Pubs intempestives

Résolu
Bonjour,
Merci d'avance de votre attention et de votre aide.
Suite à une réinstall de windows Xp, je suis en permanence envahi de pubs, et de virus détectés par Antivir.
Spybot, ccleaner, adware, scan antivir, utilisation de firefox... rien y fait : elles sont encore et toujours là...
Une idée?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:08:32, on 11/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\iesvcmon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\documents and settings\haku\local settings\application data\akvhkewz.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\WINDOWS\system32\regsvr32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Easy CD-DA Extractor 8\ezcddax.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceHelper.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\distnoted.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe
C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Documents and Settings\haku\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ecofree.net/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: globaladsolution - {54a50caa-5935-31ff-9be7-c2f5cde590f8} - C:\WINDOWS\system32\nslB.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: globaladsolution browser enhancer - {7FD0469E-A426-9E18-F751-22CA5B17980B} - C:\WINDOWS\system32\zealqmrdgyxrxjn.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [iesvcmon] "C:\WINDOWS\system32\iesvcmon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [moprwpnjskozo] C:\WINDOWS\System32\regsvr32.exe /s "C:\WINDOWS\system32\zealqmrdgyxrxjn.dll"
O4 - HKLM\..\RunOnce: [SpybotDeletingA7548] command /c del "C:\WINDOWS\system32\zealqmrdgyxrxjn.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingC4724] cmd /c del "C:\WINDOWS\system32\zealqmrdgyxrxjn.dll_old"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe" /NoDialog
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [akvhkewz] "c:\documents and settings\haku\local settings\application data\akvhkewz.exe" akvhkewz
O4 - HKCU\..\RunOnce: [SpybotDeletingB454] command /c del "C:\WINDOWS\system32\zealqmrdgyxrxjn.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingD9241] cmd /c del "C:\WINDOWS\system32\zealqmrdgyxrxjn.dll_old"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Startup: ppcb_32.lnk = ?
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - https://sdlc-esd.oracle.com/ESD5/JSCDL/jre/6u10-b92-b/jinstall-6u10-windows-i586-jc.cab?GroupName=JSC&FilePath=/ESD5/JSCDL/jre/6u10-b92-b/jinstall-6u10-windows-i586-jc.cab&BHost=javadl.sun.com&File=jinstall-6u10-windows-i586-jc.cab&AuthParam=1580987764_a5235be86e79daca0cfb05ddc36bfbcd&ext=.cab
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 9402 bytes
Configuration: Windows XP
Firefox 2.0.0.18

36 réponses

Résumé de la discussion

Suite à une réinstallation de Windows XP, la machine est envahie de publicités et de virus détectés par AntiVir, et le log HijackThis révèle de nombreux composants suspects et modules d’outils publicitaires. Des éléments de réponse suggèrent d’employer Navilog1 pour diagnostiquer l’infection, puis de poster le rapport obtenu afin d’identifier les éléments à supprimer dans la prochaine réponse. En cas de refus ou échec, une seconde option consiste à lancer RSIT et à analyser les rapports pour cibler les éléments malveillants à supprimer ensuite. D'autres éléments du log révèlent des services et tâches récurrentes associées à des logiciels tiers, nécessitant éventuellement une désactivation ciblée et une vérification des autorisations pour éviter des réapparitions.

Bobot (l’IA à votre service)
  1. Non ça ira...
    Merci pour ce travail vraiment pro.
    C'est très gentil de ta part.

    Bonne continuation et merci d'aider des imprudents du net comme moi!
    1. Modérateur
      Tu peux désinstaller ToolsCleaner.

      Des questions ? Des remarques ?
      1. Voilà Chef!
        Merci pour tous ces conseils, je vais essayer d'être plus vigilant...
        Résolu!

        [ Rapport ToolsCleaner version 2.2.7 (par A.Rothstein & dj QUIOU) ]

        -->- Recherche:

        C:\fixnavi.txt: trouvé !
        C:\cleannavi.txt: trouvé !
        C:\_OtMoveIt: trouvé !
        C:\Rsit: trouvé !
        C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: trouvé !
        C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: trouvé !
        C:\Documents and Settings\haku\Bureau\Navilog1.exe: trouvé !
        C:\Documents and Settings\haku\Bureau\OTMoveIt3.exe: trouvé !
        C:\Documents and Settings\haku\Bureau\Rsit.exe: trouvé !
        C:\Program Files\Navilog1: trouvé !
        C:\Program Files\Navilog1\Navilog1.bat: trouvé !

        ---------------------------------
        -->- Suppression:

        C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: supprimé !
        C:\Documents and Settings\haku\Bureau\Navilog1.exe: supprimé !
        C:\Program Files\Navilog1\Navilog1.bat: supprimé !
        C:\fixnavi.txt: supprimé !
        C:\cleannavi.txt: supprimé !
        C:\Documents and Settings\haku\Bureau\OTMoveIt3.exe: supprimé !
        C:\Documents and Settings\haku\Bureau\Rsit.exe: supprimé !
        C:\_OtMoveIt: supprimé !
        C:\Rsit: supprimé !
        C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: supprimé !
        C:\Program Files\Navilog1: supprimé !
        1. Modérateur
          1/

          ---> Désinstalle HijackThis.

          ---> Télécharge ToolsCleaner2 sur ton Bureau.
          * Double-clique sur ToolsCleaner2.exe pour le lancer.
          * Clique sur Recherche et laisse le scan agir.
          * Clique sur Suppression pour finaliser.
          * Tu peux, si tu le souhaites, te servir des Options Facultatives.
          * Clique sur Quitter pour obtenir le rapport.
          * Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

          2/

          ---> Il est nécessaire de désactiver puis réactiver la restauration système pour la purger :
          http://www.infos-du-net.com/forum/272480-11-desactiver-activer-restauration-systeme

          ---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème :
          https://www.vulgarisation-informatique.com/creer-point-restauration.php

          3/

          Version française d'Antivir :
          http://www.commentcamarche.net/telecharger/telecharger 55 antivir

          Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.

          Comme navigateur, utilise plutôt Mozilla Firefox qu'Internet Explorer. Tu peux utiliser l'extension Noscript pour plus de sécurité.

          Vérifie que les mises à jour automatiques sont bien activées (Menu Démarrer, clique droit sur Poste de travail, Onglet Mises à jour automatiques).

          Tu peux aussi modifier le fichier Hosts pour améliorer la sécurité de ton PC :
          http://www.commentcamarche.net/faq/sujet 5993 modifier son fichier hosts
          https://blog.sosordi.net/category/articles

          Par rapport au P2P :
          http://www.libellules.ch/...

          Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) :
          https://www.malekal.com/fichiers/projetantimalwares/prevention-protection.pdf

          Sois plus vigilant sur Internet ;)
          1. Logfile of Trend Micro HijackThis v2.0.2
            Scan saved at 20:51:25, on 12/12/2008
            Platform: Windows XP SP3 (WinNT 5.01.2600)
            MSIE: Internet Explorer v7.00 (7.00.6000.16762)
            Boot mode: Normal

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\Ati2evxx.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
            C:\WINDOWS\system32\Ati2evxx.exe
            C:\WINDOWS\Explorer.EXE
            C:\WINDOWS\system32\spoolsv.exe
            C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
            C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
            C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
            C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
            C:\Program Files\iTunes\iTunesHelper.exe
            C:\Program Files\Java\jre6\bin\jusched.exe
            C:\WINDOWS\system32\ctfmon.exe
            C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
            C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
            C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe
            C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
            C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
            C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
            C:\Program Files\Bonjour\mDNSResponder.exe
            C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
            C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
            C:\Program Files\Java\jre6\bin\jqs.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
            C:\Program Files\iPod\bin\iPodService.exe
            C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
            C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
            C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
            C:\Program Files\Windows Live\Messenger\usnsvc.exe
            C:\WINDOWS\system32\wuauclt.exe
            C:\Program Files\Internet Explorer\iexplore.exe
            C:\Documents and Settings\haku\Bureau\HiJackThis.exe

            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ecofree.net/
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
            R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
            O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
            O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
            O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
            O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
            O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
            O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
            O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
            O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
            O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
            O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
            O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
            O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
            O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
            O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
            O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
            O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
            O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
            O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
            O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe" /NoDialog
            O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
            O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
            O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
            O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
            O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
            O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
            O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
            O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
            O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
            O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
            O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
            O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
            O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
            O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
            O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
            O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
            O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
            O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
            O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
            O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
            O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
            O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
            O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
            O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
            1. Modérateur
              "Est-ce que la Maj de IE est obligatoire?"
              ---> C'est beaucoup mieux.
              1. Bonsoir.
                Merci encore pour hier...
                Est-ce que la Maj de IE est obligatoire? Merci. Car je peux très bien tourner sous firefox...
                1. je retenterai la maj de IE aussi en m'aidant du lien donné.
                  Merci
                  1. Il est tard, je prends à 8h demain, je regarde demain matin si j'ai encore les problèmes de pubs mais là c'est nettement mieux je pense!
                    Merci pour tout et si demain je retrouve mon pc propre je passe en résolu.

