Win32.Delf.uc

bruce lee · le 11 décembre 2007

Re,

Télécharge Flash_Disinfector.exe de sUBs : http://www.techsupportforum.com/sectools/s...Disinfector.exe et execute le.

Lance hijackthis en cliquant sur do a scan system only et coche ces lignes:

O2 - BHO: (no name) - {0A82D6EE-566F-4134-BA4D-B55F32AC5A18} - C:\WINDOWS\system32\jkkli.dll

O2 - BHO: {ead24ed1-1234-da1b-f7b4-d860380779b0} - {0b977083-068d-4b7f-b1ad-43211de42dae} - C:\WINDOWS\system32\dnmlafbq.dll (file missing)

O2 - BHO: (no name) - {73c7d5b0-7b03-444a-84c7-ce1ba03b5573} - (no file)

O2 - BHO: (no name) - {FED51DF2-9644-4C58-9104-90244EDD6EEC} - C:\WINDOWS\system32\awttutq.dll

O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)

O3 - Toolbar: (no name) - {73c7d5b0-7b03-444a-84c7-ce1ba03b5573} - (no file)

O4 - HKLM\..\Run: [847368e1] rundll32.exe "C:\WINDOWS\system32\exytgqjs.dll",b

O20 - Winlogon Notify: awttutq - C:\WINDOWS\system32\awttutq.dll

Ferme toutes les fenêtres ouvertes sauf Hijackthis et clique sur fix checked

Lance vundofix puis fait un clique droit dans le rectangle blanc puis un clique gauche sur add more files?

Dans la premiere ligne copie/colle:

C:\WINDOWS\system32\awttutq.dll

Dans la seconde copie/colle:

C:\WINDOWS\system32\jkkli.dll

Clique ensuite sur:

add files puis ensuite sur Close Window et enfin sur Remove Vundo

Si l'outil te demande de redémarrer, accepte.

Copie/Colle ensuite le rapport C:\ vundofix.txt.

Poste également un nouveau rapport Deckard's System Scanner.

rafmiouc · le 11 décembre 2007

VundoFix V6.7.0

Checking Java version...

Scan started at 18:03:17 11/12/2007

Listing files found while scanning....

No infected files were found.

Beginning removal...

Attempting to delete C:\WINDOWS\system32\awttutq.dll

C:\WINDOWS\system32\awttutq.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\awttutq.dll

C:\WINDOWS\system32\awttutq.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\jkkli.dll

C:\WINDOWS\system32\jkkli.dll Has been deleted!

Performing Repairs to the registry.

Done!

Deckard's System Scanner v20071014.68

Run by Raf on 2007-12-11 21:50:44

Computer is in Normal Mode.

--------------------------------------------------------------------------------

Je n'ai pas trouver les ligne O2 et O20

Est-ce du à ma version de HJT ou est-il corrompu ?

Pourtant je les voie dans le rapport de dss

-- HijackThis Clone ------------------------------------------------------------

Emulating logfile of Trend Micro HijackThis v2.0.2

Scan saved at 2007-12-11 21:51:48

Platform: Windows XP Service Pack 2 (5.01.2600)

MSIE: Internet Explorer (7.00.6000.16544)

Boot mode: Normal

Running processes:

C:\WINDOWS\system32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\oodag.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\NetDrive\wdService.exe

C:\WINDOWS\explorer.exe

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\soundman.exe

C:\Program Files\Adobe\Reader 8.0\Reader\Reader_SL.exe

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Documents and Settings\Raf\Bureau\dss.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://home.microsoft.com/access/autosearch.asp?p=%s

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.targa.co.uk/

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch

R3 - URLSearchHook: (no name) - {73c7d5b0-7b03-444a-84c7-ce1ba03b5573} - (no file)

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {0A82D6EE-566F-4134-BA4D-B55F32AC5A18} - C:\WINDOWS\system32\jkkli.dll (file missing)

O2 - BHO: {ead24ed1-1234-da1b-f7b4-d860380779b0} - {0b977083-068d-4b7f-b1ad-43211de42dae} - C:\WINDOWS\system32\dnmlafbq.dll (file missing)

O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O2 - BHO: (no name) - {73c7d5b0-7b03-444a-84c7-ce1ba03b5573} - (no file)

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll

O2 - BHO: (no name) - {FED51DF2-9644-4C58-9104-90244EDD6EEC} - C:\WINDOWS\system32\awttutq.dll

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')

O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML

O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm

O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm

O9 - Extra button: (no name) - CmdMapping - (file missing)

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (file missing)

O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe

O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O10 - Unknown file in Winsock LSP: C:\WINDOWS\system32\nwprovau.dll

O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/e/7.../OGAControl.cab

O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1190466270562

O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab

O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab

O16 - DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc4.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab

O16 - DPF: {DE22A7AB-A739-4C58-AD52-21F9CD6306B7} (CTAdjust Class) - http://download.microsoft.com/download/7/E...04/clearadj.cab

O17 - HKLM\SYSTEM\CCS\Services\Tcpip\..\{73D9BB0A-7F66-48CE-B56C-6DB4641B5E9A}: NameServer = 212.27.53.252,212.27.54.252

O18 - Protocol: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\PKMCDO.DLL

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll

O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe

O23 - Service: WebDrive Service (WebDriveService) - Unknown owner - C:\Program Files\NetDrive\wdService.exe

--

End of file - 8212 bytes

-- Files created between 2007-11-11 and 2007-12-11 -----------------------------

2007-12-11 21:47:30 32768 --a------ C:\WINDOWS\system32\VundoFixSVC.exe <Not Verified; Atribune.org; Vundofix Service>

2007-12-11 21:45:56 0 d-------- C:\VundoFix Backups

2007-12-11 21:40:05 0 drahs---- C:\autorun.inf

2007-12-11 20:38:20 0 d-------- C:\Documents and Settings\Raf\Application Data\Grisoft

2007-12-11 19:12:59 0 d-------- C:\Documents and Settings\Administrateur\Application Data\Macromedia

2007-12-11 18:53:43 0 d-------- C:\Documents and Settings\Administrateur\Application Data\Grisoft

2007-12-11 18:53:33 0 d-------- C:\Documents and Settings\All Users\Application Data\Grisoft

2007-12-11 18:48:43 0 d-------- C:\Documents and Settings\Administrateur\Application Data\Mozilla

