j'ai un virus quand je lance l'analyse avec mon anti virus, mon ordinateur s'éteint après quelques minutes. et c la meme chose après chaque analyse. j'ai essayé avc kaspersky avec mise à jour téléchargeable et meme avc avast 4.8 antivirus protection et c'est le meme probleme, aidez moi svp. merci.
j'ai téléchargé RSIT je l'est installé et voilà ce que j'ai trouvé comme résultat: le fichier info.txt et log.txt
pour info.txt:
info.txt logfile of random's system information tool 1.05 2009-02-04 08:57:12
======Uninstall list======
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Acrobat 6.0 Professional-->MsiExec.exe /I{AC76BA86-1033-0000-7760-000000000001}
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Mozilla Firefox (2.0.0.7)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
ProSavageDDR and Utilities-->C:\PROGRA~1\S3Inc\P4M266\s3setvga.exe -s -fC:\PROGRA~1\S3Inc\P4M266\P4M266.uns
Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" REMOVE
S3Display-->s3uninst.exe -reg 5 'HKLM\Software\S3\S3Uninst\S3Display'
S3Gamma2-->s3uninst.exe -reg 5 'HKLM\Software\S3\S3Uninst\S3Gamma2'
S3Info2-->s3uninst.exe -reg 5 'HKLM\Software\S3\S3Uninst\S3Info2'
S3Overlay-->s3uninst.exe -reg 5 'HKLM\Software\S3\S3Uninst\S3Overlay'
Skype™ 3.5-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Windows Live Messenger-->MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}
Windows Live Sign-in Assistant-->MsiExec.exe /I{49672EC2-171B-47B4-8CE7-50D7806360D7}
Windows Live Toolbar-->"C:\Program Files\Windows Live Toolbar\UnInstall.exe" {05AE605F-3146-46ED-BC52-0A14EBF57962}
Windows Live Toolbar-->MsiExec.exe /X{05AE605F-3146-46ED-BC52-0A14EBF57962}
WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
======Security center information======
AV: avast! antivirus 4.8.1296 [VPS 090203-1]
System event log
Computer Name: IMENE-DBDC74320
Event Code: 3260
Message: Cet ordinateur a correctement été joint au workgroup 'WORKGROUP'.
Record Number: 5
Source Name: Workstation
Time Written: 20090115112105.000000+060
Event Type: information
User:
Computer Name: IMENE-DBDC74320
Event Code: 6011
Message: Le nom NetBIOS et le nom de l'hôte DNS de cet ordinateur ont été modifiés de MACHINENAME vers IMENE-DBDC74320.
Record Number: 4
Source Name: EventLog
Time Written: 20090115112011.000000+060
Event Type: information
User:
Computer Name: MACHINENAME
Event Code: 2
Message: Pendant la validation de \Device\Serial0 en tant que port série, une FIFO a été détectée. La FIFO sera utilisée.
Record Number: 3
Source Name: Serial
Time Written: 20090115121409.000000+060
Event Type: information
User:
Computer Name: MACHINENAME
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.
Record Number: 2
Source Name: EventLog
Time Written: 20090115121351.000000+060
Event Type: information
User:
Computer Name: MACHINENAME
Event Code: 6009
Message: Microsoft ® Windows ® 5.01. 2600 Service Pack 2 Uniprocessor Free.
Record Number: 1
Source Name: EventLog
Time Written: 20090115121351.000000+060
Event Type: information
User:
Application event log
Computer Name: IMENE-DBDC74320
Event Code: 1000
Message: Les compteurs de performances pour le service MSDTC (MSDTC) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.
Record Number: 5
Source Name: LoadPerf
Time Written: 20090115112206.000000+060
Event Type: information
User:
Computer Name: IMENE-DBDC74320
Event Code: 1000
Message: Les compteurs de performances pour le service TermService (Services Terminal Server) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.
Record Number: 4
Source Name: LoadPerf
Time Written: 20090115112203.000000+060
Event Type: information
User:
Computer Name: IMENE-DBDC74320
Event Code: 1000
Message: Les compteurs de performances pour le service RemoteAccess (Routage et accès distant) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.
