Sujet Précédent Sujet Suivant

Probléme avec un Trojan.Peed .Gen sur hp

fredPACDG1982 -  
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité -
Bonjour, voila je suis débutant en informatique et j'ai un souci sur mon hp qui marche sous vista.
IL y aquelques jours j'ai attraper un virus du nom de trojan.peed.gen en effectuant une analyse complète de mon système avec bit defender alors que avec une analyse aproffondi il ne trouve rien.Mon pc na pas de souci particulier mais ce virus me fait peur .Sur le fichier "malade" cé marqué C:\program Files(x86)HPGames\SudokuQuest\Sudoku-WT.exe}=] Je ne sais pas quoi faire aidez moi svp.
Je né pas fait de restauration système je ne sais pas faire
MERCI D AVANCE
A voir également:

28 réponses

  • 1
  • 2
Réponse 1 / 28
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité 1 537
 
Re,

mets moi le contenu intégral de log.txt.

Pour l'autre, je te le demanderai si nécessaire.
1
Réponse 2 / 28
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité 1 537
 
Re,

tu utilises ce jeu ?
1
Réponse 3 / 28
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité 1 537
 
Re,

bonne question.

Fais ça et c'est sûr qu'il n'y sera plus :

Ouvre ce lien :

http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fr_docid/20020830101856924

dans un premier temps tu le suis pour désactiver la restauration système.

Tu fermes la fenêtre.

Dans un deuxième temps, tu le suis pour réactiver la restauration.

=========

Tout fonctionne parfaitement ou tu souhaites des vérifications complémentaires ?
1
Réponse 4 / 28
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité 1 537
 
Bonjour,

fais ceci :

Télécharge ici :

http://images.malwareremoval.com/random/RSIT.exe

random's system information tool (RSIT) par andom/random et sauvegarde-le sur le Bureau.

Double-clique sur RSIT.exe afin de lancer RSIT.

Clique Continue à l'écran Disclaimer.

Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.

Poste le contenu de log.txt (<<qui sera affiché)
ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).

NB : Les rapports sont sauvegardés dans le dossier C:\rsit
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 28
moonoye
 
Bonjour, j'ai exactement le meme probleme que cette personne, pouvez vous m'aider?
0
Réponse 6 / 28
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité 1 537
 
Bonjour,

comme il y a peu de chance qu'il réponde, on va rester ici.

Fais ce que je lui avais demandé.
0
Réponse 7 / 28
moonoye
 
j'ai déjà suivi les premières étapes, mais tu veux que je mette tout le texte? (desolé je debute)
0
Réponse 8 / 28
moonoye
 
pas moyen de tout mettre, c'est trop long la page charge et ne marche plus...
0
Réponse 9 / 28
moonoye
 
Logfile of random's system information tool 1.04 (written by random/random)
Run by gaelle at 2008-10-16 11:34:52
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 219 GB (74%) free of 296 GB
Total RAM: 3068 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:35:10, on 16/10/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Program Files\DigitalPersona\Bin\DpAgent.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\Program Files\TF1Vision\TF1vision.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Opera\opera.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\gaelle\Desktop\RSIT.exe
C:\Program Files\trend micro\gaelle.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.5470\swg.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\dpagent.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [e-TF1] C:\Program Files\TF1Vision\TF1vision.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe"
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe"
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [eCarteBleue-SG-P3] "C:\Program Files\e-Carte Bleue\SG\e-Carte Bleue\ECB-SG.exe" /dontopenmycards
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: BitDefender Total Security 2009.lnk = C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - C:\ProgramData\AOL\ieToolbar\resources\fr-FR\local\search.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\aestsrv.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: BitDefender Arrakis Server (Arrakis3) - BitDefender S.R.L. https://www.bitdefender.fr/ - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Windows\SMINST\BLService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\STacSV.exe
O23 - Service: Validity Fingerprint Service (vfsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vfsFPService.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S. R. L. - C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
0
Réponse 10 / 28
moonoye
 
======Scheduled tasks folder======

C:\Windows\tasks\Norton Internet Security - Effectuer une analyse complète du système - gaelle.job
C:\Windows\tasks\sauvegarde.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-03-27 1372160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll [2008-03-25 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7C554162-8CB7-45A4-B8F4-8EA1C75885F9}]
AOL Toolbar BHO - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll [2008-02-03 1185120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2008-10-02 193136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.5470\swg.dll [2008-10-02 651760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}
{DE9C389F-3316-41A7-809B-AA305ED9D922} - AOL Toolbar - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll [2008-02-03 1185120]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2008-10-02 193136]
{381FFDE8-2394-4f90-B10D-FC6124A40F8C} - BitDefender Toolbar - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll [2008-10-04 90112]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-05-14 13535776]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-05-14 92704]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-01-18 1033512]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2008-06-27 442467]
"UCam_Menu"=C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2007-12-24 222504]
"DpAgent"=C:\Program Files\DigitalPersona\Bin\dpagent.exe [2008-03-12 699456]
"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2008-06-25 468264]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2008-03-14 202032]
"OnScreenDisplay"=C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe [2007-11-01 554288]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2008-04-15 488752]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe [2008-03-25 144784]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-09-06 413696]
"e-TF1"=C:\Program Files\TF1Vision\TF1vision.exe [2008-03-05 397312]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-10-01 289576]
"BDAgent"=C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe [2008-10-04 716800]
"BitDefender Antiphishing Helper"=C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe [2008-10-04 69632]
"HP Health Check Scheduler"=c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-06-16 75008]
"eCarteBleue-SG-P3"=C:\Program Files\e-Carte Bleue\SG\e-Carte Bleue\ECB-SG.exe [2002-12-20 184320]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-21 1233920]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2008-02-26 2289664]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
BitDefender Total Security 2009.lnk - C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
DPPWDFLT

