Logfile of random's system information tool 1.06 (written by random/random)
Run by BERESSA at 2009-10-12 08:38:51
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 23 GB (30%) free of 75 GB
Total RAM: 511 MB (35% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:39:23, on 12/10/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\soundman.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Documents and Settings\BERESSA.UNICORNI-6B5B43\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Documents and Settings\BERESSA.UNICORNI-6B5B43\Mes documents\Downloads\Programs\RSIT.exe
C:\Program Files\trend micro\BERESSA.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: XML module - {500BCA15-57A7-4eaf-8143-8C619470B13D} - C:\WINDOWS\system32\msxml71.dll (file missing)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SoundMan] soundman.exe
O4 - HKLM\..\Run: [EPSON Stylus C42 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P23 "EPSON Stylus C42 Series" /O6 "USB001" /M "Stylus C42"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PopRock] C:\DOCUME~1\BERESS~1.UNI\LOCALS~1\Temp\b.exe
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\BERESSA.UNICORNI-6B5B43\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Global Startup: BlueSoleil.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Télécharger tous les liens avec IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O17 - HKLM\System\CCS\Services\Tcpip\..\{9A81A723-694F-4FA0-BAE2-223831FA67E8}: NameServer = 41.221.20.4 193.251.169.165
O20 - AppInit_DLLs: C:\WINDOWS\System32\icardie32.dll
O20 - Winlogon Notify: f891d965670 - C:\WINDOWS\System32\icardie32.dll
O23 - Service: Avira Pare-feu (AntiVirFirewallService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe
O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
End of file - 6472 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\{BB65B0FB-5712-401b-B616-E69AC55E2757}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}]
IDMIEHlprObj Class - C:\Program Files\Internet Download Manager\IDMIECC.dll [2009-04-27 169392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{500BCA15-57A7-4eaf-8143-8C619470B13D}]
XML Class - C:\WINDOWS\system32\msxml71.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-25 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-07-25 73728]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\soundman.exe [2001-05-29 124416]
"EPSON Stylus C42 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE [2002-02-19 74240]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-07-25 149280]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-03 15360]
"PopRock"=C:\DOCUME~1\BERESS~1.UNI\LOCALS~1\Temp\b.exe []
"IDMan"=C:\Program Files\Internet Download Manager\IDMan.exe [2009-09-15 2799024]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan]
C:\Program Files\Internet Download Manager\IDMan.exe [2009-09-15 2799024]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2004-08-04 1667584]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
C:\Program Files\Winamp\Winampa.exe [2001-10-02 10752]
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage
BlueSoleil.lnk - C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Documents and Settings\BERESSA.UNICORNI-6B5B43\Menu Démarrer\Programmes\Démarrage
Notification de cadeaux MSN.lnk - C:\Documents and Settings\BERESSA.UNICORNI-6B5B43\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\WINDOWS\System32\icardie32.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\f891d965670]
C:\WINDOWS\System32\icardie32.dll [2009-10-12 119808]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\KONAMI\Pro Evolution Soccer 2009\pes2009.exe"="C:\Program Files\KONAMI\Pro Evolution Soccer 2009\pes2009.exe:*:Enabled:Pro Evolution Soccer 2009"
"C:\WINDOWS\temp\NavBrowser.exe"="C:\WINDOWS\temp\NavBrowser.exe:*:Enabled:NAVBrowser"
"C:\Program Files\DAP\DAP.exe"="C:\Program Files\DAP\DAP.exe:*:Enabled:Download Accelerator Plus (DAP)"
