Aller au contenu

oOGegOo

Membres
 Afficher le profil  Afficher son activité

  • Compteur de contenus

    26

  • Inscription

  • Dernière visite

 Type de contenu 

Tout ce qui a été posté par oOGegOo

  1. oOGegOo
    voici le rapport Delfix http://cjoint.com/?3FruweyTRPx je te remercie beaucoup TomTom et je note le sujet comme résolu Merci A+
  2. oOGegOo
    Bonjour TomTom voilà le rapport java http://cjoint.com/?3FrrpSJt7QF et celui de flash http://cjoint.com/?3FrrtAPpjRx Merci et A+
  3. oOGegOo
    Salut Merci à toi TomTom bon d'abord ZXPFix dont voilà le rapport http://cjoint.com/?3FqwlknVAhN ensuite SFTGC voilà le rapport http://cjoint.com/?3FqwmR5a3k0 et enfin un petit coup de MalwareBytes et voilà le rapport http://cjoint.com/?3FqwpaEJ5Lg merci beaucoup !!!!
  4. oOGegOo
    Merci TomTom voilà le rapport ZXPDiag http://cjoint.com/?3FpvwtFp8gW ...
  5. oOGegOo
    Bonjour à tous et tout d'abord MERCI pour la qualité et la rapidité du service (et particuliairement merci TomTom et Dylav) par contre désolé de la lenteur de ma réponse mais j'étais un peu occupé ces derniers temps. Bon voilà j'ai desinstallé les différents programmes et j'ai scanné avec JunkWare Removal Tool voilà le rapport JRT --> http://cjoint.com/?3FptydXSSPw puis j'ai scanné/nettoyé avec ADWCleaner voilà le rapport ADW --> http://cjoint.com/?3FptzLkCBEE merci d'avance !!!
  6. oOGegOo
    Voilà !!! Bonjour Morron et les autres voici le lien vers le rapport http://cjoint.com/?3FhmEBytXSx ps : un petit détail qui n'en est peut-être pas un --> je n'ai pas réussi à redemarrer ma machine en "mode sans echec" !!! j'ai essayé en mode S E avec prise en charge reseau mais même chose, la machine reboutait après une dixaine de secondes en mode normal... merci de votre aide !!!
  7. oOGegOo
    Merci Bison et Morron Merci pour vos réponses je vais essayer ça dès que possible (pas ce soir ni demain ... peut-être vendredi sinon ce week end !) Que veux-tu dire par réduire la longuuer du chemin ? Ouvrir un fichier à la racine du DD ? Merci et à bientôt
  8. oOGegOo
    Bonjour à toute la communauté ZEBULON (alors zé pu soif !) oups scuzzz Bon voilà le problème --> lorsque je fais un clic droit sur un fichier (quel qu'il soit) et que je demande "ouvrir avec" puis "choisir le programme", je me retrouve avec une fenêtre d'alerte me disant que le fichier "D:/docu&setting/machin et tout le chemin du fichier" ben y parait qu'c'est pas une application valide win32 !!!! Je suis sur windows XP (ben ouai alors je ne sais pas ou poster ma requète) si quelqu'un pourrait m'aiguiller un peu (quel processus est lancé lorsqu'on éxécute cette commande?...) merci d'avance et à bientôt ps: lorsque j'èxécute cette commande, j'ai également une alerte de antivir (mon anti virus) me faisant une "remarque relative à la sécurité" indiquant un fichier vérolé (FilCout.M ou filescout.exe)
  9. oOGegOo
    voilà je l'ai envoyé sur le dossier malware (l'upload a reussi) . c'est ce qu'il m'a egalement dit la première fois pourtant !!!
  10. oOGegOo
    Salut je t'es envoyé le zip de killbox sur le dossier rapport (oOGegOo.zip) voici le rapport DiagHelp C:\WINDOWS\System32\Uninstall.ico -->12/02/2007 17:46:38 C:\WINDOWS\System32\pavas.ico -->12/02/2007 17:46:38 C:\WINDOWS\System32\Help.ico -->12/02/2007 17:46:38 C:\WINDOWS\System32\vsconfig.xml -->12/02/2007 17:40:11 C:\WINDOWS\System32\zllictbl.dat -->11/02/2007 17:19:46 C:\WINDOWS\System32\winlogon.exe -->8/02/2007 17:35:10 C:\WINDOWS\System32\RunOnce.t__ -->5/02/2007 0:54:39 C:\WINDOWS\System32\RunOnce2.tm_ -->5/02/2007 0:54:36 C:\WINDOWS\System32\RunOnce.tm_ -->5/02/2007 0:54:32 C:\WINDOWS\System32\CONFIG.NT -->23/01/2007 17:41:44 C:\WINDOWS\System32\wpa.dbl -->23/01/2007 17:40:30 C:\WINDOWS\System32\CmdLineExt03.dll -->21/01/2007 13:15:31 C:\WINDOWS\System32\jupdate-1.5.0_10-b03.log -->20/01/2007 15:03:28 C:\WINDOWS\System32\aquarium.scr -->15/01/2007 19:15:12 C:\WINDOWS\System32\aswBoot.exe -->15/01/2007 18:32:07 C:\WINDOWS\System32\AVASTSS.scr -->15/01/2007 18:23:20 C:\WINDOWS\System32\BASSMOD.dll -->14/01/2007 16:33:00 C:\WINDOWS\System32\StylesContent.dat -->1/01/2007 18:33:22 C:\WINDOWS\System32\pxcpyi64.exe -->1/01/2007 18:32:16 C:\WINDOWS\System32\pxcpya64.exe -->1/01/2007 18:32:16 C:\WINDOWS\System32\pxinsi64.exe -->1/01/2007 18:32:15 C:\WINDOWS\System32\pxinsa64.exe -->1/01/2007 18:32:15 C:\WINDOWS\System32\pxhpinst.exe -->1/01/2007 18:32:15 C:\WINDOWS\System32\FNTCACHE.DAT -->19/12/2006 23:23:19 C:\WINDOWS\System32\VXBLOCK.dll -->19/12/2006 20:50:17 C:\WINDOWS\win.ini -->12/02/2007 18:47:11 C:\WINDOWS\pavsig.txt -->12/02/2007 17:46:43 C:\WINDOWS\WindowsUpdate.log -->12/02/2007 17:46:38 C:\WINDOWS.log -->12/02/2007 17:40:56 C:\WINDOWS\wiaservc.log -->12/02/2007 17:40:29 C:\WINDOWS\wiadebug.log -->12/02/2007 17:40:29 C:\WINDOWS\bootstat.dat -->12/02/2007 17:39:51 C:\WINDOWS\SchedLgU.Txt -->12/02/2007 0:20:07 C:\WINDOWS\setupapi.log -->11/02/2007 23:20:46 C:\WINDOWS\NeroDigital.ini -->11/02/2007 17:27:58 C:\WINDOWS\setupact.log -->11/02/2007 13:44:16 C:\WINDOWS\setuperr.log -->11/02/2007 13:42:31 C:\WINDOWS\wmsetup.log -->11/02/2007 3:11:03 C:\WINDOWS\CD_Start.INI -->10/02/2007 19:06:39 C:\WINDOWS\QTFont.qfn -->10/02/2007 10:35:14 C:\WINDOWS\ALCFDRTM.EXE |30/12/2005 01:02:22 C:\WINDOWS\Alcmtr.exe |22/09/2005 21:10:53 C:\WINDOWS\ALCWZRD.EXE |22/09/2005 21:10:53 C:\WINDOWS\IsUn040c.exe |16/08/2004 17:25:14 C:\WINDOWS\IsUninst.exe |31/03/2006 23:27:14 C:\WINDOWS\MicCal.exe |22/09/2005 21:10:52 C:\WINDOWS\PATCH.EXE |07/07/2006 23:43:55 C:\WINDOWS\psuninst2.exe |09/04/2006 19:18:27 C:\WINDOWS\RTHDCPL.EXE |22/09/2005 21:10:52 C:\WINDOWS\RTLCPL.EXE |22/09/2005 21:10:52 C:\WINDOWS\runtsckl.exe |02/11/2005 17:07:12 C:\WINDOWS\slrundll.exe |31/12/1979 23:00:00 C:\WINDOWS\SmCfg.exe |22/09/2005 21:03:40 C:\WINDOWS\SoundMan.exe |22/09/2005 21:10:52 C:\WINDOWS\twunk_16.exe |16/08/2004 16:41:16 C:\WINDOWS\twunk_32.exe |16/08/2004 16:41:16 C:\WINDOWS\unin040c.exe |12/01/2006 20:38:16 C:\WINDOWS\uninst.exe |07/01/2007 13:36:22 C:\WINDOWS\UNISTB32.EXE |13/03/1998 00:02:00 C:\WINDOWS\UNNeroBackItUp.exe |12/09/2005 15:13:46 C:\WINDOWS\UNNeroMediaHome.exe |12/09/2005 15:13:46 C:\WINDOWS\UNNeroShowTime.exe |12/09/2005 15:13:46 C:\WINDOWS\UNNeroVision.exe |12/09/2005 15:13:46 C:\WINDOWS\UNRecode.exe |12/09/2005 15:13:46 C:\WINDOWS\loadhttp.dll |15/10/2002 13:29:40 C:\WINDOWS\ov530dib.dll |16/06/2006 21:51:42 C:\WINDOWS\patchw32.dll |14/12/2001 12:34:46 C:\WINDOWS\POCE98.DLL |23/09/1998 21:10:16 C:\WINDOWS\POCELANG.DLL |23/02/1999 14:12:18 C:\WINDOWS\RtlExUpd.dll |22/09/2005 21:10:50 C:\WINDOWS\TMUPDATE.DLL |07/07/2006 23:43:56 C:\WINDOWS\twain.dll |16/08/2004 16:41:16 C:\WINDOWS\twain_32.dll |16/08/2004 16:41:16 C:\WINDOWS\UNZIP.DLL |07/07/2006 23:43:55 C:\WINDOWS\system32\append.exe |16/08/2004 16:39:57 C:\WINDOWS\system32\asuninst.exe |07/07/2006 16:15:31 C:\WINDOWS\system32\aswBoot.exe |26/05/2006 14:18:50 C:\WINDOWS\system32\ati2evxx.exe |31/12/1979 23:00:00 C:\WINDOWS\system32\Ati2mdxx.exe |31/12/1979 23:00:00 C:\WINDOWS\system32\ChCfg.exe |22/09/2005 21:10:52 C:\WINDOWS\system32\debug.exe |16/08/2004 16:40:04 C:\WINDOWS\system32\dosx.exe |16/08/2004 16:40:08 C:\WINDOWS\system32\dvdplay.exe |23/08/2001 16:47:34 C:\WINDOWS\system32\edlin.exe |16/08/2004 16:40:20 C:\WINDOWS\system32\exe2bin.exe |16/08/2004 16:40:21 C:\WINDOWS\system32\fastopen.exe |16/08/2004 16:40:21 C:\WINDOWS\system32\FileOps.exe |12/01/2006 19:55:07 C:\WINDOWS\system32\HdAShCut.exe |07/01/2005 16:07:16 C:\WINDOWS\system32\java.exe |20/01/2007 15:03:29 C:\WINDOWS\system32\javaw.exe |20/01/2007 15:03:29 C:\WINDOWS\system32\javaws.exe |20/01/2007 15:03:29 C:\WINDOWS\system32\mem.exe |16/08/2004 16:40:35 C:\WINDOWS\system32\minirec.exe |22/09/2005 21:03:40 C:\WINDOWS\system32\mscdexnt.exe |16/08/2004 16:40:39 C:\WINDOWS\system32\NeroCheck.exe |12/01/2006 15:40:44 C:\WINDOWS\system32\nlsfunc.exe |16/08/2004 16:40:48 C:\WINDOWS\system32\Process.exe |08/02/2007 23:40:47 C:\WINDOWS\system32\pxcpya64.exe |01/01/2007 18:33:25 C:\WINDOWS\system32\pxcpyi64.exe |01/01/2007 18:33:25 C:\WINDOWS\system32\pxhpinst.exe |19/12/2006 20:50:47 C:\WINDOWS\system32\pxinsa64.exe |01/01/2007 18:33:25 C:\WINDOWS\system32\pxinsi64.exe |01/01/2007 18:33:25 C:\WINDOWS\system32\redir.exe |16/08/2004 16:41:00 C:\WINDOWS\system32\setver.exe |16/08/2004 16:41:03 C:\WINDOWS\system32\share.exe |16/08/2004 16:41:03 C:\WINDOWS\system32\slmh.exe |22/09/2005 21:03:40 C:\WINDOWS\system32\slserv.exe |31/12/1979 23:00:00 C:\WINDOWS\system32\SrchSTS.exe |08/02/2007 23:40:47 C:\WINDOWS\system32\swreg.exe |08/02/2007 23:40:47 C:\WINDOWS\system32\swsc.exe |08/02/2007 23:40:47 C:\WINDOWS\system32\usrmlnka.exe |23/08/2001 16:47:48 C:\WINDOWS\system32\usrprbda.exe |23/08/2001 16:47:48 C:\WINDOWS\system32\usrshuta.exe |23/08/2001 16:47:48 C:\WINDOWS\system32\34CoInstaller.dll |22/09/2005 21:10:08 C:\WINDOWS\system32\amr_cpl.dll |22/09/2005 21:03:40 C:\WINDOWS\system32\amstream.dll |16/08/2004 16:39:57 C:\WINDOWS\system32\ati2cqag.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ati2dvag.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ati2edxx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ati2evxx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ati3duag.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ATIDDC.DLL |31/12/1979 23:00:00 C:\WINDOWS\system32\ATIDEMGR.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atiiiexx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atikvmag.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atioglx1.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atioglxx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atipdlxx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atitvo32.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ativcoxx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ativvaxx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atmfd.dll |16/08/2004 16:39:57 C:\WINDOWS\system32\atmlib.dll |16/08/2004 16:39:57 C:\WINDOWS\system32\BASSMOD.dll |29/06/2006 19:41:19 C:\WINDOWS\system32\CmdLineExt.dll |09/07/2006 16:44:24 C:\WINDOWS\system32\CmdLineExt03.dll |21/01/2007 13:15:31 C:\WINDOWS\system32\coinst.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\compatUI.dll |16/08/2004 16:40:03 C:\WINDOWS\system32\cpuinf32.dll |22/11/2006 00:39:21 C:\WINDOWS\system32\dgrpsetu.dll |16/08/2004 16:55:15 C:\WINDOWS\system32\dgsetup.dll |16/08/2004 16:55:15 C:\WINDOWS\system32\divx.dll |22/11/2006 00:39:24 C:\WINDOWS\system32\dpl100.dll |22/11/2006 00:39:25 C:\WINDOWS\system32\dtu100.dll |22/11/2006 00:39:25 C:\WINDOWS\system32\encdec.dll |16/08/2004 16:40:21 C:\WINDOWS\system32\EqnClass.Dll |16/08/2004 16:55:15 C:\WINDOWS\system32\fdffbfbfd1_s.dll |26/05/2006 13:52:24 C:\WINDOWS\system32\ff_vfw.dll |22/11/2006 00:39:23 C:\WINDOWS\system32\frapsvid.dll |03/12/2005 12:56:50 C:\WINDOWS\system32\GEARAspi.dll |19/09/2006 15:43:58 C:\WINDOWS\system32\HdAProp.dll |07/01/2005 16:07:16 C:\WINDOWS\system32\HdAudRes.dll |07/01/2005 16:07:04 C:\WINDOWS\system32\hticons.dll |16/08/2004 17:03:32 C:\WINDOWS\system32\huffyuv.dll |22/11/2006 00:39:46 C:\WINDOWS\system32\hypertrm.dll |16/08/2004 17:03:05 C:\WINDOWS\system32\i420vfw.dll |22/11/2006 00:39:46 C:\WINDOWS\system32\Iacenc.dll |22/11/2006 00:39:46 C:\WINDOWS\system32\iccvid.dll |16/08/2004 16:40:27 C:\WINDOWS\system32\ieencode.dll |16/08/2004 16:40:28 C:\WINDOWS\system32\imagr5.dll |02/03/2006 14:27:05 C:\WINDOWS\system32\imagx5.dll |02/03/2006 14:27:05 C:\WINDOWS\system32\imagX7.dll |26/07/2004 16:16:10 C:\WINDOWS\system32\ImagXpr5.dll |02/03/2006 14:27:05 C:\WINDOWS\system32\imagXpr7.dll |26/07/2004 16:16:10 C:\WINDOWS\system32\imagXR7.dll |26/07/2004 16:16:10 C:\WINDOWS\system32\imagXRA7.dll |26/07/2004 16:16:10 C:\WINDOWS\system32\ir32_32.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\ir41_qc.dll |16/08/2004 16:41:37 C:\WINDOWS\system32\ir41_qcx.dll |16/08/2004 16:41:37 C:\WINDOWS\system32\ir50_32.dll |16/08/2004 16:41:37 C:\WINDOWS\system32\ir50_qc.dll |16/08/2004 16:41:37 C:\WINDOWS\system32\ir50_qcx.dll |16/08/2004 16:41:37 C:\WINDOWS\system32\isrdbg32.dll |16/08/2004 17:06:15 C:\WINDOWS\system32\jgaw400.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\jgdw400.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\jgmd400.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\jgpl400.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\jgsd400.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\jgsh400.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\lfbmp11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\LFCMP11n.DLL |07/06/2002 00:02:00 C:\WINDOWS\system32\lfeps11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lffax11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lfgif11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lfpcd11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lfpcx11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\Lfpng11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lfpsd11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lftga11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lftif11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lfwmf11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\libdivx.dll |22/11/2006 00:39:25 C:\WINDOWS\system32\libeay32_0.9.6l.dll |11/02/2007 17:07:38 C:\WINDOWS\system32\LTDIS11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\ltfil11n.DLL |07/06/2002 00:02:00 C:\WINDOWS\system32\ltimg11n.dll |07/06/2002 00:02:02 C:\WINDOWS\system32\ltkrn11n.dll |07/06/2002 00:02:02 C:\WINDOWS\system32\Ltwvc11n.dll |07/06/2002 00:02:02 C:\WINDOWS\system32\mdwmdmsp.dll |23/08/2001 16:47:06 C:\WINDOWS\system32\mplaa6.dll |22/11/2006 00:39:49 C:\WINDOWS\system32\mplam6.dll |22/11/2006 00:39:49 C:\WINDOWS\system32\mplapx.dll |22/11/2006 00:39:49 C:\WINDOWS\system32\mplaw7.dll |22/11/2006 00:39:49 C:\WINDOWS\system32\msdmo.dll |16/08/2004 16:40:40 C:\WINDOWS\system32\msencode.dll |16/08/2004 16:40:40 C:\WINDOWS\system32\MSRTEDIT.DLL |22/01/1999 19:46:58 C:\WINDOWS\system32\NeroCo.dll |16/02/2005 14:18:04 C:\WINDOWS\system32\Oemdspif.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ov530ext.dll |16/06/2006 21:51:42 C:\WINDOWS\system32\ov530usd.dll |16/06/2006 21:51:42 C:\WINDOWS\system32\PA207USD.DLL |01/09/2004 09:42:16 C:\WINDOWS\system32\paqsp.dll |23/08/2001 16:47:16 C:\WINDOWS\system32\PCDLIB32.DLL |07/06/2002 00:02:02 C:\WINDOWS\system32\picn20.dll |02/03/2006 14:27:05 C:\WINDOWS\system32\pncrt.dll |22/09/2005 21:24:30 C:\WINDOWS\system32\pndx5016.dll |22/09/2005 21:24:30 C:\WINDOWS\system32\pndx5032.dll |22/09/2005 21:24:30 C:\WINDOWS\system32\PsisDecd.dll |22/09/2005 21:10:07 C:\WINDOWS\system32\Px.dll |19/10/2004 15:56:36 C:\WINDOWS\system32\pxdrv.dll |17/01/2005 00:01:00 C:\WINDOWS\system32\pxmas.dll |19/10/2004 15:55:44 C:\WINDOWS\system32\PxWave.dll |19/10/2004 15:55:16 C:\WINDOWS\system32\PXWMA.dll |25/03/2004 09:30:40 C:\WINDOWS\system32\qedwipes.dll |16/08/2004 16:40:58 C:\WINDOWS\system32\qt-dx331.dll |22/11/2006 00:39:25 C:\WINDOWS\system32\rmoc3260.dll |22/09/2005 21:24:33 C:\WINDOWS\system32\SAA.dll |08/11/2003 20:16:58 C:\WINDOWS\system32\sbe.dll |16/08/2004 16:41:02 C:\WINDOWS\system32\slbcsp.dll |16/08/2004 16:41:05 C:\WINDOWS\system32\slbiop.dll |16/08/2004 16:41:05 C:\WINDOWS\system32\slbrccsp.dll |16/08/2004 16:41:05 C:\WINDOWS\system32\slextspk.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\SLGen.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\SLLights.dll |22/09/2005 21:03:40 C:\WINDOWS\system32\SLMOHServ.dll |22/09/2005 21:03:40 C:\WINDOWS\system32\spnike.dll |23/08/2001 16:47:18 C:\WINDOWS\system32\sprio600.dll |23/08/2001 16:47:18 C:\WINDOWS\system32\sprio800.dll |23/08/2001 16:47:18 C:\WINDOWS\system32\spxcoins.dll |16/08/2004 16:55:15 C:\WINDOWS\system32\ssldivx.dll |22/11/2006 00:39:25 C:\WINDOWS\system32\tsd32.dll |16/08/2004 16:41:16 C:\WINDOWS\system32\TwnLib20.dll |02/03/2006 14:27:05 C:\WINDOWS\system32\TwnLib4.dll |09/07/2004 08:43:56 C:\WINDOWS\system32\umloader.dll |07/01/2004 00:01:00 C:\WINDOWS\system32\usrcntra.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrcoina.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrdpa.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrdtea.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrfaxa.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrlbva.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrrtosa.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrsdpia.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrsvpia.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrv42a.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrv80a.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrvoica.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrvpa.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\vp6vfw.dll |29/06/2006 21:32:00 C:\WINDOWS\system32\vp7vfw.dll |22/11/2006 00:39:46 C:\WINDOWS\system32\vsdata.dll |11/02/2007 17:06:29 C:\WINDOWS\system32\vsinit.dll |11/02/2007 17:06:29 C:\WINDOWS\system32\vsmonapi.dll |11/02/2007 17:07:28 C:\WINDOWS\system32\vspubapi.dll |11/02/2007 17:07:28 C:\WINDOWS\system32\vsregexp.dll |11/02/2007 17:07:38 C:\WINDOWS\system32\vsutil.dll |11/02/2007 17:06:29 C:\WINDOWS\system32\vsutil_loc040c.dll |11/02/2007 17:07:43 C:\WINDOWS\system32\vswmi.dll |11/02/2007 17:07:28 C:\WINDOWS\system32\vsxml.dll |11/02/2007 17:07:28 C:\WINDOWS\system32\VXBLOCK.dll |20/05/2004 00:00:00 C:\WINDOWS\system32\win87em.dll |16/08/2004 16:41:22 C:\WINDOWS\system32\x264vfw.dll |22/11/2006 00:39:27 C:\WINDOWS\system32\xvidcore.dll |22/11/2006 00:39:26 C:\WINDOWS\system32\xvidvfw.dll |22/11/2006 00:39:26 C:\WINDOWS\system32\yv12vfw.dll |22/11/2006 00:39:46 C:\WINDOWS\system32\zlcomm.dll |11/02/2007 17:07:35 C:\WINDOWS\system32\zlcommdb.dll |11/02/2007 17:07:35 C:\WINDOWS\system32\ZPORT4AS.dll |07/07/2006 16:15:31 Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\WINDOWS\system32 05/08/2004 13:00 6.144 csrss.exe 1 fichier(s) 6.144 octets 0 Rép(s) 17.929.158.656 octets libres Contenu de Downloaded Program Files Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\WINDOWS\Downloaded Program Files 12/02/2007 18:09 <REP> . 12/02/2007 18:09 <REP> .. 