2007-12-11 18:39:47 0 dr-h----- C:\Documents and Settings\Raf\Recent

2007-12-10 22:29:27 0 d-------- C:\WINDOWS\ERUNT

2007-12-10 22:04:42 0 d-------- C:\hijackthis

2007-12-10 21:10:06 0 d-------- C:\SmitfraudFix

2007-12-10 02:13:03 0 d-------- C:\AVG

2007-12-10 01:43:52 0 d-------- C:\Program Files\LizardTech

2007-12-10 00:23:19 0 d-------- C:\Program Files\Alwil Software

2007-12-09 23:47:56 7340032 --a------ C:\Documents and Settings\Raf\ntuser.dat

2007-12-09 23:47:53 1400832 --a------ C:\Documents and Settings\LocalService\ntuser.dat

2007-12-09 13:26:28 0 dr-h----- C:\Documents and Settings\Administrateur\Recent

2007-12-09 11:06:14 36352 --a------ C:\WINDOWS\system32\WS2Fix.exe

2007-12-09 11:06:14 289144 --a------ C:\WINDOWS\system32\VCCLSID.exe <Not Verified; S!Ri; >

2007-12-09 11:06:14 288417 --a------ C:\WINDOWS\system32\SrchSTS.exe <Not Verified; S!Ri; SrchSTS>

2007-12-09 11:06:14 58368 --a------ C:\WINDOWS\system32\dumphive.exe

2007-12-09 11:06:13 61440 --a------ C:\WINDOWS\system32\Process.exe <Not Verified; http://www.beyondlogic.org; Command Line Process Utility>

2007-12-09 10:48:41 1534 --a------ C:\WINDOWS\system32\tmp.reg

2007-12-09 10:44:31 1046702 --a------ C:\SmitfraudFix.exe

2007-12-09 00:09:35 0 d-------- C:\Documents and Settings\Administrateur\Application Data\TuneUp Software

2007-12-08 19:56:36 0 d-------- C:\Program Files\Helper

2007-12-08 19:56:19 37888 -----n--- C:\WINDOWS\system32\awttutq.dll

2007-12-06 22:58:57 0 d-------- C:\Documents and Settings\All Users\Application Data\Adobe

2007-11-27 18:57:36 0 d-------- C:\Program Files\CHIPDRIVE

-- Find3M Report ---------------------------------------------------------------

2007-12-10 01:40:13 0 d-------- C:\Program Files\ABBYY FineReader 8.0 Professional Edition

2007-12-10 01:40:11 0 d-------- C:\Program Files\adslTV

2007-12-10 01:40:01 0 d-------- C:\Program Files\AutoGK

2007-12-10 01:40:00 0 d-------- C:\Program Files\Boilsoft ASF Converter

2007-12-10 01:40:00 0 d-------- C:\Program Files\AvRack

2007-12-10 01:39:54 0 d-------- C:\Program Files\Foxit Reader

2007-12-10 01:39:54 0 d-------- C:\Program Files\FlashGet

2007-12-10 01:39:52 0 d-------- C:\Program Files\HP Adjustment Pattern Utility

2007-12-10 01:39:47 0 d-------- C:\Program Files\Messenger

2007-12-10 01:39:44 0 d-------- C:\Program Files\Movie Maker

2007-12-10 01:39:43 0 d-------- C:\Program Files\Opera

2007-12-10 01:39:43 0 d-------- C:\Program Files\NetDrive

2007-12-10 01:39:42 0 d-------- C:\Program Files\PDFCreator

2007-12-10 01:39:41 0 d-------- C:\Program Files\Picture It! Premium 10

2007-12-10 01:39:36 0 d-------- C:\Program Files\Realtek AC97

2007-12-10 01:39:35 0 d-------- C:\Program Files\TuneUp Utilities 2007

2007-12-10 01:39:34 0 d-------- C:\Program Files\Windows Media Connect 2

2007-12-10 01:39:34 0 d-------- C:\Program Files\Windows Journal Viewer

2007-12-10 01:39:34 0 d-------- C:\Program Files\Warcraft III

2007-12-10 01:39:34 0 d-------- C:\Program Files\UltraISO

2007-12-10 01:07:29 0 d-------- C:\Program Files\Windows Media Connect

2007-12-09 16:12:38 504910 --a------ C:\WINDOWS\system32\perfh00C.dat

2007-12-09 16:12:38 83286 --a------ C:\WINDOWS\system32\perfc00C.dat

2007-12-09 11:13:54 8019 --a------ C:\WINDOWS\mozver.dat

2007-12-09 09:33:05 80384 --a------ C:\WINDOWS\ST6UNST.EXE <Not Verified; Microsoft Corporation; Microsoft® Visual Basic for Windows>

2007-12-06 23:00:41 0 d-------- C:\Documents and Settings\Raf\Application Data\Adobe

2007-12-06 22:59:00 0 d-------- C:\Program Files\Fichiers communs\Adobe

2007-11-28 16:38:03 0 d-------- C:\Program Files\skype

2007-11-28 16:38:03 0 d-------- C:\Program Files\Fichiers communs

2007-11-27 18:53:17 0 d-------- C:\Program Files\SIM Manager Pro

2007-11-27 12:01:02 3480 --a------ C:\WINDOWS\AUTOLNCH.REG

2007-10-28 19:34:40 0 d-------- C:\Documents and Settings\Raf\Application Data\OfficeUpdate12

2007-10-28 19:27:07 0 d-------- C:\Program Files\Fichiers communs\ODBC

2007-10-21 14:55:48 0 d-------- C:\Program Files\Picasa2

2007-10-06 23:29:18 66832 --a------ C:\Documents and Settings\Raf\Application Data\GDIPFONTCACHEV1.DAT

2007-09-17 17:40:56 524288 --a------ C:\WINDOWS\opuc.dll <Not Verified; Microsoft Corporation; 2007 Microsoft Office system>

-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0A82D6EE-566F-4134-BA4D-B55F32AC5A18}]

C:\WINDOWS\system32\jkkli.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0b977083-068d-4b7f-b1ad-43211de42dae}]

C:\WINDOWS\system32\dnmlafbq.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{73c7d5b0-7b03-444a-84c7-ce1ba03b5573}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FED51DF2-9644-4C58-9104-90244EDD6EEC}]

08/12/2007 19:56 37888 --------- C:\WINDOWS\system32\awttutq.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SoundMan"="SOUNDMAN.EXE" [02/03/2006 06:22 C:\WINDOWS\soundman.exe]

"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [10/10/2007 19:51]

"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [22/10/2006 12:22]

"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [11/06/2007 10:25]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [05/08/2004 21:00]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]

"Picasa Media Detector"=C:\Program Files\Picasa2\PicasaMediaDetector.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]

"DisableRegistryTools"=0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

"NoRecentDocsHistory"=1 (0x1)

"NoSMHelp"=01000000

"NoRecentDocsMenu"=01000000

"NoSMMyDocs"=01000000

"NoSMMyPictures"=01000000

"StartMenuLogOff"=1 (0x1)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{FED51DF2-9644-4C58-9104-90244EDD6EEC}"= C:\WINDOWS\system32\awttutq.dll [08/12/2007 19:56 37888]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

