :) c'est toujour bien d'en apprendre plus !! Cordialement ixilium
                                          0
                                          • 1
                                          • 2

                                          Discussions similaires

                                          Softonic,est-ce un virus ?
                                          techmel1

                                          6 réponses
                                          Chrome://newtab
                                          Nova

                                          14 réponses
                                          Désinstaller Softonic
                                          Diguimette

                                          5 réponses
                                          Supprimer New Tab
                                          tysaozon

                                          8 réponses
                                          Virus dans filezilla
                                          balnelius10

                                          9 réponses