Win32Backdoor.TDSS

C'est magique ton truc, mon PC revit ! Merci infiniment.

Voici le rapport SDFix :

===================================================================

[b]SDFix: Version 1.240 [/b]
Run by Administrateur on 24/01/2009 at 09:24

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:

Restoring Default Security Values
Restoring Default Hosts File

Rebooting

b]Checking Files [/b]:

Trojan Files Found:

C:\WINDOWS\system32\drivers\TDSSpaxt.sys - Deleted
C:\WINDOWS\system32\TDSSofxh.dll - Deleted

Removing Temp Files

[b]ADS Check [/b]:

[b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-24 09:28:02
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:94,c7,68,cc,cc,ce,0f,e0,cc,7a,8d,f7,3e,fe,81,9f,3c,27,ae,3a,f7,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:94,c7,68,cc,cc,ce,0f,e0,cc,7a,8d,f7,3e,fe,81,9f,3c,27,ae,3a,f7,..

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0

[b]Remaining Services [/b]:

Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\ma-config.com\\maconfservice.exe"="C:\\Program Files\\ma-config.com\\maconfservice.exe:LocalSubNet:Enabled:maconfservice"
"C:\\Program Files\\Pinnacle\\Studio 10\\programs\\RM.exe"="C:\\Program Files\\Pinnacle\\Studio 10\\programs\\RM.exe:*:Enabled:Render Manager"
"C:\\Program Files\\Pinnacle\\Studio 10\\programs\\Studio.exe"="C:\\Program Files\\Pinnacle\\Studio 10\\programs\\Studio.exe:*:Enabled:Studio"
"C:\\Program Files\\Pinnacle\\Studio 10\\programs\\PMSRegisterFile.exe"="C:\\Program Files\\Pinnacle\\Studio 10\\programs\\PMSRegisterFile.exe:*:Enabled:PMSRegisterFile"
"C:\\Program Files\\Pinnacle\\Studio 10\\programs\\umi.exe"="C:\\Program Files\\Pinnacle\\Studio 10\\programs\\umi.exe:*:Enabled:umi"
"C:\\WINDOWS\\explorer.exe"="C:\\WINDOWS\\explorer.exe:*:Enabled:Explorer"
"C:\\Program Files\\McAfee\\VirusScan\\mcsysmon.exe"="C:\\Program Files\\McAfee\\VirusScan\\mcsysmon.exe:*:Enabled:mcsysmon"
"C:\\WINDOWS\\system32\\spoolsv.exe"="C:\\WINDOWS\\system32\\spoolsv.exe:*:Enabled:spoolsv"
"C:\\WINDOWS\\system32\\agrsmsvc.exe"="C:\\WINDOWS\\system32\\agrsmsvc.exe:*:Enabled:agrsmsvc"
"C:\\WINDOWS\\system32\\winlogon.exe"="C:\\WINDOWS\\system32\\winlogon.exe:*:Enabled:winlogon"
"C:\\WINDOWS\\system32\\services.exe"="C:\\WINDOWS\\system32\\services.exe:*:Enabled:services"
"C:\\WINDOWS\\system32\\lsass.exe"="C:\\WINDOWS\\system32\\lsass.exe:*:Enabled:lsass"
"C:\\WINDOWS\\system32\\logonui.exe"="C:\\WINDOWS\\system32\\logonui.exe:*:Enabled:logonui"
"C:\\Program Files\\OrangeHSS\\Connectivity\\ConnectivityManager.exe"="C:\\Program Files\\OrangeHSS\\Connectivity\\ConnectivityManager.exe:*:enabled:CSS"
"C:\\WINDOWS\\system32\\rundll32.exe"="C:\\WINDOWS\\system32\\rundll32.exe:*:Enabled:rundll32"
"C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"="C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe:*:Enabled:wmiprvse"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[b]Remaining Files [/b]:

File Backups: - C:\SDFix\backups\backups.zip

[b]Files with Hidden Attributes [/b]:

