Stop aux pubs

Résolu
Bonjour, En ce moment a chaque fois que je navigue sur internet j'ai des tonnes de pubs qui s'ouvre et franchement j'en ai marre donc je cherche quelqu'un qui aurait assez de temps a m'accorder pour m'aider à les en lever aux maximum (J'ai déjà fait une analyse avec Random's system information tool si vous voulez je vous la fait parvenir)

Merci d'avance Greg
--
En espérant t'avoir aider 
Greg
Configuration: Windows Vista
Firefox 3.5.3

93 réponses

Résumé de la discussion

Des publicités qui s'ouvrent systématiquement lors de la navigation sur Windows Vista avec Firefox 3.5.3 posent un problème et une aide est recherchée pour les réduire ou les éliminer. Des solutions évoquent notamment la désactivation temporaire du contrôle des comptes utilisateurs (UAC) pour installer des outils de nettoyage comme Toolbar-S&D et analyser les rapports générés. En parallèle, certaines interventions préconisent une restauration système et la vérification des extensions ou scripts indésirables, avec l'idée de réinstaller proprement le navigateur et de vérifier les sauvegardes. Certaines recommandations avancent aussi de privilégier des outils reconnus et d'éviter les téléchargements douteux, afin de prévenir des détournements publicitaires et d'éviter d'autres dysfonctionnements du système.

Bobot (l’IA à votre service)
  1. Oui c'est vrai le formatage c'est nul mais je n'ai rien perdu puisque j'ai fait une sauvegarde au préalable sur un dvd mais vous m'avais quand même bien aider merci
    1. Modérateur
      n'empeche que j'aime pas le formatage :((((((((((((
      D'accord avec toi ! C'est largement préférable !
      1. Contributeur sécurité
        slt greg, slt crapule :)

        n'empeche que j'aime pas le formatage :(((((((((((( j'aurais préféré t'aider jusqu'au bout ^^

        bonne continuation greg ;)
        1. Modérateur
          Ah t'as formaté ?
          Oui, pardon !
          Bonne continuation.
          A+.
          1. Modérateur
            Il faut supprimer les outils utilisés, néo, je te laisse faire ... ;-).
            1. Bon ben voilà c'est fini mon ordi marche comme avant ;) donc merci a neo**** et à crapoulou de m'avoir vraiment beaucoup aider même si sa s'est un peu fini à la rache mais ce n'est pas de leurs fautes et merci aussi à ceux qui mon répondu au début (ils sont trop nombreux je vais pas les citer) donc voilà merci et c'est RESOLU ;)!!!
              1. Et oui merci crapoulou mais malheureusement j'ai déjà essayé et j'ai oublié de préciser que mon ordi utilise windows vista x64 mais sa ne marche pas mais merci quand même mais apparemment mon pote à trouvé la solution je vous tiens au courant.
                1. Modérateur
                  Cadeau : http://h10025.www1.hp.com/ewfrf/wc/softwareList?os=228&lc=fr&dlc=fr&cc=fr&product=3804162&lang=fr
                  1. Voilà c'est bon mon ordi est formaté sauf que les pilotes réseaux ne sont pas installé et on ne les trouves pas donc si vous savez où trouver mon ordi est un Compaq Presario CQ60-110EF
                    1. Lol bon on ha beau retourner la solution dans tous les sens on ne trouve aucun moyens et comme mon ordi a réussi à démarrer je vais graver mes données sur DVD et j'attend le formatage tant pis :s je te tient au courant ce sera fait ce week end ou mercredi prochain.
                      1. Contributeur sécurité
                        ^^ bah si je m'en fais parceque j'ai jamais laissé un cas de coté^^ mais pour un cas interessant, t'en fais partie :))
                        1. O et maintenant autre chose viens de se passer au moment ou j'ai essayer de lancer windows en mode sans échec pour faire le défragmentation mon pc à couper tout seul (Il s'est éteint) et depuis plus moyen de l'allumer i de faire une restauration mais e vous en faites pas j'ai un pote sur le coup
                          1. Contributeur sécurité
                            slt

                            la je t'avoue que je pige pas, j'ai passé 1000 fois combo, j'ai eu des soucis de tps en tps mais jamais en rapport avec l'usb^^

                            je me renseigne ^^ et te tiens au courant
                            1. Salut bon je vous le dit tout de suite je n'utilise plus combofix car mes ports usb ne marche de nouveaux plus donc je refais une restau et je n'y touche plus car je ne vais pas faire que ça des restau pauvre ordi aprés.
                              1. Voilà c'est bon voici le scan ComboFix comme promis:

                                <code>ComboFix 09-09-18.02 - Greg 23/09/2009 15:38.2.2 - NTFSx86
                                Microsoft® Windows Vista™ Édition Familiale Basique 6.0.6001.1.1252.33.1036.18.2814.1856 [GMT 2:00]
                                Lancé depuis: c:\users\Greg\Documents\HACK\Desinfection pc\Désinfection pc\ComboFix.exe
                                SP: Spybot - Search and Destroy *disabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
                                SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
                                .

                                ((((((((((((((((((((((((((((( Fichiers créés du 2009-08-23 au 2009-09-23 ))))))))))))))))))))))))))))))))))))
                                .

