Bonjour,

Une vraie pépinière

Un rapport HJT en mode sans échec ne nous sert pas à grand chose.

refais en un en mode normal STP Si il n'y a pas de solution c'est qu'il n'y a pas de problèm­e.

Slt,

Boodha tu peux deja commencer a desinfecter, il y a le choix au niveau des infections ;-)





Attention : les cracks et keygens dissimulent Bagle !

~#*'"»€le©τ®!C™«"'*#~

InfernO.vir

2tant curieux, j'attends de voir si la pépinière se transforme en zoo ou même en jungle.

;-) Si il n'y a pas de solution c'est qu'il n'y a pas de problèm­e.

XD d'accord :)

De toute facon, on peut pas dire que son pc est clean lol

Attention : les cracks et keygens dissimulent Bagle !

~#*'"»€le©τ®!C™«"'*#~

InfernO.vir

Mon PC a toujours été très clean. Avec passage de multiples logiciels tous les mois. Mais là... :P


Bon super, le PC ne redémarre plus en mode normal :D Juste après le chargement windows, là où il devrait m'afficher que ma copie n'est pas valide (j'utilise windose les incompris), j'ai la souris mais rien d'autre.

Est-ce que ca vaut le coup que je télécharge tous les fix disponibles sur Comment ca marche pour les appliquer en mode sans echec?

Est-ce qu'un formatage supprime tout? :P

il devrait m'afficher que ma copie n'est pas valide (j'utilise windose les incompris)

Tu peux m'en dire un peu plus car je ne comprend pas le sens de ta phrase ? Si il n'y a pas de solution c'est qu'il n'y a pas de problèm­e.

Un windows non-officiel !?


Sinon en mode sans echec, tanbt que t'y es, je propose SDFix, findykill(par precaution) et si cela ne s'arrange pas : combofix.

Attention : les cracks et keygens dissimulent Bagle !

~#*'"»€le©τ®!C™«"'*#~

InfernO.vir

Effectivement, c'est une version modifiée qui enlève (au choix) certains services de Windows qui sont souvent pas necessaires aux utilisateurs. (c'est dans la lignée des windows LSD...)

Je vais passer tout tes logiciels de suite inferno. Merci.

Toast attends Booddha, c'est lui qui a rep le 1er, ne passe pas les fix tout de suite ce n'est que mon avis.


Attention : les cracks et keygens dissimulent Bagle !

~#*'"»€le©τ®!C™«"'*#~

InfernO.vir

Bon j'avais lancé SDfix avant donc je l'ai fais entierement, il n'a rien trouvé (pourtant il a été long :P).

Je lance les autres logiciels que tu m'as proposé ?


Sinon, utiliser le CD de boot pour réparer ca peut pas marcher ?

Bon j'ai lancé les deux autres. Rien trouvé non plus.

En fait combo fix a commencé, il m'indique suppression des fichiers :

WINDOWS/System32/dumphive.exe
WINDOWS/System32/Process.exe
WINDOWS/System32/SrchSTS.exe
WINDOWS/System32/tmp.reg
WINDOWS/System32/xcchit32.ini
xccwinsys.ini

Mais ensuite il marque qu'il trouve pas le fichier de commande check_Hal

Et donc il ne fait plus rien.

Je commence à tourner en rond la :P Donc si quelqu'un a une idée, elle est la bienvenue :)

Bonjour.

J'ai réussi à redemarrer une fois en mode normal. Le virus était toujours là mais j'ai fais shutdown -a et mis l'horloge à l'an 2000

Il y a plusieurs processus qui ont crashé, pnkbstrA, pnkbsterB, et notamment service.exe Je me demande si le virus n'a pas causé quelques dégats sur certains process importants.

J'ai essayé d'installer en mode sans echec VirusKeeper, mais il n'arrive pas à le lancer (Virus keeper dit qu'il va se redemarrer tout seul pour reessayer).

J'ai aussi eu une erreur systeme code : 1060 Le service spécifié n'existe pas en tant que service installé.

Je ne sais pas si c'est très important, mais c'était la 2e fois que je voyais ce message d'erreur. En mode normal, l'ordi a mis du temps pour entrer dans poste de travail.


Sinon j'en ai profité pour faire un rapport Hijackthis.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:16, on 2000-02-28
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Logiciels\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\Logiciels\TortoiseSVN\bin\TSVNCache.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAGE.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Logiciels\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Logiciels\Norton Ghost\Agent\VProSvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\Private Folder\PrfldSvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindService.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\dwwin.exe
C:\Logiciels\HijackThis\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favoris
O3 - Toolbar: Alcohol Toolbar - {4C4E7CDB-5BFC-4D74-83E2-8AE659B7EDA2} - C:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [EPSON Stylus Photo RX520 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAGE.EXE /P31 "EPSON Stylus Photo RX520 Series" /M "Stylus Photo RX520" /EF "HKCU"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [settings] C:\WINDOWS\callsysnt.exe
O4 - HKCU\..\Policies\Explorer\Run: [settings] C:\WINDOWS\callsysnt.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm
O8 - Extra context menu item: TÈlÈcharger avec IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: TÈlÈcharger le contenu de video FLV avec IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: TÈlÈcharger tous les liens avec IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O9 - Extra button: Envoyer ‡ OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer ‡ OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Michael\Jeux\Poker\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Michael\Jeux\Poker\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.incompris.net
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {91D4B4D5-E368-40AB-8F53-A37FA634B471} (Installer9Ctrl Class) - http://www2.tellmemorecampus.com/bin/tol9inst.cab
O16 - DPF: {9B14B03A-B482-45C3-BE37-5B7CAA8B0B5D} (QBH Control) - http://hsearch.nayio.com/download/QBH.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Logiciels\Ad-Aware\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Logiciels\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: F-Secure BackWeb (backweb client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Service de transfert intelligent en arriËre-plan (BITS) - Unknown owner - C:\WINDOWS\
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: F-Secure BackWeb LAN Access (f-secure backweb lan access) - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Station de travail lanmanworkstationFSMA (lanmanworkstationfsma) - Unknown owner - C:\WINDOWS\system32\adsndst.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Logiciels\Norton Ghost\Agent\VProSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PCLEPCI - Pinnacle Systems GmbH - C:\WINDOWS\system32\drivers\pclepci.sys
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Private Folder Service (prfldsvc) - Unknown owner - C:\WINDOWS\Private Folder\PrfldSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindService.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender10\vsserv.exe (file missing)
O23 - Service: wampapache - Apache Software Foundation - C:\Logiciels\wamp\bin\apache\apache2.2.10\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - C:\Logiciels\wamp\bin\mysql\mysql5.1.30\bin\mysqld.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
End of file - 10891 bytes



Merci pour votre aide.

Une autre question : est-il possible de forcer l'application d'un patch correctif de windows? Quand j'essaie de mettre la mise à jour connu pour ce type de virus, j'ai un message qui m'informe que ma version de windows est supérieur à celui du patch et donc qu'il ne va pas l'installer.

Merci.

En mode normal de windows, j'ai démarré VirusKeeper qui m'a mis 5 fichier en quarantaine en me prévenant d'un risque élevé :

dumphive
Process.exe
SrchSTS
swreg.exe
swsc.exe

Ils se trouvaient tous dans system32.

Je vais essayer ton Cureit.

Par contre impossible d'acceder à internet. Normalement quand je branche mon cable ethernet je suis directement connecté mais là rien il ne voit pas que je suis branché. Donc impossible de faire le scan.

Merci en tout cas.

Il vient de m'ajouter swxcacls en détection de programme dangereux élevé.

Non en fait depuis le début j'utilise l'ordinateur de ma soeur :)

Alors quand windows a bien voulu démarrer en mode normal (une fois sur trois), j'ai fais un test comportemental au moment du message d'arret (qui apparait exactement apres le message d'erreur : service.exe doit être arreté). Et il n'a rien trouvé.

Tout à l'heure j'ai essayé de lancer la fonction recherche antivirus de VirusKeeper, mais il n'a pas démarré (j'ai simplement eu l'affichage de la banniere VirusKeeper). PAr contre j'ai passé tous les autres tests et rien n'a été trouvé.

J'ai regardé sur le net, et les fichiers que j'avais cité dans mes précédents messages sont en fait liés à SmitFraudFix.

Oui le DrWeb est très long. Il a trouvé dans l'analyse rapide uacuptxqgvp.sys (backdoor.Tdss.84) et wsyhgukk.dll (Win32.HLLW.Shadow.Based).

Sinon là en ce moment l'analyse complete est en cours, mais elle ne trouve que les exe de smitfraud et de viruskeeper.

Donc pour l'instant toujours aucune piste concluante :(

Pourrais-tu jeter un coup d'oeil au rapport HiJackThis que j'ai posté plus haut ?