Sun 13 Apr 2008 10,752 A..H. --- "C:\WINDOWS\hh.exe"
Fri 13 Nov 1998 308,224 A..H. --- "C:\WINDOWS\IsUn040c.exe"
Wed 12 Apr 2006 217,073 A..H. --- "C:\WINDOWS\meta4.exe"
Wed 5 Apr 2006 66,560 A..H. --- "C:\WINDOWS\MOTA113.exe"
Sun 13 Apr 2008 70,656 A..H. --- "C:\WINDOWS\NOTEPAD.EXE"
Sun 13 Apr 2008 153,088 A..H. --- "C:\WINDOWS\regedit.exe"
Tue 24 Feb 2004 41,219 A..H. --- "C:\WINDOWS\RSETPATH.exe"
Sun 13 Apr 2008 1,246,130 A..HR --- "C:\WINDOWS\SET3.tmp"
Sun 13 Apr 2008 1,088,840 A..HR --- "C:\WINDOWS\SET4.tmp"
Sun 13 Apr 2008 16,825 A..HR --- "C:\WINDOWS\SET8.tmp"
Thu 5 Aug 2004 15,872 A..H. --- "C:\WINDOWS\TASKMAN.EXE"
Thu 5 Aug 2004 94,864 A..H. --- "C:\WINDOWS\twain.dll"
Sun 13 Apr 2008 50,688 A..H. --- "C:\WINDOWS\twain_32.dll"
Thu 5 Aug 2004 49,680 A..H. --- "C:\WINDOWS\twunk_16.exe"
Thu 5 Aug 2004 25,600 A..H. --- "C:\WINDOWS\twunk_32.exe"
Wed 6 Nov 1996 302,592 A..H. --- "C:\WINDOWS\unin040c.exe"
Wed 23 Jun 1999 86,016 A..H. --- "C:\WINDOWS\unvise32.exe"
Thu 5 Aug 2004 18,944 A..H. --- "C:\WINDOWS\vmmreg32.dll"
Thu 5 Aug 2004 256,768 A..H. --- "C:\WINDOWS\winhelp.exe"
Sun 13 Apr 2008 288,256 A..H. --- "C:\WINDOWS\winhlp32.exe"
Sat 7 Oct 2006 502,784 A..H. --- "C:\WINDOWS\x2.64.exe"
Thu 5 Aug 2004 707 A..H. --- "C:\WINDOWS\_default.pif"
Sun 13 Apr 2008 39,424 A..H. --- "C:\WINDOWS\AppPatch\AcAdProc.dll"
Sun 13 Apr 2008 1,852,928 A..H. --- "C:\WINDOWS\AppPatch\AcGenral.dll"
Sun 13 Apr 2008 451,072 A..H. --- "C:\WINDOWS\AppPatch\AcLayers.dll"
Sun 13 Apr 2008 141,312 A..H. --- "C:\WINDOWS\AppPatch\AcLua.dll"
Sun 13 Apr 2008 245,248 A..H. --- "C:\WINDOWS\AppPatch\AcSpecfc.dll"
Sun 13 Apr 2008 116,224 A..H. --- "C:\WINDOWS\AppPatch\AcXtrnal.dll"
Mon 24 Mar 2008 1,527,056 A..H. --- "C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe"
Thu 5 Aug 2004 152,576 A..H. --- "C:\WINDOWS\Help\bnts.dll"
Sun 13 Apr 2008 34,816 A..H. --- "C:\WINDOWS\Help\sniffpol.dll"
Sun 13 Apr 2008 33,280 A..H. --- "C:\WINDOWS\Help\sstub.dll"
Sun 13 Apr 2008 279,040 A..H. --- "C:\WINDOWS\Help\tshoot.dll"
Sun 13 Apr 2008 220,160 A..H. --- "C:\WINDOWS\ime\mscandui.dll"
Sun 13 Apr 2008 130,048 A..H. --- "C:\WINDOWS\ime\SOFTKBD.DLL"
Sun 13 Apr 2008 62,976 A..H. --- "C:\WINDOWS\ime\SPGRMR.dll"
Sun 13 Apr 2008 272,384 A..H. --- "C:\WINDOWS\ime\SPTIP.dll"
Wed 11 Aug 2004 192,512 A..H. --- "C:\WINDOWS\inf\unregmp2.exe"
Tue 23 Feb 1999 27,136 A..H. --- "C:\WINDOWS\Lhsp\ttsFRFwr.dll"
Sun 13 Apr 2008 24,064 A..H. --- "C:\WINDOWS\msagent\agentanm.dll"
Sun 13 Apr 2008 214,016 A..H. --- "C:\WINDOWS\msagent\agentctl.dll"
Sun 13 Apr 2008 42,496 A..H. --- "C:\WINDOWS\msagent\agentdp2.dll"
Sun 13 Apr 2008 57,344 A..H. --- "C:\WINDOWS\msagent\agentdpv.dll"
Sun 13 Apr 2008 49,152 A..H. --- "C:\WINDOWS\msagent\agentmpx.dll"
Sun 13 Apr 2008 24,064 A..H. --- "C:\WINDOWS\msagent\agentpsh.dll"
Sun 13 Apr 2008 44,032 A..H. --- "C:\WINDOWS\msagent\agentsr.dll"
Sun 13 Apr 2008 256,512 A..H. --- "C:\WINDOWS\msagent\agentsvr.exe"
Sun 13 Apr 2008 24,064 A..H. --- "C:\WINDOWS\msagent\agtintl.dll"
Sun 13 Apr 2008 39,936 A..H. --- "C:\WINDOWS\msagent\mslwvtts.dll"
Sun 13 Apr 2008 33,792 A..H. --- "C:\WINDOWS\Network Diagnostic\custsat.dll"
Sun 13 Apr 2008 558,080 A..H. --- "C:\WINDOWS\Network Diagnostic\xpnetdiag.exe"
Sun 13 Apr 2008 151,552 A..H. --- "C:\WINDOWS\PeerNet\sqldb20.dll"
Sun 13 Apr 2008 462,848 A..H. --- "C:\WINDOWS\PeerNet\sqlqp20.dll"
Sun 13 Apr 2008 110,592 A..H. --- "C:\WINDOWS\PeerNet\sqlse20.dll"
--- 110,592 A.SH. --- "C:\WINDOWS\system32\bejamuge.dll"
--- 54,272 A.SH. --- "C:\WINDOWS\system32\binuvete.dll"
Mon 19 Jan 2009 99,060 A..H. --- "C:\WINDOWS\system32\dupejume.dll"
--- 100,352 A.SH. --- "C:\WINDOWS\system32\juteruno.dll"
Wed 21 Jan 2009 100,514 A.SH. --- "C:\WINDOWS\system32\kohuhoro.dll"
Wed 21 Jan 2009 63,656 A.SH. --- "C:\WINDOWS\system32\luliwedo.dll"
Thu 22 Jan 2009 64,093 A.SH. --- "C:\WINDOWS\system32\midogiru.dll"
--- 63,656 A.SH. --- "C:\WINDOWS\system32\nukavuso.dll"
Mon 19 Jan 2009 133,922 A.SH. --- "C:\WINDOWS\system32\ogibrn.dll"
--- 63,656 A.SH. --- "C:\WINDOWS\system32\pupepume.dll"
--- 63,656 A.SH. --- "C:\WINDOWS\system32\ranuvozo.dll"
Mon 19 Jan 2009 133,922 A.SH. --- "C:\WINDOWS\system32\rapepute.dll"
--- 48,128 A.SH. --- "C:\WINDOWS\system32\tibarozo.dll"
Fri 25 Feb 2005 15,072 A..H. --- "C:\WINDOWS\$hf_mig$\KB898461\spmsg.dll"
Fri 25 Feb 2005 213,216 A..H. --- "C:\WINDOWS\$hf_mig$\KB898461\spuninst.exe"
Fri 25 Feb 2005 22,752 A..H. --- "C:\WINDOWS\$hf_mig$\KB898461\spupdsvc.exe"
Fri 30 Nov 2007 18,296 A..H. --- "C:\WINDOWS\$hf_mig$\KB946648\spmsg.dll"
Fri 30 Nov 2007 234,872 A..H. --- "C:\WINDOWS\$hf_mig$\KB946648\spuninst.exe"
Fri 30 Nov 2007 18,296 A..H. --- "C:\WINDOWS\$hf_mig$\KB950762\spmsg.dll"
Fri 30 Nov 2007 234,872 A..H. --- "C:\WINDOWS\$hf_mig$\KB950762\spuninst.exe"
Fri 30 Nov 2007 18,296 A..H. --- "C:\WINDOWS\$hf_mig$\KB950974\spmsg.dll"
Fri 30 Nov 2007 234,872 A..H. --- "C:\WINDOWS\$hf_mig$\KB950974\spuninst.exe"
Fri 30 Nov 2007 18,296 A..H. --- "C:\WINDOWS\$hf_mig$\KB951066\spmsg.dll"
Fri 30 Nov 2007 234,872 A..H. --- "C:\WINDOWS\$hf_mig$\KB951066\spuninst.exe"
Fri 30 Nov 2007 18,296 A..H. --- "C:\WINDOWS\$hf_mig$\KB951072-v2\spmsg.dll"
Fri 30 Nov 2007 234,872 A..H. --- "C:\WINDOWS\$hf_mig$\KB951072-v2\spuninst.exe"
Fri 30 Nov 2007 18,296 A..H. --- "C:\WINDOWS\$hf_mig$\KB951376-v2\spmsg.dll"
Fri 30 Nov 2007 234,872 A..H. --- "C:\WINDOWS\$hf_mig$\KB951376-v2\spuninst.exe"
Fri 30 Nov 2007 18,296 A..H. --- "C:\WINDOWS\$hf_mig$\KB951698\spmsg.dll"
Fri 30 Nov 2007 234,872 A..H. --- "C:\WINDOWS\$hf_mig$\KB951698\spuninst.exe"
Fri 30 Nov 2007 18,296 A..H. --- "C:\WINDOWS\$hf_mig$\KB951748\spmsg.dll"
Fri 30 Nov 2007 234,872 A..H. --- "C:\WINDOWS\$hf_mig$\KB951748\spuninst.exe"
Fri 30 Nov 2007 18,296 A..H. --- "C:\WINDOWS\$hf_mig$\KB951978\spmsg.dll"
Fri 30 Nov 2007 234,872 A..H. --- "C:\WINDOWS\$hf_mig$\KB951978\spuninst.exe"
Fri 30 Nov 2007 18,296 A..H. --- "C:\WINDOWS\$hf_mig$\KB952954\spmsg.dll"
Fri 30 Nov 2007 234,872 A..H. --- "C:\WINDOWS\$hf_mig$\KB952954\spuninst.exe"
Fri 30 Nov 2007 18,296 A..H. --- "C:\WINDOWS\$hf_mig$\KB958215\spmsg.dll"
Fri 30 Nov 2007 234,872 A..H. --- "C:\WINDOWS\$hf_mig$\KB958215\spuninst.exe"
Sat 14 Jun 2008 272,768 ...H. --- "C:\WINDOWS\Driver Cache\i386\bthport.sys"
Sat 18 Oct 2008 266,240 A..HR --- "C:\WINDOWS\Installer\{044600C0-9149-45C6-A806-F2BF9CFCE762}\ENCSCICO.EXE"
Mon 1 Jan 2001 166,912 A..HR --- "C:\WINDOWS\Installer\{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}\places.exe"
Mon 1 Jan 2001 10,134 A..HR --- "C:\WINDOWS\Installer\{3C6BD212-5680-4758-83ED-21171BCCBEB7}\ARPPRODUCTICON.exe"
Tue 30 Sep 2008 12,288 A..HR --- "C:\WINDOWS\Installer\{9017040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe"
Tue 30 Sep 2008 282,624 A..HR --- "C:\WINDOWS\Installer\{9017040C-6000-11D3-8CFE-0150048383C9}\fpicon.exe"
Tue 30 Sep 2008 135,168 A..HR --- "C:\WINDOWS\Installer\{9017040C-6000-11D3-8CFE-0150048383C9}\misc.exe"
Tue 30 Sep 2008 27,136 A..HR --- "C:\WINDOWS\Installer\{9017040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe"
Tue 30 Sep 2008 4,096 A..HR --- "C:\WINDOWS\Installer\{9017040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe"
Thu 25 Sep 2008 32,768 A..HR --- "C:\WINDOWS\Installer\{90AF040C-6000-11D3-8CFE-0150048383C9}\ppvwicon.exe"
Tue 13 Jan 2009 2,560 A..HR --- "C:\WINDOWS\Installer\{911B040C-6000-11D3-8CFE-0050048383C9}\cagicon.exe"
Tue 13 Jan 2009 34,304 A..HR --- "C:\WINDOWS\Installer\{911B040C-6000-11D3-8CFE-0050048383C9}\misc.exe"
Tue 13 Jan 2009 8,192 A..HR --- "C:\WINDOWS\Installer\{911B040C-6000-11D3-8CFE-0050048383C9}\mspicons.exe"
Tue 13 Jan 2009 3,584 A..HR --- "C:\WINDOWS\Installer\{911B040C-6000-11D3-8CFE-0050048383C9}\opwicon.exe"
Tue 13 Jan 2009 16,384 A..HR --- "C:\WINDOWS\Installer\{911B040C-6000-11D3-8CFE-0050048383C9}\PEicons.exe"
Tue 13 Jan 2009 22,528 A..HR --- "C:\WINDOWS\Installer\{911B040C-6000-11D3-8CFE-0050048383C9}\unbndico.exe"
Tue 13 Jan 2009 45,056 A..HR --- "C:\WINDOWS\Installer\{911B040C-6000-11D3-8CFE-0050048383C9}\wordicon.exe"
Thu 1 Jan 2009 29,926 A..HR --- "C:\WINDOWS\Installer\{A77F3C2D-50CC-4A29-A1FB-1E018BE4DCA2}\ARPPRODUCTICON.exe"
Wed 19 Nov 2008 295,606 A..HR --- "C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A81200000003}\SC_Reader.exe"
Mon 29 Sep 2008 323,584 A..HR --- "C:\WINDOWS\Installer\{B6ADA0E4-9451-43EB-B86E-878AD9E68D4F}\NewShortcut1_C673DF680CDE41FC9DFBF63D31DE4F28.exe"
Mon 29 Sep 2008 323,584 A..HR --- "C:\WINDOWS\Installer\{B6ADA0E4-9451-43EB-B86E-878AD9E68D4F}\NewShortcut2_C673DF680CDE41FC9DFBF63D31DE4F28.exe"
Mon 29 Sep 2008 335,872 A..HR --- "C:\WINDOWS\Installer\{B6ADA0E4-9451-43EB-B86E-878AD9E68D4F}\NewShortcut1_FE82206EF6124B479F4EDD27A1E056A4.exe"
Sat 3 Jan 2009 32,768 A..HR --- "C:\WINDOWS\Installer\{C04E32E0-0416-434D-AFB9-6969D703A9EF}\icon.exe"
Sun 5 Oct 2008 10,134 A..HR --- "C:\WINDOWS\Installer\{D6DE02C7-1F47-11D4-9515-00105AE4B89A}\AnimDoc.exe"
Sun 5 Oct 2008 13,390 A..HR --- "C:\WINDOWS\Installer\{D6DE02C7-1F47-11D4-9515-00105AE4B89A}\browse7b.exe"
Sun 5 Oct 2008 2,734 A..HR --- "C:\WINDOWS\Installer\{D6DE02C7-1F47-11D4-9515-00105AE4B89A}\mip.exe"
Sun 5 Oct 2008 13,390 A..HR --- "C:\WINDOWS\Installer\{D6DE02C7-1F47-11D4-9515-00105AE4B89A}\psp7.exe"
Sun 5 Oct 2008 18,374 A..HR --- "C:\WINDOWS\Installer\{D6DE02C7-1F47-11D4-9515-00105AE4B89A}\Psp7File.exe"
Sun 5 Oct 2008 11,022 A..HR --- "C:\WINDOWS\Installer\{D6DE02C7-1F47-11D4-9515-00105AE4B89A}\PSP7workspace.exe"
Sun 5 Oct 2008 11,022 A..HR --- "C:\WINDOWS\Installer\{D6DE02C7-1F47-11D4-9515-00105AE4B89A}\workspace2as.exe"
Sun 5 Oct 2008 69,632 A..HR --- "C:\WINDOWS\Installer\{D6DE02C7-1F47-11D4-9515-00105AE4B89A}\_D356900035F1_42BF_BF69_88C72F2444A0.exe"
Fri 8 Jan 1999 19,968 A..H. --- "C:\WINDOWS\Lhsp\Dialog\AExLxd60.dll"
Fri 9 Apr 1999 35,328 A..H. --- "C:\WINDOWS\Lhsp\Dialog\FRFgnd60.dll"
Fri 9 Apr 1999 176,128 A..H. --- "C:\WINDOWS\Lhsp\Dialog\FRFlxd60.dll"
Fri 8 Jan 1999 29,184 A..H. --- "C:\WINDOWS\Lhsp\Dialog\WexLxd60.dll"
Mon 26 Apr 1999 596,480 A..H. --- "C:\WINDOWS\Lhsp\G2P\FRFg2p60.dll"
Thu 22 Apr 1999 147,456 A..H. --- "C:\WINDOWS\Lhsp\Language\FRFCT160.dll"
Fri 9 Apr 1999 279,552 A..H. --- "C:\WINDOWS\Lhsp\System\LHSAPI30.DLL"
Mon 19 Apr 1999 70,656 A..H. --- "C:\WINDOWS\Lhsp\System\ttsdct32.dll"
Wed 21 Apr 1999 202,240 A..H. --- "C:\WINDOWS\Lhsp\System\ttsmgr32.dll"
Mon 19 Apr 1999 554,496 A..H. --- "C:\WINDOWS\Lhsp\TPP\FRFeml60.dll"
Mon 19 Apr 1999 62,976 A..H. --- "C:\WINDOWS\Lhsp\TPP\FRFtxt60.dll"
Wed 23 Sep 1998 419,328 A..H. --- "C:\WINDOWS\Lhsp\Voice\FRFvf160.dll"
Wed 23 Sep 1998 424,448 A..H. --- "C:\WINDOWS\Lhsp\Voice\FRFvm160.dll"
Fri 23 Sep 2005 72,704 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe"