"Authentication Packages"= msv1_0 C:\WINDOWS\system32\jkkli.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]

"NvCplDaemon"=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

"PinnacleDriverCheck"=C:\WINDOWS\system32\\PSDrvCheck.exe

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs

UxTuneUp

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]

AutoRun\command- D:\Autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bf9ec1c1-6a2f-11d9-92be-806d6172696f}]

AutoRun\command- E:\Autorun.exe

-- End of Deckard's System Scanner: finished at 2007-12-11 21:52:13 ------------

rafmiouc · le 12 décembre 2007

up

bruce lee · le 12 décembre 2007

Re,

Télécharge OTMoveIt de OldTimer.
Sauvegarde le sur ton Bureau.
Démarre en Mode sans Echec http://cybersecurite.xooit.com/t88-Demarre...s-echec.htm#665
Double-Clique sur OTMoveIt.exe pour le lancer.
Copie le chemin des fichiers suivants en selectionnant TOUT et en appuyant sur CTRL+C (ou, après avoir sélectionner, clique-droit et choisis Copier) :

C:\WINDOWS\system32\awttutq.dll

Retourne dans OTMoveit, fais un clique-droit dans la fenêtre "Paste List of Files/Folders to be moved" et choisis Coller.
Clique sur le bouton rouge Moveit!.
Ferme OTMoveIt.
Note : Si un fichier ou un dossier ne peut être déplacer immédiatement il te sera demander de redémarrer ta machine pour finir le processus. Si c'est le cas, choisis Yes.

Poste moi le rapport de OTMoveIT disponible ici : C:\_OTMoveIt\MovedFiles.

Réutilise le fichier Fixme.reg qui se trouve sur ton Bureau.

Poste également un nouveau rapport avec Deckard's System Scanner

Modifié le 12 décembre 2007 par bruce lee

rafmiouc · le 13 décembre 2007

Désolé Bruce lee pour le retard.

Comme je n'avais plus de réponse, j'ai essayé de me débrouiller tout seul.

J'ai désinstaller pas mal de programme.

J'ai réussi à installer antivir.

Je ne pouvais pas car le virus tentait de l'infecter.

J'ai passer un coup d'antivrus avec un autre pc (réseau).

Et dans la foulé j'ai installé antivir + upload.

J'ai mis en quarantaine pas mal de fichier.

J'ai installer nod32 et il a fait du nettoyage.

Spyboot continait à touver Win32.Delfc.uc

je l'ai supprimmé avec spyboot et après plus rien...

Pour être sûr j'ai passé KAV online pour vérifier.

Il n'a rien trouvé.

j'ai passé un coup DSS et voici le rapport (j'aimerai ton avis)

Deckard's System Scanner v20071014.68

Run by Raf on 2007-12-13 22:34:50

Computer is in Normal Mode.

--------------------------------------------------------------------------------

-- HijackThis (run as Raf.exe) -------------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 22:35:20, on 13/12/2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe

C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe

C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\oodag.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\NetDrive\wdService.exe

C:\WINDOWS\system32\wscntfy.exe

C:\Documents and Settings\Raf\Bureau\dss.exe

C:\PROGRA~1\TRENDM~1\HIJACK~1\Raf.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.targa.co.uk/

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm

O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll

O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe

O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll

O14 - IERESET.INF: START_PAGE_URL=http://www.targa.co.uk

O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} - https://signup.msn.com/pages/MsnInstC.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1190466270562

O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab

O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{73D9BB0A-7F66-48CE-B56C-6DB4641B5E9A}: NameServer = 212.27.53.252,212.27.54.252

O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: Eset HTTP Server (EhttpSrv) - Unknown owner - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe

O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe

O23 - Service: WebDrive Service (WebDriveService) - Unknown owner - C:\Program Files\NetDrive\wdService.exe

--

End of file - 6550 bytes

-- Files created between 2007-11-13 and 2007-12-13 -----------------------------

2007-12-13 22:33:02 0 dr-h----- C:\Documents and Settings\Raf\Recent

2007-12-13 01:51:25 0 d-------- C:\Program Files\Java

2007-12-13 01:50:45 0 d-------- C:\Program Files\Fichiers communs\Java

2007-12-13 01:43:49 0 d-------- C:\Program Files\SmartSound Software Inc

2007-12-12 22:58:14 0 d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files

2007-12-12 18:43:00 0 d-------- C:\Documents and Settings\All Users\Application Data\Avira

2007-12-12 18:16:34 39331237 --a------ C:\KasperSky 2006 All in One.exe <Not Verified; ; AutoPlay Media Studio 6.0 Launcher>

2007-12-12 18:06:26 0 drahs---- C:\autorun.inf

2007-12-12 13:45:48 29184 --a------ C:\WINDOWS\system32\WS2Fix.exe

2007-12-12 13:45:48 289144 --a------ C:\WINDOWS\system32\VCCLSID.exe <Not Verified; S!Ri; >

2007-12-12 13:45:48 288417 --a------ C:\WINDOWS\system32\SrchSTS.exe <Not Verified; S!Ri; SrchSTS>

2007-12-12 13:45:48 53248 --a------ C:\WINDOWS\system32\Process.exe <Not Verified; http://www.beyondlogic.org; Command Line Process Utility>

2007-12-12 13:45:48 51200 --a------ C:\WINDOWS\system32\dumphive.exe

2007-12-12 12:20:31 0 d-------- C:\Downloads

2007-12-12 12:16:36 0 d-------- C:\Program Files\Trend Micro

2007-12-11 20:38:20 0 d-------- C:\Documents and Settings\Raf\Application Data\Grisoft

2007-12-11 19:12:59 0 d-------- C:\Documents and Settings\Administrateur\Application Data\Macromedia

2007-12-11 18:53:43 0 d-------- C:\Documents and Settings\Administrateur\Application Data\Grisoft

2007-12-11 18:53:33 0 d-------- C:\Documents and Settings\All Users\Application Data\Grisoft

2007-12-11 18:48:43 0 d-------- C:\Documents and Settings\Administrateur\Application Data\Mozilla

2007-12-10 22:29:27 0 d-------- C:\WINDOWS\ERUNT

2007-12-10 22:04:42 0 d-------- C:\hijackthis

2007-12-10 02:13:03 0 d-------- C:\AVG

2007-12-10 01:43:52 0 d-------- C:\Program Files\LizardTech

2007-12-10 00:23:19 0 d-------- C:\Program Files\Alwil Software

2007-12-09 23:47:56 7340032 --a------ C:\Documents and Settings\Raf\ntuser.dat

2007-12-09 23:47:53 1572864 --a------ C:\Documents and Settings\LocalService\ntuser.dat