"C:\Documents and Settings\BERESSA.UNICORNI-6B5B43\Mes documents\My Completed Downloads\microtorrent_torrent_1.8.3_build_15772_francais_18245.exe"="C:\Documents and Settings\BERESSA.UNICORNI-6B5B43\Mes documents\My Completed Downloads\microtorrent_torrent_1.8.3_build_15772_francais_18245.exe:*:Enabled:µTorrent"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\WINDOWS\explorer.exe"="C:\WINDOWS\explorer.exe:*:Enabled:Windows Shell"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{24b03f54-6cdf-11de-8816-00e04d62fdd3}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Wscript.exe kubernesis.vbe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4dbcc371-6cab-11de-9729-806d6172696f}]
shell\AutoRun\command - F:\DocStart.Exe "BC_B_PAL.mpg"
shell\ww\command - F:\DocStart.Exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4dbcc373-6cab-11de-9729-806d6172696f}]
shell\AutoRun\command - H:\Setup.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e81a0686-aeb2-11de-889d-101111111111}]
shell\AUtoplaY\command - ujrh.pif
shell\AutoRun\command - ujrh.pif
shell\exPlore\command - ujrh.pif
shell\oPeN\command - ujrh.pif
======List of files/folders created in the last 1 months======
2009-10-12 08:38:52 ----D---- C:\Program Files\trend micro
2009-10-12 08:38:51 ----D---- C:\rsit
2009-10-11 16:45:40 ----A---- C:\WINDOWS\system32\19.tmp
2009-10-11 12:10:10 ----SHD---- C:\WINDOWS\system32\LocalService
2009-10-10 08:09:05 ----A---- C:\WINDOWS\system32\3.tmp
2009-10-09 04:00:46 ----A---- C:\WINDOWS\system32\5.tmp
2009-10-07 18:33:10 ----D---- C:\WINDOWS\Sun
2009-10-06 07:25:55 ----A---- C:\WINDOWS\system32\2B.tmp
2009-10-03 19:10:33 ----A---- C:\WINDOWS\system32\A.tmp
2009-10-02 14:34:24 ----A---- C:\WINDOWS\system32\33.tmp
2009-10-01 04:20:42 ----A---- C:\WINDOWS\system32\26.tmp
2009-09-26 07:18:31 ----A---- C:\WINDOWS\system32\32.tmp
2009-09-23 18:56:37 ----A---- C:\WINDOWS\iun506.exe
2009-09-23 18:56:35 ----D---- C:\Program Files\My Home
2009-09-23 18:39:31 ----A---- C:\WINDOWS\system32\ExlxOrHaXhvw12Q.vbs
2009-09-23 18:38:55 ----A---- C:\WINDOWS\system32\sUYZYJC.vbs
2009-09-23 18:36:55 ----A---- C:\WINDOWS\system32\SJDcP.vbs
2009-09-23 18:36:24 ----A---- C:\WINDOWS\system32\qkHGynLqcbE1De1.vbs
2009-09-23 18:35:55 ----A---- C:\WINDOWS\system32\PlLCH4T8nksis.vbs
2009-09-23 18:35:55 ----A---- C:\WINDOWS\system32\icardie32.dll
2009-09-23 18:21:18 ----D---- C:\Documents and Settings\BERESSA.UNICORNI-6B5B43\Application Data\LimeWire
2009-09-23 12:39:01 ----A---- C:\WINDOWS\system32\javaws.exe
2009-09-23 12:39:01 ----A---- C:\WINDOWS\system32\javaw.exe
2009-09-23 12:39:01 ----A---- C:\WINDOWS\system32\java.exe
2009-09-22 19:05:21 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-09-22 19:05:03 ----D---- C:\Program Files\Java
2009-09-22 18:53:35 ----D---- C:\Documents and Settings\BERESSA.UNICORNI-6B5B43\Application Data\Sun
2009-09-21 19:05:03 ----A---- C:\WINDOWS\system32\MSVCRTD.DLL
2009-09-21 19:05:03 ----A---- C:\WINDOWS\system32\MSVCP60D.DLL
2009-09-21 19:04:57 ----A---- C:\WINDOWS\system32\WMAFile.dll
2009-09-21 19:04:57 ----A---- C:\WINDOWS\system32\VB6STKIT.DLL
2009-09-21 19:04:57 ----A---- C:\WINDOWS\system32\VB6FR.DLL
2009-09-21 19:04:57 ----A---- C:\WINDOWS\system32\TABCTFR.DLL
2009-09-21 19:04:57 ----A---- C:\WINDOWS\system32\inetfr.DLL
2009-09-21 19:04:57 ----A---- C:\WINDOWS\system32\AudPlayer.dll
2009-09-21 19:04:57 ----A---- C:\WINDOWS\system32\AudioVisu.dll
2009-09-21 19:04:57 ----A---- C:\WINDOWS\system32\AudioRecord.dll
2009-09-21 19:04:57 ----A---- C:\WINDOWS\system32\AudioInfos.dll
2009-09-21 19:04:57 ----A---- C:\WINDOWS\system32\AudFile.dll
2009-09-21 19:04:57 ----A---- C:\WINDOWS\system32\AudDisplay.dll
2009-09-21 19:04:57 ----A---- C:\WINDOWS\system32\AudDesign.dll
2009-09-21 19:04:56 ----A---- C:\WINDOWS\system32\MSCMCFR.DLL
2009-09-21 19:04:56 ----A---- C:\WINDOWS\system32\Mscc2fr.dll
2009-09-21 19:04:56 ----A---- C:\WINDOWS\system32\CMDLGFR.DLL