Fri 23 Sep 2005 7,680 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll"
Fri 23 Sep 2005 7,680 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_mscorwks.dll"
Fri 23 Sep 2005 7,680 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_perfcounter.dll"
Fri 23 Sep 2005 5,120 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\sbs_diasymreader.dll"
Fri 23 Sep 2005 5,120 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\sbs_iehost.dll"
Fri 23 Sep 2005 5,120 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.jscript.dll"
Fri 23 Sep 2005 5,632 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.vsa.vb.codedomprocessor.dll"
Fri 23 Sep 2005 5,120 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\sbs_mscordbi.dll"
Fri 23 Sep 2005 5,120 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\sbs_mscorrc.dll"
Fri 23 Sep 2005 5,120 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\sbs_mscorsec.dll"
Fri 23 Sep 2005 5,120 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\sbs_system.configuration.install.dll"
Fri 23 Sep 2005 5,120 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\sbs_system.data.dll"
Fri 23 Sep 2005 5,120 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll"
Fri 23 Sep 2005 5,120 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\sbs_VsaVb7rt.dll"
Fri 23 Sep 2005 5,120 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\sbs_wminet_utils.dll"
Fri 23 Sep 2005 7,680 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\SharedReg12.dll"
Mon 2 Apr 2007 19,456 A..H. --- "C:\WINDOWS\msagent\intl\agt0405.dll"
Mon 2 Apr 2007 19,456 A..H. --- "C:\WINDOWS\msagent\intl\agt0406.dll"
Mon 2 Apr 2007 21,504 A..H. --- "C:\WINDOWS\msagent\intl\agt0407.dll"
Mon 2 Apr 2007 22,016 A..H. --- "C:\WINDOWS\msagent\intl\agt0408.dll"
Sun 13 Apr 2008 19,968 A..H. --- "C:\WINDOWS\msagent\intl\agt0409.dll"
Mon 2 Apr 2007 19,456 A..H. --- "C:\WINDOWS\msagent\intl\agt040b.dll"
Mon 2 Apr 2007 21,504 A..H. --- "C:\WINDOWS\msagent\intl\agt040c.dll"
Mon 2 Apr 2007 19,968 A..H. --- "C:\WINDOWS\msagent\intl\agt040e.dll"
Mon 2 Apr 2007 20,992 A..H. --- "C:\WINDOWS\msagent\intl\agt0410.dll"
Mon 2 Apr 2007 20,992 A..H. --- "C:\WINDOWS\msagent\intl\agt0413.dll"
Mon 2 Apr 2007 19,456 A..H. --- "C:\WINDOWS\msagent\intl\agt0414.dll"
Mon 2 Apr 2007 19,456 A..H. --- "C:\WINDOWS\msagent\intl\agt0415.dll"
Mon 2 Apr 2007 20,480 A..H. --- "C:\WINDOWS\msagent\intl\agt0416.dll"
Mon 2 Apr 2007 19,456 A..H. --- "C:\WINDOWS\msagent\intl\agt0419.dll"
Mon 2 Apr 2007 19,456 A..H. --- "C:\WINDOWS\msagent\intl\agt041d.dll"
Mon 2 Apr 2007 19,456 A..H. --- "C:\WINDOWS\msagent\intl\agt041f.dll"
Mon 2 Apr 2007 20,992 A..H. --- "C:\WINDOWS\msagent\intl\agt0816.dll"
Mon 2 Apr 2007 20,480 A..H. --- "C:\WINDOWS\msagent\intl\agt0c0a.dll"
Fri 25 Feb 2005 22,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB898461\update\spcustom.dll"
Fri 25 Feb 2005 730,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB898461\update\update.exe"
Fri 25 Feb 2005 395,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB898461\update\updspapi.dll"
Fri 2 May 2008 83,968 A..H. --- "C:\WINDOWS\$hf_mig$\KB946648\SP3QFE\msgsc.dll"
Fri 30 Nov 2007 26,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB946648\update\spcustom.dll"
Fri 30 Nov 2007 767,352 A..H. --- "C:\WINDOWS\$hf_mig$\KB946648\update\update.exe"
Fri 30 Nov 2007 406,392 A..H. --- "C:\WINDOWS\$hf_mig$\KB946648\update\updspapi.dll"
Thu 8 May 2008 203,136 A..H. --- "C:\WINDOWS\$hf_mig$\KB950762\SP3QFE\rmcast.sys"
Fri 30 Nov 2007 26,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB950762\update\spcustom.dll"
Fri 30 Nov 2007 767,352 A..H. --- "C:\WINDOWS\$hf_mig$\KB950762\update\update.exe"
Fri 30 Nov 2007 406,392 A..H. --- "C:\WINDOWS\$hf_mig$\KB950762\update\updspapi.dll"
Mon 7 Jul 2008 253,952 A..H. --- "C:\WINDOWS\$hf_mig$\KB950974\SP3QFE\es.dll"
Fri 30 Nov 2007 26,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB950974\update\spcustom.dll"
Fri 30 Nov 2007 767,352 A..H. --- "C:\WINDOWS\$hf_mig$\KB950974\update\update.exe"
Fri 30 Nov 2007 406,392 A..H. --- "C:\WINDOWS\$hf_mig$\KB950974\update\updspapi.dll"
Fri 11 Apr 2008 691,712 A..H. --- "C:\WINDOWS\$hf_mig$\KB951066\SP3QFE\inetcomm.dll"
Fri 30 Nov 2007 26,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB951066\update\spcustom.dll"
Mon 3 Dec 2007 767,352 A..H. --- "C:\WINDOWS\$hf_mig$\KB951066\update\update.exe"
Fri 30 Nov 2007 406,392 A..H. --- "C:\WINDOWS\$hf_mig$\KB951066\update\updspapi.dll"
Fri 11 Jul 2008 62,976 A..H. --- "C:\WINDOWS\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe"
Fri 30 Nov 2007 26,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB951072-v2\update\spcustom.dll"
Fri 30 Nov 2007 767,352 A..H. --- "C:\WINDOWS\$hf_mig$\KB951072-v2\update\update.exe"
Fri 30 Nov 2007 406,392 A..H. --- "C:\WINDOWS\$hf_mig$\KB951072-v2\update\updspapi.dll"
Sat 14 Jun 2008 272,768 A..H. --- "C:\WINDOWS\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys"
Fri 30 Nov 2007 26,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB951376-v2\update\spcustom.dll"
Fri 30 Nov 2007 767,352 A..H. --- "C:\WINDOWS\$hf_mig$\KB951376-v2\update\update.exe"
Fri 30 Nov 2007 406,392 A..H. --- "C:\WINDOWS\$hf_mig$\KB951376-v2\update\updspapi.dll"
Wed 7 May 2008 1,294,336 A..H. --- "C:\WINDOWS\$hf_mig$\KB951698\SP3QFE\quartz.dll"
Fri 30 Nov 2007 26,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB951698\update\spcustom.dll"
Fri 30 Nov 2007 767,352 A..H. --- "C:\WINDOWS\$hf_mig$\KB951698\update\update.exe"
Fri 30 Nov 2007 406,392 A..H. --- "C:\WINDOWS\$hf_mig$\KB951698\update\updspapi.dll"
Fri 20 Jun 2008 138,496 A..H. --- "C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\afd.sys"
Fri 20 Jun 2008 147,968 A..H. --- "C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\dnsapi.dll"
Fri 20 Jun 2008 247,808 A..H. --- "C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll"
Fri 20 Jun 2008 361,600 A..H. --- "C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys"
Fri 20 Jun 2008 225,856 A..H. --- "C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip6.sys"
Fri 30 Nov 2007 26,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB951748\update\spcustom.dll"
Fri 30 Nov 2007 767,352 A..H. --- "C:\WINDOWS\$hf_mig$\KB951748\update\update.exe"
Fri 30 Nov 2007 406,392 A..H. --- "C:\WINDOWS\$hf_mig$\KB951748\update\updspapi.dll"
Wed 7 May 2008 135,168 A..H. --- "C:\WINDOWS\$hf_mig$\KB951978\SP3QFE\cscript.exe"
Fri 9 May 2008 512,000 A..H. --- "C:\WINDOWS\$hf_mig$\KB951978\SP3QFE\jscript.dll"
Fri 9 May 2008 180,224 A..H. --- "C:\WINDOWS\$hf_mig$\KB951978\SP3QFE\scrobj.dll"
Fri 9 May 2008 172,032 A..H. --- "C:\WINDOWS\$hf_mig$\KB951978\SP3QFE\scrrun.dll"
Fri 9 May 2008 430,080 A..H. --- "C:\WINDOWS\$hf_mig$\KB951978\SP3QFE\vbscript.dll"
Thu 8 May 2008 155,648 A..H. --- "C:\WINDOWS\$hf_mig$\KB951978\SP3QFE\wscript.exe"
Fri 9 May 2008 90,112 A..H. --- "C:\WINDOWS\$hf_mig$\KB951978\SP3QFE\wshext.dll"
Fri 30 Nov 2007 26,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB951978\update\spcustom.dll"
Fri 30 Nov 2007 767,352 A..H. --- "C:\WINDOWS\$hf_mig$\KB951978\update\update.exe"
Fri 30 Nov 2007 406,392 A..H. --- "C:\WINDOWS\$hf_mig$\KB951978\update\updspapi.dll"
Tue 24 Jun 2008 74,240 A..H. --- "C:\WINDOWS\$hf_mig$\KB952954\SP3QFE\mscms.dll"
Fri 30 Nov 2007 26,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB952954\update\spcustom.dll"
Fri 30 Nov 2007 767,352 A..H. --- "C:\WINDOWS\$hf_mig$\KB952954\update\update.exe"
Fri 30 Nov 2007 406,392 A..H. --- "C:\WINDOWS\$hf_mig$\KB952954\update\updspapi.dll"
Thu 16 Oct 2008 3,088,896 A..H. --- "C:\WINDOWS\$hf_mig$\KB958215\SP3QFE\mshtml.dll"
Thu 16 Oct 2008 1,499,648 A..H. --- "C:\WINDOWS\$hf_mig$\KB958215\SP3QFE\shdocvw.dll"
Thu 16 Oct 2008 621,056 A..H. --- "C:\WINDOWS\$hf_mig$\KB958215\SP3QFE\urlmon.dll"
Thu 16 Oct 2008 671,232 A..H. --- "C:\WINDOWS\$hf_mig$\KB958215\SP3QFE\wininet.dll"
Fri 30 Nov 2007 26,488 A..H. --- "C:\WINDOWS\$hf_mig$\KB958215\update\spcustom.dll"
Fri 30 Nov 2007 767,352 A..H. --- "C:\WINDOWS\$hf_mig$\KB958215\update\update.exe"
Wed 9 Jul 2008 406,392 A..H. --- "C:\WINDOWS\$hf_mig$\KB958215\update\updspapi.dll"
Fri 12 Dec 2008 3,088,896 A..H. --- "C:\WINDOWS\$hf_mig$\KB960714\SP3QFE\mshtml.dll"
Thu 5 Aug 2004 3,374,512 A..H. --- "C:\WINDOWS\Help\Tours\mmTour\tour.exe"
Fri 18 Mar 2005 473,600 A..H. --- "C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3D.dll"
Fri 18 Mar 2005 178,176 A..H. --- "C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectSound.dll"
Fri 18 Mar 2005 159,232 A..H. --- "C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectInput.dll"
Wed 29 Sep 2004 2,676,224 A..H. --- "C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3DX.dll"
Fri 18 Mar 2005 223,232 A..H. --- "C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.dll"
Fri 18 Mar 2005 53,248 A..H. --- "C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.AudioVideoPlayback.dll"
Fri 18 Mar 2005 12,800 A..H. --- "C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Diagnostics.dll"
Fri 18 Mar 2005 364,544 A..H. --- "C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectPlay.dll"
Fri 18 Mar 2005 145,920 A..H. --- "C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectDraw.dll"
Wed 1 Dec 2004 2,846,720 A..H. --- "C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2903.0\Microsoft.DirectX.Direct3DX.dll"
Sat 5 Feb 2005 563,712 A..H. --- "C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2904.0\Microsoft.DirectX.Direct3DX.dll"
Fri 18 Mar 2005 567,296 A..H. --- "C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2905.0\Microsoft.DirectX.Direct3DX.dll"
Thu 26 May 2005 576,000 A..H. --- "C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2906.0\Microsoft.DirectX.Direct3DX.dll"
Fri 22 Jul 2005 577,024 A..H. --- "C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2907.0\Microsoft.DirectX.Direct3DX.dll"
Wed 28 Sep 2005 577,536 A..H. --- "C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2908.0\Microsoft.DirectX.Direct3DX.dll"
Mon 5 Dec 2005 577,536 A..H. --- "C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2909.0\Microsoft.DirectX.Direct3DX.dll"
Fri 3 Feb 2006 578,560 A..H. --- "C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2910.0\Microsoft.DirectX.Direct3DX.dll"
Fri 31 Mar 2006 578,560 A..H. --- "C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2911.0\Microsoft.DirectX.Direct3DX.dll"
Fri 23 Sep 2005 86,528 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll"
Fri 23 Sep 2005 10,752 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll"
Fri 23 Sep 2005 138,240 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll"
Fri 23 Sep 2005 87,552 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\alink.dll"
