VIRUS xih9.cmd VOILA LE RAPPORT LOG ET INFO

JACKSAM82 -  
 Utilisateur anonyme -
Bonjour,
Logfile of random's system information tool 1.04 (written by random/random)
Run by GIDIPRES at 2002-11-18 07:53:41
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 11 GB (38%) free of 30 GB
Total RAM: 1014 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:53:51, on 18/11/2002
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Acer\Empowering Technology\eLock\LockServ.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Acer\Empowering Technology\eLock\Monitor\LockMon.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\DOCUME~1\GIDIPRES\LOCALS~1\Temp\RtkBtMnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\eMule\emule.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\GIDIPRES\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\GIDIPRES.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [Boot] C:\Acer\Empowering Technology\ePower\Boot.exe
O4 - HKLM\..\Run: [eLockMonitor] C:\Acer\Empowering Technology\eLock\Monitor\LaunchMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [kamsoft] C:\WINDOWS\system32\ckvo.exe
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Télécharger tous les liens avec IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LockServ - Unknown owner - C:\Acer\Empowering Technology\eLock\LockServ.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

--
End of file - 9755 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Vérifier les mises à jour de Windows Live Toolbar.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}]
IDMIEHlprObj Class - C:\Program Files\Internet Download Manager\IDMIECC.dll [2008-10-28 153008]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
&Yahoo! Toolbar Helper - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll [2008-05-15 817936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll [2008-05-15 817936]
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Windows Live Toolbar - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]
{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\WINDOWS\system32\eDStoolbar.dll [2006-03-08 106496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2008-07-19 78008]
"SpeedTouch USB Diagnostics"=C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe [2004-01-26 866816]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-07-19 2879488]
"igfxtray"=C:\WINDOWS\system32\igfxtray.exe [2006-06-13 94208]
"igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2006-06-13 77824]
"igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2006-06-13 118784]
"AzMixerSel"=C:\Program Files\Realtek\InstallShield\AzMixerSel.exe [2006-07-19 53248]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-07-19 16248320]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2006-07-19 69632]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-04-29 766041]
"Acer ePresentation HPD"=C:\Acer\Empowering Technology\ePresentation\ePresentation.exe [2006-06-07 208896]
"ePower_DMC"=C:\Acer\Empowering Technology\ePower\ePower_DMC.exe [2006-07-12 438272]
"Boot"=C:\Acer\Empowering Technology\ePower\Boot.exe [2006-03-15 579584]
"eLockMonitor"=C:\Acer\Empowering Technology\eLock\Monitor\LaunchMonitor.exe [2006-03-31 16384]
"eDataSecurity Loader"=C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [2006-03-17 345088]
"NeroFilterCheck"=C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe [2007-03-01 153136]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-09-20 1836328]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-19 15360]
"IDMan"=C:\Program Files\Internet Download Manager\IDMan.exe [2008-10-29 2610608]
"Messenger (Yahoo!)"=C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [2008-11-05 4347120]
"MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]
"eNMTray.exe"= []
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2008-11-15 270128]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe [2007-10-23 202024]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2008-09-29 21755688]
"kamsoft"=C:\WINDOWS\system32\ckvo.exe []
"eMuleAutoStart"=C:\Program Files\eMule\emule.exe [2008-08-01 5480448]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Acer Empowering Technology.lnk - C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-06-13 139264]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2916954a-b3b5-11dd-8f17-00197e27b94f}]
shell\AutoRun\command - xih9.cmd
shell\explore\command - xih9.cmd
shell\open\command - xih9.cmd

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2916954b-b3b5-11dd-8f17-00197e27b94f}]
shell\AutoRun\command - F:\xih9.cmd
shell\explore\command - F:\xih9.cmd
shell\open\command - F:\xih9.cmd

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b2f34c71-b465-11dd-8f19-0018f66ab952}]
shell\AutoRun\command - xih9.cmd
shell\explore\command - xih9.cmd
shell\open\command - xih9.cmd

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fa28492f-b53b-11dd-8f1e-0018f66ab952}]
shell\AutoRun\command - F:\xih9.cmd
shell\explore\command - F:\xih9.cmd
shell\open\command - F:\xih9.cmd