2007-12-09 13:26:28 0 dr-h----- C:\Documents and Settings\Administrateur\Recent

2007-12-09 10:48:41 1634 --a------ C:\WINDOWS\system32\tmp.reg

2007-12-09 00:09:35 0 d-------- C:\Documents and Settings\Administrateur\Application Data\TuneUp Software

2007-12-06 22:58:57 0 d-------- C:\Documents and Settings\All Users\Application Data\Adobe

2007-11-27 18:57:36 0 d-------- C:\Program Files\CHIPDRIVE

-- Find3M Report ---------------------------------------------------------------

2007-12-13 01:59:08 0 d-------- C:\Program Files\FlashGet

2007-12-13 01:52:09 0 d-------- C:\Program Files\adslTV

2007-12-13 01:52:01 0 d-------- C:\Documents and Settings\Raf\Application Data\vlc

2007-12-13 01:50:45 0 d-------- C:\Program Files\Fichiers communs

2007-12-13 01:46:43 0 d--h----- C:\Program Files\InstallShield Installation Information

2007-12-13 01:33:21 0 d-------- C:\Program Files\Pinnacle

2007-12-13 01:29:27 0 d-------- C:\Program Files\Foxit Software

2007-12-13 01:28:33 0 d-------- C:\Program Files\Boilsoft ASF Converter

2007-12-12 19:07:47 0 d-------- C:\Program Files\Windows Media Connect

2007-12-12 19:05:14 0 d-------- C:\Program Files\Realtek AC97

2007-12-12 17:31:34 1622016 --a------ C:\WINDOWS\system32\nwiz.exe

2007-12-12 17:31:25 1339392 --a------ C:\WINDOWS\system32\nvdspsch.exe

2007-12-12 17:30:53 1298432 --a------ C:\WINDOWS\system32\dxdiag.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 17:30:31 2920448 --a------ C:\WINDOWS\UNSIPPS.exe <Not Verified; Nero AG; Nero Web Engine>

2007-12-12 17:30:30 3051520 --a------ C:\WINDOWS\UNNMP.exe <Not Verified; Nero AG; Nero WebEngine>

2007-12-12 17:30:29 3051520 --a------ C:\WINDOWS\UNNMIX.exe <Not Verified; Nero AG; Nero WebEngine>

2007-12-12 17:30:29 3051520 --a------ C:\WINDOWS\UNNeroVision.exe <Not Verified; Nero AG; Nero WebEngine>

2007-12-12 15:38:52 24576 --a------ C:\WINDOWS\system32\ZyDelReg.exe <Not Verified; ; ZyDelReg Application>

2007-12-12 15:38:51 30720 --a------ C:\WINDOWS\system32\xcopy.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:51 32256 --a------ C:\WINDOWS\system32\wupdmgr.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:50 146432 --a------ C:\WINDOWS\system32\WudfHost.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:49 114688 --a------ C:\WINDOWS\system32\wscript.exe <Not Verified; Microsoft Corporation; Microsoft ® Windows Script Host>

2007-12-12 15:38:49 13824 --a------ C:\WINDOWS\system32\wscntfy.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:49 5632 --a------ C:\WINDOWS\system32\write.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:49 32768 --a------ C:\WINDOWS\system32\wpnpinst.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:48 17408 --a------ C:\WINDOWS\system32\wpdshextautoplay.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:48 32256 --a------ C:\WINDOWS\system32\wpabaln.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:46 194560 --a------ C:\WINDOWS\system32\wisptis.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:45 5632 --a------ C:\WINDOWS\system32\winver.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:45 11776 --a------ C:\WINDOWS\system32\winmsd.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:44 119808 --a------ C:\WINDOWS\system32\winmine.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:44 8192 --a------ C:\WINDOWS\system32\winhlp32.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:43 438784 --a------ C:\WINDOWS\system32\wiaacmgr.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:42 66560 --a------ C:\WINDOWS\system32\wextract.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:42 8704 --a------ C:\WINDOWS\system32\wdfmgr.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:41 51712 --a------ C:\WINDOWS\system32\w32tm.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:41 34304 --a------ C:\WINDOWS\system32\vssadmin.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:40 102912 --a------ C:\WINDOWS\system32\verifier.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:40 28672 --a------ C:\WINDOWS\system32\verclsid.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:39 8704 --a------ C:\WINDOWS\system32\uwdf.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:39 50176 --a------ C:\WINDOWS\system32\utilman.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:38 69632 --a------ C:\WINDOWS\system32\usrshuta.exe <Not Verified; U.S. Robotics Corporation; U.S. Robotics Modem Driver>

2007-12-12 15:38:38 61440 --a------ C:\WINDOWS\system32\usrprbda.exe <Not Verified; U.S. Robotics Corporation; U.S. Robotics modem>

2007-12-12 15:38:38 77824 --a------ C:\WINDOWS\system32\usrmlnka.exe <Not Verified; U.S. Robotics Corporation; U.S. Robotics Modem Driver>

2007-12-12 15:38:37 16896 --a------ C:\WINDOWS\system32\upnpcont.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:37 4096 --a------ C:\WINDOWS\system32\unlodctr.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:36 63488 --a------ C:\WINDOWS\system32\unam4ie.exe <Not Verified; Microsoft Corporation; DirectShow>

2007-12-12 15:38:36 24576 --a------ C:\WINDOWS\system32\Ulead Photo Explorer 8.scr <Not Verified; Ulead Systems, Inc.; Ulead Photo Explorer>