                                2009-09-23 13:53 . 2009-09-23 13:53 -------- d-----w- c:\users\Public\AppData\Local\temp
                                2009-09-23 13:53 . 2009-09-23 13:53 -------- d-----w- c:\users\Default\AppData\Local\temp
                                2009-09-23 13:53 . 2009-09-23 13:53 -------- d-----w- c:\users\Administrateur\AppData\Local\temp
                                2009-09-21 21:07 . 2009-09-21 21:07 -------- d-----w- c:\windows\system32\Adobe
                                2009-09-21 21:07 . 2008-09-02 13:49 253952 ----a-w- c:\windows\system32\JkDefragScreenSaver.exe
                                2009-09-21 21:07 . 2008-09-02 13:49 106496 ----a-w- c:\windows\system32\JkDefragScreenSaver.scr
                                2009-09-21 21:06 . 2009-09-21 21:06 -------- d-----w- c:\program files\Google
                                2009-09-21 21:04 . 2009-09-21 21:03 411368 ----a-w- c:\windows\system32\deploytk.dll
                                2009-09-21 21:00 . 2009-09-21 21:01 -------- d-----w- c:\program files\FileZilla FTP Client
                                2009-09-21 20:45 . 2009-07-28 14:33 55656 ----a-w- c:\windows\system32\drivers\avgntflt.sys
                                2009-09-21 20:45 . 2009-03-30 08:32 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
                                2009-09-21 16:39 . 2009-09-21 16:53 -------- d-----w- C:\UsbFix
                                2009-09-20 22:09 . 2009-09-20 22:09 -------- d-----w- c:\program files\MyDefrag v4.1.2
                                2009-09-20 20:51 . 2009-09-21 21:07 -------- d-----w- c:\program files\JkDefrag
                                2009-09-20 20:29 . 2009-09-21 21:17 -------- d-----w- c:\programdata\Spybot - Search & Destroy
                                2009-09-20 20:29 . 2009-09-21 21:13 -------- d-----w- c:\program files\Spybot - Search & Destroy
                                2009-09-20 20:08 . 2009-09-20 20:08 -------- d-----w- c:\program files\Google(132)
                                2009-09-20 19:54 . 2009-09-20 19:55 -------- d-----w- c:\program files\FileZilla FTP Client(131)
                                2009-09-20 19:51 . 2009-09-20 19:51 -------- d-----w- c:\programdata\Avira
                                2009-09-20 19:51 . 2009-09-20 19:51 -------- d-----w- c:\program files\Avira
                                2009-09-20 19:34 . 2009-09-20 19:34 -------- d-----w- c:\program files\Java(134)
                                2009-09-20 15:31 . 2009-09-21 20:22 -------- d-----w- c:\users\private.PC-de-Greg
                                2009-09-20 12:23 . 2009-09-21 16:51 -------- d-----w- C:\$RECYCLE(0).BIN
                                2009-09-19 21:59 . 2009-09-21 20:24 -------- d-----w- c:\programdata\NOS
                                2009-09-19 21:59 . 2009-09-21 20:19 -------- d-----w- c:\program files\NOS
                                2009-09-19 21:20 . 2009-09-21 21:29 -------- d-----w- c:\program files\Safari
                                2009-09-19 12:19 . 2009-09-19 12:19 -------- d-----w- c:\users\Greg\AppData\Roaming\Malwarebytes
                                2009-09-19 12:19 . 2009-09-10 12:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
                                2009-09-19 12:19 . 2009-09-19 12:19 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
                                2009-09-19 12:19 . 2009-09-19 12:19 -------- d-----w- c:\programdata\Malwarebytes
                                2009-09-19 12:19 . 2009-09-10 12:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
                                2009-09-19 08:04 . 2009-09-19 08:26 -------- d-----w- c:\program files\Ad-Remover
                                2009-09-18 21:33 . 2008-06-05 16:18 5737 ----a-w- c:\users\Greg\AppData\Local\gnc.exe
                                2009-09-18 20:48 . 2009-09-18 21:33 -------- d-----w- c:\program files\Navilog1
                                2009-09-18 18:04 . 2009-09-18 18:09 -------- d-----w- C:\ToolBar SD
                                2009-09-17 20:11 . 2009-09-21 20:34 -------- d-----w- c:\program files\trend micro
                                2009-09-17 20:11 . 2009-09-17 20:12 -------- d-----w- C:\rsit
                                2009-09-14 19:21 . 2009-09-14 19:21 -------- d-----w- c:\program files\Files-Sauvegarde
                                2009-09-12 15:17 . 2009-09-21 20:19 -------- d-----w- c:\program files\Microsoft.NET
                                2009-09-12 15:14 . 2009-09-21 20:20 -------- d-----w- c:\windows\SHELLNEW
                                2009-09-12 15:12 . 2009-09-21 20:19 -------- d-----r- C:\MSOCache
                                2009-09-12 14:20 . 2009-09-12 14:29 -------- d-----w- c:\program files\QCMPackageLite FRA
                                2009-09-12 14:11 . 2009-09-12 14:12 -------- d-----w- c:\program files\QCM
                                2009-09-12 13:04 . 2009-09-12 13:11 -------- d-----w- c:\program files\Questy
                                2009-09-11 19:26 . 2009-09-11 19:26 -------- d-----w- c:\program files\Mattgo27 Apps
                                2009-09-09 19:00 . 2009-09-09 19:02 -------- d-----w- c:\program files\nLite
                                2009-09-09 18:53 . 2009-06-10 12:11 2868224 ----a-w- c:\windows\system32\mf.dll
                                2009-09-07 15:54 . 2009-09-07 16:30 -------- d-----w- c:\users\Greg\AppData\Local\Ahead
                                2009-09-07 14:58 . 2009-08-28 12:39 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
                                2009-09-07 14:58 . 2009-08-28 10:15 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
                                2009-08-31 10:34 . 2009-08-31 10:34 -------- d-----w- c:\users\Greg\AppData\Local\Opera
                                2009-08-31 10:34 . 2009-09-19 21:18 -------- d-----w- c:\program files\Opera
                                2009-08-30 21:47 . 2009-08-30 21:47 -------- d-----w- c:\users\Greg\AppData\Roaming\AchrafCherti
                                2009-08-30 10:22 . 2009-08-30 10:22 -------- d-----w- c:\program files\loliwin
                                2009-08-30 10:06 . 2009-08-30 10:06 -------- d-----w- c:\users\Greg\AppData\Roaming\K-Meleon
                                2009-08-30 01:01 . 2009-08-30 01:01 -------- d-----w- c:\windows\CheckSur
                                2009-08-29 20:45 . 2009-08-30 21:49 -------- d-----w- C:\Mes Sites Web
                                2009-08-29 20:35 . 2009-08-29 20:42 -------- d-----w- C:\LiberKey
                                2009-08-29 20:13 . 2009-08-29 20:13 -------- d-----w- c:\users\Greg\AppData\Roaming\MfcEmbed
                                2009-08-29 19:07 . 2009-08-29 19:07 -------- d-----w- c:\users\Greg\AppData\Local\Passwords Max
                                2009-08-28 18:22 . 2008-01-17 06:17 3948 ----a-w- c:\windows\system32\drivers\nvphy.bin
                                2009-08-28 15:32 . 2009-09-21 20:19 -------- d-----w- c:\users\Greg\AppData\Roaming\KeePass
                                2009-08-28 10:07 . 2009-09-21 20:19 -------- d-----w- c:\program files\CCleaner
                                2009-08-28 01:08 . 2009-08-28 01:08 -------- d-----w- c:\program files\FlashCrypt
                                2009-08-28 00:43 . 2009-08-28 00:43 -------- d-----w- c:\users\Greg\AppData\Roaming\gnupg
                                2009-08-28 00:42 . 2009-08-28 09:24 -------- d-----w- c:\program files\AutoKrypt8
                                2009-08-28 00:26 . 2009-08-28 00:26 -------- d-----w- c:\program files\File and Folder Protector
                                2009-08-28 00:26 . 2009-08-28 00:26 -------- d--h--w- c:\windows\ffpext
                                2009-08-28 00:26 . 2009-05-28 18:28 44288 ----a-w- c:\windows\system32\drivers\FDCDNT.SYS
                                2009-08-28 00:16 . 2009-08-28 00:20 -------- d-----w- c:\program files\SafeHouse Explorer
                                2009-08-28 00:16 . 2009-08-28 00:16 -------- d-----w- C:\SafeHouse
                                2009-08-27 23:31 . 2009-05-03 10:22 73392 ----a-w- c:\windows\system32\fsproflt.exe
                                2009-08-27 23:31 . 2008-06-05 17:37 43792 ----a-w- c:\windows\system32\drivers\FSPFltd.sys
                                2009-08-27 20:58 . 2009-08-27 20:58 35363 ----a-w- c:\windows\system32\windrvNT.sys
                                2009-08-27 20:58 . 2007-02-07 17:50 77824 ----a-w- c:\windows\system32\FLKill.exe
                                2009-08-27 20:58 . 2004-05-10 10:42 110592 ----a-w- c:\windows\system32\suppdll.dll
                                2009-08-27 20:58 . 2009-09-21 21:43 -------- d-----w- c:\program files\Folder Lock
                                2009-08-27 18:18 . 2009-08-27 18:44 -------- d-----w- c:\program files\Universal Shield 4.3
                                2009-08-27 16:39 . 2006-08-14 14:06 4635409 ----a-w- c:\windows\system32\Crk_Sarkophage.exe
                                2009-08-27 16:12 . 2008-11-28 01:15 1057792 ----a-w- c:\windows\system32\Sarkophage.exe
                                2009-08-27 16:11 . 2009-09-19 20:17 -------- d-----w- c:\program files\Sarkophage
                                2009-08-27 11:36 . 2009-08-27 11:36 -------- d-----w- c:\program files\Audacity
                                2009-08-27 10:43 . 2009-06-22 10:22 2048 ----a-w- c:\windows\system32\tzres.dll
                                2009-08-26 22:40 . 2009-09-21 20:19 -------- d-----w- c:\users\Greg\AppData\Roaming\DeepBurner Pro
                                2009-08-26 22:07 . 2009-08-26 22:14 -------- d-----w- c:\program files\1toX
                                2009-08-26 15:59 . 2009-09-18 18:54 89 ----a-w- c:\users\Greg\AppData\Local\epbtecnh.bat