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 3 months======

2008-10-16 11:34:53 ----D---- C:\Program Files\trend micro
2008-10-16 11:34:52 ----D---- C:\rsit
2008-10-14 23:33:02 ----A---- C:\Windows\system32\ntoskrnl.exe
2008-10-14 23:33:02 ----A---- C:\Windows\system32\ntkrnlpa.exe
2008-10-14 23:32:59 ----A---- C:\Windows\system32\mshtml.dll
2008-10-14 23:32:59 ----A---- C:\Windows\system32\ieframe.dll
2008-10-14 23:32:58 ----A---- C:\Windows\system32\wininet.dll
2008-10-14 23:32:58 ----A---- C:\Windows\system32\urlmon.dll
2008-10-14 23:32:58 ----A---- C:\Windows\system32\iertutil.dll
2008-10-14 23:32:57 ----A---- C:\Windows\system32\mstime.dll
2008-10-14 23:32:57 ----A---- C:\Windows\system32\jsproxy.dll
2008-10-09 00:35:10 ----D---- C:\Program Files\e-Carte Bleue Société Générale
2008-10-09 00:26:55 ----D---- C:\Program Files\e-Carte Bleue
2008-10-05 16:11:58 ----D---- C:\Users\gaelle\AppData\Roaming\Opera
2008-10-05 16:11:35 ----D---- C:\Program Files\Opera
2008-10-04 17:40:19 ----D---- C:\Windows\system32\logs
2008-10-04 17:39:49 ----D---- C:\Users\gaelle\AppData\Roaming\BitDefender
2008-10-04 17:39:49 ----D---- C:\Program Files\Common Files\MSSoap
2008-10-04 17:39:49 ----D---- C:\Binaries
2008-10-04 17:39:09 ----D---- C:\ProgramData\BitDefender
2008-10-04 17:39:09 ----D---- C:\Program Files\BitDefender
2008-10-04 17:38:12 ----D---- C:\Program Files\Common Files\BitDefender
2008-10-04 17:18:25 ----D---- C:\Program Files\iPod
2008-10-04 17:18:24 ----D---- C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-10-04 17:18:24 ----D---- C:\Program Files\iTunes
2008-10-04 01:12:40 ----D---- C:\Users\gaelle\AppData\Roaming\PlayFirst
2008-10-04 00:01:18 ----D---- C:\Users\gaelle\AppData\Roaming\CyberLink
2008-10-03 23:51:12 ----A---- C:\Windows\system32\unrar.dll
2008-10-03 23:51:11 ----A---- C:\Windows\avisplitter.ini
2008-10-03 23:51:10 ----A---- C:\Windows\system32\yv12vfw.dll
2008-10-03 23:51:10 ----A---- C:\Windows\system32\xvidvfw.dll
2008-10-03 23:51:10 ----A---- C:\Windows\system32\xvidcore.dll
2008-10-03 23:51:09 ----A---- C:\Windows\system32\qt-dx331.dll
2008-10-03 23:51:09 ----A---- C:\Windows\system32\dpl100.dll
2008-10-03 23:51:09 ----A---- C:\Windows\system32\divx.dll
2008-10-03 23:51:08 ----A---- C:\Windows\system32\ff_vfw.dll.manifest
2008-10-03 23:51:08 ----A---- C:\Windows\system32\ff_vfw.dll
2008-10-03 23:51:07 ----D---- C:\Program Files\K-Lite Codec Pack
2008-10-03 20:13:40 ----D---- C:\Program Files\TF1Vision
2008-10-03 11:15:59 ----D---- C:\Users\gaelle\AppData\Roaming\Template
2008-10-02 22:53:54 ----D---- C:\Users\gaelle\AppData\Roaming\Apple Computer
2008-10-02 22:53:36 ----DC---- C:\Windows\system32\DRVSTORE
2008-10-02 22:53:36 ----A---- C:\Windows\system32\GEARAspi.dll
2008-10-02 22:52:48 ----D---- C:\Program Files\Bonjour
2008-10-02 22:52:15 ----D---- C:\Program Files\QuickTime
2008-10-02 22:52:14 ----D---- C:\ProgramData\Apple Computer
2008-10-02 22:51:55 ----D---- C:\Program Files\Apple Software Update
2008-10-02 22:51:14 ----D---- C:\ProgramData\Apple
2008-10-02 22:51:14 ----D---- C:\Program Files\Common Files\Apple
2008-10-02 22:37:33 ----D---- C:\Users\gaelle\AppData\Roaming\Google
2008-10-02 22:37:24 ----D---- C:\ProgramData\Google
2008-10-02 22:35:41 ----D---- C:\Program Files\Google
2008-10-02 22:12:32 ----D---- C:\Users\gaelle\AppData\Roaming\WildTangent
2008-10-02 19:41:56 ----D---- C:\Users\gaelle\AppData\Roaming\Mozilla
2008-10-02 19:41:50 ----D---- C:\Program Files\Mozilla Firefox
2008-10-02 19:21:37 ----SHDC---- C:\Program Files\Common Files\WindowsLiveInstaller
2008-10-02 19:21:32 ----D---- C:\Program Files\Windows Live
2008-10-02 19:20:57 ----D---- C:\ProgramData\WLInstaller
2008-10-02 19:16:01 ----D---- C:\Users\gaelle\AppData\Roaming\skypePM
2008-10-02 19:12:08 ----D---- C:\Users\gaelle\AppData\Roaming\Skype
2008-10-02 19:11:45 ----D---- C:\Program Files\Skype
2008-10-02 19:11:44 ----D---- C:\Program Files\Common Files\Skype
2008-10-02 19:11:35 ----D---- C:\ProgramData\Skype
2008-10-02 11:04:01 ----A---- C:\Windows\system32\tzres.dll
2008-10-02 11:03:07 ----A---- C:\Windows\system32\msshooks.dll
2008-10-02 11:03:06 ----A---- C:\Windows\system32\msscb.dll
2008-10-02 11:03:05 ----A---- C:\Windows\system32\thawbrkr.dll
2008-10-02 11:03:05 ----A---- C:\Windows\system32\srchadmin.dll
2008-10-02 11:03:05 ----A---- C:\Windows\system32\SearchFilterHost.exe
2008-10-02 11:03:05 ----A---- C:\Windows\system32\propsys.dll
2008-10-02 11:03:05 ----A---- C:\Windows\system32\propdefs.dll
2008-10-02 11:03:05 ----A---- C:\Windows\system32\msstrc.dll
2008-10-02 11:03:05 ----A---- C:\Windows\system32\mssprxy.dll
2008-10-02 11:03:05 ----A---- C:\Windows\system32\mssitlb.dll
2008-10-02 11:03:05 ----A---- C:\Windows\system32\msshsq.dll
2008-10-02 11:03:05 ----A---- C:\Windows\system32\korwbrkr.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\xmlfilter.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\wsepno.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\tquery.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2008-10-02 11:03:04 ----A---- C:\Windows\system32\SearchIndexer.exe
2008-10-02 11:03:04 ----A---- C:\Windows\system32\rtffilt.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\offfilt.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\nlhtml.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\mssvp.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\mssrch.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\mssphtb.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\mssph.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\msscntrs.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\mimefilt.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\chtbrkr.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\chsbrkr.dll
2008-10-02 11:00:34 ----D---- C:\Program Files\MSXML 4.0
2008-10-02 10:21:30 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2008-10-02 10:21:28 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2008-10-02 10:21:21 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2008-10-02 10:21:02 ----A---- C:\Windows\system32\IPSECSVC.DLL
2008-10-02 10:20:57 ----A---- C:\Windows\system32\EncDec.dll
2008-10-02 10:20:56 ----A---- C:\Windows\system32\psisdecd.dll
2008-10-02 10:20:27 ----A---- C:\Windows\system32\rpcrt4.dll
2008-10-02 10:20:26 ----A---- C:\Windows\system32\pacerprf.dll
2008-10-02 10:20:12 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2008-10-02 10:20:12 ----A---- C:\Windows\system32\gameux.dll
2008-10-02 10:20:12 ----A---- C:\Windows\system32\Apphlpdm.dll
2008-10-02 10:19:31 ----A---- C:\Windows\system32\shell32.dll
2008-10-02 10:19:06 ----A---- C:\Windows\system32\es.dll
2008-10-02 10:19:02 ----A---- C:\Windows\system32\wmpeffects.dll
2008-10-02 10:18:52 ----A---- C:\Windows\system32\inetcomm.dll
2008-10-02 10:08:37 ----A---- C:\Windows\system32\emdmgmt.dll
2008-10-02 10:08:37 ----A---- C:\Windows\system32\dataclen.dll
2008-10-02 10:08:37 ----A---- C:\Windows\system32\cdd.dll
2008-10-02 10:07:49 ----A---- C:\Windows\system32\wshext.dll
2008-10-02 10:07:49 ----A---- C:\Windows\system32\wscript.exe
2008-10-02 10:07:49 ----A---- C:\Windows\system32\vbscript.dll
2008-10-02 10:07:49 ----A---- C:\Windows\system32\scrrun.dll
2008-10-02 10:07:49 ----A---- C:\Windows\system32\scrobj.dll
2008-10-02 10:07:49 ----A---- C:\Windows\system32\jscript.dll
2008-10-02 10:07:49 ----A---- C:\Windows\system32\cscript.exe
2008-10-02 10:07:38 ----A---- C:\Windows\system32\quartz.dll
2008-10-02 09:54:05 ----A---- C:\Windows\system32\wups2.dll
2008-10-02 09:54:05 ----A---- C:\Windows\system32\wucltux.dll
2008-10-02 09:54:05 ----A---- C:\Windows\system32\wuaueng.dll
2008-10-02 09:54:05 ----A---- C:\Windows\system32\wuauclt.exe
2008-10-02 09:53:41 ----A---- C:\Windows\system32\wups.dll
2008-10-02 09:53:41 ----A---- C:\Windows\system32\wudriver.dll
2008-10-02 09:53:41 ----A---- C:\Windows\system32\wuapi.dll
2008-10-02 09:53:31 ----A---- C:\Windows\system32\wuwebv.dll
2008-10-02 09:53:31 ----A---- C:\Windows\system32\wuapp.exe
2008-10-02 00:55:26 ----A---- C:\ProgramData\MobileTV.exe
2008-10-02 00:55:26 ----A---- C:\ProgramData\DVD.exe
2008-10-02 00:55:25 ----A---- C:\ProgramData\MPV.exe
2008-10-02 00:55:25 ----A---- C:\ProgramData\Karaoke.exe
2008-10-02 00:55:25 ----A---- C:\ProgramData\Games.exe
2008-10-02 00:55:24 ----D---- C:\ProgramData\FRA
2008-10-02 00:55:24 ----A---- C:\ProgramData\hpqp.txt
2008-10-01 23:22:54 ----D---- C:\Temp
2008-10-01 23:16:40 ----D---- C:\Users\gaelle\AppData\Roaming\Symantec
2008-10-01 23:16:16 ----D---- C:\Users\gaelle\AppData\Roaming\DigitalPersona
2008-10-01 23:15:37 ----D---- C:\Users\gaelle\AppData\Roaming\Identities
2008-10-01 23:10:43 ----D---- C:\Users\gaelle\AppData\Roaming\Macromedia
2008-10-01 23:10:15 ----D---- C:\Users\gaelle\AppData\Roaming\Adobe
2008-10-01 23:10:05 ----D---- C:\Users\gaelle\AppData\Roaming\Hewlett-Packard
2008-10-01 23:10:00 ----D---- C:\ProgramData\Viewpoint
2008-10-01 23:09:59 ----D---- C:\Program Files\Viewpoint
2008-10-01 23:09:31 ----D---- C:\Program Files\Common Files\AOL
2008-10-01 23:09:30 ----D---- C:\Program Files\AIM6
2008-10-01 23:08:00 ----D---- C:\Users\gaelle\AppData\Roaming\Macrovision
2008-10-01 23:06:58 ----SD---- C:\Users\gaelle\AppData\Roaming\Microsoft
2008-10-01 23:06:58 ----D---- C:\Users\gaelle\AppData\Roaming\Media Center Programs
2008-10-01 23:00:41 ----SHD---- C:\ProgramData\Modèles
2008-10-01 23:00:41 ----SHD---- C:\ProgramData\Menu Démarrer
2008-10-01 23:00:41 ----SHD---- C:\ProgramData\Favoris
2008-10-01 23:00:41 ----SHD---- C:\ProgramData\Bureau
2008-10-01 23:00:41 ----SHD---- C:\Program Files\Fichiers communs
2008-08-29 10:18:58 ----A---- C:\Windows\system32\dns-sd.exe
2008-08-29 09:53:50 ----A---- C:\Windows\system32\dnssd.dll
2008-08-19 16:28:49 ----D---- C:\ProgramData\NVIDIA
2008-08-19 16:27:23 ----A---- C:\ProgramData\hpqp.ini
2008-08-19 16:27:17 ----D---- C:\ProgramData\CyberLink
2008-08-19 16:26:46 ----D---- C:\Windows\system32\tr
2008-08-19 16:26:46 ----D---- C:\Windows\system32\ru
2008-08-19 16:26:46 ----D---- C:\Windows\system32\ko
2008-08-19 16:26:46 ----D---- C:\Windows\system32\ja
2008-08-19 16:26:45 ----D---- C:\Windows\system32\it
2008-08-19 16:26:45 ----D---- C:\Windows\system32\es
2008-08-19 16:26:45 ----D---- C:\Windows\system32\de
2008-08-19 16:26:45 ----D---- C:\Windows\DPDrv
2008-08-19 16:26:29 ----D---- C:\ProgramData\Macrovision
2008-08-19 16:26:29 ----D---- C:\Program Files\DigitalPersona
2008-08-19 16:21:35 ----D---- C:\Program Files\Common Files\LightScribe
2008-08-19 15:52:43 ----A---- C:\Windows\system32\stlang.dll
2008-08-19 15:52:43 ----A---- C:\Windows\system32\idtmini1.exe
2008-08-19 15:52:43 ----A---- C:\Windows\system32\aestecap.dll
2008-08-19 15:52:43 ----A---- C:\Windows\system32\AESTCom.dll
2008-08-19 15:52:43 ----A---- C:\Windows\system32\aestaren.dll
2008-08-19 15:52:43 ----A---- C:\Windows\system32\aestacap.dll
2008-08-19 15:52:43 ----A---- C:\Windows\sttray.exe
2008-08-19 15:52:08 ----A---- C:\Windows\system32\staco.dll
2008-08-19 15:51:55 ----A---- C:\Windows\system32\stcplx.dll
2008-08-19 15:51:55 ----A---- C:\Windows\system32\stapo.dll
2008-08-19 15:51:55 ----A---- C:\Windows\system32\stapi32.dll
2008-08-19 15:51:53 ----D---- C:\Program Files\IDT
2008-08-19 15:51:49 ----A---- C:\Windows\xUninstall.bat
2008-08-19 15:49:39 ----D---- C:\Windows\JMCR_DIR
2008-08-19 15:49:39 ----A---- C:\Windows\system32\JmCrIcon.dll
2008-08-19 15:49:20 ----D---- C:\Program Files\Validity Sensors, Inc
2008-08-19 15:48:01 ----D---- C:\Program Files\Synaptics
2008-08-19 15:47:43 ----A---- C:\Windows\system32\WdfCoInstaller01000.dll
2008-08-19 15:47:40 ----A---- C:\Windows\system32\SynTPCo4.dll
2008-08-19 15:47:40 ----A---- C:\Windows\system32\SynTPAPI.dll
2008-08-19 15:47:39 ----A---- C:\Windows\system32\SynCtrl.dll
2008-08-19 15:47:39 ----A---- C:\Windows\system32\SynCOM.dll
2008-08-19 15:46:56 ----D---- C:\Program Files\Realtek
2008-08-19 15:46:36 ----D---- C:\Windows\system32\HPMDP
2008-08-19 15:46:17 ----A---- C:\Windows\system32\nvexpbar.dll
2008-08-19 15:46:17 ----A---- C:\Windows\system32\nvcpluir.dll
2008-08-19 15:46:17 ----A---- C:\Windows\system32\nvcplui.exe
2008-08-19 15:45:16 ----A---- C:\Windows\system32\NVUNINST.EXE
2008-08-19 15:43:42 ----D---- C:\Program Files\Intel
2008-08-19 15:43:42 ----A---- C:\Windows\system32\CSVer.dll
2008-08-19 15:43:28 ----D---- C:\Intel
2008-08-19 15:42:57 ----A---- C:\Windows\system32\NETw5r32.dll
2008-08-19 15:42:57 ----A---- C:\Windows\system32\NETw5c32.dll
2008-08-19 15:38:40 ----D---- C:\Windows\SoftwareDistribution
2008-08-19 15:34:36 ----D---- C:\Windows\Prefetch
2008-07-30 10:11:15 ----A---- C:\Windows\system32\gdi32.dll
2008-07-30 10:08:59 ----D---- C:\Windows\Users
2008-07-30 10:08:55 ----A---- C:\Windows\system32\winresume.exe
2008-07-30 10:08:55 ----A---- C:\Windows\system32\winload.exe
2008-07-30 10:08:55 ----A---- C:\Windows\system32\kbd106n.dll
2008-07-30 10:08:54 ----A---- C:\Windows\system32\srdelayed.exe
2008-07-30 10:08:54 ----A---- C:\Windows\system32\srcore.dll
2008-07-30 10:08:54 ----A---- C:\Windows\system32\srclient.dll
2008-07-30 10:08:54 ----A---- C:\Windows\system32\setbcdlocale.dll
2008-07-30 10:08:54 ----A---- C:\Windows\system32\rstrui.exe
2008-07-30 10:08:54 ----A---- C:\Windows\system32\kd1394.dll
2008-07-30 10:08:54 ----A---- C:\Windows\system32\ci.dll
2008-07-30 10:07:53 ----D---- C:\Windows\panther
2008-07-30 10:05:56 ----D---- C:\Windows\fr-FR
2008-07-30 10:05:54 ----D---- C:\Windows\system32\fr
2008-07-30 10:05:54 ----D---- C:\Windows\system32\040C
2008-07-30 10:01:23 ----HD---- C:\HP
2008-07-30 02:20:38 ----D---- C:\Windows\Temp
2008-07-30 02:18:34 ----A---- C:\Windows\system32\javaws.exe
2008-07-30 02:18:34 ----A---- C:\Windows\system32\javaw.exe
2008-07-30 02:18:34 ----A---- C:\Windows\system32\java.exe
2008-07-30 02:18:01 ----D---- C:\Program Files\Java
2008-07-30 02:18:01 ----D---- C:\Program Files\Common Files\Java
2008-07-30 02:13:02 ----A---- C:\Windows\system32\ShellvRTF64.dll
2008-07-30 02:13:02 ----A---- C:\Windows\system32\ShellvRTF.dll
2008-07-30 02:11:47 ----D---- C:\Windows\Downloaded Installations
2008-07-30 02:09:02 ----D---- C:\ProgramData\AOL
2008-07-30 02:09:02 ----D---- C:\Program Files\AOL
2008-07-30 02:07:07 ----A---- C:\Windows\system32\ezsvc7x.dll
2008-07-30 02:07:07 ----A---- C:\Windows\system32\ezsvc7.dll
2008-07-30 02:07:06 ----D---- C:\Program Files\EasyBits For Kids
2008-07-30 01:59:30 ----D---- C:\Program Files\CyberLink
2008-07-30 01:58:56 ----D---- C:\ProgramData\Adobe
2008-07-30 01:58:51 ----D---- C:\Program Files\Common Files\Adobe
2008-07-30 01:58:51 ----D---- C:\Program Files\Adobe
2008-07-30 01:57:31 ----D---- C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
2008-07-30 01:57:26 ----D---- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
2008-07-30 01:56:57 ----A---- C:\Windows\system32\msonpmon.dll
2008-07-30 01:56:38 ----D---- C:\Program Files\Common Files\DESIGNER
2008-07-30 01:56:30 ----D---- C:\Windows\PCHEALTH
2008-07-30 01:56:30 ----D---- C:\Program Files\Microsoft.NET
2008-07-30 01:55:05 ----D---- C:\ProgramData\Microsoft Help
2008-07-30 01:54:17 ----RHD---- C:\MSOCache
2008-07-30 01:44:08 ----D---- C:\Program Files\muvee Technologies
2008-07-30 01:44:08 ----D---- C:\Program Files\Common Files\muvee Technologies
2008-07-30 01:44:08 ----A---- C:\Windows\system32\Mfc42loc.dll
2008-07-30 01:44:04 ----D---- C:\ProgramData\muvee Technologies
2008-07-30 01:33:34 ----D---- C:\Program Files\Microsoft Office
2008-07-30 01:32:53 ----D---- C:\Program Files\Microsoft Works
2008-07-30 01:32:23 ----D---- C:\Windows\system32\Macromed
2008-07-30 01:18:45 ----D---- C:\ProgramData\WildTangent
2008-07-30 01:18:45 ----D---- C:\ProgramData\Hewlett-Packard
2008-07-30 01:18:45 ----D---- C:\Program Files\HP Games
2008-07-30 01:18:44 ----RD---- C:\Program Files\Online Services
2008-07-30 01:17:30 ----A---- C:\Windows\CSUP.txt
2008-07-30 01:06:10 ----A---- C:\Windows\system32\BttnCmns_64.dll
2008-07-30 01:06:10 ----A---- C:\Windows\system32\BttnCmns.dll
2008-07-30 01:06:10 ----A---- C:\Windows\system32\BttnCmn.dll
2008-07-30 00:59:39 ----A---- C:\Windows\system32\msxml4a.dll
2008-07-30 00:59:24 ----D---- C:\Program Files\HP
2008-07-30 00:59:24 ----A---- C:\Windows\system32\atl71.dll
2008-07-30 00:42:33 ----D---- C:\Program Files\Common Files\Symantec Shared
2008-07-30 00:31:33 ----SHD---- C:\Windows\Installer
2008-07-30 00:30:43 ----HD---- C:\Program Files\InstallShield Installation Information
2008-07-30 00:30:42 ----D---- C:\Program Files\Common Files\InstallShield
2008-07-30 00:26:43 ----D---- C:\Program Files\Hewlett-Packard
2008-07-30 00:25:14 ----SHD---- C:\$RECYCLE.BIN
2008-07-30 00:15:57 ----SHD---- C:\System Volume Information
0
Réponse 11 / 28
moonoye
 