2007-12-12 15:38:35 17408 --a------ C:\WINDOWS\system32\tsshutdn.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:35 16896 --a------ C:\WINDOWS\system32\tskill.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:35 14848 --a------ C:\WINDOWS\system32\tsdiscon.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:34 44544 --a------ C:\WINDOWS\system32\tscupgrd.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:34 15360 --a------ C:\WINDOWS\system32\tscon.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:34 32256 --a------ C:\WINDOWS\system32\tracert6.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:34 13312 --a------ C:\WINDOWS\system32\tracert.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:34 347136 --a------ C:\WINDOWS\system32\tourstart.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:33 17920 --a------ C:\WINDOWS\system32\tftp.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:32 78336 --a------ C:\WINDOWS\system32\telnet.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:32 19456 --a------ C:\WINDOWS\system32\tcpsvcs.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:32 13312 --a------ C:\WINDOWS\system32\tcmsetup.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:32 143360 --a------ C:\WINDOWS\system32\taskmgr.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:32 15872 --a------ C:\WINDOWS\system32\taskman.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:31 3072 --a------ C:\WINDOWS\system32\systray.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:31 107520 --a------ C:\WINDOWS\system32\sysocmgr.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:31 37888 --a------ C:\WINDOWS\system32\syskey.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:30 51200 --a------ C:\WINDOWS\system32\syncapp.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:30 9216 --a------ C:\WINDOWS\system32\subst.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:29 14848 --a------ C:\WINDOWS\system32\stimon.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:28 684032 --a------ C:\WINDOWS\system32\sstext3d.scr <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:28 14336 --a------ C:\WINDOWS\system32\ssstars.scr <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:28 610304 --a------ C:\WINDOWS\system32\sspipes.scr <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:28 18944 --a------ C:\WINDOWS\system32\ssmyst.scr <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:28 47104 --a------ C:\WINDOWS\system32\ssmypics.scr <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:28 20992 --a------ C:\WINDOWS\system32\ssmarque.scr <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:28 393216 --a------ C:\WINDOWS\system32\ssflwbox.scr <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:27 19968 --a------ C:\WINDOWS\system32\ssbezier.scr <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:27 708608 --a------ C:\WINDOWS\system32\ss3dfo.scr <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:26 11776 --a------ C:\WINDOWS\system32\spnpinst.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:26 539136 --a------ C:\WINDOWS\system32\spider.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:25 25088 --a------ C:\WINDOWS\system32\sort.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:25 57344 --a------ C:\WINDOWS\system32\sol.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:24 139264 --a------ C:\WINDOWS\system32\sndvol32.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:24 133120 --a------ C:\WINDOWS\system32\sndrec32.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:24 8192 --a------ C:\WINDOWS\system32\smbinst.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:24 26112 --a------ C:\WINDOWS\system32\skeys.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:23 71168 --a------ C:\WINDOWS\system32\sigverif.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:23 20480 --a------ C:\WINDOWS\system32\shutdown.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:23 78848 --a------ C:\WINDOWS\system32\shrpubw.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:23 42496 --a------ C:\WINDOWS\system32\shmgrate.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:21 15360 --a------ C:\WINDOWS\system32\shadow.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:21 10240 --a------ C:\WINDOWS\system32\sfc.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:21 23040 --a------ C:\WINDOWS\system32\setup.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:21 19968 --a------ C:\WINDOWS\system32\SetStr.exe <Not Verified; Radium; Radium MP3 codec configuration tool>

2007-12-12 15:38:21 32768 --a------ C:\WINDOWS\system32\sethc.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:20 78848 --a------ C:\WINDOWS\system32\sdbinst.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:19 9216 --a------ C:\WINDOWS\system32\scrnsave.scr <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:19 31232 --a------ C:\WINDOWS\system32\sc.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:19 13824 --a------ C:\WINDOWS\system32\savedump.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:18 16384 --a------ C:\WINDOWS\system32\rwinsta.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:18 14336 --a------ C:\WINDOWS\system32\runonce.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:18 17408 --a------ C:\WINDOWS\system32\runas.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:18 78336 --a------ C:\WINDOWS\system32\rtcshare.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:17 49664 --a------ C:\WINDOWS\system32\rsmui.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows Whistler®>

2007-12-12 15:38:17 24576 --a------ C:\WINDOWS\system32\rsmsink.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows Whistler®>

2007-12-12 15:38:17 53248 --a------ C:\WINDOWS\system32\rsm.exe <Not Verified; Microsoft Corp; Système d'exploitation Microsoft® Windows ® 2000>

2007-12-12 15:38:17 15872 --a------ C:\WINDOWS\system32\rsh.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:16 25600 --a------ C:\WINDOWS\system32\routemon.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:16 21504 --a------ C:\WINDOWS\system32\route.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:15 14848 --a------ C:\WINDOWS\system32\rexec.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:15 10240 --a------ C:\WINDOWS\system32\reset.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:15 12800 --a------ C:\WINDOWS\system32\replace.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:15 4608 --a------ C:\WINDOWS\system32\regwiz.exe <Not Verified; Microsoft; RegWizExe>

2007-12-12 15:38:15 12288 --a------ C:\WINDOWS\system32\regsvr32.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:14 33792 --a------ C:\WINDOWS\system32\regini.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:14 3584 --a------ C:\WINDOWS\system32\regedt32.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:14 53248 --a------ C:\WINDOWS\system32\reg.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:14 7168 --a------ C:\WINDOWS\system32\recover.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:14 67072 --a------ C:\WINDOWS\system32\rdshost.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:14 13824 --a------ C:\WINDOWS\system32\rdsaddin.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:13 62464 --a------ C:\WINDOWS\system32\rdpclip.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:13 23040 --a------ C:\WINDOWS\system32\rcp.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:13 35840 --a------ C:\WINDOWS\system32\rcimlby.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:13 57344 --a------ C:\WINDOWS\system32\rasphone.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:12 11776 --a------ C:\WINDOWS\system32\rasdial.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:12 11776 --a------ C:\WINDOWS\system32\rasautou.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:11 22528 --a------ C:\WINDOWS\system32\qwinsta.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:11 20992 --a------ C:\WINDOWS\system32\qprocess.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:11 17408 --a------ C:\WINDOWS\system32\qappsrv.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:09 406016 --a------ C:\WINDOWS\system32\PSDrvCheck.exe

2007-12-12 15:38:09 9728 --a------ C:\WINDOWS\system32\proxycfg.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:08 50688 --a------ C:\WINDOWS\system32\proquota.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:08 109568 --a------ C:\WINDOWS\system32\progman.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:08 151552 --a------ C:\WINDOWS\system32\prntfix.exe <Not Verified; ; prntfix Application>

2007-12-12 15:38:08 9216 --a------ C:\WINDOWS\system32\print.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:07 49152 --a------ C:\WINDOWS\system32\powercfg.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:07 34304 --a------ C:\WINDOWS\system32\ping6.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:06 19456 --a------ C:\WINDOWS\system32\ping.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:06 15872 --a------ C:\WINDOWS\system32\perfmon.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:05 15360 --a------ C:\WINDOWS\system32\pentnt.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:38:05 22528 --a------ C:\WINDOWS\system32\pathping.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:05 59904 --a------ C:\WINDOWS\system32\packager.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:04 41984 --a------ C:\WINDOWS\system32\osuninst.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:38:04 216576 --a------ C:\WINDOWS\system32\osk.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:58 223232 -ra------ C:\WINDOWS\system32\nvsataconnection.exe