24/08/2006 08:28 141.424 asinst.dll 22/08/2006 09:06 537 asinst.inf 15/11/2001 17:42 325 AxisCamControl.inf 15/11/2001 17:40 221.184 AxisCamControl.ocx 08/11/2001 10:59 192.512 CamCli.dll 16/08/2004 17:08 65 desktop.ini 25/07/2002 16:13 24.576 dwusplay.dll 25/07/2002 16:13 196.608 dwusplay.exe 29/09/2003 13:23 1.706.800 gdiplus.dll 29/09/2003 13:23 283.296 IDrop.ocx 29/09/2003 13:23 114.848 IDropENU.dll 13/03/2003 07:58 114.600 IDropFRA.dll 18/08/1999 08:54 180.224 ijl11.dll 25/07/2002 16:05 172.032 isusweb.dll 08/08/2006 11:45 576 kavwebscan.inf 09/11/2006 14:36 5.019 swflash.inf 16/06/2006 20:54 23.600 tvichw32.sys 29/09/2003 13:23 114.688 vizable.ocx 18 fichier(s) 3.492.914 octets Total des fichiers listés : 18 fichier(s) 3.492.914 octets 2 Rép(s) 17.929.158.656 octets libres Recherche de rootkit! (Merci S!Ri) Recherche d'infections connues Liste des programmes installes 3ds max 7 3DSexVilla-017.001 (Cracked) 7-Zip 4.32 Adobe After Effects 6.5 Adobe Bridge 1.0 Adobe Common File Installer Adobe Encore DVD 2.0 Adobe Encore DVD 2.0 Adobe Flash Player 9 ActiveX Adobe Help Center 2.0 Adobe Illustrator 10 Evaluation Adobe Photoshop 7.0 Adobe Premiere 6.0 Adobe Premiere Pro 2.0 Adobe Premiere Pro 2.0 Adobe Reader 7.0 - Français Adobe Stock Photos 1.0 Adobe SVG Viewer 3.0 Ahead NeroVision Express Antilles 2004 v1.3 Apple Software Update Archiveur WinRAR ATI Display Driver Audacity 1.2.6 avast! Antivirus AVG Anti-Spyware 7.5 Azureus CCleaner (remove only) CN-WCAM21SP PC-Camera Codeur Windows Media Série 9 ConvertXtoDVD 2.1.8.193 Correctif Windows XP - KB873333 Correctif Windows XP - KB873339 Correctif Windows XP - KB885250 Correctif Windows XP - KB885835 Correctif Windows XP - KB885836 Correctif Windows XP - KB886185 Correctif Windows XP - KB887472 Correctif Windows XP - KB888113 Correctif Windows XP - KB888302 Correctif Windows XP - KB890047 Correctif Windows XP - KB890175 Correctif Windows XP - KB890859 Correctif Windows XP - KB890923 Correctif Windows XP - KB891781 Correctif Windows XP - KB893066 Correctif Windows XP - KB893086 Demicron WireFusion 4.0 Done in 50 seconds EasyPHP 1.8 eMule Fast Movie Processor 1.44 Fichiers de référence de 3ds max 7 FlightGear v0.9.9 Fraps Google Earth Gorgeous Fall Foliage Screen Saver GTA San Andreas HentaII3D-017.004 (Cracked) Hercules Webcam High Definition Audio Driver Package - KB888111 HijackThis 1.99.1 Hotfix for Windows XP (KB909394) IsoBuster 1.9 iTunes iTunes J2SE Runtime Environment 5.0 Update 10 J2SE Runtime Environment 5.0 Update 2 J2SE Runtime Environment 5.0 Update 6 J2SE Runtime Environment 5.0 Update 9 jv16 PowerTools 2006 K-Lite Codec Pack 2.80 Full Kaspersky Online Scanner La Marmite du Chef - Recettes La Marmite du Chef 5.0.37 Lecteur Windows Media 10 Macromedia Dreamweaver MX Macromedia Dreamweaver MX 2004 Macromedia Extension Manager Macromedia Flash MX Macromedia Flash MX 2004 Macromedia Shockwave Player Macromedia Shockwave Player Matériaux architecturaux 3ds max 7 Matériaux et textures 3ds max 7 suppl. Mental Motions Pencil Box Microsoft .NET Compact Framework 1.0 SP2 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 French Language Pack Microsoft .NET Framework 1.1 Hotfix (KB886903) Microsoft ActiveSync 4.0 Microsoft Chess for Pocket PC (Remove Only) Microsoft Flight Simulator 2004 Un siècle d'aviation Microsoft Office 2000 CD-ROM 2 Microsoft Office 2000 Professional Microsoft Office Standard Edition 2003 Microsoft Works Mirage IVA (FS 2004) LABORIE Roland Mozilla Firefox (1.5.0.9) Mp3tag v2.36a Nero 7 Demo Packard Bell - Skype 2.5 Panda ActiveScan Panneau de contrôle ATI PlumberPete Free PowerDVD Quest3D Viewers 3.0e QuickTime Race Driver 2 Race Driver 2 Racing Days for Pocket PC RD2 World Championship Six-Pack V2.0 Realtek High Definition Audio Driver RollerCoaster Tycoon® 3 SecondLife (remove only) SkypeMate SlovoEd 3.x for PocketPC Sonic MyDVD Sonic RecordNow! Steinberg WaveLab v4.0d Stellarium 0.8.2 Tomb Raider: Legend 1.0 TrackMania Nations ESWC 0.1.7.5 Visual Pinball WebFldrs XP WinAce Archiver 2.0 Windows Installer 3.1 (KB893803) Windows Media Format Runtime Windows Media Player 10 Hotfix - KB894476 WinZip WireFusion 4 Enterprise (Shared Components) Yahoo! Toolbar ZIOGolf 2 for Pocket PC ZoneAlarm Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\Program Files 11/02/2007 17:07 <REP> . 11/02/2007 17:07 <REP> .. 10/04/2006 18:17 <REP> 7-Zip 01/01/2007 22:10 <REP> Act-3D 01/01/2007 17:39 <REP> Adobe 02/03/2006 14:27 <REP> Ahead 16/04/2006 09:47 <REP> AIM Productions 13/04/2006 09:55 <REP> Alcohol Soft 22/11/2006 22:54 <REP> Apple Software Update 21/01/2007 13:11 <REP> Atari 11/02/2007 02:45 <REP> Audacity 04/11/2006 18:41 <REP> backburner 2 31/03/2006 23:32 <REP> Common Files 30/12/2005 08:45 <REP> ComPlus Applications 08/01/2007 22:29 <REP> CyberLink 23/05/2006 20:38 <REP> EasyPHP1-8 18/02/2006 23:10 <REP> El Juky 01/07/2006 15:50 <REP> Elaborate Bytes 29/06/2006 21:32 <REP> Electronic Arts 20/01/2007 22:10 <REP> eMule 21/01/2007 13:14 <REP> Fichiers communs 12/04/2006 23:35 <REP> FlightGear 13/01/2007 00:11 <REP> FMP144 30/12/2005 08:45 <REP> GMixon 04/08/2006 11:15 <REP> Google 08/02/2007 21:17 <REP> Grisoft 15/01/2007 19:38 <REP> Illustration-World 12/02/2007 18:02 <REP> Internet Explorer 30/11/2006 19:02 <REP> iPod 30/11/2006 19:02 <REP> iPod(2) 12/02/2007 18:02 <REP> iTunes 20/01/2007 15:03 <REP> Java 26/05/2006 13:52 <REP> jv16 PowerTools 2006 22/11/2006 00:39 <REP> K-Lite Codec Pack 11/11/2006 15:30 <REP> Macromedia 23/11/2006 01:28 <REP> Messenger 08/04/2006 23:30 <REP> Microsoft .NET Compact Framework 1.0 SP2 12/02/2007 18:04 <REP> Microsoft ActiveSync 12/04/2006 11:25 <REP> microsoft frontpage 09/01/2006 18:44 <REP> Microsoft Office 30/12/2005 08:48 <REP> Microsoft Works 30/12/2005 08:45 <REP> Microsoft.NET 30/12/2005 08:48 <REP> Movie Maker 11/02/2007 22:17 <REP> Mozilla Firefox 30/12/2005 08:45 <REP> MSN 30/12/2005 08:45 <REP> MSN Gaming Zone 01/03/2006 21:15 <REP> Nero 30/12/2005 08:48 <REP> NetMeeting 30/12/2005 08:45 <REP> Norman 30/12/2005 08:48 <REP> Online Services 30/12/2005 08:48 <REP> Outlook Express 31/03/2006 23:37 <REP> Paragon Software 12/02/2007 18:08 <REP> QuickTime 30/12/2005 08:45 <REP> Real 30/12/2005 08:45 <REP> Realtek 17/01/2007 23:50 <REP> SecondLife 30/12/2005 08:48 <REP> Services en ligne 01/01/2006 22:04 <REP> SkypeMate 09/07/2006 14:18 <REP> SlySoft 16/04/2006 09:09 <REP> Smart Projects 09/01/2006 18:44 <REP> Snapshot Viewer 30/12/2005 08:45 <REP> Sonic 13/12/2006 23:06 <REP> SRV 21/12/2006 18:22 <REP> Stellarium 23/08/2006 23:10 <REP> SupraASCIIArt 16/06/2006 21:34 <REP> Surveyor Corporation 28/01/2007 22:49 <REP> thriXXX 03/07/2006 11:35 <REP> Trend Micro 12/06/2006 16:30 <REP> Trojan Remover 30/12/2005 08:45 <REP> Ulead Systems 14/01/2007 15:48 <REP> vso 06/01/2007 01:23 <REP> VSP 30/12/2005 14:37 <REP> WinAce 30/12/2005 08:45 <REP> Windows Media Components 07/07/2006 23:41 <REP> Windows Media Player 30/12/2005 08:49 <REP> Windows NT 19/12/2006 18:55 <REP> WinRAR 12/02/2007 18:09 <REP> WinZip 30/12/2005 08:45 <REP> xerox 01/03/2006 20:27 <REP> Yahoo! 11/02/2007 17:07 <REP> Zone Labs 0 fichier(s) 0 octets 81 Rép(s) 17.928.966.144 octets libres Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\Program Files\fichiers communs 21/01/2007 13:14 <REP> . 21/01/2007 13:14 <REP> .. 19/12/2006 20:58 <REP> Adobe 19/12/2006 23:22 <REP> Adobe Systems Shared 01/03/2006 21:17 <REP> Ahead 04/11/2006 18:41 <REP> Autodesk Shared 30/12/2005 08:47 <REP> DESIGNER 31/01/2006 21:04 <REP> element5 Shared 30/12/2005 02:53 <REP> InstallShield 30/12/2005 08:45 <REP> Java 11/11/2006 15:30 <REP> Macromedia 12/02/2006 14:15 <REP> Macromedia Shared 12/04/2006 11:54 <REP> Microsoft Shared 30/12/2005 08:45 <REP> MSSoap 30/12/2005 08:45 <REP> ODBC 21/01/2007 13:14 <REP> PocketSoft 30/12/2005 08:45 <REP> Real 30/12/2005 08:47 <REP> Services 30/12/2005 08:47 <REP> Sonic Shared 30/12/2005 08:45 <REP> SpeechEngines 30/12/2005 08:47 <REP> SureThing Shared 10/06/2006 14:55 <REP> Symantec Shared 09/01/2006 18:44 <REP> System 30/12/2005 08:45 <REP> Ulead Systems 12/01/2006 19:12 <REP> Vbox 30/12/2005 08:45 <REP> xing shared 0 fichier(s) 0 octets 26 Rép(s) 17.928.962.048 octets libres Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders 28/02/2006 00:58 <REP> . 28/02/2006 00:58 <REP> .. 30/12/2005 08:47 <REP> 1033 30/12/2005 08:47 <REP> 1036 11/07/2003 09:15 1.292.872 MSONSEXT.DLL 15/07/2003 05:52 35.896 MSOSV.DLL 03/06/1999 11:09 122.937 MSOWS409.DLL 07/03/2001 06:00 127.033 MSOWS40c.DLL 11/07/2003 01:25 80.448 PKMWS.DLL 18/03/1999 05:37 593.977 RAGENT.DLL 6 fichier(s) 2.253.163 octets 4 Rép(s) 17.928.962.048 octets libres Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\Program Files\common files 31/03/2006 23:32 <REP> . 31/03/2006 23:32 <REP> .. 31/03/2006 23:32 <REP> Microsoft Shared 0 fichier(s) 0 octets 3 Rép(s) 17.928.962.048 octets libres Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\ 11/11/2001 00:00 68.096 diff.exe 27/08/2006 14:10 103.424 grep.exe 2 fichier(s) 171.520 octets 0 Rép(s) 17.928.962.048 octets libres et le rapport panda Incident Status Location Adware:adware/cws Not disinfected d:\documents and settings\all users\favoris\Download Free Spyware Remover.url Adware:adware/surfaccuracy Not disinfected Windows Registry Adware:adware/ist.yoursitebar Not disinfected Windows Registry Adware:adware/sbsoft Not disinfected Windows Registry Adware:Adware/VideoAccess Not disinfected C:\!KillBox\update77526596.exe Adware:Adware/VideoAccess Not disinfected C:\!KillBox\update77526596.exe( 112) Adware:Adware/VideoAccess Not disinfected C:\!KillBox\update77526596.exe( 4) Adware:Adware/VideoAccess Not disinfected C:\!KillBox\update77526596.exe( 58) Potentially unwanted tool:Application/Processor Not disinfected C:\SDFix\apps\Process.exe Potentially unwanted tool:Application/Processor Not disinfected C:\WINDOWS\system32\Process.exe Spyware:Cookie/Bluestreak Not disinfected D:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\zft0v3jx.default\cookies.txt[.bluestreak.com/] Spyware:Cookie/Xiti Not disinfected D:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\zft0v3jx.default\cookies.txt[.xiti.com/] Spyware:Cookie/Advertising Not disinfected D:\Documents and Settings\Daniel\Cookies\daniel@advertising[1].txt Spyware:Cookie/Atlas DMT Not disinfected D:\Documents and Settings\Daniel\Cookies\daniel@atdmt[2].txt Spyware:Cookie/Bluestreak Not disinfected D:\Documents and Settings\Daniel\Cookies\daniel@bluestreak[2].txt Spyware:Cookie/Doubleclick Not disinfected D:\Documents and Settings\Daniel\Cookies\daniel@doubleclick[1].txt Spyware:Cookie/MetriWeb Not disinfected D:\Documents and Settings\Daniel\Cookies\daniel@metriweb[1].txt Spyware:Cookie/Tradedoubler Not disinfected D:\Documents and Settings\Daniel\Cookies\daniel@tradedoubler[2].txt Spyware:Cookie/Xiti Not disinfected D:\Documents and Settings\Daniel\Cookies\daniel@xiti[1].txt Potentially unwanted tool:Application/Pskill.K Not disinfected D:\Documents and Settings\Daniel\Mes documents\secu\clean\pskill.exe Potentially unwanted tool:Application/Pskill.K Not disinfected D:\Documents and Settings\Daniel\Mes documents\secu\clean.zip[clean/pskill.exe] Potentially unwanted tool:Application/Processor Not disinfected D:\Documents and Settings\Daniel\Mes documents\secu\SDFix.exe[sDFix\apps\Process.exe] Potentially unwanted tool:Application/Processor Not disinfected D:\Documents and Settings\Daniel\Mes documents\secu\SmitfraudFix\SmitfraudFix\Process.exe Potentially unwanted tool:Application/Processor Not disinfected D:\Documents and Settings\Daniel\Mes documents\secu\SmitfraudFix\SmitfraudFix.zip[smitfraudFix/Process.exe] Adware:Adware/VideoAccess Not disinfected D:\Documents and Settings\LocalService.AUTORITE NT.016\Local Settings\Temporary Internet Files\Content.IE5\4TUZSXQ3\vida[1]
  11. oOGegOo
    et voilà Pocket Killbox version 2.0.0.648 Running on Windows XP as Daniel(Administrator) was started @ vendredi, février 09, 2007, 5:18 PM # 1 [Delete on Reboot] Path = C:\WINDOWS\system32\lgjr.dll I Rebooted @ 5:20:13 PM Killbox Closed(Exit) @ 5:20:15 PM __________________________________________________ Pocket Killbox version 2.0.0.648 Running on Windows XP as Daniel(Administrator) was started @ vendredi, février 09, 2007, 5:23 PM Killbox Closed(Exit) @ 5:24:44 PM __________________________________________________ Pocket Killbox version 2.0.0.648 Running on Windows XP as Daniel(Administrator) was started @ dimanche, février 11, 2007, 1:22 PM # 1 [Delete on Reboot] Path = C:\WINDOWS\system\tlctw32.dll # 2 [Delete on Reboot] Path = C:\WINDOWS\system32\drivers\etc\hosts # 3 [Delete on Reboot] Path = C:\WINDOWS\system32\reg.sys # 4 [Delete on Reboot] Path = C:\WINDOWS\system32\svgxiaaa.exe # 5 [Delete on Reboot] Path = C:\WINDOWS\System32\mkucmaaa.exe # 6 [Delete on Reboot] Path = C:\WINDOWS\System32\jwmoaaaa.exe # 7 [Delete on Reboot] Path = C:\WINDOWS\System32\vhyraaaa.exe # 8 [Delete on Reboot] Path = C:\WINDOWS\System32\aqsplmnr.exe # 9 [Delete on Reboot] Path = C:\WINDOWS\System32\jwwruaaa.exe # 10 [Delete on Reboot] Path = C:\WINDOWS\System32\dyovhyre.exe # 11 [Delete on Reboot] Path = C:\WINDOWS\System32\gbctaaaa.exe # 12 [Delete on Reboot] Path = C:\WINDOWS\System32\jvfwcbvd.exe # 13 [Delete on Reboot] Path = C:\WINDOWS\System32\ppsloaaa.exe # 14 [Delete on Reboot] Path = C:\WINDOWS\System32\gbuaaaaa.exe # 15 [Delete on Reboot] Path = C:\WINDOWS\System32\RunOnce2.t__ # 16 [Delete on Reboot] Path = C:\WINDOWS\System32\akupwbua.exe # 17 [Delete on Reboot] Path = C:\WINDOWS\System32\vwlbaaaa.exe # 18 [Delete on Reboot] Path = C:\WINDOWS\System32\dlfgbtnj.exe # 19 [Delete on Reboot] Path = C:\WINDOWS\System32\swkvmvyk.exe # 20 [Delete on Reboot] Path = C:\WINDOWS\System32\atboaaaa.exe # 21 [Delete on Reboot] Path = C:\WINDOWS\System32\stitaaaa.exe # 22 [Delete on Reboot] Path = C:\WINDOWS\System32\deaiaaaa.exe # 23 [Delete on Reboot] Path = C:\WINDOWS\System32\vhutsmwo.exe # 24 [Delete on Reboot] Path = C:\WINDOWS\System32\pqmbsune.exe # 25 [Delete on Reboot] Path = C:\WINDOWS\System32\gcersaaa.exe # 26 [Delete on Reboot] Path = C:\WINDOWS\System32\pohcaaaa.exe # 27 [Delete on Reboot] Path = C:\WINDOWS\System32\meeiyaaa.exe # 28 [Delete on Reboot] Path = C:\WINDOWS\snap.exe I Rebooted @ 1:23:23 PM Killbox Closed(Exit) @ 1:23:25 PM __________________________________________________ Pocket Killbox version 2.0.0.648 Running on Windows XP as Daniel(Administrator) was started @ dimanche, février 11, 2007, 1:28 PM Killbox Closed(Exit) @ 1:29:28 PM __________________________________________________ Pocket Killbox version 2.0.0.648 Running on Windows XP as Daniel(Administrator) was started @ dimanche, février 11, 2007, 10:01 PM # 1 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{CE5A6669-E5BE-424C-889A-AD950367527F}.exe # 2 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{FDD0B7EF-1F5F-4C50-8130-A3912E340E02}.exe # 3 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{C5955835-3441-4A45-9B6A-9EDEA03989AB}.exe # 4 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{CEEEB7A2-6813-4D12-BE71-A9DAA0FF7487}.exe # 5 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{11A6B3C9-B7D6-41F5-A600-11EA60D7F17D}.exe # 6 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{9ABCA6D4-5830-4960-8007-B1DAFBF9C56E}.exe # 7 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{53DFFE82-1D4E-4B44-8F8F-CB556EB67794}.exe # 8 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{7D95DE0A-96A7-4F2A-A43B-EC5129DB623E}.exe # 9 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{0052BB15-14E4-4C23-BC28-1F802CFFD2E5}.exe # 10 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\CSEDY.EXE # 11 [Delete on Reboot] Path = C:\WINDOWS\system32\ahgckkep.exe # 12 [Delete on Reboot] Path = C:\WINDOWS\system32\ahkdcwre.exe # 13 [Delete on Reboot] Path = C:\WINDOWS\system32\amxpuutx.exe # 14 [Delete on Reboot] Path = C:\WINDOWS\system32\aqegaaaa.exe # 15 [Delete on Reboot] Path = C:\WINDOWS\system32\aqqamglm.exe # 16 [Delete on Reboot] Path = C:\WINDOWS\system32\aqtaaaaa.exe # 17 [Delete on Reboot] Path = C:\WINDOWS\system32\aqukyuyo.exe # 18 [Delete on Reboot] Path = C:\WINDOWS\system32\aqyhaaaa.exe # 19 [Delete on Reboot] Path = C:\WINDOWS\system32\danfwttc.exe # 20 [Delete on Reboot] Path = C:\WINDOWS\system32\dapqnaaa.exe # 21 [Delete on Reboot] Path = C:\WINDOWS\system32\dasaaaaa.exe # 22 [Delete on Reboot] Path = C:\WINDOWS\system32\dmcnyuht.exe # 23 [Delete on Reboot] Path = C:\WINDOWS\system32\dqgfakyf.exe # 24 [Delete on Reboot] Path = C:\WINDOWS\system32\dqhkwxaq.exe # 25 [Delete on Reboot] Path = C:\WINDOWS\system32\dvecbcnp.exe # 26 [Delete on Reboot] Path = C:\WINDOWS\system32\gcpxsaaa.exe # 27 [Delete on Reboot] Path = C:\WINDOWS\system32\gehxaaaa.exe # 28 [Delete on Reboot] Path = C:\WINDOWS\system32\geuqiaaa.exe # 29 [Delete on Reboot] Path = C:\WINDOWS\system32\gsgfdkxp.exe # 30 [Delete on Reboot] Path = C:\WINDOWS\system32\gshxodkb.exe # 31 [Delete on Reboot] Path = C:\WINDOWS\system32\gvkusaaa.exe # 32 [Delete on Reboot] Path = C:\WINDOWS\system32\gxkhqfeq.exe # 33 [Delete on Reboot] Path = C:\WINDOWS\system32\jwarsaaa.exe # 34 [Delete on Reboot] Path = C:\WINDOWS\system32\mkamtkmy.exe # 35 [Delete on Reboot] Path = C:\WINDOWS\system32\mkwtsctb.exe # 36 [Delete on Reboot] Path = C:\WINDOWS\system32\mkybynfg.exe # 37 [Delete on Reboot] Path = C:\WINDOWS\system32\mobmaaaa.exe # 38 [Delete on Reboot] Path = C:\WINDOWS\system32\mobndqsl.exe # 39 [Delete on Reboot] Path = C:\WINDOWS\system32\modgmiph.exe # 40 [Delete on Reboot] Path = C:\WINDOWS\system32\msvcrtd.exe # 41 [Delete on Reboot] Path = C:\WINDOWS\system32\pqicaaaa.exe # 42 [Delete on Reboot] Path = C:\WINDOWS\system32\pqkuhtbn.exe # 43 [Delete on Reboot] Path = C:\WINDOWS\system32\pqnaaaaa.exe # 44 [Delete on Reboot] Path = C:\WINDOWS\system32\pqwjwbau.exe # 45 [Delete on Reboot] Path = C:\WINDOWS\system32\sgpanaaa.exe # 46 [Delete on Reboot] Path = C:\WINDOWS\system32\skwdaaaa.exe # 47 [Delete on Reboot] Path = C:\WINDOWS\system32\solvdcuj.exe # 48 [Delete on Reboot] Path = C:\WINDOWS\system32\spocgdgx.exe # 49 [Delete on Reboot] Path = C:\WINDOWS\system32\sputvunw.exe # 50 [Delete on Reboot] Path = C:\WINDOWS\system32\update57455861.exe # 51 [Delete on Reboot] Path = C:\WINDOWS\system32\update77526596.exe # 52 [Delete on Reboot] Path = C:\WINDOWS\system32\vhxaaaaa.exe # 53 [Delete on Reboot] Path = C:\WINDOWS\system32\vidaccess1429.exe # 54 [Delete on Reboot] Path = C:\WINDOWS\system32\vtooaaaa.exe PendingFileRenameOperations Registry Data has been Removed by External Process! @ 10:02:20 PM # 55 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{CE5A6669-E5BE-424C-889A-AD950367527F}.exe # 56 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{FDD0B7EF-1F5F-4C50-8130-A3912E340E02}.exe # 57 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{C5955835-3441-4A45-9B6A-9EDEA03989AB}.exe # 58 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{CEEEB7A2-6813-4D12-BE71-A9DAA0FF7487}.exe # 59 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{11A6B3C9-B7D6-41F5-A600-11EA60D7F17D}.exe # 60 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{9ABCA6D4-5830-4960-8007-B1DAFBF9C56E}.exe # 61 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{53DFFE82-1D4E-4B44-8F8F-CB556EB67794}.exe # 62 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{7D95DE0A-96A7-4F2A-A43B-EC5129DB623E}.exe # 63 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{0052BB15-14E4-4C23-BC28-1F802CFFD2E5}.exe # 64 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\CSEDY.EXE # 65 [Delete on Reboot] Path = C:\WINDOWS\system32\ahgckkep.exe # 66 [Delete on Reboot] Path = C:\WINDOWS\system32\ahkdcwre.exe # 67 [Delete on Reboot] Path = C:\WINDOWS\system32\amxpuutx.exe # 68 [Delete on Reboot] Path = C:\WINDOWS\system32\aqegaaaa.exe # 69 [Delete on Reboot] Path = C:\WINDOWS\system32\aqqamglm.exe # 70 [Delete on Reboot] Path = C:\WINDOWS\system32\aqtaaaaa.exe # 71 [Delete on Reboot] Path = C:\WINDOWS\system32\aqukyuyo.exe # 72 [Delete on Reboot] Path = C:\WINDOWS\system32\aqyhaaaa.exe # 73 [Delete on Reboot] Path = C:\WINDOWS\system32\danfwttc.exe # 74 [Delete on Reboot] Path = C:\WINDOWS\system32\dapqnaaa.exe # 75 [Delete on Reboot] Path = C:\WINDOWS\system32\dasaaaaa.exe # 76 [Delete on Reboot] Path = C:\WINDOWS\system32\dmcnyuht.exe # 77 [Delete on Reboot] Path = C:\WINDOWS\system32\dqgfakyf.exe # 78 [Delete on Reboot] Path = C:\WINDOWS\system32\dqhkwxaq.exe # 79 [Delete on Reboot] Path = C:\WINDOWS\system32\dvecbcnp.exe # 80 [Delete on Reboot] Path = C:\WINDOWS\system32\gcpxsaaa.exe # 81 [Delete on Reboot] Path = C:\WINDOWS\system32\gehxaaaa.exe # 82 [Delete on Reboot] Path = C:\WINDOWS\system32\geuqiaaa.exe # 83 [Delete on Reboot] Path = C:\WINDOWS\system32\gsgfdkxp.exe # 84 [Delete on Reboot] Path = C:\WINDOWS\system32\gshxodkb.exe # 85 [Delete on Reboot] Path = C:\WINDOWS\system32\gvkusaaa.exe # 86 [Delete on Reboot] Path = C:\WINDOWS\system32\gxkhqfeq.exe # 87 [Delete on Reboot] Path = C:\WINDOWS\system32\jwarsaaa.exe # 88 [Delete on Reboot] Path = C:\WINDOWS\system32\mkamtkmy.exe # 89 [Delete on Reboot] Path = C:\WINDOWS\system32\mkwtsctb.exe # 90 [Delete on Reboot] Path = C:\WINDOWS\system32\mkybynfg.exe # 91 [Delete on Reboot] Path = C:\WINDOWS\system32\mobmaaaa.exe # 92 [Delete on Reboot] Path = C:\WINDOWS\system32\mobndqsl.exe # 93 [Delete on Reboot] Path = C:\WINDOWS\system32\modgmiph.exe # 94 [Delete on Reboot] Path = C:\WINDOWS\system32\msvcrtd.exe # 95 [Delete on Reboot] Path = C:\WINDOWS\system32\pqicaaaa.exe # 96 [Delete on Reboot] Path = C:\WINDOWS\system32\pqkuhtbn.exe # 97 [Delete on Reboot] Path = C:\WINDOWS\system32\pqnaaaaa.exe # 98 [Delete on Reboot] Path = C:\WINDOWS\system32\pqwjwbau.exe # 99 [Delete on Reboot] Path = C:\WINDOWS\system32\sgpanaaa.exe # 100 [Delete on Reboot] Path = C:\WINDOWS\system32\skwdaaaa.exe # 101 [Delete on Reboot] Path = C:\WINDOWS\system32\solvdcuj.exe # 102 [Delete on Reboot] Path = C:\WINDOWS\system32\spocgdgx.exe # 103 [Delete on Reboot] Path = C:\WINDOWS\system32\sputvunw.exe # 104 [Delete on Reboot] Path = C:\WINDOWS\system32\update57455861.exe # 105 [Delete on Reboot] Path = C:\WINDOWS\system32\update77526596.exe # 106 [Delete on Reboot] Path = C:\WINDOWS\system32\vhxaaaaa.exe # 107 [Delete on Reboot] Path = C:\WINDOWS\system32\vidaccess1429.exe # 108 [Delete on Reboot] Path = C:\WINDOWS\system32\vtooaaaa.exe PendingFileRenameOperations Registry Data has been Removed by External Process! @ 10:02:40 PM # 109 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{CE5A6669-E5BE-424C-889A-AD950367527F}.exe # 110 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{FDD0B7EF-1F5F-4C50-8130-A3912E340E02}.exe # 111 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{C5955835-3441-4A45-9B6A-9EDEA03989AB}.exe # 112 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{CEEEB7A2-6813-4D12-BE71-A9DAA0FF7487}.exe # 113 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{11A6B3C9-B7D6-41F5-A600-11EA60D7F17D}.exe # 114 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{9ABCA6D4-5830-4960-8007-B1DAFBF9C56E}.exe # 115 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{53DFFE82-1D4E-4B44-8F8F-CB556EB67794}.exe # 116 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{7D95DE0A-96A7-4F2A-A43B-EC5129DB623E}.exe # 117 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{0052BB15-14E4-4C23-BC28-1F802CFFD2E5}.exe # 118 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\CSEDY.EXE # 119 [Delete on Reboot] Path = C:\WINDOWS\system32\ahgckkep.exe # 120 [Delete on Reboot] Path = C:\WINDOWS\system32\ahkdcwre.exe # 121 [Delete on Reboot] Path = C:\WINDOWS\system32\amxpuutx.exe # 122 [Delete on Reboot] Path = C:\WINDOWS\system32\aqegaaaa.exe # 123 [Delete on Reboot] Path = C:\WINDOWS\system32\aqqamglm.exe # 124 [Delete on Reboot] Path = C:\WINDOWS\system32\aqtaaaaa.exe # 125 [Delete on Reboot] Path = C:\WINDOWS\system32\aqukyuyo.exe # 126 [Delete on Reboot] Path = C:\WINDOWS\system32\aqyhaaaa.exe # 127 [Delete on Reboot] Path = C:\WINDOWS\system32\danfwttc.exe # 128 [Delete on Reboot] Path = C:\WINDOWS\system32\dapqnaaa.exe # 129 [Delete on Reboot] Path = C:\WINDOWS\system32\dasaaaaa.exe # 130 [Delete on Reboot] Path = C:\WINDOWS\system32\dmcnyuht.exe # 131 [Delete on Reboot] Path = C:\WINDOWS\system32\dqgfakyf.exe # 132 [Delete on Reboot] Path = C:\WINDOWS\system32\dqhkwxaq.exe # 133 [Delete on Reboot] Path = C:\WINDOWS\system32\dvecbcnp.exe # 134 [Delete on Reboot] Path = C:\WINDOWS\system32\gcpxsaaa.exe # 135 [Delete on Reboot] Path = C:\WINDOWS\system32\gehxaaaa.exe # 136 [Delete on Reboot] Path = C:\WINDOWS\system32\geuqiaaa.exe # 137 [Delete on Reboot] Path = C:\WINDOWS\system32\gsgfdkxp.exe # 138 [Delete on Reboot] Path = C:\WINDOWS\system32\gshxodkb.exe # 139 [Delete on Reboot] Path = C:\WINDOWS\system32\gvkusaaa.exe # 140 [Delete on Reboot] Path = C:\WINDOWS\system32\gxkhqfeq.exe # 141 [Delete on Reboot] Path = C:\WINDOWS\system32\jwarsaaa.exe # 142 [Delete on Reboot] Path = C:\WINDOWS\system32\mkamtkmy.exe # 143 [Delete on Reboot] Path = C:\WINDOWS\system32\mkwtsctb.exe # 144 [Delete on Reboot] Path = C:\WINDOWS\system32\mkybynfg.exe # 145 [Delete on Reboot] Path = C:\WINDOWS\system32\mobmaaaa.exe # 146 [Delete on Reboot] Path = C:\WINDOWS\system32\mobndqsl.exe # 147 [Delete on Reboot] Path = C:\WINDOWS\system32\modgmiph.exe # 148 [Delete on Reboot] Path = C:\WINDOWS\system32\msvcrtd.exe # 149 [Delete on Reboot] Path = C:\WINDOWS\system32\pqicaaaa.exe # 150 [Delete on Reboot] Path = C:\WINDOWS\system32\pqkuhtbn.exe # 151 [Delete on Reboot] Path = C:\WINDOWS\system32\pqnaaaaa.exe # 152 [Delete on Reboot] Path = C:\WINDOWS\system32\pqwjwbau.exe # 153 [Delete on Reboot] Path = C:\WINDOWS\system32\sgpanaaa.exe # 154 [Delete on Reboot] Path = C:\WINDOWS\system32\skwdaaaa.exe # 155 [Delete on Reboot] Path = C:\WINDOWS\system32\solvdcuj.exe # 156 [Delete on Reboot] Path = C:\WINDOWS\system32\spocgdgx.exe # 157 [Delete on Reboot] Path = C:\WINDOWS\system32\sputvunw.exe # 158 [Delete on Reboot] Path = C:\WINDOWS\system32\update57455861.exe # 159 [Delete on Reboot] Path = C:\WINDOWS\system32\update77526596.exe # 160 [Delete on Reboot] Path = C:\WINDOWS\system32\vhxaaaaa.exe # 161 [Delete on Reboot] Path = C:\WINDOWS\system32\vidaccess1429.exe # 162 [Delete on Reboot] Path = C:\WINDOWS\system32\vtooaaaa.exe PendingFileRenameOperations Registry Data has been Removed by External Process! @ 10:07:32 PM # 163 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{CE5A6669-E5BE-424C-889A-AD950367527F}.exe # 164 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{FDD0B7EF-1F5F-4C50-8130-A3912E340E02}.exe # 165 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{C5955835-3441-4A45-9B6A-9EDEA03989AB}.exe # 166 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{CEEEB7A2-6813-4D12-BE71-A9DAA0FF7487}.exe # 167 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{11A6B3C9-B7D6-41F5-A600-11EA60D7F17D}.exe # 168 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{9ABCA6D4-5830-4960-8007-B1DAFBF9C56E}.exe # 169 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{53DFFE82-1D4E-4B44-8F8F-CB556EB67794}.exe # 170 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{7D95DE0A-96A7-4F2A-A43B-EC5129DB623E}.exe # 171 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\{0052BB15-14E4-4C23-BC28-1F802CFFD2E5}.exe # 172 [Delete on Reboot] Path = C:\WINDOWS\SYSTEM32\CSEDY.EXE # 173 [Delete on Reboot] Path = C:\WINDOWS\system32\ahgckkep.exe # 174 [Delete on Reboot] Path = C:\WINDOWS\system32\ahkdcwre.exe # 175 [Delete on Reboot] Path = C:\WINDOWS\system32\amxpuutx.exe # 176 [Delete on Reboot] Path = C:\WINDOWS\system32\aqegaaaa.exe # 177 [Delete on Reboot] Path = C:\WINDOWS\system32\aqqamglm.exe # 178 [Delete on Reboot] Path = C:\WINDOWS\system32\aqtaaaaa.exe # 179 [Delete on Reboot] Path = C:\WINDOWS\system32\aqukyuyo.exe # 180 [Delete on Reboot] Path = C:\WINDOWS\system32\aqyhaaaa.exe # 181 [Delete on Reboot] Path = C:\WINDOWS\system32\danfwttc.exe # 182 [Delete on Reboot] Path = C:\WINDOWS\system32\dapqnaaa.exe # 183 [Delete on Reboot] Path = C:\WINDOWS\system32\dasaaaaa.exe # 184 [Delete on Reboot] Path = C:\WINDOWS\system32\dmcnyuht.exe # 185 [Delete on Reboot] Path = C:\WINDOWS\system32\dqgfakyf.exe # 186 [Delete on Reboot] Path = C:\WINDOWS\system32\dqhkwxaq.exe # 187 [Delete on Reboot] Path = C:\WINDOWS\system32\dvecbcnp.exe # 188 [Delete on Reboot] Path = C:\WINDOWS\system32\gcpxsaaa.exe # 189 [Delete on Reboot] Path = C:\WINDOWS\system32\gehxaaaa.exe # 190 [Delete on Reboot] Path = C:\WINDOWS\system32\geuqiaaa.exe # 191 [Delete on Reboot] Path = C:\WINDOWS\system32\gsgfdkxp.exe # 192 [Delete on Reboot] Path = C:\WINDOWS\system32\gshxodkb.exe # 193 [Delete on Reboot] Path = C:\WINDOWS\system32\gvkusaaa.exe # 194 [Delete on Reboot] Path = C:\WINDOWS\system32\gxkhqfeq.exe # 195 [Delete on Reboot] Path = C:\WINDOWS\system32\jwarsaaa.exe # 196 [Delete on Reboot] Path = C:\WINDOWS\system32\mkamtkmy.exe # 197 [Delete on Reboot] Path = C:\WINDOWS\system32\mkwtsctb.exe # 198 [Delete on Reboot] Path = C:\WINDOWS\system32\mkybynfg.exe # 199 [Delete on Reboot] Path = C:\WINDOWS\system32\mobmaaaa.exe # 200 [Delete on Reboot] Path = C:\WINDOWS\system32\mobndqsl.exe # 201 [Delete on Reboot] Path = C:\WINDOWS\system32\modgmiph.exe # 202 [Delete on Reboot] Path = C:\WINDOWS\system32\msvcrtd.exe # 203 [Delete on Reboot] Path = C:\WINDOWS\system32\pqicaaaa.exe # 204 [Delete on Reboot] Path = C:\WINDOWS\system32\pqkuhtbn.exe # 205 [Delete on Reboot] Path = C:\WINDOWS\system32\pqnaaaaa.exe # 206 [Delete on Reboot] Path = C:\WINDOWS\system32\pqwjwbau.exe # 207 [Delete on Reboot] Path = C:\WINDOWS\system32\sgpanaaa.exe # 208 [Delete on Reboot] Path = C:\WINDOWS\system32\skwdaaaa.exe # 209 [Delete on Reboot] Path = C:\WINDOWS\system32\solvdcuj.exe # 210 [Delete on Reboot] Path = C:\WINDOWS\system32\spocgdgx.exe # 211 [Delete on Reboot] Path = C:\WINDOWS\system32\sputvunw.exe # 212 [Delete on Reboot] Path = C:\WINDOWS\system32\update57455861.exe # 213 [Delete on Reboot] Path = C:\WINDOWS\system32\update77526596.exe # 214 [Delete on Reboot] Path = C:\WINDOWS\system32\vhxaaaaa.exe # 215 [Delete on Reboot] Path = C:\WINDOWS\system32\vidaccess1429.exe # 216 [Delete on Reboot] Path = C:\WINDOWS\system32\vtooaaaa.exe PendingFileRenameOperations Registry Data has been Removed by External Process! @ 10:07:49 PM Killbox Closed(Exit) @ 10:07:50 PM __________________________________________________ Pocket Killbox version 2.0.0.648 Running on Windows XP as Daniel(Administrator) was started @ dimanche, février 11, 2007, 10:13 PM
  12. oOGegOo
    j'ai un message d'erreur et le PC ne redemarre pas !!! le message est :" PendingFile RenameOperation Registry Data has been removed by External Process!" je clique ok est le PC ne redemarre pas ... bon je redemarre à la main A+
  13. oOGegOo
    Fixwareout ver 1.003 Last edited 8/11/2006 Post this report in the forums please Reg Entries that were deleted ... Microsoft ® Windows Script Host Version 5.6 Random Runs removed from HKLM ... PLEASE NOTE, There WILL be LEGITIMATE FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE. »»»»» Searching by size/names... »»»»» Search five digit cs, dm and jb files. This WILL/CAN also list Legit Files, Submit them at Virustotal C:\WINDOWS\SYSTEM32\CSEDY.EXE 51.227 2006-06-29 Other suspects. Directory of C:\WINDOWS\system32 {CE5A6669-E5BE-424C-889A-AD950367527F}.exe {FDD0B7EF-1F5F-4C50-8130-A3912E340E02}.exe {C5955835-3441-4A45-9B6A-9EDEA03989AB}.exe {CEEEB7A2-6813-4D12-BE71-A9DAA0FF7487}.exe {11A6B3C9-B7D6-41F5-A600-11EA60D7F17D}.exe {9ABCA6D4-5830-4960-8007-B1DAFBF9C56E}.exe {53DFFE82-1D4E-4B44-8F8F-CB556EB67794}.exe {7D95DE0A-96A7-4F2A-A43B-EC5129DB623E}.exe {0052BB15-14E4-4C23-BC28-1F802CFFD2E5}.exe »»»»» Misc files. »»»»» Checking for older varients covered by the Rem3 tool. DIAGHELP C:\WINDOWS\System32\vsconfig.xml -->11/02/2007 20:48:46 C:\WINDOWS\System32\zllictbl.dat -->11/02/2007 17:19:46 C:\WINDOWS\System32\winlogon.exe -->8/02/2007 17:35:10 C:\WINDOWS\System32\skwdaaaa.exe -->5/02/2007 23:34:38 C:\WINDOWS\System32\ahgckkep.exe -->5/02/2007 23:34:38 C:\WINDOWS\System32\vtooaaaa.exe -->5/02/2007 23:34:37 C:\WINDOWS\System32\spocgdgx.exe -->5/02/2007 22:35:42 C:\WINDOWS\System32\pqkuhtbn.exe -->5/02/2007 22:35:41 C:\WINDOWS\System32\gcpxsaaa.exe -->5/02/2007 22:35:41 C:\WINDOWS\System32\dasaaaaa.exe -->5/02/2007 22:35:40 C:\WINDOWS\System32\aqegaaaa.exe -->5/02/2007 22:35:40 C:\WINDOWS\System32\gsgfdkxp.exe -->5/02/2007 22:19:21 C:\WINDOWS\System32\dqhkwxaq.exe -->5/02/2007 22:19:21 C:\WINDOWS\System32\ahkdcwre.exe -->5/02/2007 22:19:20 C:\WINDOWS\System32\gshxodkb.exe -->5/02/2007 22:19:19 C:\WINDOWS\System32\dqgfakyf.exe -->5/02/2007 22:19:19 C:\WINDOWS\System32\aqtaaaaa.exe -->5/02/2007 22:12:15 C:\WINDOWS\System32\gxkhqfeq.exe -->5/02/2007 22:12:14 C:\WINDOWS\System32\aqukyuyo.exe -->5/02/2007 22:12:14 C:\WINDOWS\System32\dvecbcnp.exe -->5/02/2007 22:12:13 C:\WINDOWS\System32\amxpuutx.exe -->5/02/2007 22:12:13 C:\WINDOWS\System32\msvcrtd.exe -->5/02/2007 22:10:35 C:\WINDOWS\System32\mobndqsl.exe -->5/02/2007 20:26:46 C:\WINDOWS\System32\mobmaaaa.exe -->5/02/2007 20:26:46 C:\WINDOWS\System32\modgmiph.exe -->5/02/2007 20:26:45 C:\WINDOWS\WindowsUpdate.log -->11/02/2007 20:49:25 C:\WINDOWS.log -->11/02/2007 20:49:24 C:\WINDOWS\wiadebug.log -->11/02/2007 20:49:09 C:\WINDOWS\wiaservc.log -->11/02/2007 20:49:04 C:\WINDOWS\bootstat.dat -->11/02/2007 20:48:30 C:\WINDOWS\SchedLgU.Txt -->11/02/2007 20:47:43 C:\WINDOWS\NeroDigital.ini -->11/02/2007 17:27:58 C:\WINDOWS\ntbtlog.txt -->11/02/2007 17:09:55 C:\WINDOWS\setupact.log -->11/02/2007 13:44:16 C:\WINDOWS\setuperr.log -->11/02/2007 13:42:31 C:\WINDOWS\wmsetup.log -->11/02/2007 3:11:03 C:\WINDOWS\CD_Start.INI -->10/02/2007 19:06:39 C:\WINDOWS\QTFont.qfn -->10/02/2007 10:35:14 C:\WINDOWS\QTFont.for -->9/02/2007 0:16:01 C:\WINDOWS\Sti_Trace.log -->8/02/2007 21:05:37 C:\WINDOWS\ALCFDRTM.EXE |30/12/2005 01:02:22 C:\WINDOWS\Alcmtr.exe |22/09/2005 21:10:53 C:\WINDOWS\ALCWZRD.EXE |22/09/2005 21:10:53 C:\WINDOWS\IsUn040c.exe |16/08/2004 17:25:14 C:\WINDOWS\IsUninst.exe |31/03/2006 23:27:14 C:\WINDOWS\MicCal.exe |22/09/2005 21:10:52 C:\WINDOWS\PATCH.EXE |07/07/2006 23:43:55 C:\WINDOWS\psuninst2.exe |09/04/2006 19:18:27 C:\WINDOWS\RTHDCPL.EXE |22/09/2005 21:10:52 C:\WINDOWS\RTLCPL.EXE |22/09/2005 21:10:52 C:\WINDOWS\runtsckl.exe |02/11/2005 17:07:12 C:\WINDOWS\slrundll.exe |31/12/1979 23:00:00 C:\WINDOWS\SmCfg.exe |22/09/2005 21:03:40 C:\WINDOWS\SoundMan.exe |22/09/2005 21:10:52 C:\WINDOWS\twunk_16.exe |16/08/2004 16:41:16 C:\WINDOWS\twunk_32.exe |16/08/2004 16:41:16 C:\WINDOWS\unin040c.exe |12/01/2006 20:38:16 C:\WINDOWS\uninst.exe |07/01/2007 13:36:22 C:\WINDOWS\UNISTB32.EXE |13/03/1998 00:02:00 C:\WINDOWS\UNNeroBackItUp.exe |12/09/2005 15:13:46 C:\WINDOWS\UNNeroMediaHome.exe |12/09/2005 15:13:46 C:\WINDOWS\UNNeroShowTime.exe |12/09/2005 15:13:46 C:\WINDOWS\UNNeroVision.exe |12/09/2005 15:13:46 C:\WINDOWS\UNRecode.exe |12/09/2005 15:13:46 C:\WINDOWS\loadhttp.dll |15/10/2002 13:29:40 C:\WINDOWS\ov530dib.dll |16/06/2006 21:51:42 C:\WINDOWS\patchw32.dll |14/12/2001 12:34:46 C:\WINDOWS\POCE98.DLL |23/09/1998 21:10:16 C:\WINDOWS\POCELANG.DLL |23/02/1999 14:12:18 C:\WINDOWS\RtlExUpd.dll |22/09/2005 21:10:50 C:\WINDOWS\TMUPDATE.DLL |07/07/2006 23:43:56 C:\WINDOWS\twain.dll |16/08/2004 16:41:16 C:\WINDOWS\twain_32.dll |16/08/2004 16:41:16 C:\WINDOWS\UNZIP.DLL |07/07/2006 23:43:55 C:\WINDOWS\system32\ahgckkep.exe |05/02/2007 23:34:38 C:\WINDOWS\system32\ahkdcwre.exe |05/02/2007 22:19:20 C:\WINDOWS\system32\amxpuutx.exe |05/02/2007 22:12:13 C:\WINDOWS\system32\append.exe |16/08/2004 16:39:57 C:\WINDOWS\system32\aqegaaaa.exe |05/02/2007 22:35:40 C:\WINDOWS\system32\aqqamglm.exe |05/02/2007 20:26:44 C:\WINDOWS\system32\aqtaaaaa.exe |05/02/2007 22:12:15 C:\WINDOWS\system32\aqukyuyo.exe |05/02/2007 22:12:14 C:\WINDOWS\system32\aqyhaaaa.exe |05/02/2007 01:30:32 C:\WINDOWS\system32\asuninst.exe |07/07/2006 16:15:31 C:\WINDOWS\system32\aswBoot.exe |26/05/2006 14:18:50 C:\WINDOWS\system32\ati2evxx.exe |31/12/1979 23:00:00 C:\WINDOWS\system32\Ati2mdxx.exe |31/12/1979 23:00:00 C:\WINDOWS\system32\ChCfg.exe |22/09/2005 21:10:52 C:\WINDOWS\system32\csedy.exe |12/10/2006 16:03:27 C:\WINDOWS\system32\danfwttc.exe |05/02/2007 01:20:45 C:\WINDOWS\system32\dapqnaaa.exe |05/02/2007 01:30:33 C:\WINDOWS\system32\dasaaaaa.exe |05/02/2007 22:35:40 C:\WINDOWS\system32\debug.exe |16/08/2004 16:40:04 C:\WINDOWS\system32\dmcnyuht.exe |05/02/2007 01:47:46 C:\WINDOWS\system32\dosx.exe |16/08/2004 16:40:08 C:\WINDOWS\system32\dqgfakyf.exe |05/02/2007 22:19:19 C:\WINDOWS\system32\dqhkwxaq.exe |05/02/2007 22:19:21 C:\WINDOWS\system32\dvdplay.exe |23/08/2001 16:47:34 C:\WINDOWS\system32\dvecbcnp.exe |05/02/2007 22:12:13 C:\WINDOWS\system32\edlin.exe |16/08/2004 16:40:20 C:\WINDOWS\system32\exe2bin.exe |16/08/2004 16:40:21 C:\WINDOWS\system32\fastopen.exe |16/08/2004 16:40:21 C:\WINDOWS\system32\FileOps.exe |12/01/2006 19:55:07 C:\WINDOWS\system32\gcpxsaaa.exe |05/02/2007 22:35:41 C:\WINDOWS\system32\gehxaaaa.exe |05/02/2007 01:16:41 C:\WINDOWS\system32\geuqiaaa.exe |05/02/2007 01:16:39 C:\WINDOWS\system32\gsgfdkxp.exe |05/02/2007 22:19:21 C:\WINDOWS\system32\gshxodkb.exe |05/02/2007 22:19:19 C:\WINDOWS\system32\gvkusaaa.exe |05/02/2007 01:48:09 C:\WINDOWS\system32\gxkhqfeq.exe |05/02/2007 22:12:14 C:\WINDOWS\system32\HdAShCut.exe |07/01/2005 16:07:16 C:\WINDOWS\system32\java.exe |20/01/2007 15:03:29 C:\WINDOWS\system32\javaw.exe |20/01/2007 15:03:29 