Sinon je reste toujours troublé par le fait que windows ai du mal à démarrer normalement. D'ailleurs quand il réussit, la plupart des process censé démarrer n'apparaissent pas (par exemple des outils de réglages de ma carte son). Est-ce qu'une réparation avec le CD de boot est recommandé ?

En tout cas merci de ton accompagnement.

Bonjour.

Je viens de faire les log, je les poste juste apres.

Juste un rapport sur Dr.Web, il m'a trouvé pas mal de petites cochoneries dont un backdoor en plus de celui que j'ai cité précedemment.

Avant de faire RSIT j'ai redémarré, et là pas de problemes, redémarrage du premier coup, pas de crash de service.exe

Dans mes 2 prochains post, les logs demandés :)

Logfile of random's system information tool 1.05 (written by random/random)
Run by Administrateur at 2000-02-28 20:44:38
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 25 GB (8%) free of 295 GB
Total RAM: 2046 MB (78% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:44, on 2000-02-28
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Logiciels\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\Logiciels\TortoiseSVN\bin\TSVNCache.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAGE.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Logiciels\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Logiciels\Norton Ghost\Agent\VProSvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\Private Folder\PrfldSvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindService.exe
C:\Logiciels\VirusKeeper 2009 Pro Evaluation\vk_service.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
H:\Fix\RSIT.exe
C:\Logiciels\HijackThis\Administrateur.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favoris
O3 - Toolbar: Alcohol Toolbar - {4C4E7CDB-5BFC-4D74-83E2-8AE659B7EDA2} - C:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [VirusKeeper] C:\Logiciels\VirusKeeper 2009 Pro Evaluation\VirusKeeper.exe
O4 - HKCU\..\Run: [EPSON Stylus Photo RX520 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAGE.EXE /P31 "EPSON Stylus Photo RX520 Series" /M "Stylus Photo RX520" /EF "HKCU"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [settings] C:\WINDOWS\callsysnt.exe
O4 - HKCU\..\Policies\Explorer\Run: [settings] C:\WINDOWS\callsysnt.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm
O8 - Extra context menu item: TÈlÈcharger avec IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: TÈlÈcharger le contenu de video FLV avec IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: TÈlÈcharger tous les liens avec IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O9 - Extra button: Envoyer ‡ OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer ‡ OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Michael\Jeux\Poker\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Michael\Jeux\Poker\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.incompris.net
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {91D4B4D5-E368-40AB-8F53-A37FA634B471} (Installer9Ctrl Class) - http://www2.tellmemorecampus.com/bin/tol9inst.cab
O16 - DPF: {9B14B03A-B482-45C3-BE37-5B7CAA8B0B5D} (QBH Control) - http://hsearch.nayio.com/download/QBH.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Logiciels\Ad-Aware\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Logiciels\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: F-Secure BackWeb (backweb client - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Service de transfert intelligent en arriËre-plan (BITS) - Unknown owner - C:\WINDOWS\
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: F-Secure BackWeb LAN Access (f-secure backweb lan access) - Unknown owner - C:\Program Files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Station de travail lanmanworkstationFSMA (lanmanworkstationfsma) - Unknown owner - C:\WINDOWS\system32\adsndst.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Logiciels\Norton Ghost\Agent\VProSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PCLEPCI - Pinnacle Systems GmbH - C:\WINDOWS\system32\drivers\pclepci.sys
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Private Folder Service (prfldsvc) - Unknown owner - C:\WINDOWS\Private Folder\PrfldSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindService.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: VirusKeeper antivirus/antispyware (vkservice) - AxBx - C:\Logiciels\VirusKeeper 2009 Pro Evaluation\vk_service.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender10\vsserv.exe (file missing)
O23 - Service: wampapache - Apache Software Foundation - C:\Logiciels\wamp\bin\apache\apache2.2.10\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - C:\Logiciels\wamp\bin\mysql\mysql5.1.30\bin\mysqld.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
End of file - 10217 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{4C4E7CDB-5BFC-4D74-83E2-8AE659B7EDA2} - Alcohol Toolbar - C:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll [2007-01-14 798720]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-08-11 7630848]
"VirusKeeper"=C:\Logiciels\VirusKeeper 2009 Pro Evaluation\VirusKeeper.exe [2009-02-20 3824512]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"EPSON Stylus Photo RX520 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAGE.EXE [2005-04-07 98304]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2006-08-18 15360]
"IDMan"=C:\Program Files\Internet Download Manager\IDMan.exe [2008-10-28 2606512]
"settings"=C:\WINDOWS\callsysnt.exe [2009-01-21 237568]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"settings"=C:\WINDOWS\callsysnt.exe [2009-01-21 237568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2006-08-18 702768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"=C:\Logiciels\AVG Anti-Spyware 7.5\shellexecutehook.dll [2007-05-30 79408]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AVG Anti-Spyware Driver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AVG Anti-Spyware Guard]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSEXESVC]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AVG Anti-Spyware Driver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AVG Anti-Spyware Guard]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PSEXESVC]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoSMBalloonTip"=1
"NoDriveAutoRun"=FFFFFFFF
"NoDriveTypeAutoRun"=36
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\Microsoft Office 2007\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office 2007\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office 2007\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office 2007\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Michael\Jeux\Assassin\AssassinsCreed_Dx9.exe"="C:\Michael\Jeux\Assassin\AssassinsCreed_Dx9.exe:*:Enabled:Assassin's Creed Dx9"
"C:\Michael\Jeux\Assassin\AssassinsCreed_Dx10.exe"="C:\Michael\Jeux\Assassin\AssassinsCreed_Dx10.exe:*:Enabled:Assassin's Creed Dx10"
"C:\Michael\Jeux\Assassin\AssassinsCreed_Launcher.exe"="C:\Michael\Jeux\Assassin\AssassinsCreed_Launcher.exe:*:Enabled:Assassin's Creed Update"
"C:\Michael\Jeux\Neverwinter Nights 2\nwn2main.exe"="C:\Michael\Jeux\Neverwinter Nights 2\nwn2main.exe:*:Enabled:Neverwinter Nights 2 Main"
"C:\Michael\Jeux\Neverwinter Nights 2\nwn2main_amdxp.exe"="C:\Michael\Jeux\Neverwinter Nights 2\nwn2main_amdxp.exe:*:Enabled:Neverwinter Nights 2 AMD"
"C:\Michael\Jeux\Neverwinter Nights 2\nwupdate.exe"="C:\Michael\Jeux\Neverwinter Nights 2\nwupdate.exe:*:Enabled:Neverwinter Nights 2 Updater"
"C:\Michael\Jeux\Neverwinter Nights 2\nwn2server.exe"="C:\Michael\Jeux\Neverwinter Nights 2\nwn2server.exe:*:Enabled:Neverwinter Nights 2 Server"
"C:\Michael\Jeux\CoD4\iw3mp.exe"="C:\Michael\Jeux\CoD4\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"C:\Logiciels\Pando\pando.exe"="C:\Logiciels\Pando\pando.exe:*:Enabled:Pando Application"
"C:\Logiciels\utorrent\uTorrent.exe"="C:\Logiciels\utorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
shell\AutoRun\command - F:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{53a289c4-86ed-11db-b645-0017318a9297}]
shell\AutoRun\command - F:\autorun6e.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{714dd224-0536-11dd-9831-0017318a9297}]
shell\AutoRun\command - H:\itsduel.exe
shell\explore\command - H:\itsduel.exe
shell\open\command - H:\itsduel.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7fa50a11-6d08-11db-b613-0017318a9297}]
shell\AutoRun\command - F:\Autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9ee7e04e-2f0b-11dd-afd0-0017318a9297}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{eb9f904a-b873-11dc-b32c-0017318a9297}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RUNdLl32.ExE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn


======List of files/folders created in the last 2 months======

2088-02-28 00:38:14 ----D---- C:\Documents And Settings\Administrateur\Application Data\Malwarebytes
2088-02-28 00:38:09 ----D---- C:\Documents And Settings\All Users\Application Data\Malwarebytes
2088-02-26 22:50:44 ----D---- C:\SOPHTEMP
2088-02-26 16:54:41 ----D---- C:\WINDOWS\temp
2088-02-26 16:53:59 ----A---- C:\WINDOWS\zip.exe
2088-02-26 16:53:59 ----A---- C:\WINDOWS\VFIND.exe
2088-02-26 16:53:59 ----A---- C:\WINDOWS\SWXCACLS.exe
2088-02-26 16:53:59 ----A---- C:\WINDOWS\SWSC.exe
2088-02-26 16:53:59 ----A---- C:\WINDOWS\SWREG.exe
2088-02-26 16:53:59 ----A---- C:\WINDOWS\sed.exe
2088-02-26 16:53:59 ----A---- C:\WINDOWS\NIRCMD.exe
2088-02-26 16:53:59 ----A---- C:\WINDOWS\grep.exe
2088-02-26 16:53:59 ----A---- C:\WINDOWS\fdsv.exe
2088-02-26 16:53:50 ----D---- C:\ComboFix
2088-02-26 16:53:50 ----A---- C:\WINDOWS\system32\CF3771.exe
2088-02-26 16:51:58 ----A---- C:\FindyKill.txt
2088-02-26 16:51:25 ----D---- C:\Program Files\FindyKill
2088-02-26 16:29:55 ----D---- C:\Documents And Settings\Administrateur\Application Data\WinRAR
2088-02-26 16:00:07 ----D---- C:\WINDOWS\system32\xircom
2088-02-26 16:00:07 ----D---- C:\WINDOWS\srchasst
2088-02-26 16:00:07 ----D---- C:\Program Files\xerox
2088-02-26 16:00:07 ----D---- C:\Program Files\msn gaming zone
2088-02-26 16:00:07 ----D---- C:\Program Files\movie maker
2088-02-26 16:00:07 ----D---- C:\Program Files\microsoft frontpage
2088-02-26 16:00:07 ----D---- C:\Program Files\Fichiers communs\speechengines
2088-02-26 15:48:03 ----D---- C:\WINDOWS\ERUNT
2088-02-26 15:44:53 ----D---- C:\SDFix
2088-02-26 15:44:38 ----D---- C:\WINDOWS\ERDNT
2088-02-26 15:44:38 ----D---- C:\Qoobox
2088-02-26 13:11:04 ----D---- C:\WINDOWS\CSC
2088-02-26 03:51:56 ----RSH---- C:\WINDOWS\system32\adsndst.exe
2088-02-26 03:51:41 ----A---- C:\WINDOWS\system32\UACmdcucqtr.dll
2088-02-26 03:51:41 ----A---- C:\WINDOWS\system32\tmpxccacj0.exe
2088-02-26 03:50:37 ----D---- C:\WINDOWS\system32\inf
2088-02-26 03:50:33 ----A---- C:\WINDOWS\system32\UACpqlnknlc.dll
2088-02-26 03:50:26 ----A---- C:\kked.exe
2009-02-26 03:50:20 ----A---- C:\WINDOWS\callsysnt.exe
2009-02-26 03:50:17 ----A---- C:\vdyewm.exe
2009-02-26 03:50:16 ----RSH---- C:\WINDOWS\system32\1037h.exe
2009-02-26 03:50:15 ----A---- C:\uiysxss.exe
2009-02-26 03:50:14 ----A---- C:\WINDOWS\system32\hhs3ijndfd.dll
2009-02-26 03:48:13 ----AH---- C:\MsInstaller.exe
2009-02-21 19:20:11 ----RASHD---- C:\autorun.inf
2009-02-03 21:58:22 ----D---- C:\Program Files\Fichiers communs\Skype
2009-01-24 16:45:16 ----A---- C:\WINDOWS\system32\javaws.exe
2009-01-24 16:45:16 ----A---- C:\WINDOWS\system32\javaw.exe
2009-01-24 16:45:16 ----A---- C:\WINDOWS\system32\java.exe
2009-01-24 16:45:16 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-01-15 19:43:17 ----D---- C:\WINDOWS\system32\Auralog
2009-01-02 15:28:00 ----D---- C:\Documents And Settings\Administrateur\Application Data\foobar2000
2008-12-31 15:04:40 ----D---- C:\Documents And Settings\Administrateur\Application Data\Soldat
2008-12-21 23:12:52 ----D---- C:\Documents And Settings\Administrateur\Application Data\YuLeech
2008-12-21 01:45:21 ----D---- C:\Documents And Settings\Administrateur\Application Data\fretsonfire
2008-12-21 00:03:38 ----A---- C:\WINDOWS\War3Unin.exe
2008-12-05 20:18:26 ----A---- C:\WINDOWS\system32\tsccvid.dll
2008-12-05 20:18:25 ----D---- C:\WINDOWS\system32\QuickTime
2008-12-05 20:18:18 ----D---- C:\Documents And Settings\All Users\Application Data\TechSmith
2008-12-05 20:18:04 ----D---- C:\Program Files\Fichiers communs\TechSmith Shared
2008-12-05 18:45:53 ----D---- C:\Documents And Settings\Administrateur\Application Data\skypePM
2008-12-03 17:49:39 ----D---- C:\Documents And Settings\Administrateur\Application Data\Grisoft
2008-12-01 22:38:42 ----D---- C:\Documents And Settings\Administrateur\Application Data\uTorrent
2008-11-30 23:34:17 ----D---- C:\Documents And Settings\Administrateur\Application Data\IDM
2008-11-30 23:34:17 ----D---- C:\Documents And Settings\Administrateur\Application Data\DMCache
2008-11-30 23:34:16 ----D---- C:\Program Files\Internet Download Manager
2008-11-30 20:39:06 ----D---- C:\Program Files\Pando Networks
2008-11-30 19:00:17 ----D---- C:\Documents And Settings\All Users\Application Data\2DBoy
2008-11-19 21:51:17 ----D---- C:\Documents And Settings\All Users\Application Data\Astar Games
2008-11-19 20:50:03 ----D---- C:\Documents And Settings\Administrateur\Application Data\Gamelab
2008-11-18 22:16:16 ----D---- C:\Documents And Settings\Administrateur\Application Data\ViquaSoft
2008-11-18 20:44:04 ----D---- C:\Documents And Settings\Administrateur\Application Data\iWin
2008-11-12 17:58:04 ----D---- C:\Documents And Settings\Administrateur\Application Data\SulusGames
2008-11-12 16:40:04 ----D---- C:\Documents And Settings\Administrateur\Application Data\Zylom
2008-11-12 16:40:00 ----D---- C:\Documents And Settings\All Users\Application Data\Zylom
2008-11-12 15:36:48 ----D---- C:\Documents And Settings\Administrateur\Application Data\Go-Go Gourmet Chef of the Year
2008-11-12 15:36:18 ----D---- C:\Program Files\ReflexiveArcade
2008-10-28 16:19:48 ----D---- C:\Documents And Settings\All Users\Application Data\Fugazo
2008-10-24 21:22:54 ----D---- C:\Documents And Settings\Administrateur\Application Data\PetShowCraze
2008-10-24 20:17:54 ----D---- C:\Documents And Settings\All Users\Application Data\Sandlot Games
2008-10-21 21:54:31 ----D---- C:\Documents And Settings\All Users\Application Data\Ludia
2008-10-21 21:54:31 ----D---- C:\Documents And Settings\Administrateur\Application Data\Ludia
2008-10-21 19:52:58 ----D---- C:\Documents And Settings\All Users\Application Data\Playrix Entertainment
2008-10-20 20:41:31 ----D---- C:\Documents And Settings\Administrateur\Application Data\Amaranth Games
2008-10-18 23:39:46 ----D---- C:\Documents And Settings\Administrateur\Application Data\BeachPartyCraze
2008-10-18 09:36:51 ----D---- C:\Documents And Settings\All Users\Application Data\PlayFirst
2008-10-18 09:36:51 ----D---- C:\Documents And Settings\Administrateur\Application Data\PlayFirst
2008-10-18 09:36:33 ----D---- C:\Program Files\Oberon Media
2008-08-19 00:37:50 ----D---- C:\WINDOWS\Logs
2008-08-17 21:33:24 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2008-08-17 21:33:23 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2008-08-17 21:33:21 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2008-08-17 21:33:20 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2008-08-17 21:33:20 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2008-08-17 21:33:19 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2008-08-04 00:05:53 ----D---- C:\Program Files\Ventrilo
2008-08-03 21:12:12 ----D---- C:\Program Files\Fichiers communs\DirectX
2008-07-27 01:01:56 ----A---- C:\WINDOWS\Battle.ini
