High-Tech Santé Médecine Droit-Finances

Auto-Entrepreneur

Comment faire ?

Rechercher : dans
Par :

Msn virus "mimichat" avec rapport rsit

Dernière réponse le 17 sep 2009 à 17:34:28 freddypark, le 21 jun 2009 à 13:27:42 
 Signaler ce message aux modérateurs

Bonjour,
depuis deux jours, mes contacts MSN recoivent des messages de ma part pour aller s'inscrire sur mimichat.
Aucune infection trouvé avec msnfix ou msncleaner, ni avec malwarebytes anti malware en mode sans echec

ci joint un rapport rsit

Logfile of random's system information tool 1.06 (written by random/random)
Run by PC de frédéric at 2009-06-21 13:11:50
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
System drive C: has 17 GB (17%) free of 100 GB
Total RAM: 2046 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:12:00, on 21/06/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\vVX3000.exe
C:\Program Files\Yahoo!\Common\YMailAdvisor.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\WindowsMobile\wmdSync.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\System32\spool\drivers\w32x86\3\E_FATICDE.EXE
C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
C:\Program Files\sTabLauncher\sTabLauncher.exe
C:\Program Files\Vente Flash\vente_flash.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Users\PC de frédéric\Desktop\catchme.exe
C:\Windows\system32\conime.exe
C:\Users\PC de frédéric\Desktop\BOB.exe
G:\Program Files\Trend Micro\HijackThis\PC de frédéric.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SHOUTcast Loader - {ccec60fc-2608-4e58-9659-3ffc159e8ea9} - C:\Program Files\SHOUTcast Radio Toolbar\shoutcasttb.dll
O2 - BHO: MSN Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: MSN Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: SHOUTcast Radio Toolbar - {0457331d-8ca6-4f97-9c26-6a9ef2b2dba8} - C:\Program Files\SHOUTcast Radio Toolbar\shoutcasttb.dll
O4 - HKLM\..\Run: [VX3000] C:\Windows\vVX3000.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [YMailAdvisor] "C:\Program Files\Yahoo!\Common\YMailAdvisor.exe"
O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - HKCU\..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [EPSON Stylus DX7400 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICDE.EXE /FU "C:\Users\PCDEFR~1\AppData\Local\Temp\E_S474C.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - Startup: Vente Flash.lnk = C:\Program Files\Vente Flash\vente_flash.exe
O4 - Global Startup: sTabLauncher.lnk = ?
O8 - Extra context menu item: &SHOUTcast Search - C:\ProgramData\SHOUTcast Radio Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Boîte de recherche - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Cartes correspondantes - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Générateur - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Boîte de recherche - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Générateur - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Remplir le formulaire - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Correcteur - {F7C8E5F6-B6D1-45db-8D91-2BCFA5DF11A9} - C:\Program Files\Druide\Antidote\Internet Explorer\7\Antidote K - IE 7.htm (HKCU)
O9 - Extra button: Dictionnaires - {F9B969E8-58D0-4dd9-AC8A-EE2336FF8F65} - C:\Program Files\Druide\Antidote\Internet Explorer\7\Antidote D - IE 7.htm (HKCU)
O9 - Extra button: Guides - {FA089E36-3F1B-4c51-9A1A-C4E7012483AF} - C:\Program Files\Druide\Antidote\Internet Explorer\7\Antidote G - IE 7.htm (HKCU)
O13 - Gopher Prefix:
O16 - DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} (Module de délivrance de certificat MINEFI) - https://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/VistaMSNPUpldfr-fr.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} (FTMediaPlayer Class) - http://webtv.guidetv.orange.fr/resources/OCS_8884.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: Avira Firewall (AntiVirFirewallService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe
O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate1c98b9d51cbd910) (gupdate1c98b9d51cbd910) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
O23 - Service: YouupServiceWinService - Unknown owner - C:\Users\PC de frédéric\AppData\Local\Temp\YouUpService\YouupService.exe
End of file - 11097 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachine.job
C:\Windows\tasks\User_Feed_Synchronization-{1E9B7CB7-F798-4027-8A08-BD355677E59D}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
&Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2009-03-14 908528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{724d43a9-0d85-11d4-9908-00400523e39a}]
C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2008-12-29 5804872]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ccec60fc-2608-4e58-9659-3ffc159e8ea9}]
SHOUTcast Loader - C:\Program Files\SHOUTcast Radio Toolbar\shoutcasttb.dll [2008-09-17 1275176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
MSN Toolbar Helper - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll [2009-03-13 82768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}]
SingleInstance Class - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll [2009-03-14 165616]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{724d43a0-0d85-11d4-9908-00400523e39a} - &RoboForm - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2008-12-29 5804872]
{1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - MSN Toolbar - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll [2009-03-13 82768]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2009-03-14 908528]
{0457331d-8ca6-4f97-9c26-6a9ef2b2dba8} - SHOUTcast Radio Toolbar - C:\Program Files\SHOUTcast Radio Toolbar\shoutcasttb.dll [2008-09-17 1275176]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"VX3000"=C:\Windows\vVX3000.exe [2008-08-04 721936]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-20 209153]
"YMailAdvisor"=C:\Program Files\Yahoo!\Common\YMailAdvisor.exe [2008-06-06 125208]
"YSearchProtection"=C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe [2009-02-03 111856]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888]
"LifeCam"=C:\Program Files\Microsoft LifeCam\LifeExp.exe [2008-08-04 160800]
"Windows Mobile-based device management"=C:\Windows\WindowsMobile\wmdSync.exe [2006-11-02 215552]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2009-02-06 3885408]
"Search Protection"=C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe [2009-02-03 111856]
"YSearchProtection"=C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe [2009-02-03 111856]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]
"EPSON Stylus DX7400 Series"=C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICDE.EXE [2007-04-12 182272]
"RoboForm"=C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2008-12-21 160592]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeBridge]
C:\Program Files\Adobe\Adobe Bridge CS4\Bridge.exe [2008-08-28 13145448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
C:\Program Files\Electronic Arts\EADM\Core.exe [2009-04-29 3338240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadwin PrintScreen]
C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe [2008-12-09 495616]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2009-06-05 292136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiweeHook]
C:\Program Files\Kiwee Toolbar\2.8.167\kwtbaim.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RayV]
C:\Program Files\RayV\RayV\RayV.exe [2009-03-10 2409768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Widget LOTO]
C:\Program Files\fdjeux\Widget LOTO\launcher.exe [2008-10-09 247352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
C:\Program Files\Winamp\winampa.exe [2009-04-10 37888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile-based device management]
C:\Windows\WindowsMobile\wmdSync.exe [2006-11-02 215552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\CCleaner.exe]
CCleaner.exe []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
sTabLauncher.lnk - C:\Windows\Installer\{BABDD54C-0CB2-4D25-82E7-BE1B8206BCE4}\_33067DCF71962AAE03BB4A.exe

C:\Users\PC de frédéric\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Vente Flash.lnk - C:\Program Files\Vente Flash\vente_flash.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{32e06609-4074-11de-b8b3-0018f3097dae}]
shell\AutoRun\command - L:\setup\rsrc\Autorun.exe
shell\dinstall\command - L:\Directx\dxsetup.exe


