clydejoe

Voiçi RSIT Logfile of random's system information tool 1.08 (written by random/random) Run by stephanie at 2010-08-24 11:08:47 Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2 System drive C: has 183 GB (79%) free of 230 GB Total RAM: 894 MB (21% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 11:08:53, on 24/08/2010 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18943) Boot mode: Normal Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\hp\support\hpsysdrv.exe C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe C:\Windows\RtHDVCpl.exe C:\Program Files\HP\HP Software Update\hpwuSchd2.exe C:\Program Files\Fisher-Price\DACS\MiniApp\DACSMiniApp.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Soft2PC\soft2pc.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Orange\MailNotifier\MailNotifier.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Users\stephanie\AppData\Roaming\Soft2PC\Software\SoftwareHP.exe C:\Program Files\Orange\Connexion Internet Orange\Launcher\Launcher.exe C:\Windows\System32\rundll32.exe C:\Windows\ehome\ehmsas.exe C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\Orange\Connexion Internet Orange\systray\systrayapp.exe C:\Program Files\Orange\Connexion Internet Orange\connectivity\connectivitymanager.exe C:\Program Files\Orange\Connexion Internet Orange\connectivity\CoreCom\CoreCom.exe C:\Program Files\Orange\Connexion Internet Orange\connectivity\CoreCom\OraConfigRecover.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\Macromed\Flash\FlashUtil10e.exe C:\hp\kbd\kbd.exe C:\Windows\system32\NOTEPAD.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\SearchFilterHost.exe C:\Users\stephanie\Downloads\RSIT.exe C:\Program Files\trend micro\stephanie.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Moteur de recherche : Web, Photos, Videos, Voyages, Encyclopédie R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HP Desktop | MSN R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = HP Desktop | MSN R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {AEEC3B59-CA98-4EBA-A140-57B94E283583} - (no file) R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\Connexion Internet Orange\SearchURLHook\SearchPageURL.dll F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe O1 - Hosts: ::1 localhost O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SOFT2PCBHO - {3475D2C4-BBD1-4255-A70D-4125A4D30956} - C:\Program Files\Soft2PC\soft2pcBHO.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe" O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [DACSMiniApp] C:\Program Files\Fisher-Price\DACS\MiniApp\DACSMiniApp.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [ORAHSSSessionManager] "C:\Program Files\Orange\Connexion Internet Orange\SessionManager\SessionManager.exe" O4 - HKLM\..\Run: [soft2PC] "C:\Program Files\Soft2PC\soft2pc.exe" O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe O4 - HKLM\..\RunOnce: [Helper] C:\Users\stephanie\AppData\Roaming\Soft2PC\Software\SoftwareHP.exe -runonce O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [MailNotifier] C:\Program Files\Orange\MailNotifier\MailNotifier.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU') O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: ajouter cette page à vos favoris Orange - C:\Users\STEPHA~1\AppData\Local\Temp\cceDC48.