======Scheduled tasks folder======

C:\Windows\tasks\Norton Internet Security - Effectuer une analyse complète du système - gaelle.job
C:\Windows\tasks\sauvegarde.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-03-27 1372160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll [2008-03-25 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7C554162-8CB7-45A4-B8F4-8EA1C75885F9}]
AOL Toolbar BHO - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll [2008-02-03 1185120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2008-10-02 193136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.5470\swg.dll [2008-10-02 651760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}
{DE9C389F-3316-41A7-809B-AA305ED9D922} - AOL Toolbar - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll [2008-02-03 1185120]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2008-10-02 193136]
{381FFDE8-2394-4f90-B10D-FC6124A40F8C} - BitDefender Toolbar - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll [2008-10-04 90112]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-05-14 13535776]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-05-14 92704]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-01-18 1033512]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2008-06-27 442467]
"UCam_Menu"=C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2007-12-24 222504]
"DpAgent"=C:\Program Files\DigitalPersona\Bin\dpagent.exe [2008-03-12 699456]
"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2008-06-25 468264]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2008-03-14 202032]
"OnScreenDisplay"=C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe [2007-11-01 554288]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2008-04-15 488752]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe [2008-03-25 144784]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-09-06 413696]
"e-TF1"=C:\Program Files\TF1Vision\TF1vision.exe [2008-03-05 397312]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-10-01 289576]
"BDAgent"=C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe [2008-10-04 716800]
"BitDefender Antiphishing Helper"=C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe [2008-10-04 69632]
"HP Health Check Scheduler"=c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-06-16 75008]
"eCarteBleue-SG-P3"=C:\Program Files\e-Carte Bleue\SG\e-Carte Bleue\ECB-SG.exe [2002-12-20 184320]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-21 1233920]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2008-02-26 2289664]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
BitDefender Total Security 2009.lnk - C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
DPPWDFLT

