Logfile of HijackThis v1.99.1
Scan saved at 11:29:20, on 12/05/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware Pro\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\themeGold55\CursorXP\CursorXP.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Documents and Settings\FRANK\Bureau\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\eoRezo\EoAdv\EoRezoBHO.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\RunServices: [Windows Tilehome] Tilehome.com
O4 - HKCU\..\Run: [CursorXP] C:\themeGold55\CursorXP\CursorXP.exe -s
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MessengerPlus2] "C:\Program Files\Messenger Plus! 2\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [VoipBuster] "C:\Program Files\VoipBuster.com\VoipBuster\VoipBuster.exe" -nosplash -minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-be\msntabres.dll.mui/229?78b5266d93c04fc8b2707d701aec66e2
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-be\msntabres.dll.mui/230?78b5266d93c04fc8b2707d701aec66e2
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O14 - IERESET.INF: START_PAGE_URL=http://www.google.fr
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - http://update.microsoft.com/windowsupdate/...b?1177861464328
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1177862212265
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware Pro\aawservice.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Windows Live OneCare (winss) - Unknown owner - C:\Program Files\Microsoft Windows OneCare Live\winss.exe (file missing)
DiagHelp version v1.07.4 - http://www.malekal.com
excute le 12/05/2007 à 11:36:42,04
Liste des fichiers modifies/crees dans les 24 dernieres heures...
C:\Documents and Settings\Administrateur\ntuser.dat
C:\Documents and Settings\Administrateur\ntuser.dat.LOG
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\Paint.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Windows Live Messenger.lnk
C:\Documents and Settings\barbara\ntuser.dat
C:\Documents and Settings\barbara\ntuser.dat.LOG
C:\Documents and Settings\carole\Cookies
C:\Documents and Settings\carole\Cookies\carole@fr-fr[1].txt
C:\Documents and Settings\carole\Cookies\carole@www.smartadserver[1].txt
C:\Documents and Settings\carole\Cookies\index.dat
C:\Documents and Settings\carole\Local Settings\desktop.ini
C:\Documents and Settings\carole\Local Settings\Temp
C:\Documents and Settings\carole\Mes documents\Mes dossiers de partage.lnk
C:\Documents and Settings\carole\ntuser.dat
C:\Documents and Settings\carole\ntuser.dat.LOG
C:\Documents and Settings\carole\ntuser.ini
C:\Documents and Settings\FRANK\Bureau
C:\Documents and Settings\FRANK\Bureau\DiagHelp
C:\Documents and Settings\FRANK\Bureau\DiagHelp.zip
C:\Documents and Settings\FRANK\Bureau\hijackthis.log
C:\Documents and Settings\FRANK\Bureau\hijackthis.zip
C:\Documents and Settings\FRANK\Contacts\barbaraflore@hotmail.fr27868C3-4C3A-40EC-9C10-DA619693792E.WindowsLiveContact
C:\Documents and Settings\FRANK\Contacts\barbaraflore@hotmail.fr\7E8C161C-EC64-4BC7-8AF0-DD85344898EF.WindowsLiveContact
C:\Documents and Settings\FRANK\Contacts\barbaraflore@hotmail.fr\8AA0045A-8604-4CF8-8A05-6876F2915F57.WindowsLiveContact
C:\Documents and Settings\FRANK\Contacts\barbaraflore@hotmail.fr\ADEBE3DF-A77D-4369-AAF3-37D925B3B777.WindowsLiveContact
C:\Documents and Settings\FRANK\Contacts\barbaraflore@hotmail.fr\C3FB3924-155A-4D1C-BF31-4F4F1B6CEB90.WindowsLiveContact
C:\Documents and Settings\FRANK\Contacts\barbaraflore@hotmail.fr\d3418690-665b-45dd-bc90-766ab863927f.WindowsLiveContact
C:\Documents and Settings\FRANK\Contacts\baya_franck@hotmail.fr5AE66F3-170D-47A2-9039-211169580B68.WindowsLiveContact
C:\Documents and Settings\FRANK\Contacts\baya_franck@hotmail.fr\1eb901ff-15a8-4c06-8a79-c16ea0d4e32d.WindowsLiveContact
C:\Documents and Settings\FRANK\Contacts\baya_franck@hotmail.fr\8a093597-100d-4596-8fbe-5be37a07e1e9.WindowsLiveContact
C:\Documents and Settings\FRANK\Contacts\baya_franck@hotmail.fr\a5c53aae-bda1-48ed-b0ea-d12e99b04bc4.WindowsLiveContact
C:\Documents and Settings\FRANK\Contacts\baya_franck@hotmail.fr\cc3db993-53f5-4bc2-935b-54cdf02fcaa1.WindowsLiveContact
C:\Documents and Settings\FRANK\Cookies
C:\Documents and Settings\FRANK\Cookies\frank@1065957955[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@1071113445[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@ab0ncvrai.skyblog[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@ad.zanox[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@admBloger[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@adtech[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@adultfriendfinder[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@adv.surinter[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@advertstream[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@boutique[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@by120w.bay120.mail.live[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@by139w.bay139.mail.live[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@casinotropez[