======List of files/folders created in the last 2 months======

2008-11-18 06:51:15 ----A---- C:\WINDOWS\system32\pmnnMdbB.dll
2008-11-18 03:03:13 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2008-11-18 03:03:07 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
2008-11-18 03:02:32 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2008-11-18 03:02:26 ----D---- C:\Program Files\MSXML 6.0
2008-11-18 03:02:14 ----HDC---- C:\WINDOWS\$NtUninstallKB925720$
2008-11-18 03:02:08 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2008-11-18 03:02:01 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2008-11-18 03:01:50 ----HDC---- C:\WINDOWS\$NtUninstallKB951072-v2$
2008-11-18 03:01:40 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2008-11-18 03:01:33 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2008-11-18 03:01:27 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2008-11-18 03:01:19 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2008-11-18 03:01:06 ----SHD---- C:\Config.Msi
2008-11-18 03:01:06 ----D---- C:\Program Files\MSXML 4.0
2008-11-18 03:00:25 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2008-11-17 23:28:21 ----D---- C:\Documents and Settings\GIDIPRES\Application Data\skypePM
2008-11-17 23:26:02 ----D---- C:\Documents and Settings\GIDIPRES\Application Data\Skype
2008-11-17 23:25:46 ----D---- C:\Program Files\Skype
2008-11-17 23:25:45 ----D---- C:\Program Files\Fichiers communs\Skype
2008-11-17 23:25:35 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
2008-11-17 15:29:27 ----D---- C:\WINDOWS\Minidump
2008-11-17 11:51:47 ----N---- C:\WINDOWS\system32\spmsg.dll
2008-11-17 11:51:41 ----HDC---- C:\WINDOWS\$NtUninstallKB926239$
2008-11-17 11:51:17 ----D---- C:\Program Files\Windows Media Connect 2
2008-11-17 11:51:06 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2008-11-17 11:50:13 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2008-11-17 11:49:37 ----D---- C:\WINDOWS\system32\LogFiles
2008-11-17 11:49:21 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2008-11-17 11:39:05 ----A---- C:\WINDOWS\NeroDigital.ini
2008-11-17 10:11:06 ----D---- C:\Documents and Settings\GIDIPRES\Application Data\Nero
2008-11-17 10:10:21 ----A---- C:\WINDOWS\system32\MsiExec.exe.log
2008-11-17 10:05:06 ----D---- C:\Program Files\Nero
2008-11-17 10:05:06 ----D---- C:\Program Files\Fichiers communs\Nero
2008-11-17 10:05:06 ----D---- C:\Documents and Settings\All Users\Application Data\Nero
2008-11-17 10:03:12 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2008-11-17 10:03:09 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2008-11-17 09:10:48 ----D---- C:\WINDOWS\RegisteredPackages
2008-11-17 08:50:09 ----D---- C:\Program Files\Common Files
2008-11-17 05:23:33 ----A---- C:\WINDOWS\ODBC.INI
2008-11-17 05:23:19 ----A---- C:\WINDOWS\system32\mdimon.dll
2008-11-17 05:20:40 ----D---- C:\Program Files\Fichiers communs\DESIGNER
2008-11-17 05:20:33 ----D---- C:\Program Files\Microsoft Works
2008-11-17 05:20:18 ----D---- C:\Program Files\Microsoft Visual Studio
2008-11-17 05:19:55 ----D---- C:\WINDOWS\SHELLNEW
2008-11-17 05:18:04 ----D---- C:\Program Files\Microsoft.NET
2008-11-17 05:18:04 ----D---- C:\Program Files\Microsoft Office
2008-11-17 05:07:56 ----D---- C:\Program Files\GetData
2008-11-17 05:07:39 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2008-11-17 01:31:47 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2008-11-17 00:48:12 ----A---- C:\WINDOWS\system32\muweb.dll
2008-11-17 00:48:12 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2008-11-17 00:48:11 ----A---- C:\WINDOWS\system32\mucltui.dll
2008-11-16 15:43:07 ----SHD---- C:\RECYCLER
2008-11-16 15:32:30 ----D---- C:\Program Files\Fichiers communs\Adobe
2008-11-16 15:32:27 ----D---- C:\Program Files\Adobe
2008-11-16 15:30:02 ----A---- C:\WINDOWS\IsUninst.exe
2008-11-16 08:21:44 ----N---- C:\WINDOWS\system32\agrsmdel.exe
2008-11-16 08:17:36 ----RASH---- C:\WINDOWS\system32\Desktop_.ini
2008-11-16 08:17:36 ----D---- C:\WINDOWS\Options
2008-11-16 08:17:36 ----D---- C:\Program Files\Atheros
2008-11-16 08:16:57 ----D---- C:\Documents and Settings\All Users\Application Data\Atheros
2008-11-16 08:16:56 ----D---- C:\Documents and Settings\GIDIPRES\Application Data\InstallShield
2008-11-16 08:15:22 ----D---- C:\Documents and Settings\All Users\Application Data\QMI
2008-11-16 08:03:32 ----D---- C:\Documents and Settings\GIDIPRES\Application Data\Adobe
2008-11-16 08:00:05 ----D---- C:\Program Files\WinPCap
2008-11-16 08:00:05 ----A---- C:\WINDOWS\system32\pthreadVC.dll
2008-11-16 07:59:46 ----A---- C:\WINDOWS\system32\results.txt
2008-11-16 07:59:26 ----D---- C:\Program Files\Intel
2008-11-16 07:59:26 ----D---- C:\Documents and Settings\All Users\Application Data\Intel
2008-11-16 07:59:12 ----A---- C:\WINDOWS\system32\acerGina.dll
2008-11-16 07:59:11 ----A---- C:\WINDOWS\system32\wpcap.dll
2008-11-16 07:59:11 ----A---- C:\WINDOWS\system32\WirelessMgr.dll
2008-11-16 07:59:11 ----A---- C:\WINDOWS\system32\WanPacket.dll
2008-11-16 07:59:11 ----A---- C:\WINDOWS\system32\packet.dll
2008-11-16 07:43:18 ----D---- C:\Program Files\Acer Inc
2008-11-16 07:43:16 ----A---- C:\WINDOWS\UNINST32.EXE
2008-11-16 07:38:19 ----D---- C:\WINDOWS\system32\URTTEMP
2008-11-16 07:29:32 ----D---- C:\WINDOWS\tiinst
2008-11-16 07:28:34 ----D---- C:\WINDOWS\Downloaded Installations
2008-11-16 07:27:39 ----A---- C:\WINDOWS\system32\cdinfo.exe
2008-11-16 07:27:05 ----A---- C:\WINDOWS\system32\Epm-Po.dll
2008-11-16 07:27:05 ----A---- C:\WINDOWS\system32\acpimof.dll
2008-11-16 07:25:39 ----A---- C:\WINDOWS\system32\eRecUtil.dll
2008-11-16 07:25:38 ----A---- C:\WINDOWS\system32\Acer.Empowering.Windows.Forms_v820.dll
2008-11-16 07:25:37 ----A---- C:\WINDOWS\system32\ScrollBarLib.dll
2008-11-16 07:25:36 ----A---- C:\WINDOWS\system32\SysMonitor.exe
2008-11-16 07:25:36 ----A---- C:\WINDOWS\system32\Interop.Shell32.dll
2008-11-16 07:25:36 ----A---- C:\WINDOWS\system32\Acer.Empowering.Windows.Forms.dll
2008-11-16 07:25:33 ----A---- C:\WINDOWS\system32\mfc71u.dll
2008-11-16 07:25:30 ----D---- C:\Acer
