Pubs intempestives
RésoluMerci d'avance de votre attention et de votre aide.
Suite à une réinstall de windows Xp, je suis en permanence envahi de pubs, et de virus détectés par Antivir.
Spybot, ccleaner, adware, scan antivir, utilisation de firefox... rien y fait : elles sont encore et toujours là...
Une idée?
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:08:32, on 11/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\iesvcmon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\documents and settings\haku\local settings\application data\akvhkewz.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\WINDOWS\system32\regsvr32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Easy CD-DA Extractor 8\ezcddax.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceHelper.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\distnoted.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe
C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Documents and Settings\haku\Bureau\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ecofree.net/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: globaladsolution - {54a50caa-5935-31ff-9be7-c2f5cde590f8} - C:\WINDOWS\system32\nslB.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: globaladsolution browser enhancer - {7FD0469E-A426-9E18-F751-22CA5B17980B} - C:\WINDOWS\system32\zealqmrdgyxrxjn.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [iesvcmon] "C:\WINDOWS\system32\iesvcmon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [moprwpnjskozo] C:\WINDOWS\System32\regsvr32.exe /s "C:\WINDOWS\system32\zealqmrdgyxrxjn.dll"
O4 - HKLM\..\RunOnce: [SpybotDeletingA7548] command /c del "C:\WINDOWS\system32\zealqmrdgyxrxjn.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingC4724] cmd /c del "C:\WINDOWS\system32\zealqmrdgyxrxjn.dll_old"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe" /NoDialog
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [akvhkewz] "c:\documents and settings\haku\local settings\application data\akvhkewz.exe" akvhkewz
O4 - HKCU\..\RunOnce: [SpybotDeletingB454] command /c del "C:\WINDOWS\system32\zealqmrdgyxrxjn.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingD9241] cmd /c del "C:\WINDOWS\system32\zealqmrdgyxrxjn.dll_old"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Startup: ppcb_32.lnk = ?
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - https://sdlc-esd.oracle.com/ESD5/JSCDL/jre/6u10-b92-b/jinstall-6u10-windows-i586-jc.cab?GroupName=JSC&FilePath=/ESD5/JSCDL/jre/6u10-b92-b/jinstall-6u10-windows-i586-jc.cab&BHost=javadl.sun.com&File=jinstall-6u10-windows-i586-jc.cab&AuthParam=1580987764_a5235be86e79daca0cfb05ddc36bfbcd&ext=.cab
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
--
End of file - 9402 bytes
Configuration: Windows XP Firefox 2.0.0.18
36 réponses
Suite à une réinstallation de Windows XP, la machine est envahie de publicités et de virus détectés par AntiVir, et le log HijackThis révèle de nombreux composants suspects et modules d’outils publicitaires. Des éléments de réponse suggèrent d’employer Navilog1 pour diagnostiquer l’infection, puis de poster le rapport obtenu afin d’identifier les éléments à supprimer dans la prochaine réponse. En cas de refus ou échec, une seconde option consiste à lancer RSIT et à analyser les rapports pour cibler les éléments malveillants à supprimer ensuite. D'autres éléments du log révèlent des services et tâches récurrentes associées à des logiciels tiers, nécessitant éventuellement une désactivation ciblée et une vérification des autorisations pour éviter des réapparitions.
-
ModérateurBonne soirée ;)
-
Non ça ira...
Merci pour ce travail vraiment pro.
C'est très gentil de ta part.
Bonne continuation et merci d'aider des imprudents du net comme moi! -
ModérateurTu peux désinstaller ToolsCleaner.
Des questions ? Des remarques ? -
Voilà Chef!
Merci pour tous ces conseils, je vais essayer d'être plus vigilant...
Résolu!
[ Rapport ToolsCleaner version 2.2.7 (par A.Rothstein & dj QUIOU) ]
-->- Recherche:
C:\fixnavi.txt: trouvé !
C:\cleannavi.txt: trouvé !
C:\_OtMoveIt: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: trouvé !
C:\Documents and Settings\haku\Bureau\Navilog1.exe: trouvé !
C:\Documents and Settings\haku\Bureau\OTMoveIt3.exe: trouvé !
C:\Documents and Settings\haku\Bureau\Rsit.exe: trouvé !
C:\Program Files\Navilog1: trouvé !
C:\Program Files\Navilog1\Navilog1.bat: trouvé !
---------------------------------
-->- Suppression:
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: supprimé !
C:\Documents and Settings\haku\Bureau\Navilog1.exe: supprimé !
C:\Program Files\Navilog1\Navilog1.bat: supprimé !
C:\fixnavi.txt: supprimé !
C:\cleannavi.txt: supprimé !
C:\Documents and Settings\haku\Bureau\OTMoveIt3.exe: supprimé !
C:\Documents and Settings\haku\Bureau\Rsit.exe: supprimé !
C:\_OtMoveIt: supprimé !
C:\Rsit: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: supprimé !
C:\Program Files\Navilog1: supprimé ! -
Modérateur1/
---> Désinstalle HijackThis.
---> Télécharge ToolsCleaner2 sur ton Bureau.
* Double-clique sur ToolsCleaner2.exe pour le lancer.
* Clique sur Recherche et laisse le scan agir.
* Clique sur Suppression pour finaliser.
* Tu peux, si tu le souhaites, te servir des Options Facultatives.
* Clique sur Quitter pour obtenir le rapport.
* Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).
2/
---> Il est nécessaire de désactiver puis réactiver la restauration système pour la purger :
http://www.infos-du-net.com/forum/272480-11-desactiver-activer-restauration-systeme
---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème :
https://www.vulgarisation-informatique.com/creer-point-restauration.php
3/
Version française d'Antivir :
http://www.commentcamarche.net/telecharger/telecharger 55 antivir
Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.
Comme navigateur, utilise plutôt Mozilla Firefox qu'Internet Explorer. Tu peux utiliser l'extension Noscript pour plus de sécurité.
Vérifie que les mises à jour automatiques sont bien activées (Menu Démarrer, clique droit sur Poste de travail, Onglet Mises à jour automatiques).
Tu peux aussi modifier le fichier Hosts pour améliorer la sécurité de ton PC :
http://www.commentcamarche.net/faq/sujet 5993 modifier son fichier hosts
https://blog.sosordi.net/category/articles
Par rapport au P2P :
http://www.libellules.ch/...
Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) :
https://www.malekal.com/fichiers/projetantimalwares/prevention-protection.pdf
Sois plus vigilant sur Internet ;) -
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:51:25, on 12/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\haku\Bureau\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ecofree.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe" /NoDialog
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
-
Modérateur"Est-ce que la Maj de IE est obligatoire?"
---> C'est beaucoup mieux. -
Bonsoir.
Merci encore pour hier...
Est-ce que la Maj de IE est obligatoire? Merci. Car je peux très bien tourner sous firefox... -
ModérateurOk, je te ferai une dernière procédure.
-
je retenterai la maj de IE aussi en m'aidant du lien donné.