                    Encore merci t'es génial!
                    Respectueusement.
                    1. Modérateur
                      Je crois que ça n'a pas fonctionné d'après le rapport HJT.
                      1. Logfile of Trend Micro HijackThis v2.0.2
                        Scan saved at 00:58:02, on 12/12/2008
                        Platform: Windows XP SP3 (WinNT 5.01.2600)
                        MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
                        Boot mode: Normal

                        Running processes:
                        C:\WINDOWS\System32\smss.exe
                        C:\WINDOWS\system32\winlogon.exe
                        C:\WINDOWS\system32\services.exe
                        C:\WINDOWS\system32\lsass.exe
                        C:\WINDOWS\system32\Ati2evxx.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                        C:\WINDOWS\system32\spoolsv.exe
                        C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                        C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                        C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                        C:\Program Files\Bonjour\mDNSResponder.exe
                        C:\Program Files\Java\jre6\bin\jqs.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\WINDOWS\system32\Ati2evxx.exe
                        C:\WINDOWS\Explorer.EXE
                        C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                        C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
                        C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
                        C:\Program Files\iTunes\iTunesHelper.exe
                        C:\Program Files\Java\jre6\bin\jusched.exe
                        C:\WINDOWS\system32\ctfmon.exe
                        C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
                        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                        C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe
                        C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
                        C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
                        C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
                        C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                        C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
                        C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
                        C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
                        C:\Program Files\iPod\bin\iPodService.exe
                        C:\Program Files\Mozilla Firefox\firefox.exe
                        C:\Documents and Settings\haku\Bureau\HiJackThis.exe

                        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ecofree.net/
                        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                        O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                        O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                        O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
                        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
                        O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
                        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                        O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
                        O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                        O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                        O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
                        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                        O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                        O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                        O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe" /NoDialog
                        O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
                        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
                        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                        O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
                        O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
                        O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
                        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                        O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                        O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                        O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
                        O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
                        O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                        O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                        O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                        O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                        O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
                        O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                        O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                        O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                        O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
                        O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                        1. Modérateur
                          ---> Désinstalle Navilog1.

                          ---> Relance HijackThis et choisis Do a system scan only.

                          ---> Coche les cases qui sont devant les lignes suivantes :

                          O4 - HKLM\..\Run: [iesvcmon] "C:\WINDOWS\system32\iesvcmon.exe"

                          O4 - Startup: ppcb_32.lnk = ?

                          ---> Clique en bas sur Fix checked. Mets oui si HijackThis te demande quelque chose.

                          ---> Redémarre ton PC.

                          ---> Mets à jour Internet Explorer :
                          http://www.microsoft.com/downloads/details.aspx?FamilyId=9AE91EBE-3385-447C-8A30-081805B2F90B&displaylang=fr

                          Vu que tu as le SP3 :
                          http://www.technos-sources.com/tutorial-installer-ie7-apres-avoir-installe-sp3-windows-xp-98.aspx

                          ---> Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) :
                          * Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
                          * Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
                          * Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs (Sauvegarde la base de registre).

                          ---> Poste un nouveau rapport HijackThis.
                          1. PARDON

                            ========== PROCESSES ==========
                            Process explorer.exe killed successfully.
                            ========== FILES ==========
                            C:\Program Files\ppcbooster moved successfully.
                            ========== COMMANDS ==========
                            File delete failed. C:\DOCUME~1\haku\LOCALS~1\Temp\NGLALog.txt scheduled to be deleted on reboot.
                            File delete failed. C:\DOCUME~1\haku\LOCALS~1\Temp\~DF130B.tmp scheduled to be deleted on reboot.
                            File delete failed. C:\DOCUME~1\haku\LOCALS~1\Temp\~DFA2E6.tmp scheduled to be deleted on reboot.
                            File delete failed. C:\DOCUME~1\haku\LOCALS~1\Temp\~DFA2F8.tmp scheduled to be deleted on reboot.
                            File delete failed. C:\DOCUME~1\haku\LOCALS~1\Temp\~DFF85.tmp scheduled to be deleted on reboot.
                            User's Temp folder emptied.
                            User's Temporary Internet Files folder emptied.
                            User's Internet Explorer cache folder emptied.
                            Local Service Temp folder emptied.
                            File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
                            Local Service Temporary Internet Files folder emptied.
                            File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_da0.dat scheduled to be deleted on reboot.
                            Windows Temp folder emptied.
                            Java cache emptied.
                            File delete failed. C:\Documents and Settings\haku\Local Settings\Application Data\Mozilla\Firefox\Profiles\16b84lia.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
                            File delete failed. C:\Documents and Settings\haku\Local Settings\Application Data\Mozilla\Firefox\Profiles\16b84lia.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
                            File delete failed. C:\Documents and Settings\haku\Local Settings\Application Data\Mozilla\Firefox\Profiles\16b84lia.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
                            File delete failed. C:\Documents and Settings\haku\Local Settings\Application Data\Mozilla\Firefox\Profiles\16b84lia.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
                            FireFox cache emptied.
                            Temp folders emptied.
                            Explorer started successfully

                            OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 12112008_235600

                            Files moved on Reboot...
                            C:\DOCUME~1\haku\LOCALS~1\Temp\NGLALog.txt moved successfully.
                            File C:\DOCUME~1\haku\LOCALS~1\Temp\~DF130B.tmp not found!
                            File C:\DOCUME~1\haku\LOCALS~1\Temp\~DFA2E6.tmp not found!
                            File C:\DOCUME~1\haku\LOCALS~1\Temp\~DFA2F8.tmp not found!
                            File C:\DOCUME~1\haku\LOCALS~1\Temp\~DFF85.tmp not found!
                            File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
                            File C:\WINDOWS\temp\Perflib_Perfdata_da0.dat not found!
                            C:\Documents and Settings\haku\Local Settings\Application Data\Mozilla\Firefox\Profiles\16b84lia.default\Cache\_CACHE_001_ moved successfully.
                            C:\Documents and Settings\haku\Local Settings\Application Data\Mozilla\Firefox\Profiles\16b84lia.default\Cache\_CACHE_002_ moved successfully.
                            C:\Documents and Settings\haku\Local Settings\Application Data\Mozilla\Firefox\Profiles\16b84lia.default\Cache\_CACHE_003_ moved successfully.
                            C:\Documents and Settings\haku\Local Settings\Application Data\Mozilla\Firefox\Profiles\16b84lia.default\Cache\_CACHE_MAP_ moved successfully.
                            1. 2008-11-23 23:56:12 ----A---- C:\WINDOWS\win.ini
                              2008-11-23 23:47:41 ----RASH---- C:\NTDETECT.COM
                              2008-11-23 23:19:52 ----A---- C:\WINDOWS\system.ini

                              ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                              R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys []
                              R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-11-26 75072]
                              R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 40576]
                              R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-03-01 28352]
                              R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
                              R3 ati2mtag;ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2004-08-25 787456]
                              R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
                              R3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2003-03-04 145408]
                              R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2008-04-17 15464]
                              R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\DRIVERS\LVUSBSta.sys [2005-01-31 22016]
                              R3 PID_0928;Logitech QuickCam Express(PID_0928); C:\WINDOWS\system32\DRIVERS\LV561AV.SYS [2005-01-31 211712]
                              R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2002-12-19 539008]
                              R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
                              R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
                              R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
                              R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
                              R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
                              R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
                              R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
                              S3 catchme;catchme; \??\C:\DOCUME~1\haku\LOCALS~1\Temp\catchme.sys []
                              S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
                              S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
                              S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
                              S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
                              S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2008-05-07 17536]
                              S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2008-05-07 20864]
                              S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
                              S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
                              S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
                              S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2008-06-06 8064]
                              S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2008-11-07 32000]
                              S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-13 26112]
                              S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
                              S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
                              S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

