Aller au contenu

pyp

Membres
  • Compteur de contenus

    94
  • Inscription

  • Dernière visite

Autres informations

  • Mes langues
    francais anglais allemand

pyp's Achievements

Member

Member (4/12)

0

Réputation sur la communauté

  1. Bon et bien je vais avoir du mal à faire cela puisque mon PC ne veut plus démarrer. Quand j'appuie sur le bouton d'allumage, l'écran s'allume mais reste noir rétroéclairé. Les voyants sont aussi allumé mais il ne se passe rien d'autre. Cela est arrivé juste après l'installation d'une mise à jour windows XP en voulant le rallumer (je n'ai pas un windows piraté pourtant). Des idées?
  2. Bonjour, Oui j'ai le même problème en mode sans échec, le pc se bloque meme plus rapidement! En plus maintenant à l'allumage il me dit qu'il y a une erreur avec shell.exe je m'occupe de poster les rapports ce week end car je n'ai pas eu le temps de poster au début de la semaine.
  3. Bonjour, Mon PC portable (asus eee 1000) se bloque, c'est à dire que l'image devient fixe, plus possible de bouger le curseur de la sourie, je ne peux plus activer les majuscules, etc... Même en attendant, il ne se débloque pas. Donc reset à chaque fois. Cela arrive quelque soit la tache que je suis en train de faire. Mais le plus souvent, cela arrive quand je suis internet, avec google chrome et IE. C'est meme systématique sur internet; donc je poste depuis un autre PC. Alors que dans les autres activités non. Je ne savais pas ou poster, je l'ai fait ici car je soupçonne un virus. Voilà j'attend vos conseils!
  4. Le PC marche bien. Je n'ai pas d'alerte antivir pour le moment. Juste le parapluie qui n'est pas tout le temps ouvert. Voici le dernier rapport: Information additionnelle File size: 476672 bytes MD5...: 7a35352bcdff34d0a6e59d8267b3fcb7 SHA1..: 2b0c4e0925a44fb06efc5cf06635cba473ccfdea SHA256: de1a0f47770e3f145d905b48430750c37e71f2424524f1b875c34159a6ece4bf ssdeep: 6144:Rgv3pRPs0QZPDF9zWaQFBTpxdIKxFh3UtTDFEg74JeCn5iQoI:C3+bFIaQB xdIKxFh3OTDmHYQ9 PEiD..: - PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x5bee timedatestamp.....: 0x4329ca6c (Thu Sep 15 19:24:28 2005) machinetype.......: 0x14c (I386) ( 7 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0x61d92 0x61e00 6.43 6ec5a9b46d3b8ee0b5e1cddfc337468e .rdata 0x63000 0x6e54 0x7000 5.66 0280874d80412d0c571055a96ed40afd .data 0x6a000 0x1720 0xe00 4.56 3f0976c6a05ce8ae362478b505aff3e2 PAGE 0x6c000 0x1a68 0x1c00 6.18 1a9e587f5602c0799065dbb2797e4f3d INIT 0x6e000 0x1192 0x1200 5.65 dba80d00714c9a391cbdc6c1e0a67b13 .rsrc 0x70000 0x428 0x600 2.56 cf38d7ee65641cb11ddd25b406366b6a .reloc 0x71000 0x701e 0x7200 6.63 ddcac8d8ce41ea0e84b7166d3f792f29 ( 2 imports ) > ntoskrnl.exe: _allmul, ExAllocatePoolWithTag, ExFreePool, InterlockedIncrement, InterlockedDecrement, KeBugCheckEx, RtlCopyUnicodeString, KeInitializeEvent, KeWaitForSingleObject, KeEnterCriticalRegion, KeLeaveCriticalRegion, KeSetEvent, KeClearEvent, IoFreeIrp, ZwClose, ObfDereferenceObject, IoUnregisterPlugPlayNotification, IoRegisterPlugPlayNotification, ExFreePoolWithTag, IoAllocateIrp, IoGetAttachedDeviceReference, ObfReferenceObject, IoGetRelatedDeviceObject, ObReferenceObjectByHandle, IoFileObjectType, ZwCreateFile, IofCallDriver, ZwDeleteKey, ZwDeleteValueKey, IoRequestDeviceEject, IoGetDeviceProperty, IoGetDriverObjectExtension, IoAllocateDriverObjectExtension, IoFreeMdl, MmUnlockPages, KeInsertQueueDpc, IofCompleteRequest, IoAcquireRemoveLockEx, IoInvalidateDeviceState, IoCreateSymbolicLink, PsGetVersion, MmGetSystemRoutineAddress, IoAllocateMdl, KeInitializeSpinLock, IoWMIWriteEvent, IoWMIRegistrationControl, KeDelayExecutionThread, RtlQueryRegistryValues, ZwOpenKey, KefReleaseSpinLockFromDpcLevel, ExAcquireFastMutexUnsafe, KefAcquireSpinLockAtDpcLevel, KeGetCurrentThread, ExReleaseFastMutexUnsafe, _purecall, IoFreeWorkItem, IoAllocateWorkItem, IoQueueWorkItem, KeQuerySystemTime, RtlCompareUnicodeString, RtlAnsiStringToUnicodeString, RtlInitAnsiString, KeSetImportanceDpc, KeSetTargetProcessorDpc, KeInitializeDpc, KeQueryActiveProcessors, MmMapLockedPagesSpecifyCache, IoBuildPartialMdl, IoReuseIrp, KeSetTimerEx, KeTickCount, KeInitializeTimer, MmBuildMdlForNonPagedPool, KeSetTimer, IoCancelIrp, KeInitializeTimerEx, DbgPrint, ZwCreateKey, ZwQueryValueKey, ZwSetValueKey, PoCallDriver, PoStartNextPowerIrp, IoReleaseRemoveLockEx, IoInvalidateDeviceRelations, KeResetEvent, IoGetStackLimits, ExInterlockedPopEntrySList, ExInterlockedPushEntrySList, ExInitializeNPagedLookasideList, IoInitializeRemoveLockEx, IoCreateDevice, IoIsWdmVersionAvailable, IoOpenDeviceRegistryKey, IoDeleteDevice, IoAttachDeviceToDeviceStack, IoDetachDevice, ExDeleteNPagedLookasideList, IoDeleteSymbolicLink, KdDebuggerNotPresent, KdDebuggerEnabled, ExFreeToPagedLookasideList, ExDeletePagedLookasideList, ExInitializePagedLookasideList, ExAllocateFromPagedLookasideList, KeSynchronizeExecution, IoConnectInterrupt, IoDisconnectInterrupt, KeRemoveQueueDpc, IoGetDmaAdapter, PoSetPowerState, IoReleaseCancelSpinLock, PoRequestPowerIrp, IoUnregisterShutdownNotification, IoRegisterLastChanceShutdownNotification, IoRegisterShutdownNotification, RtlFreeUnicodeString, IoSetDeviceInterfaceState, IoRegisterDeviceInterface, MmProbeAndLockPages, IoReleaseRemoveLockAndWaitEx, PsTerminateSystemThread, PsCreateSystemThread, KeReadStateEvent, RtlUnwind, ZwSetSecurityObject, ObOpenObjectByPointer, IoDeviceObjectType, RtlGetDaclSecurityDescriptor, RtlGetSaclSecurityDescriptor, RtlGetGroupSecurityDescriptor, RtlGetOwnerSecurityDescriptor, _snwprintf, RtlLengthSecurityDescriptor, SeCaptureSecurityDescriptor, SeExports, _wcsnicmp, RtlAddAccessAllowedAce, RtlLengthSid, wcschr, RtlAbsoluteToSelfRelativeSD, RtlSetDaclSecurityDescriptor, RtlCreateSecurityDescriptor, KeQueryTimeIncrement, ExAllocatePoolWithQuotaTag, DbgBreakPoint, PoSetSystemState, _vsnwprintf, RtlCompareMemory, KeCancelTimer, RtlInitUnicodeString > HAL.dll: KfLowerIrql, ExAcquireFastMutex, ExReleaseFastMutex, KeGetCurrentIrql, KfReleaseSpinLock, KfAcquireSpinLock, KfRaiseIrql ( 0 exports ) RDS...: NSRL Reference Data Set - pdfid.: - trid..: Win32 Executable Generic (68.0%) Generic Win/DOS Executable (15.9%) DOS Executable Generic (15.9%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) sigcheck: publisher....: Microsoft Corporation copyright....: © Microsoft Corporation. All rights reserved. product......: Microsoft_ Windows_ Operating System description..: XNA Common Controller Driver original name: xnacc.sys internal name: xnacc file version.: 6.0.5221.0 (vbl_ux_dev_checkin_gamesux_xinput(mmbuild).050915-1223) comments.....: n/a signers......: - signing date.: - verified.....: Unsigned
  5. 1er rapport: Logfile of random's system information tool 1.06 (written by random/random) Run by Pierre-Yves at 2010-04-21 18:52:33 Microsoft Windows XP Édition familiale Service Pack 3 System drive C: has 2 GB (5%) free of 45 GB Total RAM: 1023 MB (47% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 18:52:39, on 21/04/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.17023) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Wireless Console 2\wcourier.exe C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\ASUSTeK\ASUSDVD\PDVDServ.exe C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe C:\Program Files\ASUS\ASUS Live Update\ALU.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\ATK0100\HControl.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Documents and Settings\Pierre-Yves\Local Settings\Application Data\Google\Update\GoogleUpdate.exe C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\ATK0100\ATKOSD.exe C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe C:\Documents and Settings\Pierre-Yves\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Pierre-Yves\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Pierre-Yves\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Pierre-Yves\Mes documents\Downloads\RSIT (1).exe C:\Documents and Settings\Pierre-Yves\Bureau\Pierre-Yves.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe O4 - HKLM\..\Run: [intelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" O4 - HKLM\..\Run: [intelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless O4 - HKLM\..\Run: [EOUApp] "C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\ASUSTeK\ASUSDVD\PDVDServ.exe" O4 - HKLM\..\Run: [Power_Gear] C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1 O4 - HKLM\..\Run: [ASUS Live Update] C:\Program Files\ASUS\ASUS Live Update\ALU.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [ABLKSR] C:\WINDOWS\ABLKSR\ABLKSR.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [bCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Pierre-Yves\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.1...toUploader5.cab O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {91D4B4D5-E368-40AB-8F53-A37FA634B471} (Installer9Ctrl Class) - http://www.tellmemorecampus.com/bin/tol9inst.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100 O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: Intel® PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O24 - Desktop Component 0: (no name) - http://l.yimg.com/h/01131/js/answers-fe-fr.js -- End of file - 9804 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\AppleSoftwareUpdate.job C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1311777357-2900331866-1157244928-1005Core1cac8e9ffc98514.job C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-10-19 320920] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-03-16 279664] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}] Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll [2010-04-12 812528] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2009-11-03 556432] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-10-19 34816] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}] JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2008-10-19 73728] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-03-16 279664] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Wireless Console 2"=C:\Program Files\Wireless Console 2\wcourier.exe [2005-10-17 987136] "IntelZeroConfig"=C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe [2006-04-14 667718] "IntelWireless"=C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe [2006-04-14 602182] "EOUApp"=C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe [2006-04-14 569413] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2005-11-21 7335936] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2005-10-21 761945] "RemoteControl"=C:\Program Files\ASUSTeK\ASUSDVD\PDVDServ.exe [2004-11-02 32768] "Power_Gear"=C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe [2006-03-06 86016] "ASUS Live Update"=C:\Program Files\ASUS\ASUS Live Update\ALU.exe [2006-02-21 180224] "NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648] "ABLKSR"=C:\WINDOWS\ABLKSR\ABLKSR.exe [2006-01-02 61440] "RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-09-06 14850560] "HControl"=C:\WINDOWS\ATK0100\HControl.exe [2006-02-22 106496] "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-05-27 413696] "avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153] "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272] "Adobe ARM"=C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768] "BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2009-09-26 83312] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Google Update"=C:\Documents and Settings\Pierre-Yves\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-09-13 133104] "msnmsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2009-07-26 3883856] "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-07-13 68856] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] nwiz.exe /install [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe [2007-06-18 271360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL] C:\WINDOWS\sm56hlpr.exe [2005-05-26 544768] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe [2008-10-19 144792] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-07-13 68856] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] C:\Program Files\Winamp\winampa.exe [2008-04-01 36352] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Adobe Reader Speed Launch.lnk] C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^ASUS ChkMail.lnk] C:\PROGRA~1\ASUS\ASUSCH~1\ChkMail.exe [2003-09-12 32768] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 240128] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveAutoRun"=67108863 "NoDriveTypeAutoRun"=323 "NoDrives"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "HonorAutoRunSetting"= "NoDriveAutoRun"= "NoDriveTypeAutoRun"= "NoDrives"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\Messenger\MSMSGS.EXE"="C:\Program Files\Messenger\MSMSGS.EXE:*:Enabled:Windows Messenger" "C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent" "C:\Program Files\Winamp Remote\bin\Orb.exe"="C:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb" "C:\Program Files\Winamp Remote\bin\OrbTray.exe"="C:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray" "C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe"="C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" ======File associations====== .scr - open - "C:\WINDOWS\system32\notepad.exe" "%1" .scr - install - .scr - config - ======List of files/folders created in the last 1 months====== 2010-04-21 18:52:33 ----D---- C:\rsit 2010-04-19 12:41:16 ----SHD---- C:\Recycled 2010-04-19 12:29:50 ----A---- C:\ComboFix.txt 2010-04-19 12:24:27 ----D---- C:\WINDOWS\temp 2010-04-18 16:12:09 ----A---- C:\WINDOWS\ntbtlog.txt 2010-04-17 12:22:36 ----D---- C:\Program Files\Microsoft Synchronization Services 2010-04-17 12:21:47 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition 2010-04-17 12:21:05 ----D---- C:\Program Files\Microsoft Analysis Services 2010-04-17 12:18:32 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help 2010-04-17 11:46:28 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe 2010-04-17 11:46:16 ----D---- C:\Program Files\Fichiers communs\Adobe 2010-04-17 11:46:16 ----D---- C:\Program Files\Adobe 2010-04-17 11:19:02 ----D---- C:\FOUND.000 2010-04-17 10:57:09 ----D---- C:\Program Files\ZHPDiag 2010-04-17 10:56:51 ----HD---- C:\WINDOWS\$NtUninstallKB979683$ 2010-04-17 10:56:38 ----HD---- C:\WINDOWS\$NtUninstallKB980232$ 2010-04-17 10:54:45 ----HD---- C:\WINDOWS\$NtUninstallKB981349$ 2010-04-17 10:54:41 ----HD---- C:\WINDOWS\$NtUninstallKB978338$ 2010-04-17 10:54:35 ----HD---- C:\WINDOWS\$NtUninstallKB977816$ 2010-04-17 10:54:14 ----HD---- C:\WINDOWS\$NtUninstallKB978601$ 2010-04-17 10:53:59 ----HD---- C:\WINDOWS\$NtUninstallKB979309$ 2010-04-16 23:44:21 ----D---- C:\Documents and Settings\Pierre-Yves\Application Data\Malwarebytes 2010-04-16 23:43:18 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2010-04-16 23:43:15 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2010-04-13 12:50:39 ----D---- C:\Program Files\Avira 2010-04-13 12:50:39 ----D---- C:\Documents and Settings\All Users\Application Data\Avira 2010-04-13 12:24:34 ----A---- C:\Boot.bak 2010-04-13 12:24:32 ----RASHD---- C:\cmdcons 2010-04-13 12:22:21 ----A---- C:\WINDOWS\zip.exe 2010-04-13 12:22:21 ----A---- C:\WINDOWS\SWXCACLS.exe 2010-04-13 12:22:21 ----A---- C:\WINDOWS\SWSC.exe 2010-04-13 12:22:21 ----A---- C:\WINDOWS\SWREG.exe 2010-04-13 12:22:21 ----A---- C:\WINDOWS\sed.exe 2010-04-13 12:22:21 ----A---- C:\WINDOWS\PEV.exe 2010-04-13 12:22:21 ----A---- C:\WINDOWS\NIRCMD.exe 2010-04-13 12:22:21 ----A---- C:\WINDOWS\MBR.exe 2010-04-13 12:22:21 ----A---- C:\WINDOWS\grep.exe 2010-04-13 12:22:15 ----D---- C:\WINDOWS\ERDNT 2010-04-13 12:22:07 ----AD---- C:\Qoobox 2010-04-12 22:33:58 ----SHD---- C:\Documents and Settings\All Users\Application Data\SGZUD ======List of files/folders modified in the last 1 months====== 2010-04-20 07:51:42 ----A---- C:\WINDOWS\SchedLgU.Txt 2010-04-19 12:26:10 ----A---- C:\WINDOWS\system.ini 2010-04-17 10:56:44 ----A---- C:\WINDOWS\imsins.BAK 2010-04-13 12:24:36 ----RASH---- C:\boot.ini 2010-04-06 19:52:54 ----A---- C:\WINDOWS\system32\MRT.exe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [] R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104] R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576] R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2010-04-16 28520] R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.10.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2006-08-24 21275] R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2010-04-13 56816] R2 s24trans;Transport RLAN; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2006-04-14 13568] R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800] R3 CmBatt;Pilote d'adaptateur secteur Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952] R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2008-11-27 25280] R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-09-08 3959808] R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2005-02-17 5632] R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2005-11-21 3600512] R3 rimsptsk;rimsptsk; C:\WINDOWS\system32\DRIVERS\rimsptsk.sys [2005-07-12 51328] R3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2005-11-16 78976] R3 smserial;smserial; C:\WINDOWS\system32\DRIVERS\smserial.sys [2005-05-26 839724] R3 SynMini;USB2.0 1.3M Web Cam; C:\WINDOWS\System32\Drivers\SynMini.sys [2005-10-03 720470] R3 SynScan;USB2.0 1.3M Web Cam Still Image; C:\WINDOWS\System32\Drivers\SynScan.sys [2005-10-03 8278] R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2005-10-21 191936] R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208] R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520] R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608] R3 w39n51;Intel® PRO/Wireless 3945ABG Adapter Driver; C:\WINDOWS\system32\DRIVERS\w39n51.sys [2006-04-04 1429632] S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720] S3 catchme;catchme; \??