======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2009-06-20 23:54:25 ----D---- C:\MSNCleaner
2009-06-20 23:50:54 ----A---- C:\MSNCleaner.txt
2009-06-20 23:50:29 ----D---- C:\BackUpMSNCleaner
2009-06-16 14:18:58 ----D---- C:\Program Files\Vente Flash
2009-06-15 00:16:34 ----D---- C:\Users\PC de frédéric\AppData\Roaming\MagicBall4
2009-06-15 00:16:34 ----D---- C:\Users\PC de frédéric\AppData\Roaming\DreamDale
2009-06-15 00:16:01 ----D---- C:\ProgramData\AlawarWrapper
2009-06-15 00:14:56 ----D---- C:\Program Files\Alawar
2009-06-13 18:12:55 ----A---- C:\Windows\system32\VB6STKIT.DLL
2009-06-13 18:12:55 ----A---- C:\Windows\system32\MSCMCFR.DLL
2009-06-13 18:12:55 ----A---- C:\Windows\system32\inetfr.DLL
2009-06-13 18:12:55 ----A---- C:\Windows\system32\CMDLGFR.DLL
2009-06-11 15:20:10 ----D---- C:\Program Files\Activision
2009-06-11 10:00:45 ----D---- C:\Users\PC de frédéric\AppData\Roaming\YouUp
2009-06-11 10:00:06 ----D---- C:\Program Files\Ubisoft
2009-06-11 09:19:00 ----D---- C:\Windows\pss
2009-06-10 23:28:57 ----D---- C:\Users\PC de frédéric\AppData\Roaming\Media Player Classic
2009-06-10 10:56:51 ----D---- C:\Program Files\iPod
2009-06-10 10:56:50 ----D---- C:\Program Files\iTunes
2009-06-10 09:04:08 ----A---- C:\Windows\system32\localspl.dll
2009-06-10 09:04:06 ----A---- C:\Windows\system32\mshtml.dll
2009-06-10 09:04:06 ----A---- C:\Windows\system32\iertutil.dll
2009-06-10 09:04:06 ----A---- C:\Windows\system32\ieframe.dll
2009-06-10 09:04:05 ----A---- C:\Windows\system32\wininet.dll
2009-06-10 09:04:05 ----A---- C:\Windows\system32\urlmon.dll
2009-06-10 09:04:05 ----A---- C:\Windows\system32\jsproxy.dll
2009-06-10 09:04:05 ----A---- C:\Windows\system32\ieui.dll
2009-06-10 09:04:05 ----A---- C:\Windows\system32\iesetup.dll
2009-06-10 09:04:05 ----A---- C:\Windows\system32\iernonce.dll
2009-06-10 09:04:05 ----A---- C:\Windows\system32\iedkcs32.dll
2009-06-10 09:04:05 ----A---- C:\Windows\system32\ie4uinit.exe
2009-06-10 09:03:24 ----A---- C:\Windows\system32\rpcrt4.dll
2009-06-08 15:20:26 ----D---- C:\ProgramData\WindowsSearch
2009-06-08 15:16:51 ----SHD---- C:\$RECYCLE.BIN
2009-06-08 15:13:34 ----D---- C:\temp
2009-06-08 15:13:33 ----D---- C:\Windows\temp
2009-06-08 15:08:15 ----A---- C:\Windows\zip.exe
2009-06-08 15:08:15 ----A---- C:\Windows\SWXCACLS.exe
2009-06-08 15:08:15 ----A---- C:\Windows\SWSC.exe
2009-06-08 15:08:15 ----A---- C:\Windows\SWREG.exe
2009-06-08 15:08:15 ----A---- C:\Windows\sed.exe
2009-06-08 15:08:15 ----A---- C:\Windows\PEV.exe
2009-06-08 15:08:15 ----A---- C:\Windows\NIRCMD.exe
2009-06-08 15:08:15 ----A---- C:\Windows\grep.exe
2009-06-08 15:07:55 ----SD---- C:\renard
2009-06-08 15:07:55 ----D---- C:\Windows\ERDNT
2009-06-08 15:07:55 ----A---- C:\Windows\system32\CF16537.exe
2009-06-08 14:27:10 ----A---- C:\Windows\system32\swsc.exe
2009-06-08 14:27:08 ----D---- C:\Qoobox
2009-06-08 14:22:49 ----D---- C:\rsit
2009-06-08 13:56:17 ----D---- C:\Windows\BDOSCAN8
2009-06-08 13:26:02 ----A---- C:\fixnaviapres.txt
2009-06-08 11:43:37 ----A---- C:\Windows\ntbtlog.txt
2009-06-08 10:07:11 ----A---- C:\fixnavi.txt
2009-06-08 10:00:44 ----D---- C:\Program Files\navilog1
2009-06-06 19:06:58 ----D---- C:\Program Files\Gadwin Systems
2009-06-06 18:26:52 ----D---- C:\Windows\system32\eu-ES
2009-06-06 18:26:52 ----D---- C:\Windows\system32\ca-ES
2009-06-06 18:26:51 ----D---- C:\Windows\system32\vi-VN
2009-06-06 16:13:58 ----D---- C:\Windows\system32\EventProviders
2009-06-06 16:12:38 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2009-06-06 16:12:35 ----A---- C:\Windows\system32\SLsvc.exe
2009-06-06 16:12:35 ----A---- C:\Windows\system32\SLCExt.dll
2009-06-06 16:12:31 ----A---- C:\Windows\system32\FunctionDiscoveryFolder.dll
2009-06-06 16:12:31 ----A---- C:\Windows\system32\DevicePairingWizard.exe
2009-06-06 16:12:30 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2009-06-06 16:12:28 ----A---- C:\Windows\system32\mssrch.dll
2009-06-06 16:12:26 ----A---- C:\Windows\system32\tquery.dll
2009-06-06 16:12:25 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-06-06 16:12:25 ----A---- C:\Windows\system32\lsasrv.dll
2009-06-06 16:12:24 ----A---- C:\Windows\system32\scavenge.dll
2009-06-06 16:12:24 ----A---- C:\Windows\system32\RMActivate_isv.exe
2009-06-06 16:12:24 ----A---- C:\Windows\system32\RMActivate.exe
2009-06-06 16:12:23 ----A---- C:\Windows\system32\msi.dll
2009-06-06 16:12:22 ----A---- C:\Windows\system32\imapi2fs.dll
2009-06-06 16:12:21 ----A---- C:\Windows\system32\WscEapPr.dll
2009-06-06 16:12:21 ----A---- C:\Windows\system32\wcnwiz2.dll
2009-06-06 16:12:21 ----A---- C:\Windows\system32\sysmain.dll
2009-06-06 16:12:21 ----A---- C:\Windows\system32\secproc_isv.dll
2009-06-06 16:12:19 ----A---- C:\Windows\system32\icardagt.exe
2009-06-06 16:12:18 ----A---- C:\Windows\system32\mf.dll
2009-06-06 16:12:18 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2009-06-06 16:12:17 ----A---- C:\Windows\system32\EhStorShell.dll
2009-06-06 16:12:16 ----A---- C:\Windows\system32\spreview.exe
2009-06-06 16:12:16 ----A---- C:\Windows\system32\spinstall.exe
2009-06-06 16:12:16 ----A---- C:\Windows\system32\drmv2clt.dll
2009-06-06 16:12:15 ----A---- C:\Windows\system32\spwizui.dll
2009-06-06 16:12:15 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2009-06-06 16:12:13 ----A---- C:\Windows\system32\secproc.dll
2009-06-06 16:12:11 ----A---- C:\Windows\system32\shell32.dll
2009-06-06 16:12:10 ----A---- C:\Windows\system32\SearchIndexer.exe
2009-06-06 16:12:10 ----A---- C:\Windows\system32\p2psvc.dll
2009-06-06 16:12:09 ----A---- C:\Windows\system32\mssvp.dll
2009-06-06 16:12:09 ----A---- C:\Windows\system32\mscoree.dll
2009-06-06 16:12:08 ----A---- C:\Windows\system32\mssphtb.dll
2009-06-06 16:12:08 ----A---- C:\Windows\system32\mssph.dll
2009-06-06 16:12:08 ----A---- C:\Windows\system32\MSMPEG2VDEC.DLL
2009-06-06 16:12:08 ----A---- C:\Windows\system32\imapi2.dll
2009-06-06 16:12:06 ----A---- C:\Windows\system32\sdohlp.dll
2009-06-06 16:12:05 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-06-06 16:12:04 ----A---- C:\Windows\system32\esent.dll
2009-06-06 16:12:03 ----A---- C:\Windows\system32\IMJP10K.DLL
2009-06-06 16:12:02 ----A---- C:\Windows\system32\DevicePairing.dll
2009-06-06 16:12:00 ----A---- C:\Windows\system32\wevtsvc.dll
2009-06-06 16:12:00 ----A---- C:\Windows\system32\sperror.dll
2009-06-06 16:12:00 ----A---- C:\Windows\system32\SLC.dll
2009-06-06 16:12:00 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2009-06-06 16:12:00 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-06-06 16:12:00 ----A---- C:\Windows\system32\korwbrkr.dll
2009-06-06 16:12:00 ----A---- C:\Windows\system32\IasMigReader.exe
2009-06-06 16:11:59 ----A---- C:\Windows\system32\wmp.dll
2009-06-06 16:11:59 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2009-06-06 16:11:59 ----A---- C:\Windows\system32\msshsq.dll
2009-06-06 16:11:58 ----A---- C:\Windows\system32\WMVCORE.DLL
2009-06-06 16:11:58 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-06-06 16:11:58 ----A---- C:\Windows\system32\msjet40.dll
2009-06-06 16:11:58 ----A---- C:\Windows\system32\MPSSVC.dll
2009-06-06 16:11:57 ----A---- C:\Windows\system32\Query.dll
2009-06-06 16:11:57 ----A---- C:\Windows\system32\qmgr.dll
2009-06-06 16:11:57 ----A---- C:\Windows\system32\msxml6.dll
2009-06-06 16:11:56 ----A---- C:\Windows\system32\P2PGraph.dll
2009-06-06 16:11:56 ----A---- C:\Windows\system32\ole32.dll
2009-06-06 16:11:56 ----A---- C:\Windows\system32\ntdll.dll
2009-06-06 16:11:56 ----A---- C:\Windows\system32\msexch40.dll
2009-06-06 16:11:56 ----A---- C:\Windows\system32\diagperf.dll
2009-06-06 16:11:55 ----A---- C:\Windows\system32\winload.exe
2009-06-06 16:11:55 ----A---- C:\Windows\system32\uDWM.dll
2009-06-06 16:11:55 ----A---- C:\Windows\system32\srchadmin.dll
2009-06-06 16:11:55 ----A---- C:\Windows\system32\msxml3.dll
2009-06-06 16:11:55 ----A---- C:\Windows\system32\mmc.exe
2009-06-06 16:11:55 ----A---- C:\Windows\system32\mblctr.exe
2009-06-06 16:11:55 ----A---- C:\Windows\system32\EncDec.dll
2009-06-06 16:11:54 ----A---- C:\Windows\system32\riched20.dll
2009-06-06 16:11:54 ----A---- C:\Windows\system32\IasMigPlugin.dll
2009-06-06 16:11:54 ----A---- C:\Windows\system32\fdBth.dll
2009-06-06 16:11:54 ----A---- C:\Windows\system32\dfsr.exe
2009-06-06 16:11:53 ----A---- C:\Windows\system32\SearchFilterHost.exe
2009-06-06 16:11:53 ----A---- C:\Windows\system32\RacEngn.dll
2009-06-06 16:11:53 ----A---- C:\Windows\system32\kernel32.dll
2009-06-06 16:11:52 ----A---- C:\Windows\system32\spoolss.dll
2009-06-06 16:11:52 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2009-06-06 16:11:52 ----A---- C:\Windows\system32\schedsvc.dll
2009-06-06 16:11:52 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2009-06-06 16:11:52 ----A---- C:\Windows\system32\milcore.dll
2009-06-06 16:11:52 ----A---- C:\Windows\system32\EhStorAPI.dll
2009-06-06 16:11:52 ----A---- C:\Windows\system32\CertEnroll.dll
2009-06-06 16:11:51 ----A---- C:\Windows\system32\msvcp60.dll
2009-06-06 16:11:51 ----A---- C:\Windows\system32\msjtes40.dll
2009-06-06 16:11:51 ----A---- C:\Windows\system32\infocardapi.dll
2009-06-06 16:11:51 ----A---- C:\Windows\system32\gpedit.dll
2009-06-06 16:11:51 ----A---- C:\Windows\system32\AuxiliaryDisplayDriverLib.dll
2009-06-06 16:11:50 ----A---- C:\Windows\system32\WinSAT.exe
2009-06-06 16:11:50 ----A---- C:\Windows\system32\es.dll
2009-06-06 16:11:49 ----A---- C:\Windows\system32\PresentationSettings.exe
2009-06-06 16:11:49 ----A---- C:\Windows\system32\mstext40.dll
2009-06-06 16:11:49 ----A---- C:\Windows\system32\Magnify.exe
2009-06-06 16:11:49 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2009-06-06 16:11:49 ----A---- C:\Windows\system32\advapi32.dll
2009-06-06 16:11:48 ----A---- C:\Windows\system32\WMPhoto.dll
2009-06-06 16:11:48 ----A---- C:\Windows\system32\WebClnt.dll
2009-06-06 16:11:48 ----A---- C:\Windows\system32\msexcl40.dll
2009-06-06 16:11:47 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll
2009-06-06 16:11:47 ----A---- C:\Windows\system32\vssapi.dll
2009-06-06 16:11:47 ----A---- C:\Windows\system32\slwmi.dll
2009-06-06 16:11:47 ----A---- C:\Windows\system32\msxbde40.dll
2009-06-06 16:11:47 ----A---- C:\Windows\system32\comsvcs.dll
2009-06-06 16:11:46 ----A---- C:\Windows\system32\PresentationHost.exe
2009-06-06 16:11:46 ----A---- C:\Windows\system32\NetProjW.dll
2009-06-06 16:11:46 ----A---- C:\Windows\system32\mstscax.dll
2009-06-06 16:11:46 ----A---- C:\Windows\system32\msrepl40.dll
2009-06-06 16:11:46 ----A---- C:\Windows\system32\authui.dll
2009-06-06 16:11:45 ----A---- C:\Windows\system32\propsys.dll
2009-06-06 16:11:45 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-06-06 16:11:45 ----A---- C:\Windows\system32\newdev.dll
2009-06-06 16:11:45 ----A---- C:\Windows\system32\iasrecst.dll
2009-06-06 16:11:45 ----A---- C:\Windows\system32\gpsvc.dll
2009-06-06 16:11:45 ----A---- C:\Windows\system32\eudcedit.exe
2009-06-06 16:11:45 ----A---- C:\Windows\system32\crypt32.dll
2009-06-06 16:11:45 ----A---- C:\Windows\explorer.exe
2009-06-06 16:11:44 ----A---- C:\Windows\system32\setupapi.dll
2009-06-06 16:11:44 ----A---- C:\Windows\system32\rpcss.dll
2009-06-06 16:11:44 ----A---- C:\Windows\system32\mspbde40.dll
2009-06-06 16:11:44 ----A---- C:\Windows\system32\msltus40.dll
2009-06-06 16:11:44 ----A---- C:\Windows\system32\davclnt.dll
2009-06-06 16:11:44 ----A---- C:\Windows\system32\d3d9.dll
2009-06-06 16:11:43 ----A---- C:\Windows\system32\wevtapi.dll
2009-06-06 16:11:43 ----A---- C:\Windows\system32\shlwapi.dll
2009-06-06 16:11:43 ----A---- C:\Windows\system32\photowiz.dll
2009-06-06 16:11:43 ----A---- C:\Windows\system32\msrd3x40.dll
2009-06-06 16:11:43 ----A---- C:\Windows\system32\msdtctm.dll
2009-06-06 16:11:43 ----A---- C:\Windows\system32\mfc42.dll
2009-06-06 16:11:43 ----A---- C:\Windows\system32\EhStorPwdMgr.dll
2009-06-06 16:11:43 ----A---- C:\Windows\system32\EhStorAuthn.dll
2009-06-06 16:11:43 ----A---- C:\Windows\system32\browseui.dll
2009-06-06 16:11:42 ----A---- C:\Windows\system32\user32.dll
2009-06-06 16:11:42 ----A---- C:\Windows\system32\nlhtml.dll
2009-06-06 16:11:41 ----A---- C:\Windows\system32\samsrv.dll
2009-06-06 16:11:41 ----A---- C:\Windows\system32\quartz.dll
2009-06-06 16:11:41 ----A---- C:\Windows\system32\ci.dll
2009-06-06 16:11:40 ----A---- C:\Windows\system32\win32spl.dll
2009-06-06 16:11:40 ----A---- C:\Windows\system32\WcnNetsh.dll
2009-06-06 16:11:40 ----A---- C:\Windows\system32\SLCommDlg.dll
2009-06-06 16:11:40 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-06-06 16:11:40 ----A---- C:\Windows\system32\oleaut32.dll