                                .
                                (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                                .
                                2009-09-23 13:23 . 2008-11-14 20:13 -------- d-----w- c:\program files\Alwil Software
                                2009-09-21 21:38 . 2008-11-14 18:20 106112 ----a-w- c:\users\Greg\AppData\Local\GDIPFONTCACHEV1.DAT
                                2009-09-21 21:23 . 2008-08-05 02:41 -------- d-----w- c:\program files\Java
                                2009-09-21 21:05 . 2009-03-08 14:11 -------- d-----w- c:\program files\Notepad++
                                2009-09-21 21:01 . 2008-08-05 02:17 -------- d-----w- c:\program files\Common Files\Adobe
                                2009-09-21 21:01 . 2009-03-09 22:38 -------- d-----w- c:\users\Greg\AppData\Roaming\FileZilla
                                2009-09-21 20:28 . 2008-08-05 02:11 -------- d-----w- c:\programdata\Microsoft Help
                                2009-09-20 15:33 . 2009-07-03 18:11 81896 ----a-w- c:\programdata\nvModes.dat
                                2009-09-19 21:32 . 2008-12-25 15:42 -------- d-----w- c:\users\Greg\AppData\Roaming\Apple Computer
                                2009-09-19 21:20 . 2009-07-30 23:09 -------- d-----w- c:\program files\Bonjour
                                2009-09-19 15:35 . 2008-12-25 17:37 -------- d-----w- c:\program files\eChanblard
                                2009-09-17 20:07 . 2008-09-07 22:03 -------- d-----w- c:\programdata\NVIDIA
                                2009-09-15 17:57 . 2008-11-16 20:03 -------- d-----w- c:\program files\adslTV
                                2009-09-10 20:37 . 2008-11-15 15:33 -------- d-----w- c:\program files\Microsoft Silverlight
                                2009-09-10 15:54 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
                                2009-09-09 20:13 . 2008-08-05 00:37 -------- d--h--w- c:\program files\InstallShield Installation Information
                                2009-09-07 15:52 . 2008-11-23 12:55 -------- d-----w- c:\users\Greg\AppData\Roaming\Nero
                                2009-09-07 15:49 . 2008-11-23 12:07 -------- d-----w- c:\program files\Nero
                                2009-09-07 15:45 . 2008-08-05 10:01 669566 ----a-w- c:\windows\system32\perfh00C.dat
                                2009-09-07 15:45 . 2008-08-05 10:01 123556 ----a-w- c:\windows\system32\perfc00C.dat
                                2009-09-07 14:55 . 2009-06-21 00:09 -------- d-----w- c:\program files\Messenger Plus! Live
                                2009-08-28 18:57 . 2009-01-27 19:20 -------- d-----w- c:\programdata\Apple Computer
                                2009-08-27 10:39 . 2009-06-14 14:29 -------- d-----w- c:\program files\Astonsoft
                                2009-08-27 10:39 . 2008-12-30 12:38 680 ----a-w- c:\users\Greg\AppData\Local\d3d9caps.dat
                                2009-08-26 12:28 . 2009-07-25 16:14 90 ----a-w- c:\users\Greg\AppData\Local\smquq.bat
                                2009-08-25 23:25 . 2009-08-13 21:40 -------- d-----w- c:\users\Greg\AppData\Roaming\TeamViewer
                                2009-08-18 13:54 . 2009-01-28 14:53 -------- d-----w- c:\program files\MAGIX
                                2009-08-18 13:54 . 2009-01-28 14:53 -------- d-----w- c:\programdata\MAGIX
                                2009-08-18 13:26 . 2009-08-18 13:26 -------- d-----w- c:\users\Greg\AppData\Roaming\MAGIX
                                2009-08-14 17:07 . 2009-09-09 18:54 897608 ----a-w- c:\windows\system32\drivers\tcpip.sys
                                2009-08-14 16:29 . 2009-09-09 18:54 104960 ----a-w- c:\windows\system32\netiohlp.dll
                                2009-08-14 16:29 . 2009-09-09 18:54 17920 ----a-w- c:\windows\system32\netevent.dll
                                2009-08-14 14:16 . 2009-09-09 18:54 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
                                2009-08-14 14:16 . 2009-09-09 18:54 17920 ----a-w- c:\windows\system32\ROUTE.EXE
                                2009-08-14 14:16 . 2009-09-09 18:54 11264 ----a-w- c:\windows\system32\MRINFO.EXE
                                2009-08-14 14:16 . 2009-09-09 18:54 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
                                2009-08-14 14:16 . 2009-09-09 18:54 19968 ----a-w- c:\windows\system32\ARP.EXE
                                2009-08-14 14:16 . 2009-09-09 18:54 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
                                2009-08-14 14:16 . 2009-09-09 18:54 10240 ----a-w- c:\windows\system32\finger.exe
                                2009-08-09 17:49 . 2009-08-09 17:49 -------- d-----w- c:\program files\Inno Setup 5
                                2009-08-09 15:06 . 2009-05-30 16:45 -------- d-----w- c:\program files\Image-Line
                                2009-08-05 09:49 . 2009-01-27 21:46 -------- d-----w- c:\program files\Ulead Systems
                                2009-08-04 20:03 . 2009-08-04 20:03 -------- d-----w- c:\program files\Camouflage
                                2009-08-01 12:47 . 2009-08-01 12:47 -------- d-----w- c:\program files\AIST
                                2009-07-30 22:57 . 2009-07-30 22:57 -------- d-----w- c:\program files\Common Files\Macrovision Shared
                                2009-07-30 21:40 . 2009-07-30 21:40 -------- d-----w- c:\users\Greg\AppData\Roaming\Reallusion
                                2009-07-30 16:38 . 2009-07-30 16:38 -------- d-----w- c:\users\Greg\AppData\Roaming\DivX
                                2009-07-30 16:30 . 2009-07-30 16:30 -------- d-----w- c:\programdata\Pinnacle
                                2009-07-30 15:42 . 2009-07-30 15:42 -------- d-----w- c:\programdata\InstallShield
                                2009-07-30 15:37 . 2008-08-05 00:37 -------- d-----w- c:\program files\Common Files\InstallShield
                                2009-07-30 11:57 . 2009-01-27 21:46 -------- d-----w- c:\programdata\Ulead Systems
                                2009-07-30 11:47 . 2009-07-30 11:47 -------- d-----w- c:\program files\Common Files\InterVideo
                                2009-07-27 18:02 . 2009-07-27 18:02 -------- d-----w- c:\users\Greg\AppData\Roaming\Canneverbe_Limited
                                2009-07-27 16:50 . 2008-11-18 19:03 -------- d-----w- c:\programdata\DVD Shrink
                                2009-07-22 11:32 . 2009-07-12 21:51 87 ----a-w- c:\users\Greg\AppData\Local\iwiqyoq.bat
                                2009-07-21 21:52 . 2009-08-01 12:13 915456 ----a-w- c:\windows\system32\wininet.dll
                                2009-07-21 21:47 . 2009-08-01 12:13 109056 ----a-w- c:\windows\system32\iesysprep.dll
                                2009-07-21 21:47 . 2009-08-01 12:13 71680 ----a-w- c:\windows\system32\iesetup.dll
                                2009-07-21 20:13 . 2009-08-01 12:13 133632 ----a-w- c:\windows\system32\ieUnatt.exe
                                2009-07-17 14:35 . 2009-08-12 14:05 71680 ----a-w- c:\windows\system32\atl.dll
                                2009-07-14 13:00 . 2009-08-12 14:05 313344 ----a-w- c:\windows\system32\wmpdxm.dll
                                2009-07-14 12:59 . 2009-08-12 14:05 4096 ----a-w- c:\windows\system32\dxmasf.dll
                                2009-07-14 12:58 . 2009-08-12 14:05 7680 ----a-w- c:\windows\system32\spwmp.dll
                                2009-07-14 10:59 . 2009-08-12 14:05 8147456 ----a-w- c:\windows\system32\wmploc.DLL
                                2009-07-13 21:27 . 2009-07-13 21:27 380 ----a-w- c:\windows\system32\ppa_service.dat
                                2009-07-13 21:27 . 2009-07-13 21:27 43008 ----a-w- c:\windows\system32\ppa_service.dll
                                2009-07-13 21:27 . 2009-07-13 21:27 128000 ----a-w- c:\windows\system32\ppa_service.exe
                                2009-07-11 19:32 . 2009-09-09 18:54 293376 ----a-w- c:\windows\system32\wlanmsm.dll
                                2009-07-11 19:32 . 2009-09-09 18:54 302592 ----a-w- c:\windows\system32\wlansec.dll
                                2009-07-11 19:32 . 2009-09-09 18:54 513024 ----a-w- c:\windows\system32\wlansvc.dll
                                2009-07-11 19:29 . 2009-09-09 18:54 127488 ----a-w- c:\windows\system32\L2SecHC.dll
                                2008-08-05 10:04 . 2008-08-05 10:04 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
                                .

