Pop-up? Virus!?

[b]System Report[/b]
*************

Run on 2008-12-22 at 16:34

Microsoft Windows XP [version 5.1.2600]

Current user is an administrator

[b]Running Processes[/b]:

\SystemRoot\System32\smss.exe [156]
\??\C:\WINDOWS\NEW\system32\csrss.exe [204]
\??\C:\WINDOWS\NEW\system32\winlogon.exe [228]
C:\WINDOWS\NEW\system32\services.exe [276]
C:\WINDOWS\NEW\system32\lsass.exe [288]
C:\WINDOWS\NEW\system32\svchost.exe [452]
C:\WINDOWS\NEW\system32\svchost.exe [516]
C:\WINDOWS\NEW\system32\svchost.exe [580]
C:\WINDOWS\NEW\Explorer.EXE [864]


[b]Drivers - Running[/b]:

ACPI
agp440
atapi
ATI
Beep
Cdfs
Cdrom
Disk
dmio
dmload
Fdc
FltMgr
Ftdisk
GEARAspiWDM
HPZius12
i8042prt
Imapi
IntelIde
isapnp
Kbdclass
KSecDD
L8042pr2
LMouFlt2
Mouclass
MountMgr
Msfs
mssmbios
Mup
NDIS
Npfs
Ntfs
Null
PartMgr
PCI
PCIIde
rdpdr
redbook
sr
swenum
TermDD
Update
usbccgp
usbehci
usbhub
usbprint
usbstor
usbuhci
VgaSave
VolSnap


[b]Drivers - Stopped[/b]:

Aavmker4
Abiosdsk
abp480n5
ACPIEC
adpu160m
aec
AFD
AgereSoftModem
Aha154x
aic78u2
aic78xx
AliIde
amsint
asc
asc3350p
asc3550
aswFsBlk
aswMon2
aswRdr
aswSP
aswTdi
AsyncMac
Atdisk
ati2mtag
Atmarpc
audstub
Ca533av
cbidf2k
CCDECODE
cd20xrnt
Cdaudio
Changer
CmdIde
cmuda
Cpqarray
dac960nt
dmboot
DMusic
dpti2o
drmkaud
elagopro
elaunidr
Fastfat
Fips
Flpydisk
Gpc
HidUsb
hpn
HPZid412
HPZipr12
HTTP
i2omgmt
i2omp
ialm
ini910u
intelppm
Ip6Fw
IpFilterDriver
IpInIp
IpNat
IPSec
irda
IRENUM
irsir
kbdhid
kmixer
lbrtfdc
mnmdd
Modem
mraid35x
MRxDAV
MRxSmb
MSKSSRV
MSPCLOCK
MSPQM
MSTEE
NABTSFEC
ndiscm
NdisIP
NdisTapi
Ndisuio
NdisWan
NDProxy
NetBIOS
NetBT
NwlnkFlt
NwlnkFwd
Parport
ParVdm
PCIDump
Pcmcia
PDCOMP
PDFRAME
PDRELI
PDRFRAME
perc2
perc2hib
PptpMiniport
PSched
PStrip
Ptilink
ql1080
Ql10wnt
ql12160
ql1240
ql1280
RasAcd
Rasirda
Rasl2tp
RasPppoe
Raspti
Rdbss
RDPCDD
RDPWD
ROOTMODEM
rtl8139
Secdrv
serenum
Serial
Sfloppy
Simbad
SLIP
Sparrow
splitter
Srv
streamip
swmidi
symc810
symc8xx
sym_hi
sym_u3
sysaudio
Tcpip
TDPIPE
TDTCP
TosIde
Udfs
ultra
usbaudio
USBCamera
usbscan
ViaIde
Wanarp
WDICA
wdmaud
WSTCODEC


[b]Services - Running[/b]:

CryptSvc
DcomLaunch
dmserver
Eventlog
helpsvc
PlugPlay
RpcSs
srservice
winmgmt


[b]Services - Stopped[/b]:

Adobe
Alerter
ALG
Apple
AppMgmt
aswUpdSv
Ati
ATI
AudioSrv
avast!
avast!
avast!
BITS
Browser
CCALib8
CiSvc
ClipSrv
COMSysApp
Dhcp
dmadmin
Dnscache
ERSvc
EventSystem
FastUserSwitchingCompatibility
gusvc
HidServ
hpqcxs08
hpqddsvc
HTTPFilter
ImapiService
iPod
Irmon
lanmanserver
lanmanworkstation
LmHosts
MDM
Messenger
mnmsrvc
MSDTC
MSIServer
NBService
Net
NetDDE
NetDDEdsdm
Netlogon
Netman
Nla
NMIndexingService
NtLmSsp
NtmsSvc
ose
Pml
PolicyAgent
ProtectedStorage
RasAuto
RasMan
RDSessMgr
RemoteAccess
RemoteRegistry
RpcLocator
RSVP
SamSs
SCardSvr
Schedule
seclogon
SENS
SharedAccess
ShellHWDetection
Spooler
SSDPSRV
stisvc
SwPrv
SysmonLog
TapiSrv
TermService
Themes
TlntSvr
TrkWks
UMWdf
upnphost
UPS
usnjsvc
VSS
W32Time
WebClient
WLSetupSvc
WmdmPmSN
Wmi
WmiApSrv
wscsvc
wuauserv
WZCSVC
x10nets
xmlprov


[b]Files Created/Modified - 60 Days[/b]:


C:\

2008-12-22 16:30:08 1 598 029 824 A.SH. "C:\pagefile.sys"