Merci -
Il est tard, je prends à 8h demain, je regarde demain matin si j'ai encore les problèmes de pubs mais là c'est nettement mieux je pense!
Merci pour tout et si demain je retrouve mon pc propre je passe en résolu.
Encore merci t'es génial!
Respectueusement. -
ModérateurJe crois que ça n'a pas fonctionné d'après le rapport HJT.
-
si et windows ma demandé de redémarrer...
-
ModérateurTu n'as pas essayé de mettre à jour IE ?
-
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:58:02, on 12/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\haku\Bureau\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ecofree.net/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe" /NoDialog
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
-
Modérateur---> Désinstalle Navilog1.
---> Relance HijackThis et choisis Do a system scan only.
---> Coche les cases qui sont devant les lignes suivantes :
O4 - HKLM\..\Run: [iesvcmon] "C:\WINDOWS\system32\iesvcmon.exe"
O4 - Startup: ppcb_32.lnk = ?
---> Clique en bas sur Fix checked. Mets oui si HijackThis te demande quelque chose.
---> Redémarre ton PC.
---> Mets à jour Internet Explorer :
http://www.microsoft.com/downloads/details.aspx?FamilyId=9AE91EBE-3385-447C-8A30-081805B2F90B&displaylang=fr
Vu que tu as le SP3 :
http://www.technos-sources.com/tutorial-installer-ie7-apres-avoir-installe-sp3-windows-xp-98.aspx
---> Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) :
* Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
* Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
* Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs (Sauvegarde la base de registre).
---> Poste un nouveau rapport HijackThis. -
PARDON
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\Program Files\ppcbooster moved successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\haku\LOCALS~1\Temp\NGLALog.txt scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\haku\LOCALS~1\Temp\~DF130B.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\haku\LOCALS~1\Temp\~DFA2E6.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\haku\LOCALS~1\Temp\~DFA2F8.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\haku\LOCALS~1\Temp\~DFF85.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_da0.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\haku\Local Settings\Application Data\Mozilla\Firefox\Profiles\16b84lia.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\haku\Local Settings\Application Data\Mozilla\Firefox\Profiles\16b84lia.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\haku\Local Settings\Application Data\Mozilla\Firefox\Profiles\16b84lia.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\haku\Local Settings\Application Data\Mozilla\Firefox\Profiles\16b84lia.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully
OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 12112008_235600
Files moved on Reboot...
C:\DOCUME~1\haku\LOCALS~1\Temp\NGLALog.txt moved successfully.
File C:\DOCUME~1\haku\LOCALS~1\Temp\~DF130B.tmp not found!
File C:\DOCUME~1\haku\LOCALS~1\Temp\~DFA2E6.tmp not found!
File C:\DOCUME~1\haku\LOCALS~1\Temp\~DFA2F8.tmp not found!
File C:\DOCUME~1\haku\LOCALS~1\Temp\~DFF85.tmp not found!
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
File C:\WINDOWS\temp\Perflib_Perfdata_da0.dat not found!
C:\Documents and Settings\haku\Local Settings\Application Data\Mozilla\Firefox\Profiles\16b84lia.default\Cache\_CACHE_001_ moved successfully.
C:\Documents and Settings\haku\Local Settings\Application Data\Mozilla\Firefox\Profiles\16b84lia.default\Cache\_CACHE_002_ moved successfully.
C:\Documents and Settings\haku\Local Settings\Application Data\Mozilla\Firefox\Profiles\16b84lia.default\Cache\_CACHE_003_ moved successfully.
C:\Documents and Settings\haku\Local Settings\Application Data\Mozilla\Firefox\Profiles\16b84lia.default\Cache\_CACHE_MAP_ moved successfully. -
ModérateurEt le rapport OTMoveIt ?
-
2008-11-23 23:56:12 ----A---- C:\WINDOWS\win.ini
2008-11-23 23:47:41 ----RASH---- C:\NTDETECT.COM
2008-11-23 23:19:52 ----A---- C:\WINDOWS\system.ini
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-11-26 75072]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-03-01 28352]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 ati2mtag;ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2004-08-25 787456]
R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
R3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2003-03-04 145408]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2008-04-17 15464]
R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\DRIVERS\LVUSBSta.sys [2005-01-31 22016]
R3 PID_0928;Logitech QuickCam Express(PID_0928); C:\WINDOWS\system32\DRIVERS\LV561AV.SYS [2005-01-31 211712]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2002-12-19 539008]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 catchme;catchme; \??\C:\DOCUME~1\haku\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2008-05-07 17536]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2008-05-07 20864]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2008-06-06 8064]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2008-11-07 32000]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-13 26112]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2008-11-24 611664]
R2 AntiVirScheduler;Avira AntiVir Personal - Free Antivirus Scheduler; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-15 68865]
R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-15 151297]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-11-07 132424]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2004-08-25 389120]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2008-11-10 152984]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-11-20 536872]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-08-07 575488]
R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2004-08-25 516096]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2003-02-20 32768]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-11-24 137200]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
-----------------EOF----------------- -
======Scheduled tasks folder======
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2008-09-15 1562960]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-11-10 320920]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2008-11-24 251504]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll [2008-11-24 657904]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll [2008-11-24 522224]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-11-10 34816]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2008-11-10 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2008-11-24 251504]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2004-08-25 339968]
"avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-11-04 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-11-20 290088]
"iesvcmon"=C:\WINDOWS\system32\iesvcmon.exe []
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2008-11-10 136600]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2008-12-03 399504]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2008-12-03 1265296]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-11-24 39408]
"Nokia.PCSync"=C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe [2008-06-17 1249280]
"PC Suite Tray"=C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2008-10-02 1124352]
C:\Documents and Settings\haku\Menu Démarrer\Programmes\Démarrage
OpenOffice.org 2.0.lnk - C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
ppcb_32.lnk - C:\Program Files\ppcbooster\ppcb_32.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2004-08-25 86016]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
======List of files/folders created in the last 1 months======
2008-12-12 00:11:54 ----D---- C:\rsit
2008-12-12 00:11:03 ----A---- C:\ioezqayz.txt
2008-12-12 00:05:45 ----D---- C:\Documents and Settings\haku\Application Data\Malwarebytes
2008-12-12 00:05:39 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2008-12-12 00:05:39 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-12-11 23:30:10 ----A---- C:\WINDOWS\system32\javaws.exe
2008-12-11 23:30:10 ----A---- C:\WINDOWS\system32\javaw.exe
2008-12-11 23:30:10 ----A---- C:\WINDOWS\system32\java.exe
2008-12-11 23:07:25 ----D---- C:\_OTMoveIt
2008-12-11 22:27:51 ----A---- C:\cleannavi.txt
2008-12-11 22:19:59 ----A---- C:\fixnavi.txt
2008-12-11 22:19:36 ----D---- C:\Program Files\Navilog1
2008-12-11 19:14:28 ----A---- C:\WINDOWS\wininit.ini
2008-12-10 22:20:42 ----A---- C:\WINDOWS\system32\wmpns.dll
2008-12-10 22:20:09 ----D---- C:\WINDOWS\Prefetch
2008-12-10 22:12:07 ----D---- C:\WINDOWS\system32\fr-fr
2008-12-10 22:12:05 ----D---- C:\WINDOWS\l2schemas
2008-12-10 22:12:04 ----D---- C:\WINDOWS\system32\fr
2008-12-10 22:12:04 ----D---- C:\WINDOWS\system32\bits
2008-12-10 21:50:53 ----N---- C:\WINDOWS\system32\wmphoto.dll
2008-12-10 21:50:49 ----N---- C:\WINDOWS\system32\wlanapi.dll
2008-12-10 21:50:47 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2008-12-10 21:50:47 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2008-12-10 21:50:45 ----N---- C:\WINDOWS\system32\verclsid.exe
2008-12-10 21:50:41 ----N---- C:\WINDOWS\system32\tzchange.exe
2008-12-10 21:50:41 ----N---- C:\WINDOWS\system32\tspkg.dll
2008-12-10 21:50:41 ----N---- C:\WINDOWS\system32\tsgqec.dll
2008-12-10 21:50:29 ----N---- C:\WINDOWS\system32\setupn.exe
2008-12-10 21:50:27 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2008-12-10 21:50:26 ----N---- C:\WINDOWS\system32\rasqec.dll
2008-12-10 21:50:24 ----N---- C:\WINDOWS\system32\qutil.dll
2008-12-10 21:50:23 ----N---- C:\WINDOWS\system32\qcliprov.dll
2008-12-10 21:50:23 ----N---- C:\WINDOWS\system32\qagentrt.dll
2008-12-10 21:50:23 ----N---- C:\WINDOWS\system32\qagent.dll
2008-12-10 21:50:22 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2008-12-10 21:50:20 ----N---- C:\WINDOWS\system32\onex.dll
2008-12-10 21:50:13 ----N---- C:\WINDOWS\system32\napstat.exe
2008-12-10 21:50:13 ----N---- C:\WINDOWS\system32\napmontr.dll
2008-12-10 21:50:13 ----N---- C:\WINDOWS\system32\napipsec.dll
2008-12-10 21:50:13 ----N---- C:\WINDOWS\system32\msxml6r.dll
2008-12-10 21:50:13 ----N---- C:\WINDOWS\system32\msxml6.dll
2008-12-10 21:50:11 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2008-12-10 21:50:11 ----N---- C:\WINDOWS\system32\mssha.dll
2008-12-10 21:50:01 ----N---- C:\WINDOWS\system32\mmcperf.exe
2008-12-10 21:50:01 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2008-12-10 21:50:01 ----N---- C:\WINDOWS\system32\mmcex.dll
2008-12-10 21:50:01 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2008-12-10 21:49:54 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2008-12-10 21:49:54 ----N---- C:\WINDOWS\system32\kmsvc.dll
2008-12-10 21:49:53 ----N---- C:\WINDOWS\system32\kbdpash.dll
2008-12-10 21:49:53 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2008-12-10 21:49:53 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2008-12-10 21:49:53 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2008-12-10 21:49:51 ----N---- C:\WINDOWS\system32\smtpapi.dll
2008-12-10 21:49:51 ----N---- C:\WINDOWS\system32\rwnh.dll
2008-12-10 21:49:44 ----A---- C:\WINDOWS\005164_.tmp
2008-12-10 21:49:42 ----N---- C:\WINDOWS\system32\eapsvc.dll
2008-12-10 21:49:42 ----N---- C:\WINDOWS\system32\eapqec.dll
2008-12-10 21:49:42 ----N---- C:\WINDOWS\system32\eappprxy.dll
2008-12-10 21:49:42 ----N---- C:\WINDOWS\system32\eapphost.dll
2008-12-10 21:49:42 ----N---- C:\WINDOWS\system32\eappgnui.dll
2008-12-10 21:49:42 ----N---- C:\WINDOWS\system32\eappcfg.dll
2008-12-10 21:49:42 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2008-12-10 21:49:42 ----N---- C:\WINDOWS\system32\eapolqec.dll
2008-12-10 21:49:41 ----N---- C:\WINDOWS\system32\dot3ui.dll
2008-12-10 21:49:41 ----N---- C:\WINDOWS\system32\dot3svc.dll
2008-12-10 21:49:41 ----N---- C:\WINDOWS\system32\dot3msm.dll
2008-12-10 21:49:41 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2008-12-10 21:49:41 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2008-12-10 21:49:41 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2008-12-10 21:49:41 ----N---- C:\WINDOWS\system32\dot3api.dll
2008-12-10 21:49:40 ----N---- C:\WINDOWS\system32\dimsroam.dll
2008-12-10 21:49:40 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2008-12-10 21:49:40 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2008-12-10 21:49:39 ----N---- C:\WINDOWS\system32\credssp.dll
2008-12-10 21:49:36 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2008-12-10 21:49:36 ----N---- C:\WINDOWS\system32\azroles.dll
2008-12-10 21:49:30 ----N---- C:\WINDOWS\system32\aaclient.dll
2008-12-10 21:35:27 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2008-12-10 21:00:20 ----D---- C:\WINDOWS\system32\PreInstall
2008-12-10 21:00:18 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2008-12-10 17:22:47 ----A---- C:\WINDOWS\system32\muweb.dll
2008-12-10 17:22:47 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2008-12-10 17:22:46 ----A---- C:\WINDOWS\system32\mucltui.dll