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 3 months======

2008-10-16 11:34:53 ----D---- C:\Program Files\trend micro
2008-10-16 11:34:52 ----D---- C:\rsit
2008-10-14 23:33:02 ----A---- C:\Windows\system32\ntoskrnl.exe
2008-10-14 23:33:02 ----A---- C:\Windows\system32\ntkrnlpa.exe
2008-10-14 23:32:59 ----A---- C:\Windows\system32\mshtml.dll
2008-10-14 23:32:59 ----A---- C:\Windows\system32\ieframe.dll
2008-10-14 23:32:58 ----A---- C:\Windows\system32\wininet.dll
2008-10-14 23:32:58 ----A---- C:\Windows\system32\urlmon.dll
2008-10-14 23:32:58 ----A---- C:\Windows\system32\iertutil.dll
2008-10-14 23:32:57 ----A---- C:\Windows\system32\mstime.dll
2008-10-14 23:32:57 ----A---- C:\Windows\system32\jsproxy.dll
2008-10-09 00:35:10 ----D---- C:\Program Files\e-Carte Bleue Société Générale
2008-10-09 00:26:55 ----D---- C:\Program Files\e-Carte Bleue
2008-10-05 16:11:58 ----D---- C:\Users\gaelle\AppData\Roaming\Opera
2008-10-05 16:11:35 ----D---- C:\Program Files\Opera
2008-10-04 17:40:19 ----D---- C:\Windows\system32\logs
2008-10-04 17:39:49 ----D---- C:\Users\gaelle\AppData\Roaming\BitDefender
2008-10-04 17:39:49 ----D---- C:\Program Files\Common Files\MSSoap
2008-10-04 17:39:49 ----D---- C:\Binaries
2008-10-04 17:39:09 ----D---- C:\ProgramData\BitDefender
2008-10-04 17:39:09 ----D---- C:\Program Files\BitDefender
2008-10-04 17:38:12 ----D---- C:\Program Files\Common Files\BitDefender
2008-10-04 17:18:25 ----D---- C:\Program Files\iPod
2008-10-04 17:18:24 ----D---- C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-10-04 17:18:24 ----D---- C:\Program Files\iTunes
2008-10-04 01:12:40 ----D---- C:\Users\gaelle\AppData\Roaming\PlayFirst
2008-10-04 00:01:18 ----D---- C:\Users\gaelle\AppData\Roaming\CyberLink
2008-10-03 23:51:12 ----A---- C:\Windows\system32\unrar.dll
2008-10-03 23:51:11 ----A---- C:\Windows\avisplitter.ini
2008-10-03 23:51:10 ----A---- C:\Windows\system32\yv12vfw.dll
2008-10-03 23:51:10 ----A---- C:\Windows\system32\xvidvfw.dll
2008-10-03 23:51:10 ----A---- C:\Windows\system32\xvidcore.dll
2008-10-03 23:51:09 ----A---- C:\Windows\system32\qt-dx331.dll
2008-10-03 23:51:09 ----A---- C:\Windows\system32\dpl100.dll
2008-10-03 23:51:09 ----A---- C:\Windows\system32\divx.dll
2008-10-03 23:51:08 ----A---- C:\Windows\system32\ff_vfw.dll.manifest
2008-10-03 23:51:08 ----A---- C:\Windows\system32\ff_vfw.dll
2008-10-03 23:51:07 ----D---- C:\Program Files\K-Lite Codec Pack
2008-10-03 20:13:40 ----D---- C:\Program Files\TF1Vision
2008-10-03 11:15:59 ----D---- C:\Users\gaelle\AppData\Roaming\Template
2008-10-02 22:53:54 ----D---- C:\Users\gaelle\AppData\Roaming\Apple Computer
2008-10-02 22:53:36 ----DC---- C:\Windows\system32\DRVSTORE
2008-10-02 22:53:36 ----A---- C:\Windows\system32\GEARAspi.dll
2008-10-02 22:52:48 ----D---- C:\Program Files\Bonjour
2008-10-02 22:52:15 ----D---- C:\Program Files\QuickTime
2008-10-02 22:52:14 ----D---- C:\ProgramData\Apple Computer
2008-10-02 22:51:55 ----D---- C:\Program Files\Apple Software Update
2008-10-02 22:51:14 ----D---- C:\ProgramData\Apple
2008-10-02 22:51:14 ----D---- C:\Program Files\Common Files\Apple
2008-10-02 22:37:33 ----D---- C:\Users\gaelle\AppData\Roaming\Google
2008-10-02 22:37:24 ----D---- C:\ProgramData\Google
2008-10-02 22:35:41 ----D---- C:\Program Files\Google
2008-10-02 22:12:32 ----D---- C:\Users\gaelle\AppData\Roaming\WildTangent
2008-10-02 19:41:56 ----D---- C:\Users\gaelle\AppData\Roaming\Mozilla
2008-10-02 19:41:50 ----D---- C:\Program Files\Mozilla Firefox
2008-10-02 19:21:37 ----SHDC---- C:\Program Files\Common Files\WindowsLiveInstaller
2008-10-02 19:21:32 ----D---- C:\Program Files\Windows Live
2008-10-02 19:20:57 ----D---- C:\ProgramData\WLInstaller
2008-10-02 19:16:01 ----D---- C:\Users\gaelle\AppData\Roaming\skypePM
2008-10-02 19:12:08 ----D---- C:\Users\gaelle\AppData\Roaming\Skype
2008-10-02 19:11:45 ----D---- C:\Program Files\Skype
2008-10-02 19:11:44 ----D---- C:\Program Files\Common Files\Skype
2008-10-02 19:11:35 ----D---- C:\ProgramData\Skype
2008-10-02 11:04:01 ----A---- C:\Windows\system32\tzres.dll
2008-10-02 11:03:07 ----A---- C:\Windows\system32\msshooks.dll
2008-10-02 11:03:06 ----A---- C:\Windows\system32\msscb.dll
2008-10-02 11:03:05 ----A---- C:\Windows\system32\thawbrkr.dll
2008-10-02 11:03:05 ----A---- C:\Windows\system32\srchadmin.dll
2008-10-02 11:03:05 ----A---- C:\Windows\system32\SearchFilterHost.exe
2008-10-02 11:03:05 ----A---- C:\Windows\system32\propsys.dll
2008-10-02 11:03:05 ----A---- C:\Windows\system32\propdefs.dll
2008-10-02 11:03:05 ----A---- C:\Windows\system32\msstrc.dll
2008-10-02 11:03:05 ----A---- C:\Windows\system32\mssprxy.dll
2008-10-02 11:03:05 ----A---- C:\Windows\system32\mssitlb.dll
2008-10-02 11:03:05 ----A---- C:\Windows\system32\msshsq.dll
2008-10-02 11:03:05 ----A---- C:\Windows\system32\korwbrkr.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\xmlfilter.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\wsepno.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\tquery.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2008-10-02 11:03:04 ----A---- C:\Windows\system32\SearchIndexer.exe
2008-10-02 11:03:04 ----A---- C:\Windows\system32\rtffilt.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\offfilt.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\nlhtml.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\mssvp.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\mssrch.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\mssphtb.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\mssph.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\msscntrs.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\mimefilt.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\chtbrkr.dll
2008-10-02 11:03:04 ----A---- C:\Windows\system32\chsbrkr.dll
2008-10-02 11:00:34 ----D---- C:\Program Files\MSXML 4.0
2008-10-02 10:21:30 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2008-10-02 10:21:28 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2008-10-02 10:21:21 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2008-10-02 10:21:02 ----A---- C:\Windows\system32\IPSECSVC.DLL
2008-10-02 10:20:57 ----A---- C:\Windows\system32\EncDec.dll
2008-10-02 10:20:56 ----A---- C:\Windows\system32\psisdecd.dll
2008-10-02 10:20:27 ----A---- C:\Windows\system32\rpcrt4.dll
2008-10-02 10:20:26 ----A---- C:\Windows\system32\pacerprf.dll
2008-10-02 10:20:12 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2008-10-02 10:20:12 ----A---- C:\Windows\system32\gameux.dll
2008-10-02 10:20:12 ----A---- C:\Windows\system32\Apphlpdm.dll
2008-10-02 10:19:31 ----A---- C:\Windows\system32\shell32.dll
2008-10-02 10:19:06 ----A---- C:\Windows\system32\es.dll
2008-10-02 10:19:02 ----A---- C:\Windows\system32\wmpeffects.dll
2008-10-02 10:18:52 ----A---- C:\Windows\system32\inetcomm.dll
2008-10-02 10:08:37 ----A---- C:\Windows\system32\emdmgmt.dll
2008-10-02 10:08:37 ----A---- C:\Windows\system32\dataclen.dll
2008-10-02 10:08:37 ----A---- C:\Windows\system32\cdd.dll
2008-10-02 10:07:49 ----A---- C:\Windows\system32\wshext.dll
2008-10-02 10:07:49 ----A---- C:\Windows\system32\wscript.exe
2008-10-02 10:07:49 ----A---- C:\Windows\system32\vbscript.dll
2008-10-02 10:07:49 ----A---- C:\Windows\system32\scrrun.dll
2008-10-02 10:07:49 ----A---- C:\Windows\system32\scrobj.dll
2008-10-02 10:07:49 ----A---- C:\Windows\system32\jscript.dll
2008-10-02 10:07:49 ----A---- C:\Windows\system32\cscript.exe
2008-10-02 10:07:38 ----A---- C:\Windows\system32\quartz.dll
2008-10-02 09:54:05 ----A---- C:\Windows\system32\wups2.dll
2008-10-02 09:54:05 ----A---- C:\Windows\system32\wucltux.dll
2008-10-02 09:54:05 ----A---- C:\Windows\system32\wuaueng.dll
2008-10-02 09:54:05 ----A---- C:\Windows\system32\wuauclt.exe
2008-10-02 09:53:41 ----A---- C:\Windows\system32\wups.dll
2008-10-02 09:53:41 ----A---- C:\Windows\system32\wudriver.dll
2008-10-02 09:53:41 ----A---- C:\Windows\system32\wuapi.dll
2008-10-02 09:53:31 ----A---- C:\Windows\system32\wuwebv.dll
2008-10-02 09:53:31 ----A---- C:\Windows\system32\wuapp.exe
2008-10-02 00:55:26 ----A---- C:\ProgramData\MobileTV.exe
2008-10-02 00:55:26 ----A---- C:\ProgramData\DVD.exe
2008-10-02 00:55:25 ----A---- C:\ProgramData\MPV.exe
2008-10-02 00:55:25 ----A---- C:\ProgramData\Karaoke.exe
2008-10-02 00:55:25 ----A---- C:\ProgramData\Games.exe
2008-10-02 00:55:24 ----D---- C:\ProgramData\FRA