                              ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                              R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2008-11-24 611664]
                              R2 AntiVirScheduler;Avira AntiVir Personal - Free Antivirus Scheduler; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-15 68865]
                              R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-15 151297]
                              R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-11-07 132424]
                              R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2004-08-25 389120]
                              R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888]
                              R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2008-11-10 152984]
                              R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-11-20 536872]
                              R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-08-07 575488]
                              R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
                              S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2004-08-25 516096]
                              S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2003-02-20 32768]
                              S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-11-24 137200]
                              S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]

                              -----------------EOF-----------------
                              1. ======Scheduled tasks folder======

                                C:\WINDOWS\tasks\AppleSoftwareUpdate.job

                                ======Registry dump======

                                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
                                Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

                                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
                                Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2008-09-15 1562960]

                                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
                                Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-11-10 320920]

                                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

                                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
                                Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2008-11-24 251504]

                                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
                                Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll [2008-11-24 657904]

                                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
                                Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll [2008-11-24 522224]

                                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
                                Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-11-10 34816]

                                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
                                JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2008-11-10 73728]

                                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
                                {2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2008-11-24 251504]

                                [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
                                "ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2004-08-25 339968]
                                "avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]
                                "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
                                "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-11-04 413696]
                                "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-11-20 290088]
                                "iesvcmon"=C:\WINDOWS\system32\iesvcmon.exe []
                                "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2008-11-10 136600]

                                [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
                                "Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2008-12-03 399504]
                                "Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2008-12-03 1265296]

                                [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
                                "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
                                "MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]
                                "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-11-24 39408]
                                "Nokia.PCSync"=C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe [2008-06-17 1249280]
                                "PC Suite Tray"=C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2008-10-02 1124352]

                                C:\Documents and Settings\haku\Menu Démarrer\Programmes\Démarrage
                                OpenOffice.org 2.0.lnk - C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
                                ppcb_32.lnk - C:\Program Files\ppcbooster\ppcb_32.exe

                                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
                                C:\WINDOWS\system32\Ati2evxx.dll [2004-08-25 86016]

                                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

                                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

                                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

                                [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
                                "dontdisplaylastusername"=0
                                "legalnoticecaption"=
                                "legalnoticetext"=
                                "shutdownwithoutlogon"=1
                                "undockwithoutlogon"=1

                                [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
                                "NoDriveTypeAutoRun"=145

                                [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
                                "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
                                "C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
                                "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
                                "C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
                                "C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
                                "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
                                "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

                                [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
                                "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
                                "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
                                "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
                                "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