2008-12-10 15:57:19 ----HDC---- C:\WINDOWS\$NtUninstallWdf01005$
2008-12-10 15:54:59 ----D---- C:\Documents and Settings\haku\Application Data\Nokia
2008-12-10 15:54:57 ----D---- C:\Documents and Settings\haku\Application Data\PC Suite
2008-12-10 15:54:56 ----D---- C:\Documents and Settings\All Users\Application Data\PC Suite
2008-12-10 15:50:55 ----D---- C:\Program Files\Fichiers communs\PCSuite
2008-12-10 15:50:52 ----D---- C:\Program Files\Fichiers communs\Nokia
2008-12-10 15:50:25 ----D---- C:\Program Files\DIFX
2008-12-10 15:50:10 ----D---- C:\Program Files\PC Connectivity Solution
2008-12-10 15:49:57 ----A---- C:\WINDOWS\system32\wdfcoinstaller01005.dll
2008-12-10 15:49:57 ----A---- C:\WINDOWS\system32\nmwcdcocls.dll
2008-12-10 15:49:52 ----A---- C:\WINDOWS\system32\nmwcdcls.dll
2008-12-10 15:49:50 ----D---- C:\Program Files\Nokia
2008-12-10 15:48:47 ----D---- C:\Documents and Settings\All Users\Application Data\Installations
2008-12-10 14:50:18 ----D---- C:\Documents and Settings\haku\Application Data\Apple Computer
2008-12-10 14:50:11 ----A---- C:\WINDOWS\system32\GEARAspi.dll
2008-12-10 14:49:53 ----D---- C:\Program Files\iPod
2008-12-10 14:49:50 ----D---- C:\Program Files\iTunes
2008-12-10 14:49:50 ----D---- C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-12-10 14:49:36 ----D---- C:\Program Files\Bonjour
2008-12-10 14:48:57 ----D---- C:\Program Files\QuickTime
2008-12-10 14:48:56 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-12-10 14:48:36 ----D---- C:\Program Files\Apple Software Update
2008-12-10 14:48:11 ----D---- C:\Program Files\Fichiers communs\Apple
2008-12-10 14:48:10 ----D---- C:\Documents and Settings\All Users\Application Data\Apple
2008-12-08 19:58:53 ----D---- C:\Program Files\PhotoBrush
2008-12-08 18:00:27 ----D---- C:\Program Files\AAALOGO2008
2008-12-03 23:39:25 ----A---- C:\WINDOWS\CDPLAYER.INI
2008-11-28 07:51:20 ----D---- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2008-11-27 20:39:42 ----D---- C:\Program Files\Messenger Plus! Live
2008-11-26 20:38:05 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2008-11-26 20:37:46 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2008-11-26 20:37:20 ----HDC---- C:\WINDOWS\$NtUninstallKB915865$
2008-11-26 20:37:19 ----N---- C:\WINDOWS\system32\xmllite.dll
2008-11-26 20:35:41 ----A---- C:\WINDOWS\system32\MRT.exe
2008-11-26 20:35:38 ----D---- C:\WINDOWS\network diagnostic
2008-11-26 20:35:36 ----HDC---- C:\WINDOWS\$NtUninstallKB914440$
2008-11-26 20:35:27 ----HDC---- C:\WINDOWS\$NtUninstallKB904942$
2008-11-26 20:35:27 ----HD---- C:\WINDOWS\$hf_mig$
2008-11-26 17:38:11 ----D---- C:\Program Files\Easy CD-DA Extractor 8
2008-11-26 17:36:57 ----D---- C:\Program Files\WinRAR
2008-11-26 17:32:44 ----D---- C:\WINDOWS\Easy CD-DA Extractor
2008-11-26 17:32:44 ----D---- C:\Program Files\Easy CD-DA Extractor 9
2008-11-26 14:15:24 ----D---- C:\Program Files\AAALOGO
2008-11-26 00:02:05 ----A---- C:\WINDOWS\system32\ptpusb.dll
2008-11-26 00:02:04 ----A---- C:\WINDOWS\system32\ptpusd.dll
2008-11-25 23:10:49 ----A---- C:\WINDOWS\system32\devil.dll
2008-11-25 23:10:48 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2008-11-25 23:10:48 ----A---- C:\WINDOWS\system32\x.264.exe
2008-11-25 23:10:48 ----A---- C:\WINDOWS\system32\i420vfw.dll
2008-11-25 23:10:48 ----A---- C:\WINDOWS\system32\AVSredirect.dll
2008-11-25 23:10:48 ----A---- C:\WINDOWS\MOTA113.exe
2008-11-25 23:10:47 ----A---- C:\WINDOWS\x2.64.exe
2008-11-25 23:10:47 ----A---- C:\WINDOWS\meta4.exe
2008-11-25 23:10:46 ----D---- C:\Program Files\AviSynth 2.5
2008-11-25 23:10:39 ----RSH---- C:\WINDOWS\system32\nbDX.dll
2008-11-25 23:10:39 ----RSH---- C:\WINDOWS\system32\msfDX.dll
2008-11-25 23:10:39 ----RSH---- C:\WINDOWS\system32\flvDX.dll
2008-11-25 23:10:31 ----D---- C:\Program Files\eRightSoft
2008-11-25 23:06:58 ----D---- C:\Documents and Settings\haku\Application Data\LimeWire
2008-11-25 23:03:26 ----D---- C:\WINDOWS\Sun
2008-11-25 23:03:15 ----A---- C:\WINDOWS\system32\deploytk.dll
2008-11-25 23:03:04 ----D---- C:\Program Files\Java
2008-11-25 23:02:34 ----D---- C:\Documents and Settings\haku\Application Data\Sun
2008-11-25 23:01:36 ----D---- C:\Program Files\LimeWire
2008-11-25 22:02:54 ----A---- C:\WINDOWS\system32\lfpng13n.dll
2008-11-25 22:02:43 ----A---- C:\WINDOWS\system32\lfgif13n.dll
2008-11-25 22:02:42 ----A---- C:\WINDOWS\system32\ltkrn13n.dll
2008-11-25 22:02:42 ----A---- C:\WINDOWS\system32\ltimg13n.dll
2008-11-25 22:02:42 ----A---- C:\WINDOWS\system32\ltfil13n.dll
2008-11-25 22:02:42 ----A---- C:\WINDOWS\system32\ltefx13n.dll
2008-11-25 22:02:42 ----A---- C:\WINDOWS\system32\ltdis13n.dll
2008-11-25 22:02:42 ----A---- C:\WINDOWS\system32\lfcmp13n.dll
2008-11-25 22:02:42 ----A---- C:\WINDOWS\system32\lfbmp13n.dll
2008-11-25 21:34:10 ----D---- C:\Program Files\eMule
2008-11-24 22:53:45 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2008-11-24 22:53:38 ----D---- C:\Program Files\Fichiers communs\Adobe
2008-11-24 22:53:38 ----D---- C:\Program Files\Adobe
2008-11-24 22:52:34 ----D---- C:\Program Files\NOS
2008-11-24 22:52:34 ----D---- C:\Documents and Settings\All Users\Application Data\NOS
2008-11-24 21:38:59 ----D---- C:\Documents and Settings\haku\Application Data\OpenOffice.org2
2008-11-24 21:17:18 ----D---- C:\Documents and Settings\haku\Application Data\Canon
2008-11-24 21:14:54 ----A---- C:\WINDOWS\system32\CNMLM83.DLL
2008-11-24 21:13:15 ----HD---- C:\Documents and Settings\All Users\Application Data\CanonBJ
2008-11-24 21:13:09 ----A---- C:\WINDOWS\system32\CNMLM82.DLL
2008-11-24 21:13:07 ----HD---- C:\WINDOWS\system32\CanonIJ Uninstaller Information
2008-11-24 21:13:03 ----A---- C:\WINDOWS\system32\cnco180.dll
2008-11-24 21:13:03 ----A---- C:\WINDOWS\system32\CNCL180.DLL
2008-11-24 21:13:03 ----A---- C:\WINDOWS\system32\CNCI180.DLL
2008-11-24 21:13:03 ----A---- C:\WINDOWS\system32\CNCC180.DLL
2008-11-24 21:12:59 ----HD---- C:\Program Files\CanonBJ
2008-11-24 20:41:21 ----D---- C:\Program Files\Canon
2008-11-24 20:35:37 ----A---- C:\WINDOWS\ODBC.INI
2008-11-24 20:35:21 ----D---- C:\Program Files\MediaMonkey
2008-11-24 20:33:44 ----D---- C:\Program Files\OpenOffice.org 2.0
2008-11-24 20:32:48 ----D---- C:\Program Files\NimoCodec Pack
2008-11-24 20:32:48 ----D---- C:\Program Files\DivX
2008-11-24 19:19:47 ----D---- C:\Program Files\Lavasoft
2008-11-24 19:19:47 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-11-24 19:19:23 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-11-24 19:13:53 ----D---- C:\Documents and Settings\haku\Application Data\Oniton
