Malware

Rusher -  
Bonjour,
en faisant une recherche Malwarebytes j'ai eu ce rapport : Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3825
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

05/03/2010 20:41:26
mbam-log-2010-03-05 (20-41-26).txt

Type de recherche: Examen rapide
Eléments examinés: 107842
Temps écoulé: 4 minute(s), 6 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 2

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cdoosoft (Spyware.OnlineGames) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Documents and Settings\Geordy\Local Settings\Temp\cvasds0.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\Documents and Settings\Geordy\Local Settings\Temp\herss.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.

Après une suppression et un redémarrage, j'obtiens le même rapport. Pourrais-je avoir de l'aide ?
Configuration: Windows XP / Firefox 3.6

23 réponses

Résumé de la discussion

Le fil porte sur un rapport Malwarebytes montrant des éléments registrés et des fichiers liés à Spyware.OnlineGames sur Windows XP, le redémarrage ne résout pas le problème et l’utilisateur demande de l’aide. Une recommandation propose d’utiliser HijackThis puis RSIT pour analyser en profondeur le système et partager les rapports étape par étape, afin d’identifier les configurations nuisibles et de préparer des actions de nettoyage plus ciblées. D’autres échanges suggèrent ensuite RSIT puis ZHPDiag pour compléter l’analyse et nettoyer les éléments résiduels, reflétant une progression vers des outils complémentaires afin d’identifier d’éventuelles réinstallations malveillantes.

Bobot (l’IA à votre service)
  1. Rusher
    J'ai supprimer mon virus manuellement en desactivant les fichiers cachés je viens de faire 2 scans avec Malwarebytes et 1 avec Avira plus aucun soucis ... Merci :D
    1. Utilisateur anonyme
      Re

      Tu as une infection par supports amovibles(Usb );donc je te conseilles de passer UsbFix;merci
      @+
  2. Rusher
    Effectivement ><" ... Sur ceux mon problème et résolu ... Merci a vous tous :D
    1. Utilisateur anonyme
      Bonjour

      Je crois pas que ton problème soit résolu:
      Fait ceci ;merci

      # Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
      Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
      Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

      Télécharge et install UsbFix de C_XX
      Ici : http://pagesperso-orange.fr/NosTools/Chiquitine29/UsbFix.exe

      Tutorial de Malekal_Morte si besoin, merci à lui : https://www.malekal.com/usbfix-supprimer-virus-usb/

      Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectés sans les ouvrir

      # Double clic sur le raccourci UsbFix présent sur ton bureau.

      # Choisi l option 2 (Suppression)

      # Laisse travailler l outil.

      # Ensuite post le rapport UsbFix.txt qui apparaîtra.

      # Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

      ( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

      @+
  3. archet9
    A suivre des conseils à la con c'est pas étonnant !!!

    Pose le pointeur de ta souris sur le pseudo de Guillaume ou sur le mien...(au besoin clic dessus)
    et poses le ensuite sur le pseudo de "I am toto" et j'espère que tu verras la différence !!!!!

    a+
    1. i am toto
      Oh oh petit c.. t'a pas a dire sa, tu m'a déjà croiser ? C'EST PAS LE NOMBRE DE MESSAGE QUI FAIT LA QUALITE, SA FAIT JUSTE LA REPUTION.
  8. archet9
    Bonsoir Rusher

    Je te conseille vivement de suivre les instructions de:
    Guillaume5188


    ==>" I am toto"     porte parfaitement son nom ....!!!!

    a+
    1. Rusher
      Non par contre il y a ça en vert (pas très grave à mon avis) :

      ---\\ DOS/Devices
      A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
      C:\ Hard drive, Flash drive, Thumb drive (Free 417 Go of 466 Go)
      D:\ CD-ROM drive (Not Inserted)
      F:\ CD-ROM drive (Not Inserted)
      3. Rusher
        ---\\ Browser Helper Objects de navigateur (O2)
        O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
        O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} . (.McAfee, Inc. - SiteAdvisor.) -- c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll

        ---\\ MountPoints2 Shell Key (MPSK) (O51)
        O51 - MPSK:{3b208cff-272c-11df-aa7a-0019e018a91d}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- E:\9qqigqwf.exe (.not file.)
        O51 - MPSK:{c4fd191a-26e8-11df-aa71-ec4e97983cae}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- E:\fk.exe (.not file.)
        O51 - MPSK:{c77babf5-26ec-11df-a355-806d6172696f}\Shell\AutoRun\command. (.Microsoft Corporation - Bienvenue dans Windows XP.) -- D:\setup.exe
        O51 - MPSK:{c77babf6-26ec-11df-a355-806d6172696f}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- C:\fk.exe

        ---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
        O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec audio TrueSpeech(TM) DSP Group pour MSACM V3.50.) -- C:\WINDOWS\System32\tssoft32.acm
        O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\WINDOWS\System32\iccvid.dll
        O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll
        O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\ir32_32.dll
        O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm
        O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm
        O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel Indeo® Video 4.5.) -- C:\WINDOWS\System32\ir41_32.ax
        O52 - TDSD: \Drivers32\"msacm.iac2"="iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\System32\iac25_32.ax
        O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\WINDOWS\System32\ir50_32.dll
        O52 - TDSD: \Drivers32\"vidc.VP60"="C:\WINDOWS\system32\vp6vfw.dll" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\WINDOWS\system32\vp6vfw.dll
        O52 - TDSD: \Drivers32\"vidc.VP61"="C:\WINDOWS\system32\vp6vfw.dll" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\WINDOWS\system32\vp6vfw.dll
        O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\System32\sl_anet.acm
        O52 - TDSD: \drivers.desc\"C:\WINDOWS\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm
        O52 - TDSD: \drivers.desc\"iac25_32.ax"="Indeo® audio software" . (.Intel Corporation - Indeo® audio software.) -- C:\WINDOWS\System32\iac25_32.ax
        O52 - TDSD: \drivers.desc\"ir50_32.dll"="Indeo® video 5.10" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
        O52 - TDSD: \drivers.desc\"vp6vfw.dll"="EA VP6 Codec" . (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\WINDOWS\System32\vp6vfw.dll

        ---\\ Liste des services Legacy (LALS) (O64)
        O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\AegisP.sys - AEGIS Protocol (IEEE 802.1x) v3.7.5.0 (AegisP) .(.Cisco Systems, Inc. - IEEE 802.1X Protocol Driver.) - LEGACY_AEGISP
        O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\sched.exe - Avira AntiVir Planificateur (AntiVirSchedulerService) .(.Avira GmbH - Antivirus Scheduler.) - LEGACY_ANTIVIRSCHEDULERSERVICE
        O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avguard.exe - Avira AntiVir Guard (AntiVirService) .(.Avira GmbH - Antivirus On-Access Service.) - LEGACY_ANTIVIRSERVICE
        O64 - Services: CurCS - C:\WINDOWS\system32\Ati2evxx.exe - Ati HotKey Poller (Ati HotKey Poller) .(.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - LEGACY_ATI_HOTKEY_POLLER
        O64 - Services: CurCS - C:\WINDOWS\system32\ati2sgag.exe - ATI Smart (ATI Smart) .(.Pas de propriétaire - ATI Smart.) - LEGACY_ATI_SMART
        O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avgio.sys - avgio (avgio) .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO
        O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\avgntflt.sys - avgntflt (avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT
        O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\avipbb.sys - avipbb (avipbb) .(.Avira GmbH - Avira Driver for RootKit Detection.) - LEGACY_AVIPBB
        O64 - Services: CurCS - (.not file.) - Lanceur de processus serveur DCOM (DcomLaunch) .(.Pas de propriétaire - Pas de description.) - LEGACY_DCOMLAUNCH
        O64 - Services: CurCS - C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys - driverhardwarev2 (driverhardwarev2) .(.CybelSoft - Driver NT Ma-Config.com.) - LEGACY_DRIVERHARDWAREV2
        O64 - Services: CurCS - C:\Program Files\ma-config.com\maconfservice.exe - Ma-Config Service (maconfservice) .(.CybelSoft - Service de détection matériel.) - LEGACY_MACONFSERVICE
        O64 - Services: CurCS - c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe - McAfee SiteAdvisor Service (McAfee SiteAdvisor Service) .(.McAfee, Inc. - SiteAdvisor.) - LEGACY_MCAFEE_SITEADVISOR_SERVICE
        O64 - Services: CurCS - (.not file.) - mountmgr (mountmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MOUNTMGR
        O64 - Services: CurCS - (.not file.) - Mup (Mup) .(.Pas de propriétaire - Pas de description.) - LEGACY_MUP
        O64 - Services: CurCS - (.not file.) - Pilote système NDIS (NDIS) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDIS
        O64 - Services: CurCS - (.not file.) - PartMgr (PartMgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_PARTMGR
        O64 - Services: CurCS - C:\WINDOWS\system32\drivers\PCTAppEvent.sys - PCTAppEvent Driver (PCTAppEvent) .(.PC Tools - PC Tools App Monitor Driver.) - LEGACY_PCTAPPEVENT
        O64 - Services: CurCS - C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys - PCTools Firewall - Packet filter driver (PCTFW-PacketFilter) .(.PC Tools - PC Tools NDIS - Packet Filter.) - LEGACY_PCTFW-PACKETFILTER
        O64 - Services: CurCS - C:\WINDOWS\system32\drivers\pctgntdi.sys - pctgntdi (pctgntdi) .(.PC Tools - PC Tools Generic TDI Driver.) - LEGACY_PCTGNTDI
        O64 - Services: CurCS - C:\Program Files\PC Tools Firewall Plus\FWService.exe - PC Tools Firewall Plus (PCToolsFirewallPlus) .(.PC Tools - PC Tools Firewall Plus service.) - LEGACY_PCTOOLSFIREWALLPLUS
        O64 - Services: CurCS - C:\WINDOWS\system32\drivers\pctplfw.sys - pctplfw (pctplfw) .(.PC Tools - PC Tools FW Plugin Driver.) - LEGACY_PCTPLFW
        O64 - Services: CurCS - C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe - Ralink Registry Writer (RalinkRegistryWriter) .(.Pas de propriétaire - RegistryWriter.) - LEGACY_RALINKREGISTRYWRITER
        O64 - Services: CurCS - (.not file.) - RDPNP (RDPNP) .(.Pas de propriétaire - Pas de description.) - LEGACY_RDPNP
        O64 - Services: CurCS - (.not file.) - REGMON701 (REGMON701) .(.Pas de propriétaire - Pas de description.) - LEGACY_REGMON701
        O64 - Services: CurCS - (.not file.) - Appel de procédure distante (RPC) (RpcSs) .(.Pas de propriétaire - Pas de description.) - LEGACY_RPCSS
        O64 - Services: CurCS - C:\WINDOWS\system32\Drivers\sptd.sys - sptd (sptd) .(.Pas de propriétaire - Pas de description.) - LEGACY_SPTD
        O64 - Services: CurCS - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys - ssmdrv (ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV
        O64 - Services: CurCS - (.not file.) - Services Terminal Server (TermService) .(.Pas de propriétaire - Pas de description.) - LEGACY_TERMSERVICE
        O64 - Services: CurCS - (.not file.) - Gestionnaire de téléchargement (uploadmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_UPLOADMGR
        3. Rusher
          ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