                                ======List of files/folders created in the last 1 months======

                                2008-12-12 00:11:54 ----D---- C:\rsit
                                2008-12-12 00:11:03 ----A---- C:\ioezqayz.txt
                                2008-12-12 00:05:45 ----D---- C:\Documents and Settings\haku\Application Data\Malwarebytes
                                2008-12-12 00:05:39 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
                                2008-12-12 00:05:39 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
                                2008-12-11 23:30:10 ----A---- C:\WINDOWS\system32\javaws.exe
                                2008-12-11 23:30:10 ----A---- C:\WINDOWS\system32\javaw.exe
                                2008-12-11 23:30:10 ----A---- C:\WINDOWS\system32\java.exe
                                2008-12-11 23:07:25 ----D---- C:\_OTMoveIt
                                2008-12-11 22:27:51 ----A---- C:\cleannavi.txt
                                2008-12-11 22:19:59 ----A---- C:\fixnavi.txt
                                2008-12-11 22:19:36 ----D---- C:\Program Files\Navilog1
                                2008-12-11 19:14:28 ----A---- C:\WINDOWS\wininit.ini
                                2008-12-10 22:20:42 ----A---- C:\WINDOWS\system32\wmpns.dll
                                2008-12-10 22:20:09 ----D---- C:\WINDOWS\Prefetch
                                2008-12-10 22:12:07 ----D---- C:\WINDOWS\system32\fr-fr
                                2008-12-10 22:12:05 ----D---- C:\WINDOWS\l2schemas
                                2008-12-10 22:12:04 ----D---- C:\WINDOWS\system32\fr
                                2008-12-10 22:12:04 ----D---- C:\WINDOWS\system32\bits
                                2008-12-10 21:50:53 ----N---- C:\WINDOWS\system32\wmphoto.dll
                                2008-12-10 21:50:49 ----N---- C:\WINDOWS\system32\wlanapi.dll
                                2008-12-10 21:50:47 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
                                2008-12-10 21:50:47 ----N---- C:\WINDOWS\system32\windowscodecs.dll
                                2008-12-10 21:50:45 ----N---- C:\WINDOWS\system32\verclsid.exe
                                2008-12-10 21:50:41 ----N---- C:\WINDOWS\system32\tzchange.exe
                                2008-12-10 21:50:41 ----N---- C:\WINDOWS\system32\tspkg.dll
                                2008-12-10 21:50:41 ----N---- C:\WINDOWS\system32\tsgqec.dll
                                2008-12-10 21:50:29 ----N---- C:\WINDOWS\system32\setupn.exe
                                2008-12-10 21:50:27 ----N---- C:\WINDOWS\system32\rhttpaa.dll
                                2008-12-10 21:50:26 ----N---- C:\WINDOWS\system32\rasqec.dll
                                2008-12-10 21:50:24 ----N---- C:\WINDOWS\system32\qutil.dll
                                2008-12-10 21:50:23 ----N---- C:\WINDOWS\system32\qcliprov.dll
                                2008-12-10 21:50:23 ----N---- C:\WINDOWS\system32\qagentrt.dll
                                2008-12-10 21:50:23 ----N---- C:\WINDOWS\system32\qagent.dll
                                2008-12-10 21:50:22 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
                                2008-12-10 21:50:20 ----N---- C:\WINDOWS\system32\onex.dll
                                2008-12-10 21:50:13 ----N---- C:\WINDOWS\system32\napstat.exe
                                2008-12-10 21:50:13 ----N---- C:\WINDOWS\system32\napmontr.dll
                                2008-12-10 21:50:13 ----N---- C:\WINDOWS\system32\napipsec.dll
                                2008-12-10 21:50:13 ----N---- C:\WINDOWS\system32\msxml6r.dll
                                2008-12-10 21:50:13 ----N---- C:\WINDOWS\system32\msxml6.dll
                                2008-12-10 21:50:11 ----N---- C:\WINDOWS\system32\msshavmsg.dll
                                2008-12-10 21:50:11 ----N---- C:\WINDOWS\system32\mssha.dll
                                2008-12-10 21:50:01 ----N---- C:\WINDOWS\system32\mmcperf.exe
                                2008-12-10 21:50:01 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
                                2008-12-10 21:50:01 ----N---- C:\WINDOWS\system32\mmcex.dll
                                2008-12-10 21:50:01 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
                                2008-12-10 21:49:54 ----N---- C:\WINDOWS\system32\l2gpstore.dll
                                2008-12-10 21:49:54 ----N---- C:\WINDOWS\system32\kmsvc.dll
                                2008-12-10 21:49:53 ----N---- C:\WINDOWS\system32\kbdpash.dll
                                2008-12-10 21:49:53 ----N---- C:\WINDOWS\system32\kbdnepr.dll
                                2008-12-10 21:49:53 ----N---- C:\WINDOWS\system32\kbdiultn.dll
                                2008-12-10 21:49:53 ----N---- C:\WINDOWS\system32\kbdbhc.dll
                                2008-12-10 21:49:51 ----N---- C:\WINDOWS\system32\smtpapi.dll
                                2008-12-10 21:49:51 ----N---- C:\WINDOWS\system32\rwnh.dll
                                2008-12-10 21:49:44 ----A---- C:\WINDOWS\005164_.tmp
                                2008-12-10 21:49:42 ----N---- C:\WINDOWS\system32\eapsvc.dll
                                2008-12-10 21:49:42 ----N---- C:\WINDOWS\system32\eapqec.dll
                                2008-12-10 21:49:42 ----N---- C:\WINDOWS\system32\eappprxy.dll
                                2008-12-10 21:49:42 ----N---- C:\WINDOWS\system32\eapphost.dll
                                2008-12-10 21:49:42 ----N---- C:\WINDOWS\system32\eappgnui.dll
                                2008-12-10 21:49:42 ----N---- C:\WINDOWS\system32\eappcfg.dll
                                2008-12-10 21:49:42 ----N---- C:\WINDOWS\system32\eapp3hst.dll
                                2008-12-10 21:49:42 ----N---- C:\WINDOWS\system32\eapolqec.dll
                                2008-12-10 21:49:41 ----N---- C:\WINDOWS\system32\dot3ui.dll
                                2008-12-10 21:49:41 ----N---- C:\WINDOWS\system32\dot3svc.dll
                                2008-12-10 21:49:41 ----N---- C:\WINDOWS\system32\dot3msm.dll
                                2008-12-10 21:49:41 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
                                2008-12-10 21:49:41 ----N---- C:\WINDOWS\system32\dot3dlg.dll
                                2008-12-10 21:49:41 ----N---- C:\WINDOWS\system32\dot3cfg.dll
                                2008-12-10 21:49:41 ----N---- C:\WINDOWS\system32\dot3api.dll
                                2008-12-10 21:49:40 ----N---- C:\WINDOWS\system32\dimsroam.dll
                                2008-12-10 21:49:40 ----N---- C:\WINDOWS\system32\dimsntfy.dll
                                2008-12-10 21:49:40 ----N---- C:\WINDOWS\system32\dhcpqec.dll
                                2008-12-10 21:49:39 ----N---- C:\WINDOWS\system32\credssp.dll
                                2008-12-10 21:49:36 ----N---- C:\WINDOWS\system32\bitsprx4.dll
                                2008-12-10 21:49:36 ----N---- C:\WINDOWS\system32\azroles.dll
                                2008-12-10 21:49:30 ----N---- C:\WINDOWS\system32\aaclient.dll
                                2008-12-10 21:35:27 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
                                2008-12-10 21:00:20 ----D---- C:\WINDOWS\system32\PreInstall
                                2008-12-10 21:00:18 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
                                2008-12-10 17:22:47 ----A---- C:\WINDOWS\system32\muweb.dll
                                2008-12-10 17:22:47 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
                                2008-12-10 17:22:46 ----A---- C:\WINDOWS\system32\mucltui.dll
                                2008-12-10 15:57:19 ----HDC---- C:\WINDOWS\$NtUninstallWdf01005$
                                2008-12-10 15:54:59 ----D---- C:\Documents and Settings\haku\Application Data\Nokia
                                2008-12-10 15:54:57 ----D---- C:\Documents and Settings\haku\Application Data\PC Suite
                                2008-12-10 15:54:56 ----D---- C:\Documents and Settings\All Users\Application Data\PC Suite
                                2008-12-10 15:50:55 ----D---- C:\Program Files\Fichiers communs\PCSuite
                                2008-12-10 15:50:52 ----D---- C:\Program Files\Fichiers communs\Nokia
                                2008-12-10 15:50:25 ----D---- C:\Program Files\DIFX
                                2008-12-10 15:50:10 ----D---- C:\Program Files\PC Connectivity Solution
                                2008-12-10 15:49:57 ----A---- C:\WINDOWS\system32\wdfcoinstaller01005.dll
                                2008-12-10 15:49:57 ----A---- C:\WINDOWS\system32\nmwcdcocls.dll
                                2008-12-10 15:49:52 ----A---- C:\WINDOWS\system32\nmwcdcls.dll
                                2008-12-10 15:49:50 ----D---- C:\Program Files\Nokia
                                2008-12-10 15:48:47 ----D---- C:\Documents and Settings\All Users\Application Data\Installations
                                2008-12-10 14:50:18 ----D---- C:\Documents and Settings\haku\Application Data\Apple Computer
                                2008-12-10 14:50:11 ----A---- C:\WINDOWS\system32\GEARAspi.dll
                                2008-12-10 14:49:53 ----D---- C:\Program Files\iPod
                                2008-12-10 14:49:50 ----D---- C:\Program Files\iTunes
                                2008-12-10 14:49:50 ----D---- C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
                                2008-12-10 14:49:36 ----D---- C:\Program Files\Bonjour
                                2008-12-10 14:48:57 ----D---- C:\Program Files\QuickTime
                                2008-12-10 14:48:56 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer
                                2008-12-10 14:48:36 ----D---- C:\Program Files\Apple Software Update
                                2008-12-10 14:48:11 ----D---- C:\Program Files\Fichiers communs\Apple
                                2008-12-10 14:48:10 ----D---- C:\Documents and Settings\All Users\Application Data\Apple
                                2008-12-08 19:58:53 ----D---- C:\Program Files\PhotoBrush
                                2008-12-08 18:00:27 ----D---- C:\Program Files\AAALOGO2008
                                2008-12-03 23:39:25 ----A---- C:\WINDOWS\CDPLAYER.INI
                                2008-11-28 07:51:20 ----D---- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
                                2008-11-27 20:39:42 ----D---- C:\Program Files\Messenger Plus! Live
                                2008-11-26 20:38:05 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
                                2008-11-26 20:37:46 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