                                ((((((((((((((((((((((((((((( SnapShot@2009-09-19_16.22.07 )))))))))))))))))))))))))))))))))))))))))
                                .
                                + 2007-05-31 07:20 . 2007-05-31 07:20 46984 c:\windows\WindowsMobile\Drivers\Serial\wmcoinst-070531-0845.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 24968 c:\windows\WindowsMobile\Drivers\Serial\wcescpxy.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 25992 c:\windows\WindowsMobile\Drivers\Serial\tcp2udp.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 24456 c:\windows\WindowsMobile\Drivers\Serial\rapispxy.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 20360 c:\windows\WindowsMobile\Drivers\Serial\dtptdns.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 75144 c:\windows\WindowsMobile\Drivers\Serial\ceutil.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 31624 c:\windows\WindowsMobile\Drivers\Serial\btplugin.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 46984 c:\windows\WindowsMobile\Drivers\RNDIS\wmcoinst-070531-0845.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 24968 c:\windows\WindowsMobile\Drivers\RNDIS\wcescpxy.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 25992 c:\windows\WindowsMobile\Drivers\RNDIS\tcp2udp.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 24456 c:\windows\WindowsMobile\Drivers\RNDIS\rapispxy.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 20360 c:\windows\WindowsMobile\Drivers\RNDIS\dtptdns.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 75144 c:\windows\WindowsMobile\Drivers\RNDIS\ceutil.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 31624 c:\windows\WindowsMobile\Drivers\RNDIS\btplugin.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 46984 c:\windows\WindowsMobile\Drivers\Bluetooth\wmcoinst-070531-0845.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 24968 c:\windows\WindowsMobile\Drivers\Bluetooth\wcescpxy.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 25992 c:\windows\WindowsMobile\Drivers\Bluetooth\tcp2udp.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 24456 c:\windows\WindowsMobile\Drivers\Bluetooth\rapispxy.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 20360 c:\windows\WindowsMobile\Drivers\Bluetooth\dtptdns.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 75144 c:\windows\WindowsMobile\Drivers\Bluetooth\ceutil.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 31624 c:\windows\WindowsMobile\Drivers\Bluetooth\btplugin.dll
                                + 2008-01-21 01:58 . 2009-09-23 13:26 76438 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
                                + 2006-11-02 13:02 . 2009-09-23 13:26 92296 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
                                + 2008-11-14 20:43 . 2009-09-23 13:26 17294 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3923280490-270411093-1143970750-1000_UserData.bin
                                + 2008-11-15 10:55 . 2009-09-19 21:59 88589 c:\windows\System32\Macromed\Flash\uninstall_activeX.exe
                                + 2007-05-31 07:20 . 2007-05-31 07:20 46984 c:\windows\System32\DriverStore\FileRepository\wceusbsh.inf_018a6444\wmcoinst-070531-0845.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 24968 c:\windows\System32\DriverStore\FileRepository\wceusbsh.inf_018a6444\wcescpxy.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 25992 c:\windows\System32\DriverStore\FileRepository\wceusbsh.inf_018a6444\tcp2udp.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 24456 c:\windows\System32\DriverStore\FileRepository\wceusbsh.inf_018a6444\rapispxy.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 20360 c:\windows\System32\DriverStore\FileRepository\wceusbsh.inf_018a6444\dtptdns.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 75144 c:\windows\System32\DriverStore\FileRepository\wceusbsh.inf_018a6444\ceutil.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 31624 c:\windows\System32\DriverStore\FileRepository\wceusbsh.inf_018a6444\btplugin.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 46984 c:\windows\System32\DriverStore\FileRepository\wcerndis.inf_36ff3122\wmcoinst-070531-0845.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 24968 c:\windows\System32\DriverStore\FileRepository\wcerndis.inf_36ff3122\wcescpxy.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 25992 c:\windows\System32\DriverStore\FileRepository\wcerndis.inf_36ff3122\tcp2udp.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 24456 c:\windows\System32\DriverStore\FileRepository\wcerndis.inf_36ff3122\rapispxy.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 20360 c:\windows\System32\DriverStore\FileRepository\wcerndis.inf_36ff3122\dtptdns.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 75144 c:\windows\System32\DriverStore\FileRepository\wcerndis.inf_36ff3122\ceutil.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 31624 c:\windows\System32\DriverStore\FileRepository\wcerndis.inf_36ff3122\btplugin.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 46984 c:\windows\System32\DriverStore\FileRepository\wcebth.inf_29bdc8e5\wmcoinst-070531-0845.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 24968 c:\windows\System32\DriverStore\FileRepository\wcebth.inf_29bdc8e5\wcescpxy.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 25992 c:\windows\System32\DriverStore\FileRepository\wcebth.inf_29bdc8e5\tcp2udp.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 24456 c:\windows\System32\DriverStore\FileRepository\wcebth.inf_29bdc8e5\rapispxy.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 20360 c:\windows\System32\DriverStore\FileRepository\wcebth.inf_29bdc8e5\dtptdns.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 75144 c:\windows\System32\DriverStore\FileRepository\wcebth.inf_29bdc8e5\ceutil.dll
                                + 2007-05-31 07:20 . 2007-05-31 07:20 31624 c:\windows\System32\DriverStore\FileRepository\wcebth.inf_29bdc8e5\btplugin.dll
                                + 2009-09-21 20:45 . 2009-05-11 08:11 28520 c:\windows\System32\drivers\ssmdrv.sys
                                + 2008-12-12 09:11 . 2008-12-12 09:11 61440 c:\windows\System32\dnssd.dll
                                + 2008-12-12 09:18 . 2008-12-12 09:18 87336 c:\windows\System32\dns-sd.exe
                                - 2008-09-07 21:11 . 2009-09-19 16:03 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
                                + 2008-09-07 21:11 . 2009-09-23 13:37 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
                                + 2008-09-07 21:11 . 2009-09-23 13:37 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
                                - 2008-09-07 21:11 . 2009-09-19 16:03 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
                                + 2009-09-21 21:08 . 2009-09-21 21:08 87617 c:\windows\System32\Adobe\Shockwave 11\uninstaller.exe
                                + 2009-07-21 08:02 . 2009-07-21 08:02 94208 c:\windows\System32\Adobe\Shockwave 11\SwMenu.dll
                                + 2009-07-21 06:59 . 2009-07-21 06:59 79488 c:\windows\System32\Adobe\Shockwave 11\gtapi.dll
                                + 2009-09-12 15:19 . 2009-09-21 20:28 35088 c:\windows\Installer\{91120000-0012-0000-0000-0000000FF1CE}\oisicon.exe
                                - 2009-09-12 15:19 . 2009-09-14 15:35 35088 c:\windows\Installer\{91120000-0012-0000-0000-0000000FF1CE}\oisicon.exe
                                + 2009-09-12 15:19 . 2009-09-21 20:28 18704 c:\windows\Installer\{91120000-0012-0000-0000-0000000FF1CE}\mspicons.exe
                                - 2009-09-12 15:19 . 2009-09-14 15:35 18704 c:\windows\Installer\{91120000-0012-0000-0000-0000000FF1CE}\mspicons.exe
                                + 2009-09-12 15:19 . 2009-09-21 20:28 20240 c:\windows\Installer\{91120000-0012-0000-0000-0000000FF1CE}\cagicon.exe
                                - 2009-09-12 15:19 . 2009-09-14 15:35 20240 c:\windows\Installer\{91120000-0012-0000-0000-0000000FF1CE}\cagicon.exe
                                + 2009-09-21 21:08 . 2009-09-21 21:08 25214 c:\windows\Installer\{12803180-9CAD-11DE-B804-005056806466}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74_1.exe
                                + 2009-09-21 21:08 . 2009-09-21 21:08 25214 c:\windows\Installer\{12803180-9CAD-11DE-B804-005056806466}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74.exe
                                + 2009-09-21 21:08 . 2009-09-21 21:08 25214 c:\windows\Installer\{12803180-9CAD-11DE-B804-005056806466}\ShortcutOGL_EB071909B9884F8CBF3D6115D4ADEE5E.exe
                                + 2009-09-21 21:08 . 2009-09-21 21:08 25214 c:\windows\Installer\{12803180-9CAD-11DE-B804-005056806466}\ShortcutDX_EB071909B9884F8CBF3D6115D4ADEE5E.exe
                                + 2009-09-21 21:08 . 2009-09-21 21:08 25214 c:\windows\Installer\{12803180-9CAD-11DE-B804-005056806466}\googleearth.exe1_F6A848FB884248E6A4CDCBDCF41F6A74.exe
                                + 2009-09-21 21:08 . 2009-09-21 21:08 25214 c:\windows\Installer\{12803180-9CAD-11DE-B804-005056806466}\googleearth.exe_F6A848FB884248E6A4CDCBDCF41F6A74.exe
                                + 2009-09-21 21:08 . 2009-09-21 21:08 25214 c:\windows\Installer\{12803180-9CAD-11DE-B804-005056806466}\ARPPRODUCTICON.exe
                                + 2009-09-19 21:20 . 2009-09-19 21:20 86016 c:\windows\Installer\{07287123-B8AC-41CE-8346-3D777245C35B}\PrntWzrdIco.exe
                                - 2006-11-02 10:25 . 2009-08-28 18:22 86016 c:\windows\inf\infstor.dat
                                + 2006-11-02 10:25 . 2009-09-19 22:04 86016 c:\windows\inf\infstor.dat
                                - 2006-11-02 10:25 . 2009-08-28 18:22 51200 c:\windows\inf\infpub.dat
                                + 2006-11-02 10:25 . 2009-09-19 22:04 51200 c:\windows\inf\infpub.dat
                                + 2009-07-21 08:04 . 2009-07-21 08:04 9216 c:\windows\System32\Adobe\Shockwave 11\DynaPlayer.dll
                                - 2009-09-19 15:37 . 2009-09-19 15:37 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
                                + 2009-09-23 13:24 . 2009-09-23 13:24 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
                                - 2009-09-19 15:37 . 2009-09-19 15:37 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
                                + 2009-09-23 13:24 . 2009-09-23 13:24 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
                                + 2007-05-31 07:21 . 2007-05-31 07:21 224136 c:\windows\WindowsMobile\Drivers\WPD\wpdrapi.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 648072 c:\windows\WindowsMobile\Drivers\Serial\wmdc.exe
                                + 2007-05-31 07:21 . 2007-05-31 07:21 379784 c:\windows\WindowsMobile\Drivers\Serial\wcescomm.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 125320 c:\windows\WindowsMobile\Drivers\Serial\setup.exe
                                + 2007-05-31 07:21 . 2007-05-31 07:21 223112 c:\windows\WindowsMobile\Drivers\Serial\rapistub.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 183688 c:\windows\WindowsMobile\Drivers\Serial\rapimgr.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 105352 c:\windows\WindowsMobile\Drivers\Serial\rapi.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 648072 c:\windows\WindowsMobile\Drivers\RNDIS\wmdc.exe
                                + 2007-05-31 07:21 . 2007-05-31 07:21 379784 c:\windows\WindowsMobile\Drivers\RNDIS\wcescomm.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 125320 c:\windows\WindowsMobile\Drivers\RNDIS\setup.exe
                                + 2007-05-31 07:21 . 2007-05-31 07:21 223112 c:\windows\WindowsMobile\Drivers\RNDIS\rapistub.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 183688 c:\windows\WindowsMobile\Drivers\RNDIS\rapimgr.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 105352 c:\windows\WindowsMobile\Drivers\RNDIS\rapi.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 648072 c:\windows\WindowsMobile\Drivers\Bluetooth\wmdc.exe
                                + 2007-05-31 07:21 . 2007-05-31 07:21 379784 c:\windows\WindowsMobile\Drivers\Bluetooth\wcescomm.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 125320 c:\windows\WindowsMobile\Drivers\Bluetooth\setup.exe
                                + 2007-05-31 07:21 . 2007-05-31 07:21 223112 c:\windows\WindowsMobile\Drivers\Bluetooth\rapistub.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 183688 c:\windows\WindowsMobile\Drivers\Bluetooth\rapimgr.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 105352 c:\windows\WindowsMobile\Drivers\Bluetooth\rapi.dll
                                + 2008-11-14 21:27 . 2009-09-21 18:07 239852 c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S4.bin
                                + 2008-11-14 17:59 . 2009-09-22 20:24 352724 c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin
                                + 2009-07-18 03:12 . 2009-07-18 03:12 257440 c:\windows\System32\Macromed\Flash\FlashUtil10c.exe
                                + 2009-09-21 21:04 . 2009-09-21 21:03 149280 c:\windows\System32\javaws.exe
                                + 2009-09-21 21:04 . 2009-09-21 21:03 145184 c:\windows\System32\javaw.exe
                                + 2009-09-21 21:04 . 2009-09-21 21:03 145184 c:\windows\System32\java.exe
                                + 2007-05-31 07:21 . 2007-05-31 07:21 224136 c:\windows\System32\DriverStore\FileRepository\wpdrapi.inf_b2b04810\WpdRapi.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 648072 c:\windows\System32\DriverStore\FileRepository\wceusbsh.inf_018a6444\wmdc.exe
                                + 2007-05-31 07:21 . 2007-05-31 07:21 379784 c:\windows\System32\DriverStore\FileRepository\wceusbsh.inf_018a6444\wcescomm.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 125320 c:\windows\System32\DriverStore\FileRepository\wceusbsh.inf_018a6444\setup.exe
                                + 2007-05-31 07:21 . 2007-05-31 07:21 223112 c:\windows\System32\DriverStore\FileRepository\wceusbsh.inf_018a6444\rapistub.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 183688 c:\windows\System32\DriverStore\FileRepository\wceusbsh.inf_018a6444\rapimgr.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 105352 c:\windows\System32\DriverStore\FileRepository\wceusbsh.inf_018a6444\rapi.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 648072 c:\windows\System32\DriverStore\FileRepository\wcerndis.inf_36ff3122\wmdc.exe
                                + 2007-05-31 07:21 . 2007-05-31 07:21 379784 c:\windows\System32\DriverStore\FileRepository\wcerndis.inf_36ff3122\wcescomm.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 125320 c:\windows\System32\DriverStore\FileRepository\wcerndis.inf_36ff3122\setup.exe
                                + 2007-05-31 07:21 . 2007-05-31 07:21 223112 c:\windows\System32\DriverStore\FileRepository\wcerndis.inf_36ff3122\rapistub.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 183688 c:\windows\System32\DriverStore\FileRepository\wcerndis.inf_36ff3122\rapimgr.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 105352 c:\windows\System32\DriverStore\FileRepository\wcerndis.inf_36ff3122\rapi.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 648072 c:\windows\System32\DriverStore\FileRepository\wcebth.inf_29bdc8e5\wmdc.exe
                                + 2007-05-31 07:21 . 2007-05-31 07:21 379784 c:\windows\System32\DriverStore\FileRepository\wcebth.inf_29bdc8e5\wcescomm.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 125320 c:\windows\System32\DriverStore\FileRepository\wcebth.inf_29bdc8e5\setup.exe
                                + 2007-05-31 07:21 . 2007-05-31 07:21 223112 c:\windows\System32\DriverStore\FileRepository\wcebth.inf_29bdc8e5\rapistub.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 183688 c:\windows\System32\DriverStore\FileRepository\wcebth.inf_29bdc8e5\rapimgr.dll
                                + 2007-05-31 07:21 . 2007-05-31 07:21 105352 c:\windows\System32\DriverStore\FileRepository\wcebth.inf_29bdc8e5\rapi.dll
                                - 2009-08-01 15:45 . 2009-09-19 15:37 245760 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
                                + 2009-08-01 15:45 . 2009-09-23 13:28 245760 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
                                - 2008-09-07 21:11 . 2009-09-19 16:03 196608 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
                                + 2008-09-07 21:11 . 2009-09-23 13:37 196608 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
                                + 2009-07-21 06:59 . 2009-07-21 06:59 132472 c:\windows\System32\Adobe\Shockwave 11\SYMCCHECKER.DLL
                                + 2009-07-21 08:07 . 2009-07-21 08:07 114688 c:\windows\System32\Adobe\Shockwave 11\SwInit.exe
                                + 2009-07-21 08:17 . 2009-07-21 08:17 468408 c:\windows\System32\Adobe\Shockwave 11\SwHelper_1151601.exe
                                + 2009-07-21 08:07 . 2009-07-21 08:07 446464 c:\windows\System32\Adobe\Shockwave 11\Proj.dll
                                + 2009-07-21 08:02 . 2009-07-21 08:02 372736 c:\windows\System32\Adobe\Shockwave 11\Plugin.dll
                                + 2009-07-21 06:59 . 2009-07-21 06:59 714752 c:\windows\System32\Adobe\Shockwave 11\gi.dll
                                + 2009-07-21 08:04 . 2009-07-21 08:04 614400 c:\windows\System32\Adobe\Shockwave 11\Control.dll
                                + 2009-07-21 08:18 . 2009-07-21 08:18 206264 c:\windows\System32\Adobe\Director\SwDir.dll
                                + 2009-07-21 08:03 . 2009-07-21 08:03 131072 c:\windows\System32\Adobe\Director\np32dsw.dll
                                + 2009-09-19 22:04 . 2009-09-19 22:04 829952 c:\windows\Installer\22f655.msi
                                + 2009-09-12 15:19 . 2009-09-21 20:28 888080 c:\windows\Installer\{91120000-0012-0000-0000-0000000FF1CE}\wordicon.exe
                                - 2009-09-12 15:19 . 2009-09-14 15:35 888080 c:\windows\Installer\{91120000-0012-0000-0000-0000000FF1CE}\wordicon.exe
                                + 2009-09-12 15:19 . 2009-09-21 20:28 922384 c:\windows\Installer\{91120000-0012-0000-0000-0000000FF1CE}\pptico.exe
                                - 2009-09-12 15:19 . 2009-09-14 15:35 922384 c:\windows\Installer\{91120000-0012-0000-0000-0000000FF1CE}\pptico.exe
                                + 2009-09-12 15:19 . 2009-09-21 20:28 845584 c:\windows\Installer\{91120000-0012-0000-0000-0000000FF1CE}\outicon.exe
                                - 2009-09-12 15:19 . 2009-09-14 15:35 845584 c:\windows\Installer\{91120000-0012-0000-0000-0000000FF1CE}\outicon.exe
                                - 2009-09-12 15:19 . 2009-09-14 15:35 217864 c:\windows\Installer\{91120000-0012-0000-0000-0000000FF1CE}\misc.exe
                                + 2009-09-12 15:19 . 2009-09-21 20:28 217864 c:\windows\Installer\{91120000-0012-0000-0000-0000000FF1CE}\misc.exe
                                - 2006-11-02 10:25 . 2009-08-28 18:22 143360 c:\windows\inf\infstrng.dat
                                + 2006-11-02 10:25 . 2009-09-19 22:04 143360 c:\windows\inf\infstrng.dat
                                + 2006-11-02 12:44 . 2009-09-22 15:44 1720800 c:\windows\System32\FNTCACHE.DAT
                                + 2009-07-21 07:07 . 2009-07-21 07:07 1011712 c:\windows\System32\Adobe\Shockwave 11\iml32.dll
                                + 2009-07-21 06:59 . 2009-07-21 06:59 1886320 c:\windows\System32\Adobe\Shockwave 11\gt.exe
                                + 2009-07-21 07:12 . 2009-07-21 07:12 1798144 c:\windows\System32\Adobe\Shockwave 11\dirapi.dll
                                + 2009-09-21 21:08 . 2009-09-21 21:08 1258496 c:\windows\Installer\240acd.msi
                                + 2009-09-21 21:03 . 2009-09-21 21:03 1757696 c:\windows\Installer\240a91.msi
                                + 2009-09-21 21:02 . 2009-09-21 21:02 3938816 c:\windows\Installer\240a8a.msi
                                + 2009-09-19 21:20 . 2009-09-19 21:20 1659392 c:\windows\Installer\1f7de0.msi
                                + 2009-09-12 15:19 . 2009-09-21 20:28 1172240 c:\windows\Installer\{91120000-0012-0000-0000-0000000FF1CE}\xlicons.exe
                                - 2009-09-12 15:19 . 2009-09-14 15:35 1172240 c:\windows\Installer\{91120000-0012-0000-0000-0000000FF1CE}\xlicons.exe
                                + 2007-05-31 07:32 . 2007-05-31 07:32 11697152 c:\windows\WindowsMobile\Drivers\Serial\wmupdate.msi
                                + 2007-05-31 07:32 . 2007-05-31 07:32 11697152 c:\windows\WindowsMobile\Drivers\RNDIS\wmupdate.msi
                                + 2007-05-31 07:32 . 2007-05-31 07:32 11697152 c:\windows\WindowsMobile\Drivers\Bluetooth\wmupdate.msi
                                + 2007-05-31 07:32 . 2007-05-31 07:32 11697152 c:\windows\System32\DriverStore\FileRepository\wceusbsh.inf_018a6444\wmupdate.msi
                                + 2007-05-31 07:32 . 2007-05-31 07:32 11697152 c:\windows\System32\DriverStore\FileRepository\wcerndis.inf_36ff3122\wmupdate.msi
                                + 2007-05-31 07:32 . 2007-05-31 07:32 11697152 c:\windows\System32\DriverStore\FileRepository\wcebth.inf_29bdc8e5\wmupdate.msi
                                .
                                -- Instantané actualisé --
                                .
                                ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
                                .
                                .
                                *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
                                REGEDIT4