Record Number: 3
Source Name: LoadPerf
Time Written: 20090115112049.000000+060
Event Type: information
User:
Computer Name: IMENE-DBDC74320
Event Code: 1000
Message: Les compteurs de performances pour le service PSched (PSched) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.
Record Number: 2
Source Name: LoadPerf
Time Written: 20090115112021.000000+060
Event Type: information
User:
Computer Name: IMENE-DBDC74320
Event Code: 1000
Message: Les compteurs de performances pour le service RSVP (QoS RSVP) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.
Record Number: 1
Source Name: LoadPerf
Time Written: 20090115112021.000000+060
Event Type: information
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 2 Stepping 9, GenuineIntel
"PROCESSOR_REVISION"=0209
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
-----------------EOF-----------------
et pour le fichier log.txt:
Logfile of random's system information tool 1.05 (written by random/random)
Run by imene at 2009-02-04 08:56:33
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 20 GB (52%) free of 38 GB
Total RAM: 735 MB (66% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:57:09, on 04/02/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\imene\Bureau\RSIT.exe
C:\Program Files\trend micro\imene.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{F267097F-B988-4192-B140-CDCF9A4CF5E7}: NameServer = 208.67.222.222 208.67.220.220
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
--
End of file - 5196 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Vérifier les mises à jour de Windows Live Toolbar.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll [2003-05-15 50376]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2007-09-13 1312040]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-08-31 322368]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2009-01-15 2436160]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
AcroIEToolbarHelper Class - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll [2003-05-15 147456]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live Toolbar\msntb.dll [2006-09-27 544032]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Windows Live Toolbar - C:\Program Files\Windows Live Toolbar\msntb.dll [2006-09-27 544032]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2009-01-15 2436160]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll [2003-05-15 147456]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-06-18 67584]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2008-11-26 81000]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360]
"MsnMsgr"=C:\Program Files\MSN Messenger\MsnMsgr.Exe [2007-01-19 5674352]
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Acrobat Assistant.lnk - C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype. Take a deep breath "
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{baa4c15f-e32a-11dd-8d73-00115b8e5d85}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Sys.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e882b415-ee10-11dd-8d95-00115b8e5d85}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fc47955b-e2ef-11dd-8d68-00115b8e5d85}]
shell\AutoRun\command - wscript.exe .\.vbs
shell\open\command - wscript.exe .\.vbs
======List of files/folders created in the last 1 months======
2009-02-04 08:56:34 ----D---- C:\Program Files\trend micro
2009-02-04 08:56:33 ----D---- C:\rsit
2009-02-01 07:55:54 ----A---- C:\WINDOWS\system32\aswBoot.exe
2009-02-01 07:27:27 ----D---- C:\Program Files\Alwil Software
2009-02-01 07:23:57 ----SHD---- C:\Config.Msi
2009-01-29 20:30:07 ----A---- C:\WINDOWS\system32\MSVCR71.dll
2009-01-29 20:30:07 ----A---- C:\WINDOWS\system32\MSVCP71.dll
2009-01-29 20:30:07 ----A---- C:\WINDOWS\system32\MFC71.dll
2009-01-21 09:48:21 ----D---- C:\windaws
2009-01-18 19:37:06 ----D---- C:\Documents and Settings\imene\Application Data\AdobeUM
2009-01-18 19:17:20 ----D---- C:\Documents and Settings\imene\Application Data\Adobe
2009-01-18 19:16:05 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-01-18 19:15:53 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-01-18 19:15:38 ----D---- C:\Program Files\Adobe
2009-01-18 18:29:36 ----D---- C:\Program Files\Microsoft Works
2009-01-18 18:29:18 ----D---- C:\Program Files\MSBuild
2009-01-18 18:28:49 ----D---- C:\Program Files\Microsoft Visual Studio