                                2008-11-26 20:37:20 ----HDC---- C:\WINDOWS\$NtUninstallKB915865$
                                2008-11-26 20:37:19 ----N---- C:\WINDOWS\system32\xmllite.dll
                                2008-11-26 20:35:41 ----A---- C:\WINDOWS\system32\MRT.exe
                                2008-11-26 20:35:38 ----D---- C:\WINDOWS\network diagnostic
                                2008-11-26 20:35:36 ----HDC---- C:\WINDOWS\$NtUninstallKB914440$
                                2008-11-26 20:35:27 ----HDC---- C:\WINDOWS\$NtUninstallKB904942$
                                2008-11-26 20:35:27 ----HD---- C:\WINDOWS\$hf_mig$
                                2008-11-26 17:38:11 ----D---- C:\Program Files\Easy CD-DA Extractor 8
                                2008-11-26 17:36:57 ----D---- C:\Program Files\WinRAR
                                2008-11-26 17:32:44 ----D---- C:\WINDOWS\Easy CD-DA Extractor
                                2008-11-26 17:32:44 ----D---- C:\Program Files\Easy CD-DA Extractor 9
                                2008-11-26 14:15:24 ----D---- C:\Program Files\AAALOGO
                                2008-11-26 00:02:05 ----A---- C:\WINDOWS\system32\ptpusb.dll
                                2008-11-26 00:02:04 ----A---- C:\WINDOWS\system32\ptpusd.dll
                                2008-11-25 23:10:49 ----A---- C:\WINDOWS\system32\devil.dll
                                2008-11-25 23:10:48 ----A---- C:\WINDOWS\system32\yv12vfw.dll
                                2008-11-25 23:10:48 ----A---- C:\WINDOWS\system32\x.264.exe
                                2008-11-25 23:10:48 ----A---- C:\WINDOWS\system32\i420vfw.dll
                                2008-11-25 23:10:48 ----A---- C:\WINDOWS\system32\AVSredirect.dll
                                2008-11-25 23:10:48 ----A---- C:\WINDOWS\MOTA113.exe
                                2008-11-25 23:10:47 ----A---- C:\WINDOWS\x2.64.exe
                                2008-11-25 23:10:47 ----A---- C:\WINDOWS\meta4.exe
                                2008-11-25 23:10:46 ----D---- C:\Program Files\AviSynth 2.5
                                2008-11-25 23:10:39 ----RSH---- C:\WINDOWS\system32\nbDX.dll
                                2008-11-25 23:10:39 ----RSH---- C:\WINDOWS\system32\msfDX.dll
                                2008-11-25 23:10:39 ----RSH---- C:\WINDOWS\system32\flvDX.dll
                                2008-11-25 23:10:31 ----D---- C:\Program Files\eRightSoft
                                2008-11-25 23:06:58 ----D---- C:\Documents and Settings\haku\Application Data\LimeWire
                                2008-11-25 23:03:26 ----D---- C:\WINDOWS\Sun
                                2008-11-25 23:03:15 ----A---- C:\WINDOWS\system32\deploytk.dll
                                2008-11-25 23:03:04 ----D---- C:\Program Files\Java
                                2008-11-25 23:02:34 ----D---- C:\Documents and Settings\haku\Application Data\Sun
                                2008-11-25 23:01:36 ----D---- C:\Program Files\LimeWire
                                2008-11-25 22:02:54 ----A---- C:\WINDOWS\system32\lfpng13n.dll
                                2008-11-25 22:02:43 ----A---- C:\WINDOWS\system32\lfgif13n.dll
                                2008-11-25 22:02:42 ----A---- C:\WINDOWS\system32\ltkrn13n.dll
                                2008-11-25 22:02:42 ----A---- C:\WINDOWS\system32\ltimg13n.dll
                                2008-11-25 22:02:42 ----A---- C:\WINDOWS\system32\ltfil13n.dll
                                2008-11-25 22:02:42 ----A---- C:\WINDOWS\system32\ltefx13n.dll
                                2008-11-25 22:02:42 ----A---- C:\WINDOWS\system32\ltdis13n.dll
                                2008-11-25 22:02:42 ----A---- C:\WINDOWS\system32\lfcmp13n.dll
                                2008-11-25 22:02:42 ----A---- C:\WINDOWS\system32\lfbmp13n.dll
                                2008-11-25 21:34:10 ----D---- C:\Program Files\eMule
                                2008-11-24 22:53:45 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
                                2008-11-24 22:53:38 ----D---- C:\Program Files\Fichiers communs\Adobe
                                2008-11-24 22:53:38 ----D---- C:\Program Files\Adobe
                                2008-11-24 22:52:34 ----D---- C:\Program Files\NOS
                                2008-11-24 22:52:34 ----D---- C:\Documents and Settings\All Users\Application Data\NOS
                                2008-11-24 21:38:59 ----D---- C:\Documents and Settings\haku\Application Data\OpenOffice.org2
                                2008-11-24 21:17:18 ----D---- C:\Documents and Settings\haku\Application Data\Canon
                                2008-11-24 21:14:54 ----A---- C:\WINDOWS\system32\CNMLM83.DLL
                                2008-11-24 21:13:15 ----HD---- C:\Documents and Settings\All Users\Application Data\CanonBJ
                                2008-11-24 21:13:09 ----A---- C:\WINDOWS\system32\CNMLM82.DLL
                                2008-11-24 21:13:07 ----HD---- C:\WINDOWS\system32\CanonIJ Uninstaller Information
                                2008-11-24 21:13:03 ----A---- C:\WINDOWS\system32\cnco180.dll
                                2008-11-24 21:13:03 ----A---- C:\WINDOWS\system32\CNCL180.DLL
                                2008-11-24 21:13:03 ----A---- C:\WINDOWS\system32\CNCI180.DLL
                                2008-11-24 21:13:03 ----A---- C:\WINDOWS\system32\CNCC180.DLL
                                2008-11-24 21:12:59 ----HD---- C:\Program Files\CanonBJ
                                2008-11-24 20:41:21 ----D---- C:\Program Files\Canon
                                2008-11-24 20:35:37 ----A---- C:\WINDOWS\ODBC.INI
                                2008-11-24 20:35:21 ----D---- C:\Program Files\MediaMonkey
                                2008-11-24 20:33:44 ----D---- C:\Program Files\OpenOffice.org 2.0
                                2008-11-24 20:32:48 ----D---- C:\Program Files\NimoCodec Pack
                                2008-11-24 20:32:48 ----D---- C:\Program Files\DivX
                                2008-11-24 19:19:47 ----D---- C:\Program Files\Lavasoft
                                2008-11-24 19:19:47 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
                                2008-11-24 19:19:23 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
                                2008-11-24 19:13:53 ----D---- C:\Documents and Settings\haku\Application Data\Oniton
                                2008-11-24 19:13:39 ----D---- C:\Program Files\Spybot - Search & Destroy
                                2008-11-24 19:13:39 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
                                2008-11-24 19:08:58 ----D---- C:\Program Files\CCleaner
                                2008-11-24 18:58:55 ----D---- C:\Program Files\Real
                                2008-11-24 18:58:54 ----D---- C:\Program Files\Fichiers communs\Real
                                2008-11-24 18:58:53 ----D---- C:\Documents and Settings\haku\Application Data\Real
                                2008-11-24 18:58:10 ----D---- C:\Documents and Settings\haku\Application Data\Mozilla
                                2008-11-24 18:58:09 ----D---- C:\Program Files\Mozilla Firefox
                                2008-11-24 17:46:56 ----D---- C:\Program Files\U.R.Celeb
                                2008-11-24 08:09:38 ----D---- C:\Documents and Settings\haku\Application Data\Adobe
                                2008-11-24 07:57:09 ----D---- C:\Documents and Settings\haku\Application Data\Google
                                2008-11-24 07:56:58 ----D---- C:\Program Files\Google
                                2008-11-24 07:56:58 ----D---- C:\Documents and Settings\All Users\Application Data\Google
                                2008-11-24 00:53:49 ----A---- C:\WINDOWS\Ascd_tmp.ini
                                2008-11-24 00:50:33 ----SHD---- C:\RECYCLER
                                2008-11-24 00:45:01 ----D---- C:\Documents and Settings\haku\Application Data\vlc
                                2008-11-24 00:44:36 ----D---- C:\Program Files\VideoLAN
                                2008-11-24 00:32:42 ----D---- C:\Program Files\Avira
                                2008-11-24 00:32:42 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
                                2008-11-24 00:30:29 ----DC---- C:\WINDOWS\system32\DRVSTORE
                                2008-11-24 00:26:45 ----SHDC---- C:\Program Files\Fichiers communs\WindowsLiveInstaller
                                2008-11-24 00:26:41 ----D---- C:\Program Files\Windows Live
                                2008-11-24 00:26:33 ----D---- C:\Documents and Settings\All Users\Application Data\WLInstaller
                                2008-11-24 00:23:36 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
                                2008-11-24 00:21:58 ----D---- C:\WINDOWS\system32\SoftwareDistribution
                                2008-11-24 00:21:58 ----A---- C:\WINDOWS\system32\wups2.dll
                                2008-11-24 00:21:58 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
                                2008-11-24 00:21:58 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
                                2008-11-24 00:21:58 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
                                2008-11-24 00:20:13 ----D---- C:\Documents and Settings\haku\Application Data\Macromedia
                                2008-11-24 00:18:34 ----RA---- C:\WINDOWS\system32\lvcoinst.ini
                                2008-11-24 00:18:34 ----RA---- C:\WINDOWS\system32\lvcoinst.dll
                                2008-11-24 00:18:33 ----RA---- C:\WINDOWS\system32\LVUI2RC.dll
                                2008-11-24 00:18:33 ----RA---- C:\WINDOWS\system32\LVUI2.dll
                                2008-11-24 00:18:33 ----RA---- C:\WINDOWS\system32\lvcodec2.dll
                                2008-11-24 00:18:32 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
                                2008-11-24 00:17:12 ----RA---- C:\WINDOWS\system32\a3d.dll
                                2008-11-24 00:17:11 ----A---- C:\WINDOWS\system32\ksuser.dll
                                2008-11-24 00:16:46 ----RA---- C:\WINDOWS\system32\Prounstl.exe
                                2008-11-24 00:16:46 ----RA---- C:\WINDOWS\system32\IntelNic.dll
                                2008-11-24 00:16:46 ----RA---- C:\WINDOWS\system32\e100bmsg.dll
                                2008-11-24 00:16:25 ----RASH---- C:\boot.ini
                                2008-11-24 00:13:49 ----RSHDC---- C:\WINDOWS\system32\dllcache
                                2008-11-24 00:13:49 ----RSD---- C:\WINDOWS\Fonts
                                2008-11-24 00:13:49 ----RD---- C:\WINDOWS\Web
                                2008-11-24 00:13:49 ----HD---- C:\WINDOWS\inf
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\WinSxS