\C:\pyp\catchme.sys [] S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024] S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368] S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-03-08 49920] S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-03-08 16496] S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-03-08 21568] S3 lmimirr;lmimirr; C:\WINDOWS\system32\DRIVERS\lmimirr.sys [] S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288] S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504] S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248] S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880] S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcd.sys [2007-02-22 137216] S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\nmwcdc.sys [2007-02-22 8320] S3 nmwcdcj;Nokia USB Port; C:\WINDOWS\system32\drivers\nmwcdcj.sys [2007-02-22 12288] S3 nmwcdcm;Nokia USB Modem; C:\WINDOWS\system32\drivers\nmwcdcm.sys [2007-02-22 12288] S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232] S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128] S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856] S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104] S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] S3 UXDCMN;UXDCMN; \??\e:\Winstress\UXDCMN.SYS [] S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-15 82688] S3 xnacc;Microsoft Common Controller For Windows Driver Service; C:\WINDOWS\system32\DRIVERS\xnacc.sys [2005-09-15 476672] S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2010-04-13 108289] R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2010-04-13 185089] R2 EvtEng;Intel® PROSet/Wireless Event Log; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2006-04-14 114753] R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2008-10-19 147456] R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2005-11-21 143426] R2 RegSrvc;Intel® PROSet/Wireless Registry Service; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2006-04-14 217164] R2 S24EventMonitor;Intel® PROSet/Wireless Service; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [2006-04-14 540745] R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] S2 gupdate;Service Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-12 135664] S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312] S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe [2008-04-02 85096] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104] S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-23 182768] S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664] S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2009-09-26 149336] S3 osppsvc;Office Software Protection Platform; C:\Program Files\Fichiers communs\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2009-09-26 4639136] S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2007-06-15 300544] S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096] -----------------EOF----------------- 2eme: info.txt logfile of random's system information tool 1.06 2010-04-21 18:52:41 ======Uninstall list====== -->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu -->MsiExec.exe /I{9A346205-EA92-4406-B1AB-50379DA3F057} -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DD4F051C-1A2B-4A91-B187-B093C597418C}\setup.exe" -l0x40c anything -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Reader 9.3.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A93000000001} Adobe Shockwave Player-->C:\WINDOWS\system32\ADOBE\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\ADOBE\SHOCKW~1\INSTALL.LOG Age of Empires II - The Conquerors - 1.0e Patch FINAL-->"C:\Program Files\Microsoft Games\Age of Empires II\unins000.exe" Apple Software Update-->MsiExec.exe /I{02DFF6B1-1654-411C-8D7B-FD6052EF016F} Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2} Asus ChkMail-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Asus\Asus ChkMail\Uninst.isu" ASUS Live Update-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}\setup.exe" -l0x9 Asus_A_Series_ScreenSaver-->C:\WINDOWS\ASUS A Series ScreenSaver Uninstaller.exe ASUSDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall ATK0100 ACPI UTILITY-->C:\WINDOWS\ATK0100\XPunin.exe AutoCAD 2008 - Français-->C:\Program Files\AutoCAD 2008\Setup\Setup.exe /P {5783F2D7-6001-040C-0002-0060B0CE6BBA} /M ACAD Autodesk DWF Viewer 7-->MsiExec.exe /I{9A346205-EA92-4406-B1AB-50379DA3F057} Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE Battlefield Vietnam-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E35B3C63-E958-4E31-A178-95D22024109A}\setup.exe" -l0x40c Company of Heroes-->MsiExec.exe /X{51D718D1-DA81-4FAD-919F-5C1CE3C33379} Condition Zero-->"C:\Program Files\Steam\steam.exe" steam://uninstall/80 Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe" Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe" Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe" Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe" Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe" Correctif pour Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe" Correctif pour Windows XP (KB979306)-->"C:\WINDOWS\$NtUninstallKB979306$\spuninst\spuninst.exe" Counter-Strike 1.6-->"D:\Counter-Strike 1.6\unins000.exe" Dictionnaire Freelang (liste de mots)-->"C:\Documents and Settings\Pierre-Yves\Local Settings\Application Data\Dictionnaire Freelang\unins001.exe" Dictionnaire Freelang 3.74 beta-->"C:\Documents and Settings\Pierre-Yves\Local Settings\Application Data\Dictionnaire Freelang\unins000.exe" DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN Everest Poker (Remove Only)-->C:\Program Files\Everest Poker\cstart.exe /uninstall GameSpy Arcade-->C:\PROGRA~1\GAMESP~1\UNWISE.EXE C:\PROGRA~1\GAMESP~1\INSTALL.LOG Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_E85CDE7661A53A6A.exe" /uninstall Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C} Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} Guitar Pro 5.0-->"C:\Program Files\Guitar Pro 5\unins000.exe" Hamachi 1.0.3.0-->C:\Program Files\Hamachi\uninstall.exe HijackThis 2.0.2-->"C:\Documents and Settings\Pierre-Yves\Bureau\HijackThis.exe" /uninstall Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT="" Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe" Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31} IZArc 3.6-->"C:\Program Files\IZArc\unins000.exe" Java 2 Runtime Environment, SE v1.4.2_15-->MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142150} Java 6 Update 10-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF} Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5} Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall LEGO® Indiana Jones™-->C:\Program Files\InstallShield Installation Information\{A14C40E7-F7E5-498D-B8BD-A3EAE942EED0}\Setup.exe -runfromtemp -l0x040c Logiciel Intel® PROSet/Wireless-->C:\WINDOWS\Installer\iProInst.exe Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe" mCore-->MsiExec.exe /I{E81667C6-2856-46D6-ABEA-6A2F42166779} mDriver-->MsiExec.exe /I{A0F925BF-5C55-44C2-A4E7-5A4C59791C29} mDrWiFi-->MsiExec.exe /I{F6090A17-0967-4A8A-B3C3-422A1B514D49} mEoU-->MsiExec.exe /I{B502B428-3386-40A9-98DB-079AAB72E64F} mHelp-->MsiExec.exe /I{8C6BB412-D3A8-4AAE-A01B-35B681789D68} Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7} Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} Microsoft Age of Empires II: The Conquerors Expansion-->"C:\Program Files\Microsoft Games\Age of Empires II\UNINSTALX.EXE" /runtemp /addremove Microsoft Age of Empires II-->"C:\Program Files\Microsoft Games\Age of Empires II\UNINSTAL.EXE" /runtemp /uninstall Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570} Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe" Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe" Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe" Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9} Microsoft Office Project MUI (French) 2010 (Beta)-->MsiExec.exe /X{20140000-00B4-040C-0000-0000000FF1CE} Microsoft Office Project Professional 2010 (Beta)-->MsiExec.exe /X{20140000-003B-0000-0000-0000000FF1CE} Microsoft Office Proof (Arabic) 2010 (Beta)-->MsiExec.exe /X{20140000-001F-0401-0000-0000000FF1CE} Microsoft Office Proof (Dutch) 2010 (Beta)-->MsiExec.exe /X{20140000-001F-0413-0000-0000000FF1CE} Microsoft Office Proof (English) 2010 (Beta)-->MsiExec.exe /X{20140000-001F-0409-0000-0000000FF1CE} Microsoft Office Proof (French) 2010 (Beta)-->MsiExec.exe /X{20140000-001F-040C-0000-0000000FF1CE} Microsoft Office Proof (German) 2010 (Beta)-->MsiExec.exe /X{20140000-001F-0407-0000-0000000FF1CE} Microsoft Office Proof (Spanish) 2010 (Beta)-->MsiExec.exe /X{20140000-001F-0C0A-0000-0000000FF1CE} Microsoft Office Proofing (French) 2010 (Beta)-->MsiExec.exe /X{20140000-002C-040C-0000-0000000FF1CE} Microsoft Office Shared MUI (French) 2010 (Beta)-->MsiExec.exe /X{20140000-006E-040C-0000-0000000FF1CE} Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} Microsoft User-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWudf01005$\spuninst\spuninst.exe" Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475} Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C} Microsoft Project Professionnel 2010-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE14\Office Setup Controller\setup.exe" /uninstall PRJPRO /dll OSETUP.DLL Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 9 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP9$\spuninst\spuninst.exe" Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe" Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB972260)-->"C:\WINDOWS\ie7updates\KB972260-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB974455)-->"C:\WINDOWS\ie7updates\KB974455-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB976325)-->"C:\WINDOWS\ie7updates\KB976325-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB978207)-->"C:\WINDOWS\ie7updates\KB978207-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB961371-v2)-->"C:\WINDOWS\$NtUninstallKB961371-v2$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB971468)-->"C:\WINDOWS\$NtUninstallKB971468$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB971961)-->"C:\WINDOWS\$NtUninstallKB971961$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB972270)-->"C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB975560)-->"C:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB975561)-->"C:\WINDOWS\$NtUninstallKB975561$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB975713)-->"C:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB977165)-->"C:\WINDOWS\$NtUninstallKB977165$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB977816)-->"C:\WINDOWS\$NtUninstallKB977816$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB977914)-->"C:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB978037)-->"C:\WINDOWS\$NtUninstallKB978037$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB978251)-->"C:\WINDOWS\$NtUninstallKB978251$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB978262)-->"C:\WINDOWS\$NtUninstallKB978262$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB978338)-->"C:\WINDOWS\$NtUninstallKB978338$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB978601)-->"C:\WINDOWS\$NtUninstallKB978601$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB978706)-->"C:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB979309)-->"C:\WINDOWS\$NtUninstallKB979309$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB979683)-->"C:\WINDOWS\$NtUninstallKB979683$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB980232)-->"C:\WINDOWS\$NtUninstallKB980232$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB981349)-->"C:\WINDOWS\$NtUninstallKB981349$\spuninst\spuninst.exe" Mise à jour pour Windows Internet Explorer 7 (KB976749)-->"C:\WINDOWS\ie7updates\KB976749-IE7\spuninst\spuninst.exe" Mise à jour pour Windows Internet Explorer 7 (KB980182)-->"C:\WINDOWS\ie7updates\KB980182-IE7\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB955759)-->"C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe" mIWA-->MsiExec.exe /I{3E9D596A-61D4-4239-BD19-2DB984D2A16F} mLogView-->MsiExec.exe /I{0E2B0B41-7E08-4F9F-B21F-41C4133F43B7} mMHouse-->MsiExec.exe /I{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5} Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe Motorola SM56 Data Fax Modem-->C:\WINDOWS\Motorola\SMSERIAL\sm56unst.exe mPfMgr-->MsiExec.exe /I{8B928BA1-EDEC-4227-A2DA-DD83026C36F5} mPfWiz-->MsiExec.exe /I{90B0D222-8C21-4B35-9262-53B042F18AF9} mProSafe-->MsiExec.exe /I{23FB368F-1399-4EAC-817C-4B83ECBE3D83} MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94} MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F} MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF} MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC} MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E} mWlsSafe-->MsiExec.exe /I{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4} mXML-->MsiExec.exe /I{9CC89556-3578-48DD-8408-04E66EBEF401} mZConfig-->MsiExec.exe /I{94658027-9F16-4509-BBD7-A59FE57C3023} Nero OEM-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL Nokia Connectivity Cable Driver-->MsiExec.exe /X{11964613-805F-432D-A12B-169554B793E7} Nokia PC Suite-->MsiExec.exe /I{A982E6CC-9F0D-4948-9B18-BDFD55DE4A72} NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI Objectif Tarot-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-Objectif Tarot.dat OpenOffice.org Installer 1.0-->MsiExec.exe /X{3A2AF807-9F9F-43C9-A24A-17B617238B74} Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238} Package de pilotes Windows - Nokia (WUDFRd) WPD (06/01/2007 6.84.33.0)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccswpddri_044C8712DB44F83D9DE6C376991EE9254E0A69E4\pccswpddriver.inf Package de pilotes Windows - Nokia Modem (02/15/2007 3.1)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccs_bluet_8B37DC72918CCD58A6EC20373AF6242B037A293B\pccs_bluetooth.inf Package de pilotes Windows - Nokia Modem (02/15/2007 3.1)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccs_bluet_F12A08B6F776984A95553486F64C541356F86E38\pccs_bluetooth.inf Package de pilotes Windows - Nokia Modem (05/24/2007 6.84.0.1)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokbtmdm_5E1541AFF1E1EA3554CE566743CCAD323ED1C108\nokbtmdm.inf PC Connectivity Solution-->MsiExec.exe /I{99A40651-0BC2-4095-8F9A-A40FAB224FEF} Power4 Gear-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4462AD13-F2AA-4CBD-9F95-293C38EED870}\setup.exe" -l0x9 QuickTime-->MsiExec.exe /I{08CA9554-B5FE-4313-938F-D4A417B81175} Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -l0x40c -removeonly REALTEK PCIE NIC Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{17E2F183-BAC4-4D01-BD7A-59F781E17EFA}\setup.exe" -l0x40c REMOVE Satsuki Decoder Pack-->C:\Program Files\Satsuki Decoder Pack\Uninstall.exe Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7} SpeechRedist-->MsiExec.exe /X{8795CBED-55E2-4693-9F14-84EC446935BE} Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3} Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT="" USB2.0 1.3M Web Cam-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A87869D7-B133-498C-A347-D9BE109FF6C8}\Setup.exe" -l0x40c VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B} VideoLAN VLC media player 0.8.2-->C:\Program Files\VideoLAN\VLC\uninstall.exe Winamp Remote-->"C:\Program Files\Winamp Remote\uninstall.exe" Winamp Toolbar for Firefox-->"\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\uninstall.exe" Winamp-->"C:\Program Files\Winamp\UninstWA.exe" Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41} Windows Live Communications Platform-->MsiExec.exe /I{ED00D08A-3C5F-488D-93A0-A04F21F23956} Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818} Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1} Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe" Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe" Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe" WinFlash-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DE10AB76-4756-4913-BE25-55D1C1051F9A}\setup.exe" -l0x9 Wireless Console 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{83F73CB1-7705-49D1-9852-84D839CA2A45}\setup.exe" -l0x9 -removeonly Xbox 360 Controller for Windows-->"C:\WINDOWS\$NtUninstall_Xbox_360_CC_Driver$\spuninst\spuninst.exe" ZHPDiag 1.25-->"C:\Program Files\ZHPDiag\unins000.exe" ======Security center information====== AV: AntiVir Desktop ======System event log====== Computer Name: PYP Event Code: 7036 Message: Le service Gestion d'applications est entré dans l'état : arrêté. Record Number: 44997 Source Name: Service Control Manager Time Written: 20100222231805.000000+060 Event Type: Informations User: Computer Name: PYP Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service Gestion d'applications. Record Number: 44996 Source Name: Service Control Manager Time Written: 20100222231805.000000+060 Event Type: Informations User: PYP\Pierre-Yves Computer Name: PYP Event Code: 7023 Message: Le service Gestion d'applications s'est arrêté avec l'erreur : Le module spécifié est introuvable. Record Number: 44995 Source Name: Service Control Manager Time Written: 20100222231804.000000+060 Event Type: erreur User: Computer Name: PYP Event Code: 7036 Message: Le service Gestion d'applications est entré dans l'état : arrêté. Record Number: 44994 Source Name: Service Control Manager Time Written: 20100222231804.000000+060 Event Type: Informations User: Computer Name: PYP Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service Gestion d'applications. Record Number: 44993 Source Name: Service Control Manager Time Written: 20100222231804.000000+060 Event Type: Informations User: PYP\Pierre-Yves =====Application event log===== Computer Name: PYP Event Code: 20 Message: Record Number: 9996 Source Name: Google Update Time Written: 20090617223834.000000+120 Event Type: erreur User: PYP\Pierre-Yves Computer Name: PYP Event Code: 20 Message: Record Number: 9995 Source Name: Google Update Time Written: 20090617213834.000000+120 Event Type: erreur User: PYP\Pierre-Yves Computer Name: PYP Event Code: 0 Message: Record Number: 9994 Source Name: gusvc Time Written: 20090617203912.000000+120 Event Type: Informations User: Computer Name: PYP Event Code: 20 Message: Record Number: 9993 Source Name: Google Update Time Written: 20090617203825.000000+120 Event Type: erreur User: PYP\Pierre-Yves Computer Name: PYP Event Code: 0 Message: Record Number: 9992 Source Name: gusvc Time Written: 20090617203812.000000+120 Event Type: Informations User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;C:\Program Files\PC Connectivity Solution;C:\Program Files\QuickTime\QTSystem "windir"=%SystemRoot% "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=6 "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 14 Stepping 8, GenuineIntel "PROCESSOR_REVISION"=0e08 "NUMBER_OF_PROCESSORS"=2 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip "QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip -----------------EOF-----------------