2009-09-21 19:04:55 ----D---- C:\Program Files\Free Audio Pack
2009-09-21 19:04:55 ----A---- C:\WINDOWS\system32\msvcr70.dll
2009-09-21 19:04:55 ----A---- C:\WINDOWS\system32\MFC71.dll
2009-09-21 19:04:55 ----A---- C:\WINDOWS\system32\lame_enc.dll
2009-09-21 18:24:54 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Bluetooth
2009-09-21 18:22:03 ----D---- C:\Program Files\IVT Corporation
2009-09-21 18:22:03 ----A---- C:\WINDOWS\system32\btinstall.dll
2009-09-21 18:22:03 ----A---- C:\WINDOWS\system32\btfunc.dll
2009-09-16 20:23:40 ----D---- C:\Program Files\Microsoft
2009-09-16 20:23:24 ----D---- C:\Program Files\Windows Live SkyDrive
2009-09-16 19:55:16 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-09-16 18:18:13 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Messenger Plus!
2009-09-16 18:17:37 ----D---- C:\Program Files\Circle Developement
2009-09-16 18:17:27 ----D---- C:\Program Files\Messenger Plus! Live
2009-09-16 13:51:43 ----D---- C:\Documents and Settings\BERESSA.UNICORNI-6B5B43\Application Data\MSNInstaller
2009-09-16 13:43:38 ----HD---- C:\WINDOWS\msdownld.tmp
2009-09-16 13:43:09 ----D---- C:\WINDOWS\WBEM
2009-09-16 13:42:00 ----HDC---- C:\WINDOWS\ie8
2009-09-16 13:42:00 ----D---- C:\WINDOWS\system32\fr-FR
2009-09-16 09:41:20 ----D---- C:\WINDOWS\Prefetch
2009-09-16 09:35:47 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-09-16 09:27:47 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-09-16 09:27:47 ----A---- C:\WINDOWS\system32\irclass.dll
2009-09-16 09:27:29 ----RA---- C:\WINDOWS\SET32.tmp
2009-09-16 09:27:26 ----RA---- C:\WINDOWS\SET26.tmp
2009-09-16 09:27:24 ----RA---- C:\WINDOWS\SET23.tmp
2009-09-16 09:18:52 ----D---- C:\WINDOWS\setup.pss
2009-09-15 21:57:57 ----D---- C:\Program Files\Internet Download Manager
2009-09-13 18:38:45 ----D---- C:\Program Files\RY's GAMES
======List of files/folders modified in the last 1 months======
2009-10-12 08:39:12 ----D---- C:\WINDOWS\system32
2009-10-12 08:38:52 ----RD---- C:\Program Files
2009-10-12 08:37:57 ----D---- C:\Documents and Settings\BERESSA.UNICORNI-6B5B43\Application Data\DMCache
2009-10-12 08:21:44 ----D---- C:\Program Files\Mozilla Firefox
2009-10-12 08:03:22 ----D---- C:\Documents and Settings\BERESSA.UNICORNI-6B5B43\Application Data\uTorrent
2009-10-11 21:47:36 ----D---- C:\WINDOWS\temp
2009-10-11 20:18:11 ----A---- C:\WINDOWS\NeroDigital.ini
2009-10-11 18:03:05 ----D---- C:\Documents and Settings\BERESSA.UNICORNI-6B5B43\Application Data\IDM
2009-10-11 16:00:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-10-10 19:09:20 ----D---- C:\WINDOWS\system32\CatRoot2
2009-10-10 13:32:45 ----A---- C:\WINDOWS\winamp.ini
2009-10-09 10:52:00 ----D---- C:\Documents and Settings\BERESSA.UNICORNI-6B5B43\Application Data\dvdcss
2009-10-07 18:33:36 ----D---- C:\WINDOWS\system32\config
2009-10-07 18:33:31 ----D---- C:\WINDOWS\system32\wbem
2009-10-07 18:33:30 ----D---- C:\WINDOWS\Registration
2009-10-07 18:33:15 ----D---- C:\WINDOWS
2009-10-07 18:33:12 ----HD---- C:\WINDOWS\inf
2009-10-07 18:28:48 ----D---- C:\Documents and Settings
2009-10-06 21:02:17 ----SD---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft
2009-10-06 21:01:47 ----D---- C:\WINDOWS\Help
2009-10-06 20:50:46 ----SD---- C:\WINDOWS\Tasks
2009-09-30 12:30:36 ----D---- C:\WINDOWS\system32\drivers
2009-09-23 12:39:05 ----SHD---- C:\WINDOWS\Installer
2009-09-23 12:39:05 ----D---- C:\Config.Msi
2009-09-22 13:14:53 ----SD---- C:\Documents and Settings\BERESSA.UNICORNI-6B5B43\Application Data\Microsoft
2009-09-22 13:14:52 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-09-21 18:23:08 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-09-21 18:22:01 ----HD---- C:\Program Files\InstallShield Installation Information
2009-09-20 20:36:04 ----D---- C:\Program Files\eMule
2009-09-19 16:10:08 ----SH---- C:\boot.ini
2009-09-19 16:10:08 ----A---- C:\WINDOWS\win.ini
2009-09-19 16:10:08 ----A---- C:\WINDOWS\system.ini