2009-06-06 16:11:40 ----A---- C:\Windows\system32\kerberos.dll
2009-06-06 16:11:39 ----A---- C:\Windows\system32\netshell.dll
2009-06-06 16:11:39 ----A---- C:\Windows\system32\msv1_0.dll
2009-06-06 16:11:39 ----A---- C:\Windows\system32\IKEEXT.DLL
2009-06-06 16:11:39 ----A---- C:\Windows\system32\compcln.exe
2009-06-06 16:11:38 ----A---- C:\Windows\system32\winhttp.dll
2009-06-06 16:11:38 ----A---- C:\Windows\system32\mswstr10.dll
2009-06-06 16:11:38 ----A---- C:\Windows\system32\apds.dll
2009-06-06 16:11:37 ----A---- C:\Windows\system32\xmlfilter.dll
2009-06-06 16:11:37 ----A---- C:\Windows\system32\msctf.dll
2009-06-06 16:11:37 ----A---- C:\Windows\system32\emdmgmt.dll
2009-06-06 16:11:37 ----A---- C:\Windows\system32\audiosrv.dll
2009-06-06 16:11:36 ----A---- C:\Windows\system32\VSSVC.exe
2009-06-06 16:11:36 ----A---- C:\Windows\system32\QAGENTRT.DLL
2009-06-06 16:11:36 ----A---- C:\Windows\system32\msvcrt.dll
2009-06-06 16:11:36 ----A---- C:\Windows\system32\iphlpsvc.dll
2009-06-06 16:11:36 ----A---- C:\Windows\system32\gdi32.dll
2009-06-06 16:11:35 ----A---- C:\Windows\system32\sqlsrv32.dll
2009-06-06 16:11:35 ----A---- C:\Windows\system32\SLUI.exe
2009-06-06 16:11:35 ----A---- C:\Windows\system32\msrd2x40.dll
2009-06-06 16:11:35 ----A---- C:\Windows\system32\mfc42u.dll
2009-06-06 16:11:35 ----A---- C:\Windows\system32\eapphost.dll
2009-06-06 16:11:34 ----A---- C:\Windows\system32\winresume.exe
2009-06-06 16:11:34 ----A---- C:\Windows\system32\shdocvw.dll
2009-06-06 16:11:34 ----A---- C:\Windows\system32\propdefs.dll
2009-06-06 16:11:34 ----A---- C:\Windows\system32\odbc32.dll
2009-06-06 16:11:32 ----A---- C:\Windows\system32\WsmSvc.dll
2009-06-06 16:11:32 ----A---- C:\Windows\system32\wevtutil.exe
2009-06-06 16:11:32 ----A---- C:\Windows\system32\mssitlb.dll
2009-06-06 16:11:32 ----A---- C:\Windows\system32\dbgeng.dll
2009-06-06 16:11:31 ----A---- C:\Windows\system32\usp10.dll
2009-06-06 16:11:31 ----A---- C:\Windows\system32\swprv.dll
2009-06-06 16:11:31 ----A---- C:\Windows\system32\mmcndmgr.dll
2009-06-06 16:11:30 ----A---- C:\Windows\system32\vds.exe
2009-06-06 16:11:30 ----A---- C:\Windows\system32\netlogon.dll
2009-06-06 16:11:30 ----A---- C:\Windows\system32\msctfp.dll
2009-06-06 16:11:30 ----A---- C:\Windows\system32\fdBthProxy.dll
2009-06-06 16:11:30 ----A---- C:\Windows\system32\drvinst.exe
2009-06-06 16:11:30 ----A---- C:\Windows\system32\devmgr.dll
2009-06-06 16:11:29 ----A---- C:\Windows\system32\schannel.dll
2009-06-06 16:11:29 ----A---- C:\Windows\system32\msscb.dll
2009-06-06 16:11:29 ----A---- C:\Windows\system32\evr.dll
2009-06-06 16:11:29 ----A---- C:\Windows\system32\DevicePairingProxy.dll
2009-06-06 16:11:29 ----A---- C:\Windows\system32\BFE.DLL
2009-06-06 16:11:29 ----A---- C:\Windows\system32\adsldpc.dll
2009-06-06 16:11:28 ----A---- C:\Windows\system32\WSDApi.dll
2009-06-06 16:11:28 ----A---- C:\Windows\system32\WMVSDECD.DLL
2009-06-06 16:11:28 ----A---- C:\Windows\system32\Wldap32.dll
2009-06-06 16:11:28 ----A---- C:\Windows\system32\WindowsCodecs.dll
2009-06-06 16:11:28 ----A---- C:\Windows\system32\wcnwiz.dll
2009-06-06 16:11:28 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2009-06-06 16:11:27 ----A---- C:\Windows\system32\wercon.exe
2009-06-06 16:11:27 ----A---- C:\Windows\system32\services.exe
2009-06-06 16:11:27 ----A---- C:\Windows\system32\comdlg32.dll
2009-06-06 16:11:27 ----A---- C:\Windows\system32\adtschema.dll
2009-06-06 16:11:26 ----A---- C:\Windows\system32\wcncsvc.dll
2009-06-06 16:11:26 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2009-06-06 16:11:26 ----A---- C:\Windows\system32\msjter40.dll
2009-06-06 16:11:26 ----A---- C:\Windows\system32\msdtcprx.dll
2009-06-06 16:11:26 ----A---- C:\Windows\system32\msdrm.dll
2009-06-06 16:11:26 ----A---- C:\Windows\system32\mimefilt.dll
2009-06-06 16:11:26 ----A---- C:\Windows\system32\ipsmsnap.dll
2009-06-06 16:11:26 ----A---- C:\Windows\system32\certcli.dll
2009-06-06 16:11:25 ----A---- C:\Windows\system32\WMNetMgr.dll
2009-06-06 16:11:25 ----A---- C:\Windows\system32\umpnpmgr.dll
2009-06-06 16:11:25 ----A---- C:\Windows\system32\taskeng.exe
2009-06-06 16:11:25 ----A---- C:\Windows\system32\rtffilt.dll
2009-06-06 16:11:25 ----A---- C:\Windows\system32\reg.exe
2009-06-06 16:11:25 ----A---- C:\Windows\system32\mswdat10.dll
2009-06-06 16:11:25 ----A---- C:\Windows\system32\dnsapi.dll
2009-06-06 16:11:25 ----A---- C:\Windows\system32\certutil.exe
2009-06-06 16:11:24 ----A---- C:\Windows\system32\w32time.dll
2009-06-06 16:11:24 ----A---- C:\Windows\system32\IPSECSVC.DLL
2009-06-06 16:11:24 ----A---- C:\Windows\system32\bcrypt.dll
2009-06-06 16:11:23 ----A---- C:\Windows\system32\rsaenh.dll
2009-06-06 16:11:23 ----A---- C:\Windows\system32\msshooks.dll
2009-06-06 16:11:23 ----A---- C:\Windows\system32\msscntrs.dll
2009-06-06 16:11:23 ----A---- C:\Windows\system32\msihnd.dll
2009-06-06 16:11:23 ----A---- C:\Windows\system32\MMDevAPI.dll
2009-06-06 16:11:23 ----A---- C:\Windows\system32\bthserv.dll
2009-06-06 16:11:22 ----A---- C:\Windows\system32\TsWpfWrp.exe
2009-06-06 16:11:22 ----A---- C:\Windows\system32\netapi32.dll
2009-06-06 16:11:22 ----A---- C:\Windows\system32\msstrc.dll
2009-06-06 16:11:22 ----A---- C:\Windows\system32\inetpp.dll
2009-06-06 16:11:22 ----A---- C:\Windows\system32\inetcomm.dll
2009-06-06 16:11:22 ----A---- C:\Windows\system32\dfshim.dll
2009-06-06 16:11:21 ----A---- C:\Windows\system32\wmicmiplugin.dll
2009-06-06 16:11:21 ----A---- C:\Windows\system32\termsrv.dll
2009-06-06 16:11:21 ----A---- C:\Windows\system32\profsvc.dll
2009-06-06 16:11:21 ----A---- C:\Windows\system32\mtxclu.dll
2009-06-06 16:11:21 ----A---- C:\Windows\system32\mscories.dll
2009-06-06 16:11:21 ----A---- C:\Windows\system32\hidserv.dll
2009-06-06 16:11:21 ----A---- C:\Windows\system32\fundisc.dll
2009-06-06 16:11:21 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2009-06-06 16:11:21 ----A---- C:\Windows\system32\cryptsvc.dll
2009-06-06 16:11:19 ----A---- C:\Windows\system32\imapi.dll
2009-06-06 16:11:19 ----A---- C:\Windows\system32\gameux.dll
2009-06-06 16:11:18 ----A---- C:\Windows\system32\wdc.dll
2009-06-06 16:11:18 ----A---- C:\Windows\system32\shsvcs.dll
2009-06-06 16:11:18 ----A---- C:\Windows\system32\rasmans.dll
2009-06-06 16:11:18 ----A---- C:\Windows\system32\msiexec.exe
2009-06-06 16:11:18 ----A---- C:\Windows\system32\iassdo.dll
2009-06-06 16:11:18 ----A---- C:\Windows\system32\chsbrkr.dll
2009-06-06 16:11:17 ----A---- C:\Windows\system32\wersvc.dll
2009-06-06 16:11:17 ----A---- C:\Windows\system32\spoolsv.exe
2009-06-06 16:11:17 ----A---- C:\Windows\system32\slmgr.vbs
2009-06-06 16:11:17 ----A---- C:\Windows\system32\scrrun.dll
2009-06-06 16:11:17 ----A---- C:\Windows\system32\PSHED.DLL
2009-06-06 16:11:17 ----A---- C:\Windows\system32\pnidui.dll
2009-06-06 16:11:17 ----A---- C:\Windows\system32\icardres.dll
2009-06-06 16:11:17 ----A---- C:\Windows\system32\autofmt.exe
2009-06-06 16:11:16 ----A---- C:\Windows\system32\pidgenx.dll
2009-06-06 16:11:16 ----A---- C:\Windows\system32\pdh.dll
2009-06-06 16:11:16 ----A---- C:\Windows\system32\dhcpcsvc.dll
2009-06-06 16:11:16 ----A---- C:\Windows\system32\CertEnrollUI.dll
2009-06-06 16:11:16 ----A---- C:\Windows\system32\azroles.dll
2009-06-06 16:11:15 ----A---- C:\Windows\system32\wmpmde.dll
2009-06-06 16:11:15 ----A---- C:\Windows\system32\winlogon.exe
2009-06-06 16:11:15 ----A---- C:\Windows\system32\SyncCenter.dll
2009-06-06 16:11:13 ----A---- C:\Windows\system32\SLUINotify.dll
2009-06-06 16:11:13 ----A---- C:\Windows\system32\msjetoledb40.dll
2009-06-06 16:11:13 ----A---- C:\Windows\system32\comuid.dll
2009-06-06 16:11:13 ----A---- C:\Windows\system32\certmgr.dll
2009-06-06 16:11:12 ----A---- C:\Windows\system32\wisptis.exe
2009-06-06 16:11:12 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2009-06-06 16:11:12 ----A---- C:\Windows\system32\untfs.dll
2009-06-06 16:11:12 ----A---- C:\Windows\system32\spp.dll
2009-06-06 16:11:12 ----A---- C:\Windows\system32\sethc.exe
2009-06-06 16:11:12 ----A---- C:\Windows\system32\scrobj.dll
2009-06-06 16:11:12 ----A---- C:\Windows\system32\rtutils.dll
2009-06-06 16:11:12 ----A---- C:\Windows\system32\ncrypt.dll
2009-06-06 16:11:12 ----A---- C:\Windows\system32\kd1394.dll
2009-06-06 16:11:12 ----A---- C:\Windows\system32\iassam.dll
2009-06-06 16:11:11 ----A---- C:\Windows\system32\taskcomp.dll
2009-06-06 16:11:11 ----A---- C:\Windows\system32\dwm.exe
2009-06-06 16:11:11 ----A---- C:\Windows\system32\autochk.exe
2009-06-06 16:11:10 ----A---- C:\Windows\system32\winsrv.dll
2009-06-06 16:11:10 ----A---- C:\Windows\system32\printui.dll
2009-06-06 16:11:10 ----A---- C:\Windows\system32\iasnap.dll
2009-06-06 16:11:10 ----A---- C:\Windows\system32\autoconv.exe
2009-06-06 16:11:09 ----A---- C:\Windows\system32\wow32.dll
2009-06-06 16:11:09 ----A---- C:\Windows\system32\userenv.dll
2009-06-06 16:11:09 ----A---- C:\Windows\system32\osk.exe
2009-06-06 16:11:09 ----A---- C:\Windows\system32\onex.dll
2009-06-06 16:11:09 ----A---- C:\Windows\system32\mswsock.dll
2009-06-06 16:11:09 ----A---- C:\Windows\system32\kdcom.dll
2009-06-06 16:11:09 ----A---- C:\Windows\system32\cscript.exe
2009-06-06 16:11:09 ----A---- C:\Windows\system32\basecsp.dll
2009-06-06 16:11:09 ----A---- C:\Windows\system32\audiodg.exe
2009-06-06 16:11:08 ----A---- C:\Windows\system32\WinSCard.dll
2009-06-06 16:11:08 ----A---- C:\Windows\system32\winmm.dll
2009-06-06 16:11:08 ----A---- C:\Windows\system32\WerFaultSecure.exe
2009-06-06 16:11:08 ----A---- C:\Windows\system32\spcmsg.dll
2009-06-06 16:11:08 ----A---- C:\Windows\system32\RelMon.dll
2009-06-06 16:11:08 ----A---- C:\Windows\system32\rdpencom.dll
2009-06-06 16:11:08 ----A---- C:\Windows\system32\msftedit.dll
2009-06-06 16:11:08 ----A---- C:\Windows\system32\kdusb.dll
2009-06-06 16:11:07 ----A---- C:\Windows\system32\WerFault.exe
2009-06-06 16:11:07 ----A---- C:\Windows\system32\Utilman.exe
2009-06-06 16:11:07 ----A---- C:\Windows\system32\offfilt.dll
2009-06-06 16:11:07 ----A---- C:\Windows\system32\dnsrslvr.dll
2009-06-06 16:11:06 ----A---- C:\Windows\system32\wsepno.dll
2009-06-06 16:11:06 ----A---- C:\Windows\system32\stobject.dll
2009-06-06 16:11:06 ----A---- C:\Windows\system32\SndVol.exe
2009-06-06 16:11:06 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2009-06-06 16:11:06 ----A---- C:\Windows\system32\secproc_ssp.dll
2009-06-06 16:11:06 ----A---- C:\Windows\system32\msnetobj.dll
2009-06-06 16:11:06 ----A---- C:\Windows\system32\mscms.dll
2009-06-06 16:11:06 ----A---- C:\Windows\system32\mfplat.dll
2009-06-06 16:11:06 ----A---- C:\Windows\system32\mcmde.dll
2009-06-06 16:11:06 ----A---- C:\Windows\system32\diskraid.exe
2009-06-06 16:11:06 ----A---- C:\Windows\system32\apphelp.dll
2009-06-06 16:11:05 ----A---- C:\Windows\system32\wscript.exe
2009-06-06 16:11:05 ----A---- C:\Windows\system32\wiaservc.dll
2009-06-06 16:11:05 ----A---- C:\Windows\system32\ulib.dll
2009-06-06 16:11:05 ----A---- C:\Windows\system32\sysclass.dll
2009-06-06 16:11:05 ----A---- C:\Windows\system32\secur32.dll
2009-06-06 16:11:05 ----A---- C:\Windows\system32\prnntfy.dll
2009-06-06 16:11:05 ----A---- C:\Windows\system32\odbccp32.dll
2009-06-06 16:11:05 ----A---- C:\Windows\system32\iasdatastore.dll
2009-06-06 16:11:05 ----A---- C:\Windows\system32\dsound.dll
2009-06-06 16:11:05 ----A---- C:\Windows\system32\cryptui.dll
2009-06-06 16:11:05 ----A---- C:\Windows\system32\adsmsext.dll
2009-06-06 16:11:04 ----A---- C:\Windows\system32\wscntfy.dll
2009-06-06 16:11:04 ----A---- C:\Windows\system32\wlansvc.dll
2009-06-06 16:11:04 ----A---- C:\Windows\system32\wlangpui.dll
2009-06-06 16:11:04 ----A---- C:\Windows\system32\rastapi.dll
2009-06-06 16:11:04 ----A---- C:\Windows\system32\pnpsetup.dll
2009-06-06 16:11:04 ----A---- C:\Windows\system32\ipsecsnp.dll
2009-06-06 16:11:04 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2009-06-06 16:11:04 ----A---- C:\Windows\system32\gpapi.dll
2009-06-06 16:11:04 ----A---- C:\Windows\system32\fdProxy.dll
2009-06-06 16:11:04 ----A---- C:\Windows\system32\diskpart.exe
2009-06-06 16:11:04 ----A---- C:\Windows\system32\brcpl.dll
2009-06-06 16:11:03 ----A---- C:\Windows\system32\wusa.exe
2009-06-06 16:11:03 ----A---- C:\Windows\system32\wscsvc.dll
2009-06-06 16:11:03 ----A---- C:\Windows\system32\WMVENCOD.DLL
2009-06-06 16:11:03 ----A---- C:\Windows\system32\vdsdyn.dll
2009-06-06 16:11:03 ----A---- C:\Windows\system32\regsvc.dll
2009-06-06 16:11:03 ----A---- C:\Windows\system32\rastls.dll
2009-06-06 16:11:03 ----A---- C:\Windows\system32\rasapi32.dll
2009-06-06 16:11:03 ----A---- C:\Windows\system32\ntprint.dll