2008-11-16 07:24:28 ----A---- C:\WINDOWS\system32\SynTPFcs.dll
2008-11-16 07:24:28 ----A---- C:\WINDOWS\system32\SynTPCo2.dll
2008-11-16 07:24:28 ----A---- C:\WINDOWS\system32\SynTPAPI.dll
2008-11-16 07:24:27 ----D---- C:\Program Files\Synaptics
2008-11-16 07:24:27 ----A---- C:\WINDOWS\system32\SynCtrl.dll
2008-11-16 07:24:27 ----A---- C:\WINDOWS\system32\SynCOM.dll
2008-11-16 07:13:40 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2008-11-16 07:13:23 ----D---- C:\WINDOWS\system32\fr-FR
2008-11-16 07:12:13 ----D---- C:\Program Files\MSBuild
2008-11-16 07:06:29 ----D---- C:\WINDOWS\system32\XPSViewer
2008-11-16 07:06:24 ----D---- C:\WINDOWS\system32\en-us
2008-11-16 07:05:33 ----D---- C:\Program Files\Reference Assemblies
2008-11-16 07:05:04 ----N---- C:\WINDOWS\system32\spmsg2.dll
2008-11-16 06:49:58 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2008-11-16 06:49:13 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2008-11-16 06:49:07 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2008-11-16 06:48:37 ----D---- C:\Program Files\Windows Live Favorites
2008-11-16 06:48:30 ----D---- C:\Program Files\Windows Live Toolbar
2008-11-16 06:47:13 ----D---- C:\Documents and Settings\GIDIPRES\Application Data\dvdcss
2008-11-16 06:44:31 ----RSD---- C:\WINDOWS\assembly
2008-11-16 06:43:50 ----D---- C:\WINDOWS\Microsoft.NET
2008-11-16 06:42:57 ----D---- C:\Documents and Settings\GIDIPRES\Application Data\Yahoo!
2008-11-16 06:42:57 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2008-11-16 06:38:39 ----DC---- C:\WINDOWS\system32\DRVSTORE
2008-11-16 06:37:02 ----D---- C:\Documents and Settings\GIDIPRES\Application Data\vlc
2008-11-16 06:30:36 ----SHDC---- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-11-16 06:30:29 ----D---- C:\Program Files\Windows Live
2008-11-16 06:30:01 ----D---- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-11-16 06:24:08 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2008-11-16 06:23:33 ----D---- C:\Documents and Settings\GIDIPRES\Application Data\Macromedia
2008-11-16 06:21:57 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo!
2008-11-16 06:21:53 ----D---- C:\Program Files\Yahoo!
2008-11-16 06:20:13 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2008-11-16 06:19:59 ----D---- C:\WINDOWS\system32\PreInstall
2008-11-16 06:19:57 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2008-11-16 06:19:57 ----HD---- C:\WINDOWS\$hf_mig$
2008-11-16 06:17:28 ----D---- C:\Program Files\VideoLAN
2008-11-16 06:13:38 ----A---- C:\WINDOWS\system32\wups2.dll
2008-11-16 06:13:38 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2008-11-16 06:13:38 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2008-11-16 06:13:37 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2008-11-16 06:13:37 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2008-11-16 00:43:00 ----A---- C:\WINDOWS\system32\RtlCPAPI.dll
2008-11-16 00:42:37 ----D---- C:\WINDOWS\system32\ReinstallBackups
2008-11-16 00:42:27 ----A---- C:\WINDOWS\Alcmtr.exe
2008-11-16 00:41:25 ----D---- C:\WINDOWS\system32\Lang
2008-11-16 00:40:23 ----A---- C:\WINDOWS\system32\igfxres.dll
2008-11-16 00:36:30 ----A---- C:\WINDOWS\system32\ChCfg.exe
2008-11-16 00:36:07 ----D---- C:\WINDOWS\system32\RTCOM
2008-11-16 00:36:00 ----A---- C:\WINDOWS\system32\ksuser.dll
2008-11-16 00:35:51 ----A---- C:\WINDOWS\system32\iglicd32.dll
2008-11-16 00:35:50 ----A---- C:\WINDOWS\system32\igldev32.dll
2008-11-16 00:35:50 ----A---- C:\WINDOWS\system32\igfxzoom.exe
2008-11-16 00:35:50 ----A---- C:\WINDOWS\system32\igfxtray.exe
2008-11-16 00:35:50 ----A---- C:\WINDOWS\system32\igfxsrvc.exe
2008-11-16 00:35:50 ----A---- C:\WINDOWS\system32\igfxsrvc.dll
2008-11-16 00:35:50 ----A---- C:\WINDOWS\system32\igfxress.dll
2008-11-16 00:35:50 ----A---- C:\WINDOWS\system32\igfxpph.dll
2008-11-16 00:35:50 ----A---- C:\WINDOWS\system32\igfxpers.exe
2008-11-16 00:35:50 ----A---- C:\WINDOWS\system32\igfxext.exe
2008-11-16 00:35:50 ----A---- C:\WINDOWS\system32\igfxexps.dll
2008-11-16 00:35:50 ----A---- C:\WINDOWS\system32\igfxdo.dll
2008-11-16 00:35:50 ----A---- C:\WINDOWS\system32\igfxdev.dll
2008-11-16 00:35:50 ----A---- C:\WINDOWS\system32\igfxcfg.exe
2008-11-16 00:35:49 ----A---- C:\WINDOWS\system32\ialmrnt5.dll
2008-11-16 00:35:49 ----A---- C:\WINDOWS\system32\ialmrem.dll
2008-11-16 00:35:49 ----A---- C:\WINDOWS\system32\ialmdnt5.dll
2008-11-16 00:35:49 ----A---- C:\WINDOWS\system32\ialmdev5.dll
2008-11-16 00:35:49 ----A---- C:\WINDOWS\system32\ialmdd5.dll
2008-11-16 00:35:49 ----A---- C:\WINDOWS\system32\iAlmCoIn_v4543.dll
2008-11-16 00:35:49 ----A---- C:\WINDOWS\system32\hkcmd.exe
2008-11-16 00:35:49 ----A---- C:\WINDOWS\system32\hccutils.dll
2008-11-16 00:35:20 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2008-11-16 00:35:19 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$
2008-11-16 00:35:14 ----A---- C:\WINDOWS\SoundMan.exe
2008-11-16 00:35:13 ----A---- C:\WINDOWS\SkyTel.exe
2008-11-16 00:35:13 ----A---- C:\WINDOWS\RtlUpd.exe
2008-11-16 00:35:12 ----A---- C:\WINDOWS\RTLCPL.exe
2008-11-16 00:35:11 ----A---- C:\WINDOWS\RTHDCPL.exe
2008-11-16 00:35:11 ----A---- C:\WINDOWS\MicCal.exe
2008-11-16 00:35:09 ----D---- C:\Program Files\Realtek
2008-11-16 00:35:09 ----A---- C:\WINDOWS\alcwzrd.exe
2008-11-16 00:35:04 ----A---- C:\WINDOWS\RtlExUpd.dll
2008-11-15 23:05:54 ----D---- C:\Documents and Settings\GIDIPRES\Application Data\WinRAR
2008-11-15 23:03:33 ----D---- C:\Program Files\uTorrent
2008-11-15 23:03:31 ----D---- C:\Documents and Settings\GIDIPRES\Application Data\uTorrent
2008-11-15 23:02:40 ----D---- C:\Documents and Settings\GIDIPRES\Application Data\IDM
2008-11-15 23:02:40 ----D---- C:\Documents and Settings\GIDIPRES\Application Data\DMCache
2008-11-15 23:02:36 ----D---- C:\Program Files\Internet Download Manager
2008-11-15 23:02:14 ----D---- C:\Program Files\eMule
2008-11-15 23:01:15 ----D---- C:\Program Files\WinRAR
2008-11-15 22:37:46 ----D---- C:\Documents and Settings\GIDIPRES\Application Data\Mozilla
2008-11-15 22:36:46 ----D---- C:\Program Files\Mozilla Firefox