2008-07-27 00:42:35 ----HD---- C:\WINDOWS\PIF
2008-07-16 20:10:13 ----D---- C:\Documents And Settings\Administrateur\Application Data\KC Softwares
2008-07-06 15:24:13 ----D---- C:\Program Files\Dyyno
2008-07-04 21:05:31 ----D---- C:\Documents And Settings\Administrateur\Application Data\NPLUTO Corporation
2008-07-04 20:54:01 ----D---- C:\ijji
2008-07-04 18:37:58 ----A---- C:\WINDOWS\WAVEMIX.INI
2008-06-29 23:22:12 ----D---- C:\Program Files\Outils de Guitare-Online
2008-06-13 20:29:14 ----D---- C:\Program Files\Lionhead Studios
2008-06-13 20:28:35 ----D---- C:\Program Files\Common Files
2008-06-12 21:45:20 ----D---- C:\Documents And Settings\Administrateur\Application Data\Mumble
2008-06-08 14:03:46 ----D---- C:\Documents And Settings\Administrateur\Application Data\TortoiseSVN
2008-06-08 10:35:24 ----D---- C:\Documents And Settings\Administrateur\Application Data\ZOO Digital Publishing
2008-05-17 22:22:46 ----A---- C:\WINDOWS\system32\WNASPINT.DLL
2008-05-16 11:58:04 ----A---- C:\WINDOWS\system32\lsdelete.exe
2008-05-11 18:01:02 ----D---- C:\Documents And Settings\All Users\Application Data\Lavasoft
2008-04-24 18:22:47 ----D---- C:\Program Files\AVG
2008-04-20 20:49:30 ----A---- C:\WINDOWS\unin040c.exe
2008-04-20 20:49:21 ----A---- C:\WINDOWS\uninst.exe
2008-04-19 13:30:58 ----D---- C:\Documents And Settings\Administrateur\Application Data\Ubisoft
2008-04-19 13:29:25 ----D---- C:\Documents And Settings\All Users\Application Data\Ubisoft
2008-04-19 13:27:44 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2008-04-19 13:27:42 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2008-04-19 13:27:42 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2008-04-19 13:27:41 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2008-04-19 13:27:40 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2008-04-19 13:27:39 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2008-04-19 13:27:39 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2008-04-19 13:27:38 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2008-04-19 13:20:28 ----D---- C:\Documents And Settings\Administrateur\Application Data\InstallShield
2008-04-10 14:58:51 ----D---- C:\Program Files\Fichiers communs\SourceTec
2008-03-29 15:46:01 ----N---- C:\WINDOWS\Setup1.exe
2008-03-29 15:46:00 ----A---- C:\WINDOWS\ST6UNST.EXE
2008-03-23 12:58:10 ----A---- C:\WINDOWS\system32\uxtuneup.dll
2008-03-23 12:58:10 ----A---- C:\WINDOWS\system32\TuneUpDefragService.exe
2008-03-17 00:15:20 ----D---- C:\Documents And Settings\Administrateur\Application Data\codeblocks
2008-03-16 16:26:38 ----D---- C:\Documents And Settings\Administrateur\Application Data\Subversion
2008-03-14 19:39:31 ----D---- C:\Documents And Settings\Administrateur\Application Data\Aptana
2008-03-14 17:37:55 ----D---- C:\Program Files\Fichiers communs\Adobe AIR
2008-03-06 17:35:40 ----D---- C:\Documents And Settings\Administrateur\Application Data\Xfire
2008-02-25 23:51:17 ----D---- C:\Documents And Settings\Administrateur\Application Data\Hamachi
2008-02-01 19:18:30 ----A---- C:\WINDOWS\system32\NPSWF32_FlashUtil.exe
2008-02-01 19:18:30 ----A---- C:\WINDOWS\system32\NPSWF32.dll
2008-01-31 03:03:26 ----A---- C:\WINDOWS\system32\xfcodec.dll
2008-01-24 19:24:10 ----D---- C:\Program Files\Sony Setup
2008-01-24 19:22:45 ----D---- C:\Documents And Settings\Administrateur\Application Data\Publish Providers
2008-01-24 19:22:30 ----AD---- C:\Documents And Settings\All Users\Application Data\TEMP
2008-01-24 19:22:23 ----D---- C:\Documents And Settings\Administrateur\Application Data\Sony
2008-01-24 19:21:20 ----D---- C:\Documents And Settings\All Users\Application Data\Sony
2008-01-24 19:12:41 ----D---- C:\WINDOWS\system32\XPSViewer
2008-01-24 19:12:40 ----D---- C:\WINDOWS\system32\en-us
2008-01-24 19:12:03 ----D---- C:\Program Files\Reference Assemblies
2008-01-24 19:11:44 ----N---- C:\WINDOWS\system32\spmsg2.dll
2008-01-24 19:11:28 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2008-01-24 19:11:26 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2008-01-24 19:10:32 ----D---- C:\Documents And Settings\Administrateur\Application Data\Sony Setup
2008-01-20 16:44:17 ----D---- C:\Program Files\Rumble Box
2008-01-16 23:11:11 ----D---- C:\Documents And Settings\Administrateur\Application Data\REALVIZ
2008-01-16 22:46:13 ----D---- C:\Documents And Settings\Administrateur\Application Data\PanoramaStudio
2008-01-14 20:10:39 ----D---- C:\Program Files\Fichiers communs\Digidesign
2008-01-14 20:10:34 ----D---- C:\Program Files\Antares Audio Technologies
2008-01-14 20:08:28 ----D---- C:\Documents And Settings\Administrateur\Application Data\Cakewalk
2008-01-14 20:01:04 ----A---- C:\WINDOWS\system32\REX Shared Library.dll
2008-01-14 20:00:15 ----D---- C:\Program Files\Cakewalk
2008-01-14 20:00:15 ----D---- C:\Documents And Settings\All Users\Application Data\Cakewalk
2008-01-14 20:00:14 ----D---- C:\Cakewalk Projects
2008-01-09 19:37:36 ----D---- C:\Documents And Settings\Administrateur\Application Data\mIRC
2008-01-02 21:43:39 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2008-01-02 21:43:34 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2008-01-02 21:37:33 ----A---- C:\WINDOWS\system32\pbsvc.exe
2007-12-28 18:17:57 ----D---- C:\Program Files\aMSN
2007-12-19 23:10:12 ----D---- C:\dk
2007-12-18 23:35:47 ----D---- C:\Documents And Settings\Administrateur\Application Data\XnView
2007-12-14 22:07:32 ----D---- C:\Documents And Settings\Administrateur\Application Data\Sibelius Software
2007-12-14 22:07:26 ----D---- C:\Program Files\Sibelius Software
2007-12-10 23:43:58 ----D---- C:\Documents And Settings\All Users\Application Data\UDL
2007-12-10 23:42:57 ----A---- C:\WINDOWS\system32\PICSDK.ini
2007-12-10 23:42:57 ----A---- C:\WINDOWS\system32\PICSDK.dll
2007-12-10 23:42:57 ----A---- C:\WINDOWS\system32\EpPicPrt.dll
2007-12-10 23:42:57 ----A---- C:\WINDOWS\system32\EPPicMgr.dll
2007-12-10 23:42:16 ----A---- C:\WINDOWS\system32\E_DCINST.DLL
2007-12-10 23:42:15 ----A---- C:\WINDOWS\system32\E_FLMAGE.DLL
2007-12-10 23:42:15 ----A---- C:\WINDOWS\system32\E_FBCHAGE.DLL
2007-12-10 23:42:15 ----A---- C:\WINDOWS\system32\E_FBCBAGE.DLL
2007-12-10 23:33:29 ----A---- C:\WINDOWS\EPSTPLOG.TXT
2007-12-10 23:33:29 ----A---- C:\WINDOWS\EPSTPLOG.BAK
2007-12-10 23:33:29 ----A---- C:\WINDOWS\EPSMTL32.TXT
2007-12-10 23:33:16 ----D---- C:\Program Files\epson
2007-12-10 23:33:15 ----A---- C:\WINDOWS\system32\escwiad.dll
2007-12-10 23:33:15 ----A---- C:\WINDOWS\system32\escimgd.dll
2007-12-10 23:33:15 ----A---- C:\WINDOWS\system32\esccmd.dll
2007-12-10 23:32:34 ----A---- C:\WINDOWS\CDE RX520FI.ini
2007-12-10 23:32:20 ----A---- C:\WINDOWS\epsswt_log.txt
2007-12-09 17:34:44 ----D---- C:\Documents And Settings\All Users\Application Data\Skyline
2007-12-09 17:34:42 ----D---- C:\Program Files\Skyline