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\twain_32
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\Temp
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\wins
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\wbem
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\usmt
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\spool
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\ShellExt
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\Setup
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\ras
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\oobe
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\npp
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\mui
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\inetsrv
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\IME
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\icsxml
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\ias
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\export
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\drivers
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\dhcp
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\config
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\3com_dmi
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\3076
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\2052
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\1054
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\1042
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\1041
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\1037
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\1036
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\1033
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\1031
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\1028
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\1025
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\system
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\security
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\Resources
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\repair
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\mui
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\msapps
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\msagent
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\Media
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\java
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\ime
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\Help
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\Driver Cache
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\Debug
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\Cursors
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\Connection Wizard
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\Config
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\AppPatch
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS\addins
                                2008-11-24 00:13:49 ----D---- C:\WINDOWS
                                2008-11-24 00:05:05 ----D---- C:\Program Files\Neuf
                                2008-11-24 00:01:10 ----D---- C:\Documents and Settings\haku\Application Data\Help
                                2008-11-23 23:58:37 ----RSD---- C:\WINDOWS\assembly
                                2008-11-23 23:58:37 ----D---- C:\WINDOWS\Microsoft.NET
                                2008-11-23 23:58:36 ----D---- C:\WINDOWS\system32\URTTemp
                                2008-11-23 23:57:13 ----N---- C:\WINDOWS\system32\ati2sgag.exe
                                2008-11-23 23:57:09 ----RA---- C:\WINDOWS\system32\atiiiexx.dll
                                2008-11-23 23:57:07 ----RA---- C:\WINDOWS\system32\ATIDEMGR.dll
                                2008-11-23 23:56:53 ----D---- C:\Program Files\ATI Technologies
                                2008-11-23 23:56:51 ----HD---- C:\Program Files\InstallShield Installation Information
                                2008-11-23 23:56:25 ----D---- C:\Program Files\Fichiers communs\InstallShield
                                2008-11-23 23:55:09 ----D---- C:\WINDOWS\SoftwareDistribution
                                2008-11-23 23:54:09 ----SD---- C:\WINDOWS\system32\Microsoft
                                2008-11-23 23:51:17 ----N---- C:\WINDOWS\system32\comsdupd.exe
                                2008-11-23 23:51:15 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
                                2008-11-23 23:51:15 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
                                2008-11-23 23:51:15 ----A---- C:\WINDOWS\system32\ati2dvag.dll
                                2008-11-23 23:51:15 ----A---- C:\WINDOWS\system32\ati2cqag.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\msdadiag.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\mp4sdmod.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\mp43dmod.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdukx.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdsmsno.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdsmsfi.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdno1.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdmlt48.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdmlt47.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdmaori.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdinmal.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdinben.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdinbe1.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdfi1.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\ir50_qcx.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\ir50_qc.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\ir50_32.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\ir41_qcx.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\ir41_qc.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\ieencode.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\httpapi.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\fwcfg.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\fsquirt.exe
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\fltmc.exe
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\extmgr.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\dxdiagn.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\d3d9.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\cmsetacl.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\btpanui.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\bthserv.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\bthci.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\blastcln.exe
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\bitsprx3.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\bitsprx2.dll
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\auditusr.exe
                                2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\ativtmxx.dll
                                2008-11-23 23:51:14 ----A---- C:\WINDOWS\system32\fltlib.dll
                                2008-11-23 23:51:14 ----A---- C:\WINDOWS\system32\ativvaxx.dll
                                2008-11-23 23:51:14 ----A---- C:\WINDOWS\system32\ati3duag.dll
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\xpob2res.dll
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\w3ssl.dll
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\twext.dll
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\strmfilt.dll
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\smbinst.exe
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\slserv.exe
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\slrundll.exe
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\slgen.dll
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\slextspk.dll
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\slcoinst.dll
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\sdhcinst.dll
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\s3gnb.dll
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\powercfg.exe
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\pnrpnsp.dll
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\p2psvc.dll
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\p2pnetsh.dll
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\p2pgraph.dll
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\p2pgasvc.dll
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\p2p.dll
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\nv4_disp.dll
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\mtxparhd.dll
                                2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\mspmsnsv.dll
                                2008-11-23 23:51:13 ----A---- C:\WINDOWS\system32\xpsp2res.dll
                                2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wuaueng1.dll
                                2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wuauclt1.exe
                                2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wshbth.dll
                                2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wscntfy.exe
                                2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wmvdmoe2.dll
                                2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wmspdmoe.dll
                                2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wmspdmod.dll
                                2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wmsdmoe2.dll
                                2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wmpdxm.dll
                                2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wmpasf.dll
                                2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wmp.dll
                                2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wmerror.dll
                                2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\winshfhc.dll
                                2008-11-23 23:51:12 ----A---- C:\WINDOWS\system32\wuapi.dll
                                2008-11-23 23:51:12 ----A---- C:\WINDOWS\system32\wscsvc.dll
                                2008-11-23 23:51:12 ----A---- C:\WINDOWS\system32\wmidx.dll
                                2008-11-23 23:51:11 ----N---- C:\WINDOWS\system32\xmlprovi.dll
                                2008-11-23 23:51:11 ----N---- C:\WINDOWS\system32\xmlprov.dll
                                2008-11-23 23:51:11 ----N---- C:\WINDOWS\slrundll.exe
                                2008-11-23 23:51:11 ----D---- C:\WINDOWS\provisioning
                                2008-11-23 23:51:11 ----D---- C:\WINDOWS\peernet
                                2008-11-23 23:51:11 ----A---- C:\WINDOWS\system32\wuweb.dll
                                2008-11-23 23:51:11 ----A---- C:\WINDOWS\system32\wups.dll