2009-01-18 18:28:48 ----D---- C:\Program Files\Fichiers communs\DESIGNER
2009-01-18 18:21:29 ----D---- C:\WINDOWS\SHELLNEW
2009-01-18 18:20:24 ----D---- C:\Program Files\Microsoft Office
2009-01-18 18:20:22 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-01-18 18:19:56 ----RHD---- C:\MSOCache
2009-01-18 18:18:16 ----D---- C:\WINDOWS\system32\appmgmt
2009-01-18 11:58:17 ----D---- C:\Program Files\MSECache
2009-01-16 20:19:05 ----D---- C:\Documents and Settings\imene\Application Data\Talkback
2009-01-16 20:18:12 ----D---- C:\Documents and Settings\imene\Application Data\Mozilla
2009-01-16 20:17:33 ----D---- C:\Program Files\Mozilla Firefox
2009-01-16 20:10:30 ----RA---- C:\WINDOWS\system32\kbdgeo.dll
2009-01-16 20:10:30 ----RA---- C:\WINDOWS\system32\kbdarmw.dll
2009-01-16 20:10:30 ----RA---- C:\WINDOWS\system32\kbdarme.dll
2009-01-16 20:10:30 ----A---- C:\WINDOWS\system32\Thawbrkr.dll
2009-01-16 20:10:29 ----RA---- C:\WINDOWS\system32\kbdvntc.dll
2009-01-16 20:10:29 ----RA---- C:\WINDOWS\system32\kbdintel.dll
2009-01-16 20:10:29 ----RA---- C:\WINDOWS\system32\kbdintam.dll
2009-01-16 20:10:29 ----RA---- C:\WINDOWS\system32\kbdinpun.dll
2009-01-16 20:10:29 ----RA---- C:\WINDOWS\system32\kbdinmar.dll
2009-01-16 20:10:29 ----RA---- C:\WINDOWS\system32\kbdinkan.dll
2009-01-16 20:10:29 ----RA---- C:\WINDOWS\system32\kbdinhin.dll
2009-01-16 20:10:29 ----RA---- C:\WINDOWS\system32\kbdinguj.dll
2009-01-16 20:10:29 ----RA---- C:\WINDOWS\system32\kbdindev.dll
2009-01-16 20:10:29 ----A---- C:\WINDOWS\system32\c_iscii.dll
2009-01-16 20:10:26 ----RA---- C:\WINDOWS\system32\kbdurdu.dll
2009-01-16 20:10:26 ----RA---- C:\WINDOWS\system32\kbdsyr2.dll
2009-01-16 20:10:26 ----RA---- C:\WINDOWS\system32\kbdsyr1.dll
2009-01-16 20:10:26 ----RA---- C:\WINDOWS\system32\kbddiv2.dll
2009-01-16 20:10:26 ----RA---- C:\WINDOWS\system32\kbddiv1.dll
2009-01-16 20:10:25 ----RA---- C:\WINDOWS\system32\kbdfa.dll
2009-01-16 20:10:25 ----RA---- C:\WINDOWS\system32\kbda3.dll
2009-01-16 20:10:25 ----RA---- C:\WINDOWS\system32\kbda2.dll
2009-01-16 20:10:25 ----RA---- C:\WINDOWS\system32\kbda1.dll
2009-01-16 20:10:25 ----A---- C:\WINDOWS\system32\kbdusa.dll
2009-01-16 20:10:22 ----RA---- C:\WINDOWS\system32\kbdheb.dll
2009-01-16 20:10:15 ----RA---- C:\WINDOWS\system32\kbdth3.dll
2009-01-16 20:10:15 ----RA---- C:\WINDOWS\system32\kbdth2.dll
2009-01-16 20:10:15 ----RA---- C:\WINDOWS\system32\kbdth1.dll
2009-01-16 20:10:14 ----RA---- C:\WINDOWS\system32\kbdth0.dll
2009-01-16 20:10:13 ----A---- C:\WINDOWS\system32\ftlx041e.dll
2009-01-15 20:44:34 ----D---- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2009-01-15 20:37:45 ----D---- C:\Documents and Settings\imene\Application Data\Google
2009-01-15 19:07:07 ----D---- C:\Documents and Settings\imene\Application Data\Skype
2009-01-15 19:07:03 ----D---- C:\Documents and Settings\All Users\Application Data\Google
2009-01-15 19:06:57 ----D---- C:\Program Files\Google
2009-01-15 19:06:44 ----D---- C:\Program Files\Skype
2009-01-15 19:06:44 ----D---- C:\Program Files\Fichiers communs\Skype
2009-01-15 19:06:35 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
2009-01-15 19:05:19 ----D---- C:\Program Files\Windows Live
2009-01-15 19:05:18 ----D---- C:\Program Files\Messenger Plus! Live
2009-01-15 18:10:25 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Live Toolbar
2009-01-15 18:01:55 ----D---- C:\Program Files\Windows Live Toolbar
2009-01-15 18:01:26 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-01-15 18:01:13 ----D---- C:\Program Files\MSN Messenger
2009-01-15 15:13:01 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
2009-01-15 13:15:11 ----D---- C:\Program Files\WinRAR
2009-01-15 12:20:04 ----A---- C:\WINDOWS\system32\h323log.txt
2009-01-15 12:16:37 ----RA---- C:\WINDOWS\system32\s3gnb.dll
2009-01-15 12:16:01 ----A---- C:\WINDOWS\system32\usbui.dll
2009-01-15 12:14:53 ----SHD---- C:\WINDOWS\Installer
2009-01-15 12:14:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-01-15 12:14:52 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-01-15 12:14:52 ----A---- C:\WINDOWS\ODBCINST.INI
2009-01-15 12:14:49 ----RD---- C:\Program Files
2009-01-15 12:14:49 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2009-01-15 12:14:49 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-01-15 12:14:49 ----D---- C:\Program Files\Fichiers communs