2007-12-06 19:04:53 ----A---- C:\WINDOWS\xinorbis3.ini
2007-12-04 20:46:36 ----D---- C:\Documents And Settings\All Users\Application Data\Office Genuine Advantage
2007-11-29 17:32:06 ----A---- C:\WINDOWS\MyProg.ini
2007-11-27 21:43:49 ----D---- C:\Documents And Settings\Administrateur\Application Data\GeoVid
2007-11-27 21:42:24 ----A---- C:\WINDOWS\system32\dsetup.dll
2007-11-27 21:42:23 ----D---- C:\Program Files\Fichiers communs\GeoVid
2007-11-27 21:33:19 ----D---- C:\Program Files\WinPcap
2007-11-27 21:32:50 ----D---- C:\Documents And Settings\Administrateur\Application Data\Sytexis Software
2007-11-27 21:32:50 ----A---- C:\wsr.txt
2007-11-27 21:30:30 ----A---- C:\WINDOWS\Replay Media Catcher Uninstall Log.txt
2007-11-27 21:19:00 ----D---- C:\Documents And Settings\Administrateur\Application Data\GetRightToGo
2007-11-27 21:18:54 ----D---- C:\WINDOWS\Replay Media Catcher
2007-11-24 02:29:18 ----D---- C:\Program Files\Fichiers communs\Control Panels
2007-11-23 22:10:32 ----D---- C:\Program Files\Bonjour
2007-11-22 20:01:28 ----A---- C:\WINDOWS\unvise32.exe
2007-11-16 20:30:18 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2007-11-16 20:30:18 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2007-11-16 20:30:17 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2007-11-16 20:30:17 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2007-11-16 20:30:16 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2007-11-16 20:24:40 ----A---- C:\WINDOWS\game.ini
2007-11-16 20:18:00 ----D---- C:\Program Files\Activision
2007-11-16 12:18:32 ----D---- C:\Documents And Settings\Administrateur\Application Data\FTPRush
2007-11-11 19:38:22 ----A---- C:\WINDOWS\system32\BASSMOD.dll
2007-11-08 20:18:53 ----D---- C:\Program Files\Azureus Ultra Accelerator
2007-11-07 07:03:18 ----A---- C:\install.res.3082.dll
2007-11-07 07:03:18 ----A---- C:\install.res.2052.dll
2007-11-07 07:03:18 ----A---- C:\install.res.1042.dll
2007-11-07 07:03:18 ----A---- C:\install.res.1041.dll
2007-11-07 07:03:18 ----A---- C:\install.res.1040.dll
2007-11-07 07:03:18 ----A---- C:\install.res.1036.dll
2007-11-07 07:03:18 ----A---- C:\install.res.1033.dll
2007-11-07 07:03:18 ----A---- C:\install.res.1031.dll
2007-11-07 07:03:18 ----A---- C:\install.res.1028.dll
2007-11-07 07:00:40 ----A---- C:\install.ini
2007-11-07 07:00:40 ----A---- C:\globdata.ini
2007-11-07 07:00:40 ----A---- C:\eula.3082.txt
2007-11-07 07:00:40 ----A---- C:\eula.2052.txt
2007-11-07 07:00:40 ----A---- C:\eula.1042.txt
2007-11-07 07:00:40 ----A---- C:\eula.1041.txt
2007-11-07 07:00:40 ----A---- C:\eula.1040.txt
2007-11-07 07:00:40 ----A---- C:\eula.1036.txt
2007-11-07 07:00:40 ----A---- C:\eula.1033.txt
2007-11-07 07:00:40 ----A---- C:\eula.1031.txt
2007-11-07 07:00:40 ----A---- C:\eula.1028.txt
2007-11-04 02:12:00 ----D---- C:\Program Files\Fichiers communs\Macromedia
2007-11-04 02:11:14 ----D---- C:\Program Files\Macromedia
2007-11-03 17:01:02 ----A---- C:\Program Files\UNWISE.EXE
2007-11-03 17:00:53 ----A---- C:\WINDOWS\system32\PCLECoInst.dll
2007-11-03 16:52:34 ----A---- C:\WINDOWS\system32\ATL70.DLL
2007-11-03 16:47:52 ----D---- C:\Documents And Settings\All Users\Application Data\Pinnacle
2007-11-03 16:47:46 ----D---- C:\Program Files\Pinnacle
2007-10-30 17:13:48 ----A---- C:\WINDOWS\system32\GEARAspi.dll
2007-10-30 17:12:17 ----D---- C:\Program Files\Symantec
2007-10-30 10:58:19 ----D---- C:\Documents And Settings\Administrateur\Application Data\Symantec
2007-10-29 18:14:46 ----A---- C:\WINDOWS\system32\capicom.dll
2007-10-29 18:14:45 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
2007-10-29 18:14:45 ----D---- C:\Documents And Settings\All Users\Application Data\Symantec
2007-10-29 18:06:45 ----D---- C:\Downloads
2007-10-29 18:06:35 ----D---- C:\Documents And Settings\Administrateur\Application Data\Internet Download Accelerator
2007-09-19 18:11:29 ----D---- C:\Documents And Settings\All Users\Application Data\FLEXnet
2007-09-19 18:04:24 ----D---- C:\Program Files\Fichiers communs\Macrovision Shared
2007-09-18 17:54:48 ----D---- C:\Documents And Settings\All Users\Application Data\Grisoft
2007-09-17 21:47:00 ----A---- C:\WINDOWS\GunzLauncher.INI
2007-09-17 21:46:10 ----HD---- C:\Documents And Settings\Administrateur\Application Data\ijjigame
2007-09-17 21:44:18 ----D---- C:\Documents And Settings\All Users\Application Data\IJJIGame
2007-09-09 18:37:48 ----D---- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy
2007-09-09 12:47:12 ----D---- C:\Documents And Settings\Administrateur\Application Data\FLV Extract
2007-09-06 18:59:14 ----D---- C:\Program Files\AMD
2007-09-05 12:21:51 ----D---- C:\WINDOWS\system32\URTTEMP
2007-09-05 11:33:41 ----D---- C:\Documents And Settings\Administrateur\Application Data\RaimaRadio
2007-09-04 23:09:06 ----D---- C:\TetriNET
2007-08-19 10:32:22 ----A---- C:\WINDOWS\system32\ssleay32.dll
2007-08-19 10:32:22 ----A---- C:\WINDOWS\system32\libeay32.dll
2007-08-19 10:19:10 ----D---- C:\Documents And Settings\Administrateur\Application Data\TuneUp Software
2007-08-19 10:18:34 ----D---- C:\Documents And Settings\All Users\Application Data\TuneUp Software
2007-08-19 10:18:21 ----D---- C:\Documents And Settings\All Users\Application Data\iolo
2007-08-19 10:18:20 ----D---- C:\Documents And Settings\Administrateur\Application Data\iolo
2007-07-27 00:06:12 ----A---- C:\WINDOWS\system32\ssldivx.dll
2007-07-27 00:06:12 ----A---- C:\WINDOWS\system32\libdivx.dll
2007-06-19 07:59:36 ----A---- C:\WINDOWS\system32\PhysXLoader.dll
2007-06-05 17:55:11 ----A---- C:\WINDOWS\ScUnin.exe
2007-06-04 19:46:37 ----N---- C:\WINDOWS\Ctregrun.exe
2007-06-04 19:45:17 ----N---- C:\WINDOWS\system32\CTSVCCTL.EXE
2007-06-04 19:45:17 ----N---- C:\WINDOWS\system32\CTSVCCDA.EXE
2007-06-04 19:45:01 ----D---- C:\Program Files\Fichiers communs\Creative
2007-06-04 19:45:00 ----HD---- C:\Program Files\Creative Installation Information
2007-06-04 19:44:28 ----N---- C:\WINDOWS\Updreg.EXE
2007-06-04 19:43:24 ----A---- C:\WINDOWS\CTXFIFRN.DLL
2007-06-04 19:40:48 ----D---- C:\Program Files\Creative
2007-06-04 19:38:03 ----D---- C:\Documents And Settings\All Users\Application Data\Creative
2007-06-04 19:37:51 ----D---- C:\Documents And Settings\Administrateur\Application Data\Creative
2007-06-04 19:37:21 ----RA---- C:\WINDOWS\system32\ctdvinst.dll
2007-06-04 19:37:21 ----RA---- C:\WINDOWS\system32\ctcoinst.dll
2007-06-04 19:37:20 ----RA---- C:\WINDOWS\system32\sfman32.dll
2007-06-04 19:37:20 ----RA---- C:\WINDOWS\system32\piaproxy.dll
2007-06-04 19:37:20 ----RA---- C:\WINDOWS\system32\ctemupia.dll
2007-06-04 19:37:20 ----RA---- C:\WINDOWS\system32\ctdproxy.dll
2007-06-04 19:37:20 ----RA---- C:\WINDOWS\system32\CT20XUT.DLL
2007-06-04 19:37:20 ----D---- C:\WINDOWS\system32\data
2007-06-04 19:37:19 ----RA---- C:\WINDOWS\system32\ctsblfx.dll