C:\WINDOWS\NEW\

2008-12-22 16:30:30 2 048 A.S.. "C:\WINDOWS\NEW\bootstat.dat"
2008-12-22 14:28:38 148 080 A.... "C:\WINDOWS\NEW\hpoins12.dat"
2008-11-26 12:21:30 1 236 208 A.... "C:\WINDOWS\NEW\system32\aswBoot.exe"
2008-12-20 0:10:54 95 978 A.SH. "C:\WINDOWS\NEW\system32\bapunita.dll"
2008-12-21 0:11:46 83 201 ..... "C:\WINDOWS\NEW\system32\durunora.dll"
2008-11-29 9:52:36 1 551 176 A.... "C:\WINDOWS\NEW\system32\FNTCACHE.DAT"
2008-10-23 8:00:16 283 648 A.... "C:\WINDOWS\NEW\system32\gdi32.dll"
2008-12-20 0:10:54 85 206 ..... "C:\WINDOWS\NEW\system32\gisisema.dll"
2008-12-19 12:10:50 87 094 ..... "C:\WINDOWS\NEW\system32\hulujige.dll"
2008-12-21 12:12:14 83 233 ..... "C:\WINDOWS\NEW\system32\lewiyidi.dll"
2008-12-22 12:12:52 83 141 A.SH. "C:\WINDOWS\NEW\system32\mizokomo.dll"
2008-12-12 12:35:12 3 081 216 A.... "C:\WINDOWS\NEW\system32\mshtml.dll"
2008-12-21 0:11:46 96 959 A.SH. "C:\WINDOWS\NEW\system32\nobiwuna.dll"
2008-12-19 12:10:50 97 860 A.SH. "C:\WINDOWS\NEW\system32\nomadani.dll"
2008-11-18 22:24:38 40 972 A.... "C:\WINDOWS\NEW\system32\perfc009.dat"
2008-11-18 22:24:38 49 734 A.... "C:\WINDOWS\NEW\system32\perfc00C.dat"
2008-11-18 22:24:38 314 644 A.... "C:\WINDOWS\NEW\system32\perfh009.dat"
2008-11-18 22:24:38 370 832 A.... "C:\WINDOWS\NEW\system32\perfh00C.dat"
2008-12-18 18:51:46 96 006 A.SH. "C:\WINDOWS\NEW\system32\sigilawo.dll"
2008-10-22 4:47:08 62 976 ..... "C:\WINDOWS\NEW\system32\tzchange.exe"
2008-12-18 18:51:46 83 015 A.SH. "C:\WINDOWS\NEW\system32\wegagolu.dll"
2008-12-22 0:12:36 85 076 ..... "C:\WINDOWS\NEW\system32\wetidehu.dll"
2008-12-22 0:12:36 98 035 A.SH. "C:\WINDOWS\NEW\system32\wojujive.dll"
2008-12-21 12:12:12 96 834 A.SH. "C:\WINDOWS\NEW\system32\wuniferi.dll"
2008-12-22 12:12:52 97 570 A.SH. "C:\WINDOWS\NEW\system32\zilozama.dll"
2008-12-20 12:11:20 95 808 A.SH. "C:\WINDOWS\NEW\system32\zotowuru.dll"
2008-12-22 16:29:10 6 A..H. "C:\WINDOWS\NEW\Tasks\SA.DAT"
2008-12-22 16:33:24 0 A.... "C:\WINDOWS\NEW\Temp\scs4.tmp"
2008-10-24 6:10:42 453 632 ..... "C:\WINDOWS\NEW\Driver Cache\i386\mrxsmb.sys"
2008-11-11 23:15:04 32 768 A...R "C:\WINDOWS\NEW\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe"
2008-12-12 12:43:20 593 920 A...R "C:\WINDOWS\NEW\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\accicons.exe"
2008-12-12 12:43:20 12 288 A...R "C:\WINDOWS\NEW\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe"
2008-12-12 12:43:20 86 016 A...R "C:\WINDOWS\NEW\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\inficon.exe"
2008-12-12 12:43:20 135 168 A...R "C:\WINDOWS\NEW\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\misc.exe"
2008-12-12 12:43:20 11 264 A...R "C:\WINDOWS\NEW\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe"
2008-12-12 12:43:20 27 136 A...R "C:\WINDOWS\NEW\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe"
2008-12-12 12:43:20 4 096 A...R "C:\WINDOWS\NEW\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe"
2008-12-12 12:43:20 794 624 A...R "C:\WINDOWS\NEW\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\outicon.exe"
2008-12-12 12:43:20 249 856 A...R "C:\WINDOWS\NEW\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pptico.exe"
2008-12-12 12:43:20 61 440 A...R "C:\WINDOWS\NEW\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pubs.exe"
2008-12-12 12:43:20 23 040 A...R "C:\WINDOWS\NEW\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe"
2008-12-12 12:43:20 286 720 A...R "C:\WINDOWS\NEW\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe"
2008-12-12 12:43:20 409 600 A...R "C:\WINDOWS\NEW\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe"
2008-12-12 12:44:18 38 240 A...R "C:\WINDOWS\NEW\Installer\{90120000-0020-040C-0000-0000000FF1CE}\O12ConvIcon.exe"
2008-10-23 8:00:16 283 648 A.... "C:\WINDOWS\NEW\system32\dllcache\gdi32.dll"
2008-10-24 6:10:42 453 632 ..... "C:\WINDOWS\NEW\system32\dllcache\mrxsmb.sys"
2008-12-12 12:35:12 3 081 216 A.... "C:\WINDOWS\NEW\system32\dllcache\mshtml.dll"
2008-11-26 12:15:36 26 944 A.... "C:\WINDOWS\NEW\system32\drivers\aavmker4.sys"
2008-11-26 12:17:26 20 560 A.... "C:\WINDOWS\NEW\system32\drivers\aswFsBlk.sys"
2008-11-26 12:18:26 93 296 A.... "C:\WINDOWS\NEW\system32\drivers\aswmon.sys"
2008-11-26 12:18:18 94 032 A.... "C:\WINDOWS\NEW\system32\drivers\aswmon2.sys"
2008-11-26 12:16:30 23 152 A.... "C:\WINDOWS\NEW\system32\drivers\aswRdr.sys"
2008-11-26 12:17:36 111 184 A.... "C:\WINDOWS\NEW\system32\drivers\aswSP.sys"
2008-11-26 12:16:38 50 864 A.... "C:\WINDOWS\NEW\system32\drivers\aswTdi.sys"
2008-10-24 6:10:42 453 632 A.... "C:\WINDOWS\NEW\system32\drivers\mrxsmb.sys"