2007-12-12 15:37:53 249344 -ra------ C:\WINDOWS\system32\NvRaidMan.exe

2007-12-12 15:37:51 442368 --a------ C:\WINDOWS\system32\nvappbar.exe

2007-12-12 15:37:51 420864 --a------ C:\WINDOWS\system32\ntvdm.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:51 31744 --a------ C:\WINDOWS\system32\ntsd.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:49 79360 --a------ C:\WINDOWS\system32\nslookup.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:49 70656 --a------ C:\WINDOWS\system32\notepad.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:48 37888 --a------ C:\WINDOWS\system32\netstat.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:48 88576 --a------ C:\WINDOWS\system32\netsh.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:48 335872 --a------ C:\WINDOWS\system32\netsetup.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:46 124928 --a------ C:\WINDOWS\system32\net1.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:46 42496 --a------ C:\WINDOWS\system32\net.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:46 4096 --a------ C:\WINDOWS\system32\nddeapir.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:46 21504 --a------ C:\WINDOWS\system32\nbtstat.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:45 55296 --a------ C:\WINDOWS\system32\narrator.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:43 411648 --a------ C:\WINDOWS\system32\mstsc.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:43 12288 --a------ C:\WINDOWS\system32\mstinit.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:43 6656 --a------ C:\WINDOWS\system32\msswchx.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:41 347648 --a------ C:\WINDOWS\system32\mspaint.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:39 45568 --a------ C:\WINDOWS\system32\mshta.exe <Not Verified; Microsoft Corporation; Windows® Internet Explorer>

2007-12-12 15:37:39 128000 --a------ C:\WINDOWS\system32\mshearts.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:39 22528 --a------ C:\WINDOWS\system32\msg.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:36 14336 --a------ C:\WINDOWS\system32\mrinfo.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:36 22016 --a------ C:\WINDOWS\system32\mpnotify.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:36 124928 --a------ C:\WINDOWS\system32\mplay32.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:35 8192 --a------ C:\WINDOWS\system32\mountvol.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:35 144384 --a------ C:\WINDOWS\system32\mobsync.exe <Not Verified; Microsoft Corporation; Gestionnaire de synchronisation Microsoft>

2007-12-12 15:37:34 816128 --a------ C:\WINDOWS\system32\mmc.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:33 52736 --a------ C:\WINDOWS\system32\migpwd.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:32 85504 --a------ C:\WINDOWS\system32\makecab.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:32 73216 --a------ C:\WINDOWS\system32\magnify.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:30 9216 --a------ C:\WINDOWS\system32\lpr.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:30 6144 --a------ C:\WINDOWS\system32\lpq.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:30 515584 --a------ C:\WINDOWS\system32\logonui.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:29 221696 --a------ C:\WINDOWS\system32\logon.scr <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:29 15872 --a------ C:\WINDOWS\system32\logoff.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:29 61952 --a------ C:\WINDOWS\system32\logman.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:29 100864 --a------ C:\WINDOWS\system32\logagent.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:28 5120 --a------ C:\WINDOWS\system32\lodctr.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:28 26624 --a------ C:\WINDOWS\system32\lnkstub.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:28 30208 --a------ C:\WINDOWS\system32\lights.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:25 9728 --a------ C:\WINDOWS\system32\label.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:24 425984 --a------ C:\WINDOWS\system32\keystone.exe

2007-12-12 15:37:19 24576 --a------ C:\WINDOWS\system32\ipxroute.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:18 53760 --a------ C:\WINDOWS\system32\ipv6.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:18 46080 --a------ C:\WINDOWS\system32\ipsec6.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:17 58368 --a------ C:\WINDOWS\system32\ipconfig.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:16 114688 --a------ C:\WINDOWS\system32\iexpress.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:12 8704 --a------ C:\WINDOWS\system32\hostname.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:11 16384 --a------ C:\WINDOWS\system32\help.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:11 39424 --a------ C:\WINDOWS\system32\grpconv.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:10 46080 --a------ C:\WINDOWS\system32\ftp.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:10 61952 --a------ C:\WINDOWS\system32\fsutil.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:10 193024 --a------ C:\WINDOWS\system32\fsquirt.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:09 55808 --a------ C:\WINDOWS\system32\freecell.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:09 7168 --a------ C:\WINDOWS\system32\forcedos.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:09 21504 --a------ C:\WINDOWS\system32\fontview.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:09 23040 --a------ C:\WINDOWS\system32\fltmc.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:08 3072 --a------ C:\WINDOWS\system32\fixmapi.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:08 10240 --a------ C:\WINDOWS\system32\finger.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:08 29184 --a------ C:\WINDOWS\system32\findstr.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:08 9216 --a------ C:\WINDOWS\system32\find.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:08 14848 --a------ C:\WINDOWS\system32\fc.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:07 45568 --a------ C:\WINDOWS\system32\extrac32.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:07 16896 --a------ C:\WINDOWS\system32\expand.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:07 9216 --a------ C:\WINDOWS\system32\eventvwr.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:07 195072 --a------ C:\WINDOWS\system32\eudcedit.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:06 39424 --a------ C:\WINDOWS\system32\esentutl.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:05 180224 --a------ C:\WINDOWS\system32\dwwin.exe <Not Verified; Microsoft Corporation; Microsoft Application Error Reporting>

2007-12-12 15:37:05 17920 --a------ C:\WINDOWS\system32\dvdupgrd.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:05 59392 --a------ C:\WINDOWS\system32\dvdplay.exe <Not Verified; ; Application dvdplay>

2007-12-12 15:37:04 47104 --a------ C:\WINDOWS\system32\drwtsn32.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:04 249856 --a------ C:\WINDOWS\system32\drmupgds.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:03 83456 --a------ C:\WINDOWS\system32\dpvsetup.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:03 18432 --a------ C:\WINDOWS\system32\dpnsvr.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:03 30208 --a------ C:\WINDOWS\system32\dplaysvr.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:02 10752 --a------ C:\WINDOWS\system32\doskey.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:02 15872 --a------ C:\WINDOWS\system32\dmremote.exe <Not Verified; Microsoft Corp.; Logical Disk Manager for Windows NT>

2007-12-12 15:37:01 4608 --a------ C:\WINDOWS\system32\dllhst3g.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:37:00 19456 --a------ C:\WINDOWS\system32\diskperf.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:37:00 167936 --a------ C:\WINDOWS\system32\diskpart.exe <Not Verified; Microsoft Corporation; Application Diskpart Microsoft Corporation>

2007-12-12 15:36:59 85504 --a------ C:\WINDOWS\system32\diantz.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:59 82432 --a------ C:\WINDOWS\system32\dfrgfat.exe <Not Verified; Microsoft Corp. et Executive Software International, Inc.; Défragmenteur de disque Windows>

2007-12-12 15:36:58 25088 --a------ C:\WINDOWS\system32\defrag.exe <Not Verified; Microsoft Corp. and Executive Software International, Inc.; Windows Disk Defragmenter>