2008-11-15 22:35:57 ----A---- C:\WINDOWS\system32\stci.dll
2008-11-15 22:35:41 ----D---- C:\Program Files\Thomson
2008-11-15 22:35:40 ----HD---- C:\Program Files\InstallShield Installation Information
2008-11-15 22:35:34 ----D---- C:\Program Files\Fichiers communs\InstallShield
2008-11-15 22:21:29 ----A---- C:\WINDOWS\system32\MSVCR71.dll
2008-11-15 22:21:29 ----A---- C:\WINDOWS\system32\MSVCP71.dll
2008-11-15 22:21:29 ----A---- C:\WINDOWS\system32\MFC71.dll
2008-11-15 22:21:29 ----A---- C:\WINDOWS\system32\aswBoot.exe
2008-11-15 22:21:26 ----D---- C:\Program Files\Alwil Software
2008-11-15 22:20:25 ----D---- C:\Documents and Settings\GIDIPRES\Application Data\U3
2008-11-15 22:19:52 ----D---- C:\Documents and Settings\GIDIPRES\Application Data\Identities
2008-11-15 22:19:50 ----HD---- C:\Program Files\Uninstall Information
2008-11-15 22:19:42 ----SD---- C:\Documents and Settings\GIDIPRES\Application Data\Microsoft
2008-11-15 22:19:42 ----ASH---- C:\Documents and Settings\GIDIPRES\Application Data\desktop.ini
2008-11-15 18:07:45 ----D---- C:\WINDOWS\SoftwareDistribution
2008-11-15 18:07:44 ----D---- C:\WINDOWS\Prefetch
2008-11-15 18:07:43 ----SD---- C:\WINDOWS\system32\Microsoft
2008-11-15 18:07:43 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-11-15 18:00:08 ----D---- C:\WINDOWS\system32\xircom
2008-11-15 18:00:08 ----D---- C:\Program Files\xerox
2008-11-15 18:00:08 ----D---- C:\Program Files\microsoft frontpage
2008-11-15 17:59:44 ----A---- C:\WINDOWS\control.ini
2008-11-15 17:59:44 ----A---- C:\AUTOEXEC.BAT
2008-11-15 17:59:33 ----A---- C:\WINDOWS\OEWABLog.txt
2008-11-15 17:59:28 ----A---- C:\WINDOWS\system32\mapi32.dll
2008-11-15 17:58:30 ----SD---- C:\WINDOWS\Downloaded Program Files
2008-11-15 17:58:30 ----RD---- C:\WINDOWS\Offline Web Pages
2008-11-15 17:58:30 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2008-11-15 17:58:23 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2008-11-15 17:58:18 ----HD---- C:\Program Files\WindowsUpdate
2008-11-15 17:58:13 ----D---- C:\Program Files\Services en ligne
2008-11-15 17:57:51 ----D---- C:\WINDOWS\system32\DirectX
2008-11-15 17:57:27 ----A---- C:\WINDOWS\system32\atrace.dll
2008-11-15 17:57:24 ----A---- C:\WINDOWS\system32\desktop.ini
2008-11-15 17:57:24 ----A---- C:\WINDOWS\desktop.ini
2008-11-15 17:57:16 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2008-11-15 17:57:15 ----A---- C:\WINDOWS\system32\acctres.dll
2008-11-15 17:57:14 ----D---- C:\Program Files\Fichiers communs\Services
2008-11-15 17:57:11 ----SD---- C:\WINDOWS\Tasks
2008-11-15 17:57:11 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2008-11-15 17:57:10 ----D---- C:\Program Files\Fichiers communs\MSSoap
2008-11-15 17:57:05 ----D---- C:\WINDOWS\system32\Macromed
2008-11-15 17:57:05 ----D---- C:\WINDOWS\srchasst
2008-11-15 17:57:01 ----A---- C:\WINDOWS\system32\wuweb.dll
2008-11-15 17:57:01 ----A---- C:\WINDOWS\system32\wucltui.dll
2008-11-15 17:57:01 ----A---- C:\WINDOWS\system32\wuauserv.dll
2008-11-15 17:57:01 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2008-11-15 17:57:00 ----A---- C:\WINDOWS\system32\wups.dll
2008-11-15 17:57:00 ----A---- C:\WINDOWS\system32\wuaueng.dll
2008-11-15 17:57:00 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2008-11-15 17:57:00 ----A---- C:\WINDOWS\system32\wuauclt.exe
2008-11-15 17:57:00 ----A---- C:\WINDOWS\system32\wuapi.dll
2008-11-15 17:57:00 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2008-11-15 17:56:59 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2008-11-15 17:56:59 ----A---- C:\WINDOWS\system32\qmgr.dll
2008-11-15 17:56:59 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2008-11-15 17:56:55 ----D---- C:\Program Files\Movie Maker
2008-11-15 17:56:50 ----A---- C:\WINDOWS\system32\safrslv.dll
2008-11-15 17:56:50 ----A---- C:\WINDOWS\system32\safrdm.dll
2008-11-15 17:56:50 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2008-11-15 17:56:50 ----A---- C:\WINDOWS\system32\racpldlg.dll
2008-11-15 17:56:46 ----A---- C:\WINDOWS\system32\fltMc.exe
2008-11-15 17:56:46 ----A---- C:\WINDOWS\system32\fltlib.dll
2008-11-15 17:56:45 ----D---- C:\WINDOWS\system32\Restore
2008-11-15 17:56:45 ----A---- C:\WINDOWS\system32\srsvc.dll
2008-11-15 17:56:45 ----A---- C:\WINDOWS\system32\srrstr.dll
2008-11-15 17:56:45 ----A---- C:\WINDOWS\system32\srclient.dll
2008-11-15 17:56:44 ----A---- C:\WINDOWS\system32\mnmdd.dll
2008-11-15 17:56:44 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2008-11-15 17:56:44 ----A---- C:\WINDOWS\system32\ils.dll
2008-11-15 17:56:43 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2008-11-15 17:56:43 ----A---- C:\WINDOWS\system32\msconf.dll
2008-11-15 17:56:43 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2008-11-15 17:56:40 ----D---- C:\Program Files\NetMeeting
2008-11-15 17:56:40 ----A---- C:\WINDOWS\system32\msoert2.dll
2008-11-15 17:56:40 ----A---- C:\WINDOWS\system32\msoeacct.dll
2008-11-15 17:56:39 ----A---- C:\WINDOWS\system32\inetres.dll
2008-11-15 17:56:39 ----A---- C:\WINDOWS\system32\inetcomm.dll
2008-11-15 17:56:36 ----D---- C:\Program Files\Outlook Express
2008-11-15 17:56:36 ----A---- C:\WINDOWS\system32\schedsvc.dll
2008-11-15 17:56:36 ----A---- C:\WINDOWS\system32\mstinit.exe
2008-11-15 17:56:36 ----A---- C:\WINDOWS\system32\mstask.dll
2008-11-15 17:56:35 ----A---- C:\WINDOWS\system32\isign32.dll
2008-11-15 17:56:35 ----A---- C:\WINDOWS\system32\inetcfg.dll
2008-11-15 17:56:35 ----A---- C:\WINDOWS\system32\icwphbk.dll
2008-11-15 17:56:35 ----A---- C:\WINDOWS\system32\icwdial.dll
2008-11-15 17:56:28 ----D---- C:\Program Files\Fichiers communs\System
2008-11-15 17:56:23 ----D---- C:\Program Files\Internet Explorer
2008-11-15 17:55:44 ----D---- C:\Program Files\ComPlus Applications
2008-11-15 17:55:41 ----A---- C:\WINDOWS\vbaddin.ini
2008-11-15 17:55:41 ----A---- C:\WINDOWS\vb.ini
2008-11-15 17:55:35 ----D---- C:\WINDOWS\Registration
2008-11-15 17:55:27 ----D---- C:\Program Files\Online Services
2008-11-15 17:55:26 ----D---- C:\Program Files\Windows Media Player
2008-11-15 17:55:19 ----D---- C:\Program Files\Messenger