C:\Program Files\

2008-11-18 12:28:40 124 421 A.... "C:\Program Files\LimeWire\uninstall.exe"
2008-12-19 19:00:44 13 944 A.... "C:\Program Files\Mozilla Firefox\AccessibleMarshal.dll"
2008-12-19 19:00:50 7 678 568 A.... "C:\Program Files\Mozilla Firefox\firefox.exe"
2008-12-19 19:00:50 200 829 A.... "C:\Program Files\Mozilla Firefox\freebl3.dll"
2008-12-19 19:00:50 458 848 A.... "C:\Program Files\Mozilla Firefox\js3250.dll"
2008-12-19 19:00:52 161 384 A.... "C:\Program Files\Mozilla Firefox\nspr4.dll"
2008-12-19 19:00:52 382 560 A.... "C:\Program Files\Mozilla Firefox\nss3.dll"
2008-12-19 19:00:52 276 072 A.... "C:\Program Files\Mozilla Firefox\nssckbi.dll"
2008-12-19 19:00:52 34 416 A.... "C:\Program Files\Mozilla Firefox\plc4.dll"
2008-12-19 19:00:52 30 312 A.... "C:\Program Files\Mozilla Firefox\plds4.dll"
2008-12-19 19:00:52 112 224 A.... "C:\Program Files\Mozilla Firefox\smime3.dll"
2008-12-19 19:00:52 254 060 A.... "C:\Program Files\Mozilla Firefox\softokn3.dll"
2008-12-19 19:00:52 136 800 A.... "C:\Program Files\Mozilla Firefox\ssl3.dll"
2008-12-19 19:00:54 132 224 A.... "C:\Program Files\Mozilla Firefox\updater.exe"
2008-12-19 19:00:54 13 408 A.... "C:\Program Files\Mozilla Firefox\xpcom.dll"
2008-12-19 19:00:54 73 840 A.... "C:\Program Files\Mozilla Firefox\xpcom_compat.dll"
2008-12-19 19:00:54 421 992 A.... "C:\Program Files\Mozilla Firefox\xpcom_core.dll"
2008-12-19 19:00:54 73 328 A.... "C:\Program Files\Mozilla Firefox\xpicleanup.exe"
2008-12-19 19:00:54 12 392 A.... "C:\Program Files\Mozilla Firefox\xpistub.dll"
2008-11-26 12:15:32 225 280 A.... "C:\Program Files\Alwil Software\Avast4\Aavm4h.dll"
2008-11-26 12:19:02 188 416 A.... "C:\Program Files\Alwil Software\Avast4\AavmGuih.dll"
2008-11-26 12:15:26 20 992 A.... "C:\Program Files\Alwil Software\Avast4\AavmRpch.dll"
2008-11-26 12:15:42 35 840 A.... "C:\Program Files\Alwil Software\Avast4\AhResMai.dll"
2008-11-26 12:17:12 32 768 A.... "C:\Program Files\Alwil Software\Avast4\ahResMes.dll"
2008-11-26 12:16:50 53 248 A.... "C:\Program Files\Alwil Software\Avast4\AhResNS.dll"
2008-11-26 12:18:40 29 696 A.... "C:\Program Files\Alwil Software\Avast4\AhResOut.dll"
2008-11-26 12:17:06 33 280 A.... "C:\Program Files\Alwil Software\Avast4\ahResP2P.dll"
2008-11-26 12:19:12 43 008 A.... "C:\Program Files\Alwil Software\Avast4\AhResStd.dll"
2008-11-26 12:15:56 53 248 A.... "C:\Program Files\Alwil Software\Avast4\AhResWS.dll"
2008-11-26 12:18:00 65 536 A.... "C:\Program Files\Alwil Software\Avast4\AhRuiMai.dll"
2008-11-26 12:17:10 36 864 A.... "C:\Program Files\Alwil Software\Avast4\ahRuiMes.dll"
2008-11-26 12:16:48 36 864 A.... "C:\Program Files\Alwil Software\Avast4\AhRuiNS.dll"
2008-11-26 12:18:12 90 112 A.... "C:\Program Files\Alwil Software\Avast4\AhRuiOut.dll"
2008-11-26 12:17:04 22 528 A.... "C:\Program Files\Alwil Software\Avast4\ahRuiP2P.dll"
2008-11-26 12:19:10 57 344 A.... "C:\Program Files\Alwil Software\Avast4\AhRuiStd.dll"
2008-11-26 12:16:02 49 152 A.... "C:\Program Files\Alwil Software\Avast4\AhRuiWS.dll"
2008-11-26 12:13:48 274 640 A.... "C:\Program Files\Alwil Software\Avast4\ashAvast.exe"
2008-11-26 12:11:32 225 280 A.... "C:\Program Files\Alwil Software\Avast4\ashBase.dll"
2008-11-26 12:14:04 130 440 A.... "C:\Program Files\Alwil Software\Avast4\ashBug.exe"
2008-11-26 12:13:20 98 304 A.... "C:\Program Files\Alwil Software\Avast4\ashCfgP.dll"
2008-11-26 12:13:32 131 072 A.... "C:\Program Files\Alwil Software\Avast4\ashCfgT.dll"
2008-11-26 12:13:38 151 552 A.... "C:\Program Files\Alwil Software\Avast4\ashChest.dll"
2008-11-26 12:14:16 68 640 A.... "C:\Program Files\Alwil Software\Avast4\ashChest.exe"
2008-11-26 12:14:10 53 792 A.... "C:\Program Files\Alwil Software\Avast4\ashCnsnt.exe"
2008-11-26 12:18:52 81 000 A.... "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
2008-11-26 12:13:54 50 184 A.... "C:\Program Files\Alwil Software\Avast4\ashLogV.exe"
2008-11-26 12:18:32 254 040 A.... "C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe"
2008-11-26 12:18:40 204 600 A.... "C:\Program Files\Alwil Software\Avast4\ashOutXt.dll"
2008-11-26 12:18:58 208 720 A.... "C:\Program Files\Alwil Software\Avast4\ashPopWz.exe"
2008-11-26 12:14:58 282 880 A.... "C:\Program Files\Alwil Software\Avast4\ashQuick.exe"
2008-11-26 12:18:46 155 160 A.... "C:\Program Files\Alwil Software\Avast4\ashServ.exe"
2008-11-26 12:15:02 76 880 A.... "C:\Program Files\Alwil Software\Avast4\ashShell.dll"
2008-11-26 12:14:22 126 320 A.... "C:\Program Files\Alwil Software\Avast4\ashSimp2.exe"
2008-11-26 12:15:22 159 280 A.... "C:\Program Files\Alwil Software\Avast4\ashSimpl.exe"
2008-11-26 12:13:56 17 920 A.... "C:\Program Files\Alwil Software\Avast4\ashSkPcc.exe"
2008-11-26 12:13:58 61 440 A.... "C:\Program Files\Alwil Software\Avast4\ashSkPck.exe"
2008-11-26 12:11:38 53 248 A.... "C:\Program Files\Alwil Software\Avast4\ashSODBC.dll"
2008-11-26 12:12:00 233 472 A.... "C:\Program Files\Alwil Software\Avast4\ashSSqlt.dll"
2008-11-26 12:12:16 48 128 A.... "C:\Program Files\Alwil Software\Avast4\ashSXML.dll"
2008-11-26 12:11:44 118 784 A.... "C:\Program Files\Alwil Software\Avast4\ashTask.dll"
2008-11-26 12:13:12 327 680 A.... "C:\Program Files\Alwil Software\Avast4\ashUInt.dll"
2008-11-26 12:11:50 68 640 A.... "C:\Program Files\Alwil Software\Avast4\ashUpd.exe"
2008-11-26 12:16:24 352 920 A.... "C:\Program Files\Alwil Software\Avast4\ashWebSv.exe"
2008-11-26 12:16:26 65 536 A.... "C:\Program Files\Alwil Software\Avast4\ashWsFtr.dll"
2008-11-26 12:11:36 659 456 A.... "C:\Program Files\Alwil Software\Avast4\aswAux.dll"
2008-11-19 12:51:28 31 552 A.... "C:\Program Files\Alwil Software\Avast4\aswChLic.exe"
2008-11-26 12:09:14 131 072 A.... "C:\Program Files\Alwil Software\Avast4\aswCmnB.dll"
2008-11-26 12:09:10 86 016 A.... "C:\Program Files\Alwil Software\Avast4\aswCmnOS.dll"
2008-11-26 12:09:20 192 512 A.... "C:\Program Files\Alwil Software\Avast4\aswCmnS.dll"
2008-11-26 12:11:22 1 269 760 A.... "C:\Program Files\Alwil Software\Avast4\aswEngin.dll"
2008-11-26 12:12:04 11 584 A.... "C:\Program Files\Alwil Software\Avast4\aswIdle.dll"
2008-11-26 12:11:08 22 528 A.... "C:\Program Files\Alwil Software\Avast4\aswInteg.dll"
2008-11-26 12:09:34 327 680 A.... "C:\Program Files\Alwil Software\Avast4\aswRawFS.dll"
2008-11-26 12:09:02 147 456 A.... "C:\Program Files\Alwil Software\Avast4\aswRes.dll"
2008-11-26 12:10:56 86 016 A.... "C:\Program Files\Alwil Software\Avast4\aswScan.dll"
2008-11-26 12:12:08 18 752 A.... "C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"
2008-11-26 12:17:00 106 496 A.... "C:\Program Files\Alwil Software\Avast4\avCommEx.dll"
2008-11-26 12:13:42 13 656 A.... "C:\Program Files\Alwil Software\Avast4\AVSSHOOK.dll"
2008-11-26 12:21:10 68 640 A.... "C:\Program Files\Alwil Software\Avast4\sched.exe"
2008-11-26 12:15:06 68 640 A.... "C:\Program Files\Alwil Software\Avast4\VisthAux.exe"
2008-11-26 12:15:14 53 280 A.... "C:\Program Files\Alwil Software\Avast4\VisthLic.exe"
2008-11-26 12:14:48 53 280 A.... "C:\Program Files\Alwil Software\Avast4\VisthUpd.exe"
2008-11-26 12:12:54 917 504 A.... "C:\Program Files\Alwil Software\Avast4\XT1922.dll"
2008-12-22 11:11:26 72 A..H. "C:\Program Files\ATI Multimedia\RemCtrl\x10prod.sys"
2008-12-19 13:17:34 251 504 A.... "C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll"
2008-12-19 13:17:40 239 216 A.... "C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe"
2008-12-16 23:26:50 26 322 A.... "C:\Program Files\HP\HP Software Update\Contents.dat"
2008-11-18 12:28:08 4 900 376 A.... "C:\Program Files\LimeWire\.NetworkShare\LimeWireWin4.18.8.exe"
2008-10-26 22:22:44 3 610 424 A.... "C:\Program Files\Microsoft Office\OFFICE11\OUTLFLTR.DAT"
2008-12-19 19:00:44 67 688 A.... "C:\Program Files\Mozilla Firefox\components\jar50.dll"
2008-12-19 19:00:44 54 368 A.... "C:\Program Files\Mozilla Firefox\components\jsd3250.dll"
2008-12-19 19:00:44 34 944 A.... "C:\Program Files\Mozilla Firefox\components\myspell.dll"
2008-12-19 19:00:46 46 712 A.... "C:\Program Files\Mozilla Firefox\components\spellchk.dll"
2008-12-19 19:00:46 172 136 A.... "C:\Program Files\Mozilla Firefox\components\xpinstal.dll"
2008-12-19 19:00:52 22 656 A.... "C:\Program Files\Mozilla Firefox\plugins\npnul32.dll"