2007-06-04 19:37:19 ----RA---- C:\WINDOWS\system32\CTHWIUT.DLL
2007-06-04 19:37:19 ----RA---- C:\WINDOWS\system32\CTEXFIFX.dll
2007-06-04 19:37:19 ----RA---- C:\WINDOWS\system32\cteapsfx.dll
2007-06-04 19:37:18 ----RA---- C:\WINDOWS\system32\ctaudfx.dll
2007-06-04 19:37:18 ----RA---- C:\WINDOWS\system32\commonfx.dll
2007-06-04 19:37:18 ----RA---- C:\WINDOWS\system32\a3d.dll
2007-05-19 20:11:08 ----A---- C:\WINDOWS\ntbtlog.txt
2007-05-19 19:16:36 ----D---- C:\Documents And Settings\Administrateur\Application Data\Bitdefender
2007-05-19 19:16:00 ----D---- C:\Program Files\Softwin
2007-05-19 19:16:00 ----D---- C:\Documents And Settings\All Users\Application Data\BitDefender
2007-05-19 19:15:02 ----D---- C:\Program Files\Fichiers communs\Softwin
2007-05-16 23:26:37 ----D---- C:\Documents And Settings\All Users\Application Data\nView_Profiles
2007-05-16 23:20:04 ----D---- C:\Documents And Settings\All Users\Application Data\NVIDIA
2007-05-13 20:37:02 ----D---- C:\Program Files\NCH Swift Sound
2007-05-13 13:18:33 ----D---- C:\Documents And Settings\Administrateur\Application Data\vlc
2007-05-13 13:18:15 ----D---- C:\Program Files\VideoLAN
2007-05-08 23:29:10 ----D---- C:\WINDOWS\system32\AGEIA
2007-05-08 23:29:09 ----D---- C:\Program Files\AGEIA Technologies
2007-05-08 23:14:41 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2007-05-08 23:14:40 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2007-05-08 23:14:40 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2007-05-08 23:14:39 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2007-05-08 23:14:39 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2007-05-08 23:13:53 ----HD---- C:\WINDOWS\msdownld.tmp
2007-05-08 23:08:38 ----RSD---- C:\WINDOWS\assembly
2007-05-08 23:08:07 ----D---- C:\WINDOWS\Microsoft.NET
2007-04-26 20:52:31 ----D---- C:\Documents And Settings\Administrateur\Application Data\Command & Conquer 3 Les guerres du Tiberium
2007-04-26 20:15:01 ----RHD---- C:\Documents And Settings\Administrateur\Application Data\SecuROM
2007-04-26 20:15:01 ----A---- C:\WINDOWS\system32CmdLineExt.dll
2007-04-24 20:36:36 ----D---- C:\Documents And Settings\All Users\Application Data\DVD Shrink
2007-04-17 19:12:23 ----D---- C:\Documents And Settings\Administrateur\Application Data\Google
2007-04-17 19:11:45 ----D---- C:\Program Files\Google
2007-04-15 22:11:27 ----D---- C:\Documents And Settings\Administrateur\Application Data\Skype
2007-04-15 22:11:13 ----D---- C:\Documents And Settings\All Users\Application Data\Skype
2007-04-15 22:11:10 ----RD---- C:\Program Files\Skype
2007-03-26 20:28:46 ----D---- C:\Program Files\Microsoft Games
2007-03-26 20:10:21 ----AT---- C:\WINDOWS\system32\SIntfNT.dll
2007-03-26 20:10:21 ----AT---- C:\WINDOWS\system32\SIntf32.dll
2007-03-26 20:10:21 ----AT---- C:\WINDOWS\system32\SIntf16.dll
2007-03-26 18:55:54 ----RA---- C:\WINDOWS\system32\xmltok.dll
2007-03-26 18:55:54 ----RA---- C:\WINDOWS\system32\xmlparse.dll
2007-03-26 18:55:54 ----RA---- C:\WINDOWS\system32\xmlinst.exe
2007-03-26 18:55:54 ----RA---- C:\WINDOWS\system32\VB5DB.DLL
2007-03-26 18:55:54 ----D---- C:\Program Files\Ubisoft
2007-03-22 09:54:36 ----A---- C:\Program Files\mfc71u.dll
2007-03-22 09:54:36 ----A---- C:\Program Files\mfc71.dll
2007-03-22 09:54:36 ----A---- C:\Program Files\atl71.dll
2007-03-21 22:02:09 ----D---- C:\Documents And Settings\All Users\Application Data\Google
2007-03-19 23:27:24 ----A---- C:\WINDOWS\system32\CmdLineExt03.dll
2007-03-14 19:55:55 ----D---- C:\Program Files\sXe Injected
2007-03-12 13:39:02 ----A---- C:\WINDOWS\system32\ilinet.dll
2007-03-11 22:18:10 ----D---- C:\WINDOWS\system32\LogFiles
2007-03-08 14:36:22 ----D---- C:\VundoFix Backups
2007-03-08 14:36:22 ----A---- C:\VundoFix.txt
2007-03-06 17:10:01 ----D---- C:\Program Files\CleanUp!
2007-03-04 19:20:44 ----D---- C:\Program Files\WinLemm
2007-03-04 18:10:11 ----D---- C:\Program Files\DOSBox-0.70
2007-03-02 21:19:41 ----A---- C:\unpffc03.txt
2007-03-02 21:18:47 ----A---- C:\fixnavi.txt
2007-03-02 00:39:55 ----A---- C:\WINDOWS\system32\tmp.txt
2007-03-01 17:38:20 ----D---- C:\Documents And Settings\Administrateur\Application Data\Lavasoft
2007-03-01 14:18:16 ----A---- C:\WINDOWS\wininit.ini
2007-03-01 14:10:18 ----SH---- C:\WINDOWS\system32\otneneoa.ini
2007-03-01 12:20:04 ----A---- C:\WINDOWS\UnGins.exe
2007-02-28 19:06:54 ----A---- C:\gcc.bat
2007-02-28 13:25:39 ----D---- C:\Tmp
2007-02-28 02:46:39 ----D---- C:\Documents And Settings\Administrateur\Application Data\Opera
2007-02-28 02:38:04 ----D---- C:\Documents And Settings\All Users\Application Data\Adobe Systems
2007-02-22 11:30:11 ----D---- C:\Program Files\OpenAL
2007-02-22 11:30:11 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2007-02-22 11:30:11 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2007-02-22 11:30:09 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2007-02-22 11:30:09 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2007-02-22 11:30:08 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2007-02-22 11:30:08 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2007-02-22 11:30:08 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2007-02-22 11:30:08 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2007-02-20 12:59:08 ----A---- C:\WINDOWS\system32\AgCPanelJapanese.dll
2007-02-20 12:59:06 ----A---- C:\WINDOWS\system32\AgCPanelTraditionalChinese.dll
2007-02-20 12:59:06 ----A---- C:\WINDOWS\system32\AgCPanelSwedish.dll
2007-02-20 12:59:06 ----A---- C:\WINDOWS\system32\AgCPanelSimplifiedChinese.dll
2007-02-20 12:59:06 ----A---- C:\WINDOWS\system32\AgCPanelPortugese.dll
2007-02-20 12:59:06 ----A---- C:\WINDOWS\system32\AgCPanelKorean.dll
2007-02-20 12:59:06 ----A---- C:\WINDOWS\system32\AgCPanelGerman.dll
2007-02-20 12:59:06 ----A---- C:\WINDOWS\system32\AgCPanelFrench.dll
2007-02-20 12:59:04 ----A---- C:\WINDOWS\system32\AgCPanelSpanish.dll
2007-02-19 23:07:19 ----D---- C:\Program Files\Fichiers communs\Crystal Decisions
2007-02-18 23:43:02 ----D---- C:\Program Files\PKR
2007-02-18 23:29:12 ----D---- C:\Documents And Settings\Administrateur\Application Data\Ventrilo
2007-02-18 23:28:49 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2007-02-13 19:09:18 ----D---- C:\Documents And Settings\Administrateur\Application Data\ArcSoft
2007-02-13 19:07:39 ----D---- C:\Program Files\Fichiers communs\ArcSoft
2007-02-13 19:07:37 ----D---- C:\Program Files\Hercules
2007-02-13 19:07:37 ----A---- C:\WINDOWS\PCDLIB32.DLL
2007-02-13 19:06:41 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2007-02-13 19:06:21 ----N---- C:\WINDOWS\system32\ov530usd.dll
2007-02-13 19:06:21 ----N---- C:\WINDOWS\system32\ov530ext.dll
2007-02-13 19:06:21 ----N---- C:\WINDOWS\ov530dib.dll
2007-02-13 19:06:21 ----D---- C:\WINDOWS\OvtCam
2007-01-31 13:50:32 ----A---- C:\WINDOWS\system32\xreglib.dll