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@click-fr[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@dailymotion[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@ebay[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@ebay[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@editeurjavascript[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@edt02[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@em.pc-on-internet[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@facile-voyage[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@forum.malekal[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@forum[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@fr-fr[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@geocities[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@i2as.idregie[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@live[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@login.live[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@md46.skyrock[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@msnportal.112.2o7[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@msn[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@partirpascher[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@petitecamer.skyblog[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@phpmv2[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@pspgen[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@rollingstone[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@rtm[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@search.live[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@search.msn[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@skyblog[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@skyregie[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@spaces.live[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@stacygwadada.skyblog[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@store.webroot[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@tf1[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@video.fr.msn[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@voyages-sncf[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@weborama[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@webroot[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@www.01net[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@www.rollingstone[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@www.smartadserver[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@www.voyages-sncf[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@xx--emily--xx.skyblog[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@yahoo[2].txt
C:\Documents and Settings\FRANK\Cookies\frank@youtube[1].txt
C:\Documents and Settings\FRANK\Cookies\frank@zebulon[1].txt
C:\Documents and Settings\FRANK\Cookies\index.dat
C:\Documents and Settings\FRANK\Local Settings\desktop.ini
C:\Documents and Settings\FRANK\Local Settings\Temp
C:\Documents and Settings\FRANK\Local Settings\Temp\Logitech-LSU
C:\Documents and Settings\FRANK\Local Settings\Temp\~DF761C.tmp
C:\Documents and Settings\FRANK\Local Settings\Temp\~DF76F1.tmp
C:\Documents and Settings\FRANK\Local Settings\Temp\~DF76FD.tmp
C:\Documents and Settings\FRANK\Local Settings\Temp\~DF7A00.tmp
C:\Documents and Settings\FRANK\Local Settings\Temp\~DF858F.tmp
C:\Documents and Settings\FRANK\Local Settings\Temp\~DF8608.tmp
C:\Documents and Settings\FRANK\Local Settings\Temp\~DF8613.tmp
C:\Documents and Settings\FRANK\Mes documents\Mes dossiers de partage.lnk
C:\Documents and Settings\FRANK\Mes documents\Mes images\Mes photos Logitech\babich
C:\Documents and Settings\FRANK\Mes documents\Mes images\Mes photos Logitech\babich\PhotoFiltre.zip
C:\Documents and Settings\FRANK\ntuser.dat
C:\Documents and Settings\FRANK\ntuser.ini
C:\Documents and Settings\LocalService\Cookies\index.dat
C:\Documents and Settings\LocalService\Local Settings\desktop.ini
C:\Documents and Settings\LocalService\ntuser.dat
C:\Documents and Settings\LocalService\ntuser.dat.LOG
C:\Documents and Settings\NetworkService\Local Settings\desktop.ini
C:\Documents and Settings\NetworkService\NTUSER.DAT
C:\Documents and Settings\NetworkService\ntuser.dat.LOG
C:\eMule
C:\eMule\config
C:\eMule\config\AC_BootstrapIPs.dat
C:\eMule\config\AC_SearchStrings.dat
C:\eMule\config\AC_ServerMetURLs.dat
C:\eMule\config\cancelled.met
C:\eMule\config\clients.met
C:\eMule\config\emfriends.met
C:\eMule\config\known.met
C:\eMule\config\known2_64.met
C:\eMule\config\preferences.dat
C:\eMule\config\preferences.ini
C:\eMule\config\server.met
C:\eMule\config\server_met.old
C:\eMule\config\shareddir.dat
C:\eMule\config\statistics.ini
C:\eMule\downloads.txt
C:\eMule\Incoming
C:\eMule\Incoming\AlbumArtSmall.jpg
C:\eMule\Incoming\AlbumArt_{FC8DE466-1B65-4676-AC02-206A0FDEAB32}_Large.jpg
C:\eMule\Incoming\AlbumArt_{FC8DE466-1B65-4676-AC02-206A0FDEAB32}_Small.jpg
C:\eMule\Incoming\desktop.ini
C:\eMule\Incoming\Folder.jpg
C:\eMule\Incoming\Soprano - Puisqu'il Faut Vivre - www.love-mp3.fr.st