                                [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                                "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184]
                                "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMBgMonitor.exe" [2008-12-12 132392]

                                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                                "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-07-11 13543968]
                                "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-07-11 92704]
                                "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-04-17 1049896]
                                "QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2008-06-11 468264]
                                "Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
                                "QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2008-03-14 202032]
                                "HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-04-15 70912]
                                "hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2008-04-15 488752]
                                "SPC230NC_Monitor"="c:\windows\Philips\SPC230NC\Monitor.exe" [2007-12-10 323584]
                                "SPC_Monitor"="c:\windows\Philips\SPC230NC\Monitor.exe" [2007-12-10 323584]
                                "SWClient"="c:\program files\SoftActivity\AMSys\swsys.exe" [2008-04-10 700280]
                                "Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdSync.exe" [2008-01-21 215552]
                                "NeroCheck"="c:\windows\system32\NeroCheck.exe" [2001-06-12 151552]
                                "NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-12-02 2221352]
                                "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
                                "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
                                "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-09-21 149280]

                                c:\users\Greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
                                Weezo.lnk - c:\program files\Weezo\bin\Weezo.exe [2009-7-18 2539520]

                                c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
                                TrayMin230.lnk - c:\program files\Philips\Philips SPC230NC Webcam\TrayMin230.exe [2009-1-12 241664]

                                [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
                                "FilterAdministratorToken"= 1 (0x1)
                                "EnableUIADesktopToggle"= 0 (0x0)

                                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\fsproflt]
                                @=""

                                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
                                @="Driver"

                                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
                                @="Service"

                                [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
                                "DisableMonitoring"=dword:00000001

                                [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
                                "DisableMonitoring"=dword:00000001

                                [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
                                "DisableMonitoring"=dword:00000001