  6. Rapport Dr web: 4bf44f72.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4bf44f72.qua Trojan.Xispy 4bf44f72.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4c316214.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4c316214.qua BackDoor.Tdss.2459 4c316214.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4c1761e2.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4c1761e2.qua Win32.Sector.9 4c1761e2.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4c1661f4.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4c1661f4.qua Win32.Sector.9 4c1661f4.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4c0561f0.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4c0561f0.qua Win32.Sector.9 4c0561f0.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4c0561e4.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4c0561e4.qua Win32.Sector.9 4c0561e4.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4c0761f5.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4c0761f5.qua Win32.Sector.9 4c0761f5.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 47bd48a5.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\47bd48a5.qua Win32.Sector.9 47bd48a5.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4c1761e6.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4c1761e6.qua Win32.Sector.9 4c1761e6.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4bf4628a.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4bf4628a.qua Trojan.Xispy 4bf4628a.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4bf4628b.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4bf4628b.qua Win32.HLLW.Autoruner.1798 4bf4628b.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 432f106c.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\432f106c.qua Win32.HLLW.Autoruner.1798 432f106c.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4329e0fc.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4329e0fc.qua Win32.HLLW.Autoruner.1798 4329e0fc.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 432ae8b4.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\432ae8b4.qua Trojan.Xispy 432ae8b4.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 432bf08c.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\432bf08c.qua Trojan.Unsecure 432bf08c.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4314fb44.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4314fb44.qua Win32.HLLW.Autoruner.1798 4314fb44.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4315c31c.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4315c31c.qua Win32.HLLW.Autoruner.1798 4315c31c.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4317d3ac.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4317d3ac.qua Win32.HLLW.Autoruner.1798 4317d3ac.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4310da64.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4310da64.qua Trojan.Xispy 4310da64.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4311a23c.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4311a23c.qua Trojan.Unsecure 4311a23c.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4312aaf4.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4312aaf4.qua Trojan.Xispy 4312aaf4.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4313b2cc.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4313b2cc.qua Trojan.Xispy 4313b2cc.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 434cf214.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\434cf214.qua Win32.HLLW.Autoruner.1798 434cf214.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 431dbd5c.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\431dbd5c.qua Win32.HLLW.Autoruner.1798 431dbd5c.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 431f8dec.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\431f8dec.qua Win32.HLLW.Autoruner.1798 431f8dec.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 431895a4.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\431895a4.qua Trojan.Xispy 431895a4.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 43199c7c.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\43199c7c.qua Trojan.Unsecure 43199c7c.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 431b6434.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\431b6434.qua Win32.HLLW.Autoruner.1798 431b6434.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 43046c0c.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\43046c0c.qua Win32.HLLW.Autoruner.1798 43046c0c.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 43067dfc.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\43067dfc.qua Win32.HLLW.Autoruner.1798 43067dfc.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 43074564.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\43074564.qua Trojan.Xispy 43074564.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 430057fc.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\430057fc.qua Trojan.Unsecure 430057fc.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40cc1bcc.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40cc1bcc.qua Trojan.Xispy 40cc1bcc.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40cde384.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40cde384.qua Win32.HLLW.Autoruner.1798 40cde384.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40ceea5c.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40ceea5c.qua Win32.HLLW.Autoruner.1798 40ceea5c.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40c8faec.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40c8faec.qua Win32.HLLW.Autoruner.1798 40c8faec.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40c9c2a4.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40c9c2a4.qua Trojan.Xispy 40c9c2a4.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40cac57c.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40cac57c.qua Trojan.Unsecure 40cac57c.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40cbcd34.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40cbcd34.qua Win32.HLLW.Autoruner.1798 40cbcd34.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40b4d50c.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40b4d50c.qua Win32.HLLW.Autoruner.1798 40b4d50c.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40b6a59c.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40b6a59c.qua Win32.HLLW.Autoruner.1798 40b6a59c.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40b7ac54.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40b7ac54.qua Trojan.Xispy 40b7ac54.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40b0b42c.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40b0b42c.qua Trojan.Unsecure 40b0b42c.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40b1bce4.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40b1bce4.qua Win32.HLLW.Autoruner.1798 40b1bce4.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40b284bc.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40b284bc.qua Win32.HLLW.Autoruner.1798 40b284bc.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40bc974c.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40bc974c.qua Win32.HLLW.Autoruner.1798 40bc974c.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40bd9f04.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40bd9f04.qua Trojan.Unsecure 40bd9f04.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40bf67dc.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40bf67dc.qua Trojan.Xispy 40bf67dc.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40b86f94.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40b86f94.qua Trojan.Xispy 40b86f94.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40b9766c.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40b9766c.qua Win32.HLLW.Autoruner.1798 40b9766c.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40ba7e24.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40ba7e24.qua Win32.HLLW.Autoruner.1798 40ba7e24.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40a44eb4.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40a44eb4.qua Win32.HLLW.Autoruner.1798 40a44eb4.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40a5568c.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40a5568c.qua Trojan.Xispy 40a5568c.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40a65944.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40a65944.qua Trojan.Unsecure 40a65944.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40a7211c.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40a7211c.qua Win32.HLLW.Autoruner.1798 40a7211c.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40a029d4.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40a029d4.qua Win32.HLLW.Autoruner.1798 40a029d4.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40a23864.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40a23864.qua Win32.HLLW.Autoruner.1798 40a23864.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4bf4628c.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4bf4628c.qua Trojan.Xispy 4bf4628c.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40ac08f5.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40ac08f5.qua Trojan.Unsecure 40ac08f5.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40ad107d.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40ad107d.qua Trojan.Xispy 40ad107d.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40ae1835.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40ae1835.qua Trojan.Xispy 40ae1835.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40afe00d.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40afe00d.qua Trojan.Xispy 40afe00d.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40a8e8c5.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40a8e8c5.qua Trojan.Xispy 40a8e8c5.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40a9f09d.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40a9f09d.qua Trojan.Xispy 40a9f09d.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40aafc65.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40aafc65.qua Win32.HLLW.Autoruner.1798 40aafc65.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40abc94d.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40abc94d.qua Win32.HLLW.Autoruner.1798 40abc94d.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4095a7fd.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4095a7fd.qua Win32.HLLW.Autoruner.1798 4095a7fd.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4096af65.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4096af65.qua Trojan.Xispy 4096af65.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4097b9fd.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4097b9fd.qua Trojan.Unsecure 4097b9fd.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40908165.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40908165.qua Win32.HLLW.Autoruner.1798 40908165.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40918eed.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40918eed.qua Win32.HLLW.Autoruner.1798 40918eed.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40939fdd.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40939fdd.qua Win32.HLLW.Autoruner.1798 40939fdd.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 409d6745.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\409d6745.qua Trojan.Xispy 409d6745.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 409e71dd.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\409e71dd.qua Trojan.Unsecure 409e71dd.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 409f7945.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\409f7945.qua Trojan.Unsecure 409f7945.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 409846cd.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\409846cd.qua Trojan.Unsecure 409846cd.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40994e35.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40994e35.qua Trojan.Unsecure 40994e35.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 409a57bd.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\409a57bd.qua Trojan.Unsecure 409a57bd.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 409b5f25.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\409b5f25.qua Win32.HLLW.Autoruner.1798 409b5f25.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 408424ad.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\408424ad.qua Win32.HLLW.Autoruner.1798 408424ad.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4086359d.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4086359d.qua Win32.HLLW.Autoruner.1798 4086359d.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40873d05.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40873d05.qua Trojan.Xispy 40873d05.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40800f9d.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40800f9d.qua Trojan.Unsecure 40800f9d.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40811705.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40811705.qua Win32.HLLW.Autoruner.1798 40811705.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40821c8d.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40821c8d.qua Win32.HLLW.Autoruner.1798 40821c8d.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 408cec7d.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\408cec7d.qua Win32.HLLW.Autoruner.1798 408cec7d.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 408df5e5.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\408df5e5.qua Trojan.Xispy 408df5e5.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 408ec67d.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\408ec67d.qua Trojan.Unsecure 408ec67d.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 408fcfe5.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\408fcfe5.qua Win32.HLLW.Autoruner.1798 408fcfe5.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4088d76d.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4088d76d.qua Win32.HLLW.Autoruner.1798 4088d76d.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 408aa45d.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\408aa45d.qua Win32.HLLW.Autoruner.1798 408aa45d.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 408badc5.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\408badc5.qua Trojan.Unsecure 408badc5.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4074b54d.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4074b54d.qua Trojan.Xispy 4074b54d.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4075bd05.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4075bd05.qua Win32.HLLW.Autoruner.1798 4075bd05.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 407685dd.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\407685dd.qua Win32.HLLW.Autoruner.1798 407685dd.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40709c3d.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40709c3d.qua Win32.HLLW.Autoruner.1798 40709c3d.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 407265a5.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\407265a5.qua Trojan.Xispy 407265a5.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4073763d.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4073763d.qua Trojan.Unsecure 4073763d.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 407c7fa5.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\407c7fa5.qua Trojan.Unsecure 407c7fa5.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 407d472d.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\407d472d.qua Trojan.Unsecure 407d472d.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 407e4c95.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\407e4c95.qua Trojan.Unsecure 407e4c95.