2009-06-06 16:11:03 ----A---- C:\Windows\system32\netiohlp.dll
2009-06-06 16:11:03 ----A---- C:\Windows\system32\mscorier.dll
2009-06-06 16:11:03 ----A---- C:\Windows\system32\logman.exe
2009-06-06 16:11:03 ----A---- C:\Windows\system32\iashlpr.dll
2009-06-06 16:11:02 ----A---- C:\Windows\system32\zipfldr.dll
2009-06-06 16:11:02 ----A---- C:\Windows\system32\wshext.dll
2009-06-06 16:11:02 ----A---- C:\Windows\system32\wpccpl.dll
2009-06-06 16:11:02 ----A---- C:\Windows\system32\netcenter.dll
2009-06-06 16:11:02 ----A---- C:\Windows\system32\iasrad.dll
2009-06-06 16:11:02 ----A---- C:\Windows\system32\findstr.exe
2009-06-06 16:11:01 ----A---- C:\Windows\system32\wsnmp32.dll
2009-06-06 16:11:01 ----A---- C:\Windows\system32\wer.dll
2009-06-06 16:11:01 ----A---- C:\Windows\system32\themecpl.dll
2009-06-06 16:11:01 ----A---- C:\Windows\system32\rasdlg.dll
2009-06-06 16:11:01 ----A---- C:\Windows\system32\iassvcs.dll
2009-06-06 16:11:00 ----A---- C:\Windows\system32\uxsms.dll
2009-06-06 16:11:00 ----A---- C:\Windows\system32\tsbyuv.dll
2009-06-06 16:11:00 ----A---- C:\Windows\system32\srvsvc.dll
2009-06-06 16:11:00 ----A---- C:\Windows\system32\mssprxy.dll
2009-06-06 16:10:59 ----A---- C:\Windows\system32\slcc.dll
2009-06-06 16:10:59 ----A---- C:\Windows\system32\scansetting.dll
2009-06-06 16:10:59 ----A---- C:\Windows\system32\powrprof.dll
2009-06-06 16:10:59 ----A---- C:\Windows\system32\ntmarta.dll
2009-06-06 16:10:59 ----A---- C:\Windows\system32\msutb.dll
2009-06-06 16:10:59 ----A---- C:\Windows\system32\mstsc.exe
2009-06-06 16:10:59 ----A---- C:\Windows\system32\mstlsapi.dll
2009-06-06 16:10:59 ----A---- C:\Windows\system32\iasads.dll
2009-06-06 16:10:58 ----A---- C:\Windows\system32\powercpl.dll
2009-06-06 16:10:58 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2009-06-06 16:10:58 ----A---- C:\Windows\system32\networkmap.dll
2009-06-06 16:10:58 ----A---- C:\Windows\system32\iasacct.dll
2009-06-06 16:10:58 ----A---- C:\Windows\system32\authz.dll
2009-06-06 16:10:57 ----A---- C:\Windows\system32\wlanhlp.dll
2009-06-06 16:10:57 ----A---- C:\Windows\system32\systemcpl.dll
2009-06-06 16:10:57 ----A---- C:\Windows\system32\sud.dll
2009-06-06 16:10:57 ----A---- C:\Windows\system32\pcaui.dll
2009-06-06 16:10:57 ----A---- C:\Windows\system32\newdev.exe
2009-06-06 16:10:57 ----A---- C:\Windows\system32\dot3svc.dll
2009-06-06 16:10:57 ----A---- C:\Windows\system32\connect.dll
2009-06-06 16:10:56 ----A---- C:\Windows\system32\usercpl.dll
2009-06-06 16:10:56 ----A---- C:\Windows\system32\themeui.dll
2009-06-06 16:10:56 ----A---- C:\Windows\system32\samlib.dll
2009-06-06 16:10:56 ----A---- C:\Windows\system32\qdvd.dll
2009-06-06 16:10:56 ----A---- C:\Windows\system32\mmci.dll
2009-06-06 16:10:56 ----A---- C:\Windows\system32\autoplay.dll
2009-06-06 16:10:56 ----A---- C:\Windows\system32\accessibilitycpl.dll
2009-06-06 16:10:55 ----A---- C:\Windows\system32\wpcao.dll
2009-06-06 16:10:55 ----A---- C:\Windows\system32\wlanpref.dll
2009-06-06 16:10:55 ----A---- C:\Windows\system32\vdsutil.dll
2009-06-06 16:10:55 ----A---- C:\Windows\system32\rpchttp.dll
2009-06-06 16:10:55 ----A---- C:\Windows\system32\regapi.dll
2009-06-06 16:10:55 ----A---- C:\Windows\system32\msinfo32.exe
2009-06-06 16:10:54 ----A---- C:\Windows\system32\tapisrv.dll
2009-06-06 16:10:54 ----A---- C:\Windows\system32\scksp.dll
2009-06-06 16:10:54 ----A---- C:\Windows\system32\scesrv.dll
2009-06-06 16:10:54 ----A---- C:\Windows\system32\rekeywiz.exe
2009-06-06 16:10:54 ----A---- C:\Windows\system32\psisdecd.dll
2009-06-06 16:10:54 ----A---- C:\Windows\system32\oleprn.dll
2009-06-06 16:10:54 ----A---- C:\Windows\system32\mpr.dll
2009-06-06 16:10:54 ----A---- C:\Windows\system32\imm32.dll
2009-06-06 16:10:54 ----A---- C:\Windows\system32\feclient.dll
2009-06-06 16:10:54 ----A---- C:\Windows\system32\dot3msm.dll
2009-06-06 16:10:54 ----A---- C:\Windows\system32\AudioSes.dll
2009-06-06 16:10:53 ----A---- C:\Windows\system32\wscisvif.dll
2009-06-06 16:10:53 ----A---- C:\Windows\system32\sdclt.exe
2009-06-06 16:10:53 ----A---- C:\Windows\system32\rasgcw.dll
2009-06-06 16:10:53 ----A---- C:\Windows\system32\qedit.dll
2009-06-06 16:10:53 ----A---- C:\Windows\system32\pnpui.dll
2009-06-06 16:10:53 ----A---- C:\Windows\system32\perfdisk.dll
2009-06-06 16:10:53 ----A---- C:\Windows\system32\ncryptui.dll
2009-06-06 16:10:53 ----A---- C:\Windows\system32\iaspolcy.dll
2009-06-06 16:10:53 ----A---- C:\Windows\system32\hdwwiz.exe
2009-06-06 16:10:53 ----A---- C:\Windows\system32\Faultrep.dll
2009-06-06 16:10:53 ----A---- C:\Windows\system32\dpapimig.exe
2009-06-06 16:10:53 ----A---- C:\Windows\system32\DeviceEject.exe
2009-06-06 16:10:53 ----A---- C:\Windows\system32\certreq.exe
2009-06-06 16:10:52 ----A---- C:\Windows\system32\TSTheme.exe
2009-06-06 16:10:52 ----A---- C:\Windows\system32\tcpipcfg.dll
2009-06-06 16:10:52 ----A---- C:\Windows\system32\spwinsat.dll
2009-06-06 16:10:52 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2009-06-06 16:10:52 ----A---- C:\Windows\system32\scecli.dll
2009-06-06 16:10:52 ----A---- C:\Windows\system32\rasplap.dll
2009-06-06 16:10:52 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2009-06-06 16:10:52 ----A---- C:\Windows\system32\cmmon32.exe
2009-06-06 16:10:50 ----A---- C:\Windows\system32\whealogr.dll
2009-06-06 16:10:50 ----A---- C:\Windows\system32\tcpmon.dll
2009-06-06 16:10:50 ----A---- C:\Windows\system32\srcore.dll
2009-06-06 16:10:50 ----A---- C:\Windows\system32\PnPUnattend.exe
2009-06-06 16:10:50 ----A---- C:\Windows\system32\fdWSD.dll
2009-06-06 16:10:50 ----A---- C:\Windows\system32\cmdial32.dll
2009-06-06 16:10:49 ----A---- C:\Windows\system32\wiaaut.dll
2009-06-06 16:10:49 ----A---- C:\Windows\system32\SnippingTool.exe
2009-06-06 16:10:49 ----A---- C:\Windows\system32\SCardSvr.dll
2009-06-06 16:10:49 ----A---- C:\Windows\system32\raschap.dll
2009-06-06 16:10:49 ----A---- C:\Windows\system32\MSVidCtl.dll
2009-06-06 16:10:49 ----A---- C:\Windows\system32\fontext.dll
2009-06-06 16:10:49 ----A---- C:\Windows\system32\conime.exe
2009-06-06 16:10:48 ----A---- C:\Windows\system32\WMVXENCD.DLL
2009-06-06 16:10:48 ----A---- C:\Windows\system32\wlanui.dll
2009-06-06 16:10:48 ----A---- C:\Windows\system32\wlanmsm.dll
2009-06-06 16:10:48 ----A---- C:\Windows\system32\shwebsvc.dll
2009-06-06 16:10:48 ----A---- C:\Windows\system32\shsetup.dll
2009-06-06 16:10:48 ----A---- C:\Windows\system32\rasppp.dll
2009-06-06 16:10:48 ----A---- C:\Windows\system32\PnPutil.exe
2009-06-06 16:10:48 ----A---- C:\Windows\system32\oobefldr.dll
2009-06-06 16:10:48 ----A---- C:\Windows\system32\dsprop.dll
2009-06-06 16:10:48 ----A---- C:\Windows\system32\dimsroam.dll
2009-06-06 16:10:47 ----A---- C:\Windows\system32\wmdrmsdk.dll
2009-06-06 16:10:47 ----A---- C:\Windows\system32\rasmontr.dll
2009-06-06 16:10:47 ----A---- C:\Windows\system32\mscandui.dll
2009-06-06 16:10:47 ----A---- C:\Windows\system32\modemui.dll
2009-06-06 16:10:47 ----A---- C:\Windows\system32\dataclen.dll
2009-06-06 16:10:47 ----A---- C:\Windows\system32\chtbrkr.dll
2009-06-06 16:10:46 ----A---- C:\Windows\system32\WSDMon.dll
2009-06-06 16:10:46 ----A---- C:\Windows\system32\wmpeffects.dll
2009-06-06 16:10:46 ----A---- C:\Windows\system32\wlgpclnt.dll
2009-06-06 16:10:46 ----A---- C:\Windows\system32\smss.exe
2009-06-06 16:10:46 ----A---- C:\Windows\system32\rdpwsx.dll
2009-06-06 16:10:46 ----A---- C:\Windows\system32\netplwiz.dll
2009-06-06 16:10:46 ----A---- C:\Windows\system32\credui.dll
2009-06-06 16:10:46 ----A---- C:\Windows\system32\certprop.dll
2009-06-06 16:10:46 ----A---- C:\Windows\system32\blackbox.dll
2009-06-06 16:10:45 ----A---- C:\Windows\system32\wscapi.dll
2009-06-06 16:10:45 ----A---- C:\Windows\system32\wpcsvc.dll
2009-06-06 16:10:45 ----A---- C:\Windows\system32\networkexplorer.dll
2009-06-06 16:10:45 ----A---- C:\Windows\system32\msscp.dll
2009-06-06 16:10:45 ----A---- C:\Windows\system32\msimtf.dll
2009-06-06 16:10:45 ----A---- C:\Windows\system32\logagent.exe
2009-06-06 16:10:45 ----A---- C:\Windows\system32\InkEd.dll
2009-06-06 16:10:45 ----A---- C:\Windows\system32\ifmon.dll
2009-06-06 16:10:45 ----A---- C:\Windows\system32\gpresult.exe
2009-06-06 16:10:45 ----A---- C:\Windows\system32\cipher.exe
2009-06-06 16:10:44 ----A---- C:\Windows\system32\thawbrkr.dll
2009-06-06 16:10:44 ----A---- C:\Windows\system32\softkbd.dll
2009-06-06 16:10:44 ----A---- C:\Windows\system32\sendmail.dll
2009-06-06 16:10:44 ----A---- C:\Windows\system32\olepro32.dll
2009-06-06 16:10:44 ----A---- C:\Windows\system32\msctfui.dll
2009-06-06 16:10:44 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2009-06-06 16:10:44 ----A---- C:\Windows\system32\dmsynth.dll
2009-06-06 16:10:44 ----A---- C:\Windows\system32\Apphlpdm.dll
2009-06-06 16:10:43 ----A---- C:\Windows\system32\wshbth.dll
2009-06-06 16:10:43 ----A---- C:\Windows\system32\version.dll
2009-06-06 16:10:43 ----A---- C:\Windows\system32\SLLUA.exe
2009-06-06 16:10:43 ----A---- C:\Windows\system32\puiapi.dll
2009-06-06 16:10:43 ----A---- C:\Windows\system32\msisip.dll
2009-06-06 16:10:43 ----A---- C:\Windows\system32\mprapi.dll
2009-06-06 16:10:43 ----A---- C:\Windows\system32\input.dll
2009-06-06 16:10:43 ----A---- C:\Windows\system32\ExplorerFrame.dll
2009-06-06 16:10:43 ----A---- C:\Windows\system32\drmmgrtn.dll
2009-06-06 16:10:43 ----A---- C:\Windows\system32\cdd.dll
2009-06-06 16:10:42 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-06-06 16:10:42 ----A---- C:\Windows\system32\msjint40.dll
2009-06-06 16:10:42 ----A---- C:\Windows\system32\MsCtfMonitor.dll
2009-06-06 16:10:42 ----A---- C:\Windows\system32\fdSSDP.dll
2009-06-06 16:10:42 ----A---- C:\Windows\system32\fc.exe
2009-06-06 16:10:42 ----A---- C:\Windows\system32\dmusic.dll
2009-06-06 16:10:42 ----A---- C:\Windows\system32\cscapi.dll
2009-06-06 16:10:41 ----A---- C:\Windows\system32\wsdchngr.dll
2009-06-06 16:10:41 ----A---- C:\Windows\system32\Storprop.dll
2009-06-06 16:10:41 ----A---- C:\Windows\system32\SMBHelperClass.dll
2009-06-06 16:10:41 ----A---- C:\Windows\system32\rrinstaller.exe
2009-06-06 16:10:41 ----A---- C:\Windows\system32\rasdial.exe
2009-06-06 16:10:41 ----A---- C:\Windows\system32\rasdiag.dll
2009-06-06 16:10:41 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2009-06-06 16:10:41 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2009-06-06 16:10:41 ----A---- C:\Windows\system32\l2nacp.dll
2009-06-06 16:10:41 ----A---- C:\Windows\system32\ftp.exe
2009-06-06 16:10:41 ----A---- C:\Windows\system32\fdWCN.dll
2009-06-06 16:10:41 ----A---- C:\Windows\system32\eapp3hst.dll
2009-06-06 16:10:41 ----A---- C:\Windows\system32\dot3cfg.dll
2009-06-06 16:10:41 ----A---- C:\Windows\system32\cscdll.dll
2009-06-06 16:10:41 ----A---- C:\Windows\system32\bthudtask.exe
2009-06-06 16:10:41 ----A---- C:\Windows\system32\bthci.dll
2009-06-06 16:10:40 ----A---- C:\Windows\system32\tscupgrd.exe
2009-06-06 16:10:40 ----A---- C:\Windows\system32\slcinst.dll
2009-06-06 16:10:40 ----A---- C:\Windows\system32\ocsetup.exe
2009-06-06 16:10:40 ----A---- C:\Windows\system32\nslookup.exe
2009-06-06 16:10:40 ----A---- C:\Windows\system32\networkitemfactory.dll
2009-06-06 16:10:40 ----A---- C:\Windows\system32\mfps.dll
2009-06-06 16:10:40 ----A---- C:\Windows\system32\ipconfig.exe
2009-06-06 16:10:40 ----A---- C:\Windows\system32\hbaapi.dll
2009-06-06 16:10:40 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2009-06-06 16:10:40 ----A---- C:\Windows\system32\fdeploy.dll
2009-06-06 16:10:40 ----A---- C:\Windows\system32\eappgnui.dll
2009-06-06 16:10:40 ----A---- C:\Windows\system32\eappcfg.dll
2009-06-06 16:10:40 ----A---- C:\Windows\system32\CHxReadingStringIME.dll
2009-06-06 16:10:40 ----A---- C:\Windows\system32\aaclient.dll
2009-06-06 16:10:39 ----A---- C:\Windows\system32\tsgqec.dll
2009-06-06 16:10:39 ----A---- C:\Windows\system32\PNPXAssoc.dll
2009-06-06 16:10:39 ----A---- C:\Windows\system32\mmcico.dll
2009-06-06 16:10:39 ----A---- C:\Windows\system32\mfpmp.exe
2009-06-06 16:10:39 ----A---- C:\Windows\system32\gpupdate.exe
2009-06-06 16:10:39 ----A---- C:\Windows\system32\atmlib.dll
2009-06-06 16:10:38 ----A---- C:\Windows\system32\iscsilog.dll
2009-06-06 16:10:38 ----A---- C:\Windows\system32\csrstub.exe
2009-06-06 16:10:38 ----A---- C:\Windows\system32\cbsra.exe
2009-06-06 16:10:38 ----A---- C:\Windows\system32\bitsigd.dll
2009-06-06 16:10:37 ----A---- C:\Windows\system32\vdmdbg.dll
2009-06-06 16:10:37 ----A---- C:\Windows\system32\odbcconf.dll
2009-06-06 16:10:37 ----A---- C:\Windows\system32\NcdProp.dll
2009-06-06 16:10:36 ----A---- C:\Windows\system32\winrnr.dll
2009-06-06 16:10:36 ----A---- C:\Windows\system32\slwga.dll
2009-0