C:\eMule\Incoming\Soprano - Puisqu'il Faut Vivre - www.love-mp3.fr.st\desktop.ini
C:\eMule\Incoming\Vitaa - A fleur de toi.mp3
C:\pagefile.sys
C:\Program Files\Mozilla Firefox
C:\Program Files\Mozilla Firefox\install.log
C:\Program Files\Mozilla Firefox\updates
C:\Program Files\MSN Messenger\ErrorResponse.xml
C:\Program Files\Yahoo!\Messenger
C:\Program Files\Yahoo!\Messenger\emptygrps.baya_franck.ini
C:\Program Files\Yahoo!\Messenger\logs\billing_carole.log
C:\Program Files\Yahoo!\Messenger\logs\billing_FRANK.log
C:\Program Files\Yahoo!\Messenger\logs\client_carole.log
C:\Program Files\Yahoo!\Messenger\logs\client_FRANK.log
C:\Program Files\Yahoo!\Messenger\logs\network_carole.log
C:\Program Files\Yahoo!\Messenger\logs\network_FRANK.log
C:\Program Files\Yahoo!\Messenger\Profiles\baya_franck\iconindex.dat
C:\Program Files\Yahoo!\YPSR\ppv5exc.dat
C:\Program Files\Yahoo!\YPSR\Quarantine
C:\Program Files\Yahoo!\YPSR\Quarantine\20070512090035.zip
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq53.tmp
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq54.tmp
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq55.tmp
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq59.tmp
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq5A.tmp
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq5B.tmp
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq5C.tmp
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq5E.tmp
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq5F.tmp
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq60.tmp
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq61.tmp
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq62.tmp
C:\Program Files\Yahoo!\YPSR\Quarantine\ppqdb.dat
C:\Program Files\Yahoo!\YPSR\Quarantine\ppqsdb.dat
C:\Program Files\Yahoo!\YPSR\updates
C:\Program Files\Yahoo!\YPSR\ypsr.log
C:\WINDOWS
C:\WINDOWS.log
C:\WINDOWS\BDOSCAN8
C:\WINDOWS\BDOSCAN8\avxdisk.dll
C:\WINDOWS\BDOSCAN8\avxs.dll
C:\WINDOWS\BDOSCAN8\avxt.dll
C:\WINDOWS\BDOSCAN8\bdcore.dll
C:\WINDOWS\BDOSCAN8\bdoscan.ini
C:\WINDOWS\BDOSCAN8\bdoscan.log
C:\WINDOWS\BDOSCAN8\bdupd.dll.updpnd
C:\WINDOWS\BDOSCAN8\boot.xmd
C:\WINDOWS\BDOSCAN8\libfn.dll
C:\WINDOWS\BDOSCAN8\librtvr.dll
C:\WINDOWS\BDOSCAN8\oscan81.ocx
C:\WINDOWS\BDOSCAN8\plugins
C:\WINDOWS\BDOSCAN8\plugins\7zip.xmd
C:\WINDOWS\BDOSCAN8\plugins\ace.xmd
C:\WINDOWS\BDOSCAN8\plugins\adsntfs.xmd
C:\WINDOWS\BDOSCAN8\plugins\alz.xmd
C:\WINDOWS\BDOSCAN8\plugins\arc.xmd
C:\WINDOWS\BDOSCAN8\plugins\arj.xmd
C:\WINDOWS\BDOSCAN8\plugins\bach.xmd
C:\WINDOWS\BDOSCAN8\plugins\boot.xmd
C:\WINDOWS\BDOSCAN8\plugins\bzip2.xmd
C:\WINDOWS\BDOSCAN8\plugins\cab.xmd
C:\WINDOWS\BDOSCAN8\plugins\cevakrnl.cvd
C:\WINDOWS\BDOSCAN8\plugins\cevakrnl.ivd
C:\WINDOWS\BDOSCAN8\plugins\cevakrnl.rvd
C:\WINDOWS\BDOSCAN8\plugins\cevakrnl.xmd
C:\WINDOWS\BDOSCAN8\plugins\ceva_dll.cvd
C:\WINDOWS\BDOSCAN8\plugins\ceva_emu.cvd
C:\WINDOWS\BDOSCAN8\plugins\ceva_vfs.cvd
C:\WINDOWS\BDOSCAN8\plugins\chm.xmd
C:\WINDOWS\BDOSCAN8\plugins\cpio.xmd
C:\WINDOWS\BDOSCAN8\plugins\cran.cvd
C:\WINDOWS\BDOSCAN8\plugins\cran.ivd
C:\WINDOWS\BDOSCAN8\plugins\cran.xmd
C:\WINDOWS\BDOSCAN8\plugins\dbx.xmd
C:\WINDOWS\BDOSCAN8\plugins\docfile.xmd
C:\WINDOWS\BDOSCAN8\plugins\emalware.cvd
C:\WINDOWS\BDOSCAN8\plugins\emalware.i01
C:\WINDOWS\BDOSCAN8\plugins\emalware.i02
C:\WINDOWS\BDOSCAN8\plugins\emalware.i03
C:\WINDOWS\BDOSCAN8\plugins\emalware.i04
C:\WINDOWS\BDOSCAN8\plugins\emalware.i05
C:\WINDOWS\BDOSCAN8\plugins\emalware.i06
C:\WINDOWS\BDOSCAN8\plugins\emalware.i07
C:\WINDOWS\BDOSCAN8\plugins\emalware.i08
C:\WINDOWS\BDOSCAN8\plugins\emalware.i09
C:\WINDOWS\BDOSCAN8\plugins\emalware.i10
C:\WINDOWS\BDOSCAN8\plugins\emalware.i11
C:\WINDOWS\BDOSCAN8\plugins\emalware.i12
C:\WINDOWS\BDOSCAN8\plugins\emalware.i13
C:\WINDOWS\BDOSCAN8\plugins\emalware.i14
C:\WINDOWS\BDOSCAN8\plugins\emalware.i15
C:\WINDOWS\BDOSCAN8\plugins\emalware.i16
C:\WINDOWS\BDOSCAN8\plugins\emalware.i17
C:\WINDOWS\BDOSCAN8\plugins\emalware.i18
C:\WINDOWS\BDOSCAN8\plugins\emalware.i19
C:\WINDOWS\BDOSCAN8\plugins\emalware.ivd
C:\WINDOWS\BDOSCAN8\plugins\emalware.xmd
C:\WINDOWS\BDOSCAN8\plugins\epoc.xmd
C:\WINDOWS\BDOSCAN8\plugins\gzip.xmd
C:\WINDOWS\BDOSCAN8\plugins\ha.xmd
C:\WINDOWS\BDOSCAN8\plugins\hlp.xmd
C:\WINDOWS\BDOSCAN8\plugins\hpe.cvd
C:\WINDOWS\BDOSCAN8\plugins\hpe.xmd
C:\WINDOWS\BDOSCAN8\plugins\hqx.xmd
C:\WINDOWS\BDOSCAN8\plugins\html.xmd
C:\WINDOWS\BDOSCAN8\plugins\imp.xmd
C:\WINDOWS\BDOSCAN8\plugins\inno.xmd
C:\WINDOWS\BDOSCAN8\plugins\instyler.xmd
C:\WINDOWS\BDOSCAN8\plugins\iso.xmd
C:\WINDOWS\BDOSCAN8\plugins\java.cvd
C:\WINDOWS\BDOSCAN8\plugins\java.xmd
C:\WINDOWS\BDOSCAN8\plugins\jpeg.xmd
C:\WINDOWS\BDOSCAN8\plugins\lha.xmd
C:\WINDOWS\BDOSCAN8\plugins\lnk.xmd
C:\WINDOWS\BDOSCAN8\plugins\mbox.xmd
C:\WINDOWS\BDOSCAN8\plugins\mbx.xmd
C:\WINDOWS\BDOSCAN8\plugins\mdx.xmd
C:\WINDOWS\BDOSCAN8\plugins\mdx_97.cvd
C:\WINDOWS\BDOSCAN8\plugins\mdx_97.ivd
C:\WINDOWS\BDOSCAN8\plugins\mdx_w95.cvd
C:\WINDOWS\BDOSCAN8\plugins\mdx_x95.cvd
C:\WINDOWS\BDOSCAN8\plugins\mdx_xf.cvd
C:\WINDOWS\BDOSCAN8\plugins\mime.xmd
C:\WINDOWS\BDOSCAN8\plugins\mobmalware.cvd