2009-01-15 12:14:46 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-01-15 12:14:46 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-01-15 12:14:46 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-01-15 12:14:44 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-01-15 12:14:44 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-01-15 12:14:44 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-01-15 12:14:44 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-01-15 12:14:44 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-01-15 12:14:44 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-01-15 12:14:44 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-01-15 12:14:44 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-01-15 12:14:44 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-01-15 12:14:44 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-01-15 12:14:44 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-01-15 12:14:44 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-01-15 12:14:43 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-01-15 12:14:43 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-01-15 12:14:43 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-01-15 12:14:43 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-01-15 12:14:43 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-01-15 12:14:43 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-01-15 12:14:42 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-01-15 12:14:41 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-01-15 12:14:41 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-01-15 12:14:41 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-01-15 12:14:41 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-01-15 12:14:41 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-01-15 12:14:40 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2009-01-15 12:14:40 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2009-01-15 12:14:40 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2009-01-15 12:14:40 ----RA---- C:\WINDOWS\system32\kbdro.dll
2009-01-15 12:14:40 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2009-01-15 12:14:40 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2009-01-15 12:14:40 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2009-01-15 12:14:40 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2009-01-15 12:14:40 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2009-01-15 12:14:40 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2009-01-15 12:14:40 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2009-01-15 12:14:40 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2009-01-15 12:14:40 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2009-01-15 12:14:38 ----A---- C:\WINDOWS\system32\irclass.dll
2009-01-15 12:14:37 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-01-15 12:14:37 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-01-15 12:14:37 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-01-15 12:14:37 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-01-15 12:14:36 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-01-15 12:14:36 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-01-15 12:14:35 ----A---- C:\WINDOWS\system32\batt.dll
2009-01-15 12:14:35 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-01-15 12:14:34 ----A---- C:\WINDOWS\system32\storprop.dll
2009-01-15 12:14:25 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2009-01-15 12:14:21 ----RA---- C:\WINDOWS\SET8.tmp
2009-01-15 12:14:18 ----RA---- C:\WINDOWS\SET4.tmp
2009-01-15 12:14:17 ----RA---- C:\WINDOWS\SET3.tmp
2009-01-15 12:14:12 ----D---- C:\WINDOWS\system32\CatRoot2
2009-01-15 12:14:12 ----D---- C:\WINDOWS\system32\CatRoot
2009-01-15 12:14:06 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-01-15 12:13:48 ----A---- C:\WINDOWS\setuplog.txt
2009-01-15 12:13:44 ----SHD---- C:\System Volume Information
2009-01-15 12:13:44 ----D---- C:\Documents and Settings
2009-01-15 12:12:53 ----SH---- C:\boot.ini
2009-01-15 12:08:41 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-01-15 12:08:41 ----RSD---- C:\WINDOWS\Fonts
2009-01-15 12:08:41 ----RD---- C:\WINDOWS\Web
2009-01-15 12:08:41 ----HD---- C:\WINDOWS\inf
2009-01-15 12:08:41 ----D---- C:\WINDOWS\WinSxS