Meilleures réponses pour « Msn virus "mimichat" avec rapport rsit » dans :
Télécharger MSN Virus Remover Voir
Tutoriel : comment interpréter un rapport RSIT Voir Présentation générale Détail des différentes informations données par les rapports Le rapport info.txt Le rapport log.txt Analyse ligne par ligne Identification des infections Explications sur les services Présentation...
Msn : Virus N039 --> Rapport (Résolu) Voir
Virus/Ver MSN/WLM VoirACTION À MENER ! SUPPRIMER L'INFECTION. Vous avez reçu via vos conversations MSN/Windows Live Messenger un fichier ou un message accompagné d’un lien du style : "Album photo.zip" "t'es tres jolie sur cet tof..." "ta tof fait quoi...
Posez votre question Répondre

1

nanard4700, le 21 jun 2009 à 13:47:16

Bonjour

• Télécharge:http://eric.71.mespages.googlepages.com/ToolBar­SD.exe
• !! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!
• Double-cliques sur l'.exe pour lancer l'installe et laisses toi guider
• Une fois fait, cliques sur le raccourci créé sur ton bureau pour lancer l'outil .
• Choisis l'option 1 ( "recherche") et tapes "entrée" .
• Une fois le scan finit , un rapport va apparaître, copie/colles l'intégralité de son contenu dans ta prochaine réponse ...
• ( le rapport est en outre sauvegardé ici -> C:\TB.txt )
• Tuto :[ http://toolbarsd.googlepages.com/aideenimages toolbarSD]
Une vie sans avenir est souvent une vie sans souvenir. 

   
Répondre à nanard4700

2

freddypark, le 21 jun 2009 à 13:56:50

Merci nanard pour cette réponse rapide mais est ce normal qu'après avoir lancer la recherche avec toolbar, la fenêtre disparaisse

   
Répondre à freddypark

3

mister bine, le 21 jun 2009 à 13:59:18

Oui ses normale ne touche plus a rien et atend ton bureau et tes icone vont aparaitre aprés le scan




A oui evite d'utiliser Malwarebytes' Anti-Malware en mode sans echec il detecte beucoup moin bien

   
Répondre à mister bine

5

nanard4700, le 21 jun 2009 à 14:03:23
  • +1

Mister bine normalement la fenetre doit resté apparente.Pour mbam on le fera a la fin de la désinfection. Une vie sans avenir est souvent une vie sans souvenir. 

   
Répondre à nanard4700

4

nanard4700, le 21 jun 2009 à 14:00:48

éxécute toolbarsd en mode sans echec.
Redémarre en mode sans échec
(Pour cela : démarrer le PC en tapotant sur la touche F8 du clavier jusqu'à ce que le menu des options avancées de Windows apparaisse puis avec les touches fléchées du clavier, sélectionner Mode sans échec puis appuyer sur la touche Entrée...)
Attention tu n'as pas accès à Internet dans ce mode donc note ou imprime les consignes qui suivent.

Une vie sans avenir est souvent une vie sans souvenir. 

   
Répondre à nanard4700

6

freddypark, le 21 jun 2009 à 16:29:07
  • +1

Re, j'ai lancé toolbarsd en normal et en sans echec laisser tourner 2 heures et rien ne semble tourné pas de rapport non plus une idée ?

   
Répondre à freddypark

7

nanard4700, le 21 jun 2009 à 16:45:40

Va dans panneau de configuration et supprime. C:\Program Files\Kiwee Toolbar
----------------------------------
/!\ A l'attention de ceux qui passent sur ce sujet /!\
Le logiciel qui suit n'est pas à utiliser à la légère et peut faire des dégâts s'il est mal utilisé ! Ne le faites que si un helpeur du forum qui connait bien cet outil vous l'a recommandé.


/!\ Désactive tous tes logiciels de protection /!\

• Télécharge combofix(de sUBs) sur ton Bureau.
• Double-clique sur ComboFix.exe afin de le lancer.
• Il va te demander d'installer la console de récupération : accepte.
• Ne touche à rien pendant le scan.
• Lorsque la recherche sera terminée, un rapport apparaîtra. Poste ce rapport (C:\Combofix.txt) dans ta prochaine réponse.

Tutoriel officiel de Combofix : http://www.bleepingcomputer.com/combofix/fr/comment-utiliser­¬-combofix
Une vie sans avenir est souvent une vie sans souvenir. 

   
Répondre à nanard4700

8

freddypark, le 21 jun 2009 à 17:13:08

Re,

ComboFix 09-06-20.04 - PC de frédéric 21/06/2009 17:04.3 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.2046.1127 [GMT 2:00]
Lancé depuis: c:\users\PC de frédéric\Desktop\renard.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\users\PCDEFR~1\AppData\Roaming\.#
c:\users\PCDEFR~1\AppData\Roaming\QUAD Backups
c:\windows\system32\ATIODCLI.exe
c:\windows\system32\ATIODE.exe

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-05-21 au 2009-06-21 ))))))))))))))))))))))))))))))))))))
.