2008-11-15 17:55:14 ----D---- C:\Program Files\MSN Gaming Zone
2008-11-15 17:55:14 ----A---- C:\WINDOWS\system32\write.exe
2008-11-15 17:55:03 ----A---- C:\WINDOWS\system32\sndvol32.exe
2008-11-15 17:55:03 ----A---- C:\WINDOWS\system32\hticons.dll
2008-11-15 17:55:02 ----A---- C:\WINDOWS\system32\winchat.exe
2008-11-15 17:55:02 ----A---- C:\WINDOWS\system32\avwav.dll
2008-11-15 17:55:02 ----A---- C:\WINDOWS\system32\avtapi.dll
2008-11-15 17:55:02 ----A---- C:\WINDOWS\system32\avmeter.dll
2008-11-15 17:54:54 ----A---- C:\WINDOWS\system32\getuname.dll
2008-11-15 17:54:53 ----A---- C:\WINDOWS\system32\winmine.exe
2008-11-15 17:54:53 ----A---- C:\WINDOWS\system32\sol.exe
2008-11-15 17:54:53 ----A---- C:\WINDOWS\system32\charmap.exe
2008-11-15 17:54:53 ----A---- C:\WINDOWS\system32\calc.exe
2008-11-15 17:54:52 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2008-11-15 17:54:52 ----A---- C:\WINDOWS\system32\tskill.exe
2008-11-15 17:54:52 ----A---- C:\WINDOWS\system32\reset.exe
2008-11-15 17:54:52 ----A---- C:\WINDOWS\system32\mshearts.exe
2008-11-15 17:54:52 ----A---- C:\WINDOWS\system32\freecell.exe
2008-11-15 17:54:51 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2008-11-15 17:54:51 ----A---- C:\WINDOWS\system32\tslabels.ini
2008-11-15 17:54:51 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2008-11-15 17:54:51 ----A---- C:\WINDOWS\system32\tscon.exe
2008-11-15 17:54:51 ----A---- C:\WINDOWS\system32\shadow.exe
2008-11-15 17:54:51 ----A---- C:\WINDOWS\system32\rwinsta.exe
2008-11-15 17:54:51 ----A---- C:\WINDOWS\system32\regini.exe
2008-11-15 17:54:51 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2008-11-15 17:54:51 ----A---- C:\WINDOWS\system32\qwinsta.exe
2008-11-15 17:54:51 ----A---- C:\WINDOWS\system32\qappsrv.exe
2008-11-15 17:54:51 ----A---- C:\WINDOWS\system32\msg.exe
2008-11-15 17:54:51 ----A---- C:\WINDOWS\system32\logoff.exe
2008-11-15 17:54:50 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2008-11-15 17:54:50 ----A---- C:\WINDOWS\system32\cdmodem.dll
2008-11-15 17:54:49 ----A---- C:\WINDOWS\system32\stclient.dll
2008-11-15 17:54:49 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2008-11-15 17:54:49 ----A---- C:\WINDOWS\system32\mtxex.dll
2008-11-15 17:54:49 ----A---- C:\WINDOWS\system32\mtxdm.dll
2008-11-15 17:54:49 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2008-11-15 17:54:49 ----A---- C:\WINDOWS\system32\comrepl.dll
2008-11-15 17:54:49 ----A---- C:\WINDOWS\system32\comaddin.dll
2008-11-15 17:54:48 ----A---- C:\WINDOWS\system32\comsnap.dll
2008-11-15 17:54:43 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2008-11-15 17:54:29 ----D---- C:\Program Files\MSN
2008-11-15 17:54:28 ----A---- C:\WINDOWS\system32\accwiz.exe
2008-11-15 17:54:27 ----A---- C:\WINDOWS\system32\sndrec32.exe
2008-11-15 17:54:27 ----A---- C:\WINDOWS\system32\mplay32.exe
2008-11-15 17:54:27 ----A---- C:\WINDOWS\system32\hypertrm.dll
2008-11-15 17:54:26 ----D---- C:\Program Files\Windows NT
2008-11-15 17:54:26 ----A---- C:\WINDOWS\system32\spider.exe
2008-11-15 17:54:26 ----A---- C:\WINDOWS\system32\mspaint.exe
2008-11-15 17:54:26 ----A---- C:\WINDOWS\system32\clipbrd.exe
2008-11-15 17:54:25 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2008-11-15 17:54:25 ----A---- C:\WINDOWS\system32\mstscax.dll
2008-11-15 17:54:25 ----A---- C:\WINDOWS\system32\mstsc.exe
2008-11-15 17:54:24 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2008-11-15 17:54:24 ----A---- C:\WINDOWS\system32\termsrv.dll
2008-11-15 17:54:24 ----A---- C:\WINDOWS\system32\sessmgr.exe
2008-11-15 17:54:24 ----A---- C:\WINDOWS\system32\remotepg.dll
2008-11-15 17:54:24 ----A---- C:\WINDOWS\system32\rdshost.exe
2008-11-15 17:54:24 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2008-11-15 17:54:24 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2008-11-15 17:54:24 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2008-11-15 17:54:24 ----A---- C:\WINDOWS\system32\rdchost.dll
2008-11-15 17:54:23 ----D---- C:\WINDOWS\system32\MsDtc
2008-11-15 17:54:23 ----A---- C:\WINDOWS\system32\rdpclip.exe
2008-11-15 17:54:23 ----A---- C:\WINDOWS\system32\qprocess.exe
2008-11-15 17:54:23 ----A---- C:\WINDOWS\system32\mtxoci.dll
2008-11-15 17:54:23 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2008-11-15 17:54:23 ----A---- C:\WINDOWS\system32\icaapi.dll
2008-11-15 17:54:23 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2008-11-15 17:54:22 ----A---- C:\WINDOWS\system32\xolehlp.dll
2008-11-15 17:54:22 ----A---- C:\WINDOWS\system32\msdtctm.dll
2008-11-15 17:54:22 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2008-11-15 17:54:22 ----A---- C:\WINDOWS\system32\msdtclog.dll
2008-11-15 17:54:22 ----A---- C:\WINDOWS\system32\msdtc.exe
2008-11-15 17:54:21 ----D---- C:\WINDOWS\system32\Com
2008-11-15 17:54:21 ----A---- C:\WINDOWS\system32\colbact.dll
2008-11-15 17:54:21 ----A---- C:\WINDOWS\system32\clbcatex.dll
2008-11-15 17:54:21 ----A---- C:\WINDOWS\system32\catsrvps.dll
2008-11-15 17:54:20 ----A---- C:\WINDOWS\system32\comsvcs.dll
2008-11-15 17:54:20 ----A---- C:\WINDOWS\system32\catsrvut.dll
2008-11-15 17:54:20 ----A---- C:\WINDOWS\system32\catsrv.dll
2008-11-15 17:54:19 ----A---- C:\WINDOWS\system32\comuid.dll
2008-11-15 17:54:19 ----A---- C:\WINDOWS\system32\clbcatq.dll
2008-11-15 17:54:12 ----A---- C:\WINDOWS\system32\servdeps.dll
2008-11-15 17:54:11 ----A---- C:\WINDOWS\system32\mmfutil.dll
2008-11-15 17:54:11 ----A---- C:\WINDOWS\system32\licwmi.dll
2008-11-15 17:54:11 ----A---- C:\WINDOWS\system32\cmprops.dll
2008-11-15 17:52:52 ----A---- C:\WINDOWS\system32\h323log.txt
2008-11-15 14:01:10 ----A---- C:\WINDOWS\system32\usbui.dll
2008-11-15 14:00:00 ----A---- C:\WINDOWS\imsins.BAK
2008-11-15 13:59:57 ----SHD---- C:\WINDOWS\Installer
2008-11-15 13:59:57 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-11-15 13:59:56 ----D---- C:\Program Files\Fichiers communs\ODBC
2008-11-15 13:59:56 ----A---- C:\WINDOWS\ODBCINST.INI
2008-11-15 13:59:52 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2008-11-15 13:59:51 ----RD---- C:\Program Files