Fri 23 Sep 2005 55,488 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe"
Fri 23 Sep 2005 29,896 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe"
Fri 23 Sep 2005 29,888 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe"
Fri 23 Sep 2005 503,808 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll"
Fri 23 Sep 2005 10,752 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll"
Fri 23 Sep 2005 36,864 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe"
Fri 23 Sep 2005 8,192 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll"
Fri 23 Sep 2005 13,824 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe"
Fri 23 Sep 2005 23,552 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll"
Fri 23 Sep 2005 26,824 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe"
Fri 23 Sep 2005 70,656 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll"
Fri 23 Sep 2005 106,496 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe"
Fri 23 Sep 2005 106,496 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe"
Fri 23 Sep 2005 88,576 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll"
Fri 23 Sep 2005 76,984 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\csc.exe"
Fri 23 Sep 2005 1,144,832 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscomp.dll"
Fri 23 Sep 2005 13,312 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll"
Fri 23 Sep 2005 17,920 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll"
Fri 23 Sep 2005 68,608 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll"
Fri 23 Sep 2005 31,936 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cvtres.exe"
Fri 23 Sep 2005 52,736 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfdll.dll"
Fri 23 Sep 2005 4,608 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe"
Fri 23 Sep 2005 547,840 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll"
Fri 23 Sep 2005 788,992 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll"
Fri 23 Sep 2005 9,216 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll"
Fri 23 Sep 2005 9,728 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe"
Fri 23 Sep 2005 8,192 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll"
Fri 23 Sep 2005 36,864 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEHost.dll"
Fri 23 Sep 2005 5,632 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll"
Fri 23 Sep 2005 224,952 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe"
Fri 23 Sep 2005 55,296 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll"
Fri 23 Sep 2005 28,672 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe"
Fri 23 Sep 2005 72,192 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll"
Fri 23 Sep 2005 40,960 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe"
Fri 23 Sep 2005 32,768 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll"
Fri 23 Sep 2005 36,864 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll"
Fri 23 Sep 2005 667,648 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll"
Fri 23 Sep 2005 372,736 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll"
Fri 23 Sep 2005 647,168 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll"
Fri 23 Sep 2005 73,728 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll"
Fri 23 Sep 2005 28,672 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll"
Fri 23 Sep 2005 5,632 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll"
Fri 23 Sep 2005 12,800 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll"
Fri 23 Sep 2005 413,696 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll"
Fri 23 Sep 2005 745,472 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll"
Fri 23 Sep 2005 7,168 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll"
Fri 23 Sep 2005 110,592 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll"
Fri 23 Sep 2005 87,552 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll"
Fri 23 Sep 2005 69,632 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe"
Fri 23 Sep 2005 73,216 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll"
Fri 23 Sep 2005 288,768 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll"
Fri 23 Sep 2005 800,768 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll"
Fri 23 Sep 2005 36,864 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll"
Fri 23 Sep 2005 326,144 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll"
Fri 23 Sep 2005 81,408 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorld.dll"
Fri 23 Sep 2005 4,308,992 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll"
Fri 23 Sep 2005 102,400 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll"
Fri 23 Sep 2005 330,752 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll"
Fri 23 Sep 2005 67,072 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll"
Fri 23 Sep 2005 9,216 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll"
Fri 23 Sep 2005 226,816 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll"
Fri 23 Sep 2005 66,240 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe"
Fri 23 Sep 2005 10,240 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscortim.dll"
Fri 23 Sep 2005 5,615,616 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll"
Fri 23 Sep 2005 96,440 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.exe"
Fri 23 Sep 2005 14,848 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\normalization.dll"
Fri 23 Sep 2005 78,336 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll"
Fri 23 Sep 2005 136,192 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\peverify.dll"
Fri 23 Sep 2005 53,248 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe"
Fri 23 Sep 2005 32,768 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe"
Fri 23 Sep 2005 59,072 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe"
Fri 23 Sep 2005 7,680 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll"
Fri 23 Sep 2005 107,520 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\shfusion.dll"
Fri 23 Sep 2005 85,504 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll"
Fri 23 Sep 2005 377,344 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SOS.dll"
Fri 23 Sep 2005 131,072 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll"
Fri 23 Sep 2005 397,312 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll"
Fri 23 Sep 2005 5,025,792 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll"
Fri 23 Sep 2005 258,048 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Security.dll"
Fri 23 Sep 2005 114,176 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll"
Fri 23 Sep 2005 258,048 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll"
Fri 23 Sep 2005 5,316,608 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll"
Fri 23 Sep 2005 81,920 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll"
Fri 23 Sep 2005 258,048 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll"
Fri 23 Sep 2005 5,050,368 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Design.dll"
Fri 23 Sep 2005 368,640 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Management.dll"
Fri 23 Sep 2005 260,096 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll"
Fri 23 Sep 2005 716,800 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll"
Fri 23 Sep 2005 47,616 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll"
Fri 23 Sep 2005 823,296 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll"
Fri 23 Sep 2005 2,035,712 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.XML.dll"
Fri 23 Sep 2005 835,584 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll"
Fri 23 Sep 2005 700,416 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll"
Fri 23 Sep 2005 114,688 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll"
Fri 23 Sep 2005 188,416 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll"
Fri 23 Sep 2005 884,736 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll"
Fri 23 Sep 2005 299,008 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll"
Fri 23 Sep 2005 86,016 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll"
Fri 23 Sep 2005 110,592 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll"
Fri 23 Sep 2005 3,018,752 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.dll"
Fri 23 Sep 2005 389,120 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll"
Fri 23 Sep 2005 81,920 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll"
Fri 23 Sep 2005 2,878,976 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll"
Fri 23 Sep 2005 482,304 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll"
Fri 23 Sep 2005 71,680 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL"
Fri 23 Sep 2005 1,140,920 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\vbc.exe"
Fri 23 Sep 2005 1,306,624 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll"
Fri 23 Sep 2005 298,496 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\webengine.dll"
Fri 23 Sep 2005 28,160 A..H. --- "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll"
Thu 5 Aug 2004 21,504 A..H. --- "C:\WINDOWS\pchealth\helpctr\binaries\brpinfo.dll"
Thu 5 Aug 2004 7,680 A..H. --- "C:\WINDOWS\pchealth\helpctr\binaries\HCAppRes.dll"
Sun 13 Apr 2008 769,024 A..H. --- "C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe"
Thu 5 Aug 2004 99,840 A..H. --- "C:\WINDOWS\pchealth\helpctr\binaries\HelpHost.exe"
Sun 13 Apr 2008 744,448 A..H. --- "C:\WINDOWS\pchealth\helpctr\binaries\HelpSvc.exe"
Sun 13 Apr 2008 18,432 A..H. --- "C:\WINDOWS\pchealth\helpctr\binaries\HscUpd.exe"
Sun 13 Apr 2008 172,544 A..H. --- "C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe"
Sun 13 Apr 2008 382,464 A..H. --- "C:\WINDOWS\pchealth\helpctr\binaries\msinfo.dll"
Thu 5 Aug 2004 35,328 A..H. --- "C:\WINDOWS\pchealth\helpctr\binaries\notiflag.exe"
Sun 13 Apr 2008 102,912 A..H. --- "C:\WINDOWS\pchealth\helpctr\binaries\pchshell.dll"
Sun 13 Apr 2008 38,400 A..H. --- "C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll"
Sun 13 Apr 2008 151,040 A..H. --- "C:\WINDOWS\pchealth\UploadLB\Binaries\UploadM.exe"
Sun 4 Jan 2009 15,394,248 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\066d6b6f1db2fb7733670d09b62362cd\BIT50.tmp"
Thu 25 Dec 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\075927282ce89a5c78a9e45d2662ba68\BIT43.tmp"
Thu 25 Dec 2008 2,569,632 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\2cb8e188cc809be1d99d8b13914cf592\BIT3E.tmp"
Thu 25 Dec 2008 665,128 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\33e2c0b2e0a5331aa370a5e8ce5ad191\BITA.tmp"
Thu 25 Dec 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\3b73491c13abb6c3560cf1164277b928\BIT45.tmp"
Thu 25 Dec 2008 2,174,016 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\4724ea0e197f99f5dc110621c05f3367\BIT12.tmp"