C:\WINDOWS\system32\javaws.exe |20/01/2007 15:03:29 C:\WINDOWS\system32\jwarsaaa.exe |05/02/2007 01:20:44 C:\WINDOWS\system32\mem.exe |16/08/2004 16:40:35 C:\WINDOWS\system32\minirec.exe |22/09/2005 21:03:40 C:\WINDOWS\system32\mkamtkmy.exe |05/02/2007 01:30:34 C:\WINDOWS\system32\mkwtsctb.exe |05/02/2007 01:30:32 C:\WINDOWS\system32\mkybynfg.exe |05/02/2007 20:26:43 C:\WINDOWS\system32\mobmaaaa.exe |05/02/2007 20:26:46 C:\WINDOWS\system32\mobndqsl.exe |05/02/2007 20:26:46 C:\WINDOWS\system32\modgmiph.exe |05/02/2007 20:26:45 C:\WINDOWS\system32\mscdexnt.exe |16/08/2004 16:40:39 C:\WINDOWS\system32\msvcrtd.exe |05/02/2007 22:10:40 C:\WINDOWS\system32\NeroCheck.exe |12/01/2006 15:40:44 C:\WINDOWS\system32\nlsfunc.exe |16/08/2004 16:40:48 C:\WINDOWS\system32\pqicaaaa.exe |05/02/2007 01:20:45 C:\WINDOWS\system32\pqkuhtbn.exe |05/02/2007 22:35:41 C:\WINDOWS\system32\pqnaaaaa.exe |05/02/2007 01:30:34 C:\WINDOWS\system32\pqwjwbau.exe |05/02/2007 01:20:46 C:\WINDOWS\system32\Process.exe |08/02/2007 23:40:47 C:\WINDOWS\system32\pxcpya64.exe |01/01/2007 18:33:25 C:\WINDOWS\system32\pxcpyi64.exe |01/01/2007 18:33:25 C:\WINDOWS\system32\pxhpinst.exe |19/12/2006 20:50:47 C:\WINDOWS\system32\pxinsa64.exe |01/01/2007 18:33:25 C:\WINDOWS\system32\pxinsi64.exe |01/01/2007 18:33:25 C:\WINDOWS\system32\redir.exe |16/08/2004 16:41:00 C:\WINDOWS\system32\setver.exe |16/08/2004 16:41:03 C:\WINDOWS\system32\sgpanaaa.exe |05/02/2007 01:47:48 C:\WINDOWS\system32\share.exe |16/08/2004 16:41:03 C:\WINDOWS\system32\skwdaaaa.exe |05/02/2007 23:34:38 C:\WINDOWS\system32\slmh.exe |22/09/2005 21:03:40 C:\WINDOWS\system32\slserv.exe |31/12/1979 23:00:00 C:\WINDOWS\system32\solvdcuj.exe |05/02/2007 01:47:54 C:\WINDOWS\system32\spocgdgx.exe |05/02/2007 22:35:42 C:\WINDOWS\system32\sputvunw.exe |05/02/2007 01:20:47 C:\WINDOWS\system32\SrchSTS.exe |08/02/2007 23:40:47 C:\WINDOWS\system32\swreg.exe |08/02/2007 23:40:47 C:\WINDOWS\system32\swsc.exe |08/02/2007 23:40:47 C:\WINDOWS\system32\update57455861.exe |05/02/2007 00:54:44 C:\WINDOWS\system32\update77526596.exe |05/02/2007 00:54:37 C:\WINDOWS\system32\usrmlnka.exe |23/08/2001 16:47:48 C:\WINDOWS\system32\usrprbda.exe |23/08/2001 16:47:48 C:\WINDOWS\system32\usrshuta.exe |23/08/2001 16:47:48 C:\WINDOWS\system32\vhxaaaaa.exe |05/02/2007 01:47:37 C:\WINDOWS\system32\vidaccess1429.exe |05/02/2007 00:54:39 C:\WINDOWS\system32\vtooaaaa.exe |05/02/2007 23:34:37 C:\WINDOWS\system32\{0052BB15-14E4-4C23-BC28-1F802CFFD2E5}.exe |29/06/2006 22:59:20 C:\WINDOWS\system32\{11A6B3C9-B7D6-41F5-A600-11EA60D7F17D}.exe |29/06/2006 23:09:04 C:\WINDOWS\system32\{53DFFE82-1D4E-4B44-8F8F-CB556EB67794}.exe |29/06/2006 23:00:56 C:\WINDOWS\system32\{7D95DE0A-96A7-4F2A-A43B-EC5129DB623E}.exe |29/06/2006 23:00:17 C:\WINDOWS\system32\{9ABCA6D4-5830-4960-8007-B1DAFBF9C56E}.exe |29/06/2006 23:08:20 C:\WINDOWS\system32\{C5955835-3441-4A45-9B6A-9EDEA03989AB}.exe |29/06/2006 23:16:36 C:\WINDOWS\system32\{CE5A6669-E5BE-424C-889A-AD950367527F}.exe |29/06/2006 23:18:02 C:\WINDOWS\system32\{CEEEB7A2-6813-4D12-BE71-A9DAA0FF7487}.exe |29/06/2006 23:09:49 C:\WINDOWS\system32\{FDD0B7EF-1F5F-4C50-8130-A3912E340E02}.exe |29/06/2006 23:17:22 C:\WINDOWS\system32\34CoInstaller.dll |22/09/2005 21:10:08 C:\WINDOWS\system32\amr_cpl.dll |22/09/2005 21:03:40 C:\WINDOWS\system32\amstream.dll |16/08/2004 16:39:57 C:\WINDOWS\system32\ati2cqag.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ati2dvag.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ati2edxx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ati2evxx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ati3duag.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ATIDDC.DLL |31/12/1979 23:00:00 C:\WINDOWS\system32\ATIDEMGR.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atiiiexx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atikvmag.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atioglx1.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atioglxx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atipdlxx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atitvo32.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ativcoxx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ativvaxx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atmfd.dll |16/08/2004 16:39:57 C:\WINDOWS\system32\atmlib.dll |16/08/2004 16:39:57 C:\WINDOWS\system32\BASSMOD.dll |29/06/2006 19:41:19 C:\WINDOWS\system32\CmdLineExt.dll |09/07/2006 16:44:24 C:\WINDOWS\system32\CmdLineExt03.dll |21/01/2007 13:15:31 C:\WINDOWS\system32\coinst.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\compatUI.dll |16/08/2004 16:40:03 C:\WINDOWS\system32\cpuinf32.dll |22/11/2006 00:39:21 C:\WINDOWS\system32\dgrpsetu.dll |16/08/2004 16:55:15 C:\WINDOWS\system32\dgsetup.dll |16/08/2004 16:55:15 C:\WINDOWS\system32\divx.dll |22/11/2006 00:39:24 C:\WINDOWS\system32\dpl100.dll |22/11/2006 00:39:25 C:\WINDOWS\system32\dtu100.dll |22/11/2006 00:39:25 C:\WINDOWS\system32\encdec.dll |16/08/2004 16:40:21 C:\WINDOWS\system32\EqnClass.Dll |16/08/2004 16:55:15 C:\WINDOWS\system32\fdffbfbfd1_s.dll |26/05/2006 13:52:24 C:\WINDOWS\system32\ff_vfw.dll |22/11/2006 00:39:23 C:\WINDOWS\system32\frapsvid.dll |03/12/2005 12:56:50 C:\WINDOWS\system32\GEARAspi.dll |19/09/2006 15:43:58 C:\WINDOWS\system32\HdAProp.dll |07/01/2005 16:07:16 C:\WINDOWS\system32\HdAudRes.dll |07/01/2005 16:07:04 C:\WINDOWS\system32\hticons.dll |16/08/2004 17:03:32 C:\WINDOWS\system32\huffyuv.dll |22/11/2006 00:39:46 C:\WINDOWS\system32\hypertrm.dll |16/08/2004 17:03:05 C:\WINDOWS\system32\i420vfw.dll |22/11/2006 00:39:46 C:\WINDOWS\system32\Iacenc.dll |22/11/2006 00:39:46 C:\WINDOWS\system32\iccvid.dll |16/08/2004 16:40:27 C:\WINDOWS\system32\ieencode.dll |16/08/2004 16:40:28 C:\WINDOWS\system32\imagr5.dll |02/03/2006 14:27:05 C:\WINDOWS\system32\imagx5.dll |02/03/2006 14:27:05 C:\WINDOWS\system32\imagX7.dll |26/07/2004 16:16:10 C:\WINDOWS\system32\ImagXpr5.dll |02/03/2006 14:27:05 C:\WINDOWS\system32\imagXpr7.dll |26/07/2004 16:16:10 C:\WINDOWS\system32\imagXR7.dll |26/07/2004 16:16:10 C:\WINDOWS\system32\imagXRA7.dll |26/07/2004 16:16:10 C:\WINDOWS\system32\ir32_32.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\ir41_qc.dll |16/08/2004 16:41:37 C:\WINDOWS\system32\ir41_qcx.dll |16/08/2004 16:41:37 C:\WINDOWS\system32\ir50_32.dll |16/08/2004 16:41:37 C:\WINDOWS\system32\ir50_qc.dll |16/08/2004 16:41:37 C:\WINDOWS\system32\ir50_qcx.dll |16/08/2004 16:41:37 C:\WINDOWS\system32\isrdbg32.dll |16/08/2004 17:06:15 C:\WINDOWS\system32\jgaw400.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\jgdw400.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\jgmd400.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\jgpl400.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\jgsd400.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\jgsh400.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\lfbmp11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\LFCMP11n.DLL |07/06/2002 00:02:00 C:\WINDOWS\system32\lfeps11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lffax11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lfgif11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lfpcd11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lfpcx11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\Lfpng11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lfpsd11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lftga11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lftif11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lfwmf11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\libdivx.dll |22/11/2006 00:39:25 C:\WINDOWS\system32\libeay32_0.9.6l.dll |11/02/2007 17:07:38 C:\WINDOWS\system32\LTDIS11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\ltfil11n.DLL |07/06/2002 00:02:00 C:\WINDOWS\system32\ltimg11n.dll |07/06/2002 00:02:02 C:\WINDOWS\system32\ltkrn11n.dll |07/06/2002 00:02:02 C:\WINDOWS\system32\Ltwvc11n.dll |07/06/2002 00:02:02 C:\WINDOWS\system32\mdwmdmsp.dll |23/08/2001 16:47:06 C:\WINDOWS\system32\mplaa6.dll |22/11/2006 00:39:49 C:\WINDOWS\system32\mplam6.dll |22/11/2006 00:39:49 C:\WINDOWS\system32\mplapx.dll |22/11/2006 00:39:49 C:\WINDOWS\system32\mplaw7.dll |22/11/2006 00:39:49 C:\WINDOWS\system32\msdmo.dll |16/08/2004 16:40:40 C:\WINDOWS\system32\msencode.dll |16/08/2004 16:40:40 C:\WINDOWS\system32\MSRTEDIT.DLL |22/01/1999 19:46:58 C:\WINDOWS\system32\NeroCo.dll |16/02/2005 14:18:04 C:\WINDOWS\system32\Oemdspif.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ov530ext.dll |16/06/2006 21:51:42 C:\WINDOWS\system32\ov530usd.dll |16/06/2006 21:51:42 C:\WINDOWS\system32\PA207USD.DLL |01/09/2004 09:42:16 C:\WINDOWS\system32\paqsp.dll |23/08/2001 16:47:16 C:\WINDOWS\system32\PCDLIB32.DLL |07/06/2002 00:02:02 C:\WINDOWS\system32\picn20.dll |02/03/2006 14:27:05 C:\WINDOWS\system32\pncrt.dll |22/09/2005 21:24:30 C:\WINDOWS\system32\pndx5016.dll |22/09/2005 21:24:30 C:\WINDOWS\system32\pndx5032.dll |22/09/2005 21:24:30 C:\WINDOWS\system32\PsisDecd.dll |22/09/2005 21:10:07 C:\WINDOWS\system32\Px.dll |19/10/2004 15:56:36 C:\WINDOWS\system32\pxdrv.dll |17/01/2005 00:01:00 C:\WINDOWS\system32\pxmas.dll |19/10/2004 15:55:44 C:\WINDOWS\system32\PxWave.dll |19/10/2004 15:55:16 C:\WINDOWS\system32\PXWMA.dll |25/03/2004 09:30:40 C:\WINDOWS\system32\qedwipes.dll |16/08/2004 16:40:58 C:\WINDOWS\system32\qt-dx331.dll |22/11/2006 00:39:25 C:\WINDOWS\system32\rmoc3260.dll |22/09/2005 21:24:33 C:\WINDOWS\system32\SAA.dll |08/11/2003 20:16:58 C:\WINDOWS\system32\sbe.dll |16/08/2004 16:41:02 C:\WINDOWS\system32\slbcsp.dll |16/08/2004 16:41:05 C:\WINDOWS\system32\slbiop.dll |16/08/2004 16:41:05 C:\WINDOWS\system32\slbrccsp.dll |16/08/2004 16:41:05 C:\WINDOWS\system32\slextspk.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\SLGen.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\SLLights.dll |22/09/2005 21:03:40 C:\WINDOWS\system32\SLMOHServ.dll |22/09/2005 21:03:40 C:\WINDOWS\system32\spnike.dll |23/08/2001 16:47:18 C:\WINDOWS\system32\sprio600.dll |23/08/2001 16:47:18 C:\WINDOWS\system32\sprio800.dll |23/08/2001 16:47:18 C:\WINDOWS\system32\spxcoins.dll |16/08/2004 16:55:15 C:\WINDOWS\system32\ssldivx.dll |22/11/2006 00:39:25 C:\WINDOWS\system32\tsd32.dll |16/08/2004 16:41:16 C:\WINDOWS\system32\TwnLib20.dll |02/03/2006 14:27:05 C:\WINDOWS\system32\TwnLib4.dll |09/07/2004 08:43:56 C:\WINDOWS\system32\umloader.dll |07/01/2004 00:01:00 C:\WINDOWS\system32\usrcntra.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrcoina.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrdpa.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrdtea.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrfaxa.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrlbva.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrrtosa.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrsdpia.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrsvpia.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrv42a.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrv80a.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrvoica.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrvpa.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\vp6vfw.dll |29/06/2006 21:32:00 C:\WINDOWS\system32\vp7vfw.dll |22/11/2006 00:39:46 C:\WINDOWS\system32\vsdata.dll |11/02/2007 17:06:29 C:\WINDOWS\system32\vsinit.dll |11/02/2007 17:06:29 C:\WINDOWS\system32\vsmonapi.dll |11/02/2007 17:07:28 C:\WINDOWS\system32\vspubapi.dll |11/02/2007 17:07:28 C:\WINDOWS\system32\vsregexp.dll |11/02/2007 17:07:38 C:\WINDOWS\system32\vsutil.dll |11/02/2007 17:06:29 C:\WINDOWS\system32\vsutil_loc040c.dll |11/02/2007 17:07:43 C:\WINDOWS\system32\vswmi.dll |11/02/2007 17:07:28 C:\WINDOWS\system32\vsxml.dll |11/02/2007 17:07:28 C:\WINDOWS\system32\VXBLOCK.dll |20/05/2004 00:00:00 C:\WINDOWS\system32\win87em.dll |16/08/2004 16:41:22 C:\WINDOWS\system32\x264vfw.dll |22/11/2006 00:39:27 C:\WINDOWS\system32\xvidcore.dll |22/11/2006 00:39:26 C:\WINDOWS\system32\xvidvfw.dll |22/11/2006 00:39:26 C:\WINDOWS\system32\yv12vfw.dll |22/11/2006 00:39:46 C:\WINDOWS\system32\zlcomm.dll |11/02/2007 17:07:35 C:\WINDOWS\system32\zlcommdb.dll |11/02/2007 17:07:35 C:\WINDOWS\system32\ZPORT4AS.dll |07/07/2006 16:15:31 Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\WINDOWS\system32 29/06/2006 22:59 51.227 csedy.exe 05/08/2004 13:00 6.144 csrss.exe 2 fichier(s) 57.371 octets 0 Rép(s) 17.954.017.280 octets libres Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\WINDOWS\system32 29/06/2006 22:59 44.097 {0052BB15-14E4-4C23-BC28-1F802CFFD2E5}.exe 29/06/2006 23:09 4.608 {11A6B3C9-B7D6-41F5-A600-11EA60D7F17D}.exe 29/06/2006 23:00 45.568 {53DFFE82-1D4E-4B44-8F8F-CB556EB67794}.exe 29/06/2006 23:00 4.608 {7D95DE0A-96A7-4F2A-A43B-EC5129DB623E}.exe 29/06/2006 23:08 44.097 {9ABCA6D4-5830-4960-8007-B1DAFBF9C56E}.exe 29/06/2006 23:16 44.097 {C5955835-3441-4A45-9B6A-9EDEA03989AB}.exe 29/06/2006 23:18 45.568 {CE5A6669-E5BE-424C-889A-AD950367527F}.exe 29/06/2006 23:09 45.568 {CEEEB7A2-6813-4D12-BE71-A9DAA0FF7487}.exe 29/06/2006 23:17 4.608 {FDD0B7EF-1F5F-4C50-8130-A3912E340E02}.exe 9 fichier(s) 282.819 octets 0 Rép(s) 17.954.017.280 octets libres Contenu de Downloaded Program Files Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\WINDOWS\Downloaded Program Files 09/02/2007 17:33 <REP> . 09/02/2007 17:33 <REP> .. 15/11/2001 17:42 325 AxisCamControl.inf 15/11/2001 17:40 221.184 AxisCamControl.ocx 08/11/2001 10:59 192.512 CamCli.dll 16/08/2004 17:08 65 desktop.ini 25/07/2002 16:13 24.576 dwusplay.dll 25/07/2002 16:13 196.608 dwusplay.exe 29/09/2003 13:23 1.706.800 gdiplus.dll 29/09/2003 13:23 283.296 IDrop.ocx 29/09/2003 13:23 114.848 IDropENU.dll 13/03/2003 07:58 114.600 IDropFRA.dll 18/08/1999 08:54 180.224 ijl11.dll 25/07/2002 16:05 172.032 isusweb.dll 08/08/2006 11:45 576 kavwebscan.inf 09/11/2006 14:36 5.019 swflash.inf 16/06/2006 20:54 23.600 tvichw32.sys 29/09/2003 13:23 114.688 vizable.ocx 16 fichier(s) 3.350.953 octets Total des fichiers listés : 16 fichier(s) 3.350.953 octets 2 Rép(s) 17.954.017.280 octets libres Recherche de rootkit! (Merci S!Ri) Recherche d'infections connues Liste des programmes installes 3ds max 7 3DSexVilla-017.001 (Cracked) 7-Zip 4.32 Adobe After Effects 6.5 Adobe Bridge 1.0 Adobe Common File Installer Adobe Encore DVD 2.0 Adobe Encore DVD 2.0 Adobe Flash Player 9 ActiveX Adobe Help Center 2.0 Adobe Illustrator 10 Evaluation Adobe Photoshop 7.0 Adobe Premiere 6.0 Adobe Premiere Pro 2.0 Adobe Premiere Pro 2.0 Adobe Reader 7.0 - Français Adobe Stock Photos 1.0 Adobe SVG Viewer 3.0 Ahead NeroVision Express Antilles 2004 v1.3 Apple Software Update Archiveur WinRAR ATI Display Driver Audacity 1.2.6 avast! Antivirus AVG Anti-Spyware 7.5 Azureus CCleaner (remove only) CN-WCAM21SP PC-Camera Codeur Windows Media Série 9 ConvertXtoDVD 2.1.8.193 Correctif Windows XP - KB873333 Correctif Windows XP - KB873339 Correctif Windows XP - KB885250 Correctif Windows XP - KB885835 Correctif Windows XP - KB885836 Correctif Windows XP - KB886185 Correctif Windows XP - KB887472 Correctif Windows XP - KB888113 Correctif Windows XP - KB888302 Correctif Windows XP - KB890047 Correctif Windows XP - KB890175 Correctif Windows XP - KB890859 Correctif Windows XP - KB890923 Correctif Windows XP - KB891781 Correctif Windows XP - KB893066 Correctif Windows XP - KB893086 Demicron WireFusion 4.0 Done in 50 seconds EasyPHP 1.8 eMule Fast Movie Processor 1.44 Fichiers de référence de 3ds max 7 FlightGear v0.9.9 Fraps Google Earth Gorgeous Fall Foliage Screen Saver GTA San Andreas HentaII3D-017.004 (Cracked) Hercules Webcam High Definition Audio Driver Package - KB888111 HijackThis 1.99.1 Hotfix for Windows XP (KB909394) IsoBuster 1.9 iTunes iTunes J2SE Runtime Environment 5.0 Update 10 J2SE Runtime Environment 5.0 Update 2 J2SE Runtime Environment 5.0 Update 6 J2SE Runtime Environment 5.0 Update 9 jv16 PowerTools 2006 K-Lite Codec Pack 2.80 Full Kaspersky Online Scanner La Marmite du Chef - Recettes La Marmite du Chef 5.0.37 Lecteur Windows Media 10 Macromedia Dreamweaver MX Macromedia Dreamweaver MX 2004 Macromedia Extension Manager Macromedia Flash MX Macromedia Flash MX 2004 Macromedia Shockwave Player Macromedia Shockwave Player Matériaux architecturaux 3ds max 7 Matériaux et textures 3ds max 7 suppl. Mental Motions Pencil Box Microsoft .NET Compact Framework 1.0 SP2 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 French Language Pack Microsoft .NET Framework 1.1 Hotfix (KB886903) Microsoft ActiveSync 4.0 Microsoft Chess for Pocket PC (Remove Only) Microsoft Flight Simulator 2004 Un siècle d'aviation Microsoft Office 2000 CD-ROM 2 Microsoft Office 2000 Professional Microsoft Office Standard Edition 2003 Microsoft Works Mirage IVA (FS 2004) LABORIE Roland Mozilla Firefox (1.5.0.9) Mp3tag v2.36a Nero 7 Demo Packard Bell - Skype 2.5 Panda ActiveScan Panneau de contrôle ATI PlumberPete Free PowerDVD Quest3D Viewers 3.0e QuickTime Race Driver 2 Race Driver 2 Racing Days for Pocket PC RD2 World Championship Six-Pack V2.0 Realtek High Definition Audio Driver RollerCoaster Tycoon® 3 SecondLife (remove only) SkypeMate SlovoEd 3.x for PocketPC Sonic MyDVD Sonic RecordNow! Steinberg WaveLab v4.0d Stellarium 0.8.2 Tomb Raider: Legend 1.0 TrackMania Nations ESWC 0.1.7.5 Visual Pinball WebFldrs XP WinAce Archiver 2.0 Windows Installer 3.1 (KB893803) Windows Media Format Runtime Windows Media Player 10 Hotfix - KB894476 WinZip WireFusion 4 Enterprise (Shared Components) Yahoo! Toolbar ZIOGolf 2 for Pocket PC ZoneAlarm Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\Program Files 11/02/2007 17:07 <REP> . 11/02/2007 17:07 <REP> .. 