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 407f541d.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\407f541d.qua Trojan.Unsecure 407f541d.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40785d85.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40785d85.qua Win32.HLLW.Autoruner.1798 40785d85.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4079250d.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4079250d.qua Win32.HLLW.Autoruner.1798 4079250d.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 407b3afd.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\407b3afd.qua Win32.HLLW.Autoruner.1798 407b3afd.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40640265.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40640265.qua Trojan.Xispy 40640265.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40650cfd.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40650cfd.qua Trojan.Unsecure 40650cfd.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40661465.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40661465.qua Win32.HLLW.Autoruner.1798 40661465.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40671ded.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40671ded.qua Win32.HLLW.Autoruner.1798 40671ded.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4061f2dd.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4061f2dd.qua Win32.HLLW.Autoruner.1798 4061f2dd.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4062fa45.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4062fa45.qua Trojan.Unsecure 4062fa45.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 406ccc45.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\406ccc45.qua Win32.HLLW.Autoruner.1798 406ccc45.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 406dd5cd.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\406dd5cd.qua Win32.HLLW.Autoruner.1798 406dd5cd.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 406faabd.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\406faabd.qua Win32.HLLW.Autoruner.1798 406faabd.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4bf4628d.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4bf4628d.qua Trojan.Unsecure 4bf4628d.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4069bbae.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4069bbae.qua Trojan.Xispy 4069bbae.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 406a8426.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\406a8426.qua Win32.HLLW.Autoruner.1798 406a8426.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 406b8dae.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\406b8dae.qua Win32.HLLW.Autoruner.1798 406b8dae.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4056629e.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4056629e.qua Win32.HLLW.Autoruner.1798 4056629e.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40576a06.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40576a06.qua Trojan.Xispy 40576a06.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4050749e.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4050749e.qua Trojan.Unsecure 4050749e.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40517c06.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40517c06.qua Trojan.Xispy 40517c06.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 405244de.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\405244de.qua Win32.HLLW.Autoruner.1798 405244de.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40534c46.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40534c46.qua Win32.HLLW.Autoruner.1798 40534c46.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 405d21e6.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\405d21e6.qua Win32.HLLW.Autoruner.1798 405d21e6.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 405e2f7e.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\405e2f7e.qua Trojan.Xispy 405e2f7e.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 405f39f6.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\405f39f6.qua Trojan.Unsecure 405f39f6.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4058017e.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4058017e.qua Trojan.Xispy 4058017e.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 40590936.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\40590936.qua Win32.HLLW.Autoruner.1798 40590936.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 405a110e.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\405a110e.qua Win32.HLLW.Autoruner.1798 405a110e.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4044e86e.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4044e86e.qua Win32.HLLW.Autoruner.1798 4044e86e.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4045f1d6.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4045f1d6.qua Trojan.Xispy 4045f1d6.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4046c26e.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4046c26e.qua Trojan.Unsecure 4046c26e.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 431cba86.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\431cba86.qua Trojan.Unsecure 431cba86.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4042a55e.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4042a55e.qua Trojan.Xispy 4042a55e.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45c01bce.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45c01bce.qua Trojan.Xispy 45c01bce.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45c1e446.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45c1e446.qua Trojan.Unsecure 45c1e446.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45c3f536.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45c3f536.qua Trojan.Unsecure 45c3f536.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45cdca26.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45cdca26.qua Win32.HLLW.Autoruner.1798 45cdca26.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45cfdab6.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45cfdab6.qua Trojan.Siggen1.6486 45cfdab6.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45caad1e.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45caad1e.qua Win32.HLLW.Autoruner.1798 45caad1e.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45cbb5d6.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45cbb5d6.qua Win32.HLLW.Autoruner.1798 45cbb5d6.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45b4bdae.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45b4bdae.qua Trojan.Unsecure 45b4bdae.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45b58466.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45b58466.qua Trojan.Unsecure 45b58466.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45b68c3e.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45b68c3e.qua Win32.HLLW.Autoruner.1798 45b68c3e.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45b794f6.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45b794f6.qua Win32.HLLW.Autoruner.829 45b794f6.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4bf4628e.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4bf4628e.qua Trojan.DownLoader.59802 4bf4628e.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45b26487.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45b26487.qua Trojan.Unsecure 45b26487.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45b36f5f.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45b36f5f.qua Trojan.MulDrop.29876 45b36f5f.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45bc7717.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45bc7717.qua Trojan.Unsecure 45bc7717.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45bd7fef.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45bd7fef.qua Trojan.Xispy 45bd7fef.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4c3062c3.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4c3062c3.qua Trojan.Unsecure 4c3062c3.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 42763972.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\42763972.qua Trojan.Siggen1.6486 42763972.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4c3762c3.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4c3762c3.qua Trojan.Unsecure 4c3762c3.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4c2762d4.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4c2762d4.qua Trojan.Unsecure 4c2762d4.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4c3762d7.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4c3762d7.qua Win32.HLLW.Autoruner.1798 4c3762d7.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4271e05d.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4271e05d.qua Win32.HLLW.Autoruner.1798 4271e05d.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4260e888.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4260e888.qua Win32.HLLW.Autoruner.1798 4260e888.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4c3062cd.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4c3062cd.qua Win32.HLLW.Autoruner.829 4c3062cd.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4c3062c7.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4c3062c7.qua Trojan.Unsecure 4c3062c7.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4c3362cd.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4c3362cd.qua Trojan.MulDrop.29876 4c3362cd.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4c2762cd.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4c2762cd.qua Trojan.Unsecure 4c2762cd.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 427adbd5.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\427adbd5.qua Trojan.DownLoader.59802 427adbd5.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 42651804.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\42651804.qua Trojan.Unsecure 42651804.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 459c6470.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\459c6470.qua Win32.HLLW.Autoruner.1798 459c6470.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 459d6c38.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\459d6c38.qua Trojan.Unsecure 459d6c38.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 459f7c88.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\459f7c88.qua Win32.HLLW.Autoruner.1798 459f7c88.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45984750.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45984750.qua Trojan.Unsecure 45984750.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 459a5720.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\459a5720.qua Win32.HLLW.Autoruner.1798 459a5720.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 459b5fe8.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\459b5fe8.qua Trojan.Unsecure 459b5fe8.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45852e79.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45852e79.qua Win32.HLLW.Autoruner.1798 45852e79.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45863601.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45863601.qua Trojan.Unsecure 45863601.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45800691.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45800691.qua Win32.HLLW.Autoruner.1798 45800691.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45810959.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45810959.qua Trojan.Unsecure 45810959.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45831929.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45831929.qua Win32.HLLW.Autoruner.1798 45831929.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 458ce6a1.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\458ce6a1.qua Trojan.Unsecure 458ce6a1.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 458ef131.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\458ef131.qua Win32.HLLW.Autoruner.1798 458ef131.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 458ff9f9.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\458ff9f9.qua Trojan.Unsecure 458ff9f9.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4589c849.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4589c849.qua Win32.HLLW.Autoruner.1798 4589c849.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 458ad011.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\458ad011.qua Trojan.Unsecure 458ad011.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4574a0e1.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4574a0e1.qua Win32.HLLW.Autoruner.1798 4574a0e1.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4575a8a9.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4575a8a9.qua Trojan.Unsecure 4575a8a9.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4577b8e9.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4577b8e9.qua Win32.HLLW.Autoruner.1798 4577b8e9.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45708061.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45708061.qua Trojan.Unsecure 45708061.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45729111.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45729111.qua Win32.HLLW.Autoruner.1798 45729111.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45739e89.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45739e89.qua Trojan.Unsecure 45739e89.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 457e6fb9.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\457e6fb9.qua Win32.HLLW.Autoruner.1798 457e6fb9.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 457f7731.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\457f7731.qua Trojan.Unsecure 457f7731.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45794421.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45794421.qua Win32.HLLW.Autoruner.1798 45794421.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 457a4c59.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\457a4c59.qua Trojan.Unsecure 457a4c59.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45645d49.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45645d49.qua Win32.HLLW.Autoruner.1798 45645d49.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45652ac1.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45652ac1.qua Trojan.Unsecure 45652ac1.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45673bf1.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45673bf1.qua Win32.HLLW.Autoruner.1798 45673bf1.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45600369.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45600369.qua Trojan.Unsecure 45600369.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45621019.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45621019.qua Win32.HLLW.Autoruner.1798 45621019.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45631991.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45631991.qua Trojan.Unsecure 45631991.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 456dee81.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\456dee81.qua Win32.HLLW.Autoruner.1798 456dee81.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 456ef639.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\456ef639.qua Trojan.Unsecure 456ef639.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4568c729.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4568c729.qua Win32.HLLW.Autoruner.1798 4568c729.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4569cca1.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4569cca1.qua Trojan.Unsecure 4569cca1.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 456bdc51.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\456bdc51.qua Win32.HLLW.Autoruner.1798 456bdc51.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4554a5c9.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4554a5c9.qua Trojan.Unsecure 4554a5c9.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 4556baf9.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\4556baf9.qua Win32.HLLW.Autoruner.1798 4556baf9.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45578271.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45578271.qua Trojan.Unsecure 45578271.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45519361.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45519361.qua Win32.HLLW.Autoruner.1798 45519361.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45529899.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45529899.qua Trojan.Unsecure 45529899.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 455c6011.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\455c6011.qua Trojan.Unsecure 455c6011.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 455e7101.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\455e7101.qua Trojan.Unsecure 455e7101.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 45584631.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\45584631.qua Trojan.Unsecure 45584631.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. 455a5721.qua\data001 C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED\455a5721.qua Win32.HLLW.Autoruner.1798 455a5721.qua C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\INFECTED Conteneur comporte des objets infectés Quarantaine. A0041928.sys C:\System Volume Information\_restore{56A542B0-317D-411D-AFAD-86E77B1600FD}\RP127 BackDoor.Tdss.2459 Désinfecté. A0041984.exe C:\System Volume Information\_restore{56A542B0-317D-411D-AFAD-86E77B1600FD}\RP128 Trojan.Botnetlog.11 Supprimé.