2007-12-12 15:36:58 31744 --a------ C:\WINDOWS\system32\ddeshare.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:58 5120 --a------ C:\WINDOWS\system32\dcomcnfg.exe <Not Verified; Microsoft Corporation; COM Services>

2007-12-12 15:36:56 98304 --a------ C:\WINDOWS\system32\cscript.exe <Not Verified; Microsoft Corporation; Microsoft ® Windows Script Host>

2007-12-12 15:36:55 13824 --a------ C:\WINDOWS\system32\convert.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:55 8192 --a------ C:\WINDOWS\system32\control.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:55 27648 --a------ C:\WINDOWS\system32\conime.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:54 18432 --a------ C:\WINDOWS\system32\compact.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:54 15872 --a------ C:\WINDOWS\system32\comp.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:54 65536 --a------ C:\WINDOWS\system32\cmstp.exe <Not Verified; Microsoft Corporation; Microsoft® Connection Manager>

2007-12-12 15:36:53 40448 --a------ C:\WINDOWS\system32\cmmon32.exe <Not Verified; Microsoft Corporation; Microsoft® Connection Manager>

2007-12-12 15:36:53 47104 --a------ C:\WINDOWS\system32\cmdl32.exe <Not Verified; Microsoft Corporation; Microsoft® Connection Manager>

2007-12-12 15:36:53 400896 --a------ C:\WINDOWS\system32\cmd.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:52 104448 --a------ C:\WINDOWS\system32\clipbrd.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:52 65536 --a------ C:\WINDOWS\system32\cleanmgr.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:51 7680 --a------ C:\WINDOWS\system32\ckcnv.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:51 8192 --a------ C:\WINDOWS\system32\cidaemon.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:51 11264 --a------ C:\WINDOWS\system32\chkntfs.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:51 11776 --a------ C:\WINDOWS\system32\chkdsk.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:51 45056 --a------ C:\WINDOWS\system32\ChCfg.exe

2007-12-12 15:36:51 80896 --a------ C:\WINDOWS\system32\charmap.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:50 4608 --a------ C:\WINDOWS\system32\carpserv.exe <Not Verified; Conexant Systems, Inc.; Conexant carpserv>

2007-12-12 15:36:49 115200 --a------ C:\WINDOWS\system32\calc.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:49 19456 --a------ C:\WINDOWS\system32\cacls.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:48 5120 --a------ C:\WINDOWS\system32\bootvrfy.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:48 4608 --a------ C:\WINDOWS\system32\bootok.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:48 71680 --a------ C:\WINDOWS\system32\blastcln.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:47 14336 --a------ C:\WINDOWS\system32\auditusr.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:46 11264 --a------ C:\WINDOWS\system32\attrib.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:46 11264 --a------ C:\WINDOWS\system32\atmadm.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:46 25088 --a------ C:\WINDOWS\system32\at.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:45 19968 --a------ C:\WINDOWS\system32\arp.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:45 98304 --a------ C:\WINDOWS\system32\ahui.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:44 4096 --a------ C:\WINDOWS\system32\actmovie.exe <Not Verified; Microsoft Corporation; DirectShow>

2007-12-12 15:36:44 189952 --a------ C:\WINDOWS\system32\accwiz.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:43 288256 --a------ C:\WINDOWS\winhlp32.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:43 2560 --a------ C:\WINDOWS\_MSRSTRT.EXE

2007-12-12 15:36:42 139264 --a------ C:\WINDOWS\War3Unin.exe <Not Verified; Blizzard Entertainment; Warcraft III Uninstaller>

2007-12-12 15:36:42 106496 --a------ C:\WINDOWS\UPSCR.Scr

2007-12-12 15:36:42 129024 --a------ C:\WINDOWS\UNWISE.EXE

2007-12-12 15:36:42 57344 --a------ C:\WINDOWS\Unwash6.exe <Not Verified; Webroot Software, Inc.; >

2007-12-12 15:36:41 90112 --a------ C:\WINDOWS\unvise32.exe <Not Verified; MindVision Software; Installer VISE>

2007-12-12 15:36:41 99840 --a------ C:\WINDOWS\UninstallFirefox.exe

2007-12-12 15:36:41 304128 --a------ C:\WINDOWS\unin040c.exe <Not Verified; InstallShield Corporation, Inc.; InstallShield Deinstaller>

2007-12-12 15:36:41 25600 --a------ C:\WINDOWS\twunk_32.exe <Not Verified; Twain Working Group; Twain Thunker>

2007-12-12 15:36:40 15872 --a------ C:\WINDOWS\TASKMAN.EXE <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:40 73216 --a------ C:\WINDOWS\ST6UNST.EXE <Not Verified; Microsoft Corporation; Microsoft® Visual Basic for Windows>

2007-12-12 15:36:39 153088 --a------ C:\WINDOWS\regedit.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:39 135168 --a------ C:\WINDOWS\ov519cap.exe <Not Verified; OmniVision Technologies, Inc.; OmniVision USB Camera OV519>

2007-12-12 15:36:38 70656 --a------ C:\WINDOWS\NOTEPAD.EXE <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:38 529408 --a------ C:\WINDOWS\mHotkey.exe <Not Verified; Chicony; Chicony Multimedia Driver>

2007-12-12 15:36:38 320512 --a------ C:\WINDOWS\IsUninst.exe <Not Verified; InstallShield Software Corporation; InstallShield® unInstaller>

2007-12-12 15:36:37 310784 --a------ C:\WINDOWS\IsUn040c.exe <Not Verified; InstallShield Software Corporation; InstallShield® unInstaller>

2007-12-12 15:36:37 10752 --a------ C:\WINDOWS\hh.exe <Not Verified; Microsoft Corporation; HTML Help>

2007-12-12 15:36:36 40960 --a------ C:\WINDOWS\CleanDev.exe <Not Verified; ; CleanDevice>

2007-12-12 15:36:36 32256 --a------ C:\WINDOWS\amcap.exe

2007-12-12 15:36:36 315392 --a------ C:\WINDOWS\alcupd.exe <Not Verified; Realtek Semiconductor Corp.; Realtek AC'97 Update driver Tool>

2007-12-12 15:36:36 217088 --a------ C:\WINDOWS\Alcrmv.exe <Not Verified; Realtek Semiconductor Corp.; Realtek AC'97 Removing driver Tool>