2008-12-19 19:00:54 451 872 A.... "C:\Program Files\Mozilla Firefox\uninstall\helper.exe"
2008-12-20 0:04:26 396 288 A.... "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe"
2008-12-05 16:47:52 122 864 A.... "C:\Program Files\Valve\Steam\CSERHelper.dll"
2008-12-05 16:46:08 1 039 192 A.... "C:\Program Files\Valve\Steam\dbghelp.dll"
2008-12-05 16:47:56 238 840 A.... "C:\Program Files\Valve\Steam\GameOverlayRenderer.dll"
2008-12-05 16:47:58 1 012 984 A.... "C:\Program Files\Valve\Steam\GameOverlayUI.exe"
2008-12-05 16:48:02 551 408 A.... "C:\Program Files\Valve\Steam\mss32_s.dll"
2008-12-05 16:46:14 2 860 280 A.... "C:\Program Files\Valve\Steam\Steam.dll"
2008-12-05 16:47:54 2 636 272 A.... "C:\Program Files\Valve\Steam\steamclient.dll"
2008-12-05 16:46:06 2 942 200 A.... "C:\Program Files\Valve\Steam\SteamUI.dll"
2008-12-05 16:47:54 238 840 A.... "C:\Program Files\Valve\Steam\tier0_s.dll"
2008-12-05 16:47:54 365 816 A.... "C:\Program Files\Valve\Steam\vstdlib_s.dll"
2008-12-05 16:45:56 256 496 A.... "C:\Program Files\Valve\Steam\WriteMiniDump.exe"
2008-12-22 11:10:08 229 320 A.... "C:\Program Files\Alwil Software\Avast4\DATA\aswar0.dll"
2008-12-22 11:10:08 391 216 A.... "C:\Program Files\Alwil Software\Avast4\DATA\clnr0.dll"
2008-12-22 11:10:08 309 912 A.... "C:\Program Files\Alwil Software\Avast4\DATA\dllcc0.dat"
2008-12-22 11:10:08 9 080 A.... "C:\Program Files\Alwil Software\Avast4\DATA\exts0.dll"
2008-12-22 15:50:20 70 766 A.... "C:\Program Files\Alwil Software\Avast4\DATA\iNews.htm"
2008-11-26 12:08:16 98 304 A.... "C:\Program Files\Alwil Software\Avast4\FRENCH\Base.dll"
2008-11-26 12:07:30 17 920 A.... "C:\Program Files\Alwil Software\Avast4\FRENCH\Boot.dll"
2008-11-20 11:50:42 6 720 A.... "C:\Program Files\Alwil Software\Avast4\FRENCH\ENHANCED.HTM"
2008-11-26 12:08:16 2 572 288 A.... "C:\Program Files\Alwil Software\Avast4\FRENCH\Lang.dll"
2008-11-26 12:08:14 61 440 A.... "C:\Program Files\Alwil Software\Avast4\FRENCH\LangMai.dll"
2008-12-21 11:23:50 159 792 A.... "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll"
2008-12-01 0:36:56 82 808 A.... "C:\Program Files\Fichiers communs\Adobe\Updater5\AdobeUpdaterInstallMgr.exe"
2008-12-01 0:37:06 2 356 088 A.... "C:\Program Files\Fichiers communs\Adobe\Updater5\AdobeUpdater.exe"
2008-12-19 13:29:12 137 200 A.... "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"
2008-12-19 13:29:18 10 736 A.... "C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\gth.dll"
2008-12-19 13:29:16 116 208 A.... "C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\gtn.dll"
2008-12-19 13:29:14 657 904 A.... "C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll"
2008-12-19 13:17:34 522 224 A.... "C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll"
2008-12-19 15:29:16 311 812 A.... "C:\Program Files\Google\Google Toolbar\Component\googledict_en2es_7DAF315D7FC526D7.dat"
2008-12-19 13:17:34 251 504 A.... "C:\Program Files\Google\Google Toolbar\Component\GoogleToolbar_9EC54ABD12883CDE.dll"
2008-12-19 13:17:38 1 906 288 A.... "C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0531C63A913CC9D1.exe"
2008-12-19 13:17:36 2 528 880 A.... "C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_F423308312A7B033.dll"
2008-12-19 13:17:40 239 216 A.... "C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarUser_6E0ED6FDEB851D0D.exe"
2008-12-19 13:17:40 137 200 A.... "C:\Program Files\Google\Google Toolbar\Component\GoogleUpdaterService_4A7E0643FB65B538.exe"
2008-12-19 13:17:42 910 320 A.... "C:\Program Files\Google\Google Toolbar\Component\SearchWithGoogleUpdate_55803BCEE8AD4150.exe"
2008-12-05 16:46:14 206 072 A.... "C:\Program Files\Valve\Steam\bin\FileSystem_Steam.dll"
2008-12-05 16:46:18 1 271 032 A.... "C:\Program Files\Valve\Steam\bin\friendsUI.dll"
2008-12-05 16:46:18 165 112 A.... "C:\Program Files\Valve\Steam\bin\installscript.dll"
2008-12-05 16:46:22 546 040 A.... "C:\Program Files\Valve\Steam\bin\mss32_s.dll"
2008-12-05 16:46:26 831 208 A.... "C:\Program Files\Valve\Steam\bin\nattypeprobe.dll"
2008-12-05 16:46:32 5 288 928 A.... "C:\Program Files\Valve\Steam\bin\p2pcore.dll"
2008-12-05 16:46:36 1 185 016 A.... "C:\Program Files\Valve\Steam\bin\p2pvoice.dll"
2008-12-05 16:46:38 935 160 A.... "C:\Program Files\Valve\Steam\bin\ServerBrowser.dll"
2008-12-05 16:46:40 653 808 A.... "C:\Program Files\Valve\Steam\bin\SteamService.dll"
2008-12-05 16:46:40 104 944 A.... "C:\Program Files\Valve\Steam\bin\SteamService.exe"
2008-12-05 16:46:42 197 880 A.... "C:\Program Files\Valve\Steam\bin\vaudio_speex.dll"
2008-12-05 16:46:44 464 120 A.... "C:\Program Files\Valve\Steam\bin\vgui2.dll"
2008-12-05 16:46:44 1 670 A.... "C:\Program Files\Valve\Steam\Public\Account.html"
2008-12-05 16:46:48 36 596 A.... "C:\Program Files\Valve\Steam\Public\ssa_english.htm"
2008-12-05 16:46:48 41 518 A.... "C:\Program Files\Valve\Steam\Public\ssa_french.htm"
2008-12-05 16:46:48 43 448 A.... "C:\Program Files\Valve\Steam\Public\ssa_german.htm"
2008-12-05 16:46:48 42 536 A.... "C:\Program Files\Valve\Steam\Public\ssa_italian.htm"
2008-12-05 16:46:48 68 253 A.... "C:\Program Files\Valve\Steam\Public\ssa_russian.htm"
2008-12-05 16:46:48 41 413 A.... "C:\Program Files\Valve\Steam\Public\ssa_spanish.htm"
2008-10-31 23:51:10 1 414 A.... "C:\Program Files\Adobe\Adobe Help Center\Browser\profile\global.dat"
2008-11-26 12:15:36 26 944 A.... "C:\Program Files\Alwil Software\Avast4\Setup\INF\Aavmker4.sys"
2008-11-26 12:17:26 20 560 A.... "C:\Program Files\Alwil Software\Avast4\Setup\INF\aswFsBlk.sys"
2008-11-26 12:18:26 93 296 A.... "C:\Program Files\Alwil Software\Avast4\Setup\INF\aswMon.sys"
2008-11-26 12:18:18 94 032 A.... "C:\Program Files\Alwil Software\Avast4\Setup\INF\aswMon2.sys"
2008-11-26 12:17:16 51 792 A.... "C:\Program Files\Alwil Software\Avast4\Setup\INF\aswMonFlt.sys"
2008-11-26 12:16:30 23 152 A.... "C:\Program Files\Alwil Software\Avast4\Setup\INF\AswRdr.sys"
2008-11-26 12:17:36 111 184 A.... "C:\Program Files\Alwil Software\Avast4\Setup\INF\aswSP.sys"
2008-11-26 12:16:38 50 864 A.... "C:\Program Files\Alwil Software\Avast4\Setup\INF\AswTdi.sys"
2008-12-19 19:00:46 99 832 A.... "C:\Program Files\Mozilla Firefox\extensions\talkback@mozilla.org\components\BrandRes.dll"
2008-12-19 19:00:46 156 536 A.... "C:\Program Files\Mozilla Firefox\extensions\talkback@mozilla.org\components\fullsoft.dll"
2008-12-19 19:00:46 14 448 A.... "C:\Program Files\Mozilla Firefox\extensions\talkback@mozilla.org\components\qfaservices.dll"
2008-12-19 19:00:48 407 032 A.... "C:\Program Files\Mozilla Firefox\extensions\talkback@mozilla.org\components\talkback.exe"
2008-10-31 23:51:10 1 219 A.... "C:\Program Files\Adobe\Adobe Help Center\Browser\profile\cache4\opr00001.html"
2008-10-31 23:51:10 315 A.... "C:\Program Files\Adobe\Adobe Help Center\Browser\profile\cache4\opr00002.html"
2008-10-31 23:51:10 241 A.... "C:\Program Files\Adobe\Adobe Help Center\Browser\profile\cache4\opr00003.html"
2008-11-26 12:15:40 25 168 A.... "C:\Program Files\Alwil Software\Avast4\Setup\INF\AMD64\Aavmker4.sys"
2008-11-26 12:17:30 22 096 A.... "C:\Program Files\Alwil Software\Avast4\Setup\INF\AMD64\aswFsBlk.sys"
2008-11-26 12:18:22 75 856 A.... "C:\Program Files\Alwil Software\Avast4\Setup\INF\AMD64\aswMon2.sys"
2008-11-26 12:17:24 64 592 A.... "C:\Program Files\Alwil Software\Avast4\Setup\INF\AMD64\aswMonFlt.sys"
2008-11-26 12:16:32 27 216 A.... "C:\Program Files\Alwil Software\Avast4\Setup\INF\AMD64\aswRdr.sys"
2008-11-26 12:17:50 89 168 A.... "C:\Program Files\Alwil Software\Avast4\Setup\INF\AMD64\aswSP.sys"
2008-11-26 12:16:42 57 936 A.... "C:\Program Files\Alwil Software\Avast4\Setup\INF\AMD64\aswTdi.sys"
2008-11-26 12:17:28 37 968 A.... "C:\Program Files\Alwil Software\Avast4\Setup\INF\IA64\aswFsBlk.sys"
2008-11-26 12:17:20 140 368 A.... "C:\Program Files\Alwil Software\Avast4\Setup\INF\IA64\aswMonFlt.sys"
2008-11-26 12:16:34 55 376 A.... "C:\Program Files\Alwil Software\Avast4\Setup\INF\IA64\aswRdr.sys"
2008-11-26 12:17:44 168 016 A.... "C:\Program Files\Alwil Software\Avast4\Setup\INF\IA64\aswSP.sys"
2008-11-26 12:16:44 126 544 A.... "C:\Program Files\Alwil Software\Avast4\Setup\INF\IA64\aswTdi.sys"