Thu 25 Dec 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\55f009ef52fea6ccd7dc3cd08f595ff9\BIT4C.tmp"
Thu 25 Dec 2008 5,687,304 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\5b2daa6ebd73054162f60f3f53f1dca9\BIT3F.tmp"
Thu 25 Dec 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\60102ca8d49bef61c61212965ef6dbcb\BIT4E.tmp"
Thu 25 Dec 2008 246,594 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\669d0b1faeda9d349046c1685c871e7d\BIT40.tmp"
Thu 25 Dec 2008 2,873,384 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\69088120c474dc8d7af3c9e4e110d486\BIT47.tmp"
Wed 31 Dec 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\7520208c6ab77761866d20a0bab7b1c0\BIT60.tmp"
Thu 25 Dec 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\75268bc24bd5ec747ac183eeadb761f8\BIT42.tmp"
Thu 25 Dec 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\8171d23d6d072d8b50d065ca55a754fb\BITB.tmp"
Thu 25 Dec 2008 6,484,368 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\8197aa1f5ef7865ea4eb9dd0fbe8f534\BIT48.tmp"
Thu 25 Dec 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\89bc99fdf1c443796494111c05606ebc\BIT4F.tmp"
Thu 25 Dec 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\91aaf2e2995eb1abdaa3e996b347e975\BIT44.tmp"
Tue 6 Jan 2009 9,318,184 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\9c2c6390507aca6f615c74ea291abb63\BIT2B.tmp"
Thu 25 Dec 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\baf5c9049951d4dee6edd6161c705f94\BIT49.tmp"
Thu 25 Dec 2008 933,928 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\c46a8212705069a7604ff98b5b281a3e\BIT41.tmp"
Thu 25 Dec 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\e3d9bb5379ee9a3649b4de6174230a71\BIT4D.tmp"
Fri 23 Jan 2009 4,753,264 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\eed09d97c94cc81298f94c21678411c6\BIT52.tmp"
Sun 31 Dec 2000 799,272 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\f34e0e2448fa949fda32b9e9477dc7ce\BIT2.tmp"
Thu 25 Dec 2008 2,397,600 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\f6f71aab218464dc16c129348c36ff39\BIT11.tmp"
Thu 11 Dec 2008 178,176 A..H. --- "C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll"
Thu 11 Dec 2008 159,232 A..H. --- "C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll"
Thu 11 Dec 2008 364,544 A..H. --- "C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll"
Thu 11 Dec 2008 53,248 A..H. --- "C:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll"
Thu 11 Dec 2008 12,800 A..H. --- "C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll"
Thu 11 Dec 2008 2,676,224 A..H. --- "C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll"
Thu 11 Dec 2008 2,846,720 A..H. --- "C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll"
Thu 11 Dec 2008 563,712 A..H. --- "C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll"
Thu 11 Dec 2008 567,296 A..H. --- "C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll"
Thu 11 Dec 2008 576,000 A..H. --- "C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll"
Thu 11 Dec 2008 577,024 A..H. --- "C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll"
Thu 11 Dec 2008 577,536 A..H. --- "C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll"
Thu 11 Dec 2008 577,536 A..H. --- "C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll"
Thu 11 Dec 2008 578,560 A..H. --- "C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll"
Thu 11 Dec 2008 578,560 A..H. --- "C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll"
Thu 11 Dec 2008 223,232 A..H. --- "C:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll"
Thu 11 Dec 2008 473,600 A..H. --- "C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll"
Thu 11 Dec 2008 145,920 A..H. --- "C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll"
Mon 1 Jan 2001 68,608 A..H. --- "C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll"
Mon 1 Jan 2001 72,192 A..H. --- "C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll"
Mon 1 Jan 2001 4,308,992 A..H. --- "C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll"
Mon 1 Jan 2001 5,025,792 A..H. --- "C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll"
Mon 1 Jan 2001 2,878,976 A..H. --- "C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll"
Mon 1 Jan 2001 482,304 A..H. --- "C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll"
Mon 1 Jan 2001 260,096 A..H. --- "C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll"
Mon 1 Jan 2001 10,752 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll"
Mon 1 Jan 2001 503,808 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll"
Mon 1 Jan 2001 13,312 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll"
Mon 1 Jan 2001 8,192 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll"
Mon 1 Jan 2001 36,864 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll"
Mon 1 Jan 2001 5,632 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll"
Mon 1 Jan 2001 7,168 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll"
Mon 1 Jan 2001 12,800 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll"
Mon 1 Jan 2001 372,736 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll"
Mon 1 Jan 2001 110,592 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll"
Mon 1 Jan 2001 413,696 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll"
Mon 1 Jan 2001 36,864 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll"
Mon 1 Jan 2001 745,472 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll"
Mon 1 Jan 2001 647,168 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll"
Mon 1 Jan 2001 73,728 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll"
Mon 1 Jan 2001 667,648 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll"
Mon 1 Jan 2001 28,672 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll"
Mon 1 Jan 2001 5,632 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll"
Mon 1 Jan 2001 32,768 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll"
Mon 1 Jan 2001 110,592 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll"
Mon 1 Jan 2001 3,018,752 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll"
Mon 1 Jan 2001 2,035,712 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll"
Mon 1 Jan 2001 389,120 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll"
Mon 1 Jan 2001 884,736 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll"
Mon 1 Jan 2001 81,920 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll"
Mon 1 Jan 2001 397,312 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll"
Mon 1 Jan 2001 700,416 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll"
Mon 1 Jan 2001 5,316,608 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll"
Mon 1 Jan 2001 81,920 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll"
Mon 1 Jan 2001 368,640 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll"
Mon 1 Jan 2001 258,048 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll"
Mon 1 Jan 2001 835,584 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll"
Mon 1 Jan 2001 188,416 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll"
Mon 1 Jan 2001 86,016 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll"
Mon 1 Jan 2001 299,008 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll"
Mon 1 Jan 2001 258,048 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll"
Mon 1 Jan 2001 114,688 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll"
Mon 1 Jan 2001 131,072 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll"
Mon 1 Jan 2001 716,800 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll"
Mon 1 Jan 2001 5,050,368 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll"
Mon 1 Jan 2001 823,296 A..H. --- "C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll"
Tue 1 Jan 2008 26,624 A..H. --- "C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\d8305209c9574b4094a6a51b99bd70eb\Accessibility.ni.dll"
Tue 1 Jan 2008 860,160 A..H. --- "C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\c3200a814fcb8047b6b7071d817b14a2\AspNetMMCExt.ni.dll"
Tue 1 Jan 2008 237,568 A..H. --- "C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\ff97925c327c6344a3e7a983f38e617e\CustomMarshalers.ni.dll"
Tue 1 Jan 2008 15,360 A..H. --- "C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\dfsvc\d6e186a499a1f8478d3897ed10940a9b\dfsvc.ni.exe"
Tue 1 Jan 2008 880,640 A..H. --- "C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\1e2962882d8b5540986a3bb29c6ff473\Microsoft.Build.Engine.ni.dll"
Tue 1 Jan 2008 81,920 A..H. --- "C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\c45fd069d45f9b469b9bb12648a2edfa\Microsoft.Build.Framework.ni.dll"
Tue 1 Jan 2008 1,691,648 A..H. --- "C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\ae8d3f11dc73f84e8077d68548391b4f\Microsoft.Build.Tasks.ni.dll"
Tue 1 Jan 2008 163,840 A..H. --- "C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\b3738d9f3d16ca44a6b0ff063e94038c\Microsoft.Build.Utilities.ni.dll"
Tue 1 Jan 2008 1,724,416 A..H. --- "C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\eacc8a3995e9624cb458d16b61bc2263\Microsoft.VisualBasic.ni.dll"
Mon 1 Jan 2001 11,411,456 A..H. --- "C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\d1d9fc25fe17b144ad0642c3d0eb27f6\mscorlib.ni.dll"
Mon 1 Jan 2001 8,093,696 A..H. --- "C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\1633926e88225141ba272062c176c8b1\System.ni.dll"
Tue 1 Jan 2008 11,808,768 A..H. --- "C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\d63c847300b9694eb716cfaefe271c35\System.Web.ni.dll"
Mon 1 Jan 2001 5,640,192 A..H. --- "C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\9f8c60dfa5f0d849adff3466847dcbfc\System.Xml.ni.dll"
Tue 1 Jan 2008 962,560 A..H. --- "C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\d914a530f4fe0240b6976af5400c35dc\System.Configuration.ni.dll"
Mon 1 Jan 2001 6,688,768 A..H. --- "C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\a78502375457224d8b2b84d9ecef0513\System.Data.ni.dll"
Tue 1 Jan 2008 1,712,128 A..H. --- "C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\9f1a13b07941bc42b07eb615eabf46f2\System.Deployment.ni.dll"
Mon 1 Jan 2001 229,376 A..H. --- "C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\be0664a3c1b3724795efaa09254de47e\System.Drawing.Design.ni.dll"
Tue 1 Jan 2008 512,000 A..H. --- "C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\33c6327fbf52e34a907ba0fc4ff7d2f9\System.DirectoryServices.Protocols.ni.dll"
Tue 1 Jan 2008 1,220,608 A..H. --- "C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\e70e385b016845498835ab0834348a8f\System.DirectoryServices.ni.dll"
Mon 1 Jan 2001 1,626,112 A..H. --- "C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\01c76fcc5d1cbb41acad6d29abe2e801\System.Drawing.ni.dll"