2008-11-15 13:59:51 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2008-11-15 13:59:51 ----D---- C:\Program Files\Fichiers communs
2008-11-15 13:59:47 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2008-11-15 13:59:47 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2008-11-15 13:59:47 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2008-11-15 13:59:45 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2008-11-15 13:59:45 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2008-11-15 13:59:45 ----RA---- C:\WINDOWS\system32\kbdur.dll
2008-11-15 13:59:45 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2008-11-15 13:59:45 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2008-11-15 13:59:45 ----RA---- C:\WINDOWS\system32\kbdru.dll
2008-11-15 13:59:45 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2008-11-15 13:59:45 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2008-11-15 13:59:45 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2008-11-15 13:59:45 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2008-11-15 13:59:45 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2008-11-15 13:59:45 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2008-11-15 13:59:43 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2008-11-15 13:59:43 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2008-11-15 13:59:43 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2008-11-15 13:59:43 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2008-11-15 13:59:43 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2008-11-15 13:59:43 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2008-11-15 13:59:43 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2008-11-15 13:59:41 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2008-11-15 13:59:41 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2008-11-15 13:59:41 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2008-11-15 13:59:41 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2008-11-15 13:59:41 ----RA---- C:\WINDOWS\system32\kbdest.dll
2008-11-15 13:59:39 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2008-11-15 13:59:39 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2008-11-15 13:59:39 ----RA---- C:\WINDOWS\system32\kbdro.dll
2008-11-15 13:59:39 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2008-11-15 13:59:38 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2008-11-15 13:59:38 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2008-11-15 13:59:38 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2008-11-15 13:59:38 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2008-11-15 13:59:38 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2008-11-15 13:59:38 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2008-11-15 13:59:38 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2008-11-15 13:59:38 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2008-11-15 13:59:38 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2008-11-15 13:59:36 ----A---- C:\WINDOWS\system32\irclass.dll
2008-11-15 13:59:35 ----A---- C:\WINDOWS\system32\spxcoins.dll
2008-11-15 13:59:35 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2008-11-15 13:59:35 ----A---- C:\WINDOWS\system32\dgsetup.dll
2008-11-15 13:59:35 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2008-11-15 13:59:33 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2008-11-15 13:59:33 ----A---- C:\WINDOWS\TASKMAN.EXE
2008-11-15 13:59:32 ----A---- C:\WINDOWS\system32\batt.dll
2008-11-15 13:59:32 ----A---- C:\WINDOWS\NOTEPAD.EXE
2008-11-15 13:59:30 ----A---- C:\WINDOWS\system32\storprop.dll
2008-11-15 13:59:20 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2008-11-15 13:59:17 ----RA---- C:\WINDOWS\SET8.tmp
2008-11-15 13:59:13 ----RA---- C:\WINDOWS\SET4.tmp
2008-11-15 13:59:12 ----RA---- C:\WINDOWS\SET3.tmp
2008-11-15 13:59:05 ----D---- C:\WINDOWS\system32\CatRoot2
2008-11-15 13:59:05 ----D---- C:\WINDOWS\system32\CatRoot
2008-11-15 13:58:59 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2008-11-15 13:58:34 ----A---- C:\WINDOWS\setuplog.txt
2008-11-15 13:58:31 ----D---- C:\Documents and Settings
2008-11-15 13:58:30 ----SHD---- C:\System Volume Information
2008-11-15 13:57:34 ----SH---- C:\boot.ini
2008-11-15 13:52:02 ----RSHDC---- C:\WINDOWS\system32\dllcache
2008-11-15 13:52:02 ----RD---- C:\WINDOWS\Web
2008-11-15 13:52:02 ----D---- C:\WINDOWS\WinSxS
2008-11-15 13:52:02 ----D---- C:\WINDOWS\twain_32
2008-11-15 13:52:02 ----D---- C:\WINDOWS\Temp
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\wbem
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\usmt
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\ShellExt
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\Setup
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\oobe
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\npp
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\mui
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\inetsrv
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\IME
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\icsxml
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\ias
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\export
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\3com_dmi
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\3076
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\2052
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\1054
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\1042
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\1041
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\1037
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\1036
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\1033
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\1031
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\1028
2008-11-15 13:52:02 ----D---- C:\WINDOWS\system32\1025
2008-11-15 13:52:02 ----D---- C:\WINDOWS\security
2008-11-15 13:52:02 ----D---- C:\WINDOWS\Resources
2008-11-15 13:52:02 ----D---- C:\WINDOWS\Provisioning