2008-11-24 19:13:39 ----D---- C:\Program Files\Spybot - Search & Destroy
2008-11-24 19:13:39 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-11-24 19:08:58 ----D---- C:\Program Files\CCleaner
2008-11-24 18:58:55 ----D---- C:\Program Files\Real
2008-11-24 18:58:54 ----D---- C:\Program Files\Fichiers communs\Real
2008-11-24 18:58:53 ----D---- C:\Documents and Settings\haku\Application Data\Real
2008-11-24 18:58:10 ----D---- C:\Documents and Settings\haku\Application Data\Mozilla
2008-11-24 18:58:09 ----D---- C:\Program Files\Mozilla Firefox
2008-11-24 17:46:56 ----D---- C:\Program Files\U.R.Celeb
2008-11-24 08:09:38 ----D---- C:\Documents and Settings\haku\Application Data\Adobe
2008-11-24 07:57:09 ----D---- C:\Documents and Settings\haku\Application Data\Google
2008-11-24 07:56:58 ----D---- C:\Program Files\Google
2008-11-24 07:56:58 ----D---- C:\Documents and Settings\All Users\Application Data\Google
2008-11-24 00:53:49 ----A---- C:\WINDOWS\Ascd_tmp.ini
2008-11-24 00:50:33 ----SHD---- C:\RECYCLER
2008-11-24 00:45:01 ----D---- C:\Documents and Settings\haku\Application Data\vlc
2008-11-24 00:44:36 ----D---- C:\Program Files\VideoLAN
2008-11-24 00:32:42 ----D---- C:\Program Files\Avira
2008-11-24 00:32:42 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2008-11-24 00:30:29 ----DC---- C:\WINDOWS\system32\DRVSTORE
2008-11-24 00:26:45 ----SHDC---- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-11-24 00:26:41 ----D---- C:\Program Files\Windows Live
2008-11-24 00:26:33 ----D---- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-11-24 00:23:36 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2008-11-24 00:21:58 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2008-11-24 00:21:58 ----A---- C:\WINDOWS\system32\wups2.dll
2008-11-24 00:21:58 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2008-11-24 00:21:58 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2008-11-24 00:21:58 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2008-11-24 00:20:13 ----D---- C:\Documents and Settings\haku\Application Data\Macromedia
2008-11-24 00:18:34 ----RA---- C:\WINDOWS\system32\lvcoinst.ini
2008-11-24 00:18:34 ----RA---- C:\WINDOWS\system32\lvcoinst.dll
2008-11-24 00:18:33 ----RA---- C:\WINDOWS\system32\LVUI2RC.dll
2008-11-24 00:18:33 ----RA---- C:\WINDOWS\system32\LVUI2.dll
2008-11-24 00:18:33 ----RA---- C:\WINDOWS\system32\lvcodec2.dll
2008-11-24 00:18:32 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2008-11-24 00:17:12 ----RA---- C:\WINDOWS\system32\a3d.dll
2008-11-24 00:17:11 ----A---- C:\WINDOWS\system32\ksuser.dll
2008-11-24 00:16:46 ----RA---- C:\WINDOWS\system32\Prounstl.exe
2008-11-24 00:16:46 ----RA---- C:\WINDOWS\system32\IntelNic.dll
2008-11-24 00:16:46 ----RA---- C:\WINDOWS\system32\e100bmsg.dll
2008-11-24 00:16:25 ----RASH---- C:\boot.ini
2008-11-24 00:13:49 ----RSHDC---- C:\WINDOWS\system32\dllcache
2008-11-24 00:13:49 ----RSD---- C:\WINDOWS\Fonts
2008-11-24 00:13:49 ----RD---- C:\WINDOWS\Web
2008-11-24 00:13:49 ----HD---- C:\WINDOWS\inf
2008-11-24 00:13:49 ----D---- C:\WINDOWS\WinSxS
2008-11-24 00:13:49 ----D---- C:\WINDOWS\twain_32
2008-11-24 00:13:49 ----D---- C:\WINDOWS\Temp
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\wins
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\wbem
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\usmt
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\spool
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\ShellExt
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\Setup
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\ras
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\oobe
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\npp
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\mui
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\inetsrv
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\IME
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\icsxml
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\ias
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\export
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\drivers
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\dhcp
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\config
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\3com_dmi
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\3076
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\2052
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\1054
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\1042
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\1041
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\1037
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\1036
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\1033
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\1031
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\1028
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32\1025
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system32
2008-11-24 00:13:49 ----D---- C:\WINDOWS\system
2008-11-24 00:13:49 ----D---- C:\WINDOWS\security
2008-11-24 00:13:49 ----D---- C:\WINDOWS\Resources
2008-11-24 00:13:49 ----D---- C:\WINDOWS\repair
2008-11-24 00:13:49 ----D---- C:\WINDOWS\mui
2008-11-24 00:13:49 ----D---- C:\WINDOWS\msapps
2008-11-24 00:13:49 ----D---- C:\WINDOWS\msagent
2008-11-24 00:13:49 ----D---- C:\WINDOWS\Media
2008-11-24 00:13:49 ----D---- C:\WINDOWS\java
2008-11-24 00:13:49 ----D---- C:\WINDOWS\ime
2008-11-24 00:13:49 ----D---- C:\WINDOWS\Help
2008-11-24 00:13:49 ----D---- C:\WINDOWS\Driver Cache
2008-11-24 00:13:49 ----D---- C:\WINDOWS\Debug
2008-11-24 00:13:49 ----D---- C:\WINDOWS\Cursors
2008-11-24 00:13:49 ----D---- C:\WINDOWS\Connection Wizard
2008-11-24 00:13:49 ----D---- C:\WINDOWS\Config
2008-11-24 00:13:49 ----D---- C:\WINDOWS\AppPatch
2008-11-24 00:13:49 ----D---- C:\WINDOWS\addins
2008-11-24 00:13:49 ----D---- C:\WINDOWS
2008-11-24 00:05:05 ----D---- C:\Program Files\Neuf
2008-11-24 00:01:10 ----D---- C:\Documents and Settings\haku\Application Data\Help
2008-11-23 23:58:37 ----RSD---- C:\WINDOWS\assembly
2008-11-23 23:58:37 ----D---- C:\WINDOWS\Microsoft.NET
2008-11-23 23:58:36 ----D---- C:\WINDOWS\system32\URTTemp
2008-11-23 23:57:13 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2008-11-23 23:57:09 ----RA---- C:\WINDOWS\system32\atiiiexx.dll
2008-11-23 23:57:07 ----RA---- C:\WINDOWS\system32\ATIDEMGR.dll
2008-11-23 23:56:53 ----D---- C:\Program Files\ATI Technologies
2008-11-23 23:56:51 ----HD---- C:\Program Files\InstallShield Installation Information