2009-01-15 12:08:41 ----D---- C:\WINDOWS\twain_32
2009-01-15 12:08:41 ----D---- C:\WINDOWS\Temp
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\wins
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\wbem
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\usmt
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\spool
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\ShellExt
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\Setup
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\ras
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\oobe
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\npp
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\mui
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\inetsrv
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\IME
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\icsxml
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\ias
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\export
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\drivers
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\dhcp
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\config
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\3com_dmi
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\3076
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\2052
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\1054
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\1042
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\1041
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\1037
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\1036
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\1033
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\1031
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\1028
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32\1025
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system32
2009-01-15 12:08:41 ----D---- C:\WINDOWS\system
2009-01-15 12:08:41 ----D---- C:\WINDOWS\security
2009-01-15 12:08:41 ----D---- C:\WINDOWS\Resources
2009-01-15 12:08:41 ----D---- C:\WINDOWS\repair
2009-01-15 12:08:41 ----D---- C:\WINDOWS\Provisioning
2009-01-15 12:08:41 ----D---- C:\WINDOWS\PeerNet
2009-01-15 12:08:41 ----D---- C:\WINDOWS\pchealth
2009-01-15 12:08:41 ----D---- C:\WINDOWS\mui
2009-01-15 12:08:41 ----D---- C:\WINDOWS\msapps
2009-01-15 12:08:41 ----D---- C:\WINDOWS\msagent
2009-01-15 12:08:41 ----D---- C:\WINDOWS\Media
2009-01-15 12:08:41 ----D---- C:\WINDOWS\java
2009-01-15 12:08:41 ----D---- C:\WINDOWS\ime
2009-01-15 12:08:41 ----D---- C:\WINDOWS\Help
2009-01-15 12:08:41 ----D---- C:\WINDOWS\ehome
2009-01-15 12:08:41 ----D---- C:\WINDOWS\Driver Cache
2009-01-15 12:08:41 ----D---- C:\WINDOWS\Debug
2009-01-15 12:08:41 ----D---- C:\WINDOWS\Cursors
2009-01-15 12:08:41 ----D---- C:\WINDOWS\Connection Wizard
2009-01-15 12:08:41 ----D---- C:\WINDOWS\Config
2009-01-15 12:08:41 ----D---- C:\WINDOWS\AppPatch
2009-01-15 12:08:41 ----D---- C:\WINDOWS\addins
2009-01-15 12:08:41 ----D---- C:\WINDOWS
2009-01-15 11:54:20 ----SHD---- C:\RECYCLER
2009-01-15 11:49:16 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-01-15 11:49:12 ----D---- C:\Program Files\Realtek Sound Manager
2009-01-15 11:49:10 ----N---- C:\WINDOWS\avrack.ini
2009-01-15 11:49:10 ----D---- C:\Program Files\AvRack
2009-01-15 11:49:08 ----A---- C:\WINDOWS\system32\Audio3D.dll
2009-01-15 11:49:08 ----A---- C:\WINDOWS\system32\a3d.dll
2009-01-15 11:49:06 ----A---- C:\WINDOWS\system32\RTLCPAPI.dll
2009-01-15 11:49:06 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2009-01-15 11:49:05 ----A---- C:\WINDOWS\system32\RTLCPL.EXE
2009-01-15 11:49:02 ----N---- C:\WINDOWS\alcupd.exe
2009-01-15 11:49:01 ----N---- C:\WINDOWS\alcrmv.exe
2009-01-15 11:49:01 ----HD---- C:\Program Files\InstallShield Installation Information
2009-01-15 11:47:28 ----RA---- C:\WINDOWS\system32\S3uninst.exe
2009-01-15 11:47:28 ----RA---- C:\WINDOWS\system32\S3Ovrlay.dll
2009-01-15 11:47:28 ----RA---- C:\WINDOWS\system32\S3Info2.dll
2009-01-15 11:47:28 ----RA---- C:\WINDOWS\system32\S3Gamma2.dll
2009-01-15 11:47:27 ----RA---- C:\WINDOWS\system32\S3Disply.dll
2009-01-15 11:47:27 ----RA---- C:\WINDOWS\system32\nbicdnt.dll
2009-01-15 11:47:24 ----D---- C:\Program Files\S3Inc
2009-01-15 11:47:18 ----A---- C:\WINDOWS\IsUn040c.exe