  7. c'est bon je me suis débrouillé autrement. Je l'ai téléchargé depuis le pc de mon bureau
  8. Impossoble de télécharger Dr Web il me dit ça: La page Web à l'adresse ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe est peut-être temporairement inaccessible ou a peut-être été redirigée de façon permanente vers une nouvelle adresse Web. Via telecharger.com c'est pareil
  9. Rapport combofix: ComboFix 10-04-12.06 - Pierre-Yves 19/04/2010 12:20:14.3.2 - FAT32x86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1023.438 [GMT 2:00] Lancé depuis: c:\documents and settings\Pierre-Yves\Bureau\Antivirus\pyp.exe Commutateurs utilisés :: c:\documents and settings\Pierre-Yves\Mes documents\Downloads\CFScript.txt AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7} FILE :: "c:\windows\system32\lz32t.exe" . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_CDRMKAUN -------\Legacy_SRSERVICEASPNET_STATE -------\Service_cdrmkaun -------\Service_srserviceaspnet_state ((((((((((((((((((((((((((((( Fichiers créés du 2010-03-19 au 2010-04-19 )))))))))))))))))))))))))))))))))))) . 2010-04-19 10:26 . 2003-07-29 04:18 3839 ----a-w- c:\windows\system32\drivers\GETPADD.sys 2010-04-17 10:22 . 2010-04-17 10:22 -------- d-----w- c:\program files\Microsoft Synchronization Services 2010-04-17 10:21 . 2010-04-17 10:21 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition 2010-04-17 10:21 . 2010-04-17 10:21 -------- d-----w- c:\documents and settings\All Users\Microsoft 2010-04-17 10:21 . 2010-04-17 10:21 -------- d-----w- c:\program files\Microsoft Analysis Services 2010-04-17 10:19 . 2010-04-17 10:19 -------- d-----w- c:\documents and settings\Pierre-Yves\Local Settings\Application Data\Microsoft Help 2010-04-17 10:18 . 2010-04-17 10:18 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help 2010-04-17 09:46 . 2010-04-17 09:46 -------- d-----w- c:\program files\Fichiers communs\Adobe 2010-04-17 09:19 . 2010-04-17 09:19 -------- d-----w- C:\FOUND.000 2010-04-17 08:57 . 2010-04-17 08:57 -------- d-----w- c:\program files\ZHPDiag 2010-04-16 21:44 . 2010-04-16 21:44 -------- d-----w- c:\documents and settings\Pierre-Yves\Application Data\Malwarebytes 2010-04-16 21:43 . 2010-03-29 22:46 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-04-16 21:43 . 2010-04-16 21:43 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes 2010-04-16 21:43 . 2010-03-29 22:45 20824 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-04-16 21:43 . 2010-04-16 21:43 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2010-04-13 10:50 . 2010-04-13 11:01 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2010-04-13 10:50 . 2009-03-30 08:32 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys 2010-04-13 10:50 . 2009-02-13 10:28 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys 2010-04-13 10:50 . 2009-02-13 10:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys 2010-04-13 10:50 . 2010-04-13 10:50 -------- d-----w- c:\program files\Avira 2010-04-13 10:50 . 2010-04-13 10:50 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira 2010-04-12 20:33 . 2010-04-12 20:34 -------- d-sh--w- c:\documents and settings\All Users\Application Data\SGZUD 2010-04-12 20:32 . 2010-04-12 20:32 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Google 2010-04-12 20:27 . 2010-04-12 20:27 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Google 2010-03-24 08:04 . 2010-03-24 18:17 952768 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\21116\AdobeARM.exe 2010-03-24 08:04 . 2010-03-24 18:17 70584 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\21116\AdobeExtractFiles.dll 2010-03-24 08:04 . 2010-03-24 18:17 326056 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\21116\ReaderUpdater.exe 2010-03-24 08:04 . 2010-03-24 18:17 326056 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\21116\AcrobatUpdater.exe . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2010-04-17 10:34 . 2007-03-15 16:25 88256 ----a-w- c:\documents and settings\Pierre-Yves\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2010-03-11 12:34 . 2004-09-20 15:49 832512 ------w- c:\windows\system32\wininet.dll 2010-03-11 12:34 . 2004-09-20 15:48 78336 ----a-w- c:\windows\system32\ieencode.dll 2010-03-11 12:34 . 2004-09-20 15:48 17408 ----a-w- c:\windows\system32\corpol.dll 2010-03-09 11:10 . 2004-09-20 15:48 430080 ----a-w- c:\windows\system32\vbscript.dll 2010-02-24 13:11 . 2004-09-20 15:48 455680 ----a-w- c:\windows\system32\drivers\mrxsmb.sys 2010-02-16 19:07 . 2004-08-03 22:48 2148352 ------w- c:\windows\system32\ntoskrnl.exe 2010-02-16 19:06 . 2004-08-03 22:49 2026496 ------w- c:\windows\system32\ntkrnlpa.exe 2010-02-12 09:03 . 2010-02-26 00:41 293376 ------w- c:\windows\system32\browserchoice.exe 2010-02-12 04:34 . 2004-09-20 15:48 100864 ----a-w- c:\windows\system32\6to4svc.dll 2010-02-11 12:02 . 2004-09-20 15:48 226880 ----a-w- c:\windows\system32\drivers\tcpip6.sys . ((((((((((((((((((((((((((((( SnapShot_2010-04-18_19.18.04 ))))))))))))))))))))))))))))))))))))))))) . + 2010-04-19 10:26 . 2010-04-19 10:26 16384 c:\windows\temp\Perflib_Perfdata_cc.dat . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] 2009-11-03 19:12 556432 ----a-w- c:\progra~1\MICROS~3\Office14\URLREDIR.DLL [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Google Update"="c:\documents and settings\Pierre-Yves\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2008-09-13 133104] "msnmsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 3883856] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-13 68856] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Wireless Console 2"="c:\program files\Wireless Console 2\wcourier.exe" [2005-10-17 987136] "IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2006-04-14 667718] "IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2006-04-14 602182] "EOUApp"="c:\program files\Intel\Wireless\Bin\EOUWiz.exe" [2006-04-14 569413] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-11-21 7335936] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-10-21 761945] "RemoteControl"="c:\program files\ASUSTeK\ASUSDVD\PDVDServ.exe" [2004-11-02 32768] "Power_Gear"="c:\program files\ASUS\Power4 Gear\BatteryLife.exe" [2006-03-06 86016] "ASUS Live Update"="c:\program files\ASUS\ASUS Live Update\ALU.exe" [2006-02-21 180224] "NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648] "ABLKSR"="c:\windows\ABLKSR\ABLKSR.exe" [2006-01-02 61440] "RTHDCPL"="RTHDCPL.EXE" [2005-09-06 14850560] "HControl"="c:\windows\ATK0100\HControl.exe" [2006-02-22 106496] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-05-27 413696] "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272] "Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768] "BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2009-09-26 83312] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] "Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 1241088] [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Adobe Reader Speed Launch.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Adobe Reader Speed Launch.lnk backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^ASUS ChkMail.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\ASUS ChkMail.lnk backup=c:\windows\pss\ASUS ChkMail.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] 2005-11-21 08:51 1519616 ----a-w- c:\windows\system32\nwiz.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication] 2007-06-18 13:10 271360 ----a-w- c:\program files\Nokia\Nokia PC Suite 6\LaunchApplication.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL] 2005-05-26 17:12 544768 ----a-r- c:\windows\sm56hlpr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] 2008-10-19 15:46 144792 ----a-w- c:\program files\Java\jre6\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] 2007-07-13 11:42 68856 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] 2008-04-01 18:49 36352 ----a-w- c:\program files\Winamp\winampa.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Messenger\\MSMSGS.EXE"= "c:\\Program Files\\uTorrent\\uTorrent.exe"= "c:\\Program Files\\Winamp Remote\\bin\\Orb.exe"= "c:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"= "c:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [13/04/2010 12:50 108289] R3 SynMini;USB2.0 1.3M Web Cam;c:\windows\system32\drivers\SynMini.sys [24/08/2006 16:19 720470] R3 SynScan;USB2.0 1.3M Web Cam Still Image;c:\windows\system32\drivers\SynScan.sys [24/08/2006 16:19 8278] S2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [12/04/2010 22:25 135664] S3 osppsvc;Office Software Protection Platform;c:\program files\Fichiers communs\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [26/09/2009 04:28 4639136] S3 UXDCMN;UXDCMN;\??\e:\winstress\UXDCMN.SYS --> e:\winstress\UXDCMN.SYS [?] . Contenu du dossier 'Tâches planifiées' 2009-09-24 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 15:57] 2010-04-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1311777357-2900331866-1157244928-1005Core1cac8e9ffc98514.job - c:\documents and settings\Pierre-Yves\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-09-13 10:19] 2010-04-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-04-12 20:25] 2010-04-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-04-12 20:25] . . ------- Examen supplémentaire ------- . uStart Page = hxxp://www.msn.fr/ uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 uInternet Connection Wizard,ShellNext = iexplore IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\Fichiers communs\Microsoft Shared\OFFICE14\MSOXMLMF.DLL . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-04-19 12:27 Windows 5.1.2600 Service Pack 3 FAT NTAPI Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- CLES DE REGISTRE BLOQUEES --------------------- [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*] "C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL" . --------------------- DLLs chargées dans les processus actifs --------------------- - - - - - - - > 'explorer.exe'(2540) c:\progra~1\WINDOW~2\wmpband.dll c:\windows\system32\eappprxy.dll c:\windows\system32\WPDShServiceObj.dll c:\program files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll c:\program files\Nokia\Nokia PC Suite 6\PCSCM.dll c:\program files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_fre.nlr c:\program files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . ------------------------ Autres processus actifs ------------------------ . c:\program files\Intel\Wireless\Bin\EvtEng.exe c:\program files\Intel\Wireless\Bin\S24EvMon.exe c:\windows\RTHDCPL.EXE c:\program files\Avira\AntiVir Desktop\avguard.exe c:\program files\Java\jre6\bin\jqs.exe c:\windows\system32\nvsvc32.exe c:\program files\Intel\Wireless\Bin\RegSrvc.exe c:\windows\ATK0100\ATKOSD.exe c:\windows\system32\wbem\wmiapsrv.exe c:\progra~1\Intel\Wireless\Bin\Dot1XCfg.exe . ************************************************************************** . Heure de fin: 2010-04-19 12:29:49 - La machine a redémarré ComboFix-quarantined-files.txt 2010-04-19 10:29 ComboFix2.txt 2010-04-18 19:21 ComboFix3.txt 2010-04-13 10:36 Avant-CF: 2 462 253 056 octets libres Après-CF: 2 428 338 176 octets libres - - End Of File - - 047B369C36ED6B386FA6C2EA7591915B