          R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
          R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
          R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-05-12 540672]
          R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe [2009-12-08 93320]
          R2 PCToolsFirewallPlus;PC Tools Firewall Plus; C:\Program Files\PC Tools Firewall Plus\FWService.exe [2009-11-09 818432]
          R2 RalinkRegistryWriter;Ralink Registry Writer; C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe [2009-01-05 69632]
          S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-05-12 593920]
          S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
          1. Rusher
            2010-03-03 18:18:17 ----D---- C:\WINDOWS\PeerNet
            2010-03-03 18:18:14 ----HDC---- C:\WINDOWS\$NtUninstallKB817778$
            2010-03-03 18:18:05 ----ASH---- C:\Documents and Settings\Geordy\Application Data\desktop.ini
            2010-03-03 18:18:04 ----SD---- C:\Documents and Settings\Geordy\Application Data\Microsoft
            2010-03-03 18:17:32 ----SHD---- C:\System Volume Information
            2010-03-03 18:17:31 ----A---- C:\WINDOWS\SchedLgU.Txt
            2010-03-03 18:15:03 ----D---- C:\WINDOWS\system32\xircom
            2010-03-03 18:15:03 ----D---- C:\Program Files\xerox
            2010-03-03 18:15:03 ----D---- C:\Program Files\microsoft frontpage
            2010-03-03 18:14:49 ----HDC---- C:\WINDOWS\$NtUninstallKB822603$
            2010-03-03 18:14:42 ----HDC---- C:\WINDOWS\$NtUninstallQ828026$
            2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\jit.dll
            2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\javaee.dll
            2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\dx3j.dll
            2010-03-03 18:14:38 ----A---- C:\WINDOWS\setdebug.exe
            2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\wjview.exe
            2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\vmhelper.dll
            2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msjdbc10.dll
            2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msjava.dll
            2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msawt.dll
            2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\jview.exe
            2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\jdbgmgr.exe
            2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javart.dll
            2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javaprxy.dll
            2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javacypt.dll
            2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\clspack.exe
            2010-03-03 18:14:29 ----HDC---- C:\WINDOWS\$NtUninstallKB824105$
            2010-03-03 18:14:20 ----HDC---- C:\WINDOWS\$NtUninstallKB825121$
            2010-03-03 18:14:18 ----D---- C:\Program Files\HighMAT CD Writing Wizard
            2010-03-03 18:14:17 ----D---- C:\WINDOWS\Downloaded Installations
            2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\rpcss.dll
            2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\rpcrt4.dll
            2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\ole32.dll
            2010-03-03 18:14:11 ----HDC---- C:\WINDOWS\$NtUninstallKB820291$
            2010-03-03 18:14:07 ----HDC---- C:\WINDOWS\$NtUninstallQ815485$
            2010-03-03 18:13:59 ----HDC---- C:\WINDOWS\$NtUninstallKB810217$
            2010-03-03 18:13:52 ----HDC---- C:\WINDOWS\$NtUninstallKB828035$
            2010-03-03 18:13:52 ----A---- C:\WINDOWS\system32\msgsvc.dll
            2010-03-03 18:13:48 ----HDC---- C:\WINDOWS\$NtUninstallKB826939$
            2010-03-03 18:13:46 ----A---- C:\WINDOWS\system32\cryptsvc.dll
            2010-03-03 18:13:44 ----A---- C:\WINDOWS\system32\newdev.dll
            2010-03-03 18:13:43 ----A---- C:\WINDOWS\system32\shell32.dll
            2010-03-03 18:13:35 ----HDC---- C:\WINDOWS\$NtUninstallKB825119$
            2010-03-03 18:13:31 ----HDC---- C:\WINDOWS\$NtUninstallKB824141$
            2010-03-03 18:13:27 ----HDC---- C:\WINDOWS\$NtUninstallKB823182$
            2010-03-03 18:13:23 ----HDC---- C:\WINDOWS\$NtUninstallq329623$
            2010-03-03 18:13:20 ----HDC---- C:\WINDOWS\$NtUninstallKB823980$
            2010-03-03 18:13:16 ----HDC---- C:\WINDOWS\$NtUninstallKB823559$
            2010-03-03 18:13:13 ----D---- C:\Program Files\Common Files
            2010-03-03 18:13:09 ----HDC---- C:\WINDOWS\$NtUninstallKB821557$
            2010-03-03 18:13:02 ----HDC---- C:\WINDOWS\$NtUninstallQ819696$
            2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\wstdecod.dll
            2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\psisdecd.dll
            2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\msyuv.dll
            2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\msvidctl.dll
            2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmpdxm.dll
            2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmpasf.dll
            2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmerror.dll
            2010-03-03 18:12:35 ----A---- C:\WINDOWS\system32\mspmsnsv.dll
            2010-03-03 18:12:32 ----D---- C:\WINDOWS\RegisteredPackages
            2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmvdmoe2.dll
            2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmspdmoe.dll
            2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmspdmod.dll
            2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmsdmoe2.dll
            2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmidx.dll
            2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\mp4sdmod.dll
            2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\mp43dmod.dll
            2010-03-03 18:12:11 ----HDC---- C:\WINDOWS\$NtUninstallQ817606$
            2010-03-03 18:12:08 ----HDC---- C:\WINDOWS\$NtUninstallQ817287$
            2010-03-03 18:12:05 ----HDC---- C:\WINDOWS\$NtUninstallQ814033$
            2010-03-03 18:11:58 ----HDC---- C:\WINDOWS\$NtUninstallQ811493$
            2010-03-03 18:11:53 ----HDC---- C:\WINDOWS\$NtUninstallQ810833$
            2010-03-03 18:11:50 ----HDC---- C:\WINDOWS\$NtUninstallQ810577$
            2010-03-03 18:11:40 ----HDC---- C:\WINDOWS\$NtUninstallQ810565$
            2010-03-03 18:11:31 ----HDC---- C:\WINDOWS\$NtUninstallQ331953$
            2010-03-03 18:11:21 ----HD---- C:\Program Files\Uninstall Information
            2010-03-03 18:11:18 ----HDC---- C:\WINDOWS\$NtUninstallQ329834$
            2010-03-03 18:11:18 ----D---- C:\8c577054f32042639ee4988cc2f432d6
            2010-03-03 18:11:16 ----HDC---- C:\WINDOWS\$NtUninstallQ329441$
            2010-03-03 18:11:15 ----A---- C:\WINDOWS\system32\srrstr.dll
            2010-03-03 18:11:13 ----HDC---- C:\WINDOWS\$NtUninstallQ329390$
            2010-03-03 18:11:10 ----HDC---- C:\WINDOWS\$NtUninstallQ329170$
            2010-03-03 18:11:07 ----HDC---- C:\WINDOWS\$NtUninstallQ329048$
            2010-03-03 18:11:04 ----HDC---- C:\WINDOWS\$NtUninstallQ328310$
            2010-03-03 18:11:03 ----A---- C:\WINDOWS\system32\xpsp1hfm.exe
            2010-03-03 18:10:54 ----HDC---- C:\WINDOWS\$NtUninstallQ327979$
            2010-03-03 18:10:42 ----HDC---- C:\WINDOWS\$NtUninstallKB282010$
            2010-03-03 18:10:38 ----A---- C:\WINDOWS\817778.EXE
            2010-03-03 18:10:34 ----D---- C:\Program Files\Windows Journal Viewer
            2010-03-03 18:09:59 ----RSD---- C:\WINDOWS\assembly
            2010-03-03 18:09:59 ----D---- C:\WINDOWS\system32\URTTemp
            2010-03-03 18:09:59 ----D---- C:\WINDOWS\Microsoft.NET
            2010-03-03 18:09:57 ----SHD---- C:\WINDOWS\Installer
            2010-03-03 18:09:30 ----A---- C:\WINDOWS\control.ini
            2010-03-03 18:09:30 ----A---- C:\AUTOEXEC.BAT
            2010-03-03 18:09:26 ----A---- C:\WINDOWS\OEWABLog.txt
            2010-03-03 18:09:23 ----A---- C:\WINDOWS\system32\mapi32.dll
            2010-03-03 18:08:55 ----SD---- C:\WINDOWS\Downloaded Program Files
            2010-03-03 18:08:55 ----RD---- C:\WINDOWS\Offline Web Pages
            2010-03-03 18:08:55 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
            2010-03-03 18:08:52 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
            2010-03-03 18:08:37 ----D---- C:\WINDOWS\system32\DirectX
            2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrslv.dll
            2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrdm.dll
            2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrcdlg.dll
            2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\racpldlg.dll
            2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\atrace.dll
            2010-03-03 18:08:10 ----A---- C:\WINDOWS\system32\desktop.ini
            2010-03-03 18:08:10 ----A---- C:\WINDOWS\desktop.ini
            2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
            2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
            2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\isrdbg32.dll
            2010-03-03 18:08:03 ----A---- C:\WINDOWS\system32\acctres.dll
            2010-03-03 18:08:02 ----D---- C:\Program Files\Fichiers communs\Services
            2010-03-03 18:07:59 ----SD---- C:\WINDOWS\Tasks
            2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\isign32.dll
            2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\icwphbk.dll
            2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\icwdial.dll
            2010-03-03 18:07:58 ----A---- C:\WINDOWS\system32\inetcfg.dll
            2010-03-03 18:07:58 ----A---- C:\WINDOWS\system32\icfgnt5.dll
            2010-03-03 18:07:57 ----D---- C:\Program Files\Fichiers communs\MSSoap
            2010-03-03 18:07:53 ----D---- C:\WINDOWS\srchasst
            2010-03-03 18:07:52 ----D---- C:\WINDOWS\system32\Macromed
            2010-03-03 18:07:51 ----D---- C:\Program Files\Movie Maker
            2010-03-03 18:07:51 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
            2010-03-03 18:07:51 ----A---- C:\WINDOWS\system32\qmgr.dll
            2010-03-03 18:07:47 ----D---- C:\WINDOWS\system32\Restore
            2010-03-03 18:07:47 ----D---- C:\WINDOWS\PCHealth
            2010-03-03 18:07:47 ----A---- C:\WINDOWS\system32\srsvc.dll
            2010-03-03 18:07:47 ----A---- C:\WINDOWS\system32\srclient.dll
            2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\nmmkcert.dll
            2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\msconf.dll
            2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\mnmdd.dll
            2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\ils.dll
            2010-03-03 18:07:44 ----D---- C:\Program Files\NetMeeting
            2010-03-03 18:07:43 ----D---- C:\Program Files\Outlook Express
            2010-03-03 18:07:43 ----A---- C:\WINDOWS\system32\schedsvc.dll
            2010-03-03 18:07:42 ----A---- C:\WINDOWS\system32\mstinit.exe
            2010-03-03 18:07:42 ----A---- C:\WINDOWS\system32\mstask.dll
            2010-03-03 18:07:37 ----D---- C:\Program Files\Fichiers communs\System
            2010-03-03 18:07:36 ----D---- C:\Program Files\Internet Explorer
            2010-03-03 18:07:33 ----D---- C:\Program Files\ComPlus Applications
            2010-03-03 18:07:33 ----A---- C:\WINDOWS\vbaddin.ini
            2010-03-03 18:07:33 ----A---- C:\WINDOWS\vb.ini
            2010-03-03 18:07:32 ----D---- C:\WINDOWS\Registration
            2010-03-03 18:07:19 ----HD---- C:\Program Files\WindowsUpdate
            2010-03-03 18:07:19 ----D---- C:\Program Files\Windows Media Player
            2010-03-03 18:07:19 ----D---- C:\Program Files\Services en ligne
            2010-03-03 18:07:17 ----D---- C:\Program Files\Messenger
            2010-03-03 18:07:12 ----D---- C:\Program Files\MSN Gaming Zone
            2010-03-03 18:07:12 ----A---- C:\WINDOWS\system32\write.exe
            2010-03-03 18:07:05 ----A---- C:\WINDOWS\system32\sndvol32.exe
            2010-03-03 18:07:05 ----A---- C:\WINDOWS\system32\sndrec32.exe
            2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\hypertrm.dll
            2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\hticons.dll
            2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avwav.dll
            2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avtapi.dll
            2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avmeter.dll
            2010-03-03 18:07:03 ----A---- C:\WINDOWS\system32\winchat.exe
            2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\sol.exe
            2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\getuname.dll
            2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\charmap.exe
            2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\calc.exe
            2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\winmine.exe
            2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\usrlogon.cmd
            2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tsshutdn.exe
            2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tslabels.ini
            2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tskill.exe
            2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\reset.exe
            2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\rdshost.exe
            2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\mshearts.exe
            2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\freecell.exe
            2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\tsdiscon.exe
            2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\tscon.exe
            2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\shadow.exe
            2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\rwinsta.exe
            2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\regini.exe
            2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
            2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qwinsta.exe
            2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qprocess.exe
            2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qappsrv.exe
            2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\mtxoci.dll
            2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\msg.exe
            2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
            2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\logoff.exe
            2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\cdmodem.dll
            2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\xolehlp.dll
            2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtctm.dll
            2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtcprf.ini
            2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtclog.dll
            2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtc.exe
            2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\stclient.dll
            2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxlegih.dll
            2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxex.dll
            2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxdm.dll
            2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
            2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\comrepl.dll
            2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\comaddin.dll
            2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\colbact.dll
            2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\comuid.dll
            2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\comsnap.dll
            2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\clbcatq.dll
            2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\clbcatex.dll
            2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\catsrvps.dll
            2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\catsrv.dll
            2010-03-03 18:06:48 ----A---- C:\WINDOWS\system32\wmimgmt.msc
            2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\servdeps.dll
            2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\mmfutil.dll
            2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\cmprops.dll
            2010-03-03 18:06:43 ----D---- C:\Program Files\Windows NT
            2010-03-03 18:06:43 ----D---- C:\Program Files\MSN
            2010-03-03 18:06:43 ----A---- C:\WINDOWS\system32\mplay32.exe
            2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuauserv.dll
            2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuaueng.dll
            2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuauclt.exe
            2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\spider.exe
            2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\mspaint.exe
            2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\clipbrd.exe
            2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\tscupgrd.exe
            2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
            2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\termsrv.dll
            2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\sessmgr.exe
            2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\remotepg.dll
            2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\rdsaddin.exe
            2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\rdchost.dll
            2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\mstscax.dll
            2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\mstsc.exe
            2010-03-03 18:06:40 ----D---- C:\WINDOWS\system32\MsDtc
            2010-03-03 18:06:40 ----D---- C:\WINDOWS\system32\Com
            2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpwsx.dll
            2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpsnd.dll
            2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpclip.exe
            2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\msdtcprx.dll
            2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\icaapi.dll
            2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\cfgbkend.dll
            2010-03-03 18:06:39 ----A---- C:\WINDOWS\system32\comsvcs.dll
            2010-03-03 18:06:39 ----A---- C:\WINDOWS\system32\catsrvut.dll
            2010-03-03 18:06:36 ----A---- C:\WINDOWS\system32\licwmi.dll
            2010-03-03 18:06:18 ----A---- C:\WINDOWS\system32\h323log.txt
            2010-03-03 18:05:28 ----A---- C:\WINDOWS\system32\hidserv.dll
            2010-03-03 18:04:45 ----A---- C:\WINDOWS\system32\usbui.dll
            2010-03-03 18:03:55 ----A---- C:\WINDOWS\imsins.BAK
            2010-03-03 18:03:53 ----D---- C:\Program Files\Fichiers communs\ODBC
            2010-03-03 18:03:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
            2010-03-03 18:03:53 ----A---- C:\WINDOWS\ODBCINST.INI
            2010-03-03 18:03:50 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
            2010-03-03 18:03:49 ----RD---- C:\Program Files
            2010-03-03 18:03:49 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
            2010-03-03 18:03:49 ----D---- C:\Program Files\Fichiers communs
            2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
            2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
            2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdazel.dll
            2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdycc.dll
            2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbduzb.dll
            2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdur.dll
            2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdtat.dll
            2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdru1.dll
            2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdru.dll
            2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdmon.dll
            2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
            2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
            2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdbu.dll
            2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdblr.dll
            2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdaze.dll
            2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhept.dll
            2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
            2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
            2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
            2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
            2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe.dll
            2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
            2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
            2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlv.dll
            2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
            2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlt.dll
            2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdest.dll
            2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
            2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdsl.dll
            2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdro.dll
            2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
            2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdpl.dll
            2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
            2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdhu.dll
            2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
            2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
            2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdycl.dll
            2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdcz.dll
            2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdcr.dll
            2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
            2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\spxcoins.dll
            2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\irclass.dll
            2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\dgsetup.dll
            2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
            2010-03-03 18:03:39 ----A---- C:\WINDOWS\system32\EqnClass.Dll
            2010-03-03 18:03:38 ----N---- C:\WINDOWS\system32\CONFIG.TMP
            2010-03-03 18:03:38 ----A---- C:\WINDOWS\TASKMAN.EXE
            2010-03-03 18:03:38 ----A---- C:\WINDOWS\system32\batt.dll
            2010-03-03 18:03:38 ----A---- C:\WINDOWS\notepad.exe
            2010-03-03 18:03:37 ----A---- C:\WINDOWS\system32\storprop.dll
            2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET52.tmp
            2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET51.tmp
            2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET50.tmp
            2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4F.tmp
            2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4E.tmp
            2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4D.tmp
            2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4C.tmp
            2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4B.tmp
            2010-03-03 18:03:35 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET4A.tmp
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET49.tmp
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET48.tmp
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET47.tmp
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET46.tmp
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET45.tmp
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET44.tmp
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET43.tmp
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET42.tmp
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET41.tmp
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET40.tmp
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3F.tmp
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3E.tmp
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3D.tmp
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3C.tmp
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3B.tmp
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3A.tmp
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET39.tmp
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET38.tmp
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET37.tmp
            2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET36.tmp
            2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET35.tmp
            2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET34.tmp
            2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET33.tmp
            2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET32.tmp
            2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET31.tmp
            2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET30.tmp
            2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2F.tmp
            2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2E.tmp
            2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2D.tmp
            2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2C.tmp
            2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2B.tmp
            2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2A.tmp
            2010-03-03 18:03:32 ----RA---- C:\WINDOWS\SET29.tmp
            2010-03-03 18:03:01 ----RA---- C:\WINDOWS\SETA.tmp
            2010-03-03 18:02:57 ----RA---- C:\WINDOWS\SET3.tmp
            2010-03-03 18:02:53 ----D---- C:\WINDOWS\system32\CatRoot2
            2010-03-03 18:02:53 ----D---- C:\WINDOWS\system32\CatRoot
            2010-03-03 18:02:48 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
            2010-03-03 18:02:32 ----A---- C:\WINDOWS\setuplog.txt
            2010-03-03 18:02:29 ----D---- C:\Documents and Settings
            2010-02-11 05:37:08 ----A---- C:\WINDOWS\system32\atiok3x2.dll
            2010-02-11 05:36:00 ----A---- C:\WINDOWS\system32\atipdlxx.dll
            2010-02-11 05:35:44 ----A---- C:\WINDOWS\system32\Oemdspif.dll
            2010-02-11 05:35:24 ----A---- C:\WINDOWS\system32\ati2edxx.dll
            2010-02-11 05:35:10 ----A---- C:\WINDOWS\system32\ati2evxx.dll
            2010-02-11 05:33:56 ----A---- C:\WINDOWS\system32\ati2evxx.exe
            2010-02-11 04:59:16 ----A---- C:\WINDOWS\system32\amdpcom32.dll
            2010-02-11 04:55:40 ----A---- C:\WINDOWS\system32\atikvmag.dll