2008-10-02 00:55:24 ----A---- C:\ProgramData\hpqp.txt
2008-10-01 23:22:54 ----D---- C:\Temp
2008-10-01 23:16:40 ----D---- C:\Users\gaelle\AppData\Roaming\Symantec
2008-10-01 23:16:16 ----D---- C:\Users\gaelle\AppData\Roaming\DigitalPersona
2008-10-01 23:15:37 ----D---- C:\Users\gaelle\AppData\Roaming\Identities
2008-10-01 23:10:43 ----D---- C:\Users\gaelle\AppData\Roaming\Macromedia
2008-10-01 23:10:15 ----D---- C:\Users\gaelle\AppData\Roaming\Adobe
2008-10-01 23:10:05 ----D---- C:\Users\gaelle\AppData\Roaming\Hewlett-Packard
2008-10-01 23:10:00 ----D---- C:\ProgramData\Viewpoint
2008-10-01 23:09:59 ----D---- C:\Program Files\Viewpoint
2008-10-01 23:09:31 ----D---- C:\Program Files\Common Files\AOL
2008-10-01 23:09:30 ----D---- C:\Program Files\AIM6
2008-10-01 23:08:00 ----D---- C:\Users\gaelle\AppData\Roaming\Macrovision
2008-10-01 23:06:58 ----SD---- C:\Users\gaelle\AppData\Roaming\Microsoft
2008-10-01 23:06:58 ----D---- C:\Users\gaelle\AppData\Roaming\Media Center Programs
2008-10-01 23:00:41 ----SHD---- C:\ProgramData\Modèles
2008-10-01 23:00:41 ----SHD---- C:\ProgramData\Menu Démarrer
2008-10-01 23:00:41 ----SHD---- C:\ProgramData\Favoris
2008-10-01 23:00:41 ----SHD---- C:\ProgramData\Bureau
2008-10-01 23:00:41 ----SHD---- C:\Program Files\Fichiers communs
2008-08-29 10:18:58 ----A---- C:\Windows\system32\dns-sd.exe
2008-08-29 09:53:50 ----A---- C:\Windows\system32\dnssd.dll
2008-08-19 16:28:49 ----D---- C:\ProgramData\NVIDIA
2008-08-19 16:27:23 ----A---- C:\ProgramData\hpqp.ini
2008-08-19 16:27:17 ----D---- C:\ProgramData\CyberLink
2008-08-19 16:26:46 ----D---- C:\Windows\system32\tr
2008-08-19 16:26:46 ----D---- C:\Windows\system32\ru
2008-08-19 16:26:46 ----D---- C:\Windows\system32\ko
2008-08-19 16:26:46 ----D---- C:\Windows\system32\ja
2008-08-19 16:26:45 ----D---- C:\Windows\system32\it
2008-08-19 16:26:45 ----D---- C:\Windows\system32\es
2008-08-19 16:26:45 ----D---- C:\Windows\system32\de
2008-08-19 16:26:45 ----D---- C:\Windows\DPDrv
2008-08-19 16:26:29 ----D---- C:\ProgramData\Macrovision
2008-08-19 16:26:29 ----D---- C:\Program Files\DigitalPersona
2008-08-19 16:21:35 ----D---- C:\Program Files\Common Files\LightScribe
2008-08-19 15:52:43 ----A---- C:\Windows\system32\stlang.dll
2008-08-19 15:52:43 ----A---- C:\Windows\system32\idtmini1.exe
2008-08-19 15:52:43 ----A---- C:\Windows\system32\aestecap.dll
2008-08-19 15:52:43 ----A---- C:\Windows\system32\AESTCom.dll
2008-08-19 15:52:43 ----A---- C:\Windows\system32\aestaren.dll
2008-08-19 15:52:43 ----A---- C:\Windows\system32\aestacap.dll
2008-08-19 15:52:43 ----A---- C:\Windows\sttray.exe
2008-08-19 15:52:08 ----A---- C:\Windows\system32\staco.dll
2008-08-19 15:51:55 ----A---- C:\Windows\system32\stcplx.dll
2008-08-19 15:51:55 ----A---- C:\Windows\system32\stapo.dll
2008-08-19 15:51:55 ----A---- C:\Windows\system32\stapi32.dll
2008-08-19 15:51:53 ----D---- C:\Program Files\IDT
2008-08-19 15:51:49 ----A---- C:\Windows\xUninstall.bat
2008-08-19 15:49:39 ----D---- C:\Windows\JMCR_DIR
2008-08-19 15:49:39 ----A---- C:\Windows\system32\JmCrIcon.dll
2008-08-19 15:49:20 ----D---- C:\Program Files\Validity Sensors, Inc
2008-08-19 15:48:01 ----D---- C:\Program Files\Synaptics
2008-08-19 15:47:43 ----A---- C:\Windows\system32\WdfCoInstaller01000.dll
2008-08-19 15:47:40 ----A---- C:\Windows\system32\SynTPCo4.dll
2008-08-19 15:47:40 ----A---- C:\Windows\system32\SynTPAPI.dll
2008-08-19 15:47:39 ----A---- C:\Windows\system32\SynCtrl.dll
2008-08-19 15:47:39 ----A---- C:\Windows\system32\SynCOM.dll
2008-08-19 15:46:56 ----D---- C:\Program Files\Realtek
2008-08-19 15:46:36 ----D---- C:\Windows\system32\HPMDP
2008-08-19 15:46:17 ----A---- C:\Windows\system32\nvexpbar.dll
2008-08-19 15:46:17 ----A---- C:\Windows\system32\nvcpluir.dll
2008-08-19 15:46:17 ----A---- C:\Windows\system32\nvcplui.exe
2008-08-19 15:45:16 ----A---- C:\Windows\system32\NVUNINST.EXE
2008-08-19 15:43:42 ----D---- C:\Program Files\Intel
2008-08-19 15:43:42 ----A---- C:\Windows\system32\CSVer.dll
2008-08-19 15:43:28 ----D---- C:\Intel
2008-08-19 15:42:57 ----A---- C:\Windows\system32\NETw5r32.dll
2008-08-19 15:42:57 ----A---- C:\Windows\system32\NETw5c32.dll
2008-08-19 15:38:40 ----D---- C:\Windows\SoftwareDistribution
2008-08-19 15:34:36 ----D---- C:\Windows\Prefetch
2008-07-30 10:11:15 ----A---- C:\Windows\system32\gdi32.dll
2008-07-30 10:08:59 ----D---- C:\Windows\Users
2008-07-30 10:08:55 ----A---- C:\Windows\system32\winresume.exe
2008-07-30 10:08:55 ----A---- C:\Windows\system32\winload.exe
2008-07-30 10:08:55 ----A---- C:\Windows\system32\kbd106n.dll
2008-07-30 10:08:54 ----A---- C:\Windows\system32\srdelayed.exe
2008-07-30 10:08:54 ----A---- C:\Windows\system32\srcore.dll
2008-07-30 10:08:54 ----A---- C:\Windows\system32\srclient.dll
2008-07-30 10:08:54 ----A---- C:\Windows\system32\setbcdlocale.dll
2008-07-30 10:08:54 ----A---- C:\Windows\system32\rstrui.exe
2008-07-30 10:08:54 ----A---- C:\Windows\system32\kd1394.dll
2008-07-30 10:08:54 ----A---- C:\Windows\system32\ci.dll
2008-07-30 10:07:53 ----D---- C:\Windows\panther
2008-07-30 10:05:56 ----D---- C:\Windows\fr-FR
2008-07-30 10:05:54 ----D---- C:\Windows\system32\fr
2008-07-30 10:05:54 ----D---- C:\Windows\system32\040C
2008-07-30 10:01:23 ----HD---- C:\HP
2008-07-30 02:20:38 ----D---- C:\Windows\Temp
2008-07-30 02:18:34 ----A---- C:\Windows\system32\javaws.exe
2008-07-30 02:18:34 ----A---- C:\Windows\system32\javaw.exe
2008-07-30 02:18:34 ----A---- C:\Windows\system32\java.exe
2008-07-30 02:18:01 ----D---- C:\Program Files\Java
2008-07-30 02:18:01 ----D---- C:\Program Files\Common Files\Java
2008-07-30 02:13:02 ----A---- C:\Windows\system32\ShellvRTF64.dll
2008-07-30 02:13:02 ----A---- C:\Windows\system32\ShellvRTF.dll
2008-07-30 02:11:47 ----D---- C:\Windows\Downloaded Installations
2008-07-30 02:09:02 ----D---- C:\ProgramData\AOL
2008-07-30 02:09:02 ----D---- C:\Program Files\AOL
2008-07-30 02:07:07 ----A---- C:\Windows\system32\ezsvc7x.dll
2008-07-30 02:07:07 ----A---- C:\Windows\system32\ezsvc7.dll
2008-07-30 02:07:06 ----D---- C:\Program Files\EasyBits For Kids
2008-07-30 01:59:30 ----D---- C:\Program Files\CyberLink
2008-07-30 01:58:56 ----D---- C:\ProgramData\Adobe
2008-07-30 01:58:51 ----D---- C:\Program Files\Common Files\Adobe
2008-07-30 01:58:51 ----D---- C:\Program Files\Adobe
2008-07-30 01:57:31 ----D---- C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
2008-07-30 01:57:26 ----D---- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
2008-07-30 01:56:57 ----A---- C:\Windows\system32\msonpmon.dll
2008-07-30 01:56:38 ----D---- C:\Program Files\Common Files\DESIGNER
2008-07-30 01:56:30 ----D---- C:\Windows\PCHEALTH
2008-07-30 01:56:30 ----D---- C:\Program Files\Microsoft.NET
2008-07-30 01:55:05 ----D---- C:\ProgramData\Microsoft Help
2008-07-30 01:54:17 ----RHD---- C:\MSOCache
2008-07-30 01:44:08 ----D---- C:\Program Files\muvee Technologies
2008-07-30 01:44:08 ----D---- C:\Program Files\Common Files\muvee Technologies
2008-07-30 01:44:08 ----A---- C:\Windows\system32\Mfc42loc.dll
2008-07-30 01:44:04 ----D---- C:\ProgramData\muvee Technologies
2008-07-30 01:33:34 ----D---- C:\Program Files\Microsoft Office
2008-07-30 01:32:53 ----D---- C:\Program Files\Microsoft Works
2008-07-30 01:32:23 ----D---- C:\Windows\system32\Macromed
2008-07-30 01:18:45 ----D---- C:\ProgramData\WildTangent
2008-07-30 01:18:45 ----D---- C:\ProgramData\Hewlett-Packard
2008-07-30 01:18:45 ----D---- C:\Program Files\HP Games
2008-07-30 01:18:44 ----RD---- C:\Program Files\Online Services
2008-07-30 01:17:30 ----A---- C:\Windows\CSUP.txt
2008-07-30 01:06:10 ----A---- C:\Windows\system32\BttnCmns_64.dll
2008-07-30 01:06:10 ----A---- C:\Windows\system32\BttnCmns.dll
2008-07-30 01:06:10 ----A---- C:\Windows\system32\BttnCmn.dll
2008-07-30 00:59:39 ----A---- C:\Windows\system32\msxml4a.dll
2008-07-30 00:59:24 ----D---- C:\Program Files\HP
2008-07-30 00:59:24 ----A---- C:\Windows\system32\atl71.dll
2008-07-30 00:42:33 ----D---- C:\Program Files\Common Files\Symantec Shared
2008-07-30 00:31:33 ----SHD---- C:\Windows\Installer
2008-07-30 00:30:43 ----HD---- C:\Program Files\InstallShield Installation Information
2008-07-30 00:30:42 ----D---- C:\Program Files\Common Files\InstallShield
2008-07-30 00:26:43 ----D---- C:\Program Files\Hewlett-Packard
2008-07-30 00:25:14 ----SHD---- C:\$RECYCLE.BIN
2008-07-30 00:15:57 ----SHD---- C:\System Volume Information
0
Réponse 12 / 28
moonoye
 