2008-11-23 23:56:25 ----D---- C:\Program Files\Fichiers communs\InstallShield
2008-11-23 23:55:09 ----D---- C:\WINDOWS\SoftwareDistribution
2008-11-23 23:54:09 ----SD---- C:\WINDOWS\system32\Microsoft
2008-11-23 23:51:17 ----N---- C:\WINDOWS\system32\comsdupd.exe
2008-11-23 23:51:15 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2008-11-23 23:51:15 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2008-11-23 23:51:15 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2008-11-23 23:51:15 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\msdadiag.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\mp4sdmod.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\mp43dmod.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdukx.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdsmsno.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdsmsfi.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdno1.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdmlt48.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdmlt47.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdmaori.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdinmal.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdinben.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdinbe1.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\kbdfi1.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\ir50_qcx.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\ir50_qc.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\ir50_32.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\ir41_qcx.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\ir41_qc.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\ieencode.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\httpapi.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\fwcfg.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\fsquirt.exe
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\fltmc.exe
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\extmgr.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\dxdiagn.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\d3d9.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\cmsetacl.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\btpanui.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\bthserv.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\bthci.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\blastcln.exe
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\bitsprx3.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\bitsprx2.dll
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\auditusr.exe
2008-11-23 23:51:14 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2008-11-23 23:51:14 ----A---- C:\WINDOWS\system32\fltlib.dll
2008-11-23 23:51:14 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2008-11-23 23:51:14 ----A---- C:\WINDOWS\system32\ati3duag.dll
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\xpob2res.dll
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\w3ssl.dll
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\twext.dll
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\strmfilt.dll
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\smbinst.exe
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\slserv.exe
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\slrundll.exe
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\slgen.dll
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\slextspk.dll
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\slcoinst.dll
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\sdhcinst.dll
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\s3gnb.dll
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\powercfg.exe
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\pnrpnsp.dll
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\p2psvc.dll
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\p2pnetsh.dll
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\p2pgraph.dll
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\p2pgasvc.dll
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\p2p.dll
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\nv4_disp.dll
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2008-11-23 23:51:13 ----N---- C:\WINDOWS\system32\mspmsnsv.dll
2008-11-23 23:51:13 ----A---- C:\WINDOWS\system32\xpsp2res.dll
2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wuaueng1.dll
2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wuauclt1.exe
2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wshbth.dll
2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wscntfy.exe
2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wmvdmoe2.dll
2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wmspdmoe.dll
2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wmspdmod.dll
2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wmsdmoe2.dll
2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wmpdxm.dll
2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wmpasf.dll
2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wmp.dll
2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\wmerror.dll
2008-11-23 23:51:12 ----N---- C:\WINDOWS\system32\winshfhc.dll
2008-11-23 23:51:12 ----A---- C:\WINDOWS\system32\wuapi.dll
2008-11-23 23:51:12 ----A---- C:\WINDOWS\system32\wscsvc.dll
2008-11-23 23:51:12 ----A---- C:\WINDOWS\system32\wmidx.dll
2008-11-23 23:51:11 ----N---- C:\WINDOWS\system32\xmlprovi.dll
2008-11-23 23:51:11 ----N---- C:\WINDOWS\system32\xmlprov.dll
2008-11-23 23:51:11 ----N---- C:\WINDOWS\slrundll.exe
2008-11-23 23:51:11 ----D---- C:\WINDOWS\provisioning
2008-11-23 23:51:11 ----D---- C:\WINDOWS\peernet
2008-11-23 23:51:11 ----A---- C:\WINDOWS\system32\wuweb.dll
2008-11-23 23:51:11 ----A---- C:\WINDOWS\system32\wups.dll
2008-11-23 23:51:11 ----A---- C:\WINDOWS\system32\wucltui.dll
2008-11-23 23:49:49 ----D---- C:\WINDOWS\ServicePackFiles
2008-11-23 23:47:25 ----N---- C:\WINDOWS\system32\spmsg.dll
2008-11-23 23:47:25 ----A---- C:\WINDOWS\002176_.tmp
2008-11-23 23:47:21 ----D---- C:\WINDOWS\system32\ReinstallBackups
2008-11-23 23:47:04 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2008-11-23 23:46:01 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2008-11-23 23:45:59 ----D---- C:\WINDOWS\EHome
2008-11-23 23:40:16 ----SHD---- C:\WINDOWS\Installer
2008-11-23 23:40:14 ----D---- C:\Documents and Settings\haku\Application Data\Identities
2008-11-23 23:40:10 ----HD---- C:\Program Files\Uninstall Information