C:\WINDOWS\BDOSCAN8\plugins\mobmalware.xmd
C:\WINDOWS\BDOSCAN8\plugins\mso.xmd
C:\WINDOWS\BDOSCAN8\plugins\na.cvd
C:\WINDOWS\BDOSCAN8\plugins\na.xmd
C:\WINDOWS\BDOSCAN8\plugins\nelf.cvd
C:\WINDOWS\BDOSCAN8\plugins\nelf.xmd
C:\WINDOWS\BDOSCAN8\plugins\nsis.xmd
C:\WINDOWS\BDOSCAN8\plugins\objd.xmd
C:\WINDOWS\BDOSCAN8\plugins\pdf.xmd
C:\WINDOWS\BDOSCAN8\plugins\pst.xmd
C:\WINDOWS\BDOSCAN8\plugins\rar.xmd
C:\WINDOWS\BDOSCAN8\plugins\rpm.xmd
C:\WINDOWS\BDOSCAN8\plugins\rtf.xmd
C:\WINDOWS\BDOSCAN8\plugins\rup.cvd
C:\WINDOWS\BDOSCAN8\plugins\rup.xmd
C:\WINDOWS\BDOSCAN8\plugins\sdx.cvd
C:\WINDOWS\BDOSCAN8\plugins\sdx.ivd
C:\WINDOWS\BDOSCAN8\plugins\sdx.xmd
C:\WINDOWS\BDOSCAN8\plugins\sfx.xmd
C:\WINDOWS\BDOSCAN8\plugins\swf.xmd
C:\WINDOWS\BDOSCAN8\plugins\tar.xmd
C:\WINDOWS\BDOSCAN8\plugins\td0.xmd
C:\WINDOWS\BDOSCAN8\plugins\thebat.xmd
C:\WINDOWS\BDOSCAN8\plugins\tnef.xmd
C:\WINDOWS\BDOSCAN8\plugins\unpack.cvd
C:\WINDOWS\BDOSCAN8\plugins\unpack.ivd
C:\WINDOWS\BDOSCAN8\plugins\unpack.xmd
C:\WINDOWS\BDOSCAN8\plugins\update.txt
C:\WINDOWS\BDOSCAN8\plugins\uudecode.xmd
C:\WINDOWS\BDOSCAN8\plugins\ve.cvd
C:\WINDOWS\BDOSCAN8\plugins\ve.ivd
C:\WINDOWS\BDOSCAN8\plugins\ve.xmd
C:\WINDOWS\BDOSCAN8\plugins\vedata.cvd
C:\WINDOWS\BDOSCAN8\plugins\viza.xmd
C:\WINDOWS\BDOSCAN8\plugins\wise.xmd
C:\WINDOWS\BDOSCAN8\plugins\xishield.xmd
C:\WINDOWS\BDOSCAN8\plugins\z.xmd
C:\WINDOWS\BDOSCAN8\plugins\zip.xmd
C:\WINDOWS\BDOSCAN8\plugins\zoo.xmd
C:\WINDOWS\BDOSCAN8\plugins.htm
C:\WINDOWS\BDOSCAN8\rtvr.html
C:\WINDOWS\BDOSCAN8\rtvr2.html
C:\WINDOWS\BDOSCAN8\scanoptions.tsi
C:\WINDOWS\BDOSCAN8\scanoptions.tsk
C:\WINDOWS\BDOSCAN8\scanrep.html
C:\WINDOWS\BDOSCAN8\scanres.html
C:\WINDOWS\BDOSCAN8\scanres2.html
C:\WINDOWS\BDOSCAN8\upd81.bpx
C:\WINDOWS\bootstat.dat
C:\WINDOWS\Debug
C:\WINDOWS\Debug\oakley.log
C:\WINDOWS\Debug\oakley.log.sav
C:\WINDOWS\Debug\PASSWD.LOG
C:\WINDOWS\Debug\UserMode\userenv.log
C:\WINDOWS\Downloaded Program Files
C:\WINDOWS\inf
C:\WINDOWS\inf\iereset.PNF
C:\WINDOWS\LastGood
C:\WINDOWS\LastGood\INF
C:\WINDOWS\LastGood\INF\oem28.inf
C:\WINDOWS\LastGood\INF\oem28.PNF
C:\WINDOWS\PCHealth\HelpCtr\Config
C:\WINDOWS\PCHealth\HelpCtr\Config\CheckPoint
C:\WINDOWS\PCHealth\HelpCtr\Config\News
C:\WINDOWS\PCHealth\HelpCtr\Config\News\newsver.xml
C:\WINDOWS\PCHealth\HelpCtr\Config\NewsSet.xml
C:\WINDOWS\PCHealth\HelpCtr\DataColl
C:\WINDOWS\PCHealth\HelpCtr\DataColl\CollectedData_1305.xml
C:\WINDOWS\PCHealth\HelpCtr\DataColl\CollectedData_1307.xml
C:\WINDOWS\PCHealth\HelpCtr\DataColl\CollectedData_1309.xml
C:\WINDOWS\PCHealth\HelpCtr\DataColl\CollectedData_1311.xml
C:\WINDOWS\PCHealth\HelpCtr\DataColl\CollectedData_1313.xml
C:\WINDOWS\PCHealth\HelpCtr\DataColl\CollectedData_1315.xml
C:\WINDOWS\PCHealth\HelpCtr\DataColl\CollectedData_1316.xml
C:\WINDOWS\PCHealth\HelpCtr\DataColl\CollectedData_1317.xml
C:\WINDOWS\PCHealth\HelpCtr\DataColl\CollectedData_1319.xml
C:\WINDOWS\PCHealth\HelpCtr\DataColl\CollectedData_1321.xml
C:\WINDOWS\PCHealth\HelpCtr\DataColl\CollectedData_1323.xml
C:\WINDOWS\PCHealth\HelpCtr\DataColl\CollectedData_1325.xml
C:\WINDOWS\PCHealth\HelpCtr\DataColl\CollectedData_1327.xml
C:\WINDOWS\PCHealth\HelpCtr\DataColl\CollectedData_1329.xml
C:\WINDOWS\PCHealth\HelpCtr\DataColl\CollectedData_1331.xml
C:\WINDOWS\PCHealth\HelpCtr\DataColl\CollectedData_1333.xml
C:\WINDOWS\PCHealth\HelpCtr\DataColl\CollectedData_1334.xml
C:\WINDOWS\PCHealth\HelpCtr\DataColl\history_db.xml
C:\WINDOWS\setupapi.log
C:\WINDOWS\system32
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TimeStamp
C:\WINDOWS\system32\CatRoot2
C:\WINDOWS\system32\CatRoot2\edb.chk
C:\WINDOWS\system32\CatRoot2\edb.log
C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb
C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TimeStamp
C:\WINDOWS\system32\GroupPolicy
C:\WINDOWS\system32\GroupPolicy\Adm
C:\WINDOWS\system32\GroupPolicy\Adm\admfiles.ini
C:\WINDOWS\system32\GroupPolicy\gpt.ini
C:\WINDOWS\system32\GroupPolicy\Machine
C:\WINDOWS\system32\GroupPolicy\User
C:\WINDOWS\system32\Macromed\Shockwave 8\Shockwave Log
C:\WINDOWS\Temp
C:\WINDOWS\wiadebug.log
C:\WINDOWS\wiaservc.log
Liste des derniers fichies modifies/crees dans windir\system32
C:\WINDOWS\System32/drivers\ggsemc.sys -->27/03/2007 21:01:26
C:\WINDOWS\System32/drivers\AWRTPD.sys -->05/03/2007 22:38:54
C:\WINDOWS\System32/drivers\ativvpxx.vp -->09/02/2006 23:01:38
C:\WINDOWS\System32/drivers\ati2mtag.sys -->09/02/2006 21:57:46
C:\WINDOWS\System32/drivers\ati2erec.dll -->09/02/2006 21:26:38
C:\WINDOWS\System32/drivers\ativcaxx.vp -->18/01/2006 10:57:44
C:\WINDOWS\System32/drivers\ativcaxx.cpa -->18/01/2006 10:57:42
C:\WINDOWS\System32\fqcmyeijw_navps.dat -->12/05/2007 11:36:48
C:\WINDOWS\System32\fqcmyeijw.dat -->12/05/2007 11:36:46
C:\WINDOWS\System32\fqcmyeijw_nav.dat -->08/05/2007 17:21:42
C:\WINDOWS\System32\wpa.dbl -->06/05/2007 18:02:39
C:\WINDOWS\System32\FNTCACHE.DAT -->06/05/2007 17:19:56
C:\WINDOWS\System32\perfh00C.dat -->06/05/2007 15:16:39
C:\WINDOWS\System32\perfh009.dat -->06/05/2007 15:16:39
C:\WINDOWS\System32\perfc00C.dat -->06/05/2007 15:16:39
C:\WINDOWS\System32\perfc009.dat -->06/05/2007 15:16:39