            ======List of files/folders modified in the last 1 months======

            2010-03-03 19:03:49 ----A---- C:\WINDOWS\win.ini
            2010-03-03 18:21:55 ----RASH---- C:\NTDETECT.COM
            2010-03-03 18:03:49 ----A---- C:\WINDOWS\system.ini

            ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

            R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520]
            R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
            R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
            R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2004-08-19 14848]
            R1 pctgntdi;pctgntdi; \??\C:\WINDOWS\system32\drivers\pctgntdi.sys []
            R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
            R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.7.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-03-03 21361]
            R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-11-25 56816]
            R2 PCTAppEvent;PCTAppEvent Driver; \??\C:\WINDOWS\system32\drivers\PCTAppEvent.sys []
            R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-05-12 3007488]
            R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
            R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2002-08-30 9600]
            R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-10 4397568]
            R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2002-08-30 12288]
            R3 PCTFW-PacketFilter;PCTools Firewall - Packet filter driver; \??\C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys []
            R3 pctNDIS;PC Tools Driver; C:\WINDOWS\system32\DRIVERS\pctNdis.sys [2010-01-07 58816]
            R3 pctplfw;pctplfw; \??\C:\WINDOWS\system32\drivers\pctplfw.sys []
            R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-03 31616]
            R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-03 26624]
            R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-03 57600]
            R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2004-08-03 17024]
            S3 a0z852jy;a0z852jy; C:\WINDOWS\system32\drivers\a0z852jy.sys []
            S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
            S3 RT73;TL-WN321G USB Wireless Adapter; C:\WINDOWS\system32\DRIVERS\rt73.sys [2008-10-21 465152]
            S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-11-27 177152]
            S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
            S3 xnacc;Microsoft Common Controller For Windows Driver Service; C:\WINDOWS\system32\DRIVERS\xnacc.sys [2005-09-15 476672]
            S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

            ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

            R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
            R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
            R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-05-12 540672]
            R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe [2009-12-08 93320]
            R2 PCToolsFirewallPlus;PC Tools Firewall Plus; C:\Program Files\PC Tools Firewall Plus\FWService.exe [2009-11-09 818432]
            R2 RalinkRegistryWriter;Ralink Registry Writer; C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe [2009-01-05 69632]
            S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-05-12 593920]
            S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
            S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
            S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
            S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
            S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2010-01-26 243056]
            S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