[b]Files with hidden attributes[/b]:

Wed 25 Oct 2006 438,272 ..SHR --- "C:\WINDOWS\W?nSxS\n?tepad.exe"
Wed 8 Nov 2006 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Sun 19 Aug 2007 4,348 ..SH. --- "C:\Documents and Settings\All Users.NEW\DRM\DRMv1.bak"
Mon 22 Dec 2008 72 A..H. --- "C:\Program Files\ATI Multimedia\RemCtrl\x10prod.sys"
Sat 20 Dec 2008 95,978 A.SH. --- "C:\WINDOWS\NEW\system32\bapunita.dll"
Thu 18 Sep 2008 64,000 A.SH. --- "C:\WINDOWS\NEW\system32\lewowesa.dll"
Mon 22 Dec 2008 83,141 A.SH. --- "C:\WINDOWS\NEW\system32\mizokomo.dll"
Thu 18 Sep 2008 64,000 A.SH. --- "C:\WINDOWS\NEW\system32\mokejudu.dll"
Sun 21 Dec 2008 96,959 A.SH. --- "C:\WINDOWS\NEW\system32\nobiwuna.dll"
Fri 19 Dec 2008 97,860 A.SH. --- "C:\WINDOWS\NEW\system32\nomadani.dll"
Thu 18 Dec 2008 96,006 A.SH. --- "C:\WINDOWS\NEW\system32\sigilawo.dll"
Thu 18 Dec 2008 83,015 A.SH. --- "C:\WINDOWS\NEW\system32\wegagolu.dll"
Thu 18 Sep 2008 64,000 A.SH. --- "C:\WINDOWS\NEW\system32\wezavova.dll"
Mon 22 Dec 2008 98,035 A.SH. --- "C:\WINDOWS\NEW\system32\wojujive.dll"
Sun 21 Dec 2008 96,834 A.SH. --- "C:\WINDOWS\NEW\system32\wuniferi.dll"
Mon 22 Dec 2008 97,570 A.SH. --- "C:\WINDOWS\NEW\system32\zilozama.dll"
Sat 20 Dec 2008 95,808 A.SH. --- "C:\WINDOWS\NEW\system32\zotowuru.dll"
Wed 29 Sep 2004 15,360 A..HR --- "C:\WINDOWS\NEW\system32\drivers\NetMotCM.sys"
Mon 8 Sep 2008 4,096 A..H. --- "C:\Documents and Settings\St‚phane\Bureau\Nouveau dossier\2007-2008\Jaelle\._d_old_modern.zip"
Mon 8 Sep 2008 4,096 A..H. --- "C:\Documents and Settings\St‚phane\Bureau\Nouveau dossier\2007-2008\Jaelle\._showtime.zip"
Fri 23 May 2008 8 A..H. --- "C:\Documents and Settings\All Users.NEW\Application Data\GTek\GTUpdate\AUpdate\Channels\ch1\lock.tmp"
Fri 23 May 2008 8 A..H. --- "C:\Documents and Settings\All Users.NEW\Application Data\GTek\GTUpdate\AUpdate\Channels\ch2\lock.tmp"
Fri 23 May 2008 8 A..H. --- "C:\Documents and Settings\Maman et Papa\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\lock.tmp"
Fri 23 May 2008 8 A..H. --- "C:\Documents and Settings\Maman et Papa\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\lock.tmp"
Fri 23 May 2008 8 A..H. --- "C:\Documents and Settings\pilon.ST-PILON\Application Data\GTek\GTUpdate\AUpdate\Channels\ch_u1\lock.tmp"
Fri 23 May 2008 8 A..H. --- "C:\Documents and Settings\pilon.ST-PILON\Application Data\GTek\GTUpdate\AUpdate\Channels\ch_u2\lock.tmp"
Fri 23 May 2008 8 A..H. --- "C:\Documents and Settings\St‚phane\Application Data\GTek\GTUpdate\AUpdate\Channels\ch_u1\lock.tmp"
Fri 23 May 2008 8 A..H. --- "C:\Documents and Settings\St‚phane\Application Data\GTek\GTUpdate\AUpdate\Channels\ch_u2\lock.tmp"
Mon 8 Sep 2008 4,096 A..H. --- "C:\Documents and Settings\St‚phane\Bureau\Nouveau dossier\2007-2008\Module 12 - Illustration couleur\Jaelle\Polices\._d_old_modern.zip"
Mon 8 Sep 2008 4,096 A..H. --- "C:\Documents and Settings\St‚phane\Bureau\Nouveau dossier\2007-2008\Module 12 - Illustration couleur\Jaelle\Polices\._showtime.zip"


[b]Program Folders[/b]:

C:\Program Files\

Adobe
Alwil Software
Apple Software Update
ATI Multimedia
ATI Technologies
AviSynth 2.5
AvRack
Canon
C-Media 3D Audio
ComPlus Applications
Diablo II
DivX
Elaborate Bytes
Fichiers communs
Google
Hewlett-Packard
HP
InstallShield Installation Information
Intel
Internet Explorer
iPod
iTunes
Java
Lavasoft
LimeWire
Linksys EasyLink Advisor
Logitech
Messenger
Messenger Plus! Live
MessengerPlus! 3
microsoft frontpage
Microsoft Office
Microsoft Silverlight
Microsoft Visual Studio
Microsoft Works
Microsoft.NET
Movie Maker
Mozilla Firefox
msaccrt
MSECache
MSN
MSN Gaming Zone
MSN Messenger
MSXML 4.0
MyGlobalSearch
Nero
NetMeeting
Online Services
OpenOffice.org 2.0
Outlook Express
PhotoFiltre Studio
Power Tab Software
QuickTime
Realtek Sound Manager
Services en ligne
SlySoft
Symantec
Trend Micro
Ulead Systems
Uninstall Information
Valve
Ventrilo
WildTangent
Winamp
Windows Live
Windows Media Components
Windows Media Player
Windows NT
WindowsUpdate
WinRAR
xerox
Zone Labs

C:\Program Files\Fichiers communs\

Adobe
Adobe Systems Shared
Ahead
Apple
ATI
Blizzard Entertainment
Canon
CyberLink
DESIGNER
Hewlett-Packard
HP
InstallShield
Java
Logitech
Microsoft Shared
MSSoap
ODBC
Services
SpeechEngines
Symantec Shared
System
WindowsLiveInstaller
Wise Installation Wizard


[b]Add/Remove Programs[/b]:

Adobe Flash Player ActiveX
Adobe Flash Player Plugin
Adobe Photoshop CS2
Adobe Shockwave Player
Agere Systems PCI Soft Modem
ATI Display Driver
avast! Antivirus
C-Media 3D Audio
Canon Camera Access Library
Canon Camera Window DC_DV 5 for ZoomBrowser EX
Canon Camera Window DC_DV 6 for ZoomBrowser EX
Canon Camera Window MC 6 for ZoomBrowser EX
Canon G.726 WMP-Decoder
Canon Camera Support Core Library
Diablo II
Linksys EasyLink Advisor 1.6 (0032)
Canon Utilities EOS Utility
HijackThis 2.0.2
HP Imaging Device Functions 8.0
HP Solution Center 8.0
HP Customer Participation Program 8.0
ATI Remote Wonder 2.3
ATI Multimedia Center 9.01
DAO
ATI Decoder
Correctif Windows XP - KB873339
Correctif Windows XP - KB885835
Correctif Windows XP - KB885836
Correctif Windows XP - KB886185
Correctif Windows XP - KB887472
Correctif Windows XP - KB888302
Mise à jour de sécurité pour Windows XP (KB890046)
Correctif Windows XP - KB890859
Correctif Windows XP - KB891781
Mise à jour de sécurité pour Windows XP (KB893756)
Windows Installer 3.1 (KB893803)
Mise à jour pour Windows XP (KB894391)
Mise à jour de sécurité pour Windows XP (KB896358)
Mise à jour de sécurité pour Windows XP (KB896423)
Mise à jour de sécurité pour Windows XP (KB896428)
Mise à jour pour Windows XP (KB898461)
Mise à jour de sécurité pour Windows XP (KB899587)
Mise à jour de sécurité pour Windows XP (KB899591)
Mise à jour pour Windows XP (KB900485)
Mise à jour de sécurité pour Windows XP (KB900725)
Mise à jour de sécurité pour Windows XP (KB901017)
Mise à jour de sécurité pour Windows XP (KB901214)
Mise à jour de sécurité pour Windows XP (KB902400)
Mise à jour de sécurité pour Windows XP (KB904706)
Mise à jour de sécurité pour Windows XP (KB905414)
Mise à jour de sécurité pour Windows XP (KB905749)
Mise à jour de sécurité pour Windows XP (KB908519)
Mise à jour pour Windows XP (KB908531)
Mise à jour pour Windows XP (KB910437)
Mise à jour pour Windows XP (KB911280)
Mise à jour de sécurité pour Windows XP (KB911562)
Mise à jour de sécurité pour Lecteur Windows Media (KB911564)
Mise à jour de sécurité pour Windows XP (KB911927)
Mise à jour de sécurité pour Windows XP (KB913580)
Mise à jour de sécurité pour Windows XP (KB914388)
Mise à jour de sécurité pour Windows XP (KB914389)
Mise à jour pour Windows XP (KB916595)
Mise à jour de sécurité pour Windows XP (KB917344)
Mise à jour de sécurité pour Windows XP (KB917953)
Mise à jour de sécurité pour Windows XP (KB918118)
Mise à jour de sécurité pour Windows XP (KB918439)
Mise à jour de sécurité pour Windows XP (KB919007)
Mise à jour de sécurité pour Windows XP (KB920213)
Mise à jour de sécurité pour Windows XP (KB920670)
Mise à jour de sécurité pour Windows XP (KB920683)
Mise à jour de sécurité pour Windows XP (KB920685)
Mise à jour pour Windows XP (KB920872)
Mise à jour de sécurité pour Windows XP (KB921503)
Mise à jour pour Windows XP (KB922582)
Mise à jour de sécurité pour Windows XP (KB922819)
Mise à jour de sécurité pour Windows XP (KB923191)
Mise à jour de sécurité pour Windows XP (KB923414)
Mise à jour de sécurité pour Windows XP (KB923689)
Mise à jour de sécurité pour Windows XP (KB923789)
Mise à jour de sécurité pour Windows XP (KB923980)
Mise à jour de sécurité pour Windows XP (KB924270)
Mise à jour de sécurité pour Windows XP (KB924496)
Mise à jour de sécurité pour Windows XP (KB924667)
Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)
Mise à jour de sécurité pour Windows XP (KB925902)
Mise à jour de sécurité pour Windows XP (KB926255)
Mise à jour de sécurité pour Windows XP (KB926436)
Mise à jour de sécurité pour Windows XP (KB927779)
Mise à jour de sécurité pour Windows XP (KB927802)
Mise à jour pour Windows XP (KB927891)
Mise à jour de sécurité pour Windows XP (KB928255)
Mise à jour de sécurité pour Windows XP (KB928843)
Mise à jour de sécurité pour Windows XP (KB929123)
Mise à jour de sécurité pour Windows XP (KB930178)
Mise à jour pour Windows XP (KB930916)
Mise à jour de sécurité pour Windows XP (KB931261)
Mise à jour de sécurité pour Windows XP (KB931784)
Mise à jour pour Windows XP (KB931836)
Mise à jour de sécurité pour Windows XP (KB932168)
Mise à jour pour Windows XP (KB933360)
Mise à jour de sécurité pour Windows XP (KB933729)
Mise à jour de sécurité pour Windows XP (KB935839)
Mise à jour de sécurité pour Windows XP (KB935840)
Mise à jour de sécurité pour Windows XP (KB936021)
Mise à jour pour Windows XP (KB936357)
Mise à jour de sécurité pour Lecteur Windows Media 9 (KB936782)
Mise à jour de sécurité pour Windows XP (KB937143)
Mise à jour de sécurité pour Windows XP (KB937894)
Mise à jour de sécurité pour Windows XP (KB938127)
Mise à jour de sécurité pour Windows XP (KB938464)
Mise à jour pour Windows XP (KB938828)
Mise à jour de sécurité pour Windows XP (KB938829)
Mise à jour de sécurité pour Windows XP (KB939653)
Mise à jour de sécurité pour Windows XP (KB941202)
Mise à jour de sécurité pour Windows XP (KB941568)
Mise à jour de sécurité pour Windows XP (KB941569)
Mise à jour de sécurité pour Windows XP (KB941644)
Mise à jour de sécurité pour Windows XP (KB941693)
Mise à jour de sécurité pour Windows XP (KB942615)
Mise à jour pour Windows XP (KB942763)
Mise à jour pour Windows XP (KB942840)
Mise à jour de sécurité pour Windows XP (KB943055)
Mise à jour de sécurité pour Windows XP (KB943460)
Mise à jour de sécurité pour Windows XP (KB943485)
Mise à jour de sécurité pour Windows XP (KB944338)
Mise à jour de sécurité pour Windows XP (KB944533)
Mise à jour de sécurité pour Windows XP (KB944653)
Mise à jour de sécurité pour Windows XP (KB945553)
Mise à jour de sécurité pour Windows XP (KB946026)
Mise à jour pour Windows XP (KB946627)
Mise à jour de sécurité pour Windows XP (KB946648)
Mise à jour de sécurité pour Windows XP (KB947864)
Mise à jour de sécurité pour Windows XP (KB948590)
Mise à jour de sécurité pour Windows XP (KB948881)
Mise à jour de sécurité pour Windows XP (KB950749)
Mise à jour de sécurité pour Windows XP (KB950759)
Mise à jour de sécurité pour Windows XP (KB950760)
Mise à jour de sécurité pour Windows XP (KB950762)
Mise à jour de sécurité pour Windows XP (KB950974)
Mise à jour de sécurité pour Windows XP (KB951066)
Mise à jour pour Windows XP (KB951072-v2)
Mise à jour de sécurité pour Windows XP (KB951376)
Mise à jour de sécurité pour Windows XP (KB951376-v2)
Mise à jour de sécurité pour Windows XP (KB951698)
Mise à jour de sécurité pour Windows XP (KB951748)
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)
Correctif pour Windows XP (KB952287)
Mise à jour de sécurité pour Windows XP (KB952954)
Mise à jour de sécurité pour le Codeur Windows Media (KB954156)
Mise à jour de sécurité pour Windows XP (KB954211)
Mise à jour de sécurité pour Windows XP (KB954600)
Mise à jour de sécurité pour Windows XP (KB955069)
Mise à jour pour Windows XP (KB955839)
Mise à jour de sécurité pour Windows XP (KB956390)
Mise à jour de sécurité pour Windows XP (KB956391)
Mise à jour de sécurité pour Windows XP (KB956802)
Mise à jour de sécurité pour Windows XP (KB956803)
Mise à jour de sécurité pour Windows XP (KB956841)
Mise à jour de sécurité pour Windows XP (KB957095)
Mise à jour de sécurité pour Windows XP (KB957097)
Mise à jour de sécurité pour Windows XP (KB958215)
Mise à jour de sécurité pour Windows XP (KB958644)
Mise à jour de sécurité pour Windows XP (KB960714)
LimeWire 4.18.8
Messenger Plus! Live
Canon MovieEdit Task for ZoomBrowser EX
Mozilla Firefox (2.0.0.20)
Canon Utilities PhotoStitch
PowerStrip 3 (remove only)
Canon RAW Image Task for ZoomBrowser EX
Canon RemoteCapture Task for ZoomBrowser EX
Icatch(IV) Camera Driver
Windows Media Encoder 9 Series
Windows Media Format Runtime
Archiveur WinRAR
Canon Utilities ZoomBrowser EX
Steam(TM)
ATI HYDRAVISION
ATI Control Panel
AIO_Scan
Scan
WebReg
iTunes
F2100_Help
Google Toolbar for Internet Explorer
Adobe Photoshop CS2
HP Deskjet All-In-One Software 8.0
Java(TM) 6 Update 2
Java(TM) 6 Update 3
ATIRW2
MSXML 4.0 SP2 (KB927978)
Windows Live Messenger
Logitech MouseWare 9.79.1
DJ_AIO_ProductContext
eSupportQFolder
HPProductAssistant
CustomerResearchQFolder
Adobe Stock Photos 1.0
Ventrilo Client
MSXML 4.0 SP2 (KB954430)
ATI Multimedia Center
Microsoft Silverlight
Intel(R) Extreme Graphics 2 Driver
HP Update
Adobe Common File Installer
Microsoft Office Professional Edition 2003
Compatibility Pack for the 2007 Office system
MarketResearch
Status
Destinations
DJ_AIO_Software
Drivers Install For Linksys Easylink Advisor
SolutionCenter
Copy
Adobe® Photoshop® Album Starter Edition 3.2
Windows Live installer
DeviceManagementQFolder
Adobe Reader 8.1.0
Windows Live Sign-in Assistant
Apple Mobile Device Support
DivX Web Player
Adobe Bridge 1.0
Apple Software Update
BufferChm
Digital Camera
Toolbox
DAO
DivX Content Uploader
Half-Life(R) 2
DJ_AIO_Software_min
UnloadSupport
QuickTime
HP Smart Web Printing 1.0
Windows Media Encoder 9 Series
Adobe Help Center 1.0
HP Photosmart Essential
HPSSupply
ATI Decoder
Nero 7 Ultra Edition
32 Bit HP CIO Components Installer
F2100
TrayApp