C:\WINDOWS\System32\spupdwxp.log -->06/05/2007 15:13:45
C:\WINDOWS\System32\nscompat.tlb -->06/05/2007 14:35:33
C:\WINDOWS\System32\amcompat.tlb -->06/05/2007 14:35:33
C:\WINDOWS\System32\PerfStringBackup.INI -->06/05/2007 14:33:22
C:\WINDOWS\System32\wmpscheme.xml -->06/05/2007 14:30:02
C:\WINDOWS\System32\spdwnwxp.log -->06/05/2007 14:26:30
C:\WINDOWS\System32\ddwzyw_navtmp.dat -->28/04/2007 22:53:37
C:\WINDOWS\System32\fqcmyeijw.exe -->28/04/2007 22:53:35
C:\WINDOWS\System32\nvs2.inf -->28/04/2007 22:53:30
C:\WINDOWS\System32\ednfwoeeof.exe -->28/04/2007 22:50:26
C:\WINDOWS\System32\LegitCheckControl.DLL -->24/04/2007 11:32:06
C:\WINDOWS\System32\AUTOEXEC.NT -->20/04/2007 13:25:18
C:\WINDOWS\System32\CmdLineExt.dll -->15/04/2007 16:37:12
C:\WINDOWS\System32\jupdate-1.5.0_11-b03.log -->07/04/2007 10:00:19
C:\WINDOWS\System32\lvcoinst.log -->25/03/2007 16:42:31
C:\WINDOWS\System32\Installer.log -->24/03/2007 18:34:43
C:\WINDOWS\setupapi.log -->12/05/2007 10:34:27
C:\WINDOWS.log -->12/05/2007 08:17:51
C:\WINDOWS\wiadebug.log -->12/05/2007 08:17:50
C:\WINDOWS\wiaservc.log -->12/05/2007 08:17:46
C:\WINDOWS\bootstat.dat -->12/05/2007 08:17:36
C:\WINDOWS\wmsetup.log -->09/05/2007 15:22:48
C:\WINDOWS\DPINST.LOG -->08/05/2007 16:06:36
C:\WINDOWS\Active Setup Log.txt -->07/05/2007 21:14:33
C:\WINDOWS\Active Setup Log.BAK -->06/05/2007 18:00:35
C:\WINDOWS\ie7_main.log -->06/05/2007 17:54:27
C:\WINDOWS\WindowsUpdate.log -->06/05/2007 17:05:20
C:\WINDOWS\ntbtlog.txt -->06/05/2007 17:04:00
C:\WINDOWS\WMSysPr9.prx -->06/05/2007 14:35:19
C:\WINDOWS\WMSysPrx.prx -->06/05/2007 14:30:09
C:\WINDOWS\psnetwork.ini -->29/04/2007 18:36:22
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est A8A7-0507
Répertoire de C:\WINDOWS\system32
28/08/2001 17:00 4 096 csrss.exe
1 fichier(s) 4 096 octets
0 Rép(s) 113 913 868 288 octets libres
Contenu de Downloaded Program Files
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est A8A7-0507
Répertoire de C:\WINDOWS\Downloaded Program Files
12/05/2007 10:34 <REP> .
12/05/2007 10:34 <REP> ..
07/12/2004 17:07 32 bdcore.dll
25/05/2006 01:21 118 784 bdupd.dll
18/03/2007 21:14 65 desktop.ini
25/05/2006 01:21 53 248 ipsupd.dll
16/03/2005 12:34 7 407 lang.ini
13/04/2007 15:27 367 LegitCheckControl.inf
07/12/2004 17:07 32 libfn.dll
14/03/2005 14:38 126 live.ini
22/02/2007 23:41 304 544 MessengerStatsPAClient.dll
20/01/2000 16:25 1 162 Microsoft XML Parser for Java.osd
28/02/2007 14:21 131 472 msgrchkr.dll
20/06/2006 15:44 379 704 MsnPUpld.dll
19/06/2006 14:40 393 MsnPUpld.inf
26/05/2005 04:19 293 muweb.inf
01/06/2006 02:57 1 331 oscan8.inf
01/06/2006 02:54 471 040 oscan8.ocx
31/05/2006 04:15 10 oscan81.ocx_x
20/06/2006 15:44 117 560 PURen-us.dll
09/01/2007 08:30 110 592 PURfr-fr.dll
14/03/2005 14:58 7 073 scanoptions.tsi
09/11/2006 15:36 5 019 swflash.inf
26/05/2005 04:19 291 wuweb.inf
22 fichier(s) 1 710 545 octets
Total des fichiers listés :
22 fichier(s) 1 710 545 octets
2 Rép(s) 113 913 868 288 octets libres
Recherche de rootkit! (Merci S!Ri)
infection possible Magic.Control : un scan F-Secure BlackLight est recommandé
Recherche d'infections connues
catchme 0.3.660 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-05-12 11:37:17
Windows 5.1.2600 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden services ...
scanning hidden autostart entries ...
scanning hidden files ...
C:\Documents and Settings\FRANK\Local Settings\Temporary Internet Files\Content.IE5\D3NJHLGA\index[2].htm
C:\Documents and Settings\FRANK\Local Settings\Temporary Internet Files\Content.IE5\YXXARI94\Static[1].html
C:\Navipromo\Backups\fqcmyeijw.dat.off
C:\Navipromo\Backups\fqcmyeijw.exe.off
C:\Navipromo\Backups\fqcmyeijw_nav.dat.off
C:\Navipromo\Backups\fqcmyeijw_navps.dat.off
C:\WINDOWS\system32\fqcmyeijw.dat
C:\WINDOWS\system32\fqcmyeijw.exe
C:\WINDOWS\system32\fqcmyeijw_nav.dat
C:\WINDOWS\system32\fqcmyeijw_navps.dat
scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 10
Liste des programmes installes
Ad-Aware 2007 Beta
Ad-aware 6 Personal
Adobe Flash Player 9 ActiveX
Adobe Reader 7.0.7 - Français
adsl TV
Archiveur WinRAR
ATI - Utilitaire de désinstallation du logiciel
ATI Display Driver
Aureon 5.1 Fun ControlPanel
CloneCD
Correctif pour le Lecteur Windows Media [Voir wm828026 pour plus d'informations]
Correctif Windows XP - KB810217
Correctif Windows XP - KB823182
Correctif Windows XP - KB824105
Correctif Windows XP - KB824141
Correctif Windows XP - KB825119
Correctif Windows XP - KB826942
Correctif Windows XP - KB828035
CursorXP
DAEMON Tools
Disc2Phone
Détecteur de flux Windows Live Toolbar
eMule
Extension MSN pour Windows Live Toolbar
FlashFXP
Google Toolbar for Firefox
Google Toolbar for Internet Explorer
Google Toolbar for Internet Explorer
High Definition Audio Driver Package - KB835221
HijackThis 1.99.1
Intel® PRO Network Connections Drivers
Intel® PROSet for Wired Connections
Internet Explorer Q824145
J2SE Runtime Environment 5.0 Update 11
K-Lite Codec Pack 2.20 Full
Language pack for Ad-Aware SE
Lecteur Windows Media 10
Logiciel QuickCam de Logitech
Messenger Plus!