                                [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
                                "{F963AA7E-6D4D-44D8-BAEC-2599EDCC503C}"= c:\program files\HP\QuickPlay\QP.exe:Quick Play
                                "{D6143534-FB01-462B-8C93-934AA5AB497C}"= c:\program files\HP\QuickPlay\QPService.exe:Quick Play Resident Program
                                "{DF4429FF-CA60-4BCD-BE18-123B43D9E6A7}"= UDP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
                                "{7C3351CC-D292-4BF4-AC72-6798329A517B}"= TCP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
                                "TCP Query User{A169C82C-ABAA-4A8C-B5A3-D4F2B9FE2C11}c:\\program files\\skype\\phone\\skype.exe"= UDP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath
                                "UDP Query User{BAFDB7FE-FE92-4FB4-B6ED-41CF7EF7CA6B}c:\\program files\\skype\\phone\\skype.exe"= TCP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath
                                "TCP Query User{C6594DD9-D4CB-4B2E-A90D-172E481F3EE3}c:\\program files\\thq\\pandemic studios\\full spectrum warrior\\launcher.exe"= UDP:c:\program files\thq\pandemic studios\full spectrum warrior\launcher.exe:Launcher
                                "UDP Query User{FAE35846-3D86-4C9B-87D3-0887ABEAED57}c:\\program files\\thq\\pandemic studios\\full spectrum warrior\\launcher.exe"= TCP:c:\program files\thq\pandemic studios\full spectrum warrior\launcher.exe:Launcher
                                "TCP Query User{531EF1FC-7C99-4A5B-9252-CD8518228B13}c:\\program files\\limewire\\limewire.exe"= UDP:c:\program files\limewire\limewire.exe:LimeWire
                                "UDP Query User{2D016EC7-96EB-4EA6-BD4C-1E56B375F18E}c:\\program files\\limewire\\limewire.exe"= TCP:c:\program files\limewire\limewire.exe:LimeWire
                                "TCP Query User{948AC0D1-FA47-4096-9A69-6FDD1B19BFEB}c:\\program files\\bitcomet\\bitcomet.exe"= UDP:c:\program files\bitcomet\bitcomet.exe:BitComet - a BitTorrent Client
                                "UDP Query User{2F855F90-BDF6-442A-919D-F642653BBF57}c:\\program files\\bitcomet\\bitcomet.exe"= TCP:c:\program files\bitcomet\bitcomet.exe:BitComet - a BitTorrent Client
                                "TCP Query User{BB67A055-812C-4DAF-8084-E8D898BE92DD}c:\\program files\\flashget\\flashget.exe"= UDP:c:\program files\flashget\flashget.exe:FlashGet
                                "UDP Query User{FC25A1B6-8B4D-473D-978A-73FA9CE418FA}c:\\program files\\flashget\\flashget.exe"= TCP:c:\program files\flashget\flashget.exe:FlashGet
                                "TCP Query User{0F5B8806-F86B-4B1D-B03F-8E2FB0F5B170}c:\\program files\\ares\\ares.exe"= UDP:c:\program files\ares\ares.exe:Ares p2p for windows
                                "UDP Query User{CECB773A-545F-4055-932E-0F1073FE16BD}c:\\program files\\ares\\ares.exe"= TCP:c:\program files\ares\ares.exe:Ares p2p for windows
                                "{49EDD902-F067-4409-AE59-BE715D01D681}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
                                "TCP Query User{3500181A-8CC7-46A7-B952-2CFBA3E064F5}c:\\program files\\dc++\\dcplusplus.exe"= UDP:c:\program files\dc++\dcplusplus.exe:DC++
                                "UDP Query User{37F327DA-2EA7-4E40-AB33-CF7DEFA9E82D}c:\\program files\\dc++\\dcplusplus.exe"= TCP:c:\program files\dc++\dcplusplus.exe:DC++
                                "TCP Query User{0222D152-287E-4B0D-95C2-15F504DBD7B5}c:\\program files\\echanblard\\emule.exe"= UDP:c:\program files\echanblard\emule.exe:eMule
                                "UDP Query User{54AC250C-6105-46F9-8EC7-64A7B4EEC96F}c:\\program files\\echanblard\\emule.exe"= TCP:c:\program files\echanblard\emule.exe:eMule
                                "TCP Query User{5D7F9BD2-B04E-40FD-A4E3-C345EC13C32E}c:\\program files\\emule\\emule.exe"= UDP:c:\program files\emule\emule.exe:eMule
                                "UDP Query User{9E95ED95-9417-4468-BB76-AD3CD300C237}c:\\program files\\emule\\emule.exe"= TCP:c:\program files\emule\emule.exe:eMule
                                "{88FAFA8F-60A1-406B-B0A0-D92991ECF998}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
                                "{FB7BA1A2-ECFA-4FAB-BE87-F466306AFF61}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
                                "TCP Query User{2A0E2A00-8537-49B1-A236-2995505F63C6}c:\\program files\\limewire\\limewire.exe"= UDP:c:\program files\limewire\limewire.exe:LimeWire
                                "UDP Query User{3ED5DAB2-C978-4AAB-9CF2-2D0CFDE46E8E}c:\\program files\\limewire\\limewire.exe"= TCP:c:\program files\limewire\limewire.exe:LimeWire
                                "TCP Query User{5EAA0784-0AF4-4581-9CAF-A17BFFFA6216}c:\\program files\\america's army\\system\\armyops.exe"= UDP:c:\program files\america's army\system\armyops.exe:ArmyOps
                                "UDP Query User{90F29CC4-BACA-4706-9DE5-D42829AFE1A2}c:\\program files\\america's army\\system\\armyops.exe"= TCP:c:\program files\america's army\system\armyops.exe:ArmyOps
                                "TCP Query User{4D1B109E-8F3A-4D2B-BFDE-5D8EBCD3154B}c:\\program files\\softactivity\\activity monitor\\swatcher.exe"= UDP:c:\program files\softactivity\activity monitor\swatcher.exe:Activity Monitor
                                "UDP Query User{42D700CD-F1F6-4641-BCDF-491AEF8BE380}c:\\program files\\softactivity\\activity monitor\\swatcher.exe"= TCP:c:\program files\softactivity\activity monitor\swatcher.exe:Activity Monitor
                                "TCP Query User{79F01706-C4BD-4DF4-B6C6-8D90B16C8FA2}c:\\program files\\softactivity\\amsys\\swsys.exe"= UDP:c:\program files\softactivity\amsys\swsys.exe:SoftActivity AM Client
                                "UDP Query User{F8001B61-84E8-488E-8830-A6CBE778116E}c:\\program files\\softactivity\\amsys\\swsys.exe"= TCP:c:\program files\softactivity\amsys\swsys.exe:SoftActivity AM Client
                                "{6BB115DD-97CF-48E2-83B7-82839A6295AB}"= UDP:990:LocalSubnet:LocalSubnet|IF={A234C4A0-6EC5-4A22-B64C-238B457FB522}|%SystemRoot%\system32\svchost.exe|Svc=rapimgr:@%systemroot%\WindowsMobile\wmdSync.exe,-4001
                                "TCP Query User{08A14C54-FA03-4347-95CA-17CBA7809B10}c:\\program files\\sprite software\\sprite backup\\spriteservice.exe"= UDP:c:\program files\sprite software\sprite backup\spriteservice.exe:Sprite Backup PC Service
                                "UDP Query User{FFF240D9-D966-4E2F-AA05-A4EA636DC228}c:\\program files\\sprite software\\sprite backup\\spriteservice.exe"= TCP:c:\program files\sprite software\sprite backup\spriteservice.exe:Sprite Backup PC Service
                                "TCP Query User{9DD8186C-2B29-44B3-90EB-7F78332C5C8B}c:\\spn\\edt.exe"= UDP:c:\spn\edt.exe:edt
                                "UDP Query User{565CA6FF-D7FB-46D6-9B5A-B6E654DC5BCC}c:\\spn\\edt.exe"= TCP:c:\spn\edt.exe:edt
                                "TCP Query User{5374DF3F-D5C0-4628-AFB2-895CB32A068C}c:\\program files\\adsltv\\vlc.exe"= UDP:c:\program files\adsltv\vlc.exe:VLC media player
                                "UDP Query User{3B3AFA33-F56A-4BFF-8368-C36CBD4EFFD7}c:\\program files\\adsltv\\vlc.exe"= TCP:c:\program files\adsltv\vlc.exe:VLC media player
                                "{5AA817D0-2D51-4FF6-A2A4-125D2DAF9D3F}"= UDP:c:\program files\UltraVNC\vncviewer.exe:vncviewer.exe
                                "{FFB6356D-6373-4384-A23B-B590B95AE211}"= TCP:c:\program files\UltraVNC\vncviewer.exe:vncviewer.exe
                                "TCP Query User{3C562BD6-27B0-48AB-8526-F24553FC9E26}c:\\program files\\ultravnc\\winvnc.exe"= UDP:c:\program files\ultravnc\winvnc.exe:VNC server for Win32
                                "UDP Query User{D28FF048-DD2E-4B6F-8F01-E6FDD961DF0F}c:\\program files\\ultravnc\\winvnc.exe"= TCP:c:\program files\ultravnc\winvnc.exe:VNC server for Win32
                                "TCP Query User{59144353-C814-47B3-9B57-81A986630E88}c:\\program files\\elcomsoft\\distributed password recovery\\esdprs.exe"= UDP:c:\program files\elcomsoft\distributed password recovery\esdprs.exe:Elcomsoft Distributed Password Recovery Server
                                "UDP Query User{41856312-8E61-404C-A948-10E3451E1951}c:\\program files\\elcomsoft\\distributed password recovery\\esdprs.exe"= TCP:c:\program files\elcomsoft\distributed password recovery\esdprs.exe:Elcomsoft Distributed Password Recovery Server
                                "TCP Query User{640068C9-A3AB-405F-84A0-7848F11865D2}c:\\program files\\argus surveillance dvr\\webserverforadmin.exe"= UDP:c:\program files\argus surveillance dvr\webserverforadmin.exe:WebServerForAdmin