2009-01-15 11:46:51 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-01-15 11:46:46 ----A---- C:\WINDOWS\IsUninst.exe
2009-01-15 11:46:16 ----D---- C:\WINDOWS\system32\Tools
2009-01-15 11:46:09 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-01-15 11:33:49 ----D---- C:\Documents and Settings\imene\Application Data\Identities
2009-01-15 11:33:47 ----HD---- C:\Program Files\Uninstall Information
2009-01-15 11:33:41 ----ASH---- C:\Documents and Settings\imene\Application Data\desktop.ini
2009-01-15 11:33:40 ----SD---- C:\Documents and Settings\imene\Application Data\Microsoft
2009-01-15 11:29:32 ----D---- C:\WINDOWS\SoftwareDistribution
2009-01-15 11:29:30 ----SD---- C:\WINDOWS\system32\Microsoft
2009-01-15 11:29:30 ----D---- C:\WINDOWS\Prefetch
2009-01-15 11:29:30 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-01-15 11:26:03 ----D---- C:\WINDOWS\system32\xircom
2009-01-15 11:26:03 ----D---- C:\Program Files\xerox
2009-01-15 11:26:03 ----D---- C:\Program Files\microsoft frontpage
2009-01-15 11:25:39 ----A---- C:\WINDOWS\control.ini
2009-01-15 11:25:39 ----A---- C:\AUTOEXEC.BAT
2009-01-15 11:25:23 ----A---- C:\WINDOWS\OEWABLog.txt
2009-01-15 11:25:19 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-01-15 11:24:24 ----RD---- C:\WINDOWS\Offline Web Pages
2009-01-15 11:24:23 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-01-15 11:24:23 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-01-15 11:24:17 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-01-15 11:24:13 ----HD---- C:\Program Files\WindowsUpdate
2009-01-15 11:24:09 ----D---- C:\Program Files\Services en ligne
2009-01-15 11:23:53 ----D---- C:\WINDOWS\system32\DirectX
2009-01-15 11:23:36 ----A---- C:\WINDOWS\system32\atrace.dll
2009-01-15 11:23:34 ----A---- C:\WINDOWS\system32\desktop.ini
2009-01-15 11:23:34 ----A---- C:\WINDOWS\desktop.ini
2009-01-15 11:23:30 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-01-15 11:23:29 ----A---- C:\WINDOWS\system32\acctres.dll
2009-01-15 11:23:28 ----D---- C:\Program Files\Fichiers communs\Services
2009-01-15 11:23:26 ----SD---- C:\WINDOWS\Tasks
2009-01-15 11:23:26 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-01-15 11:23:26 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-01-15 11:23:23 ----D---- C:\WINDOWS\srchasst
2009-01-15 11:23:22 ----D---- C:\WINDOWS\system32\Macromed
2009-01-15 11:23:20 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-01-15 11:23:20 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-01-15 11:23:20 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-01-15 11:23:20 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-01-15 11:23:19 ----A---- C:\WINDOWS\system32\wups.dll
2009-01-15 11:23:19 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-01-15 11:23:19 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-01-15 11:23:19 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-01-15 11:23:19 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-01-15 11:23:19 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-01-15 11:23:19 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-01-15 11:23:19 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-01-15 11:23:18 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-01-15 11:23:16 ----D---- C:\Program Files\Movie Maker
2009-01-15 11:23:12 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-01-15 11:23:12 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-01-15 11:23:12 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-01-15 11:23:12 ----A---- C:\WINDOWS\system32\racpldlg.dll
2009-01-15 11:23:09 ----D---- C:\WINDOWS\system32\Restore
2009-01-15 11:23:09 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-01-15 11:23:09 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-01-15 11:23:09 ----A---- C:\WINDOWS\system32\srclient.dll
2009-01-15 11:23:09 ----A---- C:\WINDOWS\system32\fltMc.exe
2009-01-15 11:23:09 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-01-15 11:23:08 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2009-01-15 11:23:08 ----A---- C:\WINDOWS\system32\msconf.dll
2009-01-15 11:23:08 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-01-15 11:23:08 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-01-15 11:23:08 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-01-15 11:23:08 ----A---- C:\WINDOWS\system32\ils.dll
2009-01-15 11:23:06 ----D---- C:\Program Files\NetMeeting