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 2.0
Microsoft .NET Framework 2.0
Microsoft Windows OneCare Live v1.5.1890.26 Idcrl Install
Microsoft Windows OneCare Live v1.5.1890.34
Mise à jour pour Windows XP (KB898461)
Mise à jour pour Windows XP (KB914882)
Mozilla Firebird
Mozilla Firefox (2.0.0.3)
MSXML 4.0 SP2 Parser and SDK
Navigation par onglets (Windows Live Toolbar)
Nero 6 Ultra Edition
NVIDIA Drivers
Outlook Express Update Q330994
Pack réseau avancé pour Windows XP
Panneau de contrôle ATI
Programme de gestion Camera de Logitech®
QuickTime Alternative 1.11
Real Alternative
RealPlayer
Shockwave
SigmaTel Audio
Skype 3.1
Skype Plugin Manager
SopCast 1.1.1
TVAnts 1.0
TVUPlayer 2.3.0.0
VoipBuster
WebFldrs XP
Windows Installer 3.1 (KB893803)
Windows Live Messenger
Windows Live OneCare
Windows Live Sign-in Assistant
Windows Live Toolbar
Windows Live Toolbar
Windows Media Format Runtime
Windows XP Service Pack 2
Yahoo! Anti-Spy
Yahoo! Extras
Yahoo! Install Manager
Yahoo! Internet Mail
Yahoo! Messenger
Yahoo! Toolbar
Yahoo! Toolbar avec bloqueur de fenêtres pop-up
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est A8A7-0507
Répertoire de C:\Program Files
09/05/2007 19:22 <REP> .
09/05/2007 19:22 <REP> ..
15/04/2007 16:05 <REP> Adobe
01/05/2007 14:32 <REP> adslTV
19/12/2003 13:54 <REP> Ahead
18/03/2007 21:32 <REP> Ant Movie Catalog
18/03/2007 22:19 <REP> ATI Technologies
06/05/2007 17:05 <REP> CCleaner(2)
09/05/2007 15:30 <REP> CodeStuff
05/05/2007 16:42 <REP> Common Files
18/03/2007 21:12 <REP> ComPlus Applications
27/03/2007 20:57 <REP> Disc2Phone
06/05/2007 14:06 <REP> DivX
18/03/2007 21:31 <REP> D-Tools
07/04/2007 12:34 <REP> eMule
29/04/2007 12:11 <REP> eoRezo
07/04/2007 09:59 <REP> Fichiers communs
09/04/2007 13:27 <REP> FlashFXP
15/04/2007 16:04 <REP> Free
01/04/2007 12:14 <REP> Google
18/03/2007 21:41 <REP> Intel
06/05/2007 17:10 <REP> Internet Explorer
29/04/2007 12:07 <REP> Its Label
07/04/2007 10:00 <REP> Java
09/05/2007 19:22 <REP> Kaspersky Lab
18/03/2007 21:32 <REP> K-Lite Codec Pack
09/05/2007 15:13 <REP> Lavasoft
24/03/2007 18:28 <REP> Logitech
18/03/2007 21:33 <REP> Media Player Classic
06/05/2007 15:06 <REP> messenger
18/03/2007 21:31 <REP> Messenger Plus! 2
18/03/2007 21:14 <REP> microsoft frontpage
08/05/2007 12:58 <REP> Microsoft Windows OneCare Live
06/05/2007 15:06 <REP> movie maker
12/05/2007 09:53 <REP> Mozilla Firefox
18/03/2007 21:33 <REP> Mozilla.org
18/03/2007 21:34 <REP> mplayer
18/03/2007 21:14 <REP> msn gaming zone
08/05/2007 16:07 <REP> MSN Messenger
24/03/2007 20:45 <REP> MSXML 4.0
31/03/2007 17:57 <REP> MyIE2
06/05/2007 17:10 <REP> NetMeeting
06/05/2007 17:10 <REP> Outlook Express
15/04/2007 21:42 <REP> PowerArchiver
29/04/2007 18:36 <REP> PPStream
18/03/2007 21:33 <REP> QuickTime
18/03/2007 23:17 <REP> Real
18/03/2007 21:33 <REP> Real Alternative
09/04/2007 13:08 <REP> Services en ligne
18/03/2007 22:46 <REP> SigmaTel
19/03/2007 19:03 <REP> Skype
18/03/2007 21:31 <REP> SlySoft
27/03/2007 20:51 <REP> Sony Ericsson
25/04/2007 21:27 <REP> SopCast
09/05/2007 15:38 <REP> Spybot - Search & Destroy
18/03/2007 21:33 <REP> thunderbird
29/04/2007 18:08 <REP> TVAnts
01/05/2007 13:39 <REP> TVUPlayer
01/04/2007 18:26 <REP> VideoLAN
25/03/2007 17:11 <REP> VoipBuster.com
18/03/2007 23:39 <REP> Windows Live Toolbar
06/05/2007 17:09 <REP> windows media player
06/05/2007 17:10 <REP> Windows NT
18/03/2007 21:31 <REP> WinRAR
18/03/2007 21:14 <REP> xerox
05/05/2007 16:42 <REP> Yahoo!
07/04/2007 12:22 <REP> Zylom Games
0 fichier(s) 0 octets
67 Rép(s) 113 912 479 744 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est A8A7-0507
Répertoire de C:\Program Files\fichiers communs
07/04/2007 09:59 <REP> .
07/04/2007 09:59 <REP> ..
18/03/2007 23:52 <REP> Adobe
18/03/2007 21:30 <REP> Ahead
27/03/2007 20:56 <REP> InstallShield
07/04/2007 09:59 <REP> Java
24/03/2007 18:28 <REP> Logitech
18/03/2007 23:39 <REP> Microsoft Shared
18/03/2007 21:13 <REP> MSSoap
18/03/2007 21:14 <REP> ODBC
18/03/2007 23:18 <REP> Real
18/03/2007 21:13 <REP> Services
19/03/2007 19:03 <REP> Skype
18/03/2007 21:14 <REP> speechengines
06/05/2007 17:10 <REP> System
18/03/2007 23:18 <REP> xing shared
0 fichier(s) 0 octets
16 Rép(s) 113 912 479 744 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est A8A7-0507
Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders
18/03/2007 21:36 <REP> .