                                "UDP Query User{0A459837-292D-4CD1-804C-B42A0E4BC929}c:\\program files\\argus surveillance dvr\\webserverforadmin.exe"= TCP:c:\program files\argus surveillance dvr\webserverforadmin.exe:WebServerForAdmin
                                "TCP Query User{132C5A8B-8C27-4745-BC10-A7FFB0F8F4E7}c:\\video surveillance facile\\vds.exe"= UDP:c:\video surveillance facile\vds.exe:Vds
                                "UDP Query User{1339C923-762C-4C7A-96D3-346AA9EC44C6}c:\\video surveillance facile\\vds.exe"= TCP:c:\video surveillance facile\vds.exe:Vds
                                "TCP Query User{60FDA769-DC00-4BE8-B010-8AB942409AF6}c:\\vdp\\vdp.exe"= UDP:c:\vdp\vdp.exe:Video surveillance PRO 2008
                                "UDP Query User{07E5FC6A-1314-4407-AD44-EAD25F55A845}c:\\vdp\\vdp.exe"= TCP:c:\vdp\vdp.exe:Video surveillance PRO 2008
                                "TCP Query User{F4D92CEF-99C8-4A72-931F-437511BCBBC9}c:\\program files\\wyzo\\wyzo.exe"= UDP:c:\program files\wyzo\wyzo.exe:Wyzo
                                "UDP Query User{BE6672A2-F81D-4149-9CC1-177623D0B634}c:\\program files\\wyzo\\wyzo.exe"= TCP:c:\program files\wyzo\wyzo.exe:Wyzo
                                "{1E9D18BF-FF4B-4948-8314-4CDB3E4BD0AE}"= UDP:80:port
                                "TCP Query User{D20C2D94-3308-49D7-8183-E907E1340D61}c:\\program files\\g6 ftp server\\g6ftpsrv.exe"= UDP:c:\program files\g6 ftp server\g6ftpsrv.exe:BPFTP Server for Internet.
                                "UDP Query User{FC1A5FBC-5D7E-4E5F-96CA-EB7FFB512816}c:\\program files\\g6 ftp server\\g6ftpsrv.exe"= TCP:c:\program files\g6 ftp server\g6ftpsrv.exe:BPFTP Server for Internet.
                                "TCP Query User{44474AAE-3B8B-4EEB-949E-7D97DDB2A680}c:\\program files\\bearflix\\bearflix.exe"= Disabled:UDP:c:\program files\bearflix\bearflix.exe:BearFlix
                                "UDP Query User{358A0BB9-E8FF-4599-8E2E-DA6EC0643110}c:\\program files\\bearflix\\bearflix.exe"= Disabled:TCP:c:\program files\bearflix\bearflix.exe:BearFlix
                                "{BC981857-89D5-4025-97E1-06F621AEC10F}"= UDP:21:ftp
                                "TCP Query User{9FAD14BE-03DF-49A1-AA00-247AF04BAD99}c:\\users\\greg\\downloads\\ftpservfr.exe"= UDP:c:\users\greg\downloads\ftpservfr.exe:ftpservfr.exe
                                "UDP Query User{843984B3-1896-46D8-90F7-3A68DD37A025}c:\\users\\greg\\downloads\\ftpservfr.exe"= TCP:c:\users\greg\downloads\ftpservfr.exe:ftpservfr.exe
                                "TCP Query User{05D6C3C8-80E1-43FC-BFEC-497FF589C499}c:\\program files\\bpftp server\\bpftpserver.exe"= UDP:c:\program files\bpftp server\bpftpserver.exe:BulletProof FTP Server (http://www.bpftpserver.com)
                                "UDP Query User{00D844C3-7C33-4641-9058-60CF2A6D0F1E}c:\\program files\\bpftp server\\bpftpserver.exe"= TCP:c:\program files\bpftp server\bpftpserver.exe:BulletProof FTP Server (http://www.bpftpserver.com)
                                "TCP Query User{6F3CB18E-05B0-42A7-B379-01AB1F57009E}c:\\program files\\wlite\\wlite.exe"= UDP:c:\program files\wlite\wlite.exe:webcamXP
                                "UDP Query User{DBA62A59-F53A-4D23-A5DB-7CE2AE903AF4}c:\\program files\\wlite\\wlite.exe"= TCP:c:\program files\wlite\wlite.exe:webcamXP
                                "TCP Query User{90911E78-ABD4-479D-857D-3F05C15D7F10}c:\\users\\greg\\downloads\\[filzup.com]programmes\\programmes\\trojans\\bifrost\\bifrost.exe"= UDP:c:\users\greg\downloads\[filzup.com]programmes\programmes\trojans\bifrost\bifrost.exe:bifrost.exe
                                "UDP Query User{26D43F30-6C88-4558-BA02-940BE3754D98}c:\\users\\greg\\downloads\\[filzup.com]programmes\\programmes\\trojans\\bifrost\\bifrost.exe"= TCP:c:\users\greg\downloads\[filzup.com]programmes\programmes\trojans\bifrost\bifrost.exe:bifrost.exe
                                "TCP Query User{1051C072-D9C9-4CD8-96C0-43527FAB1B63}c:\\users\\greg\\downloads\\archive install\\setup.exe"= UDP:c:\users\greg\downloads\archive install\setup.exe:setup.exe
                                "UDP Query User{B6A2BF2C-DBF2-417B-85BD-2E2C9B3F956C}c:\\users\\greg\\downloads\\archive install\\setup.exe"= TCP:c:\users\greg\downloads\archive install\setup.exe:setup.exe
                                "TCP Query User{4D286753-9EDC-41B7-90AD-1714E8A62164}c:\\users\\greg\\documents\\[filzup.com]programmes\\programmes\\trojans\\bifrost\\bifrost.exe"= UDP:c:\users\greg\documents\[filzup.com]programmes\programmes\trojans\bifrost\bifrost.exe:bifrost.exe
                                "UDP Query User{B5356EED-E381-45E5-9CEC-ED87246EFCFD}c:\\users\\greg\\documents\\[filzup.com]programmes\\programmes\\trojans\\bifrost\\bifrost.exe"= TCP:c:\users\greg\documents\[filzup.com]programmes\programmes\trojans\bifrost\bifrost.exe:bifrost.exe
                                "TCP Query User{A7304C66-51EA-480A-A39E-2FCBF038F48E}c:\\users\\greg\\documents\\[filzup.com]programmes\\programmes\\trojans\\turkojan\\client.exe"= UDP:c:\users\greg\documents\[filzup.com]programmes\programmes\trojans\turkojan\client.exe:client.exe
                                "UDP Query User{6889E848-514D-4ADE-AD83-3C2A26CEAF72}c:\\users\\greg\\documents\\[filzup.com]programmes\\programmes\\trojans\\turkojan\\client.exe"= TCP:c:\users\greg\documents\[filzup.com]programmes\programmes\trojans\turkojan\client.exe:client.exe
                                "TCP Query User{93DAA426-F9B8-4530-97AF-E2686DFAC7ED}c:\\users\\greg\\documents\\[filzup.com]programmes\\programmes\\trojans\\poisson\\poison ivy 2.3.2.exe"= UDP:c:\users\greg\documents\[filzup.com]programmes\programmes\trojans\poisson\poison ivy 2.3.2.exe:poison ivy 2.3.2.exe
                                "UDP Query User{0E6119B4-4261-49D7-A003-38FA9F0CA056}c:\\users\\greg\\documents\\[filzup.com]programmes\\programmes\\trojans\\poisson\\poison ivy 2.3.2.exe"= TCP:c:\users\greg\documents\[filzup.com]programmes\programmes\trojans\poisson\poison ivy 2.3.2.exe:poison ivy 2.3.2.exe
                                "TCP Query User{901D67FC-5984-40B8-8BBB-297555A65468}c:\\program files\\mozilla firefox\\firefox.exe"= UDP:c:\program files\mozilla firefox\firefox.exe:Firefox
                                "UDP Query User{0A48B3AB-E422-4775-A27B-DB86D98ECCB9}c:\\program files\\mozilla firefox\\firefox.exe"= TCP:c:\program files\mozilla firefox\firefox.exe:Firefox
                                "TCP Query User{FB0268BE-EAC0-42C0-B43A-477A0968F69D}c:\\program files\\zattoo\\zattood.exe"= UDP:c:\program files\zattoo\zattood.exe:zattood
                                "UDP Query User{182E1CB6-CC4F-48BD-AB9F-67FA2F89C01B}c:\\program files\\zattoo\\zattood.exe"= TCP:c:\program files\zattoo\zattood.exe:zattood
                                "{0178FDD4-FF83-4D72-9EE5-5C1AB446ABD9}"= UDP:c:\program files\FrostWire\FrostWire.exe:FrostWire
                                "{437493DE-F46F-4B0B-BC0A-EEF90D28FA9F}"= TCP:c:\program files\FrostWire\FrostWire.exe:FrostWire
                                "TCP Query User{77BD888F-BF9B-4CB2-AD7C-4FFF2F5E8BF2}c:\\program files\\vuze\\azureus.exe"= UDP:c:\program files\vuze\azureus.exe:Azureus
                                "UDP Query User{385BF15A-4AD4-470E-AF90-6CFC969F8517}c:\\program files\\vuze\\azureus.exe"= TCP:c:\program files\vuze\azureus.exe:Azureus
                                "TCP Query User{18EBDD1E-29B4-413F-85E9-0AC7819574D9}c:\\program files\\utorrent\\utorrent.exe"= UDP:c:\program files\utorrent\utorrent.exe:µTorrent
                                "UDP Query User{21DD64D9-BF0D-4DF3-93AF-973F440FC3D3}c:\\program files\\utorrent\\utorrent.exe"= TCP:c:\program files\utorrent\utorrent.exe:µTorrent
                                "TCP Query User{2AD340F6-C8EA-4DFE-BD4D-5DE2EF620F2F}c:\\program files\\cain\\cain.exe"= UDP:c:\program files\cain\cain.exe:Cain - Password Recovery Utility
                                "UDP Query User{BDB7E093-BEE4-429E-A2B8-668ED887324B}c:\\program files\\cain\\cain.exe"= TCP:c:\program files\cain\cain.exe:Cain - Password Recovery Utility
                                "TCP Query User{7C91CB90-55B1-44DF-890E-05458A903758}c:\\program files\\videolan\\vlc\\vlc.exe"= UDP:c:\program files\videolan\vlc\vlc.exe:VLC media player
                                "UDP Query User{209D32BA-16F5-4F50-9148-16BF3E6FEF27}c:\\program files\\videolan\\vlc\\vlc.exe"= TCP:c:\program files\videolan\vlc\vlc.exe:VLC media player
                                "TCP Query User{CA7A4F22-5651-4006-9E19-924D65611B54}c:\\users\\greg\\downloads\\mysql-noinstall-5.1.36-win32\\mysql-5.1.36-win32\\bin\\mysqld.exe"= UDP:c:\users\greg\downloads\mysql-noinstall-5.1.36-win32\mysql-5.1.36-win32\bin\mysqld.exe:mysqld.exe