2009-06-21 15:09 . 2009-06-21 15:09 -------- d-----w- c:\users\milou\AppData\Local\temp
2009-06-21 15:09 . 2009-06-21 15:09 -------- d-----w- c:\users\fred\AppData\Local\temp
2009-06-21 12:29 . 2009-06-21 15:09 -------- d-----w- c:\users\PCDEFR~1\AppData\Local\temp­
2009-06-21 12:29 . 2009-06-21 12:29 -------- d-----w- C:\temp
2009-06-21 11:48 . 2009-06-21 11:48 -------- d-----w- C:\ToolBar SD
2009-06-21 11:44 . 2009-06-21 11:44 -------- d-----w- c:\program files\AxBx
2009-06-20 21:54 . 2009-06-20 21:54 -------- d-----w- C:\MSNCleaner
2009-06-20 21:50 . 2009-06-20 21:50 -------- d-----w- C:\BackUpMSNCleaner
2009-06-16 12:18 . 2009-06-16 12:18 -------- d-----w- c:\program files\Vente Flash
2009-06-14 22:16 . 2009-06-16 09:39 -------- d-----w- c:\users\PCDEFR~1\AppData\Roaming\Ma­gicBall4
2009-06-14 22:16 . 2009-06-15 09:55 -------- d-----w- c:\users\PCDEFR~1\AppData\Roaming\Dr­eamDale
2009-06-14 22:16 . 2009-06-14 22:16 -------- d-----w- c:\programdata\AlawarWrapper
2009-06-14 22:14 . 2009-06-14 22:14 -------- d-----w- c:\program files\Alawar
2009-06-13 16:12 . 2009-01-23 18:08 32768 ----a-w- c:\windows\system32\CMDLGFR.DLL
2009-06-13 16:12 . 2009-01-23 18:08 15360 ----a-w- c:\windows\system32\inetfr.DLL
2009-06-13 16:12 . 2009-01-23 18:08 141312 ----a-w- c:\windows\system32\MSCMCFR.DLL
2009-06-13 16:12 . 2009-01-23 18:08 101888 ----a-w- c:\windows\system32\VB6STKIT.DLL
2009-06-11 13:20 . 2009-06-11 13:20 -------- d-----w- c:\program files\Activision
2009-06-11 08:00 . 2009-06-11 08:03 -------- d-----w- c:\users\PCDEFR~1\AppData\Roaming\Yo­uUp
2009-06-11 08:00 . 2009-06-11 08:00 -------- d-----w- c:\program files\Ubisoft
2009-06-10 21:28 . 2009-06-10 21:30 -------- d-----w- c:\users\PCDEFR~1\AppData\Roaming\Me­dia Player Classic
2009-06-10 08:56 . 2009-06-10 08:56 -------- d-----w- c:\program files\iPod
2009-06-10 08:56 . 2009-06-10 08:56 -------- d-----w- c:\program files\iTunes
2009-06-10 07:06 . 2009-04-21 11:39 2034688 ----a-w- c:\windows\system32\win32k.sys
2009-06-10 07:04 . 2009-04-23 12:14 623616 ----a-w- c:\windows\system32\localspl.dll
2009-06-10 07:04 . 2009-05-09 05:50 915456 ----a-w- c:\windows\system32\wininet.dll
2009-06-10 07:04 . 2009-05-09 05:34 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-06-10 07:03 . 2009-04-23 12:15 784896 ----a-w- c:\windows\system32\rpcrt4.dll
2009-06-08 13:20 . 2009-06-08 13:20 -------- d-----w- c:\programdata\WindowsSearch
2009-06-08 12:22 . 2009-06-21 11:12 -------- d-----w- C:\rsit
2009-06-08 11:56 . 2009-06-08 13:00 -------- d-----w- c:\windows\BDOSCAN8
2009-06-08 08:00 . 2009-06-21 12:23 -------- d-----w- c:\program files\navilog1
2009-06-08 07:05 . 2009-06-08 07:05 3371383 ----a-w- c:\programdata\Malwarebytes\Malwareby­tes' Anti-Malware\mbam-setup.exe
2009-06-06 17:06 . 2009-06-06 17:06 -------- d-----w- c:\program files\Gadwin Systems
2009-06-06 16:26 . 2009-06-06 16:27 -------- d-----w- c:\windows\system32\ca-ES
2009-06-06 16:26 . 2009-06-06 16:27 -------- d-----w- c:\windows\system32\eu-ES
2009-06-06 16:26 . 2009-06-06 16:27 -------- d-----w- c:\windows\system32\vi-VN
2009-06-06 14:13 . 2009-06-06 14:13 -------- d-----w- c:\windows\system32\EventProviders
2009-06-06 14:10 . 2009-04-11 06:28 777216 ----a-w- c:\windows\system32\slcc.dll
2009-06-05 12:55 . 2009-06-10 22:03 -------- d-----w- C:\games
2009-06-05 11:57 . 2009-06-05 11:57 75048 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 8.2.0.23\SetupAdmin.exe
2009-06-04 15:04 . 2009-06-04 15:04 58 ----a-w- c:\windows\system32\DonationCoder_Screensh­otCaptor_InstallInfo.dat
2009-06-04 15:04 . 2009-06-04 15:04 58 ----a-w- c:\users\PCDEFR~1\AppData\Local\DonationCo­der_ScreenshotCaptor_InstallInfo.dat
2009-06-04 15:04 . 2009-06-04 15:04 -------- d-----w- c:\users\PCDEFR~1\AppData\Roaming\Do­nationCoder
2009-06-04 15:04 . 2009-06-04 15:04 -------- d-----w- c:\program files\ScreenshotCaptor
2009-06-04 15:04 . 2009-06-04 15:04 -------- d-----w- c:\programdata\DonationCoder
2009-06-03 17:44 . 2009-06-03 17:44 -------- d-----w- c:\users\PCDEFR~1\AppData\Roaming\Bo­nkEnc
2009-06-02 09:27 . 2009-06-03 08:18 -------- d-----w- c:\program files\Tidy Favorites
2009-05-28 20:19 . 2009-05-28 20:34 -------- d-----w- c:\program files\Electronic Arts
2009-05-28 08:48 . 2009-06-03 10:07 -------- d-----w- c:\users\PCDEFR~1\AppData\Local\sTab­Launcher
2009-05-28 07:09 . 2009-05-28 07:09 -------- d-----w- c:\program files\sTabLauncher
2009-05-26 08:39 . 2009-06-19 07:21 -------- d-----w- c:\program files\Cheat Engine
2009-05-26 08:39 . 2007-12-26 15:30 679936 ----a-w- c:\windows\system32\D3DX81ab.dll
2009-05-26 08:39 . 2007-12-26 15:30 1970176 ----a-w- c:\windows\system32\d3dx9.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-21 14:53 . 2009-03-11 12:33 -------- d-----w- c:\program files\CCleaner
2009-06-21 14:14 . 2006-11-02 15:48 669328 ----a-w- c:\windows\system32\perfh00C.dat
2009-06-21 14:14 . 2006-11-02 15:48 123350 ----a-w- c:\windows\system32\perfc00C.dat
2009-06-21 11:41 . 2008-12-30 00:22 -------- d-----w- c:\users\PCDEFR~1\AppData\Roaming\Gr­abIt
2009-06-19 08:30 . 2008-12-27 19:14 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-06-16 08:27 . 2009-02-02 12:13 323584 ----a-w- c:\windows\system32\AUDIOGENIE2.DLL
2009-06-13 22:45 . 2008-12-27 17:05 -------- d-----w- c:\programdata\Microsoft Help
2009-06-13 11:25 . 2009-01-02 23:24 -------- d-----w- c:\users\PCDEFR~1\AppData\Roaming\dv­dcss
2009-06-10 08:56 . 2009-02-19 12:32 -------- d-----w- c:\program files\Common Files\Apple
2009-06-10 08:55 . 2009-01-27 15:52 -------- d-----w- c:\program files\QuickTime
2009-06-10 08:53 . 2009-03-20 13:35 97608 ----a-w- c:\windows\system32\drivers\avfwot.sys
2009-06-08 11:10 . 2008-12-27 16:53 680 ----a-w- c:\users\PCDEFR~1\AppData\Local\d3d9caps.­dat
2009-06-06 16:34 . 2008-12-27 16:53 75160 ----a-w- c:\users\PCDEFR~1\AppData\Local\GDIPFON­TCACHEV1.DAT
2009-06-06 16:27 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2009-06-06 16:27 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-06-06 16:27 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2009-06-06 16:27 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Journal
2009-06-06 16:27 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Collaboration
2009-06-06 16:27 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Photo Gallery
2009-06-06 16:27 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2009-06-06 16:26 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-06-06 12:58 . 2008-12-27 17:09 -------- d-----w- c:\program files\Microsoft Works
2009-06-04 16:58 . 2009-02-26 22:36 -------- d-----w- c:\users\PCDEFR~1\AppData\Roaming\Pl­ayFirst
2009-06-04 16:58 . 2009-02-26 22:36 -------- d-----w- c:\programdata\PlayFirst
2009-06-02 21:05 . 2009-01-03 11:35 -------- d-----w- c:\users\PCDEFR~1\AppData\Roaming\Wi­namp
2009-05-28 20:36 . 2009-01-02 23:16 -------- d-----w- c:\programdata\Electronic Arts
2009-05-27 10:54 . 2009-02-14 00:30 40 ----a-w- c:\windows\popcinfo.dat
2009-05-26 11:20 . 2009-02-07 11:43 40160 ----a-w- c:\windows\system32\drivers\mbamswissar­my.sys
2009-05-26 11:19 . 2009-02-07 11:43 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-05-21 17:00 . 2009-05-21 17:00 -------- d-----w- c:\program files\Microsoft WSE
2009-05-20 11:56 . 2009-02-10 16:33 -------- d-----w- c:\program files\Google
2009-05-18 11:17 . 2009-05-18 11:17 -------- d-----w- c:\users\fred\AppData\Roaming\DivX
2009-05-18 10:27 . 2009-05-18 10:27 -------- d-----w- c:\users\fred\AppData\Roaming\Zylom
2009-05-18 09:51 . 2009-05-18 09:51 -------- d-----w- c:\users\fred\AppData\Roaming\vlc
2009-05-18 09:32 . 2009-05-18 09:30 -------- d-----w- c:\users\fred\AppData\Roaming\Winamp­
2009-05-18 09:30 . 2009-05-18 09:30 -------- d-----w- c:\users\fred\AppData\Roaming\stream­ripper
2009-05-17 16:34 . 2009-05-17 16:34 -------- d-----w- c:\users\PCDEFR~1\AppData\Roaming\Zy­lom
2009-05-17 16:33 . 2009-05-17 16:33 -------- d-----w- c:\programdata\Zylom
2009-05-17 16:32 . 2009-05-17 16:32 -------- d-----w- c:\program files\Zylom Games
2009-05-15 18:23 . 2009-05-15 18:22 -------- d-----w- c:\program files\Microsoft LifeCam
2009-05-13 18:44 . 2009-05-13 18:35 -------- d-----w- c:\users\PCDEFR~1\AppData\Roaming\DA­EMON Tools Lite
2009-05-13 18:44 . 2009-03-13 19:15 -------- d-----w- c:\users\PCDEFR~1\AppData\Roaming\DA­EMON Tools
2009-05-13 18:42 . 2009-05-13 18:42 -------- d-----w- c:\programdata\DAEMON Tools Lite
2009-05-13 18:42 . 2009-05-13 18:42 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2009-05-13 18:42 . 2009-05-13 18:42 -------- d-----w- c:\program files\DAEMON Tools Lite
2009-05-13 18:35 . 2009-05-13 18:35 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-05-13 17:16 . 2009-05-02 14:39 -------- d-----w- c:\program files\Games
2009-05-13 06:47 . 2009-05-01 14:22 -------- d-----w- c:\program files\Steam
2009-05-12 22:03 . 2009-02-25 18:05 -------- d-----w- c:\program files\orange
2009-05-11 10:54 . 2009-05-11 10:54 -------- d-----w- c:\program files\Common Files\Logitech
2009-05-11 10:54 . 2009-05-11 10:54 -------- d-----w- c:\program files\Logitech
2009-05-08 10:55 . 2009-05-08 10:55 -------- d-----w- c:\programdata\Media Center Programs
2009-05-07 14:27 . 2009-02-14 14:26 -------- d-----w- c:\users\PCDEFR~1\AppData\Roaming\Di­vX
2009-05-07 10:34 . 2008-02-02 19:04 -------- d-----w- c:\program files\GrabIt
2009-05-06 22:48 . 2009-05-06 22:45 -------- d-----w- c:\program files\Common Files\Nero
2009-05-06 22:45 . 2009-05-06 22:45 -------- d-----w- c:\programdata\Nero
2009-05-06 14:10 . 2009-05-06 14:06 -------- d-----w- c:\program files\MP3Gain
2009-05-06 09:56 . 2009-05-06 09:56 -------- d-----w- c:\program files\Common Files\SWF Studio
2009-05-06 09:49 . 2009-01-03 11:35 -------- d-----w- c:\program files\Winamp
2009-05-04 22:06 . 2009-05-04 22:06 -------- d-----w- c:\users\PCDEFR~1\AppData\Roaming\Va­lusoft
2009-05-02 14:39 . 2009-05-02 14:39 -------- d-----w- c:\programdata\PopCap Games
2009-05-02 14:39 . 2009-05-02 14:39 -------- d-----w- c:\programdata\Macrovision
2009-05-02 10:05 . 2009-05-01 14:22 -------- d-----w- c:\program files\Common Files\Steam
2009-04-27 19:28 . 2009-04-27 19:28 -------- d-----w- c:\program files\NewsBinGN
2009-04-27 14:57 . 2009-04-27 14:57 57472 ----a-w- c:\windows\system32\drivers\youup.sys
2009-04-27 13:43 . 2009-04-27 13:42 -------- d-----w- c:\users\fred\AppData\Roaming\Babylo­n
2009-04-27 10:19 . 2009-03-20 13:35 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2009-04-27 10:19 . 2009-03-20 13:35 55640 ----a-w- c:\windows\system32\drivers\avgntflt.sy­s
2009-04-26 08:56 . 2009-04-26 08:56 -------- d-----w- c:\programdata\{8CD7F5AF-ECFA-4793-B­F40-D8F42DBFF906}
2009-04-26 08:51 . 2009-04-26 08:51 -------- d-----w- c:\program files\Bonjour
2009-04-21 22:20 . 2009-04-21 22:20 14311680 ----a-w- c:\windows\system32\xlive.dll
2009-04-21 22:20 . 2009-04-21 22:20 13642496 ----a-w- c:\windows\system32\xlivefnt.dll
2009-04-11 06:33 . 2009-06-06 14:11 986600 ----a-w- c:\windows\system32\winload.exe
2009-04-11 06:33 . 2009-06-06 14:11 926184 ----a-w- c:\windows\system32\winresume.exe
2009-04-11 06:33 . 2009-06-06 14:11 292840 ----a-w- c:\windows\system32\drivers\volmgrx.sy­s
2009-04-11 06:33 . 2009-06-06 14:11 897000 ----a-w- c:\windows\system32\drivers\tcpip.sys
2009-04-11 06:33 . 2009-06-06 14:11 614376 ----a-w- c:\windows\system32\ci.dll
2009-04-11 06:28 . 2009-06-06 14:11 56320 ----a-w- c:\windows\system32\xmlfilter.dll
2009-04-11 06:27 . 2009-06-06 14:12 441344 ----a-w- c:\windows\system32\SearchIndexer.exe
2009-04-11 06:22 . 2009-06-06 14:10 7168 ----a-w- c:\windows\system32\f3ahvoas.dll
2009-04-11 06:21 . 2009-06-06 14:10 37376 ----a-w- c:\windows\system32\cdd.dll
2009-04-11 05:42 . 2009-06-06 14:10 93696 ----a-w- c:\windows\system32\drivers\bridge.sys
2009-04-11 05:03 . 2009-06-06 14:12 12240896 ----a-w- c:\windows\system32\NlsLexicons0007.­dll
2009-04-11 05:03 . 2009-06-06 14:12 2644480 ----a-w- c:\windows\system32\NlsLexicons0009.d­ll
2009-04-11 04:57 . 2009-06-06 14:10 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2009-04-11 04:54 . 2009-06-06 14:10 2048 ----a-w- c:\windows\system32\mferror.dll
2009-04-11 04:51 . 2009-06-06 14:10 180736 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2009-04-11 04:47 . 2009-06-06 14:10 273920 ----a-w- c:\windows\system32\drivers\afd.sys
2009-04-11 04:46 . 2009-06-06 14:10 69120 ----a-w- c:\windows\system32\drivers\rassstp.sys­
2009-04-11 04:46 . 2009-06-06 14:10 121344 ----a-w- c:\windows\system32\drivers\ndiswan.sy­s
2009-04-11 04:46 . 2009-06-06 14:10 41472 ----a-w- c:\windows\system32\drivers\raspppoe.sy­s
2009-04-11 04:46 . 2009-06-06 14:10 15872 ----a-w- c:\windows\system32\drivers\usb8023.sys­
2009-04-11 04:46 . 2009-06-06 14:10 33280 ----a-w- c:\windows\system32\drivers\RNDISMP.sys­
2009-04-11 04:46 . 2009-06-06 14:10 30720 ----a-w- c:\windows\system32\drivers\tcpipreg.sy­s
2009-04-11 04:45 . 2009-06-06 14:10 72192 ----a-w- c:\windows\system32\drivers\tdx.sys
2009-04-11 04:45 . 2009-06-06 14:10 72192 ----a-w- c:\windows\system32\drivers\pacer.sys
2009-04-11 04:45 . 2009-06-06 14:11 185856 ----a-w- c:\windows\system32\drivers\netbt.sys
2009-04-11 04:45 . 2009-06-06 14:11 401408 ----a-w- c:\windows\system32\drivers\http.sys
2009-04-11 04:45 . 2009-06-06 14:10 113664 ----a-w- c:\windows\system32\drivers\rmcast.sys­
2009-04-11 04:45 . 2009-06-06 14:10 66560 ----a-w- c:\windows\system32\drivers\smb.sys
.