18/03/2007 21:36 <REP> ..
18/05/2001 18:57 561 209 MSONSEXT.DLL
03/06/1999 15:09 122 937 MSOWS409.DLL
07/03/2001 10:00 127 033 MSOWS40c.DLL
3 fichier(s) 811 179 octets
2 Rép(s) 113 912 479 744 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est A8A7-0507
Répertoire de C:\Program Files\common files
05/05/2007 16:42 <REP> .
05/05/2007 16:42 <REP> ..
05/05/2007 16:42 <REP> Scanner
18/03/2007 21:24 <REP> System
0 fichier(s) 0 octets
4 Rép(s) 113 912 479 744 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est A8A7-0507
Répertoire de C:\
08/05/2007 11:48 68 096 diff.exe
08/05/2007 11:48 103 424 grep.exe
2 fichier(s) 171 520 octets
0 Rép(s) 113 912 479 744 octets libres
c:\Documents and Settings\All Users\Menu Démarrer\Programmes\Télécharger des logiciels.exe
c:\Documents and Settings\barbara\Local Settings\Temporary Internet Files\Content.IE5\EI2W9G83\Belles_Beauty_Boutique-setup[1].exe
c:\Documents and Settings\barbara\Local Settings\Temporary Internet Files\Content.IE5\EI2W9G83\bonniesbookstoredownload[1].exe
c:\Documents and Settings\carole\Bureau\hammerheadsdownload.exe
c:\Documents and Settings\carole\Local Settings\Temp\Install_Messenger.exe
c:\Documents and Settings\FRANK\Application Data\Adobe\Acrobat\7.0\Updater\AdbeRdr709_fr_FR.exe
c:\Documents and Settings\FRANK\Application Data\Microsoft\Installer\{25081482-E242-4FE3-B552-FDC8BA88C90E}\Icon25081482.exe
c:\Documents and Settings\FRANK\Application Data\Microsoft\Installer\{25081482-E242-4FE3-B552-FDC8BA88C90E}\Icon250814822.exe
c:\Documents and Settings\FRANK\Application Data\Microsoft\Installer\{25081482-E242-4FE3-B552-FDC8BA88C90E}\Icon250814823.exe
c:\Documents and Settings\FRANK\Application Data\SopCast\adv\SopAdver.exe
c:\Documents and Settings\FRANK\Bureau\adsl-tv_adsl_tv_1.96_francais_19182.exe
c:\Documents and Settings\FRANK\Bureau\HijackThis.exe
c:\Documents and Settings\FRANK\Bureau\Update_Service_Setup-2.6.11.7.exe
c:\Documents and Settings\FRANK\Bureau\DiagHelp\catchme.exe
c:\Documents and Settings\FRANK\Bureau\DiagHelp\diff.exe
c:\Documents and Settings\FRANK\Bureau\DiagHelp\dumphive.exe
c:\Documents and Settings\FRANK\Bureau\DiagHelp\FilesInfoCmd.exe
c:\Documents and Settings\FRANK\Bureau\DiagHelp\find2.exe
c:\Documents and Settings\FRANK\Bureau\DiagHelp\Fport.exe
c:\Documents and Settings\FRANK\Bureau\DiagHelp\grep.exe
c:\Documents and Settings\FRANK\Bureau\DiagHelp\LFiles.exe
c:\Documents and Settings\FRANK\Bureau\DiagHelp\LISTDLLS.exe
c:\Documents and Settings\FRANK\Bureau\DiagHelp\pslist.exe
c:\Documents and Settings\FRANK\Bureau\DiagHelp\streams.exe
c:\Documents and Settings\FRANK\Bureau\DiagHelp\swreg.exe
c:\Documents and Settings\FRANK\Local Settings\Temp\cdc45fqq.exe
c:\Documents and Settings\FRANK\Local Settings\Temporary Internet Files\Content.IE5\7ZH37L8W\CAQFK71U.exe
c:\Documents and Settings\FRANK\Local Settings\Temporary Internet Files\Content.IE5\8BNFI4X9\Install_Messenger[1].exe
c:\Documents and Settings\FRANK\Local Settings\Temporary Internet Files\Content.IE5\8BNFI4X9\ypsr_prog_01.14.01_fr_setup_[1].exe
c:\Documents and Settings\FRANK\Mes documents\Mes images\Mes photos Logitech\babich\emoticones.exe
c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig.dll
c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylomgamesplayer.dll
c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\BunnyBounce\fr-FR\bunnybounce.dll
c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\BunnyBounce\fr-FR\fmod.dll
c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\heavyweapon\fr-FR\HeavyWeapon.dll
c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\MyZylomExtension\MyZylomExtension.dll
c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\PopcapExtension\PopcapExtension.dll
c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\textexpress2\fr-FR\fmod.dll
c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\textexpress2\fr-FR\textexpress2.dll
c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\ZylomDeluxeInstaller\ZylomDeluxeInstaller.dll
c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\ZylomExtension\ZylomExtension.dll
c:\Documents and Settings\carole\Application Data\Mozilla\Firefox\Profiles\mcf8abuk.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbar.dll
c:\Documents and Settings\carole\Application Data\Mozilla\Firefox\Profiles\mcf8abuk.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\metrics.dll
c:\Documents and Settings\FRANK\Application Data\Identities\{000HQ7FF-AD7A-3FG1-7LLS-22TDACKJ0VU0}\xmlparse.dll
c:\Documents and Settings\FRANK\Application Data\Identities\{000HQ7FF-AD7A-3FG4-HE44-22Q2HFA54VUU}\xmlparse.dll
c:\Documents and Settings\FRANK\Application Data\Mozilla\Firefox\Profiles\jhw3yl8z.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbar.dll
c:\Documents and Settings\FRANK\Application Data\Mozilla\Firefox\Profiles\jhw3yl8z.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\metrics.dll
Liste des drivers...