2008-11-15 13:52:02 ----D---- C:\WINDOWS\PeerNet
2008-11-15 13:52:02 ----D---- C:\WINDOWS\pchealth
2008-11-15 13:52:02 ----D---- C:\WINDOWS\mui
2008-11-15 13:52:02 ----D---- C:\WINDOWS\msapps
2008-11-15 13:52:02 ----D---- C:\WINDOWS\Media
2008-11-15 13:52:02 ----D---- C:\WINDOWS\java
2008-11-15 13:52:02 ----D---- C:\WINDOWS\ime
2008-11-15 13:52:02 ----D---- C:\WINDOWS\ehome
2008-11-15 13:52:02 ----D---- C:\WINDOWS\Driver Cache
2008-11-15 13:52:02 ----D---- C:\WINDOWS\Debug
2008-11-15 13:52:02 ----D---- C:\WINDOWS\Cursors
2008-11-15 13:52:02 ----D---- C:\WINDOWS\Connection Wizard
2008-11-15 13:52:02 ----D---- C:\WINDOWS\AppPatch
2008-11-15 13:52:02 ----D---- C:\WINDOWS\addins
2008-11-15 13:52:01 ----RSD---- C:\WINDOWS\Fonts
2008-11-15 13:52:01 ----HD---- C:\WINDOWS\inf
2008-11-15 13:52:01 ----D---- C:\WINDOWS\system32\wins
2008-11-15 13:52:01 ----D---- C:\WINDOWS\system32\spool
2008-11-15 13:52:01 ----D---- C:\WINDOWS\system32\ras
2008-11-15 13:52:01 ----D---- C:\WINDOWS\system32\drivers
2008-11-15 13:52:01 ----D---- C:\WINDOWS\system32\dhcp
2008-11-15 13:52:01 ----D---- C:\WINDOWS\system32\config
2008-11-15 13:52:01 ----D---- C:\WINDOWS\system32
2008-11-15 13:52:01 ----D---- C:\WINDOWS\system
2008-11-15 13:52:01 ----D---- C:\WINDOWS\repair
2008-11-15 13:52:01 ----D---- C:\WINDOWS\msagent
2008-11-15 13:52:01 ----D---- C:\WINDOWS\Help
2008-11-15 13:52:01 ----D---- C:\WINDOWS\Config
2008-11-15 13:52:01 ----D---- C:\WINDOWS
2008-10-29 09:40:55 ----A---- C:\WINDOWS\system32\idmmbc.dll
2008-09-30 16:43:34 ----A---- C:\WINDOWS\system32\msxml4.dll
2008-08-29 20:06:44 ----A---- C:\WINDOWS\system32\msxml6.dll
2008-07-14 11:09:18 ----N---- C:\WINDOWS\system32\tzchange.exe
2008-03-20 18:06:36 ----N---- C:\WINDOWS\system32\LegitCheckControl.dll
2007-10-23 14:20:08 ----A---- C:\WINDOWS\UNNeroMediaHome.exe
2007-10-22 08:51:32 ----A---- C:\WINDOWS\UNRecode.exe
2007-10-18 11:31:46 ----A---- C:\WINDOWS\system32\sirenacm.dll
2007-09-20 08:55:18 ----A---- C:\WINDOWS\system32\NeroCo.dll
2007-03-21 20:02:12 ----A---- C:\WINDOWS\UNNeroVision.exe
2007-03-20 20:22:04 ----A---- C:\WINDOWS\UNNeroBackItUp.exe
2007-02-28 15:41:02 ----A---- C:\WINDOWS\UNNeroShowTime.exe
2006-11-02 11:52:12 ----N---- C:\WINDOWS\system32\wpdshextres.dll
2006-10-30 03:33:58 ----A---- C:\WINDOWS\system32\infocardapi.dll
2006-10-30 03:33:58 ----A---- C:\WINDOWS\system32\icardres.dll.mui
2006-10-30 03:33:58 ----A---- C:\WINDOWS\system32\icardres.dll
2006-10-30 03:33:58 ----A---- C:\WINDOWS\system32\icardagt.exe
2006-10-24 12:30:20 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2006-10-24 12:30:06 ----N---- C:\WINDOWS\system32\WindowsCodecs.dll
2006-10-24 12:30:00 ----N---- C:\WINDOWS\system32\WMPhoto.dll
2006-10-24 12:29:50 ----N---- C:\WINDOWS\system32\WindowsCodecsExt.dll
2006-10-20 21:30:06 ----A---- C:\WINDOWS\system32\milcore.dll
2006-10-20 21:30:02 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2006-10-20 21:30:00 ----A---- C:\WINDOWS\system32\evr.dll
2006-10-20 21:29:58 ----A---- C:\WINDOWS\system32\PresentationHost.exe
2006-10-20 21:29:54 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2006-10-20 21:29:52 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2006-10-20 21:29:46 ----A---- C:\WINDOWS\system32\PresentationHostProxy.dll
2006-10-20 21:29:46 ----A---- C:\WINDOWS\system32\dxva2.dll
2006-10-18 21:47:22 ----N---- C:\WINDOWS\system32\WPDShServiceObj.dll
2006-10-18 21:47:22 ----N---- C:\WINDOWS\system32\WpdShext.dll
2006-10-18 21:47:22 ----N---- C:\WINDOWS\system32\WMVXENCD.dll
2006-10-18 21:47:22 ----N---- C:\WINDOWS\system32\WMVSENCD.dll
2006-10-18 21:47:22 ----N---- C:\WINDOWS\system32\WMVSDECD.dll
2006-10-18 21:47:22 ----N---- C:\WINDOWS\system32\WMVENCOD.dll
2006-10-18 21:47:22 ----N---- C:\WINDOWS\system32\WMVDECOD.dll
2006-10-18 21:47:20 ----N---- C:\WINDOWS\system32\wmpsrcwp.dll
2006-10-18 21:47:20 ----N---- C:\WINDOWS\system32\wmpps.dll
2006-10-18 21:47:20 ----N---- C:\WINDOWS\system32\wmpmde.dll
2006-10-18 21:47:20 ----N---- C:\WINDOWS\system32\wmpencen.dll
2006-10-18 21:47:20 ----N---- C:\WINDOWS\system32\wmpeffects.dll
2006-10-18 21:47:20 ----N---- C:\WINDOWS\system32\wmdrmsdk.dll
2006-10-18 21:47:18 ----N---- C:\WINDOWS\system32\PortableDeviceWMDRM.dll
2006-10-18 21:47:18 ----N---- C:\WINDOWS\system32\PortableDeviceWiaCompat.dll
2006-10-18 21:47:18 ----N---- C:\WINDOWS\system32\PortableDeviceTypes.dll
2006-10-18 21:47:18 ----N---- C:\WINDOWS\system32\PortableDeviceClassExtension.dll
2006-10-18 21:47:18 ----N---- C:\WINDOWS\system32\PortableDeviceApi.dll
2006-10-18 21:47:14 ----N---- C:\WINDOWS\system32\MPG4DECD.dll
2006-10-18 21:47:14 ----N---- C:\WINDOWS\system32\MP4SDECD.dll
2006-10-18 21:47:14 ----N---- C:\WINDOWS\system32\MP43DECD.dll
2006-10-18 21:47:14 ----N---- C:\WINDOWS\system32\MFPLAT.dll
2006-10-18 21:47:08 ----N---- C:\WINDOWS\system32\audiodev.dll
2006-10-18 20:00:46 ----N---- C:\WINDOWS\system32\drmupgds.exe
2006-10-18 20:00:14 ----N---- C:\WINDOWS\system32\wpdshextautoplay.exe
2006-10-14 20:22:00 ----N---- C:\WINDOWS\system32\XpsSvcs.dll
2006-10-14 20:21:58 ----N---- C:\WINDOWS\system32\XPSSHHDR.dll
2006-10-14 16:43:38 ----N---- C:\WINDOWS\system32\prntvpt.dll
2006-09-28 20:13:26 ----N---- C:\WINDOWS\system32\WUDFCoinstaller.dll
2006-09-28 18:56:38 ----N---- C:\WINDOWS\system32\WUDFx.dll
2006-09-28 18:56:38 ----N---- C:\WINDOWS\system32\WudfHost.exe
2006-09-28 18:56:16 ----N---- C:\WINDOWS\system32\WudfPlatform.dll
2006-09-28 18:56:14 ----N---- C:\WINDOWS\system32\WudfSvc.dll
2006-08-24 16:15:06 ----A---- C:\WINDOWS\system32\rgb9rast_2.dll
2006-07-19 10:55:18 ----A---- C:\WINDOWS\system32\msxml6r.dll
2006-06-13 10:18:00 ----A---- C:\WINDOWS\system32\tifmicon.dll
2006-04-12 14:08:36 ----A---- C:\WINDOWS\system32\InstallCheck.dll
2006-03-22 14:46:02 ----A---- C:\WINDOWS\system32\keyManager.dll
2006-03-22 14:46:02 ----A---- C:\WINDOWS\system32\DecryptionGuide.txt
2006-03-17 14:59:44 ----A---- C:\WINDOWS\system32\sysenv.dll
2006-03-17 14:49:46 ----A---- C:\WINDOWS\system32\TwnLib4.dll
2006-03-17 11:45:54 ----A---- C:\WINDOWS\system32\imagXRA7.dll