10/04/2006 18:17 <REP> 7-Zip 01/01/2007 22:10 <REP> Act-3D 01/01/2007 17:39 <REP> Adobe 02/03/2006 14:27 <REP> Ahead 16/04/2006 09:47 <REP> AIM Productions 13/04/2006 09:55 <REP> Alcohol Soft 22/11/2006 22:54 <REP> Apple Software Update 21/01/2007 13:11 <REP> Atari 11/02/2007 02:45 <REP> Audacity 04/11/2006 18:41 <REP> backburner 2 31/03/2006 23:32 <REP> Common Files 30/12/2005 08:45 <REP> ComPlus Applications 08/01/2007 22:29 <REP> CyberLink 23/05/2006 20:38 <REP> EasyPHP1-8 18/02/2006 23:10 <REP> El Juky 01/07/2006 15:50 <REP> Elaborate Bytes 29/06/2006 21:32 <REP> Electronic Arts 20/01/2007 22:10 <REP> eMule 21/01/2007 13:14 <REP> Fichiers communs 12/04/2006 23:35 <REP> FlightGear 13/01/2007 00:11 <REP> FMP144 30/12/2005 08:45 <REP> GMixon 04/08/2006 11:15 <REP> Google 08/02/2007 21:17 <REP> Grisoft 15/01/2007 19:38 <REP> Illustration-World 01/01/2007 22:10 <REP> Internet Explorer 30/11/2006 19:02 <REP> iPod 30/11/2006 19:02 <REP> iPod(2) 08/01/2007 22:30 <REP> iTunes 20/01/2007 15:03 <REP> Java 26/05/2006 13:52 <REP> jv16 PowerTools 2006 22/11/2006 00:39 <REP> K-Lite Codec Pack 11/11/2006 15:30 <REP> Macromedia 23/11/2006 01:28 <REP> Messenger 08/04/2006 23:30 <REP> Microsoft .NET Compact Framework 1.0 SP2 07/01/2007 13:36 <REP> Microsoft ActiveSync 12/04/2006 11:25 <REP> microsoft frontpage 09/01/2006 18:44 <REP> Microsoft Office 30/12/2005 08:48 <REP> Microsoft Works 30/12/2005 08:45 <REP> Microsoft.NET 30/12/2005 08:48 <REP> Movie Maker 11/02/2007 20:51 <REP> Mozilla Firefox 30/12/2005 08:45 <REP> MSN 30/12/2005 08:45 <REP> MSN Gaming Zone 01/03/2006 21:15 <REP> Nero 30/12/2005 08:48 <REP> NetMeeting 30/12/2005 08:45 <REP> Norman 30/12/2005 08:48 <REP> Online Services 30/12/2005 08:48 <REP> Outlook Express 31/03/2006 23:37 <REP> Paragon Software 22/11/2006 22:56 <REP> QuickTime 30/12/2005 08:45 <REP> Real 30/12/2005 08:45 <REP> Realtek 17/01/2007 23:50 <REP> SecondLife 30/12/2005 08:48 <REP> Services en ligne 01/01/2006 22:04 <REP> SkypeMate 09/07/2006 14:18 <REP> SlySoft 16/04/2006 09:09 <REP> Smart Projects 09/01/2006 18:44 <REP> Snapshot Viewer 30/12/2005 08:45 <REP> Sonic 13/12/2006 23:06 <REP> SRV 21/12/2006 18:22 <REP> Stellarium 23/08/2006 23:10 <REP> SupraASCIIArt 16/06/2006 21:34 <REP> Surveyor Corporation 28/01/2007 22:49 <REP> thriXXX 03/07/2006 11:35 <REP> Trend Micro 12/06/2006 16:30 <REP> Trojan Remover 30/12/2005 08:45 <REP> Ulead Systems 14/01/2007 15:48 <REP> vso 06/01/2007 01:23 <REP> VSP 30/12/2005 14:37 <REP> WinAce 30/12/2005 08:45 <REP> Windows Media Components 07/07/2006 23:41 <REP> Windows Media Player 30/12/2005 08:49 <REP> Windows NT 19/12/2006 18:55 <REP> WinRAR 07/07/2006 23:41 <REP> WinZip 30/12/2005 08:45 <REP> xerox 01/03/2006 20:27 <REP> Yahoo! 11/02/2007 17:07 <REP> Zone Labs 0 fichier(s) 0 octets 81 Rép(s) 17.954.443.264 octets libres Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\Program Files\fichiers communs 21/01/2007 13:14 <REP> . 21/01/2007 13:14 <REP> .. 19/12/2006 20:58 <REP> Adobe 19/12/2006 23:22 <REP> Adobe Systems Shared 01/03/2006 21:17 <REP> Ahead 04/11/2006 18:41 <REP> Autodesk Shared 30/12/2005 08:47 <REP> DESIGNER 31/01/2006 21:04 <REP> element5 Shared 30/12/2005 02:53 <REP> InstallShield 30/12/2005 08:45 <REP> Java 11/11/2006 15:30 <REP> Macromedia 12/02/2006 14:15 <REP> Macromedia Shared 12/04/2006 11:54 <REP> Microsoft Shared 30/12/2005 08:45 <REP> MSSoap 30/12/2005 08:45 <REP> ODBC 21/01/2007 13:14 <REP> PocketSoft 30/12/2005 08:45 <REP> Real 30/12/2005 08:47 <REP> Services 30/12/2005 08:47 <REP> Sonic Shared 30/12/2005 08:45 <REP> SpeechEngines 30/12/2005 08:47 <REP> SureThing Shared 10/06/2006 14:55 <REP> Symantec Shared 09/01/2006 18:44 <REP> System 30/12/2005 08:45 <REP> Ulead Systems 12/01/2006 19:12 <REP> Vbox 30/12/2005 08:45 <REP> xing shared 0 fichier(s) 0 octets 26 Rép(s) 17.954.439.168 octets libres Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders 28/02/2006 00:58 <REP> . 28/02/2006 00:58 <REP> .. 30/12/2005 08:47 <REP> 1033 30/12/2005 08:47 <REP> 1036 11/07/2003 09:15 1.292.872 MSONSEXT.DLL 15/07/2003 05:52 35.896 MSOSV.DLL 03/06/1999 11:09 122.937 MSOWS409.DLL 07/03/2001 06:00 127.033 MSOWS40c.DLL 11/07/2003 01:25 80.448 PKMWS.DLL 18/03/1999 05:37 593.977 RAGENT.DLL 6 fichier(s) 2.253.163 octets 4 Rép(s) 17.954.439.168 octets libres Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\Program Files\common files 31/03/2006 23:32 <REP> . 31/03/2006 23:32 <REP> .. 31/03/2006 23:32 <REP> Microsoft Shared 0 fichier(s) 0 octets 3 Rép(s) 17.954.439.168 octets libres Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\ 11/11/2001 00:00 68.096 diff.exe 27/08/2006 14:10 103.424 grep.exe 2 fichier(s) 171.520 octets 0 Rép(s) 17.954.439.168 octets libres HIJACK Logfile of HijackThis v1.99.1 Scan saved at 20:57:37, on 11/02/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe D:\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe D:\Alwil Software\Avast4\ashServ.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe c:\APPS\HIDSERVICE\HIDSERVICE.exe C:\Program Files\CyberLink\Shared Files\RichVideo.exe C:\WINDOWS\system32\tcpsvcs.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe c:\APPS\Powercinema\Kernel\TV\CLSched.exe D:\Alwil Software\Avast4\ashMaiSv.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\Program Files\QuickTime\qttask.exe C:\Apps\Powercinema\PCMService.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\iPod\bin\iPodService.exe D:\ALWILS~1\Avast4\ashDisp.exe C:\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\WINDOWS\ALCWZRD.EXE C:\apps\ABoard\ABoard.exe C:\apps\ABoard\AOSD.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\PROGRA~1\MICROS~4\wcescomm.exe C:\WINDOWS\system32\ctfmon.exe C:\PROGRA~1\MICROS~4\rapimgr.exe C:\Program Files\WinZip\WZQKPICK.EXE C:\WINDOWS\System32\svchost.exe C:\Program Files\Internet Explorer\iexplore.exe D:\Documents and Settings\Daniel\Mes documents\secu\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell O4 - HKLM\..\Run: [ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe" O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe O4 - HKLM\..\Run: [avast!] D:\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MICROS~4\wcescomm.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://71.254.156.21/activex/AxisCamControl.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{3D7E5050-9BD1-4AD3-BC38-A96D11F34AA1}: NameServer = 195.238.2.21,195.238.2.22 O17 - HKLM\System\CS1\Services\Tcpip\..\{3D7E5050-9BD1-4AD3-BC38-A96D11F34AA1}: NameServer = 195.238.2.21,195.238.2.22 O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - D:\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe O23 - Service: avast! Antivirus - Unknown owner - D:\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - D:\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - D:\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
  14. oOGegOo
    ok j'ai effectué toute la procedure sans problème la fin du rapport eScan Sun Feb 11 16:57:50 2007 => ***** Checking for specific ITW Viruses ***** Sun Feb 11 16:57:50 2007 => Checking for Welchia Virus... Sun Feb 11 16:57:50 2007 => Checking for LovGate Virus... Sun Feb 11 16:57:50 2007 => Checking for CodeRed Virus... Sun Feb 11 16:57:50 2007 => Checking for OpaServ Virus... Sun Feb 11 16:57:50 2007 => Checking for Sobig.e Virus... Sun Feb 11 16:57:50 2007 => Checking for Winupie Virus... Sun Feb 11 16:57:50 2007 => Checking for Swen Virus... Sun Feb 11 16:57:50 2007 => Checking for JS.Fortnight Virus... Sun Feb 11 16:57:50 2007 => Checking for Novarg Virus... Sun Feb 11 16:57:50 2007 => Checking for Pagabot Virus... Sun Feb 11 16:57:50 2007 => Checking for Parite.b Virus... Sun Feb 11 16:57:50 2007 => Checking for Parite.a Virus... Sun Feb 11 16:57:50 2007 => ***** Scanning complete. ***** Sun Feb 11 16:57:50 2007 => Total Number of Files Scanned: 253240 Sun Feb 11 16:57:50 2007 => Total Number of Virus(es) Found: 21 Sun Feb 11 16:57:50 2007 => Total Number of Disinfected Files: 0 Sun Feb 11 16:57:50 2007 => Total Number of Files Renamed: 0 Sun Feb 11 16:57:50 2007 => Total Number of Deleted Files: 17 Sun Feb 11 16:57:50 2007 => Total Number of Errors: 10 Sun Feb 11 16:57:50 2007 => Time Elapsed: 02:40:00 Sun Feb 11 16:57:50 2007 => Virus Database Date: 2007/01/21 Sun Feb 11 16:57:50 2007 => Virus Database Count: 260293 Sun Feb 11 16:57:50 2007 => Scan Completed. Script execute en mode sans echec Rapport clean par Malekal_morte - http://www.malekal.com Option 2, executee le dim. 11/02/2007 a 13:42:25,43 Microsoft Windows XP [version 5.1.2600] *** Suppression de fichiers sur C: *** Suppression des fichiers dans C:\WINDOWS\ *** Suppression des fichiers dans C:\WINDOWS\system32 tentative de suppression de "C:\Program Files\system\" *** Suppression des clefs du registre effectuee.. *** Fin du rapport ! SDFix: Version 1.64 Run by: Daniel - dim. 11/02/2007 @ 17:09:39,17 Microsoft Windows XP [version 5.1.2600] Running From: C:\SDFix Safe Mode: Checking Services: Name: Microsoft IE Updater Path: C:\WINDOWS\system32\update00822631.exe /start Microsoft IE Updater Deleted Restoring Windows Registry Entries Restoring Default Hosts File et le log hijack Logfile of HijackThis v1.99.1 Scan saved at 17:38:16, on 11/02/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe D:\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe D:\Alwil Software\Avast4\ashServ.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe c:\APPS\HIDSERVICE\HIDSERVICE.exe C:\Program Files\CyberLink\Shared Files\RichVideo.exe C:\WINDOWS\system32\tcpsvcs.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe c:\APPS\Powercinema\Kernel\TV\CLSched.exe D:\Alwil Software\Avast4\ashMaiSv.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\Program Files\QuickTime\qttask.exe C:\Apps\Powercinema\PCMService.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\iPod\bin\iPodService.exe D:\ALWILS~1\Avast4\ashDisp.exe C:\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\WINDOWS\ALCWZRD.EXE C:\apps\ABoard\ABoard.exe C:\apps\ABoard\AOSD.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\PROGRA~1\MICROS~4\wcescomm.exe C:\PROGRA~1\MICROS~4\rapimgr.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\WinZip\WZQKPICK.EXE C:\Program Files\Internet Explorer\iexplore.exe D:\Documents and Settings\Daniel\Mes documents\secu\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell O4 - HKLM\..\Run: [ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe" O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe O4 - HKLM\..\Run: [avast!] D:\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MICROS~4\wcescomm.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://71.254.156.21/activex/AxisCamControl.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{3D7E5050-9BD1-4AD3-BC38-A96D11F34AA1}: NameServer = 195.238.2.21,195.238.2.22 O17 - HKLM\System\CS1\Services\Tcpip\..\{3D7E5050-9BD1-4AD3-BC38-A96D11F34AA1}: NameServer = 195.238.2.21,195.238.2.22 O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - D:\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe O23 - Service: avast! Antivirus - Unknown owner - D:\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - D:\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - D:\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: ieupdater2 (Microsoft IE Updater2) - Unknown owner - D:\Documents and Settings\Daniel\~tmp0374.exe (file missing) O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe voilà A+ et Merci !
  15. oOGegOo
    rapport diaghelp C:\WINDOWS\System32\reg.sys -->8/02/2007 21:07:21 C:\WINDOWS\System32\winlogon.exe -->8/02/2007 17:35:10 C:\WINDOWS\System32\mkucmaaa.exe -->8/02/2007 16:58:21 C:\WINDOWS\System32\jwmoaaaa.exe -->8/02/2007 16:58:21 C:\WINDOWS\System32\vhyraaaa.exe -->8/02/2007 16:58:20 C:\WINDOWS\System32\aqsplmnr.exe -->8/02/2007 16:58:20 C:\WINDOWS\System32\jwwruaaa.exe -->8/02/2007 16:58:19 C:\WINDOWS\System32\dyovhyre.exe -->7/02/2007 17:41:18 C:\WINDOWS\System32\gbctaaaa.exe -->7/02/2007 17:41:17 C:\WINDOWS\System32\jvfwcbvd.exe -->7/02/2007 17:41:16 C:\WINDOWS\System32\ppsloaaa.exe -->7/02/2007 17:41:15 C:\WINDOWS\System32\gbuaaaaa.exe -->7/02/2007 17:41:15 C:\WINDOWS\System32\RunOnce2.t__ -->6/02/2007 18:45:37 C:\WINDOWS\System32\akupwbua.exe -->6/02/2007 18:06:55 C:\WINDOWS\System32\vwlbaaaa.exe -->6/02/2007 18:06:54 C:\WINDOWS\System32\dlfgbtnj.exe -->6/02/2007 18:06:54 C:\WINDOWS\System32\swkvmvyk.exe -->6/02/2007 18:06:53 C:\WINDOWS\System32\atboaaaa.exe -->6/02/2007 18:06:52 C:\WINDOWS\System32\stitaaaa.exe -->6/02/2007 17:10:08 C:\WINDOWS\System32\deaiaaaa.exe -->6/02/2007 17:10:08 C:\WINDOWS\System32\vhutsmwo.exe -->6/02/2007 17:10:07 C:\WINDOWS\System32\pqmbsune.exe -->6/02/2007 17:10:06 C:\WINDOWS\System32\gcersaaa.exe -->6/02/2007 17:10:06 C:\WINDOWS\System32\pohcaaaa.exe -->5/02/2007 23:34:43 C:\WINDOWS\System32\meeiyaaa.exe -->5/02/2007 23:34:42 C:\WINDOWS\QTFont.qfn -->10/02/2007 10:35:14 C:\WINDOWS\WindowsUpdate.log -->10/02/2007 10:16:41 C:\WINDOWS\wiadebug.log -->10/02/2007 10:10:35 C:\WINDOWS\wiaservc.log -->10/02/2007 10:10:34 C:\WINDOWS\bootstat.dat -->10/02/2007 10:09:20 C:\WINDOWS\SchedLgU.Txt -->10/02/2007 4:06:53 C:\WINDOWS\NeroDigital.ini -->10/02/2007 2:48:48 C:\WINDOWS\QTFont.for -->9/02/2007 0:16:01 C:\WINDOWS\Sti_Trace.log -->8/02/2007 21:05:37 C:\WINDOWS\win.ini -->7/02/2007 23:17:37 C:\WINDOWS\system.ini -->7/02/2007 23:17:37 C:\WINDOWS\snap.exe -->5/02/2007 22:10:35 C:\WINDOWS\WMSysPr9.prx -->1/01/2007 18:35:18 C:\WINDOWS\ModemLog_Smart Link 56K Modem.txt -->23/11/2006 17:10:41 C:\WINDOWS\tcb.pmw -->23/11/2006 17:08:36 C:\WINDOWS\ALCFDRTM.EXE |30/12/2005 01:02:22 C:\WINDOWS\Alcmtr.exe |22/09/2005 21:10:53 C:\WINDOWS\ALCWZRD.EXE |22/09/2005 21:10:53 C:\WINDOWS\IsUn040c.exe |16/08/2004 17:25:14 C:\WINDOWS\IsUninst.exe |31/03/2006 23:27:14 C:\WINDOWS\MicCal.exe |22/09/2005 21:10:52 C:\WINDOWS\PATCH.EXE |07/07/2006 23:43:55 C:\WINDOWS\psuninst2.exe |09/04/2006 19:18:27 C:\WINDOWS\RTHDCPL.EXE |22/09/2005 21:10:52 C:\WINDOWS\RTLCPL.EXE |22/09/2005 21:10:52 C:\WINDOWS\runtsckl.exe |02/11/2005 17:07:12 C:\WINDOWS\slrundll.exe |31/12/1979 23:00:00 C:\WINDOWS\SmCfg.exe |22/09/2005 21:03:40 C:\WINDOWS\snap.exe |05/02/2007 22:10:34 C:\WINDOWS\SoundMan.exe |22/09/2005 21:10:52 C:\WINDOWS\twunk_16.exe |16/08/2004 16:41:16 C:\WINDOWS\twunk_32.exe |16/08/2004 16:41:16 C:\WINDOWS\unin040c.exe |12/01/2006 20:38:16 C:\WINDOWS\uninst.exe |07/01/2007 13:36:22 C:\WINDOWS\UNISTB32.EXE |13/03/1998 00:02:00 C:\WINDOWS\UNNeroBackItUp.exe |12/09/2005 15:13:46 C:\WINDOWS\UNNeroMediaHome.exe |12/09/2005 15:13:46 C:\WINDOWS\UNNeroShowTime.exe |12/09/2005 15:13:46 C:\WINDOWS\UNNeroVision.exe |12/09/2005 15:13:46 C:\WINDOWS\UNRecode.exe |12/09/2005 15:13:46 C:\WINDOWS\loadhttp.dll |15/10/2002 13:29:40 C:\WINDOWS\ov530dib.dll |16/06/2006 21:51:42 C:\WINDOWS\patchw32.dll |14/12/2001 12:34:46 C:\WINDOWS\POCE98.DLL |23/09/1998 21:10:16 C:\WINDOWS\POCELANG.DLL |23/02/1999 14:12:18 C:\WINDOWS\RtlExUpd.dll |22/09/2005 21:10:50 C:\WINDOWS\TMUPDATE.DLL |07/07/2006 23:43:56 C:\WINDOWS\twain.dll |16/08/2004 16:41:16 C:\WINDOWS\twain_32.dll |16/08/2004 16:41:16 C:\WINDOWS\UNZIP.DLL |07/07/2006 23:43:55 C:\WINDOWS\system32\ahgckkep.exe |05/02/2007 23:34:38 C:\WINDOWS\system32\ahkdcwre.exe |05/02/2007 22:19:20 C:\WINDOWS\system32\akupwbua.exe |06/02/2007 18:06:55 C:\WINDOWS\system32\amxpuutx.exe |05/02/2007 22:12:13 C:\WINDOWS\system32\append.exe |16/08/2004 16:39:57 C:\WINDOWS\system32\aqegaaaa.exe |05/02/2007 22:35:40 C:\WINDOWS\system32\aqqamglm.exe |05/02/2007 20:26:44 C:\WINDOWS\system32\aqsplmnr.exe |08/02/2007 16:58:20 C:\WINDOWS\system32\aqtaaaaa.exe |05/02/2007 22:12:15 C:\WINDOWS\system32\aqukyuyo.exe |05/02/2007 22:12:14 C:\WINDOWS\system32\aqyhaaaa.exe |05/02/2007 01:30:32 C:\WINDOWS\system32\asuninst.exe |07/07/2006 16:15:31 C:\WINDOWS\system32\aswBoot.exe |26/05/2006 14:18:50 C:\WINDOWS\system32\atboaaaa.exe |06/02/2007 18:06:52 C:\WINDOWS\system32\ati2evxx.exe |31/12/1979 23:00:00 C:\WINDOWS\system32\Ati2mdxx.exe |31/12/1979 23:00:00 C:\WINDOWS\system32\ChCfg.exe |22/09/2005 21:10:52 C:\WINDOWS\system32\csedy.exe |12/10/2006 16:03:27 C:\WINDOWS\system32\danfwttc.exe |05/02/2007 01:20:45 C:\WINDOWS\system32\dapqnaaa.exe |05/02/2007 01:30:33 C:\WINDOWS\system32\dasaaaaa.exe |05/02/2007 22:35:40 C:\WINDOWS\system32\deaiaaaa.exe |06/02/2007 17:10:08 C:\WINDOWS\system32\debug.exe |16/08/2004 16:40:04 C:\WINDOWS\system32\dlfgbtnj.exe |06/02/2007 18:06:54 C:\WINDOWS\system32\dmcnyuht.exe |05/02/2007 01:47:46 C:\WINDOWS\system32\dosx.exe |16/08/2004 16:40:08 C:\WINDOWS\system32\dqgfakyf.exe |05/02/2007 22:19:19 C:\WINDOWS\system32\dqhkwxaq.exe |05/02/2007 22:19:21 C:\WINDOWS\system32\dvdplay.exe |23/08/2001 16:47:34 C:\WINDOWS\system32\dvecbcnp.exe |05/02/2007 22:12:13 C:\WINDOWS\system32\dyovhyre.exe |07/02/2007 17:41:18 C:\WINDOWS\system32\edlin.exe |16/08/2004 16:40:20 C:\WINDOWS\system32\exe2bin.exe |16/08/2004 16:40:21 C:\WINDOWS\system32\fastopen.exe |16/08/2004 16:40:21 C:\WINDOWS\system32\FileOps.exe |12/01/2006 19:55:07 C:\WINDOWS\system32\gbctaaaa.exe |07/02/2007 17:41:17 C:\WINDOWS\system32\gbuaaaaa.exe |07/02/2007 17:41:15 C:\WINDOWS\system32\gcersaaa.exe |06/02/2007 17:10:06 C:\WINDOWS\system32\gcpxsaaa.exe |05/02/2007 22:35:41 C:\WINDOWS\system32\gehxaaaa.exe |05/02/2007 01:16:41 C:\WINDOWS\system32\geuqiaaa.exe |05/02/2007 01:16:39 C:\WINDOWS\system32\gsgfdkxp.exe |05/02/2007 22:19:21 C:\WINDOWS\system32\gshxodkb.exe |05/02/2007 22:19:19 C:\WINDOWS\system32\gvkusaaa.exe |05/02/2007 01:48:09 C:\WINDOWS\system32\gxkhqfeq.exe |05/02/2007 22:12:14 C:\WINDOWS\system32\HdAShCut.exe |07/01/2005 16:07:16 C:\WINDOWS\system32\java.exe |20/01/2007 15:03:29 C:\WINDOWS\system32\javaw.exe |20/01/2007 15:03:29 C:\WINDOWS\system32\javaws.exe |20/01/2007 15:03:29 C:\WINDOWS\system32\jvfwcbvd.exe |07/02/2007 17:41:16 C:\WINDOWS\system32\jwarsaaa.exe |05/02/2007 01:20:44 C:\WINDOWS\system32\jwmoaaaa.exe |08/02/2007 16:58:21 C:\WINDOWS\system32\jwwruaaa.exe |08/02/2007 16:58:19 C:\WINDOWS\system32\meeiyaaa.exe |05/02/2007 23:34:42 C:\WINDOWS\system32\mem.exe |16/08/2004 16:40:35 C:\WINDOWS\system32\minirec.exe |22/09/2005 21:03:40 C:\WINDOWS\system32\mkamtkmy.exe |05/02/2007 01:30:34 C:\WINDOWS\system32\mkucmaaa.exe |08/02/2007 16:58:21 C:\WINDOWS\system32\mkwtsctb.exe |05/02/2007 01:30:32 C:\WINDOWS\system32\mkybynfg.exe |05/02/2007 20:26:43 C:\WINDOWS\system32\mobmaaaa.exe |05/02/2007 20:26:46 C:\WINDOWS\system32\mobndqsl.exe |05/02/2007 20:26:46 C:\WINDOWS\system32\modgmiph.exe |05/02/2007 20:26:45 C:\WINDOWS\system32\mscdexnt.exe |16/08/2004 16:40:39 C:\WINDOWS\system32\msvcrtd.exe |05/02/2007 22:10:40 C:\WINDOWS\system32\NeroCheck.exe |12/01/2006 15:40:44 C:\WINDOWS\system32\nlsfunc.exe |16/08/2004 16:40:48 C:\WINDOWS\system32\pohcaaaa.exe |05/02/2007 23:34:43 C:\WINDOWS\system32\ppsloaaa.exe |07/02/2007 17:41:15 C:\WINDOWS\system32\pqicaaaa.exe |05/02/2007 01:20:45 C:\WINDOWS\system32\pqkuhtbn.exe |05/02/2007 22:35:41 C:\WINDOWS\system32\pqmbsune.exe |06/02/2007 17:10:06 C:\WINDOWS\system32\pqnaaaaa.exe |05/02/2007 01:30:34 C:\WINDOWS\system32\pqwjwbau.exe |05/02/2007 01:20:46 C:\WINDOWS\system32\Process.exe |08/02/2007 23:40:47 C:\WINDOWS\system32\pxcpya64.exe |01/01/2007 18:33:25 C:\WINDOWS\system32\pxcpyi64.exe |01/01/2007 18:33:25 C:\WINDOWS\system32\pxhpinst.exe |19/12/2006 20:50:47 C:\WINDOWS\system32\pxinsa64.exe |01/01/2007 18:33:25 C:\WINDOWS\system32\pxinsi64.exe |01/01/2007 18:33:25 C:\WINDOWS\system32\redir.exe |16/08/2004 16:41:00 C:\WINDOWS\system32\setver.exe |16/08/2004 16:41:03 C:\WINDOWS\system32\sgpanaaa.exe |05/02/2007 01:47:48 C:\WINDOWS\system32\share.exe |16/08/2004 16:41:03 C:\WINDOWS\system32\skwdaaaa.exe |05/02/2007 23:34:38 C:\WINDOWS\system32\slmh.exe |22/09/2005 21:03:40 C:\WINDOWS\system32\slserv.exe |31/12/1979 23:00:00 C:\WINDOWS\system32\solvdcuj.exe |05/02/2007 01:47:54 C:\WINDOWS\system32\spocgdgx.exe |05/02/2007 22:35:42 C:\WINDOWS\system32\sputvunw.exe |05/02/2007 01:20:47 C:\WINDOWS\system32\SrchSTS.exe |08/02/2007 23:40:47 C:\WINDOWS\system32\stitaaaa.exe |06/02/2007 17:10:08 C:\WINDOWS\system32\swkvmvyk.exe |06/02/2007 18:06:53 C:\WINDOWS\system32\swreg.exe |08/02/2007 23:40:47 C:\WINDOWS\system32\swsc.exe |08/02/2007 23:40:47 C:\WINDOWS\system32\update57455861.exe |05/02/2007 00:54:44 C:\WINDOWS\system32\update77526596.exe |05/02/2007 00:54:37 C:\WINDOWS\system32\usrmlnka.exe |23/08/2001 16:47:48 C:\WINDOWS\system32\usrprbda.exe |23/08/2001 16:47:48 C:\WINDOWS\system32\usrshuta.exe |23/08/2001 16:47:48 C:\WINDOWS\system32\vhutsmwo.exe |06/02/2007 17:10:07 C:\WINDOWS\system32\vhxaaaaa.exe |05/02/2007 01:47:37 C:\WINDOWS\system32\vhyraaaa.exe |08/02/2007 16:58:20 C:\WINDOWS\system32\vidaccess1429.exe |05/02/2007 00:54:39 C:\WINDOWS\system32\vtooaaaa.exe |05/02/2007 23:34:37 C:\WINDOWS\system32\vwlbaaaa.exe |06/02/2007 18:06:54 C:\WINDOWS\system32\{0052BB15-14E4-4C23-BC28-1F802CFFD2E5}.exe |29/06/2006 22:59:20 C:\WINDOWS\system32\{11A6B3C9-B7D6-41F5-A600-11EA60D7F17D}.exe |29/06/2006 23:09:04 C:\WINDOWS\system32\{53DFFE82-1D4E-4B44-8F8F-CB556EB67794}.exe |29/06/2006 23:00:56 C:\WINDOWS\system32\{7D95DE0A-96A7-4F2A-A43B-EC5129DB623E}.exe |29/06/2006 23:00:17 C:\WINDOWS\system32\{9ABCA6D4-5830-4960-8007-B1DAFBF9C56E}.exe |29/06/2006 23:08:20 C:\WINDOWS\system32\{C5955835-3441-4A45-9B6A-9EDEA03989AB}.exe |29/06/2006 23:16:36 C:\WINDOWS\system32\{CE5A6669-E5BE-424C-889A-AD950367527F}.exe |29/06/2006 23:18:02 C:\WINDOWS\system32\{CEEEB7A2-6813-4D12-BE71-A9DAA0FF7487}.exe |29/06/2006 23:09:49 C:\WINDOWS\system32\{FDD0B7EF-1F5F-4C50-8130-A3912E340E02}.exe |29/06/2006 23:17:22 C:\WINDOWS\system32\34CoInstaller.dll |22/09/2005 21:10:08 C:\WINDOWS\system32\amr_cpl.dll |22/09/2005 21:03:40 C:\WINDOWS\system32\amstream.dll |16/08/2004 16:39:57 C:\WINDOWS\system32\ati2cqag.