                                2008-11-23 23:51:11 ----A---- C:\WINDOWS\system32\wucltui.dll
                                2008-11-23 23:49:49 ----D---- C:\WINDOWS\ServicePackFiles
                                2008-11-23 23:47:25 ----N---- C:\WINDOWS\system32\spmsg.dll
                                2008-11-23 23:47:25 ----A---- C:\WINDOWS\002176_.tmp
                                2008-11-23 23:47:21 ----D---- C:\WINDOWS\system32\ReinstallBackups
                                2008-11-23 23:47:04 ----A---- C:\WINDOWS\system32\spupdsvc.exe
                                2008-11-23 23:46:01 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
                                2008-11-23 23:45:59 ----D---- C:\WINDOWS\EHome
                                2008-11-23 23:40:16 ----SHD---- C:\WINDOWS\Installer
                                2008-11-23 23:40:14 ----D---- C:\Documents and Settings\haku\Application Data\Identities
                                2008-11-23 23:40:10 ----HD---- C:\Program Files\Uninstall Information
                                2008-11-23 23:40:06 ----SD---- C:\Documents and Settings\haku\Application Data\Microsoft
                                2008-11-23 23:40:06 ----ASH---- C:\Documents and Settings\haku\Application Data\desktop.ini
                                2008-11-23 23:39:38 ----SHD---- C:\System Volume Information
                                2008-11-23 23:39:37 ----A---- C:\WINDOWS\SchedLgU.Txt
                                2008-11-23 23:32:43 ----D---- C:\WINDOWS\system32\xircom
                                2008-11-23 23:32:43 ----D---- C:\Program Files\xerox
                                2008-11-23 23:32:43 ----D---- C:\Program Files\microsoft frontpage
                                2008-11-23 23:32:33 ----A---- C:\WINDOWS\control.ini
                                2008-11-23 23:32:33 ----A---- C:\AUTOEXEC.BAT
                                2008-11-23 23:32:24 ----A---- C:\WINDOWS\system32\mapi32.dll
                                2008-11-23 23:31:43 ----SD---- C:\WINDOWS\Downloaded Program Files
                                2008-11-23 23:31:43 ----RD---- C:\WINDOWS\Offline Web Pages
                                2008-11-23 23:31:43 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
                                2008-11-23 23:31:37 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
                                2008-11-23 23:31:22 ----D---- C:\WINDOWS\system32\DirectX
                                2008-11-23 23:30:56 ----A---- C:\WINDOWS\system32\safrslv.dll
                                2008-11-23 23:30:56 ----A---- C:\WINDOWS\system32\safrdm.dll
                                2008-11-23 23:30:56 ----A---- C:\WINDOWS\system32\safrcdlg.dll
                                2008-11-23 23:30:56 ----A---- C:\WINDOWS\system32\racpldlg.dll
                                2008-11-23 23:30:56 ----A---- C:\WINDOWS\system32\atrace.dll
                                2008-11-23 23:30:53 ----A---- C:\WINDOWS\system32\desktop.ini
                                2008-11-23 23:30:53 ----A---- C:\WINDOWS\desktop.ini
                                2008-11-23 23:30:45 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
                                2008-11-23 23:30:45 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
                                2008-11-23 23:30:45 ----A---- C:\WINDOWS\system32\isrdbg32.dll
                                2008-11-23 23:30:43 ----A---- C:\WINDOWS\system32\acctres.dll
                                2008-11-23 23:30:41 ----D---- C:\Program Files\Fichiers communs\Services
                                2008-11-23 23:29:47 ----A---- C:\WINDOWS\system32\inetres.dll
                                2008-11-23 23:29:43 ----SD---- C:\WINDOWS\Tasks
                                2008-11-23 23:29:42 ----A---- C:\WINDOWS\system32\isign32.dll
                                2008-11-23 23:29:42 ----A---- C:\WINDOWS\system32\inetcfg.dll
                                2008-11-23 23:29:42 ----A---- C:\WINDOWS\system32\icwphbk.dll
                                2008-11-23 23:29:42 ----A---- C:\WINDOWS\system32\icwdial.dll
                                2008-11-23 23:29:42 ----A---- C:\WINDOWS\system32\icfgnt5.dll
                                2008-11-23 23:29:39 ----D---- C:\Program Files\Fichiers communs\MSSoap
                                2008-11-23 23:29:35 ----D---- C:\WINDOWS\system32\Macromed
                                2008-11-23 23:29:35 ----D---- C:\WINDOWS\srchasst
                                2008-11-23 23:29:34 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
                                2008-11-23 23:29:34 ----A---- C:\WINDOWS\system32\qmgr.dll
                                2008-11-23 23:29:33 ----D---- C:\Program Files\Movie Maker
                                2008-11-23 23:29:30 ----D---- C:\WINDOWS\system32\Restore
                                2008-11-23 23:29:30 ----D---- C:\WINDOWS\PCHealth
                                2008-11-23 23:29:30 ----A---- C:\WINDOWS\system32\srsvc.dll
                                2008-11-23 23:29:30 ----A---- C:\WINDOWS\system32\srrstr.dll
                                2008-11-23 23:29:30 ----A---- C:\WINDOWS\system32\srclient.dll
                                2008-11-23 23:29:29 ----A---- C:\WINDOWS\system32\nmmkcert.dll
                                2008-11-23 23:29:29 ----A---- C:\WINDOWS\system32\msconf.dll
                                2008-11-23 23:29:29 ----A---- C:\WINDOWS\system32\mnmdd.dll
                                2008-11-23 23:29:29 ----A---- C:\WINDOWS\system32\ils.dll
                                2008-11-23 23:29:27 ----D---- C:\Program Files\NetMeeting
                                2008-11-23 23:29:27 ----A---- C:\WINDOWS\system32\msoert2.dll
                                2008-11-23 23:29:27 ----A---- C:\WINDOWS\system32\msoeacct.dll
                                2008-11-23 23:29:26 ----D---- C:\Program Files\Outlook Express
                                2008-11-23 23:29:26 ----A---- C:\WINDOWS\system32\schedsvc.dll
                                2008-11-23 23:29:26 ----A---- C:\WINDOWS\system32\mstinit.exe
                                2008-11-23 23:29:26 ----A---- C:\WINDOWS\system32\mstask.dll
                                2008-11-23 23:29:26 ----A---- C:\WINDOWS\system32\inetcomm.dll
                                2008-11-23 23:29:21 ----D---- C:\Program Files\Fichiers communs\System
                                2008-11-23 23:29:20 ----D---- C:\Program Files\Internet Explorer
                                2008-11-23 23:29:03 ----D---- C:\Program Files\ComPlus Applications
                                2008-11-23 23:29:02 ----A---- C:\WINDOWS\vbaddin.ini
                                2008-11-23 23:29:02 ----A---- C:\WINDOWS\vb.ini
                                2008-11-23 23:29:01 ----D---- C:\WINDOWS\Registration
                                2008-11-23 23:28:59 ----HD---- C:\Program Files\WindowsUpdate
                                2008-11-23 23:28:58 ----D---- C:\Program Files\Windows Media Player
                                2008-11-23 23:28:58 ----D---- C:\Program Files\Services en ligne
                                2008-11-23 23:28:55 ----D---- C:\Program Files\Messenger
                                2008-11-23 23:26:24 ----D---- C:\Program Files\MSN Gaming Zone
                                2008-11-23 23:26:24 ----A---- C:\WINDOWS\system32\write.exe
                                2008-11-23 23:26:10 ----A---- C:\WINDOWS\system32\accwiz.exe
                                2008-11-23 23:26:09 ----A---- C:\WINDOWS\system32\sndvol32.exe
                                2008-11-23 23:26:09 ----A---- C:\WINDOWS\system32\sndrec32.exe
                                2008-11-23 23:26:09 ----A---- C:\WINDOWS\system32\hypertrm.dll
                                2008-11-23 23:26:09 ----A---- C:\WINDOWS\system32\hticons.dll
                                2008-11-23 23:26:09 ----A---- C:\WINDOWS\system32\avwav.dll
                                2008-11-23 23:26:09 ----A---- C:\WINDOWS\system32\avtapi.dll
                                2008-11-23 23:26:09 ----A---- C:\WINDOWS\system32\avmeter.dll
                                2008-11-23 23:26:08 ----A---- C:\WINDOWS\system32\winchat.exe
                                2008-11-23 23:26:03 ----A---- C:\WINDOWS\system32\getuname.dll
                                2008-11-23 23:26:03 ----A---- C:\WINDOWS\system32\charmap.exe
                                2008-11-23 23:26:02 ----A---- C:\WINDOWS\system32\calc.exe
                                2008-11-23 23:24:03 ----A---- C:\WINDOWS\system32\sol.exe
                                2008-11-23 23:23:54 ----A---- C:\WINDOWS\system32\winmine.exe
                                2008-11-23 23:23:54 ----A---- C:\WINDOWS\system32\mshearts.exe
                                2008-11-23 23:23:53 ----A---- C:\WINDOWS\system32\usrlogon.cmd
                                2008-11-23 23:23:53 ----A---- C:\WINDOWS\system32\reset.exe
                                2008-11-23 23:23:53 ----A---- C:\WINDOWS\system32\rdshost.exe
                                2008-11-23 23:23:53 ----A---- C:\WINDOWS\system32\freecell.exe
                                2008-11-23 23:23:52 ----A---- C:\WINDOWS\system32\tsshutdn.exe
                                2008-11-23 23:23:52 ----A---- C:\WINDOWS\system32\tslabels.ini
                                2008-11-23 23:23:52 ----A---- C:\WINDOWS\system32\tskill.exe
                                2008-11-23 23:23:52 ----A---- C:\WINDOWS\system32\tsdiscon.exe
                                2008-11-23 23:23:52 ----A---- C:\WINDOWS\system32\tscon.exe
                                2008-11-23 23:23:51 ----A---- C:\WINDOWS\system32\shadow.exe
                                2008-11-23 23:23:51 ----A---- C:\WINDOWS\system32\rwinsta.exe
                                2008-11-23 23:23:51 ----A---- C:\WINDOWS\system32\regini.exe
                                2008-11-23 23:23:51 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
                                2008-11-23 23:23:51 ----A---- C:\WINDOWS\system32\qwinsta.exe
                                2008-11-23 23:23:51 ----A---- C:\WINDOWS\system32\qprocess.exe
                                2008-11-23 23:23:51 ----A---- C:\WINDOWS\system32\qappsrv.exe
                                2008-11-23 23:23:51 ----A---- C:\WINDOWS\system32\msg.exe
                                2008-11-23 23:23:51 ----A---- C:\WINDOWS\system32\logoff.exe
                                2008-11-23 23:23:51 ----A---- C:\WINDOWS\system32\cdmodem.dll
                                2008-11-23 23:23:50 ----A---- C:\WINDOWS\system32\xolehlp.dll
                                2008-11-23 23:23:50 ----A---- C:\WINDOWS\system32\mtxoci.dll
                                2008-11-23 23:23:50 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
                                2008-11-23 23:23:50 ----A---- C:\WINDOWS\system32\msdtctm.dll