((((((((((((((((((((((((((((( SnapShot@2009-06-21_12.27.30 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-12-27 18:24 . 2009-06-21 14:25 59072 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_Syste­mData.bin
- 2008-12-27 18:24 . 2009-06-21 10:25 59072 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_Syste­mData.bin
+ 2006-11-02 13:05 . 2009-06-21 14:25 69522 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemDat­a.bin
+ 2008-12-27 16:55 . 2009-06-21 14:25 10740 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485­d}\S-1-5-21-1090724929-59898609-3416893652-1000_UserData.bin­
- 2008-12-27 16:55 . 2009-06-21 10:25 10740 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485­d}\S-1-5-21-1090724929-59898609-3416893652-1000_UserData.bin­
+ 2006-11-02 13:02 . 2009-06-21 14:53 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Mic­rosoft\Windows\Cookies\index.dat
- 2006-11-02 13:02 . 2009-06-20 21:56 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Mic­rosoft\Windows\Cookies\index.dat
- 2006-11-02 13:02 . 2009-06-20 21:56 49152 c:\windows\System32\config\systemprofile\AppData\Local\Micro­soft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2006-11-02 13:02 . 2009-06-21 14:53 49152 c:\windows\System32\config\systemprofile\AppData\Local\Micro­soft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2006-11-02 13:02 . 2009-06-20 21:56 32768 c:\windows\System32\config\systemprofile\AppData\Local\Micro­soft\Windows\History\History.IE5\index.dat
+ 2006-11-02 13:02 . 2009-06-21 14:53 32768 c:\windows\System32\config\systemprofile\AppData\Local\Micro­soft\Windows\History\History.IE5\index.dat
+ 2009-06-21 14:10 . 2009-06-21 14:10 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastal­ive1.dat
+ 2009-06-21 14:10 . 2009-06-21 14:10 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastal­ive0.dat
+ 2006-11-02 10:33 . 2009-06-21 14:14 586980 c:\windows\System32\perfh009.dat
+ 2006-11-02 10:33 . 2009-06-21 14:14 101052 c:\windows\System32\perfc009.dat
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EnhancedStorageShell]
@="{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}"
[HKEY_CLASSES_ROOT\CLSID\{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}]
2009-04-11 06:28 114176 ----a-w- c:\windows\System32\EhStorShell.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-02-06 3885408]
"Search Protection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-03 111856]
"YSearchProtection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-03 111856]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-18 202240]
"RoboForm"="c:\program files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" [2008-12-21 160592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VX3000"="c:\windows\vVX3000.exe" [2008-08-04 721936]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-20 209153]
"YMailAdvisor"="c:\program files\Yahoo!\Common\YMailAdvisor.exe" [2008-06-05 125208]
"YSearchProtection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-03 111856]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
"LifeCam"="c:\program files\Microsoft LifeCam\LifeExp.exe" [2008-08-04 160800]
"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdSync.exe" [2006-11-02 215552]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-05-26 413696]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
sTabLauncher.lnk - c:\windows\Installer\{BABDD54C-0CB2-4D25-82E7-BE1B8206BCE4}\_33067DCF71962AAE03BB4A.exe [2009-5-28 12118]

c:\users\PCDEFR~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\
Vente Flash.lnk - c:\program files\Vente Flash\vente_flash.exe [2007-7-27 2484551]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"BindDirectlyToPropertySetStorage"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\CCleaner.exe]
path=CCleaner.exe
backup=c:\windows\pss\CCleaner.exe.Startup
backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):23,21,12,92,c4,e6,c9,01

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{2E414822-C809-42E1-8055-383DE95D782E}"= UDP:c:\program files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe:Rockstar Games Social Club
"{32031CC7-26DB-4335-A009-8529DFFD2D22}"= TCP:c:\program files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe:Rockstar Games Social Club
"{A9E171BE-1DF2-4427-A427-A4CE468E8BAF}"= UDP:c:\program files\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe:Grand Theft Auto IV
"{76DBDE32-FB61-49ED-9A52-09F672094BCC}"= TCP:c:\program files\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe:Grand Theft Auto IV
"TCP Query User{0E7EDC3C-87A0-4E21-99E3-6F89C5E2503A}c:\\program files\\rockstar games\\grand theft auto iv\\gtaiv.exe"= UDP:c:\program files\rockstar games\grand theft auto iv\gtaiv.exe:Grand Theft Auto IV
"UDP Query User{9DD7D2A9-4BF5-412C-9699-C352D9DF71DB}c:\\program files\\rockstar games\\grand theft auto iv\\gtaiv.exe"= TCP:c:\program files\rockstar games\grand theft auto iv\gtaiv.exe:Grand Theft Auto IV
"TCP Query User{26E44449-4661-4067-B778-4915ECDFF120}c:\\program files\\rockstar games\\grand theft auto iv\\gtaiv.exe"= UDP:c:\program files\rockstar games\grand theft auto iv\gtaiv.exe:Grand Theft Auto IV
"UDP Query User{04812016-5A8C-4A68-B27F-AAA0DC7DE53C}c:\\program files\\rockstar games\\grand theft auto iv\\gtaiv.exe"= TCP:c:\program files\rockstar games\grand theft auto iv\gtaiv.exe:Grand Theft Auto IV
"{CF6A6CAC-D2B5-4090-9D41-F258EC38CD3B}"= UDP:5353:Adobe CSI CS4
"{8661F67C-AF58-467D-B291-4E83876E0860}"= UDP:c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:Adobe CSI CS4
"{0D7771B4-7614-4072-925D-C7C94A251182}"= TCP:c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:Adobe CSI CS4
"{B1D1D30E-AE70-45C1-90AD-33CD941B7295}"= UDP:c:\program files\RayV\RayV\RayV.dll:RayV
"{7131FAE6-259E-428A-AE33-4EAD52053347}"= TCP:c:\program files\RayV\RayV\RayV.dll:RayV
"{77D66C5A-9C64-4529-B40B-2D343557D9B8}"= UDP:c:\program files\RayV\RayV\RayV.dll:RayV
"{AB0228EC-62AD-4A70-9258-F42003E20AA1}"= TCP:c:\program files\RayV\RayV\RayV.dll:RayV
"{B125D2EA-D3BC-42EE-9E7B-FC32D7470C06}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{F204EA0E-6179-4639-9164-70A1E52C8B7E}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{6C5314E9-DE78-43B3-B944-CA560B716E60}"= UDP:c:\program files\NewsBinGN\NewsbinGN.exe:NewsBin for Giganews
"{B10EFE3A-23DB-4AEB-87F5-95E6D8A5711A}"= TCP:c:\program files\NewsBinGN\NewsbinGN.exe:NewsBin for Giganews
"{BB0A4902-75E4-4166-A9C9-BC069011EF01}"= UDP:c:\program files\Ubisoft\Tom Clancy's H.A.W.X\HAWX.exe:Tom Clancy's H.A.W.X
"{CAF94E4D-177C-47C2-8D9D-897910419D3A}"= TCP:c:\program files\Ubisoft\Tom Clancy's H.A.W.X\HAWX.exe:Tom Clancy's H.A.W.X
"{8698AA92-9AF4-4ABE-9217-D08C0B3ADC2C}"= UDP:c:\program files\Ubisoft\Tom Clancy's H.A.W.X\HAWX_dx10.exe:Tom Clancy's H.A.W.X
"{ED9A40E5-DB61-4BBC-8760-46E4D37F021A}"= TCP:c:\program files\Ubisoft\Tom Clancy's H.A.W.X\HAWX_dx10.exe:Tom Clancy's H.A.W.X
"{9ECDE5B5-0719-456E-BCD0-3603B0EE719B}"= UDP:c:\program files\Microsoft LifeCam\LifeCam.exe:LifeCam.exe
"{7AFCDAB0-C231-4726-B109-CAA94B849706}"= TCP:c:\program files\Microsoft LifeCam\LifeCam.exe:LifeCam.exe
"{17A5AC0E-D245-4769-99BA-4150C9E132C1}"= UDP:c:\program files\Microsoft LifeCam\LifeEnC2.exe:LifeEnC2.exe
"{C9CF74A6-15B6-4967-8B11-D31367309481}"= TCP:c:\program files\Microsoft LifeCam\LifeEnC2.exe:LifeEnC2.exe
"{08BEEFA5-7182-4B9E-B577-3B810F76F39D}"= UDP:c:\program files\Microsoft LifeCam\LifeExp.exe:LifeExp.exe
"{C3B1F2BA-9A89-410F-A2BF-FF3A30F9D410}"= TCP:c:\program files\Microsoft LifeCam\LifeExp.exe:LifeExp.exe
"{8116ECA9-B088-4499-9CB1-7ADF0DFC112E}"= UDP:c:\program files\Microsoft LifeCam\LifeTray.exe:LifeTray.exe
"{5CB8CFB0-D096-40B2-B5D7-E5B64EC0E840}"= TCP:c:\program files\Microsoft LifeCam\LifeTray.exe:LifeTray.exe
"{C3472BBC-D826-4C90-B654-888598EA8100}"= UDP:c:\program files\Tidy Favorites\tidyfavorites.exe:TidyFavorites
"{18AB2120-252F-4D19-A448-68D65FC907CF}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{24DBC76F-BEBA-40A0-9412-04C78BC81014}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"{50C7675E-7F5A-4C8F-9DAC-97D890EB40CE}"= UDP:c:\program files\Ubisoft\YouUp\YouUp.exe:YouUp
"{2E28F3A9-30E0-46CE-8970-4F0FDC679EE3}"= TCP:c:\program files\Ubisoft\YouUp\YouUp.exe:YouUp
"{AE2DBD6B-8DE1-4D96-9850-3BA023B991F9}"= UDP:c:\program files\Activision\Prototype\prototypef.exe:Prototype(TM)
"{2C6830EA-76D7-452C-88A2-1A7BC54D0108}"= TCP:c:\program files\Activision\Prototype\prototypef.exe:Prototype(TM)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)