[b]Run Values[/b]:

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"igfxtray"="C:\\WINDOWS\\NEW\\system32\\igfxtray.exe"
"igfxhkcmd"="C:\\WINDOWS\\NEW\\system32\\hkcmd.exe"
"igfxpers"="C:\\WINDOWS\\NEW\\system32\\igfxpers.exe"
"Cmaudio"="RunDll32 cmicnfg.cpl,CMICtrlWnd"
"NeroFilterCheck"="C:\\Program Files\\Fichiers communs\\Ahead\\Lib\\NeroCheck.exe"
"AGRSMMSG"="AGRSMMSG.exe"
@=""
"ATI DeviceDetect"="C:\\Program Files\\ATI Multimedia\\main\\ATIDtct.EXE"
"ATIPTA"="C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0_03\\bin\\jusched.exe\""
"Adobe Photo Downloader"="\"C:\\Program Files\\Adobe\\Photoshop Album Starter Edition\\3.2\\Apps\\apdproxy.exe\""
"Adobe Reader Speed Launcher"="\"C:\\Program Files\\Adobe\\Reader 8.0\\Reader\\Reader_sl.exe\""
"HP Software Update"="C:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe"
"Logitech Utility"="Logi_MwX.Exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"HydraVisionDesktopManager"="C:\\Program Files\\ATI Technologies\\ATI HYDRAVISION\\HydraDM.exe"
"diyahirato"="Rundll32.exe \"C:\\WINDOWS\\NEW\\system32\\mokejudu.dll\",s"
"c4482298"="rundll32.exe \"C:\\WINDOWS\\NEW\\system32\\mizokomo.dll\",b"
"CPMc77b1104"="Rundll32.exe \"c:\\windows\\new\\system32\\zilozama.dll\",a"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]
@=""

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"
@=""

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"
@=""

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"
@=""

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="\"C:\\Program Files\\Fichiers communs\\Ahead\\Lib\\NMBgMonitor.exe\""
@=""
"ATI Launchpad"="\"C:\\Program Files\\ATI Multimedia\\main\\launchpd.exe\""
"ATI Remote Control"="C:\\Program Files\\ATI Multimedia\\RemCtrl\\ATIRW.exe"
"swg"="C:\\Program Files\\Google\\GoogleToolbarNotifier\\GoogleToolbarNotifier.exe"
"ctfmon.exe"="C:\\WINDOWS\\NEW\\system32\\ctfmon.exe"
"Steam"="\"c:\\program files\\valve\\steam\\steam.exe\" -silent"
"EasyLinkAdvisor"="\"C:\\Program Files\\Linksys EasyLink Advisor\\LinksysAgent.exe\" /startup"


[b]Bot Check[/b]:

SERVICE_NAME: wscsvc
DISPLAY_NAME : Centre de sécurité
START_TYPE : 2 AUTO_START

SERVICE_NAME: sharedaccess
DISPLAY_NAME : Pare-feu Windows / Partage de connexion Internet
START_TYPE : 2 AUTO_START

SERVICE_NAME: wuauserv
DISPLAY_NAME : Mises à jour automatiques
START_TYPE : 4 DISABLED

SERVICE_NAME: srservice
DISPLAY_NAME : Service de restauration système
START_TYPE : 2 AUTO_START

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole]
"EnableDCOM"="Y"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"restrictanonymous"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update]
"AUOptions"=dword:00000004

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify"=dword:00000000
"FirewallDisableNotify"=dword:00000000
"UpdatesDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000000
"FirewallOverride"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"WaitToKillServiceTimeout"="20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"SFCDisable"=dword:00000000
"Shell"="Explorer.exe"
"Userinit"="C:\\WINDOWS\\NEW\\system32\\userinit.exe,"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shell extensions]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters]
"TransportBindName"="\\Device\\"