            -----------------EOF-----------------
            1. Rusher
              2010-03-03 18:18:17 ----D---- C:\WINDOWS\PeerNet
              2010-03-03 18:18:14 ----HDC---- C:\WINDOWS\$NtUninstallKB817778$
              2010-03-03 18:18:05 ----ASH---- C:\Documents and Settings\Geordy\Application Data\desktop.ini
              2010-03-03 18:18:04 ----SD---- C:\Documents and Settings\Geordy\Application Data\Microsoft
              2010-03-03 18:17:32 ----SHD---- C:\System Volume Information
              2010-03-03 18:17:31 ----A---- C:\WINDOWS\SchedLgU.Txt
              2010-03-03 18:15:03 ----D---- C:\WINDOWS\system32\xircom
              2010-03-03 18:15:03 ----D---- C:\Program Files\xerox
              2010-03-03 18:15:03 ----D---- C:\Program Files\microsoft frontpage
              2010-03-03 18:14:49 ----HDC---- C:\WINDOWS\$NtUninstallKB822603$
              2010-03-03 18:14:42 ----HDC---- C:\WINDOWS\$NtUninstallQ828026$
              2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\jit.dll
              2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\javaee.dll
              2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\dx3j.dll
              2010-03-03 18:14:38 ----A---- C:\WINDOWS\setdebug.exe
              2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\wjview.exe
              2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\vmhelper.dll
              2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msjdbc10.dll
              2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msjava.dll
              2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msawt.dll
              2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\jview.exe
              2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\jdbgmgr.exe
              2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javart.dll
              2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javaprxy.dll
              2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javacypt.dll
              2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\clspack.exe
              2010-03-03 18:14:29 ----HDC---- C:\WINDOWS\$NtUninstallKB824105$
              2010-03-03 18:14:20 ----HDC---- C:\WINDOWS\$NtUninstallKB825121$
              2010-03-03 18:14:18 ----D---- C:\Program Files\HighMAT CD Writing Wizard
              2010-03-03 18:14:17 ----D---- C:\WINDOWS\Downloaded Installations
              2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\rpcss.dll
              2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\rpcrt4.dll
              2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\ole32.dll
              2010-03-03 18:14:11 ----HDC---- C:\WINDOWS\$NtUninstallKB820291$
              2010-03-03 18:14:07 ----HDC---- C:\WINDOWS\$NtUninstallQ815485$
              2010-03-03 18:13:59 ----HDC---- C:\WINDOWS\$NtUninstallKB810217$
              2010-03-03 18:13:52 ----HDC---- C:\WINDOWS\$NtUninstallKB828035$
              2010-03-03 18:13:52 ----A---- C:\WINDOWS\system32\msgsvc.dll
              2010-03-03 18:13:48 ----HDC---- C:\WINDOWS\$NtUninstallKB826939$
              2010-03-03 18:13:46 ----A---- C:\WINDOWS\system32\cryptsvc.dll
              2010-03-03 18:13:44 ----A---- C:\WINDOWS\system32\newdev.dll
              2010-03-03 18:13:43 ----A---- C:\WINDOWS\system32\shell32.dll
              2010-03-03 18:13:35 ----HDC---- C:\WINDOWS\$NtUninstallKB825119$
              2010-03-03 18:13:31 ----HDC---- C:\WINDOWS\$NtUninstallKB824141$
              2010-03-03 18:13:27 ----HDC---- C:\WINDOWS\$NtUninstallKB823182$
              2010-03-03 18:13:23 ----HDC---- C:\WINDOWS\$NtUninstallq329623$
              2010-03-03 18:13:20 ----HDC---- C:\WINDOWS\$NtUninstallKB823980$
              2010-03-03 18:13:16 ----HDC---- C:\WINDOWS\$NtUninstallKB823559$
              2010-03-03 18:13:13 ----D---- C:\Program Files\Common Files
              2010-03-03 18:13:09 ----HDC---- C:\WINDOWS\$NtUninstallKB821557$
              2010-03-03 18:13:02 ----HDC---- C:\WINDOWS\$NtUninstallQ819696$
              2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\wstdecod.dll
              2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\psisdecd.dll
              2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\msyuv.dll
              2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\msvidctl.dll
              2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmpdxm.dll
              2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmpasf.dll
              2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmerror.dll
              2010-03-03 18:12:35 ----A---- C:\WINDOWS\system32\mspmsnsv.dll
              2010-03-03 18:12:32 ----D---- C:\WINDOWS\RegisteredPackages
              2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmvdmoe2.dll
              2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmspdmoe.dll
              2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmspdmod.dll
              2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmsdmoe2.dll
              2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmidx.dll
              2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\mp4sdmod.dll
              2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\mp43dmod.dll
              2010-03-03 18:12:11 ----HDC---- C:\WINDOWS\$NtUninstallQ817606$
              2010-03-03 18:12:08 ----HDC---- C:\WINDOWS\$NtUninstallQ817287$
              2010-03-03 18:12:05 ----HDC---- C:\WINDOWS\$NtUninstallQ814033$
              2010-03-03 18:11:58 ----HDC---- C:\WINDOWS\$NtUninstallQ811493$
              2010-03-03 18:11:53 ----HDC---- C:\WINDOWS\$NtUninstallQ810833$
              2010-03-03 18:11:50 ----HDC---- C:\WINDOWS\$NtUninstallQ810577$
              2010-03-03 18:11:40 ----HDC---- C:\WINDOWS\$NtUninstallQ810565$
              2010-03-03 18:11:31 ----HDC---- C:\WINDOWS\$NtUninstallQ331953$
              2010-03-03 18:11:21 ----HD---- C:\Program Files\Uninstall Information
              2010-03-03 18:11:18 ----HDC---- C:\WINDOWS\$NtUninstallQ329834$
              2010-03-03 18:11:18 ----D---- C:\8c577054f32042639ee4988cc2f432d6
              2010-03-03 18:11:16 ----HDC---- C:\WINDOWS\$NtUninstallQ329441$
              2010-03-03 18:11:15 ----A---- C:\WINDOWS\system32\srrstr.dll
              2010-03-03 18:11:13 ----HDC---- C:\WINDOWS\$NtUninstallQ329390$
              2010-03-03 18:11:10 ----HDC---- C:\WINDOWS\$NtUninstallQ329170$
              2010-03-03 18:11:07 ----HDC---- C:\WINDOWS\$NtUninstallQ329048$
              2010-03-03 18:11:04 ----HDC---- C:\WINDOWS\$NtUninstallQ328310$
              2010-03-03 18:11:03 ----A---- C:\WINDOWS\system32\xpsp1hfm.exe
              2010-03-03 18:10:54 ----HDC---- C:\WINDOWS\$NtUninstallQ327979$
              2010-03-03 18:10:42 ----HDC---- C:\WINDOWS\$NtUninstallKB282010$
              2010-03-03 18:10:38 ----A---- C:\WINDOWS\817778.EXE
              2010-03-03 18:10:34 ----D---- C:\Program Files\Windows Journal Viewer
              2010-03-03 18:09:59 ----RSD---- C:\WINDOWS\assembly
              2010-03-03 18:09:59 ----D---- C:\WINDOWS\system32\URTTemp
              2010-03-03 18:09:59 ----D---- C:\WINDOWS\Microsoft.NET
              2010-03-03 18:09:57 ----SHD---- C:\WINDOWS\Installer
              2010-03-03 18:09:30 ----A---- C:\WINDOWS\control.ini
              2010-03-03 18:09:30 ----A---- C:\AUTOEXEC.BAT
              2010-03-03 18:09:26 ----A---- C:\WINDOWS\OEWABLog.txt
              2010-03-03 18:09:23 ----A---- C:\WINDOWS\system32\mapi32.dll
              2010-03-03 18:08:55 ----SD---- C:\WINDOWS\Downloaded Program Files
              2010-03-03 18:08:55 ----RD---- C:\WINDOWS\Offline Web Pages
              2010-03-03 18:08:55 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
              2010-03-03 18:08:52 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
              2010-03-03 18:08:37 ----D---- C:\WINDOWS\system32\DirectX
              2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrslv.dll
              2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrdm.dll
              2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrcdlg.dll
              2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\racpldlg.dll
              2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\atrace.dll
              2010-03-03 18:08:10 ----A---- C:\WINDOWS\system32\desktop.ini
              2010-03-03 18:08:10 ----A---- C:\WINDOWS\desktop.ini
              2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
              2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
              2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\isrdbg32.dll
              2010-03-03 18:08:03 ----A---- C:\WINDOWS\system32\acctres.dll
              2010-03-03 18:08:02 ----D---- C:\Program Files\Fichiers communs\Services
              2010-03-03 18:07:59 ----SD---- C:\WINDOWS\Tasks
              2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\isign32.dll
              2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\icwphbk.dll
              2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\icwdial.dll
              2010-03-03 18:07:58 ----A---- C:\WINDOWS\system32\inetcfg.dll
              2010-03-03 18:07:58 ----A---- C:\WINDOWS\system32\icfgnt5.dll
              2010-03-03 18:07:57 ----D---- C:\Program Files\Fichiers communs\MSSoap
              2010-03-03 18:07:53 ----D---- C:\WINDOWS\srchasst
              2010-03-03 18:07:52 ----D---- C:\WINDOWS\system32\Macromed
              2010-03-03 18:07:51 ----D---- C:\Program Files\Movie Maker
              2010-03-03 18:07:51 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
              2010-03-03 18:07:51 ----A---- C:\WINDOWS\system32\qmgr.dll
              2010-03-03 18:07:47 ----D---- C:\WINDOWS\system32\Restore
              2010-03-03 18:07:47 ----D---- C:\WINDOWS\PCHealth
              2010-03-03 18:07:47 ----A---- C:\WINDOWS\system32\srsvc.dll
              2010-03-03 18:07:47 ----A---- C:\WINDOWS\system32\srclient.dll
              2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\nmmkcert.dll
              2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\msconf.dll
              2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\mnmdd.dll
              2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\ils.dll
              2010-03-03 18:07:44 ----D---- C:\Program Files\NetMeeting
              2010-03-03 18:07:43 ----D---- C:\Program Files\Outlook Express
              2010-03-03 18:07:43 ----A---- C:\WINDOWS\system32\schedsvc.dll
              2010-03-03 18:07:42 ----A---- C:\WINDOWS\system32\mstinit.exe
              2010-03-03 18:07:42 ----A---- C:\WINDOWS\system32\mstask.dll
              2010-03-03 18:07:37 ----D---- C:\Program Files\Fichiers communs\System
              2010-03-03 18:07:36 ----D---- C:\Program Files\Internet Explorer
              2010-03-03 18:07:33 ----D---- C:\Program Files\ComPlus Applications
              2010-03-03 18:07:33 ----A---- C:\WINDOWS\vbaddin.ini
              2010-03-03 18:07:33 ----A---- C:\WINDOWS\vb.ini
              2010-03-03 18:07:32 ----D---- C:\WINDOWS\Registration
              2010-03-03 18:07:19 ----HD---- C:\Program Files\WindowsUpdate
              2010-03-03 18:07:19 ----D---- C:\Program Files\Windows Media Player
              2010-03-03 18:07:19 ----D---- C:\Program Files\Services en ligne
              2010-03-03 18:07:17 ----D---- C:\Program Files\Messenger
              2010-03-03 18:07:12 ----D---- C:\Program Files\MSN Gaming Zone
              2010-03-03 18:07:12 ----A---- C:\WINDOWS\system32\write.exe
              2010-03-03 18:07:05 ----A---- C:\WINDOWS\system32\sndvol32.exe
              2010-03-03 18:07:05 ----A---- C:\WINDOWS\system32\sndrec32.exe
              2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\hypertrm.dll
              2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\hticons.dll
              2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avwav.dll
              2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avtapi.dll
              2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avmeter.dll
              2010-03-03 18:07:03 ----A---- C:\WINDOWS\system32\winchat.exe
              2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\sol.exe
              2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\getuname.dll
              2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\charmap.exe
              2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\calc.exe
              2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\winmine.exe
              2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\usrlogon.cmd
              2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tsshutdn.exe
              2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tslabels.ini
              2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tskill.exe
              2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\reset.exe
              2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\rdshost.exe
              2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\mshearts.exe
              2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\freecell.exe
              2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\tsdiscon.exe
              2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\tscon.exe
              2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\shadow.exe
              2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\rwinsta.exe
              2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\regini.exe
              2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
              2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qwinsta.exe
              2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qprocess.exe
              2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qappsrv.exe
              2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\mtxoci.dll
              2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\msg.exe
              2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
              2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\logoff.exe
              2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\cdmodem.dll
              2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\xolehlp.dll
              2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtctm.dll
              2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtcprf.ini
              2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtclog.dll
              2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtc.exe
              2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\stclient.dll
              2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxlegih.dll
              2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxex.dll
              2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxdm.dll
              2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
              2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\comrepl.dll
              2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\comaddin.dll
              2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\colbact.dll
              2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\comuid.dll
              2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\comsnap.dll
              2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\clbcatq.dll
              2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\clbcatex.dll
              2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\catsrvps.dll
              2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\catsrv.dll
              2010-03-03 18:06:48 ----A---- C:\WINDOWS\system32\wmimgmt.msc
              2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\servdeps.dll
              2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\mmfutil.dll
              2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\cmprops.dll
              2010-03-03 18:06:43 ----D---- C:\Program Files\Windows NT
              2010-03-03 18:06:43 ----D---- C:\Program Files\MSN
              2010-03-03 18:06:43 ----A---- C:\WINDOWS\system32\mplay32.exe
              2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuauserv.dll
              2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuaueng.dll
              2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuauclt.exe
              2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\spider.exe
              2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\mspaint.exe
              2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\clipbrd.exe
              2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\tscupgrd.exe
              2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
              2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\termsrv.dll
              2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\sessmgr.exe
              2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\remotepg.dll
              2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\rdsaddin.exe
              2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\rdchost.dll
              2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\mstscax.dll
              2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\mstsc.exe
              2010-03-03 18:06:40 ----D---- C:\WINDOWS\system32\MsDtc
              2010-03-03 18:06:40 ----D---- C:\WINDOWS\system32\Com
              2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpwsx.dll
              2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpsnd.dll
              2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpclip.exe
              2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\msdtcprx.dll
              2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\icaapi.dll
              2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\cfgbkend.dll
              2010-03-03 18:06:39 ----A---- C:\WINDOWS\system32\comsvcs.dll
              2010-03-03 18:06:39 ----A---- C:\WINDOWS\system32\catsrvut.dll
              2010-03-03 18:06:36 ----A---- C:\WINDOWS\system32\licwmi.dll
              2010-03-03 18:06:18 ----A---- C:\WINDOWS\system32\h323log.txt
              2010-03-03 18:05:28 ----A---- C:\WINDOWS\system32\hidserv.dll
              2010-03-03 18:04:45 ----A---- C:\WINDOWS\system32\usbui.dll
              2010-03-03 18:03:55 ----A---- C:\WINDOWS\imsins.BAK
              2010-03-03 18:03:53 ----D---- C:\Program Files\Fichiers communs\ODBC
              2010-03-03 18:03:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
              2010-03-03 18:03:53 ----A---- C:\WINDOWS\ODBCINST.INI
              2010-03-03 18:03:50 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
              2010-03-03 18:03:49 ----RD---- C:\Program Files
              2010-03-03 18:03:49 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
              2010-03-03 18:03:49 ----D---- C:\Program Files\Fichiers communs
              2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
              2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
              2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdazel.dll
              2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdycc.dll
              2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbduzb.dll
              2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdur.dll
              2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdtat.dll
              2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdru1.dll
              2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdru.dll
              2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdmon.dll
              2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
              2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
              2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdbu.dll
              2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdblr.dll
              2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdaze.dll
              2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhept.dll
              2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
              2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
              2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
              2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
              2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe.dll
              2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
              2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
              2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlv.dll
              2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
              2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlt.dll
              2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdest.dll
              2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
              2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdsl.dll
              2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdro.dll
              2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
              2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdpl.dll
              2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
              2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdhu.dll
              2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
              2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
              2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdycl.dll
              2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdcz.dll
              2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdcr.dll
              2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
              2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\spxcoins.dll
              2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\irclass.dll
              2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\dgsetup.dll
              2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
              2010-03-03 18:03:39 ----A---- C:\WINDOWS\system32\EqnClass.Dll
              2010-03-03 18:03:38 ----N---- C:\WINDOWS\system32\CONFIG.TMP
              2010-03-03 18:03:38 ----A---- C:\WINDOWS\TASKMAN.EXE
              2010-03-03 18:03:38 ----A---- C:\WINDOWS\system32\batt.dll
              2010-03-03 18:03:38 ----A---- C:\WINDOWS\notepad.exe
              2010-03-03 18:03:37 ----A---- C:\WINDOWS\system32\storprop.dll
              2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET52.tmp
              2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET51.tmp
              2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET50.tmp
              2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4F.tmp
              2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4E.tmp
              2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4D.tmp
              2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4C.tmp
              2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4B.tmp
              2010-03-03 18:03:35 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET4A.tmp
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET49.tmp
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET48.tmp
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET47.tmp
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET46.tmp
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET45.tmp
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET44.tmp
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET43.tmp
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET42.tmp
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET41.tmp
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET40.tmp
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3F.tmp
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3E.tmp
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3D.tmp
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3C.tmp
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3B.tmp
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3A.tmp
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET39.tmp
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET38.tmp
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET37.tmp
              2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET36.tmp
              2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET35.tmp
              2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET34.tmp
              2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET33.tmp
              2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET32.tmp
              2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET31.tmp
              2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET30.tmp
              2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2F.tmp
              2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2E.tmp
              2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2D.tmp
              2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2C.tmp
              2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2B.tmp
              2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2A.tmp
              2010-03-03 18:03:32 ----RA---- C:\WINDOWS\SET29.tmp
              2010-03-03 18:03:01 ----RA---- C:\WINDOWS\SETA.tmp
              2010-03-03 18:02:57 ----RA---- C:\WINDOWS\SET3.tmp
              2010-03-03 18:02:53 ----D---- C:\WINDOWS\system32\CatRoot2
              2010-03-03 18:02:53 ----D---- C:\WINDOWS\system32\CatRoot
              2010-03-03 18:02:48 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
              2010-03-03 18:02:32 ----A---- C:\WINDOWS\setuplog.txt
              2010-03-03 18:02:29 ----D---- C:\Documents and Settings
              2010-02-11 05:37:08 ----A---- C:\WINDOWS\system32\atiok3x2.dll
              2010-02-11 05:36:00 ----A---- C:\WINDOWS\system32\atipdlxx.dll
              2010-02-11 05:35:44 ----A---- C:\WINDOWS\system32\Oemdspif.dll
              2010-02-11 05:35:24 ----A---- C:\WINDOWS\system32\ati2edxx.dll
              2010-02-11 05:35:10 ----A---- C:\WINDOWS\system32\ati2evxx.dll
              2010-02-11 05:33:56 ----A---- C:\WINDOWS\system32\ati2evxx.exe
              2010-02-11 04:59:16 ----A---- C:\WINDOWS\system32\amdpcom32.dll
              2010-02-11 04:55:40 ----A---- C:\WINDOWS\system32\atikvmag.dll