======List of files/folders modified in the last 3 months======

2008-10-16 11:34:53 ----RD---- C:\Program Files
2008-10-15 18:12:18 ----D---- C:\Windows\System32
2008-10-15 18:12:18 ----D---- C:\Windows\inf
2008-10-15 18:12:18 ----A---- C:\Windows\system32\PerfStringBackup.INI
2008-10-15 10:11:09 ----D---- C:\Windows\winsxs
2008-10-15 10:00:59 ----D---- C:\Windows\system32\catroot
2008-10-15 09:58:47 ----D---- C:\Windows\system32\migration
2008-10-15 09:58:47 ----D---- C:\Windows\system32\drivers
2008-10-15 09:58:47 ----D---- C:\Program Files\Windows Mail
2008-10-14 23:32:42 ----D---- C:\Windows\system32\catroot2
2008-10-14 15:55:26 ----D---- C:\Windows\system32\WDI
2008-10-12 14:12:14 ----D---- C:\Windows\system32\Tasks
2008-10-09 00:26:56 ----D---- C:\Windows
2008-10-08 23:48:45 ----RSD---- C:\Windows\assembly
2008-10-08 23:47:24 ----D---- C:\SwSetup
2008-10-07 21:19:40 ----A---- C:\Windows\system32\mrt.exe
2008-10-04 22:01:01 ----D---- C:\Windows\Tasks
2008-10-04 17:39:49 ----D---- C:\Program Files\Common Files
2008-10-04 17:39:09 ----HD---- C:\ProgramData
2008-10-04 00:20:29 ----D---- C:\Windows\Debug
2008-10-03 09:57:35 ----D---- C:\Windows\rescache
2008-10-03 09:45:38 ----D---- C:\Program Files\Common Files\microsoft shared
2008-10-02 22:52:40 ----D---- C:\Program Files\Internet Explorer
2008-10-02 17:30:16 ----SD---- C:\ProgramData\Microsoft
2008-10-02 14:49:30 ----D---- C:\Windows\Logs
2008-10-02 13:40:18 ----D---- C:\Windows\AppPatch
2008-10-02 13:40:16 ----D---- C:\Windows\system32\fr-FR
2008-10-02 13:40:15 ----D---- C:\Windows\PolicyDefinitions
2008-10-02 13:40:13 ----D---- C:\Windows\ehome
2008-10-02 11:01:28 ----D---- C:\Windows\Microsoft.NET
2008-10-02 10:42:31 ----D---- C:\Windows\system32\NDF
2008-10-02 00:49:51 ----D---- C:\Windows\SMINST
2008-10-01 23:15:20 ----D---- C:\Windows\system
2008-10-01 23:09:49 ----SD---- C:\Windows\Downloaded Program Files
2008-10-01 23:08:38 ----HD---- C:\System.sav
2008-10-01 23:08:38 ----D---- C:\Windows\system32\restore
2008-10-01 23:06:57 ----RD---- C:\Users
2008-10-01 23:00:41 ----D---- C:\Program Files\Windows NT
2008-08-19 16:29:18 ----D---- C:\Windows\system32\sysprep
2008-08-19 16:26:46 ----D---- C:\Windows\system32\pt-PT
2008-08-19 16:26:46 ----D---- C:\Windows\system32\pt-BR
2008-08-19 16:26:46 ----D---- C:\Windows\system32\nl-NL
2008-08-19 16:26:45 ----D---- C:\Windows\system32\zh-TW
2008-08-19 16:26:45 ----D---- C:\Windows\system32\zh-CN
2008-08-19 16:26:45 ----D---- C:\Windows\system32\en-US
2008-08-19 16:23:17 ----RSD---- C:\Windows\Fonts
2008-08-19 15:46:07 ----D---- C:\Windows\Help
2008-07-30 12:24:41 ----SHD---- C:\boot
2008-07-30 10:11:09 ----D---- C:\Windows\system32\oobe
2008-07-30 10:09:12 ----D---- C:\Windows\system32\Boot
2008-07-30 10:07:39 ----D---- C:\Windows\WindowsMobile
2008-07-30 10:07:39 ----D---- C:\Windows\system32\winrm
2008-07-30 10:07:39 ----D---- C:\Windows\system32\slmgr
2008-07-30 10:07:39 ----D---- C:\Windows\system32\setup
2008-07-30 10:07:39 ----D---- C:\Windows\system32\migwiz
2008-07-30 10:07:39 ----D---- C:\Windows\system32\Branding
2008-07-30 10:07:39 ----D---- C:\Windows\servicing
2008-07-30 10:07:39 ----D---- C:\Windows\MSAgent
2008-07-30 10:07:39 ----D---- C:\Windows\IME
2008-07-30 10:07:39 ----D---- C:\Windows\DigitalLocker
2008-07-30 10:07:39 ----D---- C:\Program Files\Windows Sidebar
2008-07-30 10:07:39 ----D---- C:\Program Files\Windows Photo Gallery
2008-07-30 10:07:39 ----D---- C:\Program Files\Windows Media Player
2008-07-30 10:07:39 ----D---- C:\Program Files\Windows Journal
2008-07-30 10:07:39 ----D---- C:\Program Files\Windows Defender
2008-07-30 10:07:39 ----D---- C:\Program Files\Windows Collaboration
2008-07-30 10:07:39 ----D---- C:\Program Files\Windows Calendar
2008-07-30 10:07:39 ----D---- C:\Program Files\Movie Maker
2008-07-30 10:07:39 ----D---- C:\Program Files\Common Files\System
2008-07-30 10:07:38 ----D---- C:\Windows\system32\WCN
2008-07-30 10:07:38 ----D---- C:\Windows\system32\wbem
2008-07-30 10:07:38 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2008-07-30 10:07:38 ----D---- C:\Windows\system32\MUI
2008-07-30 10:07:38 ----D---- C:\Windows\system32\DriverStore
2008-07-30 10:07:38 ----D---- C:\Windows\system32\com
2008-07-30 10:05:54 ----D---- C:\Windows\system32\XPSViewer
2008-07-30 01:55:22 ----D---- C:\Windows\ShellNew
2008-07-30 01:44:29 ----A---- C:\autoexec.bat