                                2008-11-23 23:23:50 ----A---- C:\WINDOWS\system32\msdtcprf.ini
                                2008-11-23 23:23:50 ----A---- C:\WINDOWS\system32\msdtclog.dll
                                2008-11-23 23:23:50 ----A---- C:\WINDOWS\system32\msdtc.exe
                                2008-11-23 23:23:49 ----A---- C:\WINDOWS\system32\mtxlegih.dll
                                2008-11-23 23:23:49 ----A---- C:\WINDOWS\system32\mtxex.dll
                                2008-11-23 23:23:49 ----A---- C:\WINDOWS\system32\mtxdm.dll
                                2008-11-23 23:23:49 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
                                2008-11-23 23:23:49 ----A---- C:\WINDOWS\system32\comrepl.dll
                                2008-11-23 23:23:49 ----A---- C:\WINDOWS\system32\comaddin.dll
                                2008-11-23 23:23:49 ----A---- C:\WINDOWS\system32\colbact.dll
                                2008-11-23 23:23:48 ----A---- C:\WINDOWS\system32\stclient.dll
                                2008-11-23 23:23:48 ----A---- C:\WINDOWS\system32\clbcatex.dll
                                2008-11-23 23:23:48 ----A---- C:\WINDOWS\system32\catsrvps.dll
                                2008-11-23 23:23:48 ----A---- C:\WINDOWS\system32\catsrv.dll
                                2008-11-23 23:23:47 ----A---- C:\WINDOWS\system32\comuid.dll
                                2008-11-23 23:23:47 ----A---- C:\WINDOWS\system32\comsnap.dll
                                2008-11-23 23:23:47 ----A---- C:\WINDOWS\system32\clbcatq.dll
                                2008-11-23 23:23:40 ----A---- C:\WINDOWS\system32\wmimgmt.msc
                                2008-11-23 23:23:40 ----A---- C:\WINDOWS\system32\servdeps.dll
                                2008-11-23 23:23:40 ----A---- C:\WINDOWS\system32\mmfutil.dll
                                2008-11-23 23:23:40 ----A---- C:\WINDOWS\system32\cmprops.dll
                                2008-11-23 23:23:36 ----D---- C:\Program Files\Windows NT
                                2008-11-23 23:23:36 ----D---- C:\Program Files\MSN
                                2008-11-23 23:23:36 ----A---- C:\WINDOWS\system32\spider.exe
                                2008-11-23 23:23:36 ----A---- C:\WINDOWS\system32\mspaint.exe
                                2008-11-23 23:23:36 ----A---- C:\WINDOWS\system32\mplay32.exe
                                2008-11-23 23:23:36 ----A---- C:\WINDOWS\system32\clipbrd.exe
                                2008-11-23 23:23:35 ----A---- C:\WINDOWS\system32\wuauserv.dll
                                2008-11-23 23:23:35 ----A---- C:\WINDOWS\system32\wuaueng.dll
                                2008-11-23 23:23:35 ----A---- C:\WINDOWS\system32\wuauclt.exe
                                2008-11-23 23:23:35 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
                                2008-11-23 23:23:35 ----A---- C:\WINDOWS\system32\remotepg.dll
                                2008-11-23 23:23:35 ----A---- C:\WINDOWS\system32\rdsaddin.exe
                                2008-11-23 23:23:35 ----A---- C:\WINDOWS\system32\mstscax.dll
                                2008-11-23 23:23:35 ----A---- C:\WINDOWS\system32\mstsc.exe
                                2008-11-23 23:23:34 ----D---- C:\WINDOWS\system32\MsDtc
                                2008-11-23 23:23:34 ----D---- C:\WINDOWS\system32\Com
                                2008-11-23 23:23:34 ----A---- C:\WINDOWS\system32\tscupgrd.exe
                                2008-11-23 23:23:34 ----A---- C:\WINDOWS\system32\termsrv.dll
                                2008-11-23 23:23:34 ----A---- C:\WINDOWS\system32\sessmgr.exe
                                2008-11-23 23:23:34 ----A---- C:\WINDOWS\system32\rdpwsx.dll
                                2008-11-23 23:23:34 ----A---- C:\WINDOWS\system32\rdpsnd.dll
                                2008-11-23 23:23:34 ----A---- C:\WINDOWS\system32\rdpclip.exe
                                2008-11-23 23:23:34 ----A---- C:\WINDOWS\system32\rdchost.dll
                                2008-11-23 23:23:34 ----A---- C:\WINDOWS\system32\msdtcprx.dll
                                2008-11-23 23:23:34 ----A---- C:\WINDOWS\system32\icaapi.dll
                                2008-11-23 23:23:34 ----A---- C:\WINDOWS\system32\cfgbkend.dll
                                2008-11-23 23:23:33 ----A---- C:\WINDOWS\system32\comsvcs.dll
                                2008-11-23 23:23:33 ----A---- C:\WINDOWS\system32\catsrvut.dll
                                2008-11-23 23:23:31 ----A---- C:\WINDOWS\system32\licwmi.dll
                                2008-11-23 23:23:17 ----A---- C:\WINDOWS\system32\h323log.txt
                                2008-11-23 23:20:37 ----A---- C:\WINDOWS\system32\usbui.dll
                                2008-11-23 23:19:55 ----D---- C:\Program Files\Fichiers communs\ODBC
                                2008-11-23 23:19:55 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
                                2008-11-23 23:19:55 ----A---- C:\WINDOWS\ODBCINST.INI
                                2008-11-23 23:19:53 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
                                2008-11-23 23:19:52 ----RD---- C:\Program Files
                                2008-11-23 23:19:52 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
                                2008-11-23 23:19:52 ----D---- C:\Program Files\Fichiers communs
                                2008-11-23 23:19:50 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
                                2008-11-23 23:19:50 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
                                2008-11-23 23:19:50 ----RA---- C:\WINDOWS\system32\kbdazel.dll
                                2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbdycc.dll
                                2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbduzb.dll
                                2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbdur.dll
                                2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbdtat.dll
                                2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbdru1.dll
                                2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbdru.dll
                                2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbdmon.dll
                                2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
                                2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
                                2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbdbu.dll
                                2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbdaze.dll
                                2008-11-23 23:19:48 ----RA---- C:\WINDOWS\system32\kbdblr.dll
                                2008-11-23 23:19:47 ----RA---- C:\WINDOWS\system32\kbdhept.dll
                                2008-11-23 23:19:47 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
                                2008-11-23 23:19:47 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
                                2008-11-23 23:19:47 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
                                2008-11-23 23:19:47 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
                                2008-11-23 23:19:47 ----RA---- C:\WINDOWS\system32\kbdhe.dll
                                2008-11-23 23:19:47 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
                                2008-11-23 23:19:46 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
                                2008-11-23 23:19:46 ----RA---- C:\WINDOWS\system32\kbdlv.dll
                                2008-11-23 23:19:46 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
                                2008-11-23 23:19:46 ----RA---- C:\WINDOWS\system32\kbdlt.dll
                                2008-11-23 23:19:46 ----RA---- C:\WINDOWS\system32\kbdest.dll
                                2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdycl.dll
                                2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
                                2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdsl.dll
                                2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdro.dll
                                2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
                                2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdpl.dll
                                2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
                                2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdhu.dll
                                2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
                                2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
                                2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdcz.dll
                                2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdcr.dll
                                2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
                                2008-11-23 23:19:42 ----A---- C:\WINDOWS\system32\irclass.dll
                                2008-11-23 23:19:41 ----A---- C:\WINDOWS\system32\spxcoins.dll
                                2008-11-23 23:19:41 ----A---- C:\WINDOWS\system32\EqnClass.Dll
                                2008-11-23 23:19:41 ----A---- C:\WINDOWS\system32\dgsetup.dll
                                2008-11-23 23:19:41 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
                                2008-11-23 23:19:40 ----A---- C:\WINDOWS\TASKMAN.EXE
                                2008-11-23 23:19:39 ----N---- C:\WINDOWS\system32\CONFIG.TMP
                                2008-11-23 23:19:39 ----A---- C:\WINDOWS\system32\storprop.dll
                                2008-11-23 23:19:39 ----A---- C:\WINDOWS\system32\batt.dll
                                2008-11-23 23:19:39 ----A---- C:\WINDOWS\notepad.exe
                                2008-11-23 23:19:35 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
                                2008-11-23 23:19:31 ----RA---- C:\WINDOWS\SETA.tmp
                                2008-11-23 23:19:29 ----RA---- C:\WINDOWS\SET3.tmp
                                2008-11-23 23:19:25 ----D---- C:\WINDOWS\system32\CatRoot2
                                2008-11-23 23:19:25 ----D---- C:\WINDOWS\system32\CatRoot
                                2008-11-23 23:19:20 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
                                2008-11-23 23:18:53 ----D---- C:\Documents and Settings

                                ======List of files/folders modified in the last 1 months======
                                • 1
                                • 2