              ======List of files/folders modified in the last 1 months======

              2010-03-03 19:03:49 ----A---- C:\WINDOWS\win.ini
              2010-03-03 18:21:55 ----RASH---- C:\NTDETECT.COM
              2010-03-03 18:03:49 ----A---- C:\WINDOWS\system.ini

              ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

              R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520]
              R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
              R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
              R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2004-08-19 14848]
              R1 pctgntdi;pctgntdi; \??\C:\WINDOWS\system32\drivers\pctgntdi.sys []
              R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
              R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.7.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-03-03 21361]
              R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-11-25 56816]
              R2 PCTAppEvent;PCTAppEvent Driver; \??\C:\WINDOWS\system32\drivers\PCTAppEvent.sys []
              R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-05-12 3007488]
              R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
              R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2002-08-30 9600]
              R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-10 4397568]
              R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2002-08-30 12288]
              R3 PCTFW-PacketFilter;PCTools Firewall - Packet filter driver; \??\C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys []
              R3 pctNDIS;PC Tools Driver; C:\WINDOWS\system32\DRIVERS\pctNdis.sys [2010-01-07 58816]
              R3 pctplfw;pctplfw; \??\C:\WINDOWS\system32\drivers\pctplfw.sys []
              R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-03 31616]
              R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-03 26624]
              R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-03 57600]
              R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2004-08-03 17024]
              S3 a0z852jy;a0z852jy; C:\WINDOWS\system32\drivers\a0z852jy.sys []
              S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
              S3 RT73;TL-WN321G USB Wireless Adapter; C:\WINDOWS\system32\DRIVERS\rt73.sys [2008-10-21 465152]
              S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-11-27 177152]
              S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
              S3 xnacc;Microsoft Common Controller For Windows Driver Service; C:\WINDOWS\system32\DRIVERS\xnacc.sys [2005-09-15 476672]
              S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

              ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

              R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
              R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
              R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-05-12 540672]
              R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe [2009-12-08 93320]
              R2 PCToolsFirewallPlus;PC Tools Firewall Plus; C:\Program Files\PC Tools Firewall Plus\FWService.exe [2009-11-09 818432]
              R2 RalinkRegistryWriter;Ralink Registry Writer; C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe [2009-01-05 69632]
              S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-05-12 593920]
              S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
              S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
              S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
              S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
              S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2010-01-26 243056]
              S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