2009-09-18 01:11:08 ----D---- C:\WINDOWS\pss
2009-09-16 23:18:49 ----D---- C:\Program Files\Online Services
2009-09-16 20:24:23 ----D---- C:\WINDOWS\WinSxS
2009-09-16 20:24:21 ----D---- C:\Program Files\MSN Messenger
2009-09-16 20:23:35 ----D---- C:\Program Files\Windows Live
2009-09-16 20:23:06 ----RSD---- C:\WINDOWS\Fonts
2009-09-16 19:55:16 ----D---- C:\Program Files\Fichiers communs
2009-09-16 19:48:32 ----D---- C:\WINDOWS\system32\CatRoot
2009-09-16 19:48:29 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2009-09-16 19:44:43 ----D---- C:\WINDOWS\SoftwareDistribution
2009-09-16 18:12:42 ----A---- C:\WINDOWS\OEWABLog.txt
2009-09-16 18:01:31 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-09-16 17:17:06 ----A---- C:\WINDOWS\imsins.BAK
2009-09-16 13:51:12 ----D---- C:\Program Files\MSN
2009-09-16 13:46:18 ----D---- C:\Program Files\Internet Explorer
2009-09-16 13:45:44 ----D---- C:\WINDOWS\security
2009-09-16 13:43:01 ----D---- C:\WINDOWS\Media
2009-09-16 10:25:18 ----D---- C:\WINDOWS\system
2009-09-16 10:25:17 ----D---- C:\WINDOWS\system32\Setup
2009-09-16 10:25:08 ----D---- C:\WINDOWS\system32\usmt
2009-09-16 10:25:00 ----D---- C:\WINDOWS\AppPatch
2009-09-16 10:24:59 ----D---- C:\WINDOWS\ime
2009-09-16 10:24:59 ----D---- C:\WINDOWS\ehome
2009-09-16 10:24:45 ----D---- C:\WINDOWS\PeerNet
2009-09-16 10:24:31 ----D---- C:\WINDOWS\system32\npp
2009-09-16 10:24:24 ----D---- C:\WINDOWS\msagent
2009-09-16 10:22:32 ----D---- C:\WINDOWS\system32\1036
2009-09-16 10:22:26 ----D---- C:\WINDOWS\twain_32
2009-09-16 10:22:13 ----D---- C:\WINDOWS\system32\icsxml
2009-09-16 10:21:43 ----D---- C:\WINDOWS\system32\1033
2009-09-16 10:20:45 ----D---- C:\WINDOWS\Driver Cache
2009-09-16 09:42:30 ----A---- C:\WINDOWS\setuplog.txt
2009-09-16 09:41:26 ----SHD---- C:\System Volume Information
2009-09-16 09:41:26 ----D---- C:\WINDOWS\system32\Restore
2009-09-16 09:36:36 ----A---- C:\WINDOWS\ODBCINST.INI
2009-09-16 09:36:13 ----D---- C:\WINDOWS\system32\ias
2009-09-16 09:35:49 ----RD---- C:\WINDOWS\Web
2009-09-16 09:35:41 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-09-16 09:35:26 ----D---- C:\WINDOWS\system32\oobe
2009-09-16 09:34:40 ----D---- C:\WINDOWS\system32\Com
2009-09-16 09:34:18 ----D---- C:\Program Files\Messenger
2009-09-16 09:27:39 ----ASH---- C:\Documents and Settings\All Users.WINDOWS\Application Data\desktop.ini
2009-09-16 09:18:54 ----A---- C:\WINDOWS\UPGRADE.TXT
2009-09-16 09:13:37 ----D---- C:\Program Files\DAP
2009-09-16 09:13:37 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\SpeedBit
2009-09-16 01:00:27 ----AD---- C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP
2009-09-14 22:26:35 ----D---- C:\WINDOWS\system32\appmgmt
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 avfwot;avfwot; C:\WINDOWS\system32\DRIVERS\avfwot.sys [2009-09-03 97608]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-03 40320]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-09-03 28520]
R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-08-24 12032]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-08-18 55656]
R3 ALCXWDM;Service for Avance AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2001-12-17 265143]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2004-08-04 701440]
R3 avfwim;AvFw Packet Filter Miniport; C:\WINDOWS\system32\DRIVERS\avfwim.sys [2009-02-24 69632]
R3 BlueletAudio;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [2005-05-31 20480]
R3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2005-04-30 10804]
R3 BTHidEnum;Bluetooth HID Enumerator; C:\WINDOWS\system32\DRIVERS\vbtenum.sys [2005-04-30 11860]
R3 ms_mpu401;Pilote UART MIDI MPU-401 Microsoft; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-08-24 5888]
R3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
R3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys [2004-10-19 61312]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys [2005-03-25 82148]