  10. Ok je fais ça ce midi.
  11. Le parapluie de antivir est fermé et pourtant j'ai tout activé. Comment faire pour l'activer?
  12. Je trouve pas le rapport de sality killer. Il se trouve ou? Voila le rapport combofix: ComboFix 10-04-12.06 - Pierre-Yves 18/04/2010 21:11:55.2.2 - FAT32x86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1023.431 [GMT 2:00] Lancé depuis: c:\documents and settings\Pierre-Yves\Bureau\Antivirus\pyp.exe AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7} . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\system32\2819874029.dat . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_CRYPTSVCREGSRVC -------\Legacy_MESSENGEREVENTLOG -------\Legacy_RASAUTORSVP -------\Legacy_WSCSVCREMOTEACCESS -------\Service_CryptSvcRegSrvc -------\Service_MessengerEventlog -------\Service_RasAutoRSVP -------\Service_wscsvcRemoteAccess ((((((((((((((((((((((((((((( Fichiers créés du 2010-03-18 au 2010-04-18 )))))))))))))))))))))))))))))))))))) . 2010-04-18 19:18 . 2003-07-29 04:18 3839 ----a-w- c:\windows\system32\drivers\GETPADD.sys 2010-04-17 10:22 . 2010-04-17 10:22 -------- d-----w- c:\program files\Microsoft Synchronization Services 2010-04-17 10:21 . 2010-04-17 10:21 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition 2010-04-17 10:21 . 2010-04-17 10:21 -------- d-----w- c:\documents and settings\All Users\Microsoft 2010-04-17 10:21 . 2010-04-17 10:21 -------- d-----w- c:\program files\Microsoft Analysis Services 2010-04-17 10:19 . 2010-04-17 10:19 -------- d-----w- c:\documents and settings\Pierre-Yves\Local Settings\Application Data\Microsoft Help 2010-04-17 10:18 . 2010-04-17 10:18 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help 2010-04-17 09:46 . 2010-04-17 09:46 -------- d-----w- c:\program files\Fichiers communs\Adobe 2010-04-17 09:19 . 2010-04-17 09:19 -------- d-----w- C:\FOUND.000 2010-04-17 08:57 . 2010-04-17 08:57 -------- d-----w- c:\program files\ZHPDiag 2010-04-16 21:44 . 2010-04-16 21:44 -------- d-----w- c:\documents and settings\Pierre-Yves\Application Data\Malwarebytes 2010-04-16 21:43 . 2010-03-29 22:46 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-04-16 21:43 . 2010-04-16 21:43 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes 2010-04-16 21:43 . 2010-03-29 22:45 20824 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-04-16 21:43 . 2010-04-16 21:43 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2010-04-13 10:50 . 2010-04-13 11:01 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2010-04-13 10:50 . 2009-03-30 08:32 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys 2010-04-13 10:50 . 2009-02-13 10:28 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys 2010-04-13 10:50 . 2009-02-13 10:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys 2010-04-13 10:50 . 2010-04-13 10:50 -------- d-----w- c:\program files\Avira 2010-04-13 10:50 . 2010-04-13 10:50 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira 2010-04-12 20:33 . 2010-04-12 20:34 -------- d-sh--w- c:\documents and settings\All Users\Application Data\SGZUD 2010-04-12 20:32 . 2010-04-12 20:32 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Google 2010-04-12 20:27 . 2010-04-12 20:27 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Google 2010-03-24 08:04 . 2010-03-24 18:17 952768 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\21116\AdobeARM.exe 2010-03-24 08:04 . 2010-03-24 18:17 70584 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\21116\AdobeExtractFiles.dll 2010-03-24 08:04 . 2010-03-24 18:17 326056 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\21116\ReaderUpdater.exe 2010-03-24 08:04 . 2010-03-24 18:17 326056 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\21116\AcrobatUpdater.exe . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2010-04-17 10:34 . 2007-03-15 16:25 88256 ----a-w- c:\documents and settings\Pierre-Yves\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2010-03-11 12:34 . 2004-09-20 15:49 832512 ------w- c:\windows\system32\wininet.dll 2010-03-11 12:34 . 2004-09-20 15:48 78336 ----a-w- c:\windows\system32\ieencode.dll 2010-03-11 12:34 . 2004-09-20 15:48 17408 ----a-w- c:\windows\system32\corpol.dll 2010-03-09 11:10 . 2004-09-20 15:48 430080 ----a-w- c:\windows\system32\vbscript.dll 2010-02-24 13:11 . 2004-09-20 15:48 455680 ----a-w- c:\windows\system32\drivers\mrxsmb.sys 2010-02-16 19:07 . 2004-08-03 22:48 2148352 ------w- c:\windows\system32\ntoskrnl.exe 2010-02-16 19:06 . 2004-08-03 22:49 2026496 ------w- c:\windows\system32\ntkrnlpa.exe 2010-02-12 09:03 . 2010-02-26 00:41 293376 ------w- c:\windows\system32\browserchoice.exe 2010-02-12 04:34 . 2004-09-20 15:48 100864 ----a-w- c:\windows\system32\6to4svc.dll 2010-02-11 12:02 . 2004-09-20 15:48 226880 ----a-w- c:\windows\system32\drivers\tcpip6.sys . ((((((((((((((((((((((((((((( SnapShot@2010-04-13_10.31.06 ))))))))))))))))))))))))))))))))))))))))) . + 2007-11-07 00:19 . 2007-11-07 00:19 54272 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1\vcomp90.dll + 2009-07-11 21:02 . 2009-07-11 21:02 59728 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90rus.dll + 2009-07-11 21:02 . 2009-07-11 21:02 42832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90kor.dll + 2009-07-11 21:02 . 2009-07-11 21:02 43344 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90jpn.dll + 2009-07-11 21:02 . 2009-07-11 21:02 61264 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90ita.dll + 2009-07-11 21:02 . 2009-07-11 21:02 62800 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90fra.dll + 2009-07-11 21:02 . 2009-07-11 21:02 61760 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esp.dll + 2009-07-11 21:02 . 2009-07-11 21:02 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esn.dll + 2009-07-11 21:02 . 2009-07-11 21:02 53568 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90enu.dll + 2009-07-11 21:02 . 2009-07-11 21:02 63296 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90deu.dll + 2009-07-11 21:02 . 2009-07-11 21:02 36688 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90cht.dll + 2009-07-11 21:02 . 2009-07-11 21:02 35648 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90chs.dll + 2008-07-29 06:05 . 2008-07-29 06:05 62976 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90rus.dll + 2008-07-29 06:05 . 2008-07-29 06:05 46080 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90kor.dll + 2008-07-29 06:05 . 2008-07-29 06:05 46592 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90jpn.dll + 2008-07-29 06:05 . 2008-07-29 06:05 64512 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90ita.dll + 2008-07-29 06:05 . 2008-07-29 06:05 66048 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90fra.dll + 2008-07-29 06:05 . 2008-07-29 06:05 65024 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90esp.dll + 2008-07-29 06:05 . 2008-07-29 06:05 65024 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90esn.dll + 2008-07-29 06:05 . 2008-07-29 06:05 56832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90enu.dll + 2008-07-29 06:05 . 2008-07-29 06:05 66560 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90deu.dll + 2008-07-29 06:05 . 2008-07-29 06:05 39936 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90cht.dll + 2008-07-29 06:05 . 2008-07-29 06:05 38912 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90chs.dll + 2009-07-11 21:05 . 2009-07-11 21:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90u.dll + 2009-07-11 21:05 . 2009-07-11 21:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90.dll + 2008-07-29 04:07 . 2008-07-29 04:07 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfcm90u.dll + 2008-07-29 04:07 . 2008-07-29 04:07 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfcm90.dll + 2010-04-18 19:18 . 2010-04-18 19:18 16384 c:\windows\Temp\Perflib_Perfdata_2f0.dat + 2009-09-26 18:56 . 2009-09-26 18:56 34688 c:\windows\system32\FM20FRA.DLL + 2009-09-26 01:32 . 2009-09-26 01:32 31600 c:\windows\system32\FM20ENU.DLL + 2010-04-16 11:04 . 2010-04-16 11:04 28520 c:\windows\system32\drivers\ssmdrv.sys + 2010-01-13 14:01 . 2010-01-13 14:01 87040 c:\windows\system32\dllcache\cabview.dll + 2004-09-20 15:48 . 2010-01-13 14:01 87040 c:\windows\system32\cabview.dll + 2010-04-17 10:21 . 2010-04-17 10:21 47616 c:\windows\Installer\39053e.msi + 2010-04-13 10:32 . 2010-04-13 10:32 22528 c:\windows\Installer\273c4.msi - 2006-09-21 14:20 . 2010-03-16 10:49 23040 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe + 2006-09-21 14:20 . 2010-04-17 08:54 23040 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe + 2006-09-21 14:20 . 2010-04-17 08:54 61440 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pubs.exe - 2006-09-21 14:20 . 2010-03-16 10:49 61440 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pubs.exe + 2006-09-21 14:20 . 2010-04-17 08:54 27136 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe - 2006-09-21 14:20 . 2010-03-16 10:49 27136 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe - 2006-09-21 14:20 . 2010-03-16 10:49 11264 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe + 2006-09-21 14:20 . 2010-04-17 08:54 11264 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe - 2006-09-21 14:20 . 2010-03-16 10:49 86016 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\inficon.exe + 2006-09-21 14:20 . 2010-04-17 08:54 86016 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\inficon.exe - 2006-09-21 14:20 . 2010-03-16 10:49 12288 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe + 2006-09-21 14:20 . 2010-04-17 08:54 12288 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe + 2010-04-17 10:23 . 2010-04-17 10:23 34128 c:\windows\Installer\{20140000-003B-0000-0000-0000000FF1CE}\oisicon.exe + 2010-04-17 10:23 . 2010-04-17 10:23 19280 c:\windows\Installer\{20140000-003B-0000-0000-0000000FF1CE}\cagicon.exe + 2009-12-21 18:09 . 2009-12-21 18:09 16832 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\ViewerPS.dll + 2009-12-21 23:57 . 2009-12-21 23:57 35760 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\reader_sl.exe + 2009-12-21 18:02 . 2009-12-21 18:02 79280 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\PDFPrevHndlr.dll + 2009-12-21 21:21 . 2009-12-21 21:21 99776 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\eula.exe + 2009-12-21 21:37 . 2009-12-21 21:37 27048 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\acrotextextractor.exe + 2009-12-21 16:39 . 2009-12-21 16:39 15288 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\AcroRd32Info.exe + 2009-12-21 16:27 . 2009-12-21 16:27 75200 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\acroiehelpershim.dll + 2009-12-21 16:27 . 2009-12-21 16:27 61888 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\AcroIEHelper.dll + 2010-04-17 12:41 . 2010-04-17 12:41 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\da0844aca5aaaf61d1781dafb0bf1319\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.ni.dll + 2010-04-17 12:41 . 2010-04-17 12:41 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\c4cd94dea88809a029aef7a5017d4652\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.ni.dll + 2010-04-17 12:42 . 2010-04-17 12:43 30720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\bb36da343c103d148f8a5a7baa2ba964\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.resources.ni.dll + 2010-04-17 12:43 . 2010-04-17 12:43 46080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\b259013a7e453c20749b99871f416d19\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.resources.ni .dll + 2010-04-17 12:41 . 2010-04-17 12:41 28160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a9a61063915ae576a794f3be408d3966\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.ni.dll + 2010-04-17 12:43 . 2010-04-17 12:43 12288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9027dd8d4cd770f4798f298a000da069\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.resources.ni.dll + 2010-04-17 12:43 . 2010-04-17 12:43 29696 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\83fc0fef72acf3d40c896879fa0cf9bd\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.resources.ni.dll + 2010-04-17 12:41 . 2010-04-17 12:41 28672 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\77d3ad76d592985a69125d4c0697f32f\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.ni.dll + 2010-04-17 12:41 . 2010-04-17 12:41 84992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\6db1f325d32c7f1c24b113b7acaf3dd7\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.ni.dll + 2010-04-17 12:42 . 2010-04-17 12:42 13824 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\6d9cc2606b00c9d29ea86e09628fdb4f\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.resources.ni.dll + 2010-04-17 10:26 . 2010-04-17 10:26 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\56aefffa4bb6760b7c1fdf05ea15944f\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.ni.dll + 2010-04-17 12:41 . 2010-04-17 12:41 35328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\537560195b60b4ab2ffef02a4451236f\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.ni.dll + 2010-04-17 12:41 . 2010-04-17 12:41 54784 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\51458b8222242be39856bf76a440ad25\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll + 2010-04-17 12:43 . 2010-04-17 12:43 26624 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\4fbed3b3093cae4b0c74525729a4e9c8\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.resources.ni. dll + 2010-04-17 12:43 . 2010-04-17 12:43 23552 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\3c797848b503475fb4cb4f0a4c0b0e77\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.resources.ni.dll + 2010-04-17 12:43 . 2010-04-17 12:43 26624 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\32d13a69d9af6cc5537d44a41bb210b3\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.resources.ni.dll + 2010-04-17 12:41 . 2010-04-17 12:41 58368 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\2f86c806a26b33019a85c4f522403040\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll + 2010-04-17 12:42 . 2010-04-17 12:42 66560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\2d471126769348dd6a35552a42320276\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.ni.dll + 2010-04-17 12:43 . 2010-04-17 12:43 12288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\176862f65114d77a8cf60adc79eed033\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.resources.ni.dll + 2010-04-17 12:42 . 2010-04-17 12:42 14848 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\c6299cbcd1893bf81ab7fb8bdf62ac86\Microsoft.Office.Tools.Excel.v9.0.resources.ni.dll + 2010-04-17 12:42 . 2010-04-17 12:42 26112 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\adce99ad993de30a63f116f8350ac537\Microsoft.Office.Tools.v9.0.resources.ni.dll + 2010-04-17 12:42 . 2010-04-17 12:42 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\97394466f6bd5e3667a8392627c58ab0\Microsoft.Office.Tools.Outlook.v9.0.resources.ni.dll + 2010-04-17 12:42 . 2010-04-17 12:42 30208 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\64a6bf4e5e4d5166c20c252bad600816\Microsoft.Office.Tools.Common.v9.0.resources.ni.dll + 2010-04-17 12:42 . 2010-04-17 12:42 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\3e710b86907038f76944f2555797f6cf\Microsoft.Office.Tools.Word.v9.0.resources.ni.dll + 2010-04-17 10:22 . 2010-04-17 10:22 13392 c:\windows\assembly\GAC_MSIL\policy.3.5.System.Data.SqlServerCe\3.5.0.0__89845dcd8080cc91\policy.3.5.System.Data.SqlServerCe.dll + 2010-04-17 10:21 . 2010-04-17 10:22 13392 c:\windows\assembly\GAC_MSIL\policy.3.5.System.Data.SqlServerCe.Entity\3.5.0.0__89845dcd8080cc91\policy.3.5.System.Data.SqlServerCe.Entity.dll + 2010-04-17 10:22 . 2010-04-17 10:22 11104 c:\windows\assembly\GAC_MSIL\Policy.12.0.office\14.0.0.0__71e9bce111e9429c\Policy.12.0.Office.dll + 2010-04-17 10:22 . 2010-04-17 10:22 11624 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Vbe.Interop\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Vbe.Interop.dll + 2010-04-17 10:22 . 