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: envoyer le texte sélectionné par sms - C:\Users\stephanie\AppData\Roaming\Orange\MessengerByOrange\sendsmsselectedtext.html O8 - Extra context menu item: envoyer par sms - C:\Users\stephanie\AppData\Roaming\Orange\MessengerByOrange\sendsms.html O8 - Extra context menu item: envoyer un mail - C:\Users\stephanie\AppData\Roaming\Orange\MessengerByOrange\sendmail.html O8 - Extra context menu item: orange.fr - C:\Users\stephanie\AppData\Roaming\Orange\MessengerByOrange\orange.html O8 - Extra context menu item: rechercher le texte sélectionné - C:\Users\stephanie\AppData\Roaming\Orange\MessengerByOrange\selectedsearch.html O8 - Extra context menu item: traduire la page - C:\Users\STEPHA~1\AppData\Local\Temp\cceDC46.html O8 - Extra context menu item: traduire le texte sélectionné - C:\Users\STEPHA~1\AppData\Local\Temp\cceDC47.html O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe O23 - Service: @%SystemRoot%\system32\dhcpcsvc.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\emdmgmt.dll,-1000 (EMDMgmt) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (Eventlog) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - Unknown owner - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: hpqcxs08 - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Service HP CUE DeviceDiscovery (hpqddsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-200 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Net Driver HPZ12 - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\netprof.dll,-246 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Pml Driver HPZ12 - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe O23 - Service: @%SystemRoot%\system32\SLUINotify.dll,-103 (SLUINotify) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\wmpnetwk.exe O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe -- End of file - 21777 bytes ======Scheduled tasks folder====== C:\Windows\tasks\User_Feed_Synchronization-{C9434E6C-C9BC-47A6-A57A-E705305AC52F}.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3475D2C4-BBD1-4255-A70D-4125A4D30956}] SOFT2PCBHO Class - C:\Program Files\Soft2PC\soft2pcBHO.dll [2010-03-24 221184] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184] "hpsysdrv"=c:\hp\support\hpsysdrv.exe [2006-09-28 65536] "KBD"=C:\HP\KBD\KbdStub.EXE [2006-12-08 65536] "OsdMaestro"=C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe [2007-02-15 118784] "RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-03-01 4390912] "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2006-12-10 49152] ""= [] "DACSMiniApp"=C:\Program Files\Fisher-Price\DACS\MiniApp\DACSMiniApp.exe [2007-08-31 197888] "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2007-02-16 282624] "ORAHSSSessionManager"=C:\Program Files\Orange\Connexion Internet Orange\SessionManager\SessionManager.exe [2009-08-24 135920] "soft2PC"=C:\Program Files\Soft2PC\soft2pc.exe [2010-06-29 688128] "NvSvc"=C:\Windows\system32\nvsvc.dll [2007-02-11 90192] "NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2007-02-11 8429568] "NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2007-02-11 81920] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] "Launcher"=C:\Windows\SMINST\launcher.exe [2007-03-07 44168] "Helper"=C:\Users\stephanie\AppData\Roaming\Soft2PC\Software\SoftwareHP.exe [2010-01-18 376832] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920] "ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952] "MailNotifier"=C:\Program Files\Orange\MailNotifier\MailNotifier.exe [2010-02-16 696320] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Adobe Gamma Loader.exe.