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys [2005-05-31 23000]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-24 9600]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 VendorJoystickEnabler;Driver para joystick paralelo de consola; C:\WINDOWS\system32\drivers\ntpad.sys [2001-11-13 16582]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AntiVirFirewallService;Avira Pare-feu; C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe [2009-09-03 388865]
R2 AntiVirMailService;Avira AntiVir MailGuard; C:\Program Files\Avira\AntiVir Desktop\avmailc.exe [2009-09-03 194817]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-09-03 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-09-03 185089]
R2 AntiVirWebService;Avira AntiVir WebGuard; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [2009-09-03 434945]
R2 BlueSoleil Hid Service;BlueSoleil Hid Service; C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe [2005-04-06 110592]
R2 EPSONStatusAgent2;EPSON Printer Status Agent2; C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe [2001-10-25 90112]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-07-25 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
S3 MMIndexer;Dispositif d'indexation Media Manager; C:\Program Files\Fichiers communs\Microsoft Shared\Media Manager\airsvcu.exe [1997-07-31 137216]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
-----------------EOF-----------------
info.txt logfile of random's system information tool 1.06 2009-10-12 08:39:25
======Uninstall list======
_GTA 3 (By RY's)-->C:\PROGRA~1\RY'SGA~1\GTA3~1\UNWISE.EXE C:\PROGRA~1\RY'SGA~1\GTA3~1\INSTALL.LOG
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Acrobat 5.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 7.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70000000000}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Avance AC'97 Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" REMOVE
Avira Premium Security Suite-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
BlueSoleil-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B9F499B8-D1F0-42FC-84BE-CC552123CCCB}\setup.exe" -l0x40c
Condition zero-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\RYS PLANET\Condition zero\Uninst.isu"
eMule-->"C:\Program Files\eMule\Uninstall.exe"
EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /r
EPSON PhotoQuicker3.2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B2EFE303-A594-11D5-95EB-005004BC1C65}\setup.exe" uninst
Free Mp3 Wma Converter V 1.81-->"C:\Program Files\Free Audio Pack\unins000.exe"
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
Internet Download Manager-->C:\Program Files\Internet Download Manager\Uninstall.exe
Java(TM) 6 Update 15-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Messenger Plus! Live & Sponsor (CiD)-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Media Manager 1.5-->C:\Program Files\Media Manager\Setup\Setup.exe
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Picture It! 99-->C:\Program Files\Microsoft Picture It!\Setup\install.exe
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mozilla Firefox (3.0.14)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
My Home-->C:\WINDOWS\iun506.exe C:\Program Files\My Home\irunin.ini
Nero 6 Enterprise Edition-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Pro Evolution Soccer 2009-->MsiExec.exe /X{A8DB611A-D80E-450D-85F6-3ACDD164BE31}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
SuperCopier2-->"C:\Program Files\SuperCopier2\SC2Uninst.exe"
VLC media player 0.9.9-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Winamp (remove only)-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
======Security center information======
AV: AntiVir Desktop
FW: Avira Pare-feu
======System event log======
Computer Name: UNICORNI-6B5B43
Event Code: 20159
Message: La connexion à FAWRI effectuée par l'utilisateur LAMIA27 utilisant le périphérique PPPoE6-0 a été déconnectée.