2008-11-23 23:40:06 ----SD---- C:\Documents and Settings\haku\Application Data\Microsoft
2008-11-23 23:40:06 ----ASH---- C:\Documents and Settings\haku\Application Data\desktop.ini
2008-11-23 23:39:38 ----SHD---- C:\System Volume Information
2008-11-23 23:39:37 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-11-23 23:32:43 ----D---- C:\WINDOWS\system32\xircom
2008-11-23 23:32:43 ----D---- C:\Program Files\xerox
2008-11-23 23:32:43 ----D---- C:\Program Files\microsoft frontpage
2008-11-23 23:32:33 ----A---- C:\WINDOWS\control.ini
2008-11-23 23:32:33 ----A---- C:\AUTOEXEC.BAT
2008-11-23 23:32:24 ----A---- C:\WINDOWS\system32\mapi32.dll
2008-11-23 23:31:43 ----SD---- C:\WINDOWS\Downloaded Program Files
2008-11-23 23:31:43 ----RD---- C:\WINDOWS\Offline Web Pages
2008-11-23 23:31:43 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2008-11-23 23:31:37 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2008-11-23 23:31:22 ----D---- C:\WINDOWS\system32\DirectX
2008-11-23 23:30:56 ----A---- C:\WINDOWS\system32\safrslv.dll
2008-11-23 23:30:56 ----A---- C:\WINDOWS\system32\safrdm.dll
2008-11-23 23:30:56 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2008-11-23 23:30:56 ----A---- C:\WINDOWS\system32\racpldlg.dll
2008-11-23 23:30:56 ----A---- C:\WINDOWS\system32\atrace.dll
2008-11-23 23:30:53 ----A---- C:\WINDOWS\system32\desktop.ini
2008-11-23 23:30:53 ----A---- C:\WINDOWS\desktop.ini
2008-11-23 23:30:45 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2008-11-23 23:30:45 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2008-11-23 23:30:45 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2008-11-23 23:30:43 ----A---- C:\WINDOWS\system32\acctres.dll
2008-11-23 23:30:41 ----D---- C:\Program Files\Fichiers communs\Services
2008-11-23 23:29:47 ----A---- C:\WINDOWS\system32\inetres.dll
2008-11-23 23:29:43 ----SD---- C:\WINDOWS\Tasks
2008-11-23 23:29:42 ----A---- C:\WINDOWS\system32\isign32.dll
2008-11-23 23:29:42 ----A---- C:\WINDOWS\system32\inetcfg.dll
2008-11-23 23:29:42 ----A---- C:\WINDOWS\system32\icwphbk.dll
2008-11-23 23:29:42 ----A---- C:\WINDOWS\system32\icwdial.dll
2008-11-23 23:29:42 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2008-11-23 23:29:39 ----D---- C:\Program Files\Fichiers communs\MSSoap
2008-11-23 23:29:35 ----D---- C:\WINDOWS\system32\Macromed
2008-11-23 23:29:35 ----D---- C:\WINDOWS\srchasst
2008-11-23 23:29:34 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2008-11-23 23:29:34 ----A---- C:\WINDOWS\system32\qmgr.dll
2008-11-23 23:29:33 ----D---- C:\Program Files\Movie Maker
2008-11-23 23:29:30 ----D---- C:\WINDOWS\system32\Restore
2008-11-23 23:29:30 ----D---- C:\WINDOWS\PCHealth
2008-11-23 23:29:30 ----A---- C:\WINDOWS\system32\srsvc.dll
2008-11-23 23:29:30 ----A---- C:\WINDOWS\system32\srrstr.dll
2008-11-23 23:29:30 ----A---- C:\WINDOWS\system32\srclient.dll
2008-11-23 23:29:29 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2008-11-23 23:29:29 ----A---- C:\WINDOWS\system32\msconf.dll
2008-11-23 23:29:29 ----A---- C:\WINDOWS\system32\mnmdd.dll
2008-11-23 23:29:29 ----A---- C:\WINDOWS\system32\ils.dll
2008-11-23 23:29:27 ----D---- C:\Program Files\NetMeeting
2008-11-23 23:29:27 ----A---- C:\WINDOWS\system32\msoert2.dll
2008-11-23 23:29:27 ----A---- C:\WINDOWS\system32\msoeacct.dll
2008-11-23 23:29:26 ----D---- C:\Program Files\Outlook Express
2008-11-23 23:29:26 ----A---- C:\WINDOWS\system32\schedsvc.dll
2008-11-23 23:29:26 ----A---- C:\WINDOWS\system32\mstinit.exe
2008-11-23 23:29:26 ----A---- C:\WINDOWS\system32\mstask.dll
2008-11-23 23:29:26 ----A---- C:\WINDOWS\system32\inetcomm.dll
2008-11-23 23:29:21 ----D---- C:\Program Files\Fichiers communs\System
2008-11-23 23:29:20 ----D---- C:\Program Files\Internet Explorer
2008-11-23 23:29:03 ----D---- C:\Program Files\ComPlus Applications
2008-11-23 23:29:02 ----A---- C:\WINDOWS\vbaddin.ini
2008-11-23 23:29:02 ----A---- C:\WINDOWS\vb.ini
2008-11-23 23:29:01 ----D---- C:\WINDOWS\Registration
2008-11-23 23:28:59 ----HD---- C:\Program Files\WindowsUpdate
2008-11-23 23:28:58 ----D---- C:\Program Files\Windows Media Player
2008-11-23 23:28:58 ----D---- C:\Program Files\Services en ligne
2008-11-23 23:28:55 ----D---- C:\Program Files\Messenger
2008-11-23 23:26:24 ----D---- C:\Program Files\MSN Gaming Zone
2008-11-23 23:26:24 ----A---- C:\WINDOWS\system32\write.exe
2008-11-23 23:26:10 ----A---- C:\WINDOWS\system32\accwiz.exe
2008-11-23 23:26:09 ----A---- C:\WINDOWS\system32\sndvol32.exe
2008-11-23 23:26:09 ----A---- C:\WINDOWS\system32\sndrec32.exe
2008-11-23 23:26:09 ----A---- C:\WINDOWS\system32\hypertrm.dll
2008-11-23 23:26:09 ----A---- C:\WINDOWS\system32\hticons.dll
2008-11-23 23:26:09 ----A---- C:\WINDOWS\system32\avwav.dll
2008-11-23 23:26:09 ----A---- C:\WINDOWS\system32\avtapi.dll
2008-11-23 23:26:09 ----A---- C:\WINDOWS\system32\avmeter.dll
2008-11-23 23:26:08 ----A---- C:\WINDOWS\system32\winchat.exe
2008-11-23 23:26:03 ----A---- C:\WINDOWS\system32\getuname.dll
2008-11-23 23:26:03 ----A---- C:\WINDOWS\system32\charmap.exe
2008-11-23 23:26:02 ----A---- C:\WINDOWS\system32\calc.exe
2008-11-23 23:24:03 ----A---- C:\WINDOWS\system32\sol.exe
2008-11-23 23:23:54 ----A---- C:\WINDOWS\system32\winmine.exe
2008-11-23 23:23:54 ----A---- C:\WINDOWS\system32\mshearts.exe
2008-11-23 23:23:53 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2008-11-23 23:23:53 ----A---- C:\WINDOWS\system32\reset.exe
2008-11-23 23:23:53 ----A---- C:\WINDOWS\system32\rdshost.exe
2008-11-23 23:23:53 ----A---- C:\WINDOWS\system32\freecell.exe
2008-11-23 23:23:52 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2008-11-23 23:23:52 ----A---- C:\WINDOWS\system32\tslabels.ini
2008-11-23 23:23:52 ----A---- C:\WINDOWS\system32\tskill.exe
2008-11-23 23:23:52 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2008-11-23 23:23:52 ----A---- C:\WINDOWS\system32\tscon.exe
2008-11-23 23:23:51 ----A---- C:\WINDOWS\system32\shadow.exe
2008-11-23 23:23:51 ----A---- C:\WINDOWS\system32\rwinsta.exe
2008-11-23 23:23:51 ----A---- C:\WINDOWS\system32\regini.exe
2008-11-23 23:23:51 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2008-11-23 23:23:51 ----A---- C:\WINDOWS\system32\qwinsta.exe
2008-11-23 23:23:51 ----A---- C:\WINDOWS\system32\qprocess.exe
2008-11-23 23:23:51 ----A---- C:\WINDOWS\system32\qappsrv.exe
2008-11-23 23:23:51 ----A---- C:\WINDOWS\system32\msg.exe
2008-11-23 23:23:51 ----A---- C:\WINDOWS\system32\logoff.exe
2008-11-23 23:23:51 ----A---- C:\WINDOWS\system32\cdmodem.dll
2008-11-23 23:23:50 ----A---- C:\WINDOWS\system32\xolehlp.dll
2008-11-23 23:23:50 ----A---- C:\WINDOWS\system32\mtxoci.dll