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ati2dvag.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ati2edxx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ati2evxx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ati3duag.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ATIDDC.DLL |31/12/1979 23:00:00 C:\WINDOWS\system32\ATIDEMGR.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atiiiexx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atikvmag.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atioglx1.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atioglxx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atipdlxx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atitvo32.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ativcoxx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ativvaxx.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\atmfd.dll |16/08/2004 16:39:57 C:\WINDOWS\system32\atmlib.dll |16/08/2004 16:39:57 C:\WINDOWS\system32\BASSMOD.dll |29/06/2006 19:41:19 C:\WINDOWS\system32\CmdLineExt.dll |09/07/2006 16:44:24 C:\WINDOWS\system32\CmdLineExt03.dll |21/01/2007 13:15:31 C:\WINDOWS\system32\coinst.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\compatUI.dll |16/08/2004 16:40:03 C:\WINDOWS\system32\cpuinf32.dll |22/11/2006 00:39:21 C:\WINDOWS\system32\dgrpsetu.dll |16/08/2004 16:55:15 C:\WINDOWS\system32\dgsetup.dll |16/08/2004 16:55:15 C:\WINDOWS\system32\divx.dll |22/11/2006 00:39:24 C:\WINDOWS\system32\dpl100.dll |22/11/2006 00:39:25 C:\WINDOWS\system32\dtu100.dll |22/11/2006 00:39:25 C:\WINDOWS\system32\encdec.dll |16/08/2004 16:40:21 C:\WINDOWS\system32\EqnClass.Dll |16/08/2004 16:55:15 C:\WINDOWS\system32\fdffbfbfd1_s.dll |26/05/2006 13:52:24 C:\WINDOWS\system32\ff_vfw.dll |22/11/2006 00:39:23 C:\WINDOWS\system32\frapsvid.dll |03/12/2005 12:56:50 C:\WINDOWS\system32\GEARAspi.dll |19/09/2006 15:43:58 C:\WINDOWS\system32\HdAProp.dll |07/01/2005 16:07:16 C:\WINDOWS\system32\HdAudRes.dll |07/01/2005 16:07:04 C:\WINDOWS\system32\hticons.dll |16/08/2004 17:03:32 C:\WINDOWS\system32\huffyuv.dll |22/11/2006 00:39:46 C:\WINDOWS\system32\hypertrm.dll |16/08/2004 17:03:05 C:\WINDOWS\system32\i420vfw.dll |22/11/2006 00:39:46 C:\WINDOWS\system32\Iacenc.dll |22/11/2006 00:39:46 C:\WINDOWS\system32\iccvid.dll |16/08/2004 16:40:27 C:\WINDOWS\system32\ieencode.dll |16/08/2004 16:40:28 C:\WINDOWS\system32\imagr5.dll |02/03/2006 14:27:05 C:\WINDOWS\system32\imagx5.dll |02/03/2006 14:27:05 C:\WINDOWS\system32\imagX7.dll |26/07/2004 16:16:10 C:\WINDOWS\system32\ImagXpr5.dll |02/03/2006 14:27:05 C:\WINDOWS\system32\imagXpr7.dll |26/07/2004 16:16:10 C:\WINDOWS\system32\imagXR7.dll |26/07/2004 16:16:10 C:\WINDOWS\system32\imagXRA7.dll |26/07/2004 16:16:10 C:\WINDOWS\system32\ir32_32.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\ir41_qc.dll |16/08/2004 16:41:37 C:\WINDOWS\system32\ir41_qcx.dll |16/08/2004 16:41:37 C:\WINDOWS\system32\ir50_32.dll |16/08/2004 16:41:37 C:\WINDOWS\system32\ir50_qc.dll |16/08/2004 16:41:37 C:\WINDOWS\system32\ir50_qcx.dll |16/08/2004 16:41:37 C:\WINDOWS\system32\isrdbg32.dll |16/08/2004 17:06:15 C:\WINDOWS\system32\jgaw400.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\jgdw400.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\jgmd400.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\jgpl400.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\jgsd400.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\jgsh400.dll |16/08/2004 16:40:31 C:\WINDOWS\system32\lfbmp11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\LFCMP11n.DLL |07/06/2002 00:02:00 C:\WINDOWS\system32\lfeps11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lffax11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lfgif11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lfpcd11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lfpcx11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\Lfpng11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lfpsd11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lftga11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lftif11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\lfwmf11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\libdivx.dll |22/11/2006 00:39:25 C:\WINDOWS\system32\LTDIS11n.dll |07/06/2002 00:02:00 C:\WINDOWS\system32\ltfil11n.DLL |07/06/2002 00:02:00 C:\WINDOWS\system32\ltimg11n.dll |07/06/2002 00:02:02 C:\WINDOWS\system32\ltkrn11n.dll |07/06/2002 00:02:02 C:\WINDOWS\system32\Ltwvc11n.dll |07/06/2002 00:02:02 C:\WINDOWS\system32\mdwmdmsp.dll |23/08/2001 16:47:06 C:\WINDOWS\system32\mplaa6.dll |22/11/2006 00:39:49 C:\WINDOWS\system32\mplam6.dll |22/11/2006 00:39:49 C:\WINDOWS\system32\mplapx.dll |22/11/2006 00:39:49 C:\WINDOWS\system32\mplaw7.dll |22/11/2006 00:39:49 C:\WINDOWS\system32\msdmo.dll |16/08/2004 16:40:40 C:\WINDOWS\system32\msencode.dll |16/08/2004 16:40:40 C:\WINDOWS\system32\MSRTEDIT.DLL |22/01/1999 19:46:58 C:\WINDOWS\system32\NeroCo.dll |16/02/2005 14:18:04 C:\WINDOWS\system32\Oemdspif.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\ov530ext.dll |16/06/2006 21:51:42 C:\WINDOWS\system32\ov530usd.dll |16/06/2006 21:51:42 C:\WINDOWS\system32\PA207USD.DLL |01/09/2004 09:42:16 C:\WINDOWS\system32\paqsp.dll |23/08/2001 16:47:16 C:\WINDOWS\system32\PCDLIB32.DLL |07/06/2002 00:02:02 C:\WINDOWS\system32\picn20.dll |02/03/2006 14:27:05 C:\WINDOWS\system32\pncrt.dll |22/09/2005 21:24:30 C:\WINDOWS\system32\pndx5016.dll |22/09/2005 21:24:30 C:\WINDOWS\system32\pndx5032.dll |22/09/2005 21:24:30 C:\WINDOWS\system32\PsisDecd.dll |22/09/2005 21:10:07 C:\WINDOWS\system32\Px.dll |19/10/2004 15:56:36 C:\WINDOWS\system32\pxdrv.dll |17/01/2005 00:01:00 C:\WINDOWS\system32\pxmas.dll |19/10/2004 15:55:44 C:\WINDOWS\system32\PxWave.dll |19/10/2004 15:55:16 C:\WINDOWS\system32\PXWMA.dll |25/03/2004 09:30:40 C:\WINDOWS\system32\qedwipes.dll |16/08/2004 16:40:58 C:\WINDOWS\system32\qt-dx331.dll |22/11/2006 00:39:25 C:\WINDOWS\system32\rmoc3260.dll |22/09/2005 21:24:33 C:\WINDOWS\system32\SAA.dll |08/11/2003 20:16:58 C:\WINDOWS\system32\sbe.dll |16/08/2004 16:41:02 C:\WINDOWS\system32\slbcsp.dll |16/08/2004 16:41:05 C:\WINDOWS\system32\slbiop.dll |16/08/2004 16:41:05 C:\WINDOWS\system32\slbrccsp.dll |16/08/2004 16:41:05 C:\WINDOWS\system32\slextspk.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\SLGen.dll |31/12/1979 23:00:00 C:\WINDOWS\system32\SLLights.dll |22/09/2005 21:03:40 C:\WINDOWS\system32\SLMOHServ.dll |22/09/2005 21:03:40 C:\WINDOWS\system32\spnike.dll |23/08/2001 16:47:18 C:\WINDOWS\system32\sprio600.dll |23/08/2001 16:47:18 C:\WINDOWS\system32\sprio800.dll |23/08/2001 16:47:18 C:\WINDOWS\system32\spxcoins.dll |16/08/2004 16:55:15 C:\WINDOWS\system32\ssldivx.dll |22/11/2006 00:39:25 C:\WINDOWS\system32\tsd32.dll |16/08/2004 16:41:16 C:\WINDOWS\system32\TwnLib20.dll |02/03/2006 14:27:05 C:\WINDOWS\system32\TwnLib4.dll |09/07/2004 08:43:56 C:\WINDOWS\system32\umloader.dll |07/01/2004 00:01:00 C:\WINDOWS\system32\usrcntra.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrcoina.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrdpa.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrdtea.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrfaxa.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrlbva.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrrtosa.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrsdpia.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrsvpia.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrv42a.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrv80a.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrvoica.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\usrvpa.dll |23/08/2001 16:47:20 C:\WINDOWS\system32\vp6vfw.dll |29/06/2006 21:32:00 C:\WINDOWS\system32\vp7vfw.dll |22/11/2006 00:39:46 C:\WINDOWS\system32\VXBLOCK.dll |20/05/2004 00:00:00 C:\WINDOWS\system32\win87em.dll |16/08/2004 16:41:22 C:\WINDOWS\system32\x264vfw.dll |22/11/2006 00:39:27 C:\WINDOWS\system32\xvidcore.dll |22/11/2006 00:39:26 C:\WINDOWS\system32\xvidvfw.dll |22/11/2006 00:39:26 C:\WINDOWS\system32\yv12vfw.dll |22/11/2006 00:39:46 C:\WINDOWS\system32\ZPORT4AS.dll |07/07/2006 16:15:31 Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\WINDOWS\system32 29/06/2006 22:59 51.227 csedy.exe 05/08/2004 13:00 6.144 csrss.exe 2 fichier(s) 57.371 octets 0 Rép(s) 18.106.818.560 octets libres Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\WINDOWS\system32 29/06/2006 22:59 44.097 {0052BB15-14E4-4C23-BC28-1F802CFFD2E5}.exe 29/06/2006 23:09 4.608 {11A6B3C9-B7D6-41F5-A600-11EA60D7F17D}.exe 29/06/2006 23:00 45.568 {53DFFE82-1D4E-4B44-8F8F-CB556EB67794}.exe 29/06/2006 23:00 4.608 {7D95DE0A-96A7-4F2A-A43B-EC5129DB623E}.exe 29/06/2006 23:08 44.097 {9ABCA6D4-5830-4960-8007-B1DAFBF9C56E}.exe 29/06/2006 23:16 44.097 {C5955835-3441-4A45-9B6A-9EDEA03989AB}.exe 29/06/2006 23:18 45.568 {CE5A6669-E5BE-424C-889A-AD950367527F}.exe 29/06/2006 23:09 45.568 {CEEEB7A2-6813-4D12-BE71-A9DAA0FF7487}.exe 29/06/2006 23:17 4.608 {FDD0B7EF-1F5F-4C50-8130-A3912E340E02}.exe 9 fichier(s) 282.819 octets 0 Rép(s) 18.106.818.560 octets libres Contenu de Downloaded Program Files Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\WINDOWS\Downloaded Program Files 09/02/2007 17:33 <REP> . 09/02/2007 17:33 <REP> .. 15/11/2001 17:42 325 AxisCamControl.inf 15/11/2001 17:40 221.184 AxisCamControl.ocx 08/11/2001 10:59 192.512 CamCli.dll 16/08/2004 17:08 65 desktop.ini 25/07/2002 16:13 24.576 dwusplay.dll 25/07/2002 16:13 196.608 dwusplay.exe 29/09/2003 13:23 1.706.800 gdiplus.dll 29/09/2003 13:23 283.296 IDrop.ocx 29/09/2003 13:23 114.848 IDropENU.dll 13/03/2003 07:58 114.600 IDropFRA.dll 18/08/1999 08:54 180.224 ijl11.dll 25/07/2002 16:05 172.032 isusweb.dll 08/08/2006 11:45 576 kavwebscan.inf 09/11/2006 14:36 5.019 swflash.inf 16/06/2006 20:54 23.600 tvichw32.sys 29/09/2003 13:23 114.688 vizable.ocx 16 fichier(s) 3.350.953 octets Total des fichiers listés : 16 fichier(s) 3.350.953 octets 2 Rép(s) 18.106.814.464 octets libres Recherche de rootkit! (Merci S!Ri) Recherche d'infections connues Liste des programmes installes 3ds max 7 7-Zip 4.32 Adobe After Effects 6.5 Adobe Bridge 1.0 Adobe Common File Installer Adobe Encore DVD 2.0 Adobe Encore DVD 2.0 Adobe Flash Player 9 ActiveX Adobe Help Center 2.0 Adobe Illustrator 10 Evaluation Adobe Photoshop 7.0 Adobe Premiere 6.0 Adobe Premiere Pro 2.0 Adobe Premiere Pro 2.0 Adobe Reader 7.0 - Français Adobe Stock Photos 1.0 Adobe SVG Viewer 3.0 Ahead NeroVision Express Antilles 2004 v1.3 Apple Software Update Archiveur WinRAR ATI Display Driver Audacity 1.2.6 avast! Antivirus AVG Anti-Spyware 7.5 Azureus CCleaner (remove only) CN-WCAM21SP PC-Camera Codeur Windows Media Série 9 ConvertXtoDVD 2.1.8.193 Correctif Windows XP - KB873333 Correctif Windows XP - KB873339 Correctif Windows XP - KB885250 Correctif Windows XP - KB885835 Correctif Windows XP - KB885836 Correctif Windows XP - KB886185 Correctif Windows XP - KB887472 Correctif Windows XP - KB888113 Correctif Windows XP - KB888302 Correctif Windows XP - KB890047 Correctif Windows XP - KB890175 Correctif Windows XP - KB890859 Correctif Windows XP - KB890923 Correctif Windows XP - KB891781 Correctif Windows XP - KB893066 Correctif Windows XP - KB893086 Demicron WireFusion 4.0 Done in 50 seconds EasyPHP 1.8 eMule Fast Movie Processor 1.44 Fichiers de référence de 3ds max 7 FlightGear v0.9.9 Fraps Google Earth Gorgeous Fall Foliage Screen Saver GTA San Andreas Hercules Webcam High Definition Audio Driver Package - KB888111 HijackThis 1.99.1 Hotfix for Windows XP (KB909394) IsoBuster 1.9 iTunes iTunes J2SE Runtime Environment 5.0 Update 10 J2SE Runtime Environment 5.0 Update 2 J2SE Runtime Environment 5.0 Update 6 J2SE Runtime Environment 5.0 Update 9 jv16 PowerTools 2006 K-Lite Codec Pack 2.80 Full Kaspersky Online Scanner La Marmite du Chef - Recettes La Marmite du Chef 5.0.37 Lecteur Windows Media 10 Macromedia Dreamweaver MX Macromedia Dreamweaver MX 2004 Macromedia Extension Manager Macromedia Flash MX Macromedia Flash MX 2004 Macromedia Shockwave Player Macromedia Shockwave Player Matériaux architecturaux 3ds max 7 Matériaux et textures 3ds max 7 suppl. Mental Motions Pencil Box Microsoft .NET Compact Framework 1.0 SP2 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 French Language Pack Microsoft .NET Framework 1.1 Hotfix (KB886903) Microsoft ActiveSync 4.0 Microsoft Chess for Pocket PC (Remove Only) Microsoft Flight Simulator 2004 Un siècle d'aviation Microsoft Office 2000 CD-ROM 2 Microsoft Office 2000 Professional Microsoft Office Standard Edition 2003 Microsoft Works Mirage IVA (FS 2004) LABORIE Roland Mozilla Firefox (1.5.0.9) Mp3tag v2.36a Nero 7 Demo Packard Bell - Skype 2.5 Panda ActiveScan Panneau de contrôle ATI PlumberPete Free PowerDVD Quest3D Viewers 3.0e QuickTime Race Driver 2 Race Driver 2 Racing Days for Pocket PC RD2 World Championship Six-Pack V2.0 Realtek High Definition Audio Driver RollerCoaster Tycoon® 3 SecondLife (remove only) SkypeMate SlovoEd 3.x for PocketPC Sonic MyDVD Sonic RecordNow! Steinberg WaveLab v4.0d Stellarium 0.8.2 Tomb Raider: Legend 1.0 TrackMania Nations ESWC 0.1.7.5 Visual Pinball WebFldrs XP WinAce Archiver 2.0 Windows Installer 3.1 (KB893803) Windows Media Format Runtime Windows Media Player 10 Hotfix - KB894476 WinZip WireFusion 4 Enterprise (Shared Components) Yahoo! Toolbar ZIOGolf 2 for Pocket PC Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\Program Files 09/02/2007 00:39 <REP> . 09/02/2007 00:39 <REP> .. 10/04/2006 18:17 <REP> 7-Zip 01/01/2007 22:10 <REP> Act-3D 01/01/2007 17:39 <REP> Adobe 02/03/2006 14:27 <REP> Ahead 16/04/2006 09:47 <REP> AIM Productions 13/04/2006 09:55 <REP> Alcohol Soft 22/11/2006 22:54 <REP> Apple Software Update 21/01/2007 13:11 <REP> Atari 01/02/2007 23:58 <REP> Audacity 04/11/2006 18:41 <REP> backburner 2 31/03/2006 23:32 <REP> Common Files 30/12/2005 08:45 <REP> ComPlus Applications 08/01/2007 22:29 <REP> CyberLink 23/05/2006 20:38 <REP> EasyPHP1-8 18/02/2006 23:10 <REP> El Juky 01/07/2006 15:50 <REP> Elaborate Bytes 29/06/2006 21:32 <REP> Electronic Arts 20/01/2007 22:10 <REP> eMule 21/01/2007 13:14 <REP> Fichiers communs 12/04/2006 23:35 <REP> FlightGear 13/01/2007 00:11 <REP> FMP144 30/12/2005 08:45 <REP> GMixon 04/08/2006 11:15 <REP> Google 08/02/2007 21:17 <REP> Grisoft 15/01/2007 19:38 <REP> Illustration-World 01/01/2007 22:10 <REP> Internet Explorer 30/11/2006 19:02 <REP> iPod 30/11/2006 19:02 <REP> iPod(2) 08/01/2007 22:30 <REP> iTunes 20/01/2007 15:03 <REP> Java 26/05/2006 13:52 <REP> jv16 PowerTools 2006 22/11/2006 00:39 <REP> K-Lite Codec Pack 11/11/2006 15:30 <REP> Macromedia 23/11/2006 01:28 <REP> Messenger 08/04/2006 23:30 <REP> Microsoft .NET Compact Framework 1.0 SP2 07/01/2007 13:36 <REP> Microsoft ActiveSync 12/04/2006 11:25 <REP> microsoft frontpage 09/01/2006 18:44 <REP> Microsoft Office 30/12/2005 08:48 <REP> Microsoft Works 30/12/2005 08:45 <REP> Microsoft.NET 30/12/2005 08:48 <REP> Movie Maker 10/02/2007 02:21 <REP> Mozilla Firefox 30/12/2005 08:45 <REP> MSN 30/12/2005 08:45 <REP> MSN Gaming Zone 01/03/2006 21:15 <REP> Nero 30/12/2005 08:48 <REP> NetMeeting 30/12/2005 08:45 <REP> Norman 30/12/2005 08:48 <REP> Online Services 30/12/2005 08:48 <REP> Outlook Express 31/03/2006 23:37 <REP> Paragon Software 22/11/2006 22:56 <REP> QuickTime 30/12/2005 08:45 <REP> Real 30/12/2005 08:45 <REP> Realtek 17/01/2007 23:50 <REP> SecondLife 30/12/2005 08:48 <REP> Services en ligne 01/01/2006 22:04 <REP> SkypeMate 09/07/2006 14:18 <REP> SlySoft 16/04/2006 09:09 <REP> Smart Projects 09/01/2006 18:44 <REP> Snapshot Viewer 30/12/2005 08:45 <REP> Sonic 13/12/2006 23:06 <REP> SRV 21/12/2006 18:22 <REP> Stellarium 23/08/2006 23:10 <REP> SupraASCIIArt 16/06/2006 21:34 <REP> Surveyor Corporation 10/02/2007 10:37 <REP> system 03/07/2006 11:35 <REP> Trend Micro 12/06/2006 16:30 <REP> Trojan Remover 30/12/2005 08:45 <REP> Ulead Systems 14/01/2007 15:48 <REP> vso 06/01/2007 01:23 <REP> VSP 30/12/2005 14:37 <REP> WinAce 30/12/2005 08:45 <REP> Windows Media Components 07/07/2006 23:41 <REP> Windows Media Player 30/12/2005 08:49 <REP> Windows NT 19/12/2006 18:55 <REP> WinRAR 07/07/2006 23:41 <REP> WinZip 30/12/2005 08:45 <REP> xerox 01/03/2006 20:27 <REP> Yahoo! 