              -----------------EOF-----------------
              1. Rusher
                2010-03-03 18:18:17 ----D---- C:\WINDOWS\PeerNet
                2010-03-03 18:18:14 ----HDC---- C:\WINDOWS\$NtUninstallKB817778$
                2010-03-03 18:18:05 ----ASH---- C:\Documents and Settings\Geordy\Application Data\desktop.ini
                2010-03-03 18:18:04 ----SD---- C:\Documents and Settings\Geordy\Application Data\Microsoft
                2010-03-03 18:17:32 ----SHD---- C:\System Volume Information
                2010-03-03 18:17:31 ----A---- C:\WINDOWS\SchedLgU.Txt
                2010-03-03 18:15:03 ----D---- C:\WINDOWS\system32\xircom
                2010-03-03 18:15:03 ----D---- C:\Program Files\xerox
                2010-03-03 18:15:03 ----D---- C:\Program Files\microsoft frontpage
                2010-03-03 18:14:49 ----HDC---- C:\WINDOWS\$NtUninstallKB822603$
                2010-03-03 18:14:42 ----HDC---- C:\WINDOWS\$NtUninstallQ828026$
                2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\jit.dll
                2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\javaee.dll
                2010-03-03 18:14:38 ----A---- C:\WINDOWS\system32\dx3j.dll
                2010-03-03 18:14:38 ----A---- C:\WINDOWS\setdebug.exe
                2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\wjview.exe
                2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\vmhelper.dll
                2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msjdbc10.dll
                2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msjava.dll
                2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\msawt.dll
                2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\jview.exe
                2010-03-03 18:14:37 ----A---- C:\WINDOWS\system32\jdbgmgr.exe
                2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javart.dll
                2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javaprxy.dll
                2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\javacypt.dll
                2010-03-03 18:14:36 ----A---- C:\WINDOWS\system32\clspack.exe
                2010-03-03 18:14:29 ----HDC---- C:\WINDOWS\$NtUninstallKB824105$
                2010-03-03 18:14:20 ----HDC---- C:\WINDOWS\$NtUninstallKB825121$
                2010-03-03 18:14:18 ----D---- C:\Program Files\HighMAT CD Writing Wizard
                2010-03-03 18:14:17 ----D---- C:\WINDOWS\Downloaded Installations
                2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\rpcss.dll
                2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\rpcrt4.dll
                2010-03-03 18:14:15 ----A---- C:\WINDOWS\system32\ole32.dll
                2010-03-03 18:14:11 ----HDC---- C:\WINDOWS\$NtUninstallKB820291$
                2010-03-03 18:14:07 ----HDC---- C:\WINDOWS\$NtUninstallQ815485$
                2010-03-03 18:13:59 ----HDC---- C:\WINDOWS\$NtUninstallKB810217$
                2010-03-03 18:13:52 ----HDC---- C:\WINDOWS\$NtUninstallKB828035$
                2010-03-03 18:13:52 ----A---- C:\WINDOWS\system32\msgsvc.dll
                2010-03-03 18:13:48 ----HDC---- C:\WINDOWS\$NtUninstallKB826939$
                2010-03-03 18:13:46 ----A---- C:\WINDOWS\system32\cryptsvc.dll
                2010-03-03 18:13:44 ----A---- C:\WINDOWS\system32\newdev.dll
                2010-03-03 18:13:43 ----A---- C:\WINDOWS\system32\shell32.dll
                2010-03-03 18:13:35 ----HDC---- C:\WINDOWS\$NtUninstallKB825119$
                2010-03-03 18:13:31 ----HDC---- C:\WINDOWS\$NtUninstallKB824141$
                2010-03-03 18:13:27 ----HDC---- C:\WINDOWS\$NtUninstallKB823182$
                2010-03-03 18:13:23 ----HDC---- C:\WINDOWS\$NtUninstallq329623$
                2010-03-03 18:13:20 ----HDC---- C:\WINDOWS\$NtUninstallKB823980$
                2010-03-03 18:13:16 ----HDC---- C:\WINDOWS\$NtUninstallKB823559$
                2010-03-03 18:13:13 ----D---- C:\Program Files\Common Files
                2010-03-03 18:13:09 ----HDC---- C:\WINDOWS\$NtUninstallKB821557$
                2010-03-03 18:13:02 ----HDC---- C:\WINDOWS\$NtUninstallQ819696$
                2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\wstdecod.dll
                2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\psisdecd.dll
                2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\msyuv.dll
                2010-03-03 18:12:52 ----A---- C:\WINDOWS\system32\msvidctl.dll
                2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmpdxm.dll
                2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmpasf.dll
                2010-03-03 18:12:36 ----A---- C:\WINDOWS\system32\wmerror.dll
                2010-03-03 18:12:35 ----A---- C:\WINDOWS\system32\mspmsnsv.dll
                2010-03-03 18:12:32 ----D---- C:\WINDOWS\RegisteredPackages
                2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmvdmoe2.dll
                2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmspdmoe.dll
                2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmspdmod.dll
                2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmsdmoe2.dll
                2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\wmidx.dll
                2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\mp4sdmod.dll
                2010-03-03 18:12:30 ----A---- C:\WINDOWS\system32\mp43dmod.dll
                2010-03-03 18:12:11 ----HDC---- C:\WINDOWS\$NtUninstallQ817606$
                2010-03-03 18:12:08 ----HDC---- C:\WINDOWS\$NtUninstallQ817287$
                2010-03-03 18:12:05 ----HDC---- C:\WINDOWS\$NtUninstallQ814033$
                2010-03-03 18:11:58 ----HDC---- C:\WINDOWS\$NtUninstallQ811493$
                2010-03-03 18:11:53 ----HDC---- C:\WINDOWS\$NtUninstallQ810833$
                2010-03-03 18:11:50 ----HDC---- C:\WINDOWS\$NtUninstallQ810577$
                2010-03-03 18:11:40 ----HDC---- C:\WINDOWS\$NtUninstallQ810565$
                2010-03-03 18:11:31 ----HDC---- C:\WINDOWS\$NtUninstallQ331953$
                2010-03-03 18:11:21 ----HD---- C:\Program Files\Uninstall Information
                2010-03-03 18:11:18 ----HDC---- C:\WINDOWS\$NtUninstallQ329834$
                2010-03-03 18:11:18 ----D---- C:\8c577054f32042639ee4988cc2f432d6
                2010-03-03 18:11:16 ----HDC---- C:\WINDOWS\$NtUninstallQ329441$
                2010-03-03 18:11:15 ----A---- C:\WINDOWS\system32\srrstr.dll
                2010-03-03 18:11:13 ----HDC---- C:\WINDOWS\$NtUninstallQ329390$
                2010-03-03 18:11:10 ----HDC---- C:\WINDOWS\$NtUninstallQ329170$
                2010-03-03 18:11:07 ----HDC---- C:\WINDOWS\$NtUninstallQ329048$
                2010-03-03 18:11:04 ----HDC---- C:\WINDOWS\$NtUninstallQ328310$
                2010-03-03 18:11:03 ----A---- C:\WINDOWS\system32\xpsp1hfm.exe
                2010-03-03 18:10:54 ----HDC---- C:\WINDOWS\$NtUninstallQ327979$
                2010-03-03 18:10:42 ----HDC---- C:\WINDOWS\$NtUninstallKB282010$
                2010-03-03 18:10:38 ----A---- C:\WINDOWS\817778.EXE
                2010-03-03 18:10:34 ----D---- C:\Program Files\Windows Journal Viewer
                2010-03-03 18:09:59 ----RSD---- C:\WINDOWS\assembly
                2010-03-03 18:09:59 ----D---- C:\WINDOWS\system32\URTTemp
                2010-03-03 18:09:59 ----D---- C:\WINDOWS\Microsoft.NET
                2010-03-03 18:09:57 ----SHD---- C:\WINDOWS\Installer
                2010-03-03 18:09:30 ----A---- C:\WINDOWS\control.ini
                2010-03-03 18:09:30 ----A---- C:\AUTOEXEC.BAT
                2010-03-03 18:09:26 ----A---- C:\WINDOWS\OEWABLog.txt
                2010-03-03 18:09:23 ----A---- C:\WINDOWS\system32\mapi32.dll
                2010-03-03 18:08:55 ----SD---- C:\WINDOWS\Downloaded Program Files
                2010-03-03 18:08:55 ----RD---- C:\WINDOWS\Offline Web Pages
                2010-03-03 18:08:55 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
                2010-03-03 18:08:52 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
                2010-03-03 18:08:37 ----D---- C:\WINDOWS\system32\DirectX
                2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrslv.dll
                2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrdm.dll
                2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\safrcdlg.dll
                2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\racpldlg.dll
                2010-03-03 18:08:13 ----A---- C:\WINDOWS\system32\atrace.dll
                2010-03-03 18:08:10 ----A---- C:\WINDOWS\system32\desktop.ini
                2010-03-03 18:08:10 ----A---- C:\WINDOWS\desktop.ini
                2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
                2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
                2010-03-03 18:08:04 ----A---- C:\WINDOWS\system32\isrdbg32.dll
                2010-03-03 18:08:03 ----A---- C:\WINDOWS\system32\acctres.dll
                2010-03-03 18:08:02 ----D---- C:\Program Files\Fichiers communs\Services
                2010-03-03 18:07:59 ----SD---- C:\WINDOWS\Tasks
                2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\isign32.dll
                2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\icwphbk.dll
                2010-03-03 18:07:59 ----A---- C:\WINDOWS\system32\icwdial.dll
                2010-03-03 18:07:58 ----A---- C:\WINDOWS\system32\inetcfg.dll
                2010-03-03 18:07:58 ----A---- C:\WINDOWS\system32\icfgnt5.dll
                2010-03-03 18:07:57 ----D---- C:\Program Files\Fichiers communs\MSSoap
                2010-03-03 18:07:53 ----D---- C:\WINDOWS\srchasst
                2010-03-03 18:07:52 ----D---- C:\WINDOWS\system32\Macromed
                2010-03-03 18:07:51 ----D---- C:\Program Files\Movie Maker
                2010-03-03 18:07:51 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
                2010-03-03 18:07:51 ----A---- C:\WINDOWS\system32\qmgr.dll
                2010-03-03 18:07:47 ----D---- C:\WINDOWS\system32\Restore
                2010-03-03 18:07:47 ----D---- C:\WINDOWS\PCHealth
                2010-03-03 18:07:47 ----A---- C:\WINDOWS\system32\srsvc.dll
                2010-03-03 18:07:47 ----A---- C:\WINDOWS\system32\srclient.dll
                2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\nmmkcert.dll
                2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\msconf.dll
                2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\mnmdd.dll
                2010-03-03 18:07:46 ----A---- C:\WINDOWS\system32\ils.dll
                2010-03-03 18:07:44 ----D---- C:\Program Files\NetMeeting
                2010-03-03 18:07:43 ----D---- C:\Program Files\Outlook Express
                2010-03-03 18:07:43 ----A---- C:\WINDOWS\system32\schedsvc.dll
                2010-03-03 18:07:42 ----A---- C:\WINDOWS\system32\mstinit.exe
                2010-03-03 18:07:42 ----A---- C:\WINDOWS\system32\mstask.dll
                2010-03-03 18:07:37 ----D---- C:\Program Files\Fichiers communs\System
                2010-03-03 18:07:36 ----D---- C:\Program Files\Internet Explorer
                2010-03-03 18:07:33 ----D---- C:\Program Files\ComPlus Applications
                2010-03-03 18:07:33 ----A---- C:\WINDOWS\vbaddin.ini
                2010-03-03 18:07:33 ----A---- C:\WINDOWS\vb.ini
                2010-03-03 18:07:32 ----D---- C:\WINDOWS\Registration
                2010-03-03 18:07:19 ----HD---- C:\Program Files\WindowsUpdate
                2010-03-03 18:07:19 ----D---- C:\Program Files\Windows Media Player
                2010-03-03 18:07:19 ----D---- C:\Program Files\Services en ligne
                2010-03-03 18:07:17 ----D---- C:\Program Files\Messenger
                2010-03-03 18:07:12 ----D---- C:\Program Files\MSN Gaming Zone
                2010-03-03 18:07:12 ----A---- C:\WINDOWS\system32\write.exe
                2010-03-03 18:07:05 ----A---- C:\WINDOWS\system32\sndvol32.exe
                2010-03-03 18:07:05 ----A---- C:\WINDOWS\system32\sndrec32.exe
                2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\hypertrm.dll
                2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\hticons.dll
                2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avwav.dll
                2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avtapi.dll
                2010-03-03 18:07:04 ----A---- C:\WINDOWS\system32\avmeter.dll
                2010-03-03 18:07:03 ----A---- C:\WINDOWS\system32\winchat.exe
                2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\sol.exe
                2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\getuname.dll
                2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\charmap.exe
                2010-03-03 18:06:58 ----A---- C:\WINDOWS\system32\calc.exe
                2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\winmine.exe
                2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\usrlogon.cmd
                2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tsshutdn.exe
                2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tslabels.ini
                2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\tskill.exe