On dirait qu'il a encore nettoyé quelque chose ???

=============================================================
ComboFix 09-02-02.04 - Utilisateur 2009-02-01 13:47:59.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1023.701 [GMT 1:00]
Lancé depuis: f:\christophe\MICRO\60 UTILITAIRES\Virus\combofix\ComboFix.exe
* Un nouveau point de restauration a été créé

AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\awobekil.ini
c:\windows\system32\bejamuge.dll
c:\windows\system32\binuvete.dll
c:\windows\system32\ipehusub.ini
c:\windows\system32\midogiru.dll
c:\windows\system32\nukavuso.dll
c:\windows\system32\onolavoy.ini
c:\windows\system32\pupepume.dll
c:\windows\system32\ranuvozo.dll
c:\windows\system32\tibarozo.dll

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_TDSSSERV.SYS


((((((((((((((((((((((((((((( Fichiers créés du 2009-01-02 au 2009-02-02 ))))))))))))))))))))))))))))))))))))
.

2009-01-28 19:29 . 2009-01-28 19:29 <REP> d-------- c:\program files\Codemasters
2009-01-27 16:20 . 2009-01-27 16:20 <REP> d-------- c:\windows\system32\LogFiles
2009-01-27 11:24 . 2009-02-01 11:37 15,688 --a------ c:\windows\system32\lsdelete.exe
2009-01-25 12:34 . 2009-01-25 12:34 <REP> d-------- c:\program files\LSI SoftModem
2009-01-25 12:23 . 2009-01-25 12:23 <REP> d-------- c:\program files\Lavasoft
2009-01-25 12:23 . 2009-01-25 12:23 <REP> d--h-c--- c:\documents and settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}
2009-01-25 12:23 . 2009-01-18 22:30 64,160 --a------ c:\windows\system32\drivers\Lbd.sys
2009-01-24 19:25 . 2009-01-27 18:32 <REP> d-------- c:\documents and settings\All Users\Application Data\TrackMania
2009-01-24 19:18 . 2009-01-24 19:23 <REP> d-------- c:\program files\TmUnitedForever
2009-01-24 19:14 . 2009-01-24 19:16 <REP> d-------- c:\program files\TrackMania United
2009-01-24 10:01 . 2009-01-24 10:01 93 --a------ c:\windows\wininit.ini
2009-01-24 09:33 . 2009-01-25 12:25 <REP> d-------- c:\program files\Spybot - Search & Destroy
2009-01-24 09:33 . 2009-01-25 12:24 <REP> d-------- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-01-24 09:19 . 2009-01-24 09:19 23,072 --a------ c:\windows\system32\AAWService_2009_01_24_09_19_01.dmp
2009-01-24 09:11 . 2009-01-24 09:11 23,072 --a------ c:\windows\system32\AAWService_2009_01_24_09_11_13.dmp
2009-01-24 08:55 . 2009-01-24 08:55 <REP> d-------- c:\windows\ERUNT
2009-01-24 08:53 . 2001-01-01 01:08 <REP> d--h----- c:\documents and settings\Administrateur\Voisinage réseau
2009-01-24 08:53 . 2001-01-01 01:08 <REP> d--h----- c:\documents and settings\Administrateur\Voisinage d'impression
2009-01-24 08:53 . 2001-01-01 00:12 <REP> d--h----- c:\documents and settings\Administrateur\Modèles
2009-01-24 08:53 . 2001-01-01 01:08 <REP> d-------- c:\documents and settings\Administrateur\Mes documents
2009-01-24 08:53 . 2001-01-01 01:08 <REP> dr------- c:\documents and settings\Administrateur\Menu Démarrer
2009-01-24 08:53 . 2001-01-01 01:08 <REP> d-------- c:\documents and settings\Administrateur\Favoris
2009-01-24 08:53 . 2009-01-25 11:42 <REP> d-------- c:\documents and settings\Administrateur\Bureau
2009-01-24 08:53 . 2009-01-24 08:53 <REP> d-------- c:\documents and settings\Administrateur
2009-01-23 19:28 . 2009-01-23 19:28 <REP> d-------- c:\program files\Skype
2009-01-23 19:28 . 2009-01-23 19:28 <REP> d-------- c:\program files\Fichiers communs\Skype
2009-01-23 19:28 . 2009-02-03 10:53 <REP> d-------- c:\documents and settings\Utilisateur\Application Data\Skype
2009-01-23 11:29 . 2009-01-23 11:29 <REP> d-------- c:\program files\Trend Micro
2009-01-23 10:45 . 2009-01-23 10:45 <REP> d-------- c:\documents and settings\All Users\Application Data\Avg8
2009-01-23 09:51 . 2008-10-29 20:43 1,204,128 --a------ c:\windows\system32\drivers\AGRSM.sys
2009-01-23 09:51 . 2006-06-29 11:30 88,365 --------- c:\windows\AGRSMMSG.exe
2009-01-23 09:51 . 2006-06-29 11:30 68,096 --------- c:\windows\system32\agrsmdel.exe
2009-01-23 09:51 . 2008-09-26 15:13 55,816 --a------ c:\windows\agrsmdel.exe
2009-01-23 09:51 . 2001-08-17 21:57 16,128 --a------ c:\windows\system32\drivers\MODEMCSA.sys
2009-01-23 09:51 . 2001-08-17 21:57 16,128 --a--c--- c:\windows\system32\dllcache\modemcsa.sys
2009-01-23 09:50 . 2009-01-23 09:50 <REP> d-------- c:\program files\OLITEC
2009-01-23 09:47 . 2009-01-23 09:47 23,300 --a------ c:\windows\system32\AAWService_2009_01_23_09_47_52.dmp
2009-01-23 09:41 . 2009-01-23 09:41 23,300 --a------ c:\windows\system32\AAWService_2009_01_23_09_41_12.dmp
2009-01-23 09:31 . 2009-01-23 09:31 22,873 --a------ c:\windows\system32\AAWService_2009_01_23_09_31_35.dmp
2009-01-23 08:56 . 2009-01-25 12:23 <REP> d-------- c:\documents and settings\All Users\Application Data\Lavasoft
2009-01-23 08:44 . 2009-01-23 08:54 <REP> d-------- c:\documents and settings\Utilisateur\Application Data\Lavasoft
2009-01-23 08:35 . 2008-04-13 11:15 334,848 --a------ c:\windows\system32\drivers\srv.sys
2009-01-23 08:34 . 2009-01-23 08:35 1,374 --a------ c:\windows\imsins.BAK
2009-01-23 08:29 . 2009-01-23 08:33 413 --a------ c:\windows\Fix IE Log.BAK
2009-01-23 08:14 . 2009-01-23 08:14 <REP> d-------- c:\documents and settings\All Users\Application Data\Hitman Pro 3
2009-01-22 18:53 . 2009-01-22 18:53 <REP> d-------- c:\documents and settings\All Users\Application Data\Hitman Pro
2009-01-22 18:32 . 2009-01-22 18:32 <REP> d-------- c:\windows\system32\GroupPolicy
2009-01-21 18:20 . 2009-01-21 18:20 <REP> d-------- c:\documents and settings\LocalService\Bureau
2009-01-21 18:20 . 2009-01-21 18:43 <REP> d-------- c:\documents and settings\All Users\Application Data\SiteAdvisor
2009-01-21 18:04 . 2007-01-16 12:56 450,560 --a------ c:\windows\system32\drivers\WlanBZXP.sys
2009-01-21 18:02 . 2006-03-01 18:53 94,208 --a------ c:\windows\system32\w32n50.dll
2009-01-21 18:02 . 2007-12-11 20:22 65,536 --a------ c:\windows\system32\Autodial2000.dll
2009-01-21 18:02 . 2003-09-23 10:38 34,688 --a------ c:\windows\system32\pcampr5.sys
2009-01-21 18:02 . 2006-03-01 18:53 32,128 --a------ c:\windows\system32\pcandis5.sys
2009-01-21 18:01 . 2009-01-21 18:14 <REP> d-------- c:\program files\OrangeHSS
2009-01-21 18:01 . 2009-01-21 18:04 <REP> d-------- c:\program files\Fichiers communs\France Telecom
2009-01-15 19:27 . 2009-01-15 21:02 <REP> d-------- c:\program files\Navilog1
2009-01-09 19:59 . 2009-02-03 10:53 <REP> d-------- c:\documents and settings\Utilisateur\Application Data\skypePM
2009-01-09 19:59 . 2009-01-09 19:59 56 --ah----- c:\windows\system32\ezsidmv.dat
2009-01-09 19:51 . 2009-01-23 19:28 <REP> d-------- c:\documents and settings\All Users\Application Data\Skype
2009-01-07 10:18 . 2009-01-07 10:20 <REP> d-------- c:\windows\SxsCaPendDel
2009-01-06 17:18 . 2009-01-06 17:18 <REP> d-------- c:\documents and settings\Utilisateur\Application Data\Lumen
2009-01-03 19:26 . 2009-01-03 19:26 <REP> d-------- c:\program files\MSXML 4.0