[b]ShellExecuteHooks[/b]:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""



[b]Environment[/b]:


HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager\environment
ComSpec REG_EXPAND_SZ %SystemRoot%\system32\cmd.exe
Path REG_EXPAND_SZ %SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\Fichiers communs\Adobe\AGL;C:\Program Files\QuickTime\QTSystem\
windir REG_EXPAND_SZ %SystemRoot%
OS REG_SZ Windows_NT
PATHEXT REG_SZ .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
TEMP REG_EXPAND_SZ %SystemRoot%\TEMP
TMP REG_EXPAND_SZ %SystemRoot%\TEMP
CLASSPATH REG_SZ .;C:\Program Files\Java\jre1.6.0_03\lib\ext\QTJava.zip
QTJAVA REG_SZ C:\Program Files\Java\jre1.6.0_03\lib\ext\QTJava.zip
SAFEBOOT_OPTION REG_SZ MINIMAL

[b]SecurityProviders[/b]:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders
SecurityProviders REG_SZ msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll


[b]Authentication Packages[/b]:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
Authentication Packages REG_MULTI_SZ msv1_0\0\0


[b]Subsystem Startup[/b]:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems]
"Windows"="%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16"


[b]Midi Drivers[/b]:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midi"="wdmaud.drv"
"midi1"="wdmaud.drv"


[b]Non-Default IFEO Debugger[/b]:


[b]Non-Default Installed Components[/b]:


[b]Non-Default Safeboot Minimal[/b]:


[b]File Associations[/b]:


[HKEY_CLASSES_ROOT\batfile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\cmdfile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\comfile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\htafile\shell\open\command]
@="C:\\WINDOWS\\NEW\\system32\\mshta.exe \"%1\" %*"

[HKEY_CLASSES_ROOT\http\shell\open\command]
@="\"C:\\Program Files\\Internet Explorer\\iexplore.exe\" -nohome"

[HKEY_CLASSES_ROOT\htmlfile\shell\open\command]
@="\"C:\\Program Files\\Internet Explorer\\iexplore.exe\" -nohome"

[HKEY_CLASSES_ROOT\regedit\shell\open\command]
@="regedit.exe %1"

[HKEY_CLASSES_ROOT\regfile\shell\open\command]
@="regedit.exe \"%1\""

[HKEY_CLASSES_ROOT\scrfile\shell\open\command]
@="\"%1\" /S"

[HKEY_CLASSES_ROOT\txtfile\shell\open\command]
@="%SystemRoot%\system32\NOTEPAD.EXE %1"


[b]Finished![/b]










Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:46:50, on 2008-12-22
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\NEW\System32\smss.exe
C:\WINDOWS\NEW\system32\winlogon.exe
C:\WINDOWS\NEW\system32\services.exe
C:\WINDOWS\NEW\system32\lsass.exe
C:\WINDOWS\NEW\system32\Ati2evxx.exe
C:\WINDOWS\NEW\system32\svchost.exe
C:\WINDOWS\NEW\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\NEW\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\NEW\system32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\NEW\System32\svchost.exe
C:\WINDOWS\NEW\System32\svchost.exe
C:\WINDOWS\NEW\system32\svchost.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\NEW\System32\svchost.exe
C:\WINDOWS\NEW\system32\Ati2evxx.exe
C:\WINDOWS\NEW\Explorer.EXE
C:\WINDOWS\NEW\AGRSMMSG.exe
C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDM.exe
C:\WINDOWS\NEW\system32\rundll32.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\ATI Multimedia\RemCtrl\ATIRW.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\NEW\system32\ctfmon.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\program files\valve\steam\steam.exe
C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\NEW\system32\rundll32.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\iPod\bin\iPodService.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.canoe.qc.ca
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/md5auth.srf?lc=1036
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2ab45b53-5770-4dc5-8622-baa51679d890} - C:\WINDOWS\NEW\system32\wezavova.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: HP Smart Web Printing 1.0 - {AE84A6AA-A333-4B92-B276-C11E2212E4FE} - C:\Program Files\HP\Smart Web Printing\SmartWebPrinting.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\NEW\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\NEW\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\NEW\system32\igfxpers.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ATI DeviceDetect] C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] &

Re

Reposte un log hijackthis, il est incomplet

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:46:50, on 2008-12-22
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\NEW\System32\smss.exe
C:\WINDOWS\NEW\system32\winlogon.exe
C:\WINDOWS\NEW\system32\services.exe
C:\WINDOWS\NEW\system32\lsass.exe
C:\WINDOWS\NEW\system32\Ati2evxx.exe
C:\WINDOWS\NEW\system32\svchost.exe
C:\WINDOWS\NEW\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\NEW\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\NEW\system32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\NEW\System32\svchost.exe
C:\WINDOWS\NEW\System32\svchost.exe
C:\WINDOWS\NEW\system32\svchost.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\NEW\System32\svchost.exe
C:\WINDOWS\NEW\system32\Ati2evxx.exe
C:\WINDOWS\NEW\Explorer.EXE
C:\WINDOWS\NEW\AGRSMMSG.exe
C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDM.exe
C:\WINDOWS\NEW\system32\rundll32.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\ATI Multimedia\RemCtrl\ATIRW.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\NEW\system32\ctfmon.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\program files\valve\steam\steam.exe
C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\NEW\system32\rundll32.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\iPod\bin\iPodService.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.canoe.qc.ca
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/md5auth.srf?lc=1036
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2ab45b53-5770-4dc5-8622-baa51679d890} - C:\WINDOWS\NEW\system32\wezavova.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: HP Smart Web Printing 1.0 - {AE84A6AA-A333-4B92-B276-C11E2212E4FE} - C:\Program Files\HP\Smart Web Printing\SmartWebPrinting.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\NEW\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\NEW\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\NEW\system32\igfxpers.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ATI DeviceDetect] C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HydraVisionDesktopManager] C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDM.exe
O4 - HKLM\..\Run: [diyahirato] Rundll32.exe "C:\WINDOWS\NEW\system32\mokejudu.dll",s
O4 - HKLM\..\Run: [c4482298] rundll32.exe "C:\WINDOWS\NEW\system32\mizokomo.dll",b
O4 - HKLM\..\Run: [CPMc77b1104] Rundll32.exe "c:\windows\new\system32\zilozama.dll",a
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ATI Launchpad] "C:\Program Files\ATI Multimedia\main\launchpd.exe"
O4 - HKCU\..\Run: [ATI Remote Control] C:\Program Files\ATI Multimedia\RemCtrl\ATIRW.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\NEW\system32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\valve\steam\steam.exe" -silent
O4 - HKCU\..\Run: [EasyLinkAdvisor] "C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe" /startup
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\NEW\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [diyahirato] Rundll32.exe "C:\WINDOWS\NEW\system32\mokejudu.dll",s (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\NEW\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\NEW\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\NEW\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {1C11B948-582A-433F-A98D-A8C4D5CC64F2} (20-20 3D Viewer) - http://design-concept.ca/Core/Player/2020PlayerAX_Win32.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader.cab
O16 - DPF: {4A85DBE0-BFB2-4119-8401-186A7C6EB653} - http://messenger.zone.msn.com/binary/MJSS.cab69309.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-CA/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://ivielane.spaces.live.com/PhotoUpload/MsnPUpld.cab?10,0,916,0
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game08.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {DA758BB1-5F89-4465-975F-8D7179A4BCF3} (WheelofFortune Object) - http://messenger.zone.msn.com/binary/WoF.cab57176.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O20 - AppInit_DLLs: C:\WINDOWS\NEW\system32\lewowesa.dll c:\windows\new\system32\zilozama.dll
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\new\system32\zilozama.dll
O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\new\system32\zilozama.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\NEW\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\NEW\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: X10 Device Network Service (x10nets) - Unknown owner - C:\PROGRA~1\ATIMUL~1\RemCtrl\x10nets.exe (file missing)

Hum.. non