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 bdftdif;bdftdif; \??\C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdftdif.sys [2008-10-04 135560]
R2 BDVEDISK;BDVEDISK; \??\C:\Program Files\BitDefender\BitDefender 2009\BDVEDISK.sys [2008-07-02 82568]
R3 Accelerometer;HP Accelerometer; C:\Windows\system32\DRIVERS\Accelerometer.sys [2008-03-27 34664]
R3 bdfm;BDFM; C:\Windows\system32\drivers\bdfm.sys [2008-10-04 108864]
R3 Bdfndisf;BitDefender Firewall NDIS Filter Service; C:\Windows\system32\DRIVERS\bdfndisf.sys [2008-10-04 103944]
R3 bdfsfltr;bdfsfltr; C:\Windows\system32\DRIVERS\bdfsfltr.sys [2008-10-04 228672]
R3 BDSelfPr;BDSelfPr; \??\C:\Program Files\BitDefender\BitDefender 2009\bdselfpr.sys [2008-02-26 8448]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 enecir;ENE CIR Receiver; C:\Windows\system32\DRIVERS\enecir.sys [2008-01-24 52736]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2008-04-17 15464]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2008-07-08 96856]
R3 NETw5v32;Pilote de carte Intel(R) Wireless WiFi Link pour Windows Vista 32 bits ; C:\Windows\system32\DRIVERS\NETw5v32.sys [2008-04-28 3658752]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2008-05-14 43552]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-05-14 7443872]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-05-02 122368]
R3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt.sys [2008-06-27 380928]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-01-18 196784]
R3 usbvideo;Périphérique vidéo USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
R3 vfs101x;vfs101x; C:\Windows\system32\drivers\vfs101x.sys [2008-04-27 40752]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-02 464384]
S3 BthEnum;Pilote de bloc de demande Bluetooth; C:\Windows\system32\DRIVERS\BthEnum.sys [2008-01-21 19456]
S3 BthPan;Périphérique Bluetooth (réseau personnel); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
S3 BTHPORT;Pilote de port Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2008-01-21 219648]
S3 BTHUSB;Pilote USB radio Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2008-01-21 29184]
S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2008-01-21 987648]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-01-21 200704]
S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm60x32.sys [2006-11-02 429056]
S3 RFCOMM;Périphérique Bluetooth (TDI protocole RFCOMM); C:\Windows\system32\DRIVERS\rfcomm.sys [2008-01-21 49664]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]
S3 winachsf;winachsf; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2008-01-21 654336]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AESTFilters;Andrea ST Filters Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\aestsrv.exe [2008-06-27 77824]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-10-01 116040]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 DpHost;Biometric Authentication Service; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [2008-03-12 302144]
R2 ezSharedSvc;Easybits Shared Services for Windows; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2008-06-16 94208]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2008-03-18 19456]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-02-26 73728]
R2 LIVESRV;BitDefender Desktop Update Service; C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe [2008-10-04 393216]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-05-14 118784]
R2 QPCapSvc;QuickPlay Background Capture Service (QBCS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe [2008-06-25 292216]
R2 QPSched;QuickPlay Task Scheduler (QTS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe [2008-06-25 116080]
R2 Recovery Service for Windows;Recovery Service for Windows; C:\Windows\SMINST\BLService.exe [2008-04-26 361808]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-01-09 272024]
R2 STacSV;Audio Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\STacSV.exe [2008-06-27 221273]
R2 vfsFPService;Validity Fingerprint Service; C:\Windows\system32\vfsFPService.exe [2008-04-27 599344]
R2 VSSERV;BitDefender Virus Shield; C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe [2008-10-04 1527808]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-02-07 193840]
R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2008-01-09 148832]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-10-01 536872]
R3 scan;BitDefender Threat Scanner; C:\Windows\System32\svchost.exe [2008-01-21 21504]
S3 Arrakis3;BitDefender Arrakis Server; C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [2008-07-17 118784]
S3 GameConsoleService;GameConsoleService; C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe [2008-05-06 165416]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-10-02 156656]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]

-----------------EOF-----------------
0
Réponse 13 / 28
moonoye
 
voilà,

Antivirus Version Dernière mise à jour Résultat
AhnLab-V3 2008.9.13.0 2008.09.12 -
AntiVir 7.8.1.28 2008.09.12 -
Authentium 5.1.0.4 2008.09.13 -
Avast 4.8.1195.0 2008.09.13 -
AVG 8.0.0.161 2008.09.14 -
BitDefender 7.2 2008.09.14 Trojan.Peed.Gen
CAT-QuickHeal 9.50 2008.09.13 -
ClamAV 0.93.1 2008.09.14 -
DrWeb 4.44.0.09170 2008.09.14 -
eSafe 7.0.17.0 2008.09.14 Suspicious File
eTrust-Vet 31.6.6087 2008.09.12 -
Ewido 4.0 2008.09.14 -
F-Prot 4.4.4.56 2008.09.14 -
F-Secure 8.0.14332.0 2008.09.14 -
Fortinet 3.113.0.0 2008.09.14 -
GData 19 2008.09.14 -
Ikarus T3.1.1.34.0 2008.09.14 -
K7AntiVirus 7.10.454 2008.09.13 -
Kaspersky 7.0.0.125 2008.09.14 -
McAfee 5383 2008.09.12 -
Microsoft 1.3903 2008.09.14 -
NOD32v2 3440 2008.09.13 -
Norman 5.80.02 2008.09.12 -
Panda 9.0.0.4 2008.09.13 -
PCTools 4.4.2.0 2008.09.13 -
Prevx1 V2 2008.09.14 -
Rising 20.61.42.00 2008.09.12 -
Sophos 4.33.0 2008.09.14 -
Sunbelt 3.1.1633.1 2008.09.13 -
Symantec 10 2008.09.14 -
TheHacker 6.3.0.9.082 2008.09.14 -
TrendMicro 8.700.0.1004 2008.09.12 -
VBA32 3.12.8.5 2008.09.13 -
ViRobot 2008.9.12.1375 2008.09.12 -
VirusBuster 4.5.11.0 2008.09.14 -
Webwasher-Gateway 6.6.2 2008.09.14 Virus.Win32.FileInfector.gen!90 (suspicious)
Information additionnelle
File size: 3765768 bytes
MD5...: 1d4f33a6a9fb721b5b1cd8bed20f2599
SHA1..: 8e1bf8ca28191e4ee500789a5d89dc87f4242caa
SHA256: 8b8f099813c58443aaf8b5ab085a7e37f5875c1937e5b35f0a076461f9f14532
SHA512: f91400cb8528a1aeda38a67d022517d4749bc62d0068dae6c54217717e1355ec
2e0d71713f11728a71edb8878513acff50700acd3695846034907feda7ae83fd
PEiD..: -
TrID..: File type identification
Win32 EXE PECompact compressed (generic) (41.8%)
Win32 Executable MS Visual C++ (generic) (37.9%)
Win32 Executable Generic (8.5%)
Win32 Dynamic Link Library (generic) (7.6%)
Generic Win/DOS Executable (2.0%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x468426
timedatestamp.....: 0x47434da1 (Tue Nov 20 21:12:01 2007)
machinetype.......: 0x14c (I386)

( 7 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x954d6 0x96000 6.53 3544aa24e6708dfb5e543b9a232134a7
.pecode 0x97000 0xd8c5 0xe000 8.00 69d469e588d8d3823591ba53a397273b
.pccode 0xa5000 0x1106 0x2000 7.98 4fe69ddb9a7b4e736e69f231f151dc7d
.rdata 0xa7000 0x27170 0x28000 5.41 2256ed9900ac691a286913923a6b9a47
.data 0xcf000 0x9e94 0x4000 4.39 31cd355ddaa6d3996a84a4ee1666317f
.phs 0xd9000 0x428 0x1000 7.64 f144dd1b4f4bc237aecf1db3e3bc5682
.rsrc 0xda000 0xc418 0xd000 4.95 c36f07266122ee7c32e09d582f370d27