2007-01-30 20:51:43 ----D---- C:\Program Files\MSBuild
2007-01-30 20:48:12 ----D---- C:\Documents And Settings\All Users\Application Data\Microsoft Help
2007-01-30 20:47:32 ----RHD---- C:\MSOCache
2007-01-30 20:47:09 ----D---- C:\Program Files\Microsoft Office 2007
2007-01-25 18:31:36 ----A---- C:\WINDOWS\system32\wpcap.dll
2007-01-25 18:31:36 ----A---- C:\WINDOWS\system32\pthreadVC.dll
2007-01-25 18:31:34 ----A---- C:\WINDOWS\system32\WanPacket.dll
2007-01-25 18:31:34 ----A---- C:\WINDOWS\system32\Packet.dll
2007-01-20 17:10:34 ----D---- C:\Program Files\VstPlugins
2007-01-20 17:10:34 ----A---- C:\WINDOWS\system32\rewire.dll
2007-01-20 17:09:43 ----D---- C:\Program Files\Image-Line
2007-01-19 12:53:04 ----A---- C:\WINDOWS\system32\sirenacm.dll
2007-01-14 21:01:13 ----D---- C:\Program Files\Alcohol Toolbar
2007-01-14 21:01:13 ----A---- C:\WINDOWS\Alcohol_Toolbar_Uninstaller_62.exe
2007-01-07 15:59:29 ----D---- C:\Program Files\Neuf
2007-01-05 01:03:04 ----D---- C:\Documents And Settings\Administrateur\Application Data\Media Player Classic
2007-01-05 01:02:49 ----A---- C:\WINDOWS\system32\WMV9VCM.dll
2007-01-05 01:02:48 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2007-01-05 01:02:48 ----A---- C:\WINDOWS\system32\xvidcore.dll
2007-01-05 01:02:47 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2007-01-05 01:02:47 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2007-01-05 01:02:46 ----D---- C:\Program Files\K-Lite Codec Pack
2007-01-02 02:28:28 ----D---- C:\Program Files\SQLFan
2007-01-02 02:28:28 ----A---- C:\WINDOWS\system32\dbmssocn.dll
2007-01-02 02:26:22 ----D---- C:\Program Files\PremiumSoft
2006-12-27 13:11:11 ----D---- C:\WINDOWS\Sun
2006-12-27 13:11:11 ----D---- C:\Documents And Settings\Administrateur\Application Data\Sun
2006-12-26 20:56:45 ----SHD---- C:\WINDOWS\ftpcache
2006-12-25 11:35:57 ----D---- C:\F-Secure
2006-12-22 20:21:10 ----D---- C:\Program Files\Fichiers communs\xing shared
2006-12-22 20:20:52 ----D---- C:\Program Files\Fichiers communs\Real
2006-12-22 20:20:49 ----D---- C:\Program Files\Real
2006-12-22 20:20:21 ----D---- C:\Documents And Settings\Administrateur\Application Data\Real
2006-12-17 14:18:18 ----D---- C:\Documents And Settings\Administrateur\Application Data\CyberLink
2006-12-17 14:18:06 ----D---- C:\Documents And Settings\All Users\Application Data\CyberLink
2006-12-17 14:17:40 ----D---- C:\Program Files\CyberLink
2006-12-17 14:17:10 ----D---- C:\Program Files\PowerDVD
2006-12-17 13:05:30 ----D---- C:\Program Files\Fichiers communs\AVSMedia
2006-12-17 13:05:29 ----A---- C:\WINDOWS\system32\msxml3a.dll
2006-12-17 13:05:29 ----A---- C:\WINDOWS\system32\mpg4c32.dll
2006-12-17 13:05:29 ----A---- C:\WINDOWS\system32\mcdvd_32.dll
2006-12-16 18:43:16 ----A---- C:\WINDOWS\IsUninst.exe
2006-12-13 18:45:01 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2006-12-13 18:45:01 ----A---- C:\WINDOWS\system32\pndx5032.dll
2006-12-13 18:45:01 ----A---- C:\WINDOWS\system32\pndx5016.dll
2006-12-13 18:45:01 ----A---- C:\WINDOWS\system32\pncrt.dll
2006-12-13 18:45:00 ----D---- C:\Program Files\Real Alternative
2006-12-13 18:45:00 ----D---- C:\Program Files\Media Player Classic
2006-12-11 23:24:05 ----D---- C:\Documents And Settings\Administrateur\Application Data\OpenOffice.org2
2006-12-11 23:20:12 ----D---- C:\Program Files\OpenOffice.org 2.0
2006-12-11 23:19:46 ----D---- C:\Program Files\Open Office
2006-12-10 19:32:22 ----A---- C:\WINDOWS\pcfriend.INI
2006-12-10 17:54:07 ----D---- C:\Program Files\GIMP-2.0
2006-12-10 17:53:24 ----D---- C:\Program Files\Fichiers communs\GTK
2006-12-10 13:20:13 ----D---- C:\Program Files\Fichiers communs\Macromedia Shared
2006-12-10 13:20:12 ----D---- C:\Documents And Settings\All Users\Application Data\Macrovision
2006-12-10 13:12:29 ----D---- C:\Program Files\Fichiers communs\Adobe Systems Shared
2006-12-08 19:46:56 ----A---- C:\WINDOWS\vstudio.INI
2006-12-08 19:46:35 ----A---- C:\WINDOWS\msdevctl.ini
2006-12-08 19:43:09 ----A---- C:\WINDOWS\dswplug.ini
2006-12-08 19:42:14 ----A---- C:\WINDOWS\ULead32.ini
2006-12-08 19:40:50 ----D---- C:\Documents And Settings\Administrateur\Application Data\Spybot - Search & Destroy
2006-12-08 19:35:32 ----D---- C:\WINDOWS\system32\appmgmt
2006-12-08 03:57:20 ----A---- C:\WINDOWS\system32\TWUNK_32.EXE
2006-12-08 03:57:20 ----A---- C:\WINDOWS\system32\TWUNK_16.EXE
2006-12-08 03:57:20 ----A---- C:\WINDOWS\system32\TWAIN_32.DLL
2006-12-07 21:18:12 ----D---- C:\Program Files\Notepad++
2006-12-07 21:18:12 ----D---- C:\Documents And Settings\Administrateur\Application Data\Notepad++
2006-12-03 21:12:29 ----D---- C:\Documents And Settings\All Users\Application Data\InstallShield
2006-11-29 20:46:20 ----D---- C:\Incomplete
2006-11-29 20:46:13 ----D---- C:\Incoming
2006-11-29 20:44:39 ----D---- C:\Program Files\LimeWire
2006-11-29 17:04:19 ----A---- C:\WINDOWS\mngui.INI
2006-11-28 23:20:06 ----D---- C:\Documents And Settings\Administrateur\Application Data\Teleca
2006-11-28 23:17:44 ----DC---- C:\WINDOWS\system32\DRVSTORE
2006-11-28 23:17:24 ----D---- C:\Documents And Settings\All Users\Application Data\Sony Ericsson
2006-11-28 23:17:20 ----D---- C:\Program Files\Sony Ericsson
2006-11-28 23:17:20 ----D---- C:\Program Files\Fichiers communs\Teleca Shared
2006-11-28 23:17:20 ----D---- C:\Documents And Settings\All Users\Application Data\Teleca
2006-11-28 23:16:50 ----D---- C:\WINDOWS\Downloaded Installations
2006-11-24 23:33:05 ----D---- C:\Documents And Settings\Administrateur\Application Data\Help
2006-11-24 23:29:04 ----D---- C:\Documents And Settings\Administrateur\Application Data\Dev-Cpp
2006-11-24 23:27:55 ----A---- C:\WINDOWS\Direct Connect Setup Log.txt
2006-11-20 17:54:31 ----D---- C:\Documents And Settings\Administrateur\Application Data\Corel
2006-11-20 17:54:16 ----D---- C:\Documents And Settings\Administrateur\Application Data\Apple Computer
2006-11-19 23:47:06 ----D---- C:\Program Files\QuickTime
2006-11-19 23:46:57 ----D---- C:\Documents And Settings\All Users\Application Data\Apple Computer
2006-11-19 20:44:12 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2006-11-19 17:42:30 ----A---- C:\WINDOWS\ODBC.INI
2006-11-19 17:41:55 ----D---- C:\Program Files\Microsoft.NET
2006-11-19 17:41:10 ----D---- C:\Program Files\Fichiers communs\DESIGNER
2006-11-19 17:41:06 ----D---- C:\Program Files\Microsoft Works
2006-11-19 17:40:58 ----D---- C:\Program Files\Microsoft Visual Studio
2006-11-19 17:40:40 ----D---- C:\WINDOWS\SHELLNEW
2006-11-19 17:40:28 ----D---- C:\Program Files\Microsoft Office
2006-11-18 11:36:12 ----D---- C:\Documents And Settings\Administrateur\Application Data\Logitech
2006-11-18 11:35:36 ----A---- C:\WINDOWS\system32\KemXML.dll
2006-11-18 11:35:36 ----A---- C:\WINDOWS\system32\KemWnd.dll
2006-11-18 11:35:36 ----A---- C:\WINDOWS\system32\KemUtil.dll