2009-01-15 11:23:06 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-01-15 11:23:06 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-01-15 11:23:05 ----A---- C:\WINDOWS\system32\inetres.dll
2009-01-15 11:23:05 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-01-15 11:23:03 ----D---- C:\Program Files\Outlook Express
2009-01-15 11:23:03 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-01-15 11:23:03 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-01-15 11:23:03 ----A---- C:\WINDOWS\system32\mstask.dll
2009-01-15 11:23:03 ----A---- C:\WINDOWS\system32\isign32.dll
2009-01-15 11:23:03 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-01-15 11:23:03 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-01-15 11:23:03 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-01-15 11:22:58 ----D---- C:\Program Files\Fichiers communs\System
2009-01-15 11:22:57 ----D---- C:\Program Files\Internet Explorer
2009-01-15 11:22:17 ----D---- C:\Program Files\ComPlus Applications
2009-01-15 11:22:15 ----A---- C:\WINDOWS\vbaddin.ini
2009-01-15 11:22:15 ----A---- C:\WINDOWS\vb.ini
2009-01-15 11:22:10 ----D---- C:\WINDOWS\Registration
2009-01-15 11:22:03 ----D---- C:\Program Files\Windows Media Player
2009-01-15 11:22:03 ----D---- C:\Program Files\Online Services
2009-01-15 11:21:57 ----D---- C:\Program Files\Messenger
2009-01-15 11:21:54 ----D---- C:\Program Files\MSN Gaming Zone
2009-01-15 11:21:54 ----A---- C:\WINDOWS\system32\write.exe
2009-01-15 11:21:46 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-01-15 11:21:45 ----A---- C:\WINDOWS\system32\winchat.exe
2009-01-15 11:21:45 ----A---- C:\WINDOWS\system32\hticons.dll
2009-01-15 11:21:45 ----A---- C:\WINDOWS\system32\avwav.dll
2009-01-15 11:21:45 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-01-15 11:21:45 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-01-15 11:21:40 ----A---- C:\WINDOWS\system32\getuname.dll
2009-01-15 11:21:39 ----A---- C:\WINDOWS\system32\winmine.exe
2009-01-15 11:21:39 ----A---- C:\WINDOWS\system32\sol.exe
2009-01-15 11:21:39 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-01-15 11:21:39 ----A---- C:\WINDOWS\system32\freecell.exe
2009-01-15 11:21:39 ----A---- C:\WINDOWS\system32\charmap.exe
2009-01-15 11:21:39 ----A---- C:\WINDOWS\system32\calc.exe
2009-01-15 11:21:38 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-01-15 11:21:38 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-01-15 11:21:38 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-01-15 11:21:38 ----A---- C:\WINDOWS\system32\tskill.exe
2009-01-15 11:21:38 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-01-15 11:21:38 ----A---- C:\WINDOWS\system32\tscon.exe
2009-01-15 11:21:38 ----A---- C:\WINDOWS\system32\shadow.exe
2009-01-15 11:21:38 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-01-15 11:21:38 ----A---- C:\WINDOWS\system32\reset.exe
2009-01-15 11:21:38 ----A---- C:\WINDOWS\system32\regini.exe
2009-01-15 11:21:38 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-01-15 11:21:38 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-01-15 11:21:38 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-01-15 11:21:38 ----A---- C:\WINDOWS\system32\msg.exe
2009-01-15 11:21:38 ----A---- C:\WINDOWS\system32\logoff.exe
2009-01-15 11:21:38 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-01-15 11:21:37 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-01-15 11:21:37 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-01-15 11:21:37 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-01-15 11:21:37 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-01-15 11:21:37 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-01-15 11:21:37 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-01-15 11:21:37 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-01-15 11:21:36 ----A---- C:\WINDOWS\system32\stclient.dll
2009-01-15 11:21:36 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-01-15 11:21:32 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-01-15 11:21:24 ----D---- C:\Program Files\MSN
2009-01-15 11:21:23 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-01-15 11:21:23 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-01-15 11:21:23 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-01-15 11:21:22 ----D---- C:\Program Files\Windows NT