                2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\reset.exe
                2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\rdshost.exe
                2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\mshearts.exe
                2010-03-03 18:06:57 ----A---- C:\WINDOWS\system32\freecell.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\tsdiscon.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\tscon.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\shadow.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\rwinsta.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\regini.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qwinsta.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qprocess.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\qappsrv.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\mtxoci.dll
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\msg.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\logoff.exe
                2010-03-03 18:06:56 ----A---- C:\WINDOWS\system32\cdmodem.dll
                2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\xolehlp.dll
                2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtctm.dll
                2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtcprf.ini
                2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtclog.dll
                2010-03-03 18:06:55 ----A---- C:\WINDOWS\system32\msdtc.exe
                2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\stclient.dll
                2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxlegih.dll
                2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxex.dll
                2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\mtxdm.dll
                2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
                2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\comrepl.dll
                2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\comaddin.dll
                2010-03-03 18:06:54 ----A---- C:\WINDOWS\system32\colbact.dll
                2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\comuid.dll
                2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\comsnap.dll
                2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\clbcatq.dll
                2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\clbcatex.dll
                2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\catsrvps.dll
                2010-03-03 18:06:53 ----A---- C:\WINDOWS\system32\catsrv.dll
                2010-03-03 18:06:48 ----A---- C:\WINDOWS\system32\wmimgmt.msc
                2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\servdeps.dll
                2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\mmfutil.dll
                2010-03-03 18:06:47 ----A---- C:\WINDOWS\system32\cmprops.dll
                2010-03-03 18:06:43 ----D---- C:\Program Files\Windows NT
                2010-03-03 18:06:43 ----D---- C:\Program Files\MSN
                2010-03-03 18:06:43 ----A---- C:\WINDOWS\system32\mplay32.exe
                2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuauserv.dll
                2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuaueng.dll
                2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\wuauclt.exe
                2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\spider.exe
                2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\mspaint.exe
                2010-03-03 18:06:42 ----A---- C:\WINDOWS\system32\clipbrd.exe
                2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\tscupgrd.exe
                2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
                2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\termsrv.dll
                2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\sessmgr.exe
                2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\remotepg.dll
                2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\rdsaddin.exe
                2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\rdchost.dll
                2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\mstscax.dll
                2010-03-03 18:06:41 ----A---- C:\WINDOWS\system32\mstsc.exe
                2010-03-03 18:06:40 ----D---- C:\WINDOWS\system32\MsDtc
                2010-03-03 18:06:40 ----D---- C:\WINDOWS\system32\Com
                2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpwsx.dll
                2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpsnd.dll
                2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\rdpclip.exe
                2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\msdtcprx.dll
                2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\icaapi.dll
                2010-03-03 18:06:40 ----A---- C:\WINDOWS\system32\cfgbkend.dll
                2010-03-03 18:06:39 ----A---- C:\WINDOWS\system32\comsvcs.dll
                2010-03-03 18:06:39 ----A---- C:\WINDOWS\system32\catsrvut.dll
                2010-03-03 18:06:36 ----A---- C:\WINDOWS\system32\licwmi.dll
                2010-03-03 18:06:18 ----A---- C:\WINDOWS\system32\h323log.txt
                2010-03-03 18:05:28 ----A---- C:\WINDOWS\system32\hidserv.dll
                2010-03-03 18:04:45 ----A---- C:\WINDOWS\system32\usbui.dll
                2010-03-03 18:03:55 ----A---- C:\WINDOWS\imsins.BAK
                2010-03-03 18:03:53 ----D---- C:\Program Files\Fichiers communs\ODBC
                2010-03-03 18:03:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
                2010-03-03 18:03:53 ----A---- C:\WINDOWS\ODBCINST.INI
                2010-03-03 18:03:50 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
                2010-03-03 18:03:49 ----RD---- C:\Program Files
                2010-03-03 18:03:49 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
                2010-03-03 18:03:49 ----D---- C:\Program Files\Fichiers communs
                2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
                2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
                2010-03-03 18:03:48 ----RA---- C:\WINDOWS\system32\kbdazel.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdycc.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbduzb.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdur.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdtat.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdru1.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdru.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdmon.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdbu.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdblr.dll
                2010-03-03 18:03:46 ----RA---- C:\WINDOWS\system32\kbdaze.dll
                2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhept.dll
                2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
                2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
                2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
                2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
                2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdhe.dll
                2010-03-03 18:03:44 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
                2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
                2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlv.dll
                2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
                2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdlt.dll
                2010-03-03 18:03:43 ----RA---- C:\WINDOWS\system32\kbdest.dll
                2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
                2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdsl.dll
                2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdro.dll
                2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
                2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdpl.dll
                2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
                2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdhu.dll
                2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
                2010-03-03 18:03:42 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
                2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdycl.dll
                2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdcz.dll
                2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\kbdcr.dll
                2010-03-03 18:03:41 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
                2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\spxcoins.dll
                2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\irclass.dll
                2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\dgsetup.dll
                2010-03-03 18:03:40 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
                2010-03-03 18:03:39 ----A---- C:\WINDOWS\system32\EqnClass.Dll
                2010-03-03 18:03:38 ----N---- C:\WINDOWS\system32\CONFIG.TMP
                2010-03-03 18:03:38 ----A---- C:\WINDOWS\TASKMAN.EXE
                2010-03-03 18:03:38 ----A---- C:\WINDOWS\system32\batt.dll
                2010-03-03 18:03:38 ----A---- C:\WINDOWS\notepad.exe
                2010-03-03 18:03:37 ----A---- C:\WINDOWS\system32\storprop.dll
                2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET52.tmp
                2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET51.tmp
                2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET50.tmp
                2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4F.tmp
                2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4E.tmp
                2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4D.tmp
                2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4C.tmp
                2010-03-03 18:03:35 ----RA---- C:\WINDOWS\SET4B.tmp
                2010-03-03 18:03:35 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET4A.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET49.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET48.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET47.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET46.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET45.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET44.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET43.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET42.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET41.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET40.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3F.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3E.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3D.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3C.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3B.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET3A.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET39.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET38.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET37.tmp
                2010-03-03 18:03:34 ----RA---- C:\WINDOWS\SET36.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET35.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET34.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET33.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET32.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET31.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET30.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2F.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2E.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2D.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2C.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2B.tmp
                2010-03-03 18:03:33 ----RA---- C:\WINDOWS\SET2A.tmp
                2010-03-03 18:03:32 ----RA---- C:\WINDOWS\SET29.tmp
                2010-03-03 18:03:01 ----RA---- C:\WINDOWS\SETA.tmp
                2010-03-03 18:02:57 ----RA---- C:\WINDOWS\SET3.tmp
                2010-03-03 18:02:53 ----D---- C:\WINDOWS\system32\CatRoot2
                2010-03-03 18:02:53 ----D---- C:\WINDOWS\system32\CatRoot
                2010-03-03 18:02:48 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
                2010-03-03 18:02:32 ----A---- C:\WINDOWS\setuplog.txt
                2010-03-03 18:02:29 ----D---- C:\Documents and Settings
                2010-02-11 05:37:08 ----A---- C:\WINDOWS\system32\atiok3x2.dll
                2010-02-11 05:36:00 ----A---- C:\WINDOWS\system32\atipdlxx.dll
                2010-02-11 05:35:44 ----A---- C:\WINDOWS\system32\Oemdspif.dll
                2010-02-11 05:35:24 ----A---- C:\WINDOWS\system32\ati2edxx.dll
                2010-02-11 05:35:10 ----A---- C:\WINDOWS\system32\ati2evxx.dll
                2010-02-11 05:33:56 ----A---- C:\WINDOWS\system32\ati2evxx.exe
                2010-02-11 04:59:16 ----A---- C:\WINDOWS\system32\amdpcom32.dll
                2010-02-11 04:55:40 ----A---- C:\WINDOWS\system32\atikvmag.dll