2010-04-17 10:22 11648 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.Outlook\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.Outlook.dll + 2010-04-17 10:22 . 2010-04-17 10:22 11648 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.MSProject\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.MSProject.dll + 2010-04-17 10:21 . 2010-04-17 10:21 11648 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.Access.Dao\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.Access.Dao.dll + 2010-04-17 10:22 . 2010-04-17 10:22 11088 c:\windows\assembly\GAC_MSIL\Policy.11.0.office\14.0.0.0__71e9bce111e9429c\Policy.11.0.Office.dll + 2010-04-17 10:22 . 2010-04-17 10:22 11640 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Vbe.Interop\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.dll + 2010-04-17 10:22 . 2010-04-17 10:22 11648 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.Outlook\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Outlook.dll + 2010-04-17 10:22 . 2010-04-17 10:22 11648 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.MSProject\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.MSProject.dll + 2010-04-17 10:22 . 2010-04-17 10:22 86016 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 65536 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 36864 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 45056 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 77824 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 86016 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 53248 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 36864 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 49152 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Contract.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Contract.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 65536 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.dll + 2010-04-17 10:18 . 2010-04-17 10:18 32768 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.resources.dll + 2010-04-17 10:22 . 2010-04-17 10:22 81920 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll + 2010-04-17 10:18 . 2010-04-17 10:18 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.resources.dll + 2010-04-17 10:18 . 2010-04-17 10:18 49152 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.resources\10.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.resources.dl l + 2010-04-17 10:22 . 2010-04-17 10:22 77824 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll + 2010-04-17 10:18 . 2010-04-17 10:18 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.resources.dll + 2010-04-17 10:22 . 2010-04-17 10:22 45056 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll + 2010-04-17 10:18 . 2010-04-17 10:18 15872 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.resources.dll + 2010-04-17 10:18 . 2010-04-17 10:18 32768 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.resources\10.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.resources.dll + 2010-04-17 10:22 . 2010-04-17 10:22 40960 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 22016 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 45056 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 45056 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 63320 c:\windows\assembly\GAC_MSIL\Microsoft.Vbe.Interop\14.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll + 2010-04-17 10:22 . 2010-04-17 10:22 95312 c:\windows\assembly\GAC_MSIL\Microsoft.Synchronization.Data.SqlServerCe\3.5.0.0__89845dcd8080cc91\Microsoft.Synchronization.Data.SqlServerCe.dll + 2010-04-17 10:22 . 2010-04-17 10:22 94208 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.v9.0.dll + 2010-04-17 10:18 . 2010-04-17 10:18 28672 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Office.Tools.v9.0.resources.dll + 2010-04-17 10:22 . 2010-04-17 10:22 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Outlook.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Outlook.v9.0.dll + 2010-04-17 10:18 . 2010-04-17 10:18 11776 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Outlook.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Office.Tools.Outlook.v9.0.resources.dll + 2010-04-17 10:18 . 2010-04-17 10:18 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Common.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Office.Tools.Common.v9.0.resources.dll + 2010-04-17 10:21 . 2010-04-17 10:21 79728 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.Access.Dao\14.0.0.0__71e9bce111e9429c\Microsoft.Office.interop.access.dao.dll + 2010-04-17 10:22 . 2010-04-17 10:22 51056 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Tools.AutoGen\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.Tools.AutoGen.dll + 2010-04-17 10:22 . 2010-04-17 10:22 55152 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.SyncServices.Intl\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.SyncServices.Intl.dll + 2010-04-17 10:19 . 2010-04-17 10:19 55152 c:\windows\assembly\GAC_MSIL\microsoft.office.businessapplications.syncservices.intl.resources\14.0.0.0_fr_71e9bce111e9429c\Microsoft.Office.BusinessApplications.SyncServices.Intl.Resources.dll + 2010-04-17 10:22 . 2010-04-17 10:22 92016 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.RuntimeUi.Intl\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.RuntimeUi.Intl.dll + 2010-04-17 10:19 . 2010-04-17 10:19 63344 c:\windows\assembly\GAC_MSIL\microsoft.office.businessapplications.runtimeui.intl.resources\14.0.0.0_fr_71e9bce111e9429c\Microsoft.Office.BusinessApplications.RuntimeUi.intl.resources.dll + 2010-04-17 10:22 . 2010-04-17 10:22 19312 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Runtime.Intl\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.Runtime.Intl.dll + 2010-04-17 10:19 . 2010-04-17 10:19 19824 c:\windows\assembly\GAC_MSIL\microsoft.office.businessapplications.runtime.intl.resources\14.0.0.0_fr_71e9bce111e9429c\Microsoft.Office.BusinessApplications.Runtime.intl.resources.dll + 2010-04-17 10:22 . 2010-04-17 10:22 96112 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Diagnostics\14.0.0.0__71e9bce111e9429c\microsoft.office.businessapplications.diagnostics.dll + 2010-04-17 10:22 . 2010-04-17 10:22 13312 c:\windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll + 2006-09-21 14:20 . 2010-04-17 08:54 4096 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe - 2006-09-21 14:20 . 2010-03-16 10:49 4096 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe + 2010-04-17 10:18 . 2010-04-17 10:18 4096 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.resources\10.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.resources.dll + 2010-04-17 10:18 . 2010-04-17 10:18 4608 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.resources.dll + 2010-04-17 10:18 . 2010-04-17 10:18 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.resources.dll + 2010-04-17 10:18 . 2010-04-17 10:18 8192 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Word.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Office.Tools.Word.v9.0.resources.dll + 2010-04-17 10:18 . 2010-04-17 10:18 7168 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Excel.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Office.Tools.Excel.v9.0.resources.dll + 2010-04-17 10:21 . 2010-04-17 10:22 4608 c:\windows\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\extensibility.dll + 2009-07-11 21:02 . 2009-07-11 21:02 653120 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll + 2009-07-11 21:02 . 2009-07-11 21:02 569664 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll + 2009-07-11 21:05 . 2009-07-11 21:05 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcm90.dll + 2008-07-29 06:05 . 2008-07-29 06:05 655872 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcr90.dll + 2008-07-29 06:05 . 2008-07-29 06:05 572928 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcp90.dll + 2008-07-29 01:54 . 2008-07-29 01:54 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcm90.dll + 2009-07-11 22:02 . 2009-07-11 22:02 159032 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\atl90.dll + 2008-07-29 06:05 . 2008-07-29 06:05 161784 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_d01483b2\atl90.dll + 2004-08-04 04:56 . 2004-08-04 04:56 293376 c:\windows\system32\WISPTIS.EXE + 2004-09-20 15:49 . 2009-12-24 07:00 177664 c:\windows\system32\wintrust.dll + 2004-08-04 04:56 . 2004-08-04 04:56 207360 c:\windows\system32\INKED.DLL + 2006-08-24 13:45 . 2010-04-17 10:32 324320 c:\windows\system32\FNTCACHE.DAT + 2009-12-24 07:00 . 2009-12-24 07:00 177664 c:\windows\system32\dllcache\wintrust.dll - 2008-05-09 10:55 . 2008-05-09 10:55 430080 c:\windows\system32\dllcache\vbscript.dll + 2008-05-09 10:55 . 2010-03-09 11:10 430080 c:\windows\system32\dllcache\vbscript.dll + 2008-06-20 11:08 . 2010-02-11 12:02 226880 c:\windows\system32\dllcache\tcpip6.sys + 2008-11-15 23:27 . 2010-02-24 13:11 455680 c:\windows\system32\dllcache\mrxsmb.sys + 2010-02-12 04:34 . 2010-02-12 04:34 100864 c:\windows\system32\dllcache\6to4svc.dll + 2010-04-15 09:51 . 2010-04-15 09:51 195584 c:\windows\Installer\a0a6542.msi + 2010-04-17 10:21 . 2010-04-17 10:21 585728 c:\windows\Installer\39052e.msi + 2010-04-17 10:20 . 2010-04-17 10:20 598528 c:\windows\Installer\390528.msi + 2010-04-17 10:20 . 2010-04-17 10:20 588288 c:\windows\Installer\390522.msi + 2010-04-17 10:20 . 2010-04-17 10:20 599040 c:\windows\Installer\39051c.msi + 2010-04-17 10:20 . 2010-04-17 10:20 594432 c:\windows\Installer\390516.msi + 2010-04-17 10:20 . 2010-04-17 10:20 594432 c:\windows\Installer\390510.msi + 2010-04-17 10:19 . 2010-04-17 10:19 589312 c:\windows\Installer\39050a.msi + 2010-04-13 10:49 . 2010-04-13 10:49 228352 c:\windows\Installer\2f0a4.msi + 2006-09-21 14:20 . 2010-04-17 08:54 409600 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe - 2006-09-21 14:20 . 2010-03-16 10:49 409600 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe + 2006-09-21 14:20 . 2010-04-17 08:54 286720 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe - 2006-09-21 14:20 . 2010-03-16 10:49 286720 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe - 2006-09-21 14:20 . 2010-03-16 10:49 249856 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pptico.exe + 2006-09-21 14:20 . 2010-04-17 08:54 249856 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pptico.exe + 2006-09-21 14:20 . 2010-04-17 08:54 794624 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\outicon.exe - 2006-09-21 14:20 . 2010-03-16 10:49 794624 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\outicon.exe + 2006-09-21 14:20 . 2010-04-17 08:54 135168 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\misc.exe - 2006-09-21 14:20 . 2010-03-16 10:49 135168 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\misc.exe + 2006-09-21 14:20 . 2010-04-17 08:54 593920 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\accicons.exe - 2006-09-21 14:20 . 2010-03-16 10:49 593920 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\accicons.exe + 2010-04-17 10:19 . 2010-04-17 10:19 571728 c:\windows\Installer\{20140000-006E-040C-0000-0000000FF1CE}\misc.exe + 2010-04-17 10:23 . 2010-04-17 10:23 375120 c:\windows\Installer\{20140000-003B-0000-0000-0000000FF1CE}\pj11icon.exe + 2010-04-17 10:23 . 2010-04-17 10:23 571728 c:\windows\Installer\{20140000-003B-0000-0000-0000000FF1CE}\misc.exe + 2009-12-21 16:35 . 2009-12-21 16:35 378264 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\pdfshell.dll + 2009-12-21 18:05 . 2009-12-21 18:05 116168 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\PDFPrevHndlrShim.exe + 2009-12-21 16:34 . 2009-12-21 16:34 103864 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\nppdf32.dll + 2009-11-09 17:18 . 2009-11-09 17:18 684032 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\JP2KLib.dll + 2009-12-21 18:02 . 2009-12-21 18:02 542168 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\AdobeCollabSync.exe + 2009-12-21 16:43 . 2009-12-21 16:43 120240 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\AcroRdIF.dll + 2009-12-21 23:57 . 2009-12-21 23:57 349616 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\AcroRd32.exe + 2009-12-21 16:15 . 2009-12-21 16:15 660912 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\AcroPDF.dll + 2009-12-21 17:32 . 2009-12-21 17:32 280024 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\acrobroker.exe + 2009-12-21 17:15 . 2009-12-21 17:15 251296 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\a3dutility.exe + 2008-11-15 23:27 . 2010-02-24 13:11 455680 c:\windows\Driver Cache\i386\mrxsmb.sys + 2010-04-17 12:43 . 2010-04-17 12:43 146944 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d7d43d0712504499674c89a7f68ea2fe\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0.ni.dll + 2010-04-17 12:43 . 2010-04-17 12:43 303104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\ca282182b80fc93fd2957010c959573c\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.ni.dll + 2010-04-17 12:41 . 2010-04-17 12:41 215040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\c457c4d7b58083ac65b6cb705116d138\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.ni.dll + 2010-04-17 12:41 . 2010-04-17 12:41 183808 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\bd6faed42a3217a7cd5060b051762846\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.ni.dll + 2010-04-17 12:41 . 2010-04-17 12:41 192000 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\bd0a98c63c9bc80c96c6bb558cdd1120\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll + 2010-04-17 12:43 . 2010-04-17 12:43 622080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9bd28201449864900392fbf8a24be03b\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll + 2010-04-17 12:43 . 2010-04-17 12:43 337920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\999c381715d7024dbfff173b71ff37da\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.ni.dll + 2010-04-17 12:41 . 2010-04-17 12:41 146432 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\91d26cbf066bbcb26cb25915fe1333ac\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll + 2010-04-17 12:41 . 2010-04-17 12:41 112128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8b4ac846cca77b94a1b7613105e2586a\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.ni.dll + 2010-04-17 12:43 . 2010-04-17 12:43 664064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\68d99fcb2f267f0757950440e7ea27b9\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll + 2010-04-17 12:43 . 2010-04-17 12:43 146432 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\4a16ed1a18bf3ac6aade883f28b3b3e2\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.resources.ni.dll + 2010-04-17 12:43 . 2010-04-17 12:43 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\3b5d7cf0b2657c0c5fb2e9a882392319\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll + 2010-04-17 12:43 . 2010-04-17 12:43 285184 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\347bedbe0932f2b3c6ad0e48012773a7\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.ni.dll + 2010-04-17 12:42 . 2010-04-17 12:43 365056 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\261825fd0388d836741fc723b0710dde\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.ni.dll + 2010-04-17 12:41 . 2010-04-17 12:41 133120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\117a121b269ab75697dda44dcddf7065\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.ni.dll + 2010-04-17 12:43 . 2010-04-17 12:43 137728 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\050134092fff5558124af2e29bf98172\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.ni.dll + 2010-04-17 12:42 . 2010-04-17 12:42 813568 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\ee50544b83ece0f884572c5dc5756231\Microsoft.Office.Tools.Common.v9.0.ni.dll + 2010-04-17 12:42 . 2010-04-17 12:42 946688 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\abae21559b70adfca889a9db3ffadd88\Microsoft.Office.Tools.Excel.v9.0.ni.dll + 2010-04-17 12:42 . 