2006-11-18 11:35:36 ----A---- C:\WINDOWS\system32\kemutb.dll
2006-11-18 11:35:30 ----A---- C:\WINDOWS\KHALMNPR.Exe
2006-11-18 11:35:29 ----D---- C:\Program Files\Logitech
2006-11-18 11:35:29 ----D---- C:\Program Files\Fichiers communs\Logitech
2006-11-16 22:19:47 ----D---- C:\Program Files\DivX
2006-11-16 22:19:27 ----D---- C:\Program Files\x264
2006-11-16 22:19:27 ----A---- C:\WINDOWS\system32\x264vfw.dll
2006-11-16 22:17:27 ----D---- C:\Program Files\Ripp-It Codec Pack
2006-11-13 22:40:31 ----D---- C:\Documents And Settings\Administrateur\Application Data\AdobeUM
2006-11-09 15:13:11 ----D---- C:\Documents And Settings\Administrateur\Application Data\Azureus
2006-11-09 15:12:06 ----D---- C:\Program Files\Java
2006-11-09 15:12:05 ----D---- C:\Program Files\Fichiers communs\Java
2006-11-09 14:49:43 ----D---- C:\Program Files\Azureus
2006-11-09 14:36:40 ----SHD---- C:\RECYCLER
2006-11-07 20:57:45 ----D---- C:\Program Files\Kustom Appz Software
2006-11-07 14:10:52 ----D---- C:\Documents And Settings\Administrateur\Application Data\Adobe
2006-11-06 20:55:18 ----D---- C:\Documents And Settings\Administrateur\Application Data\Macromedia
2006-11-06 20:04:04 ----A---- C:\WINDOWS\system32\SMMSCRPT.DLL
2006-11-06 20:04:04 ----A---- C:\WINDOWS\system32\RNAPH.DLL
2006-11-05 23:21:48 ----A---- C:\WINDOWS\NeroDigital.ini
2006-11-05 23:20:55 ----A---- C:\WINDOWS\BlendSettings.ini
2006-11-05 21:10:46 ----HD---- C:\Program Files\InstallShield Installation Information
2006-11-05 20:54:22 ----D---- C:\Program Files\Alcohol Soft
2006-11-05 20:50:40 ----D---- C:\Documents And Settings\Administrateur\Application Data\teamspeak2
2006-11-05 20:42:10 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2006-11-05 20:42:09 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2006-11-05 20:42:09 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2006-11-05 20:42:09 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2006-11-05 20:42:09 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2006-11-05 20:42:08 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2006-11-05 20:42:08 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2006-11-05 20:42:08 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2006-11-05 20:42:08 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2006-11-05 20:42:07 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2006-11-05 20:42:06 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2006-11-05 20:42:05 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2006-11-05 20:42:04 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2006-11-05 20:42:02 ----D---- C:\WINDOWS\system32\DirectX
2006-11-05 20:39:54 ----D---- C:\Program Files\Fichiers communs\Vbox
2006-11-05 20:38:33 ----D---- C:\Program Files\Fichiers communs\Adobe
2006-11-05 20:30:37 ----D---- C:\Program Files\America's Army Server Manager
2006-11-05 20:30:37 ----D---- C:\Program Files\America's Army
2006-11-05 20:24:10 ----D---- C:\Program Files\F-Secure
2006-11-05 20:23:44 ----A---- C:\WINDOWS\IsUn040c.exe
2006-11-05 20:23:40 ----D---- C:\TEMP
2006-11-05 20:19:26 ----D---- C:\Program Files\WinZip
2006-11-05 20:19:01 ----D---- C:\Program Files\WinRAR
2006-11-05 20:17:33 ----N---- C:\WINDOWS\system32\vxblock.dll
2006-11-05 20:17:33 ----N---- C:\WINDOWS\system32\pxwave.dll
2006-11-05 20:17:33 ----N---- C:\WINDOWS\system32\pxsfs.dll
2006-11-05 20:17:33 ----N---- C:\WINDOWS\system32\pxmas.dll
2006-11-05 20:17:33 ----N---- C:\WINDOWS\system32\pxinsi64.exe
2006-11-05 20:17:33 ----N---- C:\WINDOWS\system32\pxinsa64.exe
2006-11-05 20:17:33 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2006-11-05 20:17:33 ----N---- C:\WINDOWS\system32\pxdrv.dll
2006-11-05 20:17:33 ----N---- C:\WINDOWS\system32\pxcpya64.exe
2006-11-05 20:17:33 ----N---- C:\WINDOWS\system32\pxafs.dll
2006-11-05 20:17:33 ----N---- C:\WINDOWS\system32\px.dll
2006-11-05 20:17:30 ----D---- C:\Program Files\Winamp
2006-11-05 20:17:07 ----D---- C:\Program Files\MSN Messenger
2006-11-05 20:16:01 ----D---- C:\Documents And Settings\Administrateur\Application Data\Mozilla
2006-11-05 20:15:51 ----D---- C:\Program Files\Mozilla Firefox
2006-11-05 20:15:31 ----D---- C:\Program Files\Webteh
2006-11-05 20:11:11 ----N---- C:\WINDOWS\system32\TwnLib4.dll
2006-11-05 20:11:11 ----N---- C:\WINDOWS\system32\picn20.dll
2006-11-05 20:11:11 ----N---- C:\WINDOWS\system32\ImagXRA7.dll
2006-11-05 20:11:11 ----N---- C:\WINDOWS\system32\ImagXR7.dll
2006-11-05 20:11:11 ----N---- C:\WINDOWS\system32\ImagXpr7.dll
2006-11-05 20:11:11 ----N---- C:\WINDOWS\system32\ImagX7.dll
2006-11-05 20:11:11 ----D---- C:\Program Files\Fichiers communs\Ahead
2006-11-05 20:11:11 ----A---- C:\WINDOWS\system32\TwnLib20.dll
2006-11-05 20:11:11 ----A---- C:\WINDOWS\system32\NeroCheck.exe
2006-11-05 20:11:06 ----D---- C:\Logiciels
2006-11-05 20:07:50 ----A---- C:\WINDOWS\system32\h323log.txt
2006-11-05 20:06:44 ----A---- C:\WINDOWS\system32\hidserv.dll
2006-11-05 20:06:42 ----A---- C:\WINDOWS\system32\ksuser.dll
2006-11-05 20:05:42 ----A---- C:\WINDOWS\system32\usbui.dll
2006-11-05 20:04:26 ----A---- C:\WINDOWS\imsins.BAK
2006-11-05 20:04:24 ----SHD---- C:\WINDOWS\Installer
2006-11-05 20:04:24 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2006-11-05 20:04:23 ----RD---- C:\Program Files
2006-11-05 20:04:23 ----D---- C:\Program Files\Fichiers communs\ODBC
2006-11-05 20:04:23 ----D---- C:\Program Files\Fichiers communs
2006-11-05 20:04:23 ----A---- C:\WINDOWS\ODBCINST.INI
2006-11-05 20:04:16 ----A---- C:\WINDOWS\system32\irclass.dll
2006-11-05 20:04:16 ----A---- C:\WINDOWS\system32\dgsetup.dll
2006-11-05 20:04:16 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2006-11-05 20:04:15 ----A---- C:\WINDOWS\system32\spxcoins.dll
2006-11-05 20:04:15 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2006-11-05 20:04:13 ----A---- C:\WINDOWS\TASKMAN.EXE
2006-11-05 20:04:13 ----A---- C:\WINDOWS\system32\batt.dll
2006-11-05 20:04:12 ----A---- C:\WINDOWS\system32\storprop.dll
2006-11-05 20:04:12 ----A---- C:\WINDOWS\NOTEPAD.EXE
2006-11-05 20:04:04 ----ASH---- C:\Documents And Settings\All Users\Application Data\desktop.ini
2006-11-05 20:03:55 ----D---- C:\WINDOWS\system32\CatRoot2
2006-11-05 20:03:55 ----D---- C:\WINDOWS\system32\CatRoot
2006-11-05 20:03:49 ----SD---- C:\Documents And Settings\All Users\Application Data\Microsoft
2006-11-05 20:03:32 ----A---- C:\WINDOWS\setuplog.txt
2006-11-05 20:03:30 ----D---- C:\Documents And Settings
2006-11-05 20:03:29 ----SHD---- C:\System Volume Information
2006-11-05 20:02:34 ----RSH---- C:\boot.ini
2006-11-05 19:57:37 ----RSHDC---- C:\WINDOWS\system32\dllcache
2006-11-05 19:57:37 ----RSD---- C:\WINDOWS\Fonts
2006-11-05 19:57:37 ----RD---- C:\WINDOWS\Web
2006-11-05 19:57:37 ----D---- C:\WINDOWS\WinSxS
2006-11-05 19:57:37 ----D---- C:\WINDOWS\twain_32
2006-11-05 19:57:37 ----D---- C:\WINDOWS\system32\win