                                "UDP Query User{E17F9B82-37F5-43EE-9448-099167298AB7}c:\\users\\greg\\downloads\\mysql-noinstall-5.1.36-win32\\mysql-5.1.36-win32\\bin\\mysqld.exe"= TCP:c:\users\greg\downloads\mysql-noinstall-5.1.36-win32\mysql-5.1.36-win32\bin\mysqld.exe:mysqld.exe
                                "TCP Query User{039176B2-3250-409F-A32A-C696F1836C69}c:\\program files\\java\\jre1.6.0_07\\bin\\javaw.exe"= UDP:c:\program files\java\jre1.6.0_07\bin\javaw.exe:Java(TM) Platform SE binary
                                "UDP Query User{C1A56A74-EFB4-4B81-8D1F-BDD33B2F0E58}c:\\program files\\java\\jre1.6.0_07\\bin\\javaw.exe"= TCP:c:\program files\java\jre1.6.0_07\bin\javaw.exe:Java(TM) Platform SE binary
                                "TCP Query User{EFD8F289-5232-4E75-AB37-9872A3DD2B65}c:\\windows\\system32\\javaw.exe"= UDP:c:\windows\system32\javaw.exe:Java(TM) Platform SE binary
                                "UDP Query User{BAB3168D-D14E-46D2-8869-41553140F0DC}c:\\windows\\system32\\javaw.exe"= TCP:c:\windows\system32\javaw.exe:Java(TM) Platform SE binary
                                "{0A4BC2EA-1924-435D-B0AB-F2961BE114C5}"= UDP:c:\program files\Pinnacle\VideoSpin\Programs\RM.exe:Render Manager
                                "{976F2D46-40B9-4AD7-9FC9-0CE28E078BAF}"= TCP:c:\program files\Pinnacle\VideoSpin\Programs\RM.exe:Render Manager
                                "{FF49C566-8392-42BB-B110-0878ED86F864}"= UDP:c:\program files\Pinnacle\VideoSpin\Programs\umi.exe:umi
                                "{6C23F541-E208-4E7C-8F55-E1A32C833D4C}"= TCP:c:\program files\Pinnacle\VideoSpin\Programs\umi.exe:umi
                                "{07C57568-997C-4517-8038-AE3ED10B30F3}"= UDP:c:\program files\Pinnacle\VideoSpin\Programs\VideoSpin.exe:Pinnacle VideoSpin
                                "{B449CAA1-6EE5-4BCB-B1EB-9D5D64BECF13}"= TCP:c:\program files\Pinnacle\VideoSpin\Programs\VideoSpin.exe:Pinnacle VideoSpin
                                "TCP Query User{84B97C2A-B4A2-42D5-BFF7-C5048BB7CADD}c:\\windows\\system32\\ftp.exe"= UDP:c:\windows\system32\ftp.exe:Logiciel de transfert de fichiers
                                "UDP Query User{A03C8E52-5A1E-4F22-AF89-53E858ABCD60}c:\\windows\\system32\\ftp.exe"= TCP:c:\windows\system32\ftp.exe:Logiciel de transfert de fichiers
                                "TCP Query User{EA3E3677-14CE-486D-A9E6-DE88AE845736}c:\\program files\\bulletproof_ftp_server___crack\\bpftpserver.exe"= UDP:c:\program files\bulletproof_ftp_server___crack\bpftpserver.exe:BulletProof FTP Server (http://www.bpftpserver.com)
                                "UDP Query User{7E00D5A0-D695-46D2-9217-BDFECD48B3BB}c:\\program files\\bulletproof_ftp_server___crack\\bpftpserver.exe"= TCP:c:\program files\bulletproof_ftp_server___crack\bpftpserver.exe:BulletProof FTP Server (http://www.bpftpserver.com)
                                "TCP Query User{A5ABC467-BE80-4A8C-8066-E7CDB66CB573}c:\\program files\\bulletproof_ftp_server___crack\\bpftpserver.exe"= UDP:c:\program files\bulletproof_ftp_server___crack\bpftpserver.exe:BulletProof FTP Server (http://www.bpftpserver.com)
                                "UDP Query User{111806AF-BA09-4347-A204-217FA8E60D22}c:\\program files\\bulletproof_ftp_server___crack\\bpftpserver.exe"= TCP:c:\program files\bulletproof_ftp_server___crack\bpftpserver.exe:BulletProof FTP Server (http://www.bpftpserver.com)
                                "TCP Query User{B19F1492-A872-43D5-8DC9-D71C7DEB565A}c:\\users\\greg\\temp\\teamviewer\\version4\\teamviewer.exe"= UDP:c:\users\greg\temp\teamviewer\version4\teamviewer.exe:teamviewer.exe
                                "UDP Query User{8E168617-ADA3-4307-BFAA-E82E4FB8E462}c:\\users\\greg\\temp\\teamviewer\\version4\\teamviewer.exe"= TCP:c:\users\greg\temp\teamviewer\version4\teamviewer.exe:teamviewer.exe
                                "TCP Query User{CB508FFF-179B-449B-BEB7-49E113F195F0}c:\\users\\greg\\documents\\mes fichiers reçus\\teamviewerportable_fr\\teamviewer.exe"= UDP:c:\users\greg\documents\mes fichiers reçus\teamviewerportable_fr\teamviewer.exe:teamviewer.exe
                                "UDP Query User{C86142FC-BD50-4494-890F-77C6FEB4B174}c:\\users\\greg\\documents\\mes fichiers reçus\\teamviewerportable_fr\\teamviewer.exe"= TCP:c:\users\greg\documents\mes fichiers reçus\teamviewerportable_fr\teamviewer.exe:teamviewer.exe
                                "TCP Query User{7D5B13DC-12A2-4895-8C80-4C0D9097D1B6}c:\\program files\\autokrypt8\\jre\\bin\\javaw.exe"= UDP:c:\program files\autokrypt8\jre\bin\javaw.exe:javaw
                                "UDP Query User{D4C8AF06-83C3-4999-B19E-6C7DF9E971B6}c:\\program files\\autokrypt8\\jre\\bin\\javaw.exe"= TCP:c:\program files\autokrypt8\jre\bin\javaw.exe:javaw
                                "TCP Query User{8F6FB126-3ABB-4C7E-8D55-43D4D8F388AD}c:\\users\\greg\\desktop\\apps\\portableemule\\emule\\emule.exe"= UDP:c:\users\greg\desktop\apps\portableemule\emule\emule.exe:emule.exe
                                "UDP Query User{BB1001D1-21A2-4D9C-8DF6-CDD6E911AAFE}c:\\users\\greg\\desktop\\apps\\portableemule\\emule\\emule.exe"= TCP:c:\users\greg\desktop\apps\portableemule\emule\emule.exe:emule.exe
                                "TCP Query User{A784CC4E-A7CF-4E23-8D9C-EFB221CF5D95}c:\\program files\\amsn\\bin\\wish.exe"= UDP:c:\program files\amsn\bin\wish.exe:Wish Application
                                "UDP Query User{88F566A0-D129-4F02-AE57-0484B49653FB}c:\\program files\\amsn\\bin\\wish.exe"= TCP:c:\program files\amsn\bin\wish.exe:Wish Application
                                "TCP Query User{DD333DD8-7EDF-4173-88C6-B89EAC6B76CD}c:\\users\\greg\\desktop\\amsnportable\\app\\amsn\\bin\\wish.exe"= UDP:c:\users\greg\desktop\amsnportable\app\amsn\bin\wish.exe:wish.exe
                                "UDP Query User{22FD2C94-1CF5-45ED-9DA3-DB4342FE7D11}c:\\users\\greg\\desktop\\amsnportable\\app\\amsn\\bin\\wish.exe"= TCP:c:\users\greg\desktop\amsnportable\app\amsn\bin\wish.exe:wish.exe
                                "TCP Query User{7B700C84-A49A-45DD-8848-9DD806ED92EB}c:\\users\\greg\\desktop\\programmes\\personnel\\amsnportable\\app\\amsn\\bin\\wish.exe"= UDP:c:\users\greg\desktop\programmes\personnel\amsnportable\app\amsn\bin\wish.exe:wish.exe
                                "UDP Query User{E0BA7D8A-73BE-406F-B933-36312B603BA2}c:\\users\\greg\\desktop\\programmes\\personnel\\amsnportable\\app\\amsn\\bin\\wish.exe"= TCP:c:\users\greg\desktop\programmes\personnel\amsnportable\app\amsn\bin\wish.exe:wish.exe
                                "TCP Query User{54307644-7504-4325-A997-71DF96858F2B}c:\\program files\\opera\\opera.exe"= UDP:c:\program files\opera\opera.exe:Opera Internet Browser
                                "UDP Query User{594B2354-4959-4108-88CF-75A43330EA71}c:\\program files\\opera\\opera.exe"= TCP:c:\program files\opera\opera.exe:Opera Internet Browser
                                "{E297756B-1506-4E96-8195-A6F5880163C9}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
                                "{899F11BF-B421-463D-86BA-AB0683457774}"= UDP:c:\program files\Weezo\Apache\bin\weezoHttpd.exe:Weezo HTTP Server
                                "{C39CD69F-7037-4E49-94A5-B1E79869FCC3}"= TCP:c:\program files\Weezo\Apache\bin\weezoHttpd.exe:Weezo HTTP Server
                                "{383D43DC-3ED4-495D-9C06-0110F435364A}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
                                "{5CE92E02-980D-4B77-A7A5-39E541AD3565}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour

                                R1 HMFAxCore8ca4fd17866cac11805503e882557762;HMFAxCore8ca4fd17866cac11805503e882557762;c:\windows\System32\drivers\HMFAxCore8ca4fd17866cac11805503e882557762.sys [08/06/2009 11:41 22304]
                                R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [21/09/2009 22:45 108289]
                                R2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe -k netsvcs [21/01/2008 04:33 21504]
                                R2 Recovery Service for Windows;Recovery Service for Windows;c:\windows\SMINST\BLService.exe [05/08/2008 04:36 361808]
                                R2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [21/09/2009 23:09 1153368]
                                R3 SAgentDriver;SAgent Driver;c:\program files\SoftActivity\AMSys\sagendrv.sys [01/02/2009 17:49 31312]
                                S3 getPlusHelper;ge
                                1. Salut désolé je n'ai pas pu faire le scan ComboFix je le fais demain après midi sans fautes.

                                  [EDIT] C'est bon j'ai réussi a désinstallé avast en réessayant le désinstalleur.
                                  • 1
                                  • 2
                                  • 3
                                  • 4
                                  • 5