2008-11-23 23:23:50 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2008-11-23 23:23:50 ----A---- C:\WINDOWS\system32\msdtctm.dll
2008-11-23 23:23:50 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2008-11-23 23:23:50 ----A---- C:\WINDOWS\system32\msdtclog.dll
2008-11-23 23:23:50 ----A---- C:\WINDOWS\system32\msdtc.exe
2008-11-23 23:23:49 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2008-11-23 23:23:49 ----A---- C:\WINDOWS\system32\mtxex.dll
2008-11-23 23:23:49 ----A---- C:\WINDOWS\system32\mtxdm.dll
2008-11-23 23:23:49 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2008-11-23 23:23:49 ----A---- C:\WINDOWS\system32\comrepl.dll
2008-11-23 23:23:49 ----A---- C:\WINDOWS\system32\comaddin.dll
2008-11-23 23:23:49 ----A---- C:\WINDOWS\system32\colbact.dll
2008-11-23 23:23:48 ----A---- C:\WINDOWS\system32\stclient.dll
2008-11-23 23:23:48 ----A---- C:\WINDOWS\system32\clbcatex.dll
2008-11-23 23:23:48 ----A---- C:\WINDOWS\system32\catsrvps.dll
2008-11-23 23:23:48 ----A---- C:\WINDOWS\system32\catsrv.dll
2008-11-23 23:23:47 ----A---- C:\WINDOWS\system32\comuid.dll
2008-11-23 23:23:47 ----A---- C:\WINDOWS\system32\comsnap.dll
2008-11-23 23:23:47 ----A---- C:\WINDOWS\system32\clbcatq.dll
2008-11-23 23:23:40 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2008-11-23 23:23:40 ----A---- C:\WINDOWS\system32\servdeps.dll
2008-11-23 23:23:40 ----A---- C:\WINDOWS\system32\mmfutil.dll
2008-11-23 23:23:40 ----A---- C:\WINDOWS\system32\cmprops.dll
2008-11-23 23:23:36 ----D---- C:\Program Files\Windows NT
2008-11-23 23:23:36 ----D---- C:\Program Files\MSN
2008-11-23 23:23:36 ----A---- C:\WINDOWS\system32\spider.exe
2008-11-23 23:23:36 ----A---- C:\WINDOWS\system32\mspaint.exe
2008-11-23 23:23:36 ----A---- C:\WINDOWS\system32\mplay32.exe
2008-11-23 23:23:36 ----A---- C:\WINDOWS\system32\clipbrd.exe
2008-11-23 23:23:35 ----A---- C:\WINDOWS\system32\wuauserv.dll
2008-11-23 23:23:35 ----A---- C:\WINDOWS\system32\wuaueng.dll
2008-11-23 23:23:35 ----A---- C:\WINDOWS\system32\wuauclt.exe
2008-11-23 23:23:35 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2008-11-23 23:23:35 ----A---- C:\WINDOWS\system32\remotepg.dll
2008-11-23 23:23:35 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2008-11-23 23:23:35 ----A---- C:\WINDOWS\system32\mstscax.dll
2008-11-23 23:23:35 ----A---- C:\WINDOWS\system32\mstsc.exe
2008-11-23 23:23:34 ----D---- C:\WINDOWS\system32\MsDtc
2008-11-23 23:23:34 ----D---- C:\WINDOWS\system32\Com
2008-11-23 23:23:34 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2008-11-23 23:23:34 ----A---- C:\WINDOWS\system32\termsrv.dll
2008-11-23 23:23:34 ----A---- C:\WINDOWS\system32\sessmgr.exe
2008-11-23 23:23:34 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2008-11-23 23:23:34 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2008-11-23 23:23:34 ----A---- C:\WINDOWS\system32\rdpclip.exe
2008-11-23 23:23:34 ----A---- C:\WINDOWS\system32\rdchost.dll
2008-11-23 23:23:34 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2008-11-23 23:23:34 ----A---- C:\WINDOWS\system32\icaapi.dll
2008-11-23 23:23:34 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2008-11-23 23:23:33 ----A---- C:\WINDOWS\system32\comsvcs.dll
2008-11-23 23:23:33 ----A---- C:\WINDOWS\system32\catsrvut.dll
2008-11-23 23:23:31 ----A---- C:\WINDOWS\system32\licwmi.dll
2008-11-23 23:23:17 ----A---- C:\WINDOWS\system32\h323log.txt
2008-11-23 23:20:37 ----A---- C:\WINDOWS\system32\usbui.dll
2008-11-23 23:19:55 ----D---- C:\Program Files\Fichiers communs\ODBC
2008-11-23 23:19:55 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-11-23 23:19:55 ----A---- C:\WINDOWS\ODBCINST.INI
2008-11-23 23:19:53 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2008-11-23 23:19:52 ----RD---- C:\Program Files
2008-11-23 23:19:52 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2008-11-23 23:19:52 ----D---- C:\Program Files\Fichiers communs
2008-11-23 23:19:50 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2008-11-23 23:19:50 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2008-11-23 23:19:50 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbdur.dll
2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbdru.dll
2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2008-11-23 23:19:49 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2008-11-23 23:19:48 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2008-11-23 23:19:47 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2008-11-23 23:19:47 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2008-11-23 23:19:47 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2008-11-23 23:19:47 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2008-11-23 23:19:47 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2008-11-23 23:19:47 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2008-11-23 23:19:47 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2008-11-23 23:19:46 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2008-11-23 23:19:46 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2008-11-23 23:19:46 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2008-11-23 23:19:46 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2008-11-23 23:19:46 ----RA---- C:\WINDOWS\system32\kbdest.dll
2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdro.dll
2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2008-11-23 23:19:44 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2008-11-23 23:19:42 ----A---- C:\WINDOWS\system32\irclass.dll
2008-11-23 23:19:41 ----A---- C:\WINDOWS\system32\spxcoins.dll
2008-11-23 23:19:41 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2008-11-23 23:19:41 ----A---- C:\WINDOWS\system32\dgsetup.dll
2008-11-23 23:19:41 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2008-11-23 23:19:40 ----A---- C:\WINDOWS\TASKMAN.EXE
2008-11-23 23:19:39 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2008-11-23 23:19:39 ----A---- C:\WINDOWS\system32\storprop.dll
2008-11-23 23:19:39 ----A---- C:\WINDOWS\system32\batt.dll
2008-11-23 23:19:39 ----A---- C:\WINDOWS\notepad.exe
2008-11-23 23:19:35 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2008-11-23 23:19:31 ----RA---- C:\WINDOWS\SETA.tmp
2008-11-23 23:19:29 ----RA---- C:\WINDOWS\SET3.tmp
2008-11-23 23:19:25 ----D---- C:\WINDOWS\system32\CatRoot2
2008-11-23 23:19:25 ----D---- C:\WINDOWS\system32\CatRoot
2008-11-23 23:19:20 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2008-11-23 23:18:53 ----D---- C:\Documents and Settings
======List of files/folders modified in the last 1 months======
- 1
- 2