0 fichier(s) 0 octets 81 Rép(s) 18.106.626.048 octets libres Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\Program Files\fichiers communs 21/01/2007 13:14 <REP> . 21/01/2007 13:14 <REP> .. 19/12/2006 20:58 <REP> Adobe 19/12/2006 23:22 <REP> Adobe Systems Shared 01/03/2006 21:17 <REP> Ahead 04/11/2006 18:41 <REP> Autodesk Shared 30/12/2005 08:47 <REP> DESIGNER 31/01/2006 21:04 <REP> element5 Shared 30/12/2005 02:53 <REP> InstallShield 30/12/2005 08:45 <REP> Java 11/11/2006 15:30 <REP> Macromedia 12/02/2006 14:15 <REP> Macromedia Shared 12/04/2006 11:54 <REP> Microsoft Shared 30/12/2005 08:45 <REP> MSSoap 30/12/2005 08:45 <REP> ODBC 21/01/2007 13:14 <REP> PocketSoft 30/12/2005 08:45 <REP> Real 30/12/2005 08:47 <REP> Services 30/12/2005 08:47 <REP> Sonic Shared 30/12/2005 08:45 <REP> SpeechEngines 30/12/2005 08:47 <REP> SureThing Shared 10/06/2006 14:55 <REP> Symantec Shared 09/01/2006 18:44 <REP> System 30/12/2005 08:45 <REP> Ulead Systems 12/01/2006 19:12 <REP> Vbox 30/12/2005 08:45 <REP> xing shared 0 fichier(s) 0 octets 26 Rép(s) 18.106.626.048 octets libres Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders 28/02/2006 00:58 <REP> . 28/02/2006 00:58 <REP> .. 30/12/2005 08:47 <REP> 1033 30/12/2005 08:47 <REP> 1036 11/07/2003 09:15 1.292.872 MSONSEXT.DLL 15/07/2003 05:52 35.896 MSOSV.DLL 03/06/1999 11:09 122.937 MSOWS409.DLL 07/03/2001 06:00 127.033 MSOWS40c.DLL 11/07/2003 01:25 80.448 PKMWS.DLL 18/03/1999 05:37 593.977 RAGENT.DLL 6 fichier(s) 2.253.163 octets 4 Rép(s) 18.106.626.048 octets libres Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\Program Files\common files 31/03/2006 23:32 <REP> . 31/03/2006 23:32 <REP> .. 31/03/2006 23:32 <REP> Microsoft Shared 0 fichier(s) 0 octets 3 Rép(s) 18.106.626.048 octets libres Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est E00C-23EE Répertoire de C:\ 11/11/2001 00:00 68.096 diff.exe 27/08/2006 14:10 103.424 grep.exe 2 fichier(s) 171.520 octets 0 Rép(s) 18.106.626.048 octets libres et rapport hijack Logfile of HijackThis v1.99.1 Scan saved at 0:13:41, on 11/02/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\spoolsv.exe D:\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe D:\Alwil Software\Avast4\ashServ.exe C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\Program Files\QuickTime\qttask.exe C:\Apps\Powercinema\PCMService.exe C:\Program Files\iTunes\iTunesHelper.exe D:\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\WINDOWS\ALCWZRD.EXE C:\apps\ABoard\ABoard.exe c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\apps\ABoard\AOSD.exe c:\APPS\HIDSERVICE\HIDSERVICE.exe C:\PROGRA~1\MICROS~4\wcescomm.exe C:\WINDOWS\system32\ctfmon.exe C:\PROGRA~1\MICROS~4\rapimgr.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\CyberLink\Shared Files\RichVideo.exe C:\Program Files\WinZip\WZQKPICK.EXE C:\WINDOWS\system32\tcpsvcs.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe c:\APPS\Powercinema\Kernel\TV\CLSched.exe C:\Program Files\iPod\bin\iPodService.exe D:\Alwil Software\Avast4\ashMaiSv.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\explorer.exe C:\Program Files\Internet Explorer\iexplore.exe D:\Documents and Settings\Daniel\Mes documents\secu\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,userinit.exe O4 - HKLM\..\Run: [ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe" O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [iehelper] AppMasterCenter.exe O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe O4 - HKLM\..\Run: [avast!] D:\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MICROS~4\wcescomm.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: MS_update_0612_KB74062.exe O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://71.254.156.21/activex/AxisCamControl.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{3D7E5050-9BD1-4AD3-BC38-A96D11F34AA1}: NameServer = 195.238.2.21,195.238.2.22 O17 - HKLM\System\CS1\Services\Tcpip\..\{3D7E5050-9BD1-4AD3-BC38-A96D11F34AA1}: NameServer = 195.238.2.21,195.238.2.22 O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - D:\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe O23 - Service: avast! Antivirus - Unknown owner - D:\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - D:\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - D:\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: msieupdater (Microsoft IE Updater) - Unknown owner - C:\WINDOWS\system32\update00822631.exe (file missing) O23 - Service: ieupdater2 (Microsoft IE Updater2) - Unknown owner - D:\Documents and Settings\Daniel\~tmp0374.exe (file missing) O23 - Service: Microsoft security update service (msupdate) - Unknown owner - c:\windows\system32\msvcrtd.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe bon ben j'espère qu'on va reussir à la virer cette vermine !!!
  16. oOGegOo
    SAlut Désolé pour le retard mais j'aitais un peu débordé aujourd'hui Rapport killbox Pocket Killbox version 2.0.0.648 Running on Windows XP as Daniel(Administrator) was started @ vendredi, février 09, 2007, 5:18 PM # 1 [Delete on Reboot] Path = C:\WINDOWS\system32\lgjr.dll I Rebooted @ 5:20:13 PM Killbox Closed(Exit) @ 5:20:15 PM __________________________________________________ Pocket Killbox version 2.0.0.648 Running on Windows XP as Daniel(Administrator) was started @ vendredi, février 09, 2007, 5:23 PM raport kapersly Friday, February 09, 2007 11:42:11 PM Système d'exploitation : Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky On-line Scanner version : 5.0.83.0 Dernière mise à jour de la base antivirus Kaspersky : 9/02/2007 Enregistrements dans la base antivirus Kaspersky : 251523 Paramètres d'analyse Analyser avec la base antivirus suivante standard Analyser les archives vrai Analyser les bases de messagerie vrai Cible de l'analyse Poste de travail C:\ D:\ E:\ F:\ Statistiques de l'analyse Total d'objets analysés 250268 Nombre de virus trouvés 23 Nombre d'objets infectés 75 / 0 Nombre d'objets suspects 0 Durée de l'analyse 01:51:49 Nom de l'objet infecté Nom du virus Dernière action C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\A0000004.sys Infecté : Trojan.Win32.Agent.ady ignoré C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\A0000116.sys Infecté : Trojan.Win32.Agent.ady ignoré C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\A0003171.EXE Infecté : Trojan-Spy.Win32.Small.gm ignoré C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\A0003172.sys Infecté : Trojan-Spy.Win32.Small.gm ignoré C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\A0003173.dll Infecté : Email-Worm.Win32.Locksky.aw ignoré C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\A0003174.dll Infecté : Trojan-Spy.Win32.BZub.hx ignoré C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\change.log L'objet est verrouillé ignoré C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré C:\WINDOWS\SchedLgU.Txt L'objet est verrouillé ignoré C:\WINDOWS\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré C:\WINDOWS\Sti_Trace.log L'objet est verrouillé ignoré C:\WINDOWS\system\tlctw32.dll Infecté : Trojan-Spy.Win32.Agent.ir ignoré C:\WINDOWS\system32\CatRoot2\edb.log L'objet est verrouillé ignoré C:\WINDOWS\system32\CatRoot2\tmp.edb L'objet est verrouillé ignoré C:\WINDOWS\system32\config\Antivirus.Evt L'objet est verrouillé ignoré C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré C:\WINDOWS\system32\config\DEFAULT L'objet est verrouillé ignoré C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SOFTWARE L'objet est verrouillé ignoré C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SYSTEM L'objet est verrouillé ignoré C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré C:\WINDOWS\system32\drivers\etc\hosts Infecté : Trojan.Win32.Qhost.it ignoré C:\WINDOWS\system32\drivers\sptd.sys L'objet est verrouillé ignoré C:\WINDOWS\system32\drivers\sptd6925.sys L'objet est verrouillé ignoré C:\WINDOWS\system32\msvcrtd.exe L'objet est verrouillé ignoré C:\WINDOWS\system32\reg.sys Infecté : Trojan.Win32.Agent.ady ignoré C:\WINDOWS\system32\svgxiaaa.exe/EXE-file Infecté : Trojan-Spy.Win32.Agent.ir ignoré C:\WINDOWS\system32\svgxiaaa.exe Embedded EXE: infecté - 1 ignoré C:\WINDOWS\system32\svgxiaaa.exe UPX: infecté - 1 ignoré C:\WINDOWS\system32\svgxiaaa.exe PE_Patch.UPX: infecté - 1 ignoré C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP L'objet est verrouillé ignoré C:\WINDOWS\Temp\Perflib_Perfdata_768.dat L'objet est verrouillé ignoré C:\WINDOWS\wiadebug.log L'objet est verrouillé ignoré C:\WINDOWS\wiaservc.log L'objet est verrouillé ignoré C:\WINDOWS\WindowsUpdate.log L'objet est verrouillé ignoré D:\Alwil Software\Avast4\DATA\aswResp.dat L'objet est verrouillé ignoré D:\Alwil Software\Avast4\DATA\Avast4.db L'objet est verrouillé ignoré D:\Alwil Software\Avast4\DATA\log\nshield.log L'objet est verrouillé ignoré D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\MS_update_0612_KB74062.exe Infecté : Trojan-Downloader.Win32.Murlo.ek ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\1663800[1].bac_a01044 Infecté : Trojan-Downloader.Win32.Agent.ber ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\A0068191.exe.bac_a01044 Infecté : Trojan-Downloader.Win32.Small.ecm ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\A0078211.exe.bac_a01044 Infecté : Trojan-Downloader.Win32.Obfuscated.bh ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\A0078213.exe.bac_a01044 Infecté : Trojan-Clicker.Win32.Agent.is ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\A0078214.exe.bac_a01044 Infecté : Trojan-Clicker.Win32.Agent.is ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\A0078215.exe.bac_a01044 Infecté : Trojan-Proxy.Win32.Lager.dp ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\A0078217.exe.bac_a01044 Infecté : Trojan-Proxy.Win32.Lager.dp ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\A0078218.exe.bac_a01044 Infecté : Trojan-Proxy.Win32.Lager.dp ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\A0078219.exe.bac_a01044 Infecté : Trojan-Proxy.Win32.Lager.dp ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\A0078220.exe.bac_a01044 Infecté : Trojan-Proxy.Win32.Lager.dp ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\A0078222.sys.bac_a01044 Infecté : Email-Worm.Win32.Zhelatin.a ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\A0078224.dll.bac_a01044 Infecté : Trojan-Proxy.Win32.Dlena.bi ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\A0078226.exe.bac_a01044 Infecté : Trojan-Downloader.Win32.Femad.bf ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\A0080987.exe.bac_a01044 Infecté : Trojan.Win32.Crypt.g ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\A0081987.exe.bac_a01044 Infecté : Trojan.Win32.Crypt.g ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\A0082987.exe.bac_a01044 Infecté : Trojan.Win32.Crypt.g ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\mediaobjsetup.123.exe.bac_a01044/stream/data0006 Infecté : Trojan-Downloader.Win32.Zlob.bip ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\mediaobjsetup.123.exe.bac_a01044/stream Infecté : Trojan-Downloader.Win32.Zlob.bip ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\mediaobjsetup.123.exe.bac_a01044 NSIS: infecté - 2 ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\mediaobjsetup.123.exe.bac_a01044 UPX: infecté - 2 ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\mediaobjsetup.123.exe.bac_a01044 PE_Patch.UPX: infecté - 2 ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\mediaobjsetup.123.exe.bac_a01044 CryptFF.b: infecté - 2 ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\svchost.bak.bac_a01044 Infecté : Trojan.Win32.Crypt.g ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\update77119758.exe.bac_a01044 Infecté : Trojan-Downloader.Win32.Agent.ber ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\vcodec.exe.bac_a01044/stream/data0006 Infecté : Trojan-Downloader.Win32.Zlob.bio ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\vcodec.exe.bac_a01044/stream Infecté : Trojan-Downloader.Win32.Zlob.bio ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\vcodec.exe.bac_a01044 NSIS: infecté - 2 ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\vcodec.exe.bac_a01044 UPX: infecté - 2 ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\vcodec.exe.bac_a01044 PE_Patch.UPX: infecté - 2 ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\vcodec.exe.bac_a01044 CryptFF.b: infecté - 2 ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\video[1].exe.bac_a01044 Infecté : Trojan.Win32.Crypt.g ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\WinZip 9[1].0 SR-1 Build 6224 .rar.bac_a01044/install-setup.exe Infecté : Trojan-Downloader.Win32.Adload.bo ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\WinZip 9[1].0 SR-1 Build 6224 .rar.bac_a01044 RAR: infecté - 1 ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\WinZip 9[1].0 SR-1 Build 6224 .rar.bac_a01044 CryptFF.b: infecté - 1 ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\WinZip 9[1].0 SR-1 Build 6224 .rar.bac_a01704/install-setup.exe Infecté : Trojan-Downloader.Win32.Adload.bo ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\WinZip 9[1].0 SR-1 Build 6224 .rar.bac_a01704 RAR: infecté - 1 ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\WinZip 9[1].0 SR-1 Build 6224 .rar.bac_a01704 CryptFF.b: infecté - 1 ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\WinZip 9[1].0.6224 SR1 .rar.bac_a01044/install-setup.exe Infecté : Trojan-Downloader.Win32.Adload.bo ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\WinZip 9[1].0.6224 SR1 .rar.bac_a01044 RAR: infecté - 1 ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\WinZip 9[1].0.6224 SR1 .rar.bac_a01044 CryptFF.b: infecté - 1 ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\WinZip 9[1].0.6224 SR1 .rar.bac_a01704/install-setup.exe Infecté : Trojan-Downloader.Win32.Adload.bo ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\WinZip 9[1].0.6224 SR1 .rar.bac_a01704 RAR: infecté - 1 ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\WinZip 9[1].0.6224 SR1 .rar.bac_a01704 CryptFF.b: infecté - 1 ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\y3w5CEB8z5.rar.bac_a01044/crack.exe Infecté : Trojan-Downloader.Win32.Small.ddp ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\y3w5CEB8z5.rar.bac_a01044 RAR: infecté - 1 ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\y3w5CEB8z5.rar.bac_a01044 CryptFF.b: infecté - 1 ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\y3w5CEB8z5.rar.bac_a01704/crack.exe Infecté : Trojan-Downloader.Win32.Small.ddp ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\y3w5CEB8z5.rar.bac_a01704 RAR: infecté - 1 ignoré D:\Documents and Settings\Daniel\.housecall6.6\Quarantine\y3w5CEB8z5.rar.bac_a01704 CryptFF.b: infecté - 1 ignoré D:\Documents and Settings\Daniel\Application Data\$_hpcst$.hpc L'objet est verrouillé ignoré D:\Documents and Settings\Daniel\Cookies\index.dat L'objet est verrouillé ignoré D:\Documents and Settings\Daniel\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré D:\Documents and Settings\Daniel\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré D:\Documents and Settings\Daniel\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré D:\Documents and Settings\Daniel\Local Settings\Temp\WCESLog.log L'objet est verrouillé ignoré D:\Documents and Settings\Daniel\Local Settings\Temp\~DF8E90.tmp L'objet est verrouillé ignoré D:\Documents and Settings\Daniel\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré D:\Documents and Settings\Daniel\Mes documents\secu\backups\backup-20070205-193648-294.dll Infecté : Trojan-Spy.Win32.Agent.ir ignoré D:\Documents and Settings\Daniel\ntuser.dat L'objet est verrouillé ignoré D:\Documents and Settings\Daniel\ntuser.dat.LOG L'objet est verrouillé ignoré D:\Documents and Settings\LocalService.AUTORITE NT.016\Cookies\index.dat L'objet est verrouillé ignoré D:\Documents and Settings\LocalService.AUTORITE NT.016\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré D:\Documents and Settings\LocalService.AUTORITE NT.016\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré D:\Documents and Settings\LocalService.AUTORITE NT.016\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré D:\Documents and Settings\LocalService.AUTORITE NT.016\Local Settings\Temporary Internet Files\Content.IE5\BHUUHGDN\ver2501[1] Infecté : Trojan-Proxy.Win32.Xorpix.ar ignoré D:\Documents and Settings\LocalService.AUTORITE NT.016\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré D:\Documents and Settings\LocalService.AUTORITE NT.016\NTUSER.DAT L'objet est verrouillé ignoré D:\Documents and Settings\LocalService.AUTORITE NT.016\ntuser.dat.LOG L'objet est verrouillé ignoré D:\Documents and Settings\NetworkService.AUTORITE NT.018\Cookies\index.dat L'objet est verrouillé ignoré D:\Documents and Settings\NetworkService.AUTORITE NT.018\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré D:\Documents and Settings\NetworkService.AUTORITE NT.018\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré D:\Documents and Settings\NetworkService.AUTORITE NT.018\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré D:\Documents and Settings\NetworkService.AUTORITE NT.018\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré D:\Documents and Settings\NetworkService.AUTORITE NT.018\NTUSER.DAT L'objet est verrouillé ignoré D:\Documents and Settings\NetworkService.AUTORITE NT.018\ntuser.dat.LOG L'objet est verrouillé ignoré D:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré D:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\A0003175.exe/data0004 Infecté : Trojan-Downloader.Win32.Small.ctp ignoré D:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\A0003175.exe/data0005 Infecté : Trojan-Downloader.Win32.Small.ajc ignoré D:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\A0003175.exe NSIS: infecté - 2 ignoré D:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\A0003176.exe/data0004 Infecté : Trojan-Downloader.Win32.Small.ctp ignoré D:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\A0003176.exe/data0005 Infecté : Trojan-Downloader.Win32.Small.ajc ignoré D:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\A0003176.exe NSIS: infecté - 2 ignoré D:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\A0003177.exe/data0004 Infecté : Trojan-Downloader.Win32.Small.ctp ignoré D:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\A0003177.exe/data0005 Infecté : Trojan-Downloader.Win32.Small.ajc ignoré D:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\A0003177.exe NSIS: infecté - 2 ignoré D:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\A0003192.dll Infecté : Trojan-Proxy.Win32.Xorpix.ar ignoré Analyse terminée.