( 18 imports )
> WINMM.dll: timeGetTime, PlaySoundA
> DINPUT8.dll: DirectInput8Create
> KERNEL32.dll: GetVolumeInformationA, HeapFree, HeapAlloc, IsBadReadPtr, UnmapViewOfFile, MapViewOfFile, CreateFileMappingA, FormatMessageA, LockFile, UnlockFile, lstrcpyA, EnumResourceLanguagesA, ConvertDefaultLocale, lstrcmpA, GlobalDeleteAtom, GlobalAddAtomA, lstrcmpW, lstrcatA, GlobalFindAtomA, GlobalGetAtomNameA, GlobalFlags, GlobalReAlloc, GlobalHandle, LocalReAlloc, TlsFree, SetErrorMode, GetFileTime, GetCPInfo, GetOEMCP, DeviceIoControl, ExitProcess, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, HeapReAlloc, GetSystemTimeAsFileTime, GetFileType, GetStartupInfoA, GetCommandLineA, GetDriveTypeA, HeapSize, HeapDestroy, HeapCreate, VirtualFree, IsBadWritePtr, LCMapStringA, LCMapStringW, GetTimeZoneInformation, SetHandleCount, GetStdHandle, SetStdHandle, UnhandledExceptionFilter, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetStringTypeA, GetStringTypeW, IsBadCodePtr, EnumSystemLocalesA, IsValidLocale, IsValidCodePage, SetEnvironmentVariableA, SetLastError, WritePrivateProfileStringA, VirtualProtectEx, TlsAlloc, TlsSetValue, TlsGetValue, FlushFileBuffers, MoveFileA, GetFileAttributesExA, GetCurrentDirectoryA, GetCurrentThread, SetThreadAffinityMask, QueryPerformanceCounter, QueryPerformanceFrequency, GetWindowsDirectoryA, LocalAlloc, LocalFree, DuplicateHandle, GetPrivateProfileStringA, FileTimeToSystemTime, GetFileSize, SetEndOfFile, SetFilePointer, WriteFile, ReadFile, GetSystemTime, SystemTimeToFileTime, FileTimeToLocalFileTime, TerminateThread, GetFullPathNameA, LocalFileTimeToFileTime, SetFileTime, SetFileAttributesA, DosDateTimeToFileTime, CreateDirectoryA, FindNextFileA, FindFirstFileA, CopyFileA, CompareStringA, CompareStringW, GetVersion, EnumResourceNamesA, CreateThread, DeleteFileA, ReleaseMutex, CreateMutexA, ResumeThread, GetCurrentProcess, VirtualAllocEx, WriteProcessMemory, LoadLibraryA, CreateRemoteThread, VirtualFreeEx, GetCurrentProcessId, GlobalAlloc, GlobalLock, GlobalUnlock, GlobalFree, LockResource, FreeResource, MulDiv, LoadLibraryW, GetProcAddress, FindFirstFileW, FindNextFileW, FindClose, GetModuleFileNameW, GetFileAttributesW, GetNumberFormatW, GetDateFormatW, GetUserDefaultLCID, GetUserGeoID, GetUserDefaultUILanguage, GetSystemDefaultLangID, GetLocaleInfoW, EnterCriticalSection, LeaveCriticalSection, RaiseException, DeleteCriticalSection, IsDBCSLeadByte, lstrcpynA, lstrcmpiA, LoadLibraryExA, FindResourceA, LoadResource, SizeofResource, FreeLibrary, GetLastError, MultiByteToWideChar, GetModuleFileNameA, lstrlenA, GetModuleHandleA, InterlockedDecrement, InterlockedIncrement, InitializeCriticalSection, OpenProcess, OpenThread, GetExitCodeProcess, CreateEventA, TerminateProcess, ResetEvent, SetEvent, SetUnhandledExceptionFilter, IsDebuggerPresent, WaitForSingleObject, Sleep, WideCharToMultiByte, lstrlenW, CreateFileA, GetTickCount, GetCurrentThreadId, GetThreadLocale, GetLocaleInfoA, GetACP, InterlockedExchange, GetVersionExA, GetFileAttributesA, CreateProcessA, CloseHandle, RtlUnwind
> USER32.dll: PostThreadMessageA, MessageBeep, GetNextDlgGroupItem, InvalidateRgn, CopyAcceleratorTableA, SetRect, IsRectEmpty, GetSysColorBrush, DestroyMenu, WinHelpA, GetCapture, CreateWindowExA, GetClassLongA, GetClassInfoExA, SetPropA, GetPropA, RemovePropA, IsChild, GetTopWindow, GetMessageTime, GetMessagePos, MapWindowPoints, UpdateWindow, GetMenu, AdjustWindowRectEx, EqualRect, GetClassInfoA, RegisterClassA, DefWindowProcA, CallWindowProcA, CopyRect, RegisterWindowMessageA, RegisterClipboardFormatA, SetWindowContextHelpId, MapDialogRect, SetMenuItemBitmaps, ModifyMenuA, CheckMenuItem, GetMenuCheckMarkDimensions, SetWindowsHookExA, CallNextHookEx, GetMessageA, TranslateMessage, DispatchMessageA, GetKeyState, PeekMessageA, ValidateRect, MessageBoxA, GetLastActivePopup, UnhookWindowsHookEx, GetSysColor, EndPaint, BeginPaint, GetWindowDC, ClientToScreen, GrayStringA, DrawTextExA, DrawTextA, TabbedTextOutA, GetMenuState, GetSubMenu, GetDesktopWindow, GetActiveWindow, SetActiveWindow, CreateDialogIndirectParamA, DestroyWindow, GetNextDlgTabItem, EndDialog, GetWindowTextA, GetFocus, SetWindowPos, IsWindowEnabled, SetWindowLongA, GetDlgCtrlID, SetWindowTextA, GetWindowLongA, IsDialogMessageA, SendDlgItemMessageA, GetDlgItem, GetWindow, ChangeDisplaySettingsA, EnumDisplaySettingsA, GetDC, ReleaseDC, CharUpperA, EnableWindow, EnableMenuItem, SetWindowRgn, GetClientRect, IsIconic, DrawIcon, InvalidateRect, SendMessageA, SetTimer, GetSystemMenu, InsertMenuA, GetMenuItemCount, LoadIconA, LoadStringW, MessageBoxW, CharLowerBuffA, OffsetRect, SetCapture, ReleaseCapture, LoadCursorA, SetCursor, IsWindow, GetCursorPos, PtInRect, LoadBitmapA, CharLowerBuffW, UnregisterClassA, CharNextA, PostQuitMessage, wsprintfA, FindWindowExA, SetWindowPlacement, WaitForInputIdle, SystemParametersInfoA, MoveWindow, GetClassNameA, PostMessageA, ShowWindow, GetWindowPlacement, SendInput, GetLastInputInfo, GetForegroundWindow, AttachThreadInput, SetForegroundWindow, SetFocus, FindWindowA, EnumWindows, GetWindowThreadProcessId, IsWindowVisible, GetWindowRect, GetSystemMetrics, IntersectRect, GetParent, GetMenuItemID
> GDI32.dll: ScaleViewportExtEx, OffsetViewportOrgEx, SetViewportOrgEx, SelectObject, Escape, ExtTextOutA, TextOutA, RectVisible, PtVisible, GetRgnBox, GetTextColor, GetBkColor, GetMapMode, CreateRectRgnIndirect, GetStockObject, CreateBitmap, DeleteDC, ExtSelectClipRgn, ScaleWindowExtEx, CreateCompatibleDC, SetViewportExtEx, GetObjectA, GetWindowExtEx, GetViewportExtEx, DeleteObject, GetClipBox, SetMapMode, SetTextColor, SetBkColor, RestoreDC, SaveDC, CreateRectRgn, CreateRoundRectRgn, BitBlt, GetDeviceCaps, SetWindowExtEx
> comdlg32.dll: GetFileTitleA
> WINSPOOL.DRV: DocumentPropertiesA, OpenPrinterA, ClosePrinter
> ADVAPI32.dll: RegQueryValueExA, RegEnumKeyExA, RegOpenKeyExA, RegDeleteKeyA, RegDeleteValueA, RegCreateKeyExA, RegSetValueExA, RegQueryInfoKeyA, RegQueryValueA, RegEnumKeyA, RegOpenKeyA, RegCloseKey, GetUserNameA, RegSetKeySecurity, ImpersonateSelf, RevertToSelf
> SHELL32.dll: SHGetSpecialFolderPathA, ShellExecuteExA, SHGetFileInfoA, SHFileOperationA
> COMCTL32.dll: -
> SHLWAPI.dll: PathStripToRootA, PathIsUNCA, PathFindExtensionA, PathFileExistsA, PathFindFileNameA
> oledlg.dll: -
> ole32.dll: StgCreateDocfileOnILockBytes, CreateStreamOnHGlobal, CreateILockBytesOnHGlobal, CoTaskMemAlloc, CoTaskMemFree, CoUninitialize, CoInitialize, CoCreateInstance, CoRevokeClassObject, StringFromCLSID, CoCreateGuid, CLSIDFromString, CoSetProxyBlanket, CoInitializeSecurity, CoInitializeEx, CLSIDFromProgID, OleUninitialize, CoFreeUnusedLibraries, OleInitialize, CoGetClassObject, StgOpenStorageOnILockBytes, CoRegisterMessageFilter, OleFlushClipboard, OleIsCurrentClipboard, CoTaskMemRealloc
> OLEAUT32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
> urlmon.dll: URLDownloadToCacheFileA
> WS2_32.dll: -, -, -, -, -
> WININET.dll: HttpOpenRequestA, InternetGetLastResponseInfoA, InternetReadFile, InternetCloseHandle, InternetOpenA, InternetConnectA, HttpAddRequestHeadersA, HttpQueryInfoA, HttpSendRequestA, InternetQueryOptionA
> iphlpapi.dll: GetAdaptersInfo

( 0 exports )
0
Réponse 14 / 28
moonoye
 
et bien non... ^^,
0
Réponse 15 / 28
moonoye
 
bonjour (excuse),

Alors j'ai redemarrer en mode sans echec, j'ai supprimer le fichier, j'ai redemarrer le pc et fais une annalyse anti-virus et a première vue il n'y a plus rien.

Par contre j'aimerai savoir une chose, si jamais je fais une reinstallation du systhème un jour est ce que le trojan sera là?

Merci ^^,
0
Réponse 16 / 28
moonoye
 
Merci!

le pc fonctionne bien enfin j'ai juste un souci par rapport a mon navigateur ça arrive souvent qu'il rencontre un problème et qui me ferme ma page je ne sais pas pourquoi, j'uttilise opera. avant j'uttilisais firefox ça le fesais donc j'ai changé de navigateur.
0
Réponse 17 / 28
moonoye
 
c cleaner oui je connais mais je n'ai pas encore installé ce genre de logiciel sur mon pc portable, ça fais trois semaines que je l'ai.
Je vais l'installé, autre chose a installé en plus ou ça suffira?
0
Réponse 18 / 28
moonoye
 
ok merci beaucoup pour ton aide ^^,

@+
0
Réponse 19 / 28
moonoye
 
j'ai un pare-feu egalement avec l'antivirus, c'est Bitdefender total security 2009 que j'ai acheté.
0
Réponse 20 / 28
moonoye
 
ok merci.

pour le reste oui c'est sure il faudrais etre fou! ^^,

Sinon opera continu a ce fermer, je vais regarder au niveau de l'antivirus...
0

Discussions similaires

~comment ecrire arobase clavier hp
pecos -
Philippe5998 -

9 réponses
Comment faire arobase sur mon hp
Arobase -
Ossi -

3 réponses
Comment taper l'arobase sur un pc hp ?
kadem -
Parys -

6 réponses
Win64 malware gen
jules555 -
bazfile -

1 réponse
Problème scanner HP Deskjet 2320
manineVLB -
manineVLB -

3 réponses