                ======List of files/folders modified in the last 1 months======

                2010-03-03 19:03:49 ----A---- C:\WINDOWS\win.ini
                2010-03-03 18:21:55 ----RASH---- C:\NTDETECT.COM
                2010-03-03 18:03:49 ----A---- C:\WINDOWS\system.ini

                ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520]
                R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
                R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
                R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2004-08-19 14848]
                R1 pctgntdi;pctgntdi; \??\C:\WINDOWS\system32\drivers\pctgntdi.sys []
                R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
                R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.7.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-03-03 21361]
                R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-11-25 56816]
                R2 PCTAppEvent;PCTAppEvent Driver; \??\C:\WINDOWS\system32\drivers\PCTAppEvent.sys []
                R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-05-12 3007488]
                R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
                R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2002-08-30 9600]
                R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-10 4397568]
                R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2002-08-30 12288]
                R3 PCTFW-PacketFilter;PCTools Firewall - Packet filter driver; \??\C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys []
                R3 pctNDIS;PC Tools Driver; C:\WINDOWS\system32\DRIVERS\pctNdis.sys [2010-01-07 58816]
                R3 pctplfw;pctplfw; \??\C:\WINDOWS\system32\drivers\pctplfw.sys []
                R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-03 31616]
                R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-03 26624]
                R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-03 57600]
                R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2004-08-03 17024]
                S3 a0z852jy;a0z852jy; C:\WINDOWS\system32\drivers\a0z852jy.sys []
                S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
                S3 RT73;TL-WN321G USB Wireless Adapter; C:\WINDOWS\system32\DRIVERS\rt73.sys [2008-10-21 465152]
                S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-11-27 177152]
                S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
                S3 xnacc;Microsoft Common Controller For Windows Driver Service; C:\WINDOWS\system32\DRIVERS\xnacc.sys [2005-09-15 476672]
                S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

                ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
                R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
                R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-05-12 540672]
                R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe [2009-12-08 93320]
                R2 PCToolsFirewallPlus;PC Tools Firewall Plus; C:\Program Files\PC Tools Firewall Plus\FWService.exe [2009-11-09 818432]
                R2 RalinkRegistryWriter;Ralink Registry Writer; C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe [2009-01-05 69632]
                S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-05-12 593920]
                S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
                S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
                S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
                S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
                S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2010-01-26 243056]
                S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

                -----------------EOF-----------------
                1. Rusher
                  Logfile of random's system information tool 1.06 (written by random/random)
                  Run by Geordy at 2010-03-05 21:14:57
                  Microsoft Windows XP Édition familiale Service Pack 2
                  System drive C: has 427 GB (90%) free of 477 GB
                  Total RAM: 446 MB (39% free)

                  Logfile of Trend Micro HijackThis v2.0.2
                  Scan saved at 21:14:58, on 05/03/2010
                  Platform: Windows XP SP2 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
                  Boot mode: Normal

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\Ati2evxx.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\Program Files\Avira\AntiVir Desktop\sched.exe
                  C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                  c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe
                  C:\Program Files\PC Tools Firewall Plus\FWService.exe
                  C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe
                  C:\WINDOWS\system32\Ati2evxx.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\WINDOWS\system32\rundll32.exe
                  C:\WINDOWS\system32\wscntfy.exe
                  C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
                  C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
                  C:\WINDOWS\RTHDCPL.EXE
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\TP-LINK\TL-WN321G\COMMON\TWCU.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\Documents and Settings\Geordy\Bureau\RSIT.exe
                  C:\Program Files\Trend Micro\HijackThis\Geordy.exe

                  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                  R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
                  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                  O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
                  O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
                  O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
                  O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
                  O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                  O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                  O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
                  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                  O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                  O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
                  O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                  O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
                  O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
                  O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
                  O4 - HKCU\..\Run: [cdoosoft] C:\DOCUME~1\Geordy\LOCALS~1\Temp\herss.exe
                  O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
                  O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
                  O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
                  O4 - Global Startup: TL-WN321G Wireless Utility.lnk = C:\Program Files\TP-LINK\TL-WN321G\COMMON\TWCU.exe
                  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O17 - HKLM\System\CCS\Services\Tcpip\..\{E2AE303D-8394-43FE-A9BA-58F08702E139}: NameServer = 212.27.40.241,212.27.40.240
                  O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
                  O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
                  O20 - AppInit_DLLs:
                  O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
                  O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                  O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                  O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                  O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
                  O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe
                  O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - C:\Program Files\PC Tools Firewall Plus\FWService.exe
                  O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Unknown owner - C:\Program Files\TP-LINK\TL-WN321G\COMMON\RegistryWriter.exe
                  2. i am toto
                    pas besoin d'explication, passe un coup de RSIT .

                    Tu telecahge RSIT : https://www.commentcamarche.net/telecharger/securite/19597-rsit/

                    (tuto : https://forum.pcastuces.com/randoms_system_information_tool_rsit-f31s31.htm

                    tu psot le rapport.

                    aprés tu telecahge ZHPDiag :

                    tu le telecahge

                    tu l'installe,

                    tu clique sur l'icon ZHPDiag

                    tu clique sur la loupe et tu touche a rien jusqu'a le rapport

                    tu post le rapport

                    aprés tu telecahge cclener, tu fait une analyse et tu netoie (normalement c'est pour supprimerles fichier qui serve arien , mais des fichier peuve se servired de ses fichier pour se reinstaller.
                    • 1
                    • 2

                    Discussions similaires

                    Win64 malware gen
                    jules555

                    1 réponse
                    supprimer tor.jack android
                    sabinelouisonbruno

                    4 réponses
                    Win64:Malware-gen
                    ptb35

                    3 réponses
                    Infection malware sur Android ?
                    ajaax9

                    9 réponses
                    Antimalware service Executable consomme 45% de RAM.
                    KalenShiv

                    8 réponses