Record Number: 971
Source Name: RemoteAccess
Time Written: 20090911074600.000000+060
Event Type: Informations
User:
Computer Name: UNICORNI-6B5B43
Event Code: 4226
Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.
Record Number: 970
Source Name: Tcpip
Time Written: 20090911063415.000000+060
Event Type: Avertissement
User:
Computer Name: UNICORNI-6B5B43
Event Code: 4226
Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.
Record Number: 969
Source Name: Tcpip
Time Written: 20090911000844.000000+060
Event Type: Avertissement
User:
Computer Name: UNICORNI-6B5B43
Event Code: 4226
Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.
Record Number: 968
Source Name: Tcpip
Time Written: 20090910230526.000000+060
Event Type: Avertissement
User:
Computer Name: UNICORNI-6B5B43
Event Code: 4226
Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.
Record Number: 967
Source Name: Tcpip
Time Written: 20090910223728.000000+060
Event Type: Avertissement
User:
=====Application event log=====
Computer Name: UNICORNI-6B5B43
Event Code: 4113
Message: AntiVir a détecté dans le fichier
C:\WINDOWS\system32\icardie32.dll
un code suspect avec la désignation 'TR/Crypt.ZPACK.Gen'!
Record Number: 3025
Source Name: Avira AntiVir
Time Written: 20091004115138.000000+060
Event Type: Avertissement
User: AUTORITE NT\SYSTEM
Computer Name: UNICORNI-6B5B43
Event Code: 4113
Message: AntiVir a détecté dans le fichier
C:\WINDOWS\system32\icardie32.dll
un code suspect avec la désignation 'TR/Crypt.ZPACK.Gen'!
Record Number: 3024
Source Name: Avira AntiVir
Time Written: 20091004114137.000000+060
Event Type: Avertissement
User: AUTORITE NT\SYSTEM
Computer Name: UNICORNI-6B5B43
Event Code: 4113
Message: AntiVir a détecté dans le fichier
C:\WINDOWS\system32\icardie32.dll
un code suspect avec la désignation 'TR/Crypt.ZPACK.Gen'!
Record Number: 3023
Source Name: Avira AntiVir
Time Written: 20091004113136.000000+060
Event Type: Avertissement
User: AUTORITE NT\SYSTEM
Computer Name: UNICORNI-6B5B43
Event Code: 4113
Message: AntiVir a détecté dans le fichier
C:\WINDOWS\system32\icardie32.dll
un code suspect avec la désignation 'TR/Crypt.ZPACK.Gen'!
Record Number: 3022
Source Name: Avira AntiVir
Time Written: 20091004112135.000000+060
Event Type: Avertissement
User: AUTORITE NT\SYSTEM
Computer Name: UNICORNI-6B5B43
Event Code: 4113
Message: AntiVir a détecté dans le fichier
C:\System Volume Information\_restore{4E647386-581E-4CF3-AA6D-0198BC88904C}\RP28\A0004790.exe
un code suspect avec la désignation 'TR/Dldr.Swizzor.Gen'!
Record Number: 3021
Source Name: Avira AntiVir
Time Written: 20091004111548.000000+060
Event Type: Avertissement
User: AUTORITE NT\SYSTEM
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\WBEM
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 2 Stepping 9, GenuineIntel
"PROCESSOR_REVISION"=0209
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
-----------------EOF-----------------
Comment nettoyer tr/crypt.xpack.gen