2010-04-17 12:42 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\a1d29ce42dc185841d6c3fcdf58a7ff3\Microsoft.Office.Tools.Outlook.v9.0.ni.dll + 2010-04-17 12:41 . 2010-04-17 12:41 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\a08203eeb416575e1216f524b24b53b7\Microsoft.Office.Tools.v9.0.ni.dll + 2010-04-17 12:42 . 2010-04-17 12:42 657920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\674d23040eba6991a552f176b1ecf340\Microsoft.Office.Tools.Word.v9.0.ni.dll + 2010-04-17 10:24 . 2010-04-17 10:24 266752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\c683b4458c4b4fd2af06721e5d230a6b\Microsoft.Office.BusinessApplications.Diagnostics.ni.dll + 2010-04-17 10:23 . 2010-04-17 10:23 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessD#\faf0bc5f0534ab88f180057e6969d2ce\Microsoft.BusinessData.ni.dll + 2010-04-17 10:22 . 2010-04-17 10:22 271440 c:\windows\assembly\GAC_MSIL\System.Data.SqlServerCe\3.5.1.0__89845dcd8080cc91\System.Data.SqlServerCe.dll + 2010-04-17 10:22 . 2010-04-17 10:22 271440 c:\windows\assembly\GAC_MSIL\System.Data.SqlServerCe\3.5.0.0__89845dcd8080cc91\System.Data.SqlServerCe.dll + 2010-04-17 10:22 . 2010-04-17 10:22 230480 c:\windows\assembly\GAC_MSIL\System.Data.SqlServerCe.Entity\3.5.1.0__89845dcd8080cc91\System.Data.SqlServerCe.Entity.dll + 2010-04-17 10:22 . 2010-04-17 10:22 448344 c:\windows\assembly\GAC_MSIL\office\14.0.0.0__71e9bce111e9429c\OFFICE.DLL + 2010-04-17 10:22 . 2010-04-17 10:22 385024 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.dll + 2010-04-17 10:18 . 2010-04-17 10:18 151552 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.resources\10.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.resources.dll + 2010-04-17 10:22 . 2010-04-17 10:22 131072 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 212992 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 143360 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 176128 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 286720 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 374624 c:\windows\assembly\GAC_MSIL\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll + 2010-04-17 10:22 . 2010-04-17 10:22 115744 c:\windows\assembly\GAC_MSIL\Microsoft.Synchronization.Data\1.0.0.0__89845dcd8080cc91\Microsoft.Synchronization.Data.dll + 2010-04-17 10:22 . 2010-04-17 10:22 115744 c:\windows\assembly\GAC_MSIL\Microsoft.Synchronization.Data.Server\1.0.0.0__89845dcd8080cc91\Microsoft.Synchronization.Data.Server.dll + 2010-04-17 10:22 . 2010-04-17 10:22 202608 c:\windows\assembly\GAC_MSIL\Microsoft.SharePoint.BusinessData.Administration.Client.Intl\14.0.0.0__71e9bce111e9429c\Microsoft.SharePoint.BusinessData.Administration.Client.Intl.dll + 2010-04-17 10:22 . 2010-04-17 10:22 299008 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Word.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Word.v9.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 438272 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Excel.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Excel.v9.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 356352 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Common.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Common.v9.0.dll + 2010-04-17 10:22 . 2010-04-17 10:22 780128 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Project.WebProj\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Project.WebProj.dll + 2010-04-17 10:22 . 2010-04-17 10:22 964456 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.Outlook\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Outlook.dll + 2010-04-17 10:22 . 2010-04-17 10:22 976744 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.MSProject\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.MSProject.dll + 2010-04-17 10:22 . 2010-04-17 10:22 202608 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessData.Intl\14.0.0.0__71e9bce111e9429c\microsoft.office.businessdata.intl.dll + 2010-04-17 10:19 . 2010-04-17 10:19 218992 c:\windows\assembly\GAC_MSIL\microsoft.office.businessdata.intl.resources\14.0.0.0_fr_71e9bce111e9429c\Microsoft.Office.BusinessData.Intl.Resources.dll + 2010-04-17 10:22 . 2010-04-17 10:22 419696 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Tools\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.Tools.dll + 2010-04-17 10:22 . 2010-04-17 10:22 161648 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Tools.Intl\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.Tools.Intl.dll + 2010-04-17 10:22 . 2010-04-17 10:22 644976 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.RuntimeUi\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.RuntimeUi.dll + 2010-04-17 10:22 . 2010-04-17 10:22 542576 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Runtime\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.Runtime.dll + 2010-04-17 10:21 . 2010-04-17 10:21 112536 c:\windows\assembly\GAC_MSIL\Microsoft.BusinessData\14.0.0.0__71e9bce111e9429c\Microsoft.BusinessData.dll + 2010-04-17 10:22 . 2010-04-17 10:22 505712 c:\windows\assembly\GAC_32\Microsoft.SharePoint.BusinessData.Administration.Client\14.0.0.0__71e9bce111e9429c\Microsoft.SharePoint.BusinessData.Administration.Client.dll + 2010-04-17 10:22 . 2010-04-17 10:22 943984 c:\windows\assembly\GAC_32\Microsoft.Office.BusinessData\14.0.0.0__71e9bce111e9429c\microsoft.office.businessdata.dll + 2010-04-17 10:22 . 2010-04-17 10:22 229376 c:\windows\assembly\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\MSCOMCTL.DLL + 2009-07-11 21:02 . 2009-07-11 21:02 3780424 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90u.dll + 2009-07-11 21:02 . 2009-07-11 21:02 3765048 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90.dll + 2008-07-29 06:05 . 2008-07-29 06:05 3783672 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfc90u.dll + 2008-07-29 06:05 . 2008-07-29 06:05 3768312 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfc90.dll + 2009-09-26 01:32 . 2009-09-26 01:32 1205080 c:\windows\system32\FM20.DLL + 2008-10-17 22:23 . 2010-02-17 12:07 2192000 c:\windows\system32\dllcache\ntoskrnl.exe + 2008-10-17 22:23 . 2010-02-16 19:06 2026496 c:\windows\system32\dllcache\ntkrpamp.exe + 2008-10-17 22:23 . 2010-02-16 19:07 2068864 c:\windows\system32\dllcache\ntkrnlpa.exe + 2008-10-17 22:23 . 2010-02-16 19:07 2148352 c:\windows\system32\dllcache\ntkrnlmp.exe + 2010-04-17 10:23 . 2010-04-17 10:23 8580096 c:\windows\Installer\3905d1.msi + 2010-04-17 10:21 . 2010-04-17 10:21 1743872 c:\windows\Installer\390534.msi + 2010-04-17 10:19 . 2010-04-17 10:19 3005952 c:\windows\Installer\390504.msi + 2010-03-11 10:03 . 2010-03-11 10:03 5524480 c:\windows\Installer\227f2a0.msp + 2010-03-11 19:16 . 2010-03-11 19:16 4148224 c:\windows\Installer\227f28a.msp + 2010-04-17 09:47 . 2010-04-17 09:47 3968512 c:\windows\Installer\1bab21.msi + 2009-12-21 16:29 . 2009-12-21 16:29 2409880 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\rt3d.dll + 2009-10-27 18:34 . 2009-10-27 18:34 5009408 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\authplay.dll + 2009-12-21 21:31 . 2009-12-21 21:31 5713920 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\AGM.dll + 2008-10-17 22:23 . 2010-02-17 12:07 2192000 c:\windows\Driver Cache\i386\ntoskrnl.exe + 2008-10-17 22:23 . 2010-02-16 19:06 2026496 c:\windows\Driver Cache\i386\ntkrpamp.exe + 2008-10-17 22:23 . 2010-02-16 19:07 2068864 c:\windows\Driver Cache\i386\ntkrnlpa.exe + 2008-10-17 22:23 . 2010-02-16 19:07 2148352 c:\windows\Driver Cache\i386\ntkrnlmp.exe + 2010-04-17 12:42 . 2010-04-17 12:42 1301504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\77b4a6e939637fdd24aa655d586e626e\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.ni.dll + 2010-04-17 10:23 . 2010-04-17 10:24 2041856 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\e2c1229aee2d73dda82a4d9d0cec3c15\Microsoft.Office.BusinessApplications.RuntimeUi.ni.dll + 2010-04-17 10:23 . 2010-04-17 10:23 1501696 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\9a9325283ef49198c1a7ff051294d908\Microsoft.Office.BusinessApplications.Runtime.ni.dll + 2010-04-17 10:24 . 2010-04-17 10:24 3210752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\370c5d1c5af45c90fc28c4446de2c3bd\Microsoft.Office.BusinessData.ni.dll + 2010-04-17 10:24 . 2010-04-17 10:24 4626944 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\18e2e556e3f4f3c793bace6a3b684b5a\Microsoft.Office.BusinessApplications.SyncServices.ni.dll + 2010-04-17 10:22 . 2010-04-17 10:22 1640304 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.SyncServices\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.SyncServices.dll + 2010-04-17 10:22 . 2010-04-17 10:22 8007680 c:\windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll + 2007-05-07 21:56 . 2010-04-06 17:52 31971272 c:\windows\system32\MRT.exe + 2010-04-04 06:54 . 2010-04-04 06:54 11850240 c:\windows\Installer\4cb61.msp + 2009-12-21 21:21 . 2009-12-21 21:21 20436408 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\AcroRd32.dll . -- Instantané actualisé -- . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] 2009-11-03 19:12 556432 ----a-w- c:\progra~1\MICROS~3\Office14\URLREDIR.DLL [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Google Update"="c:\documents and settings\Pierre-Yves\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2008-09-13 133104] "msnmsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 3883856] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-13 68856] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Wireless Console 2"="c:\program files\Wireless Console 2\wcourier.exe" [2005-10-17 987136] "IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2006-04-14 667718] "IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2006-04-14 602182] "EOUApp"="c:\program files\Intel\Wireless\Bin\EOUWiz.exe" [2006-04-14 569413] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-11-21 7335936] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-10-21 761945] "RemoteControl"="c:\program files\ASUSTeK\ASUSDVD\PDVDServ.exe" [2004-11-02 32768] "Power_Gear"="c:\program files\ASUS\Power4 Gear\BatteryLife.exe" [2006-03-06 86016] "ASUS Live Update"="c:\program files\ASUS\ASUS Live Update\ALU.exe" [2006-02-21 180224] "NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648] "ABLKSR"="c:\windows\ABLKSR\ABLKSR.exe" [2006-01-02 61440] "RTHDCPL"="RTHDCPL.EXE" [2005-09-06 14850560] "HControl"="c:\windows\ATK0100\HControl.exe" [2006-02-22 106496] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-05-27 413696] "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272] "Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768] "BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2009-09-26 83312] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] "Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 1241088] [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Adobe Reader Speed Launch.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Adobe Reader Speed Launch.lnk backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^ASUS ChkMail.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\ASUS ChkMail.lnk backup=c:\windows\pss\ASUS ChkMail.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Load] System [X] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] 2005-11-21 08:51 1519616 ----a-w- c:\windows\system32\nwiz.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication] 2007-06-18 13:10 271360 ----a-w- c:\program files\Nokia\Nokia PC Suite 6\LaunchApplication.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL] 2005-05-26 17:12 544768 ----a-r- c:\windows\sm56hlpr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] 2008-10-19 15:46 144792 ----a-w- c:\program files\Java\jre6\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] 2007-07-13 11:42 68856 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] 2008-04-01 18:49 36352 ----a-w- c:\program files\Winamp\winampa.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Messenger\\MSMSGS.EXE"= "c:\\Program Files\\uTorrent\\uTorrent.exe"= "c:\\Program Files\\Winamp Remote\\bin\\Orb.exe"= "c:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"= "c:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [13/04/2010 12:50 108289] R3 SynMini;USB2.0 1.3M Web Cam;c:\windows\system32\drivers\SynMini.sys [24/08/2006 16:19 720470] R3 SynScan;USB2.0 1.3M Web Cam Still Image;c:\windows\system32\drivers\SynScan.sys [24/08/2006 16:19 8278] S2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [12/04/2010 22:25 135664] S2 srserviceaspnet_state;Service de restauration système srserviceaspnet_state;c:\windows\system32\lz32t.exe srv --> c:\windows\system32\lz32t.exe srv [?] S3 cdrmkaun;cdrmkaun;\??\c:\docume~1\PIERRE~1\LOCALS~1\Temp\cdrmkaun.sys --> c:\docume~1\PIERRE~1\LOCALS~1\Temp\cdrmkaun.sys [?] S3 osppsvc;Office Software Protection Platform;c:\program files\Fichiers communs\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [26/09/2009 04:28 4639136] S3 UXDCMN;UXDCMN;\??\e:\winstress\UXDCMN.SYS --> e:\winstress\UXDCMN.SYS [?] . Contenu du dossier 'Tâches planifiées' 2009-09-24 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 15:57] 2010-04-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1311777357-2900331866-1157244928-1005Core1cac8e9ffc98514.job - c:\documents and settings\Pierre-Yves\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-09-13 10:19] 2010-04-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-04-12 20:25] 2010-04-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-04-12 20:25] . . ------- Examen supplémentaire ------- . uStart Page = hxxp://www.msn.fr/ uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 uInternet Connection Wizard,ShellNext = iexplore IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\Fichiers communs\Microsoft Shared\OFFICE14\MSOXMLMF.DLL . . ------- Associations de fichier ------- . .scr=AutoCADScriptFile . - - - - ORPHELINS SUPPRIMES - - - - AddRemove-HijackThis - c:\documents and settings\Pierre-Yves\Bureau\HijackThis.exe AddRemove-Nokia PC Suite - c:\documents and settings\All Users\Application Data\Installations\{A982E6CC-9F0D-4948-9B18-BDFD55DE4A72}\Nokia_PC_Suite_6_84_10_3_EA.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-04-18 21:18 Windows 5.1.2600 Service Pack 3 FAT NTAPI Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- CLES DE REGISTRE BLOQUEES --------------------- [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*] "C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL" . --------------------- DLLs chargées dans les processus actifs --------------------- - - - - - - - > 'explorer.exe'(4000) c:\progra~1\WINDOW~2\wmpband.dll c:\windows\system32\eappprxy.dll c:\windows\system32\WPDShServiceObj.dll c:\program files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll c:\program files\Nokia\Nokia PC Suite 6\PCSCM.dll c:\program files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_fre.nlr c:\program files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . ------------------------ Autres processus actifs ------------------------ . c:\program files\Intel\Wireless\Bin\EvtEng.exe c:\program files\Intel\Wireless\Bin\S24EvMon.exe c:\windows\RTHDCPL.EXE c:\program files\Avira\AntiVir Desktop\avguard.exe c:\program files\Java\jre6\bin\jqs.exe c:\windows\system32\nvsvc32.exe c:\program files\Intel\Wireless\Bin\RegSrvc.exe c:\windows\ATK0100\ATKOSD.exe c:\windows\system32\wbem\wmiapsrv.exe c:\progra~1\Intel\Wireless\Bin\Dot1XCfg.exe . ************************************************************************** . Heure de fin: 2010-04-18 21:21:49 - La machine a redémarré ComboFix-quarantined-files.txt 2010-04-18 19:21 ComboFix2.txt 2010-04-13 10:36 Avant-CF: 2 508 980 224 octets libres Après-CF: 2 512 977 920 octets libres - - End Of File - - F1A1B18D1455FF13793F25AF79540383
  13. Si c'est bon. il fallait juste attendre 10 min
  14. Il veut pas redémarrer en mode sans échec. Il y a un écran noir et un trait qui clignote en haut à gauche de l'écran
  15. Et c'est bien enregistré dans le C:\
×
×
  • Créer...