2006-03-17 11:45:54 ----A---- C:\WINDOWS\system32\imagXR7.dll
2006-03-17 11:45:54 ----A---- C:\WINDOWS\system32\imagXpr7.dll
2006-03-17 11:45:52 ----A---- C:\WINDOWS\system32\imagX7.dll
2006-03-13 19:25:48 ----A---- C:\WINDOWS\system32\ShowErrUI.dll
2006-03-08 22:44:00 ----A---- C:\WINDOWS\system32\eDStoolbar.dll
2006-03-08 17:19:28 ----A---- C:\WINDOWS\system32\UIVCL.dll
2006-03-08 17:11:40 ----A---- C:\WINDOWS\system32\MSNChatHook.dll
2006-03-08 17:11:34 ----A---- C:\WINDOWS\system32\MSNSpook.dll
2006-03-08 17:11:30 ----A---- C:\WINDOWS\system32\APISlice.dll
2006-03-08 17:11:18 ----A---- C:\WINDOWS\system32\ActiveToolBand.dll
2006-03-08 17:11:16 ----A---- C:\WINDOWS\system32\eDSshellExt.dll
2006-03-08 17:11:12 ----A---- C:\WINDOWS\system32\OAddin.dll
2006-03-08 17:10:36 ----A---- C:\WINDOWS\system32\PSDUtil.dll
2006-03-08 17:10:36 ----A---- C:\WINDOWS\system32\PSDDips.dll
2006-03-08 17:10:34 ----A---- C:\WINDOWS\system32\ShowErrMsg.dll
2006-03-08 17:10:32 ----A---- C:\WINDOWS\system32\LogSPWusage.dll
2006-03-06 21:25:40 ----A---- C:\WINDOWS\system32\CryptoAPI.dll
2006-02-13 11:01:18 ----A---- C:\WINDOWS\system32\SMSUnins.dll
2006-02-13 11:01:16 ----A---- C:\WINDOWS\system32\s24NCfg.dll
2005-09-23 07:28:56 ----A---- C:\WINDOWS\system32\netfxperf.dll
2005-09-23 07:28:52 ----A---- C:\WINDOWS\system32\mscories.dll
2005-09-23 07:28:52 ----A---- C:\WINDOWS\system32\mscorier.dll
2005-09-23 07:28:52 ----A---- C:\WINDOWS\system32\mscoree.dll
2005-09-23 07:28:38 ----A---- C:\WINDOWS\system32\dfshim.dll
2005-02-10 21:04:02 ----A---- C:\WINDOWS\system32\msxml3r.dll
2005-01-07 17:07:16 ----N---- C:\WINDOWS\system32\HdAShCut.exe
2005-01-07 17:07:16 ----N---- C:\WINDOWS\system32\HdAProp.dll
2005-01-07 17:07:04 ----N---- C:\WINDOWS\system32\HdAudRes.dll
2004-08-19 16:12:34 ----A---- C:\WINDOWS\system32\netsetup.exe
2004-08-19 16:10:20 ----A---- C:\WINDOWS\system32\tsddd.dll
2004-08-19 16:10:20 ----A---- C:\WINDOWS\system32\rdpdd.dll
2004-08-19 16:10:16 ----A---- C:\WINDOWS\system32\drmclien.dll
2004-08-19 16:10:14 ----A---- C:\WINDOWS\system32\wmvcore.dll
2004-08-19 16:10:14 ----A---- C:\WINDOWS\system32\drmv2clt.dll
2004-08-19 16:10:12 ----A---- C:\WINDOWS\system32\msscp.dll
2004-08-19 16:10:10 ----A---- C:\WINDOWS\system32\msnetobj.dll
2004-08-19 16:10:06 ----A---- C:\WINDOWS\winhlp32.exe
2004-08-19 16:10:06 ----A---- C:\WINDOWS\system32\xcopy.exe
2004-08-19 16:10:06 ----A---- C:\WINDOWS\system32\wscript.exe
2004-08-19 16:10:06 ----A---- C:\WINDOWS\system32\wscntfy.exe
2004-08-19 16:10:06 ----A---- C:\WINDOWS\system32\wpnpinst.exe
2004-08-19 16:10:06 ----A---- C:\WINDOWS\system32\wpabaln.exe
2004-08-19 16:10:06 ----A---- C:\WINDOWS\system32\winver.exe
2004-08-19 16:10:06 ----A---- C:\WINDOWS\system32\winlogon.exe
2004-08-19 16:10:06 ----A---- C:\WINDOWS\system32\wiaacmgr.exe
2004-08-19 16:10:06 ----A---- C:\WINDOWS\system32\wextract.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\vssvc.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\utilman.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\userinit.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\ups.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\upnpcont.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\tracert.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\tracerpt.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\tourstart.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\tlntsvr.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\tlntsess.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\tlntadmn.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\telnet.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\taskmgr.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\sysocmgr.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\svchost.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\stimon.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\spoolsv.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\spnpinst.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\smss.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\smlogsvc.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\smbinst.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\skeys.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\sigverif.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\shutdown.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\shrpubw.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\shmgrate.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\setup.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\sethc.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\services.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\secedit.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\sdbinst.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\schtasks.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\scardsvr.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\savedump.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\runonce.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\rundll32.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\rtcshare.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\rsnotify.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\rsh.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\rexec.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\regsvr32.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\reg.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\rcp.exe
2004-08-19 16:10:04 ----A---- C:\WINDOWS\system32\rcimlby.exe

1 réponse

  1. Utilisateur anonyme
     
    Salut,

    Telecharge UsbFix sur ton bureau

    --> Lance l installation avec les parametres par default

    Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir

    --> Double clic sur le raccourci UsbFix sur ton bureau

    -->choisis l option 1 (nettoyage)

    --> Le pc va redémarer

    -->Apres redémarrage post le rapport UsbFix.txt

    Note : le rapport UsbFix.txt est sauvegardé a la racine du disque
    0