< Service Pack 1 5 12 2007 11:44:38.375
< Pilote charg' \WINDOWS\system32\ntoskrnl.exe
< Pilote charg' \WINDOWS\system32\hal.dll
< Pilote charg' \WINDOWS\system32\KDCOM.DLL
< Pilote charg' \WINDOWS\system32\BOOTVID.dll
< Pilote charg' d343bus.sys
< Pilote charg' ACPI.sys
< Pilote charg' \WINDOWS\System32\DRIVERS\WMILIB.SYS
< Pilote charg' pci.sys
< Pilote charg' isapnp.sys
< Pilote charg' pciide.sys
< Pilote charg' \WINDOWS\System32\DRIVERS\PCIIDEX.SYS
< Pilote charg' MountMgr.sys
< Pilote charg' ftdisk.sys
< Pilote charg' dmload.sys
< Pilote charg' dmio.sys
< Pilote charg' PartMgr.sys
< Pilote charg' VolSnap.sys
< Pilote charg' atapi.sys
< Pilote charg' d343port.sys
< Pilote charg' \WINDOWS\System32\DRIVERS\SCSIPORT.SYS
< Pilote charg' disk.sys
< Pilote charg' \WINDOWS\System32\DRIVERS\CLASSPNP.SYS
< Pilote charg' sr.sys
< Pilote charg' KSecDD.sys
< Pilote charg' Ntfs.sys
< Pilote charg' NDIS.sys
< Pilote charg' Mup.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\processr.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\ati2mtag.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\HDAudBus.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\usbuhci.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\usbehci.sys
< Pilote charg' \SystemRoot\system32\drivers\lvusbsta.sys
< Pilote charg' \SystemRoot\system32\drivers\cmaudio.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\e100b325.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\imapi.sys
< Pilote charg' \SystemRoot\System32\Drivers\ElbyCDFL.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\cdrom.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\redbook.sys
< Pilote charg' \SystemRoot\system32\drivers\lvusbsta.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\audstub.sys
< Pilote charg' \SystemRoot\system32\drivers\lvusbsta.sys
< Pilote charg' \SystemRoot\system32\drivers\lvusbsta.sys
< Pilote charg' \SystemRoot\system32\drivers\lvusbsta.sys
< Pilote charg' \SystemRoot\system32\drivers\lvusbsta.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\rasl2tp.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\ndistapi.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\ndiswan.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\raspppoe.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\raspptp.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\msgpc.sys
< Pilote charg' \SystemRoot\system32\DRIVERS\psched.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\ptilink.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\raspti.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\rdpdr.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\termdd.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\kbdclass.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\mouclass.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\swenum.sys
< Pilote charg' \SystemRoot\System32\Drivers\NDProxy.SYS
< Le pilote n'a pas 't' charg' \SystemRoot\System32\Drivers\NDProxy.SYS
< Pilote charg' \SystemRoot\system32\drivers\lvusbsta.sys
< Pilote charg' \SystemRoot\system32\drivers\sthda.sys
< Pilote charg' \SystemRoot\system32\drivers\lvusbsta.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\gameenum.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\usbhub.sys
< Le pilote n'a pas 't' charg' \SystemRoot\System32\Drivers\lbrtfdc.SYS
< Le pilote n'a pas 't' charg' \SystemRoot\System32\Drivers\Fdc.SYS
< Le pilote n'a pas 't' charg' \SystemRoot\System32\Drivers\Flpydisk.SYS
< Le pilote n'a pas 't' charg' \SystemRoot\System32\Drivers\Sfloppy.SYS
< Le pilote n'a pas 't' charg' \SystemRoot\System32\Drivers\i2omgmt.SYS
< Le pilote n'a pas 't' charg' \SystemRoot\System32\Drivers\Changer.SYS
< Le pilote n'a pas 't' charg' \SystemRoot\System32\Drivers\Cdaudio.SYS
< Pilote charg' \SystemRoot\System32\Drivers\Fs_Rec.SYS
< Pilote charg' \SystemRoot\System32\Drivers\Null.SYS
< Pilote charg' \SystemRoot\System32\Drivers\Beep.SYS
< Le pilote n'a pas 't' charg' \SystemRoot\System32\Drivers\i8042prt.SYS
< Le pilote n'a pas 't' charg' \SystemRoot\System32\DRIVERS\kbdhid.sys
< Pilote charg' \SystemRoot\System32\drivers\vga.sys
< Pilote charg' \SystemRoot\System32\Drivers\mnmdd.SYS
< Pilote charg' \SystemRoot\System32\DRIVERS\RDPCDD.sys
< Pilote charg' \SystemRoot\System32\Drivers\Msfs.SYS
< Pilote charg' \SystemRoot\System32\Drivers\Npfs.SYS
< Pilote charg' \SystemRoot\System32\DRIVERS\rasacd.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\ipsec.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\tcpip.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\netbt.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\wanarp.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\netbios.sys
< Le pilote n'a pas 't' charg' \SystemRoot\System32\DRIVERS\intelppm.sys
< Le pilote n'a pas 't' charg' \SystemRoot\System32\Drivers\PCIDump.SYS
< Pilote charg' \SystemRoot\System32\DRIVERS\rdbss.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\mrxsmb.sys
< Pilote charg' \SystemRoot\System32\Drivers\Fips.SYS
< Pilote charg' \SystemRoot\System32\DRIVERS\USBSTOR.SYS
< Pilote charg' \SystemRoot\System32\Drivers\Cdfs.SYS
< Pilote charg' \SystemRoot\System32\DRIVERS\hidusb.sys
< Pilote charg' \SystemRoot\system32\drivers\lvusbsta.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\LV561AV.SYS
< Pilote charg' \SystemRoot\System32\DRIVERS\mouhid.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\kbdhid.sys
< Pilote charg' \SystemRoot\System32\drivers\afd.sys
< Le pilote n'a pas 't' charg' \SystemRoot\System32\drivers\afd.sys
< Le pilote n'a pas 't' charg' \SystemRoot\System32\DRIVERS\rdbss.sys
< Le pilote n'a pas 't' charg' \SystemRoot\System32\DRIVERS\mrxsmb.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\mrxdav.sys
< Pilote charg' \SystemRoot\system32\drivers\sysaudio.sys
< Pilote charg' \SystemRoot\system32\drivers\splitter.sys
< Pilote charg' \SystemRoot\system32\drivers\wdmaud.sys
< Pilote charg' \SystemRoot\system32\drivers\aec.sys
< Pilote charg' \SystemRoot\system32\drivers\swmidi.sys
< Le pilote n'a pas 't' charg' \SystemRoot\System32\Drivers\Parport.SYS
< Pilote charg' \SystemRoot\system32\drivers\DMusic.sys
< Pilote charg' \SystemRoot\system32\drivers\kmixer.sys
< Le pilote n'a pas 't' charg' \SystemRoot\System32\Drivers\Serial.SYS
< Pilote charg' \SystemRoot\system32\drivers\drmkaud.sys
< Pilote charg' \SystemRoot\System32\Drivers\ElbyCDIO.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\ipfltdrv.sys
< Pilote charg' \SystemRoot\System32\DRIVERS\srv.sys