  17. oOGegOo
    voilà SmitFraudFix v2.117 Rapport fait à 23:41:04,87, jeu. 08/02/2007 Executé à partir de D:\Documents and Settings\Daniel\Mes documents\secu\SmitfraudFix\SmitfraudFix OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT Fix executé en mode normal »»»»»»»»»»»»»»»»»»»»»»»» D:\ »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32 »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles »»»»»»»»»»»»»»»»»»»»»»»» D:\Documents and Settings\Daniel »»»»»»»»»»»»»»»»»»»»»»»» D:\Documents and Settings\Daniel\Application Data »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer »»»»»»»»»»»»»»»»»»»»»»»» D:\DOCUME~1\Daniel\Favoris »»»»»»»»»»»»»»»»»»»»»»»» Bureau »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components] "Source"="About:Home" "SubscribedURL"="About:Home" "FriendlyName"="Ma page d'accueil" »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] "{2C1CD3D7-86AC-4068-93BC-A02304B60787}"="DCOM Server 60787" [HKEY_CLASSES_ROOT\CLSID\{2C1CD3D7-86AC-4068-93BC-A02304B60787}\InProcServer32] @="C:\WINDOWS\system32\lgjr.dll" [HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{2C1CD3D7-86AC-4068-93BC-A02304B60787}\InProcServer32] @="C:\WINDOWS\system32\lgjr.dll" »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="" »»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32 »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll »»»»»»»»»»»»»»»»»»»»»»»» Fin
  18. oOGegOo
    Salut et merci de ton aide bon j'ai effectué la procedure jusqu'à redemarre en mode sans echec !!! pas moyen mon ordi se bloque après avoir chargé le bureau en mode sans echec et j' ai mo sablier qui tourne et voilà !!!! bon alors j'ai redemarré en normal et j'ai coupé les process douteux (~tmp0374.exe et update00822631.exe) pour pouvoir les effacer ensuite j'ai continué la manip en mode normal pas moyen de scanner en ligne avec IE car il ne se connecte pas (firefox se connecte bien et outlook également !!!???) j'ai verifié les parametres de connexion de IE et tout à l'air bon ???? sinon voilà le log de clean Script execute en mode normal Rapport clean par Malekal_morte - http://www.malekal.com Option 2, executee le jeu. 08/02/2007 a 22:05:11,64 Microsoft Windows XP [version 5.1.2600] *** Suppression de fichiers sur C: tentative de suppression de C:\secure32.html tentative de suppression de C:\uniq *** Suppression des fichiers dans C:\WINDOWS\ *** Suppression des fichiers dans C:\WINDOWS\system32 tentative de suppression de C:\WINDOWS\system32\kr_done1 tentative de suppression de C:\WINDOWS\system32\vx.tll tentative de suppression de "D:\Documents and Settings\Daniel\Application Data\ezpinst.exe" tentative de suppression de "D:\Documents and Settings\All Users\Documents\Settings\partnership.dll" Impossible de supprimer "D:\Documents and Settings\All Users\Documents\Settings\partnership.dll" tentative de suppression de "C:\Program Files\system\" tentative de suppression de "C:\Program Files\VideoBox\" - ATTENTION il est recommandé d'utiliser SmitFraudfix! tentative de suppression de "C:\Program Files\YourSiteBar\" *** Suppression des clefs du registre effectuee.. *** Fin du rapport ! voici le log de avgas --------------------------------------------------------- AVG Anti-Spyware - Rapport d'analyse --------------------------------------------------------- + Créé à: 23:15:24 8/02/2007 + Résultat de l'analyse: D:\Documents and Settings\Daniel\Mes documents\emule\partage2\Nouveau dossier\Virtual Titan Poker. Full CD.zip/SetupPoker.exe -> Adware.Casino : Nettoyé et sauvegardé (mise en quarantaine). C:\Program Files\Video ActiveX Object -> Adware.Generic : Nettoyé et sauvegardé (mise en quarantaine). HKU\.DEFAULT\Software\Internet Security -> Adware.Generic : Nettoyé et sauvegardé (mise en quarantaine). HKU\S-1-5-18\Software\Internet Security -> Adware.Generic : Nettoyé et sauvegardé (mise en quarantaine). D:\Documents and Settings\LocalService.AUTORITE NT.016\Local Settings\Temporary Internet Files\Content.IE5\BHUUHGDN\loader[1] -> Backdoor.Small.nr : Nettoyé et sauvegardé (mise en quarantaine). D:\Documents and Settings\LocalService.AUTORITE NT.016\Local Settings\Temporary Internet Files\Content.IE5\4TUZSXQ3\loader[1] -> Downloader.Agent.bbr : Nettoyé et sauvegardé (mise en quarantaine). D:\Documents and Settings\LocalService.AUTORITE NT.016\Local Settings\Temporary Internet Files\Content.IE5\BHUUHGDN\gera[1] -> Downloader.Agent.bbr : Nettoyé et sauvegardé (mise en quarantaine). D:\Documents and Settings\LocalService.AUTORITE NT.006\Local Settings\Temp\stdrun1.exe -> Downloader.Small.ctp : Nettoyé et sauvegardé (mise en quarantaine). D:\Documents and Settings\NetworkService.AUTORITE NT.007\Local Settings\Temp\stdrun1.exe -> Downloader.Small.ctp : Nettoyé et sauvegardé (mise en quarantaine). D:\Documents and Settings\NetworkService.AUTORITE NT.007\Local Settings\Temp\stdrun2.exe -> Downloader.Small.ctp : Nettoyé et sauvegardé (mise en quarantaine). D:\Documents and Settings\LocalService.AUTORITE NT.016\Local Settings\Temporary Internet Files\Content.IE5\AGLLL59M\socks[1] -> Downloader.Small.cul : Nettoyé et sauvegardé (mise en quarantaine). D:\Documents and Settings\LocalService.AUTORITE NT.016\Local Settings\Temporary Internet Files\Content.IE5\4TUZSXQ3\new2[1] -> Downloader.Small.dwc : Nettoyé et sauvegardé (mise en quarantaine). C:\WINDOWS\system32\ipv6mote.dll -> Logger.BZub.hx : Nettoyé et sauvegardé (mise en quarantaine). D:\Documents and Settings\Daniel\Mes documents\secu\backups\backup-20070205-193648-534.dll -> Logger.BZub.hx : Nettoyé et sauvegardé (mise en quarantaine). C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\A0000118.dll -> Logger.Small.gm : Nettoyé et sauvegardé (mise en quarantaine). C:\WINDOWS\TASKMAN.EXE -> Logger.Small.gm : Nettoyé et sauvegardé (mise en quarantaine). C:\WINDOWS\system32\obdwk.sys -> Logger.Small.gm : Nettoyé et sauvegardé (mise en quarantaine). D:\Documents and Settings\LocalService.AUTORITE NT.016\Local Settings\Temporary Internet Files\Content.IE5PIVWTM3\TASKMAN[1].EXE -> Logger.Small.gm : Nettoyé et sauvegardé (mise en quarantaine). D:\Documents and Settings\LocalService.AUTORITE NT.016\Local Settings\Temporary Internet Files\Content.IE5\BHUUHGDN\ver2501[2] -> Proxy.Xorpix.ar : Nettoyé et sauvegardé (mise en quarantaine). [708] D:\Documents and Settings\All Users\Documents\Settings\partnership.dll -> Proxy.Xorpix.aw : Nettoyé et sauvegardé (mise en quarantaine). :mozilla.7:D:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\zft0v3jx.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé. :mozilla.8:D:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\zft0v3jx.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé. :mozilla.19:D:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\zft0v3jx.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé. D:\Documents and Settings\Daniel\Cookies\daniel@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé. C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\A0000085.sys -> Trojan.Agent.ady : Nettoyé et sauvegardé (mise en quarantaine). C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\A0000130.sys -> Trojan.Agent.ady : Nettoyé et sauvegardé (mise en quarantaine). C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP1\A0002142.dll -> Trojan.Agent.ady : Nettoyé et sauvegardé (mise en quarantaine). D:\Documents and Settings\LocalService.AUTORITE NT.016\Local Settings\Temporary Internet Files\Content.IE5PIVWTM3\br1_v117_241[2] -> Trojan.Crypt.g : Nettoyé et sauvegardé (mise en quarantaine). D:\Documents and Settings\LocalService.AUTORITE NT.016\Local Settings\Temporary Internet Files\Content.IE5\BHUUHGDN\install_cong1[1] -> Trojan.Crypt.g : Nettoyé et sauvegardé (mise en quarantaine). C:\Program Files\thriXXX\3D SexVilla\Binaries\3DSexVilla-017-001-start.exe -> Trojan.QQPass.ly : Nettoyé et sauvegardé (mise en quarantaine). C:\Program Files\thriXXX\3D SexVilla\Binaries\_3DSexVilla-017-001-start.exe -> Trojan.QQPass.ly : Nettoyé et sauvegardé (mise en quarantaine). C:\Program Files\thriXXX\HentaII 3D\Binaries\HentaII3D-017.004-start.exe -> Trojan.QQPass.ly : Nettoyé et sauvegardé (mise en quarantaine). C:\Program Files\thriXXX\HentaII 3D\Binaries\_HentaII3D-017.004-start.exe -> Trojan.QQPass.ly : Nettoyé et sauvegardé (mise en quarantaine). D:\Documents and Settings\Daniel\Mes documents\emule\partage2\Nouveau dossier\3dSV\3DSexVilla 2.017.001\3DSexVilla-017-001-AMD-hotfix.zip/3DSexVilla-017-001-start.exe -> Trojan.QQPass.ly : Nettoyé et sauvegardé (mise en quarantaine). D:\Documents and Settings\Daniel\Mes documents\emule\partage2\Nouveau dossier\hentai\Hentai II 3D 2.017.004\HentaII3D-017-004-AMD-hotfix.zip/HentaII3D-017.004-start.exe -> Trojan.QQPass.ly : Nettoyé et sauvegardé (mise en quarantaine). C:\WINDOWS\system32\1024 -> Trojan.Small : Nettoyé et sauvegardé (mise en quarantaine). C:\WINDOWS\system32\instcat.dll -> Worm.Locksky.aw : Nettoyé et sauvegardé (mise en quarantaine). Fin du rapport et celui de hijack Logfile of HijackThis v1.99.1 Scan saved at 23:28:14, on 8/02/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE D:\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe D:\Alwil Software\Avast4\ashServ.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe c:\APPS\HIDSERVICE\HIDSERVICE.exe C:\Program Files\QuickTime\qttask.exe C:\Apps\Powercinema\PCMService.exe C:\Program Files\iTunes\iTunesHelper.exe D:\ALWILS~1\Avast4\ashDisp.exe C:\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\WINDOWS\ALCWZRD.EXE C:\apps\ABoard\ABoard.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\apps\ABoard\AOSD.exe C:\PROGRA~1\MICROS~4\wcescomm.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\CyberLink\Shared Files\RichVideo.exe C:\PROGRA~1\MICROS~4\rapimgr.exe C:\WINDOWS\system32\tcpsvcs.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\WinZip\WZQKPICK.EXE C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe c:\APPS\Powercinema\Kernel\TV\CLSched.exe C:\Program Files\iPod\bin\iPodService.exe D:\Alwil Software\Avast4\ashMaiSv.exe D:\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\System32\svchost.exe D:\Program Files\Adobe\Photoshop 7.0\Photoshop.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\NOTEPAD.EXE D:\Documents and Settings\Daniel\Mes documents\secu\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,userinit.exe O4 - HKLM\..\Run: [ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe" O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [iehelper] AppMasterCenter.exe O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe O4 - HKLM\..\Run: [avast!] D:\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MICROS~4\wcescomm.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: MS_update_0612_KB74062.exe O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://71.254.156.21/activex/AxisCamControl.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{3D7E5050-9BD1-4AD3-BC38-A96D11F34AA1}: NameServer = 195.238.2.21,195.238.2.22 O17 - HKLM\System\CS1\Services\Tcpip\..\{3D7E5050-9BD1-4AD3-BC38-A96D11F34AA1}: NameServer = 195.238.2.21,195.238.2.22 O20 - Winlogon Notify: partnershipreg - D:\Documents and Settings\All Users\Documents\Settings\partnership.dll O21 - SSODL: odb_set - {644A4940-8F0C-48B8-96F3-C1069A0EA10E} - odbcmr32.dll (file missing) O21 - SSODL: DCOM Server 60787 - {2C1CD3D7-86AC-4068-93BC-A02304B60787} - C:\WINDOWS\system32\lgjr.dll O21 - SSODL: qcgSMpT - {E00C23EF-4AA6-8945-1747-580EB99C14C9} - C:\WINDOWS\system32\lxzoo.dll (file missing) O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - D:\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe O23 - Service: avast! Antivirus - Unknown owner - D:\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - D:\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - D:\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: msieupdater (Microsoft IE Updater) - Unknown owner - C:\WINDOWS\system32\update00822631.exe (file missing) O23 - Service: ieupdater2 (Microsoft IE Updater2) - Unknown owner - D:\Documents and Settings\Daniel\~tmp0374.exe (file missing) O23 - Service: Microsoft security update service (msupdate) - Unknown owner - c:\windows\system32\msvcrtd.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe voilà merci encore !
  19. oOGegOo
    j'ai recupéré svchost depuis le cd de windows et j'ai retrouvé le son, le copier/coller et le glisser/deposer. voici le rapport hijack Logfile of HijackThis v1.99.1 Scan saved at 17:41:44, on 8/02/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE D:\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe D:\Alwil Software\Avast4\ashServ.exe C:\Apps\Powercinema\PCMService.exe C:\Program Files\iTunes\iTunesHelper.exe D:\ALWILS~1\Avast4\ashDisp.exe C:\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\WINDOWS\ALCWZRD.EXE C:\apps\ABoard\ABoard.exe C:\apps\ABoard\AOSD.exe C:\PROGRA~1\MICROS~4\wcescomm.exe C:\WINDOWS\system32\ctfmon.exe C:\PROGRA~1\MICROS~4\rapimgr.exe c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe C:\Program Files\WinZip\WZQKPICK.EXE c:\APPS\HIDSERVICE\HIDSERVICE.exe C:\WINDOWS\system32\update00822631.exe D:\Documents and Settings\Daniel\~tmp0374.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\CyberLink\Shared Files\RichVideo.exe C:\WINDOWS\system32\tcpsvcs.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe C:\WINDOWS\system32\wdfmgr.exe c:\APPS\Powercinema\Kernel\TV\CLSched.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\Program Files\iPod\bin\iPodService.exe D:\Alwil Software\Avast4\ashMaiSv.exe D:\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\System32\rundll32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe D:\Documents and Settings\Daniel\Mes documents\secu\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,userinit.exe O4 - HKLM\..\Run: [ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe" O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [iehelper] AppMasterCenter.exe O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe O4 - HKLM\..\Run: [avast!] D:\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe O4 - HKCU\..\Run: [utsgmon] avpmondll.exe O4 - HKCU\..\Run: [skypeMate] NULL O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MICROS~4\wcescomm.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: MS_update_0612_KB74062.exe O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://71.254.156.21/activex/AxisCamControl.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{3D7E5050-9BD1-4AD3-BC38-A96D11F34AA1}: NameServer = 195.238.2.21,195.238.2.22 O17 - HKLM\System\CS1\Services\Tcpip\..\{3D7E5050-9BD1-4AD3-BC38-A96D11F34AA1}: NameServer = 195.238.2.21,195.238.2.22 O20 - Winlogon Notify: partnershipreg - D:\Documents and Settings\All Users\Documents\Settings\partnership.dll O21 - SSODL: odb_set - {644A4940-8F0C-48B8-96F3-C1069A0EA10E} - odbcmr32.dll (file missing) O21 - SSODL: DCOM Server 60787 - {2C1CD3D7-86AC-4068-93BC-A02304B60787} - C:\WINDOWS\system32\lgjr.dll O21 - SSODL: qcgSMpT - {E00C23EF-4AA6-8945-1747-580EB99C14C9} - C:\WINDOWS\system32\lxzoo.dll (file missing) O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - D:\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe O23 - Service: avast! Antivirus - Unknown owner - D:\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - D:\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - D:\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: msieupdater (Microsoft IE Updater) - Unknown owner - C:\WINDOWS\system32\update00822631.exe O23 - Service: ieupdater2 (Microsoft IE Updater2) - Unknown owner - D:\Documents and Settings\Daniel\~tmp0374.exe O23 - Service: Microsoft security update service (msupdate) - Unknown owner - c:\windows\system32\msvcrtd.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe holala comme je suis content d'apercevoir une issue à cette galère !
  20. oOGegOo
    je viens de me rendre compte que la fonction de recherche ne fonctionne plus sur ma becane !!!! mais j'ai trouvé SVCHOST.EX_ dans i386 qu'est ce que je fais je le renomme en SVCHOST.EXE et je le place dans system32 ???? je ne sais pas faire de copier/coller ni de glisser/deposer !!!! merci de ton aide malekal !
  21. oOGegOo
    Bon ben voilà Je pense que scannow a terminé mais je n'ai eu aucun message durant la procédure !!! (même pas lorsqu'il a eu terminé mon log hijack Logfile of HijackThis v1.99.1 Scan saved at 22:45:12, on 7/02/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe D:\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe c:\APPS\HIDSERVICE\HIDSERVICE.exe C:\WINDOWS\system32\update00822631.exe C:\WINDOWS\system32\Ati2evxx.exe D:\Documents and Settings\Daniel\~tmp0374.exe C:\WINDOWS\Explorer.EXE c:\windows\system32\msvcrtd.exe C:\WINDOWS\system32\tcpsvcs.exe C:\WINDOWS\system32\slserv.exe C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\Program Files\QuickTime\qttask.exe C:\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\WINDOWS\ALCWZRD.EXE C:\apps\ABoard\ABoard.exe C:\apps\ABoard\AOSD.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\WinZip\WZQKPICK.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Mozilla Firefox\firefox.exe D:\Alwil Software\Avast4\ashSimpl.exe C:\WINDOWS\$NtUninstallKB9308632$\kavss.exe C:\WINDOWS\system32\NOTEPAD.EXE D:\Program Files\Azureus\Azureus.exe C:\Program Files\Java\jre1.5.0_10\bin\javaw.exe D:\Documents and Settings\Daniel\Mes documents\secu\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\ntos.exe, O4 - HKLM\..\Run: [ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe" O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [iehelper] AppMasterCenter.exe O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe O4 - HKLM\..\Run: [avast!] D:\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe O4 - HKCU\..\Run: [utsgmon] avpmondll.exe O4 - HKCU\..\Run: [skypeMate] NULL O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MICROS~4\wcescomm.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [uniblue Registry Booster] C:\Program Files\Uniblue\Registry Booster\RegistryBooster.exe /S O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: MS_update_0612_KB74062.exe O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://71.254.156.21/activex/AxisCamControl.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{3D7E5050-9BD1-4AD3-BC38-A96D11F34AA1}: NameServer = 195.238.2.21,195.238.2.22 O17 - HKLM\System\CS1\Services\Tcpip\..\{3D7E5050-9BD1-4AD3-BC38-A96D11F34AA1}: NameServer = 195.238.2.21,195.238.2.22 O20 - Winlogon Notify: partnershipreg - D:\Documents and Settings\All Users\Documents\Settings\partnership.dll O21 - SSODL: odb_set - {644A4940-8F0C-48B8-96F3-C1069A0EA10E} - odbcmr32.dll (file missing) O21 - SSODL: DCOM Server 60787 - {2C1CD3D7-86AC-4068-93BC-A02304B60787} - C:\WINDOWS\system32\lgjr.dll O21 - SSODL: qcgSMpT - {E00C23EF-4AA6-8945-1747-580EB99C14C9} - C:\WINDOWS\system32\lxzoo.dll (file missing) O23 - Service: Service d'application d'assistance IPv6 (6to4) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Gestion d'applications (AppMgmt) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - D:\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Audio Windows (AudioSrv) - Unknown owner - C:\WINDOWS\System32\svchost.exe (file missing) O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe O23 - Service: avast! Antivirus - Unknown owner - D:\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - D:\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - D:\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: Service de transfert intelligent en arrière-plan (BITS) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Explorateur d'ordinateur (Browser) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe O23 - Service: Services de cryptographie (CryptSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Lanceur de processus serveur DCOM (DcomLaunch) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Client DHCP (Dhcp) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Gestionnaire de disque logique (dmserver) - Unknown owner - C:\WINDOWS\System32\svchost.exe (file missing) O23 - Service: Client DNS (Dnscache) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Service de rapport d'erreurs (ERSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe (file missing) O23 - Service: Système d'événements de COM+ (EventSystem) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Compatibilité avec le Changement rapide d'utilisateur (FastUserSwitchingCompatibility) - Unknown owner - C:\WINDOWS\System32\svchost.exe (file missing) O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe O23 - Service: Aide et support (helpsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe (file missing) O23 - Service: HID Input Service (HidServ) - Unknown owner - C:\WINDOWS\System32\svchost.exe (file missing) O23 - Service: HTTP SSL (HTTPFilter) - Unknown owner - C:\WINDOWS\System32\svchost.exe (file missing) O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Écouteur RIP (Iprip) - Unknown owner - C:\WINDOWS\System32\svchost.exe (file missing) O23 - Service: Serveur (lanmanserver) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Station de travail (lanmanworkstation) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Assistance TCP/IP NetBIOS (LmHosts) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: msieupdater (Microsoft IE Updater) - Unknown owner - C:\WINDOWS\system32\update00822631.exe O23 - Service: ieupdater2 (Microsoft IE Updater2) - Unknown owner - D:\Documents and Settings\Daniel\~tmp0374.exe O23 - Service: Microsoft security update service (msupdate) - Unknown owner - c:\windows\system32\msvcrtd.exe O23 - Service: Connexions réseau (Netman) - Unknown owner - C:\WINDOWS\System32\svchost.exe (file missing) O23 - Service: NLA (Network Location Awareness) (Nla) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Stockage amovible (NtmsSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Authentification de groupe réseau homologue (p2pgasvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Gestionnaire d'identité réseau homologue (p2pimsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Réseau homologue (p2psvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Protocole de résolution de noms d'homologues (PNRPSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Gestionnaire de connexion automatique d'accès distant (RasAuto) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Gestionnaire de connexions d'accès distant (RasMan) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: Appel de procédure distante (RPC) (RpcSs) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Planificateur de tâches (Schedule) - Unknown owner - C:\WINDOWS\System32\svchost.exe (file missing) O23 - Service: Connexion secondaire (seclogon) - Unknown owner - C:\WINDOWS\System32\svchost.exe (file missing) O23 - Service: Notification d'événement système (SENS) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Pare-feu Windows / Partage de connexion Internet (SharedAccess) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Détection matériel noyau (ShellHWDetection) - Unknown owner - C:\WINDOWS\System32\svchost.exe (file missing) O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe O23 - Service: Service de restauration système (srservice) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Service de découvertes SSDP (SSDPSRV) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Acquisition d'image Windows (WIA) (stisvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Téléphonie (TapiSrv) - Unknown owner - C:\WINDOWS\System32\svchost.exe (file missing) O23 - Service: Services Terminal Server (TermService) - Unknown owner - C:\WINDOWS\System32\svchost.exe (file missing) O23 - Service: Thèmes (Themes) - Unknown owner - C:\WINDOWS\System32\svchost.exe (file missing) O23 - Service: Client de suivi de lien distribué (TrkWks) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe O23 - Service: Hôte de périphérique universel Plug-and-Play (upnphost) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Horloge Windows (W32Time) - Unknown owner - C:\WINDOWS\System32\svchost.exe (file missing) O23 - Service: WebClient - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Infrastructure de gestion Windows (winmgmt) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Service de numéro de série du lecteur multimédia portable (WmdmPmSN) - Unknown owner - C:\WINDOWS\System32\svchost.exe (file missing) O23 - Service: Centre de sécurité (wscsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe (file missing) O23 - Service: Mises à jour automatiques (wuauserv) - Unknown owner - C:\WINDOWS\system32\svchost.exe (file missing) O23 - Service: Configuration automatique sans fil (WZCSVC) - Unknown owner - C:\WINDOWS\System32\svchost.exe (file missing) O23 - Service: Service d'approvisionnement réseau (xmlprov) - Unknown owner - C:\WINDOWS\System32\svchost.exe (file missing) ...
  22. oOGegOo
    excuse moi pour les autres sugets mais c'est tellement la galère ce truc !!! bon !!! ben patientons pendant que "windows vérifie que tout les fichiers protégés sont intactes et dans leur version originale"
  23. oOGegOo
    j'avais oublié l'espace ... merci je te fais ça de suite !!!
  24. oOGegOo
    j'ai tout mis comme il faut sfc/scannow reponse windows ne trouve pas sfc/scannow etc etc ...
  25. oOGegOo
    windows ne trouve pas scannow !!!!
×
×
  • Créer...