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-01 10:43 --------- d-----w c:\program files\eMule
2009-01-31 17:55 --------- d-----w c:\program files\Aime P3
2009-01-28 18:29 --------- d--h--w c:\program files\InstallShield Installation Information
2009-01-26 06:55 84,992 ----a-w c:\documents and settings\Utilisateur\Application Data\GDIPFONTCACHEV1.DAT
2009-01-22 17:11 --------- d-----w c:\program files\Pontifex II demo
2009-01-21 17:46 --------- d-----w c:\documents and settings\All Users\Application Data\McAfee
2009-01-14 16:00 --------- d-----w c:\program files\Easy Button Menu Maker
2009-01-07 09:15 --------- d-----w c:\program files\Fichiers communs\Adobe
2009-01-01 15:07 --------- d-----w c:\documents and settings\All Users\Application Data\Pinnacle Studio
2009-01-01 15:07 --------- d-----w c:\documents and settings\All Users\Application Data\Pinnacle
2009-01-01 15:01 --------- d-----w c:\program files\Pinnacle
2009-01-01 15:00 --------- d-----w c:\program files\DivX
2008-12-31 20:38 --------- d-----w c:\program files\Executive Software
2008-12-25 16:21 --------- d-----w c:\program files\KaraFun
2008-12-25 16:21 --------- d-----w c:\documents and settings\All Users\Application Data\Recisio
2008-12-25 15:11 --------- d-----w c:\documents and settings\All Users\Application Data\FLEXnet
2008-12-24 13:41 --------- d-----w c:\documents and settings\Utilisateur\Application Data\TransRender
2008-12-24 13:40 --------- d-----w c:\documents and settings\Utilisateur\Application Data\Temporary
2008-12-24 13:31 --------- d-----w c:\documents and settings\Utilisateur\Application Data\Samsung
2008-12-24 13:23 --------- d-----w c:\program files\Samsung
2008-12-07 09:43 --------- d-----w c:\documents and settings\Utilisateur\Application Data\Aveso
2008-12-07 09:32 --------- d-----w c:\program files\ArtRage 2 Starter Edition
2008-12-02 14:29 --------- d-----w c:\documents and settings\Utilisateur\Application Data\Ambient Design
2008-12-02 10:48 --------- d-----w c:\program files\Ubi Soft
1601-01-01 00:12 100,352 --sha-w c:\windows\system32\juteruno.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVMixerTray"="c:\program files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" [2004-06-03 131072]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-11-03 344064]
"PinnacleDriverCheck"="c:\windows\system32\\PSDrvCheck.exe" [2004-03-11 406016]
"Ad-Watch"="c:\program files\Lavasoft\Ad-Aware\AAWTray.exe" [2009-02-01 509784]
"AGRSMMSG"="AGRSMMSG.exe" [2006-06-29 c:\windows\AGRSMMSG.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_3"="advpack.dll" [2008-04-13 c:\windows\system32\advpack.dll]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.I420"= vdrcodec.dll
"VIDC.VP40"= vp4vfw.dll
"VIDC.MJPG"= Pvmjpg30.dll
"VIDC.PIM1"= pclepim1.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ad-Watch]
--a------ 2009-02-01 11:37 509784 c:\program files\Lavasoft\Ad-Aware\AAWTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 2008-01-11 22:16 39792 c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
--a--c--- 2007-05-15 16:12 484904 c:\program files\Fichiers communs\LightScribe\LightScribeControlPanel.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a--c--- 2001-07-09 10:50 155648 c:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ORAHSSSessionManager]
--a------ 2007-12-12 09:50 107248 c:\program files\OrangeHSS\SessionManager\SessionManager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
-ra------ 2008-11-07 14:31 21633320 c:\program files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\PMSRegisterFile.exe"=
"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\umi.exe"=
"c:\\WINDOWS\\system32\\spoolsv.exe"=
"c:\\Program Files\\OrangeHSS\\Connectivity\\ConnectivityManager.exe"=
"c:\\WINDOWS\\system32\\wbem\\wmiprvse.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-01-25 64160]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2009-01-18 950096]
S3 hitmanpro3;Hitman Pro 3 Support Driver;\??\c:\windows\system32\drivers\hitmanpro3.sys --> c:\windows\system32\drivers\hitmanpro3.sys [?]
S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2008-09-02 191656]
S3 SG762_XP;SAGEM 802.11g XG762 1211B Driver;c:\windows\system32\drivers\WlanBZXP.sys [2009-01-21 450560]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{14968542-df7a-11d4-a740-806d6172696f}]
\Shell\AutoRun\command - D:\setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ecf3f85c-bd5f-11dd-bafe-0123456789ab}]
\shell\play\command - c:\program files\VideoLAN\VLC\vlc.exe --started-from-file dvd:%1

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\program files\Fichiers communs\LightScribe\LSRunOnce.exe"
.
Contenu du dossier 'Tâches planifiées'

2009-02-01 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-02-01 11:37]
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{bc95dc78-fa4c-40da-9cbc-37c710d0d9fe} - (no file)
MSConfigStartUp-AdobeCS4ServiceManager - c:\program files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe
MSConfigStartUp-avgnt - c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
MSConfigStartUp-BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} - c:\program files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
MSConfigStartUp-CPMd72a8a8c - c:\windows\system32\kohuhoro.dll
MSConfigStartUp-d419b910 - c:\windows\system32\gonaludu.dll
MSConfigStartUp-rasahahudi - c:\windows\system32\ranuvozo.dll
MSConfigStartUp-WooCnxMon - c:\progra~1\Wanadoo\CnxMon.exe
MSConfigStartUp-WOOTASKBARICON - c:\progra~1\Wanadoo\TaskbarIcon.exe
MSConfigStartUp-WOOWATCH - c:\progra~1\Wanadoo\Watch.exe


.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.orange.fr/
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-02 13:50:32
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"cd042efbbd7f7af1647644e76e06692b"=hex:c8,28,51,af,b0,29,a3,98,51,5f,e8,04,1f,
58,27,a2,c8,28,51,af,b0,29,a3,98,f0,6f,7d,82,ba,86,b2,9e,e2,63,26,f1,3f,c8,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"bca643cdc5c2726b20d2ecedcc62c59b"=hex:71,3b,04,66,8b,46,0d,96,83,21,ec,ea,3f,
40,fd,72,71,3b,04,66,8b,46,0d,96,32,18,9a,20,6e,b8,7b,7d,6a,9c,d6,61,af,45,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"2c81e34222e8052573023a60d06dd016"=hex:ff,7c,85,e0,43,d4,0e,fe,d4,93,33,b9,ed,
b2,83,06,25,da,ec,7e,55,20,c9,26,39,e7,bc,01,d4,dc,4f,38,ff,7c,85,e0,43,d4,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"2582ae41fb52324423be06337561aa48"=hex:86,8c,21,01,be,91,eb,e7,84,c5,91,23,3b,
8b,2c,6f,3e,1e,9e,e0,57,5a,93,61,4f,dc,de,41,80,dd,88,c4,86,8c,21,01,be,91,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"caaeda5fd7a9ed7697d9686d4b818472"=hex:cd,44,cd,b9,a6,33,6c,cd,e7,0b,45,a1,cf,
4f,48,7e,cd,44,cd,b9,a6,33,6c,cd,67,a1,00,0a,16,f1,bb,5c,f5,1d,4d,73,a8,13,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"a4a1bcf2cc2b8bc3716b74b2b4522f5d"=hex:b0,18,ed,a7,3f,8d,37,a4,27,15,69,9e,13,
69,0d,4b,b0,18,ed,a7,3f,8d,37,a4,50,d0,9d,17,51,d2,ba,44,df,20,58,62,78,6b,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"4d370831d2c43cd13623e232fed27b7b"=hex:fb,a7,78,e6,12,2f,9a,ea,8b,9b,29,4a,37,
1f,79,8b,31,77,e1,ba,b1,f8,68,02,79,c5,6e,5b,2b,45,a0,1f,fb,a7,78,e6,12,2f,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"1d68fe701cdea33e477eb204b76f993d"=hex:01,3a,48,fc,e8,04,4a,f1,28,02,24,f5,12,
9d,7c,1a,83,6c,56,8b,a0,85,96,ab,7c,d1,5a,a3,08,5b,ee,13,01,3a,48,fc,e8,04,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"1fac81b91d8e3c5aa4b0a51804d844a3"=hex:51,fa,6e,91,28,9e,14,cc,2e,aa,41,65,17,
65,71,de,51,fa,6e,91,28,9e,14,cc,8f,ef,31,a7,40,c5,9e,f6,f6,0f,4e,58,98,5b,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"f5f62a6129303efb32fbe080bb27835b"=hex:37,a4,aa,c3,a6,15,56,0a,f4,be,67,aa,44,
c4,e5,bf,b1,cd,45,5a,a8,c4,f8,b9,53,59,a9,e4,59,fc,eb,ad,3d,ce,ea,26,2d,45,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"fd4e2e1a3940b94dceb5a6a021f2e3c6"=hex:e3,0e,66,d5,eb,bc,2f,6b,f2,94,18,41,58,
40,b2,c4,e3,0e,66,d5,eb,bc,2f,6b,77,8b,3c,be,db,b1,76,3e,2a,b7,cc,b5,b9,7f,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"8a8aec57dd6508a385616fbc86791ec2"=hex:6c,43,2d,1e,aa,22,2f,9c,8a,0d,d2,7f,cc,
dc,f2,31,fa,ea,66,7f,d4,3b,6b,70,94,31,48,13,e6,36,bd,ec,6c,43,2d,1e,aa,22,\
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(496)
c:\windows\system32\Ati2evxx.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\program files\LSI SoftModem\agrsmsvc.exe
c:\progra~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\[u]0/u\FTRTSVC.exe
c:\program files\Fichiers communs\LightScribe\LSSrvc.exe
c:\windows\system32\wdfmgr.exe
c:\windows\system32\wbem\unsecapp.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\ati2evxx.exe
.
**************************************************************************
.
Heure de fin: 2009-02-02 13:52:48 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-02-02 12:52:46

Avant-CF: 57 304 625 152 octets libres
Après-CF: 57,349,505,024 octets libres

296 --- E O F --- 2009-01-23 07:45:10
===============================================================
MERCI

Rapport MalwareByte's Anti-Malware :

Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1736
Windows 5.1.2600 Service Pack 3

07/02/2009 08:59:52
mbam-log-2009-02-07 (08-59-52).txt

Type de recherche: Examen complet (C:\|F:\|)
Eléments examinés: 123983
Temps écoulé: 44 minute(s), 57 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 4

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Qoobox\Quarantine\C\WINDOWS\system32\bejamuge.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\WINDOWS\system32\binuvete.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{8D9D6436-A788-472D-808C-52A69EB6D85F}\RP93\A0030435.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{8D9D6436-A788-472D-808C-52A69EB6D85F}\RP93\A0030436.dll (Trojan.Vundo) -> Quarantined and deleted successfully.