2007-12-12 15:36:34 295424 --a------ C:\WINDOWS\system32\vssvc.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:33 18432 --a------ C:\WINDOWS\system32\ups.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:33 93184 --a------ C:\WINDOWS\system32\smlogsvc.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:32 57856 --a------ C:\WINDOWS\system32\spoolsv.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:32 100352 --a------ C:\WINDOWS\system32\scardsvr.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:31 142336 --a------ C:\WINDOWS\system32\sessmgr.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:31 132608 --a------ C:\WINDOWS\system32\rsvp.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:31 75264 --a------ C:\WINDOWS\system32\locator.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:29 114176 --a------ C:\WINDOWS\system32\netdde.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:28 78848 --a------ C:\WINDOWS\system32\msiexec.exe <Not Verified; Microsoft Corporation; Windows Installer - Unicode>

2007-12-12 15:36:28 6144 --a------ C:\WINDOWS\system32\msdtc.exe <Not Verified; Microsoft Corporation; Microsoft Distributed Transaction Coordinator>

2007-12-12 15:36:28 32768 --a------ C:\WINDOWS\system32\mnmsrvc.exe <Not Verified; Microsoft Corporation; Windows® NetMeeting®>

2007-12-12 15:36:27 150016 --a------ C:\WINDOWS\system32\imapi.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:25 225280 --a------ C:\WINDOWS\system32\dmadmin.exe <Not Verified; Microsoft Corp., Veritas Software; Gestionnaire de disque logique pour Windows NT>

2007-12-12 15:36:24 33280 --a------ C:\WINDOWS\system32\clipsrv.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:24 5632 --a------ C:\WINDOWS\system32\cisvc.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:23 44544 --a------ C:\WINDOWS\system32\alg.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:22 33792 --a------ C:\WINDOWS\system32\rundll32.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:22 10752 --a------ C:\WINDOWS\system32\dumprep.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:22 577536 --a------ C:\WINDOWS\soundman.exe <Not Verified; Realtek Semiconductor Corp.; Realtek Sound Manager>

2007-12-12 15:36:21 25088 --a------ C:\WINDOWS\system32\userinit.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-12 15:36:20 15360 --a------ C:\WINDOWS\system32\ctfmon.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>

2007-12-12 15:36:18 1037312 --a------ C:\WINDOWS\explorer.exe <Not Verified; Microsoft Corporation; Système d'exploitation Microsoft® Windows®>

2007-12-11 23:07:08 8019 --a------ C:\WINDOWS\mozver.dat

2007-12-10 01:40:00 0 d-------- C:\Program Files\AvRack

2007-12-10 01:39:54 0 d-------- C:\Program Files\Foxit Reader

2007-12-10 01:39:52 0 d-------- C:\Program Files\HP Adjustment Pattern Utility

2007-12-10 01:39:47 0 d-------- C:\Program Files\Messenger

2007-12-10 01:39:44 0 d-------- C:\Program Files\Movie Maker

2007-12-10 01:39:43 0 d-------- C:\Program Files\Opera

2007-12-10 01:39:43 0 d-------- C:\Program Files\NetDrive

2007-12-10 01:39:42 0 d-------- C:\Program Files\PDFCreator

2007-12-10 01:39:35 0 d-------- C:\Program Files\TuneUp Utilities 2007

2007-12-10 01:39:34 0 d-------- C:\Program Files\Windows Media Connect 2

2007-12-10 01:39:34 0 d-------- C:\Program Files\Windows Journal Viewer

2007-12-10 01:39:34 0 d-------- C:\Program Files\Warcraft III

2007-12-10 01:39:34 0 d-------- C:\Program Files\UltraISO

2007-12-09 16:12:38 504910 --a------ C:\WINDOWS\system32\perfh00C.dat

2007-12-09 16:12:38 83286 --a------ C:\WINDOWS\system32\perfc00C.dat

2007-12-06 23:00:41 0 d-------- C:\Documents and Settings\Raf\Application Data\Adobe

2007-12-06 22:59:00 0 d-------- C:\Program Files\Fichiers communs\Adobe

2007-11-28 16:38:03 0 d-------- C:\Program Files\skype

2007-11-27 18:53:17 0 d-------- C:\Program Files\SIM Manager Pro

2007-11-27 12:01:02 3480 --a------ C:\WINDOWS\AUTOLNCH.REG

2007-10-28 19:34:40 0 d-------- C:\Documents and Settings\Raf\Application Data\OfficeUpdate12

2007-10-28 19:27:07 0 d-------- C:\Program Files\Fichiers communs\ODBC

2007-10-21 14:55:48 0 d-------- C:\Program Files\Picasa2

2007-10-06 23:29:18 66832 --a------ C:\Documents and Settings\Raf\Application Data\GDIPFONTCACHEV1.DAT

2007-09-17 17:40:56 524288 --a------ C:\WINDOWS\opuc.dll <Not Verified; Microsoft Corporation; 2007 Microsoft Office system>

-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SoundMan"="SOUNDMAN.EXE" [12/12/2007 15:36 C:\WINDOWS\soundman.exe]

"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [11/06/2007 10:25]

"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [22/10/2006 12:22]

"egui"="C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" [14/11/2007 15:05]

"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [25/09/2007 01:11]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [12/12/2007 15:36]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]

"Picasa Media Detector"=C:\Program Files\Picasa2\PicasaMediaDetector.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]

"DisableRegistryTools"=0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

"NoRecentDocsHistory"=1 (0x1)

"NoSMHelp"=01000000

"NoRecentDocsMenu"=01000000

"NoSMMyDocs"=01000000

"NoSMMyPictures"=01000000

"StartMenuLogOff"=1 (0x1)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

"Authentication Packages"= msv1_0 C:\WINDOWS\system32\vtstq.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]

"PinnacleDriverCheck"=C:\WINDOWS\system32\\PSDrvCheck.exe

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs

UxTuneUp

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]

AutoRun\command- D:\Autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bf9ec1c1-6a2f-11d9-92be-806d6172696f}]

AutoRun\command- E:\Autorun.exe

-- End of Deckard's System Scanner: finished at 2007-12-13 22:35:42 ------------

Modifié le 13 décembre 2007 par rafmiouc

bruce lee · le 14 décembre 2007

Re,

J'ai posté une réponse là: http://forum.zebulon.fr/index.php?s=&s...t&p=1142608

rafmiouc · le 14 décembre 2007

Otmoveit

File/Folder C:\WINDOWS\system32\awttutq.dll not found.

Created on 12/14/2007 21:58:56

Deckard's System Scanner v20071014.68

Run by Raf on 2007-12-14 22:01:45

Computer is in Safe Mode with Networking.

--------------------------------------------------------------------------------

-- HijackThis Clone ------------------------------------------------------------

Emulating logfile of Trend Micro HijackThis v2.0.2

Scan saved at 2007-12-14 22:02:16

Platform: Windows XP Service Pack 2 (5.01.2600)

MSIE: Internet Explorer (7.00.6000.16574)

Boot mode: Safe mode with network support