2009-01-15 11:21:22 ----A---- C:\WINDOWS\system32\spider.exe
2009-01-15 11:21:22 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-01-15 11:21:22 ----A---- C:\WINDOWS\system32\hypertrm.dll
2009-01-15 11:21:22 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-01-15 11:21:21 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2009-01-15 11:21:21 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-01-15 11:21:21 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-01-15 11:21:21 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-01-15 11:21:21 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-01-15 11:21:21 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-01-15 11:21:21 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-01-15 11:21:21 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-01-15 11:21:21 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-01-15 11:21:20 ----D---- C:\WINDOWS\system32\MsDtc
2009-01-15 11:21:20 ----A---- C:\WINDOWS\system32\termsrv.dll
2009-01-15 11:21:20 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-01-15 11:21:20 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-01-15 11:21:20 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-01-15 11:21:20 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-01-15 11:21:20 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-01-15 11:21:20 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-01-15 11:21:20 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-01-15 11:21:20 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-01-15 11:21:20 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-01-15 11:21:19 ----D---- C:\WINDOWS\system32\Com
2009-01-15 11:21:19 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-01-15 11:21:19 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-01-15 11:21:19 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-01-15 11:21:19 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-01-15 11:21:18 ----A---- C:\WINDOWS\system32\comuid.dll
2009-01-15 11:21:18 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-01-15 11:21:18 ----A---- C:\WINDOWS\system32\colbact.dll
2009-01-15 11:21:18 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-01-15 11:21:18 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-01-15 11:21:18 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-01-15 11:21:18 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-01-15 11:21:18 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-01-15 11:21:12 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-01-15 11:21:12 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-01-15 11:21:12 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-01-15 11:21:12 ----A---- C:\WINDOWS\system32\cmprops.dll
======List of files/folders modified in the last 1 months======
2009-01-18 18:22:11 ----A---- C:\WINDOWS\win.ini
2009-01-16 20:28:33 ----A---- C:\WINDOWS\system.ini
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2008-11-26 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2008-11-26 111184]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2008-11-26 50864]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-04 40320]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-11-26 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2008-11-26 94032]
R3 ALCXSENS;Service for WDM 3D Audio Driver; C:\WINDOWS\system32\drivers\ALCXSENS.SYS [2004-02-24 400384]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-06-21 626204]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2008-11-26 23152]
R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5b.sys [2002-10-29 40960]
R3 S3Psddr;S3Psddr; C:\WINDOWS\system32\DRIVERS\s3gnbm.sys [2003-09-02 166912]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S3 FETNDIS;Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 S3SavageNB;S3SavageNB; C:\WINDOWS\system32\DRIVERS\s3gnbm.sys [2003-09-02 166912]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2008-11-26 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2008-11-26 155160]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2008-11-26 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2008-11-26 352920]
R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-01-15 138168]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
-----------------EOF-----------------