=======================================================================
Rapport ANTIVIR :



Avira AntiVir Personal
Date de création du fichier de rapport : samedi 7 février 2009 09:02

La recherche porte sur 1322990 souches de virus.

Détenteur de la licence :Avira AntiVir PersonalEdition Classic
Numéro de série : 0000149996-ADJIE-0001
Plateforme : Windows XP
Version de Windows :(Service Pack 3) [5.1.2600]
Mode Boot : Démarré normalement
Identifiant : SYSTEM
Nom de l'ordinateur :DAVAL-73ADA7B59

Informations de version :
BUILD.DAT : 8.2.0.52 16931 Bytes 02/12/2008 14:55:00
AVSCAN.EXE : 8.1.4.10 315649 Bytes 02/02/2009 13:08:45
AVSCAN.DLL : 8.1.4.1 49921 Bytes 21/07/2008 13:44:27
LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:16
LUKERES.DLL : 8.1.4.0 13057 Bytes 04/07/2008 07:30:27
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 13:08:45
ANTIVIR1.VDF : 7.1.1.113 2817536 Bytes 14/01/2009 13:08:46
ANTIVIR2.VDF : 7.1.1.207 1359360 Bytes 30/01/2009 13:08:46
ANTIVIR3.VDF : 7.1.1.239 314880 Bytes 06/02/2009 16:12:54
Version du moteur: 8.2.0.76
AEVDF.DLL : 8.1.1.0 106868 Bytes 02/02/2009 13:08:46
AESCRIPT.DLL : 8.1.1.43 344442 Bytes 06/02/2009 16:12:57
AESCN.DLL : 8.1.1.6 127348 Bytes 02/02/2009 13:08:46
AERDL.DLL : 8.1.1.3 438645 Bytes 02/02/2009 13:08:46
AEPACK.DLL : 8.1.3.8 397684 Bytes 02/01/2001 01:21:48
AEOFFICE.DLL : 8.1.0.33 196987 Bytes 02/02/2009 13:08:46
AEHEUR.DLL : 8.1.0.90 1573237 Bytes 02/01/2001 01:21:47
AEHELP.DLL : 8.1.2.0 119159 Bytes 02/02/2009 13:08:46
AEGEN.DLL : 8.1.1.14 332148 Bytes 06/02/2009 16:12:56
AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 10:05:56
AECORE.DLL : 8.1.6.4 176501 Bytes 02/02/2009 13:08:46
AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 10:05:56
AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:02
AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:27:58
AVREP.DLL : 8.0.0.2 98344 Bytes 02/02/2009 13:08:46
AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:37
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:19
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:46
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:36
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:07
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 04/07/2008 07:23:16
RCTEXT.DLL : 8.0.52.1 86273 Bytes 17/07/2008 10:08:43

Configuration pour la recherche actuelle :
Nom de la tâche..................: Contrôle intégral du système
Fichier de configuration.........: c:\program files\avira\antivir personaledition classic\sysscan.avp
Documentation....................: bas
Action principale................: interactif
Action secondaire................: ignorer
Recherche sur les secteurs d'amorçage maître: marche
Recherche sur les secteurs d'amorçage: marche
Secteurs d'amorçage..............: C:, F:,
Recherche dans les programmes actifs: marche
Recherche en cours sur l'enregistrement: marche
Recherche de Rootkits............: arrêt
Fichier mode de recherche........: Sélection de fichiers intelligente
Recherche sur les archives.......: marche
Limiter la profondeur de récursivité: 20
Archive Smart Extensions.........: marche
Heuristique de macrovirus........: marche
Heuristique fichier..............: moyen

Début de la recherche : samedi 7 février 2009 09:02

La recherche sur les processus démarrés commence :
Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avcenter.exe' - '1' module(s) sont contrôlés
Processus de recherche 'iexplore.exe' - '1' module(s) sont contrôlés
Processus de recherche 'FTCOMModule.exe' - '1' module(s) sont contrôlés
Processus de recherche 'OraConfigRecover.exe' - '1' module(s) sont contrôlés
Processus de recherche 'CoreCom.exe' - '1' module(s) sont contrôlés
Processus de recherche 'Deskboard.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ConnectivityManager.exe' - '1' module(s) sont contrôlés
Processus de recherche 'Launcher.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'SystrayApp.exe' - '1' module(s) sont contrôlés
Processus de recherche 'AlertModule.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ctfmon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avgnt.exe' - '1' module(s) sont contrôlés
Processus de recherche 'AAWTray.exe' - '1' module(s) sont contrôlés
Processus de recherche 'AGRSMMSG.exe' - '1' module(s) sont contrôlés
Processus de recherche 'atiptaxx.exe' - '1' module(s) sont contrôlés
Processus de recherche 'alg.exe' - '1' module(s) sont contrôlés
Processus de recherche 'unsecapp.exe' - '1' module(s) sont contrôlés
Processus de recherche 'wmiprvse.exe' - '1' module(s) sont contrôlés
Processus de recherche 'explorer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ati2evxx.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'wdfmgr.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'LSSrvc.exe' - '1' module(s) sont contrôlés
Processus de recherche 'FTRTSVC.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avguard.exe' - '1' module(s) sont contrôlés
Processus de recherche 'agrsmsvc.exe' - '1' module(s) sont contrôlés
Processus de recherche 'sched.exe' - '1' module(s) sont contrôlés
Processus de recherche 'spoolsv.exe' - '1' module(s) sont contrôlés
Processus de recherche 'AAWService.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ati2evxx.exe' - '1' module(s) sont contrôlés
Processus de recherche 'lsass.exe' - '1' module(s) sont contrôlés
Processus de recherche 'services.exe' - '1' module(s) sont contrôlés
Processus de recherche 'winlogon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'csrss.exe' - '1' module(s) sont contrôlés
Processus de recherche 'smss.exe' - '1' module(s) sont contrôlés
'43' processus ont été contrôlés avec '43' modules

La recherche sur les secteurs d'amorçage maître commence :
Secteur d'amorçage maître HD0
[INFO] Aucun virus trouvé !
Secteur d'amorçage maître HD1
[INFO] Aucun virus trouvé !

La recherche sur les secteurs d'amorçage commence :
Secteur d'amorçage 'C:\'
[INFO] Aucun virus trouvé !
Secteur d'amorçage 'F:\'
[INFO] Aucun virus trouvé !

La recherche sur les renvois aux fichiers exécutables (registre) commence.
Le registre a été contrôlé ( '58' fichiers).


La recherche sur les fichiers sélectionnés commence :

Recherche débutant dans 'C:\'
C:\hiberfil.sys
[AVERTISSEMENT] Impossible d'ouvrir le fichier !
C:\pagefile.sys
[AVERTISSEMENT] Impossible d'ouvrir le fichier !
C:\WINDOWS\system32\drivers\sptd.sys
[AVERTISSEMENT] Impossible d'ouvrir le fichier !
Recherche débutant dans 'F:\' <MES DOCUMENTS>
F:\Christophe\MICRO\60 UTILITAIRES\Rippack v3 beta fr\Rippackv3beta161.exe
[RESULTAT] Contient le modèle de détection du dropper DR/Gator.3202.23
F:\Christophe\MICRO\60 UTILITAIRES\Rippack v3 beta fr\Rippackv3beta161.exe
[0] Type d'archive: CAB SFX (self extracting)
--> data\divx5\0\DivXPro502GAINBundle.exe
[RESULTAT] Contient le modèle de détection du dropper DR/Gator.3202.14
[AVERTISSEMENT] Fichier ignoré.
F:\Christophe\MICRO\60 UTILITAIRES\WinAce 211 fr\WinAce_Traduction_francaise.exe
[AVERTISSEMENT] Aucun autre fichier n'a pu être décompressé de cette archive. L'archive est refermée.
F:\System Volume Information\_restore{8D9D6436-A788-472D-808C-52A69EB6D85F}\RP96\A0032882.exe
[RESULTAT] Contient le modèle de détection du dropper DR/Gator.3202.23
F:\System Volume Information\_restore{8D9D6436-A788-472D-808C-52A69EB6D85F}\RP96\A0032882.exe
[0] Type d'archive: CAB SFX (self extracting)
--> data\divx5\0\DivXPro502GAINBundle.exe
[RESULTAT] Contient le modèle de détection du dropper DR/Gator.3202.14
[REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '49bd4762.qua' !


Fin de la recherche : samedi 7 février 2009 09:33
Temps nécessaire: 30:12 Minute(s)

La recherche a été effectuée intégralement

5733 Les répertoires ont été contrôlés
149549 Des fichiers ont été contrôlés
4 Des virus ou programmes indésirables ont été trouvés
0 Des fichiers ont été classés comme suspects
0 Des fichiers ont été supprimés
0 Des virus ou programmes indésirables ont été réparés
1 Les fichiers ont été déplacés dans la quarantaine
0 Les fichiers ont été renommés
3 Impossible de contrôler des fichiers
149542 Fichiers non infectés
2152 Les archives ont été contrôlées
5 Avertissements
1 Consignes

=======================================================================

Rapport HITJACK THIS :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:06:16, on 07/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\LSI SoftModem\agrsmsvc.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\OrangeHSS\systray\systrayapp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\OrangeHSS\Launcher\Launcher.exe
C:\Program Files\OrangeHSS\connectivity\connectivitymanager.exe
C:\Program Files\OrangeHSS\Deskboard\deskboard.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\CoreCom.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.google.fr/keyword/%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail?kw=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.orange.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\\PSDrvCheck.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Researcher\EROPROJ.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)

Je pensais que le parefeu de ma livebox en position "élevé" était suffisant ! ?