R1 avfwot;avfwot;c:\windows\System32\drivers\avfwot.sys [20/03/2009 15:35 97608]
R2 AntiVirFirewallService;Avira Firewall;c:\program files\Avira\AntiVir Desktop\avfwsvc.exe [20/03/2009 15:35 388865]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [20/03/2009 15:35 108289]
R2 AntiVirWebService;Avira AntiVir WebGuard;c:\program files\Avira\AntiVir Desktop\avwebgrd.exe [20/03/2009 15:35 434945]
R3 avfwim;AvFw Packet Filter Miniport;c:\windows\System32\drivers\avfwim.sys [20/03/2009 15:35 69632]
R3 avshws;YouUp Simulated Hardware;c:\windows\System32\drivers\youup.sys [27/04/2009 16:57 57472]
S2 AntiVirMailService;Avira AntiVir MailGuard;c:\program files\Avira\AntiVir Desktop\avmailc.exe [20/03/2009 15:35 194817]
S2 gupdate1c98b9d51cbd910;Google Update Service (gupdate1c98b9d51cbd910);c:\program files\Google\Update\GoogleUpdate.exe [10/02/2009 18:33 133104]
S2 YouupServiceWinService;YouupServiceWinService;"c:\users\PC de frédéric\AppData\Local\Temp\YouUpService\YouupService.exe" --> c:\users\PC de frédéric\AppData\Local\Temp\YouUpService\YouupService.exe [?]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
.
Contenu du dossier 'Tâches planifiées'

2009-06-21 c:\windows\Tasks\GoogleUpdateTaskMachine.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-10 16:33]

2009-06-21 c:\windows\Tasks\User_Feed_Synchronization-{1E9B7CB7-F798-4027-8A08-BD355677E59D}.job
- c:\windows\system32\msfeedssync.exe [2009-03-26 11:31]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.yahoo.fr/
uInternet Settings,ProxyOverride = *.local
IE: &SHOUTcast Search - c:\programdata\SHOUTcast Radio Toolbar\ieToolbar\resources\en-US\local\search.html
IE: Boîte de recherche - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
IE: Cartes correspondantes - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Générateur - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
IE: Remplir le formulaire - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} - hxxps://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} - hxxp://webtv.guidetv.orange.fr/resources/OCS_8884.cab
FF - ProfilePath - c:\users\PCDEFR~1\AppData\Roaming\Mozilla\Firefox\Profiles\sbqf35sy.default\
FF - prefs.js: browser.search.defaulturl - hxxp://fr.search.yahoo.com/search?ei=UTF-8&fr=ytff-tyc7&p=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://fr.yahoo.com/r/hf
FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?mkt=fr-FR&FORM=MIMWA5&q=
FF - component: c:\users\PC de frédéric\AppData\Roaming\Mozilla\Firefox\Profiles\sbqf35sy.default\extensions\{12e4c684-c03e-4e4d-85bc-0c065e7a9489}\components\WinampPlayer.dll
FF - plugin: c:\program files\Google\Update\1.2.145.5\npGoogleOneClick8.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npgcplug.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npracplug.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll
FF - plugin: c:\program files\RayV\RayV\plugins\nprayvplugin.dll
FF - plugin: c:\program files\Real\RealArcade\Plugins\Mozilla\npracplug.dll
FF - plugin: c:\programdata\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-21 17:09
Windows 6.0.6002 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...


**************************************************************************

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-1090724929-59898609-3416893652-1000\Software\SecuROM\License information*]
"datasecu"=hex:a6,bf,80,85,db,f1,35,81,72,13,2c,68,65,d6,07,93,97,58,63,f0,f4,
62,6c,02,95,e5,4a,ad,cc,34,94,29,68,62,44,ad,29,12,db,b4,14,af,81,40,e5,ad,\
"rkeysecu"=hex:c8,d4,97,83,52,9b,4d,85,29,c8,f6,3c,2b,8c,8e,08
.
Heure de fin: 2009-06-21 17:11
ComboFix-quarantined-files.txt 2009-06-21 15:10
ComboFix2.txt 2009-06-21 12:29

Avant-CF: 16 173 314 048 octets libres
Après-CF: 16 139 374 592 octets libres

349 --- E O F --- 2009-06-19 06:52


merci

   
Répondre à freddypark

13

remysterio59, le 4 sep 2009 à 21:26:05

-----------\\ ToolBar S&D 1.2.9 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T6400 @ 2.00GHz )
BIOS : ZY2 v0.3611 3F11
USER : remy ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:227 Go (Free:129 Go)
D:\ (Local Disk) - NTFS - Total:227 Go (Free:227 Go)
E:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
Option : [1] ( 04/09/2009|21:20 )

[ UAC => 1 ]

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Users\remy\AppData\Roaming\MICROS~1\Windows\Cookies\remy@www.bananalotto[1].txt

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.fr/"
"Default_Page_URL"="http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=1208&m=aspire_7730g"
"Local Page"="C:\\Windows\\system32\\blank.htm"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Url"="http://go.microsoft.com/fwlink/?LinkId=75720"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=1208&m=aspire_7730g"
"Default_Page_URL"="http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&s=2&o=vp32&d=1208&m=aspire_7730g"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"


--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\Users\remy\Music\divers\eminen & dr dre & 50 Cent - Crack A Bottle.mp3


[ UAC => 1 ]


1 - "C:\ToolBar SD\TB_1.txt" - 04/09/2009|21:16 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 04/09/2009|21:19 - Option : [1]
3 - "C:\ToolBar SD\TB_3.txt" - 04/09/2009|21:21 - Option : [1]

-----------\\ Fin du rapport a 21:21:05,83

VOila moi sa mdonne sa et apres g terminé ou pas =s Merci d avance ...

   
Répondre à remysterio59

9

nanard4700, le 21 jun 2009 à 17:58:28

Fais une nouvelle tentative avec toolbarsd.
------------------------------------------------------------­------------------------------------------------------------­
• Télécharge :http://www.superantispyware.com/
• Choisis "enregistrer" et enregistre-le sur ton bureau.
• Double-clique sur l'icône d'installation qui vient de se créer et suis les instructions.
• Créé une icône sur le bureau.
• Double-clique sur l'icône de SAS (une tête dans un cercle rouge barré) pour le lancer.
• Si l'outil te demande de mettre à jour le programme ("update the program definitions", clique sur yes.
• Sous Configuration and Preferences, clique sur le bouton "Preferences"
• Clique sur l'onglet "Scanning Control "
• Dans "Scanner Options ", assure toi que la case devant lles lignes suivantes est cochée :
• Close browsers before scanning
• Scan for tracking cookies
• Terminate memory threats before quarantining
• Laisse les autres lignes décochées.
• Clique sur le bouton "Close" pour quitter l'écran du centre de contrôle.
• Dans la fenêtre principale, clique, dans "Scan for Harmful Software", sur "Scan your computer".
• Dans la colonne de gauche, coche C:\Fixed Drive.
• Dans la colonne de droite, sous "Complete scan", clique sur "Perform Complete Scan"
• Clique sur "next" pour lancer le scan. Patiente pendant la durée du scan.
• A la fin du scan, une fenêtre de résultats s'ouvre . Clique sur OK.
• Assure toi que toutes les lignes de la fenêtre blanche sont cochées et clique sur "Next".
• Tout ce qui a été trouvé sera mis en quarantaine. S'il t'es demandé de redémarrer l'ordi ("reboot"), clique sur Yes.
• Pour recopier les informations sur le forum, fais ceci :
• après le redémarrage de l'ordi, double-clique sur l'icône pour lancer SAS.
• Clique sur "Preferences" puis sur l'onglet "Statistics/Logs ".
• Dans "scanners logs", double-clique sur SUPERAntiSpyware Scan Log.
• Le rapport va s'ouvrir dans ton éditeur de texte par défaut.
• Copie son contenu dans ta réponse.
• Regarde bien le tuto SUPERAntiSpyware il est très bien expliqué.
• http://www.malekal.com/tutorial_SUPERAntiSpyware.php

Une vie sans avenir est souvent une vie sans souvenir. 

   
Répondre à nanard4700

10

freddypark, le 22 jun 2009 à 14:41:46

Bonjour, voila le scan

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 06/22/2009 at 01:59 PM

Application Version : 4.26.1004

Core Rules Database Version : 3949
Trace Rules Database Version: 1891

Scan type : Complete Scan
Total Scan Time : 00:43:44

Memory items scanned : 691
Memory threats detected : 0
Registry items scanned : 7464
Registry threats detected : 0
File items scanned : 30816
File threats detected : 1

Adware.Tracking Cookie
C:\Users\PC de frédéric\AppData\Roaming\Microsoft\Windows\Cookies\pc_de_fré­déric@atdmt[2].txt

je n'ai pas de nouvelles de contacts ayant reçu de nouveaux messages, j'attends encore un jours ou deux avant de marquer "resolu" à moins qu'il y encore des choses à faire

merci

   
Répondre à freddypark

11

nanard4700, le 22 jun 2009 à 15:02:24

Télécharge Usbfix.exe.(de Chiquitine29 et C_XX) sur ton Bureau
• Lance l'installation avec les paramètres par défaut
• Branche tes sources de données externes à ton PC (clé USB, disque dur externe, lecteur mp3 etc...) sans les ouvrir
• Double clique sur le raccourci UsbFix sur ton Bureau
• Au menu principal, choisis l'option 1 (recherche)
• Un rapport USBFix.txt apparaitra à la fin, poste le dans ta prochaine réponse stp.
(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet "Fichier", "Nouvelle tâche", tape explorer.exe et valide)
Une vie sans avenir est souvent une vie sans souvenir. 

   
Répondre à nanard4700

12

depassage, le 6 aoû 2009 à 08:45:30
  • +4

Heuuu...sinon,en un peu moins compliqué et bien plus rapide, chaque fois que tu as une merdouille dans le genre sur msn (message envoyé à tes contacts ),
il te suffit de changer 1 seule lettre de ton mot de passe msn

voilou ;)

   
Répondre à depassage

14

 hadouch mustapha, le 17 sep 2009 à 17:34:28

Debloquer mon msn

   
Répondre à hadouch mustapha
Posez votre question Répondre
Ils ont besoin de votre aide
Collection CommentÇaMarche.net