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableLockWorkstation"=0 "DisableTaskMgr"=0 "DisableChangePassword"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableUIADesktopToggle"=0 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoLogoff"=0 "NoClose"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "BindDirectlyToPropertySetStorage"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "C:\Program Files\Orange\Connexion Internet Orange\Connectivity\ConnectivityManager.exe"="C:\Program Files\Orange\Connexion Internet Orange\Connectivity\ConnectivityManager.exe:*:enabled:CSS" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 months====== 2010-08-24 11:08:47 ----D---- C:\rsit 2010-08-24 10:56:42 ----D---- C:\Program Files\Trend Micro 2010-08-17 23:11:43 ----D---- C:\Windows\system32\eu-ES 2010-08-17 23:11:43 ----D---- C:\Windows\system32\ca-ES 2010-08-17 23:11:38 ----D---- C:\Windows\system32\vi-VN 2010-08-17 20:03:50 ----D---- C:\Windows\system32\EventProviders 2010-08-17 19:43:54 ----D---- C:\Users\stephanie\AppData\Roaming\vlc 2010-08-17 19:42:55 ----D---- C:\Program Files\VideoLAN 2010-08-12 22:17:30 ----A---- C:\Windows\system32\schannel.dll 2010-08-12 22:17:20 ----A---- C:\Windows\system32\iccvid.dll 2010-08-12 22:17:12 ----A---- C:\Windows\system32\iertutil.dll 2010-08-12 22:17:11 ----A---- C:\Windows\system32\mshtml.dll 2010-08-12 22:17:09 ----A---- C:\Windows\system32\ieframe.dll 2010-08-12 22:17:06 ----A---- C:\Windows\system32\urlmon.dll 2010-08-12 22:17:06 ----A---- C:\Windows\system32\msfeeds.dll 2010-08-12 22:17:05 ----A---- C:\Windows\system32\wininet.dll 2010-08-12 22:17:05 ----A---- C:\Windows\system32\iedkcs32.dll 2010-08-12 22:17:05 ----A---- C:\Windows\system32\ie4uinit.exe 2010-08-12 22:17:04 ----A---- C:\Windows\system32\occache.dll 2010-08-12 22:17:04 ----A---- C:\Windows\system32\mstime.dll 2010-08-12 22:17:04 ----A---- C:\Windows\system32\ieui.dll 2010-08-12 22:17:03 ----A---- C:\Windows\system32\msfeedsbs.dll 2010-08-12 22:17:03 ----A---- C:\Windows\system32\ieUnatt.exe 2010-08-12 22:17:03 ----A---- C:\Windows\system32\iesysprep.dll 2010-08-12 22:17:03 ----A---- C:\Windows\system32\iesetup.dll 2010-08-12 22:17:03 ----A---- C:\Windows\system32\iernonce.dll 2010-08-12 22:17:03 ----A---- C:\Windows\system32\iepeers.dll 2010-08-12 22:17:02 ----A---- C:\Windows\system32\msfeedssync.exe 2010-08-12 22:17:02 ----A---- C:\Windows\system32\jsproxy.dll 2010-08-12 22:16:43 ----A---- C:\Windows\system32\win32k.sys 2010-08-12 22:16:34 ----A---- C:\Windows\system32\rtutils.dll 2010-08-12 22:16:23 ----A---- C:\Windows\system32\ntkrnlpa.exe 2010-08-12 22:16:21 ----A---- C:\Windows\system32\ntoskrnl.exe 2010-08-12 22:16:14 ----A---- C:\Windows\system32\msxml3.dll 2010-08-12 22:16:03 ----A---- C:\Windows\system32\drivers\srv.sys 2010-08-12 22:16:02 ----A---- C:\Windows\system32\drivers\srv2.sys 2010-08-12 22:15:52 ----A---- C:\Windows\system32\drivers\tcpip.sys 2010-08-09 08:06:22 ----A---- C:\Windows\system32\NlsLexicons0007.dll 2010-08-09 08:06:18 ----A---- C:\Windows\system32\SLsvc.exe 2010-08-09 08:06:18 ----A---- C:\Windows\system32\SLCExt.dll 2010-08-09 08:06:17 ----A---- C:\Windows\system32\FunctionDiscoveryFolder.dll 2010-08-09 08:06:17 ----A---- C:\Windows\system32\DevicePairingWizard.exe 2010-08-09 08:06:15 ----A---- C:\Windows\system32\NlsLexicons0009.dll 2010-08-09 08:06:14 ----A---- C:\Windows\system32\mssrch.dll 2010-08-09 08:06:12 ----A---- C:\Windows\system32\drivers\spsys.sys 2010-08-09 08:06:11 ----A---- C:\Windows\system32\tquery.dll 2010-08-09 08:06:11 ----A---- C:\Windows\system32\PresentationNative_v0300.dll 2010-08-09 08:06:10 ----A---- C:\Windows\system32\scavenge.dll 2010-08-09 08:06:10 ----A---- C:\Windows\system32\RMActivate_isv.exe 2010-08-09 08:06:10 ----A---- C:\Windows\system32\RMActivate.exe 2010-08-09 08:06:10 ----A---- C:\Windows\system32\drivers\hdaudbus.sys 2010-08-09 08:06:09 ----A---- C:\Windows\system32\msi.dll 2010-08-09 08:06:08 ----A---- C:\Windows\system32\imapi2fs.dll 2010-08-09 08:06:07 ----A---- C:\Windows\system32\secproc_isv.dll 2010-08-09 08:06:06 ----A---- C:\Windows\system32\WscEapPr.dll 2010-08-09 08:06:06 ----A---- C:\Windows\system32\wcnwiz2.dll 2010-08-09 08:06:06 ----A---- C:\Windows\system32\sysmain.dll 2010-08-09 08:06:05 ----A---- C:\Windows\system32\icardagt.exe 2010-08-09 08:06:04 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll 2010-08-09 08:06:03 ----A---- C:\Windows\system32\spreview.exe 2010-08-09 08:06:03 ----A---- C:\Windows\system32\EhStorShell.dll 2010-08-09 08:06:02 ----A---- C:\Windows\system32\spinstall.exe 2010-08-09 08:06:02 ----A---- C:\Windows\system32\drmv2clt.dll 2010-08-09 08:06:01 ----A---- C:\Windows\system32\spwizui.dll 2010-08-09 08:06:01 ----A---- C:\Windows\system32\secproc.dll 2010-08-09 08:06:01 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll 2010-08-09 08:06:00 ----A---- C:\Windows\system32\SearchIndexer.exe 2010-08-09 08:06:00 ----A---- C:\Windows\system32\p2psvc.dll 2010-08-09 08:06:00 ----A---- C:\Windows\system32\mssvp.dll 2010-08-09 08:05:59 ----A---- C:\Windows\system32\mssphtb.dll 2010-08-09 08:05:59 ----A---- C:\Windows\system32\mssph.dll 2010-08-09 08:05:59 ----A---- C:\Windows\system32\MSMPEG2VDEC.DLL 2010-08-09 08:05:59 ----A---- C:\Windows\system32\imapi2.dll 2010-08-09 08:05:58 ----A---- C:\Windows\system32\sdohlp.dll 2010-08-09 08:05:58 ----A---- C:\Windows\system32\IMJP10K.DLL 2010-08-09 08:05:58 ----A---- C:\Windows\system32\esent.dll 2010-08-09 08:05:57 ----A---- C:\Windows\system32\DevicePairing.dll 2010-08-09 08:05:56 ----A---- C:\Windows\system32\wevtsvc.dll 2010-08-09 08:05:56 ----A---- C:\Windows\system32\sperror.dll 2010-08-09 08:05:56 ----A---- C:\Windows\system32\RMActivate_ssp.exe 2010-08-09 08:05:56 ----A---- C:\Windows\system32\korwbrkr.dll 2010-08-09 08:05:56 ----A---- C:\Windows\system32\IasMigReader.exe 2010-08-09 08:05:55 ----A---- C:\Windows\system32\SLC.dll 2010-08-09 08:05:55 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe 2010-08-09 08:05:55 ----A---- C:\Windows\system32\msshsq.dll 2010-08-09 08:05:54 ----A---- C:\Windows\system32\msjet40.dll 2010-08-09 08:05:54 ----A---- C:\Windows\system32\MPSSVC.dll 2010-08-09 08:05:53 ----A---- C:\Windows\system32\Query.dll 2010-08-09 08:05:53 ----A---- C:\Windows\system32\qmgr.dll 2010-08-09 08:05:52 ----A---- C:\Windows\system32\msexch40.dll 2010-08-09 08:05:52 ----A---- C:\Windows\system32\diagperf.dll 2010-08-09 08:05:51 ----A---- C:\Windows\system32\srchadmin.dll 2010-08-09 08:05:51 ----A---- C:\Windows\system32\P2PGraph.dll 2010-08-09 08:05:51 ----A---- C:\Windows\system32\ole32.dll 2010-08-09 08:05:51 ----A---- C:\Windows\system32\ntdll.dll 2010-08-09 08:05:50 ----A---- C:\Windows\system32\winload.exe 2010-08-09 08:05:50 ----A---- C:\Windows\system32\uDWM.dll 2010-08-09 08:05:50 ----A---- C:\Windows\system32\mmc.exe 2010-08-09 08:05:50 ----A---- C:\Windows\system32\mblctr.exe 2010-08-09 08:05:50 ----A---- C:\Windows\system32\EncDec.dll 2010-08-09 08:05:50 ----A---- C:\Windows\system32\dfsr.exe 2010-08-09 08:05:49 ----A---- C:\Windows\system32\riched20.dll 2010-08-09 08:05:49 ----A---- C:\Windows\system32\IasMigPlugin.dll 2010-08-09 08:05:49 ----A---- C:\Windows\system32\fdBth.dll 2010-08-09 08:05:48 ----A---- C:\Windows\system32\RacEngn.dll 2010-08-09 08:05:47 ----A---- C:\Windows\system32\kernel32.dll 2010-08-09 08:05:46 ----A---- C:\Windows\system32\spoolss.dll 2010-08-09 08:05:46 ----A---- C:\Windows\system32\SearchProtocolHost.exe 2010-08-09 08:05:46 ----A---- C:\Windows\system32\SearchFilterHost.exe 2010-08-09 08:05:46 ----A---- C:\Windows\system32\schedsvc.dll 2010-08-09 08:05:46 ----A---- C:\Windows\system32\milcore.dll 2010-08-09 08:05:46 ----A---- C:\Windows\system32\EhStorAPI.dll 2010-08-09 08:05:46 ----A---- C:\Windows\system32\CertEnroll.dll 2010-08-09 08:05:45 ----A---- C:\Windows\system32\NaturalLanguage6.dll 2010-08-09 08:05:44 ----A---- C:\Windows\system32\msvcp60.dll 2010-08-09 08:05:44 ----A---- C:\Windows\system32\msjtes40.dll 2010-08-09 08:05:44 ----A---- C:\Windows\system32\gpedit.dll 2010-08-09 08:05:44 ----A---- C:\Windows\system32\AuxiliaryDisplayDriverLib.dll 2010-08-09 08:05:43 ----A---- C:\Windows\system32\infocardapi.dll 2010-08-09 08:05:42 ----A---- C:\Windows\system32\WinSAT.exe 2010-08-09 08:05:42 ----A---- C:\Windows\system32\es.dll 2010-08-09 08:05:41 ----A---- C:\Windows\system32\PresentationSettings.exe 2010-08-09 08:05:41 ----A---- C:\Windows\system32\mstext40.dll 2010-08-09 08:05:41 ----A---- C:\Windows\system32\Magnify.exe 2010-08-09 08:05:41 ----A---- C:\Windows\system32\drivers\ntfs.sys 2010-08-09 08:05:41 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll 2010-08-09 08:05:41 ----A---- C:\Windows\system32\advapi32.dll 2010-08-09 08:05:39 ----A---- C:\Windows\system32\WMPhoto.dll 2010-08-09 08:05:39 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll 2010-08-09 08:05:39 ----A---- C:\Windows\system32\WebClnt.dll 2010-08-09 08:05:39 ----A---- C:\Windows\system32\vssapi.dll 2010-08-09 08:05:39 ----A---- C:\Windows\system32\slwmi.dll 2010-08-09 08:05:39 ----A---- C:\Windows\system32\msxbde40.dll 2010-08-09 08:05:39 ----A---- C:\Windows\system32\msexcl40.dll 2010-08-09 08:05:39 ----A---- C:\Windows\system32\comsvcs.dll 2010-08-09 08:05:38 ----A---- C:\Windows\system32\authui.dll 2010-08-09 08:05:37 ----A---- C:\Windows\system32\newdev.dll 2010-08-09 08:05:37 ----A---- C:\Windows\system32\NetProjW.dll 2010-08-09 08:05:37 ----A---- C:\Windows\system32\msrepl40.dll 2010-08-09 08:05:36 ----A---- C:\Windows\system32\rpcss.dll 2010-08-09 08:05:36 ----A---- C:\Windows\system32\propsys.dll 2010-08-09 08:05:36 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2010-08-09 08:05:36 ----A---- C:\Windows\system32\iasrecst.dll 2010-08-09 08:05:36 ----A---- C:\Windows\system32\gpsvc.dll 2010-08-09 08:05:36 ----A---- C:\Windows\system32\eudcedit.exe 2010-08-09 08:05:36 ----A---- C:\Windows\system32\crypt32.dll 2010-08-09 08:05:36 ----A---- C:\Windows\explorer.exe 2010-08-09 08:05:35 ----A---- C:\Windows\system32\setupapi.dll 2010-08-09 08:05:35 ----A---- C:\Windows\system32\mspbde40.dll 2010-08-09 08:05:35 ----A---- C:\Windows\system32\d3d9.dll 2010-08-09 08:05:34 ----A---- C:\Windows\system32\shlwapi.dll 2010-08-09 08:05:34 ----A---- C:\Windows\system32\msrd3x40.dll 2010-08-09 08:05:34 ----A---- C:\Windows\system32\msltus40.dll 2010-08-09 08:05:34 ----A---- C:\Windows\system32\msdtctm.dll 2010-08-09 08:05:34 ----A---- C:\Windows\system32\mfc42.dll 2010-08-09 08:05:34 ----A---- C:\Windows\system32\EhStorPwdMgr.dll 2010-08-09 08:05:34 ----A---- C:\Windows\system32\EhStorAuthn.dll 2010-08-09 08:05:34 ----A---- C:\Windows\system32\davclnt.dll 2010-08-09 08:05:34 ----A---- C:\Windows\system32\browseui.dll 2010-08-09 08:05:33 ----A---- C:\Windows\system32\wevtapi.dll 2010-08-09 08:05:33 ----A---- C:\Windows\system32\user32.dll 2010-08-09 08:05:33 ----A---- C:\Windows\system32\photowiz.dll 2010-08-09 08:05:33 ----A---- C:\Windows\system32\nlhtml.dll 2010-08-09 08:05:33 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys 2010-08-09 08:05:32 ----A---- C:\Windows\system32\samsrv.dll 2010-08-09 08:05:32 ----A---- C:\Windows\system32\ci.dll 2010-08-09 08:05:31 ----A---- C:\Windows\system32\win32spl.dll 2010-08-09 08:05:31 ----A---- C:\Windows\system32\WcnNetsh.dll 2010-08-09 08:05:31 ----A---- C:\Windows\system32\SLCommDlg.dll 2010-08-09 08:05:31 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe 2010-08-09 08:05:31 ----A---- C:\Windows\system32\oleaut32.dll 2010-08-09 08:05:31 ----A---- C:\Windows\system32\IKEEXT.DLL 2010-08-09 08:05:30 ----A---- C:\Windows\system32\netshell.dll 2010-08-09 08:05:30 ----A---- C:\Windows\system32\drivers\rdbss.sys 2010-08-09 08:05:30 ----A---- C:\Windows\system32\compcln.exe 2010-08-09 08:05:30 ----A---- C:\Windows\system32\apds.dll 2010-08-09 08:05:29 ----A---- C:\Windows\system32\xmlfilter.dll 2010-08-09 08:05:29 ----A---- C:\Windows\system32\mswstr10.dll 2010-08-09 08:05:29 ----A---- C:\Windows\system32\audiosrv.dll 2010-08-09 08:05:28 ----A---- C:\Windows\system32\QAGENTRT.DLL 2010-08-09 08:05:28 ----A---- C:\Windows\system32\msvcrt.dll 2010-08-09 08:05:28 ----A---- C:\Windows\system32\msctf.dll 2010-08-09 08:05:28 ----A---- C:\Windows\system32\gdi32.dll 2010-08-09 08:05:28 ----A---- C:\Windows\system32\emdmgmt.dll 2010-08-09 08:05:28 ----A---- C:\Windows\system32\drivers\netio.sys 2010-08-09 08:05:28 ----A---- C:\Windows\system32\drivers\mrxdav.sys 2010-08-09 08:05:27 ----A---- C:\Windows\system32\VSSVC.exe 2010-08-09 08:05:27 ----A---- C:\Windows\system32\mfc42u.dll 2010-08-09 08:05:26 ----A---- C:\Windows\system32\sqlsrv32.dll 2010-08-09 08:05:26 ----A---- C:\Windows\system32\SLUI.exe 2010-08-09 08:05:26 ----A---- C:\Windows\system32\msrd2x40.dll 2010-08-09 08:05:26 ----A---- C:\Windows\system32\eapphost.dll 2010-08-09 08:05:25 ----A---- C:\Windows\system32\winresume.exe 2010-08-09 08:05:25 ----A---- C:\Windows\system32\propdefs.dll 2010-08-09 08:05:25 ----A---- C:\Windows\system32\odbc32.dll 2010-08-09 08:05:25 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS 2010-08-09 08:05:24 ----A---- C:\Windows\system32\shdocvw.dll 2010-08-09 08:05:24 ----A---- C:\Windows\system32\drivers\usbhub.sys 2010-08-09 08:05:23 ----A---- C:\Windows\system32\wevtutil.exe 2010-08-09 08:05:23 ----A---- C:\Windows\system32\mssitlb.dll 2010-08-09 08:05:23 ----A---- C:\Windows\system32\dbgeng.dll 2010-08-09 08:05:22 ----A---- C:\Windows\system32\WsmSvc.dll 2010-08-09 08:05:22 ----A---- C:\Windows\system32\swprv.dll 2010-08-09 08:05:22 ----A---- C:\Windows\system32\mmcndmgr.dll 2010-08-09 08:05:21 ----A---- C:\Windows\system32\vds.exe 2010-08-09 08:05:21 ----A---- C:\Windows\system32\usp10.dll 2010-08-09 08:05:20 ----A---- C:\Windows\system32\netlogon.dll 2010-08-09 08:05:20 ----A---- C:\Windows\system32\msscb.dll 2010-08-09 08:05:20 ----A---- C:\Windows\system32\msctfp.dll 2010-08-09 08:05:20 ----A---- C:\Windows\system32\fdBthProxy.dll 2010-08-09 08:05:20 ----A---- C:\Windows\system32\drvinst.exe 2010-08-09 08:05:20 ----A---- C:\Windows\system32\devmgr.dll 2010-08-09 08:05:20 ----A---- C:\Windows\system32\DevicePairingProxy.dll 2010-08-09 08:05:20 ----A---- C:\Windows\system32\BFE.DLL 2010-08-09 08:05:20 ----A---- C:\Windows\system32\adsldpc.dll 2010-08-09 08:05:19 ----A---- C:\Windows\system32\WMVSDECD.DLL 2010-08-09 08:05:19 ----A---- C:\Windows\system32\Wldap32.dll 2010-08-09 08:05:19 ----A---- C:\Windows\system32\wcnwiz.dll 2010-08-09 08:05:19 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll 2010-08-09 08:05:19 ----A---- C:\Windows\system32\evr.dll 2010-08-09 08:05:18 ----A---- C:\Windows\system32\WindowsCodecs.dll 2010-08-09 08:05:17 ----A---- C:\Windows\system32\services.exe 2010-08-09 08:05:16 ----A---- C:\Windows\system32\wercon.exe 2010-08-09 08:05:16 ----A---- C:\Windows\system32\comdlg32.dll 2010-08-09 08:05:16 ----A---- C:\Windows\system32\adtschema.dll 2010-08-09 08:05:15 ----A---- C:\Windows\system32\wcncsvc.dll 2010-08-09 08:05:15 ----A---- C:\Windows\system32\PortableDeviceApi.dll 2010-08-09 08:05:15 ----A---- C:\Windows\system32\msdtcprx.dll 2010-08-09 08:05:15 ----A---- C:\Windows\system32\msdrm.dll 2010-08-09 08:05:15 ----A---- C:\Windows\system32\mimefilt.dll 2010-08-09 08:05:15 ----A---- C:\Windows\system32\drivers\msiscsi.sys 2010-08-09 08:05:15 ----A---- C:\Windows\system32\certcli.dll 2010-08-09 08:05:14 ----A---- C:\Windows\system32\umpnpmgr.dll 2010-08-09 08:05:14 ----A---- C:\Windows\system32\taskeng.exe 2010-08-09 08:05:14 ----A---- C:\Windows\system32\rtffilt.dll 2010-08-09 08:05:14 ----A---- C:\Windows\system32\reg.exe 2010-08-09 08:05:14 ----A---- C:\Windows\system32\mswdat10.dll 2010-08-09 08:05:14 ----A---- C:\Windows\system32\msjter40.dll 2010-08-09 08:05:14 ----A---- C:\Windows\system32\ipsmsnap.dll 2010-08-09 08:05:14 ----A---- C:\Windows\system32\dnsapi.dll 2010-08-09 08:05:14 ----A---- C:\Windows\system32\certutil.exe 2010-08-09 08:05:13 ----A---- C:\Windows\system32\WMNetMgr.dll 2010-08-09 08:05:13 ----A---- C:\Windows\system32\w32time.dll 2010-08-09 08:05:13 ----A---- C:\Windows\system32\IPSECSVC.DLL 2010-08-09 08:05:13 ----A---- C:\Windows\system32\drivers\usbport.sys 2010-08-09 08:05:12 ----A---- C:\Windows\system32\rsaenh.dll 2010-08-09 08:05:12 ----A---- C:\Windows\system32\msshooks.dll 2010-08-09 08:05:12 ----A---- C:\Windows\system32\msscntrs.dll 2010-08-09 08:05:12 ----A---- C:\Windows\system32\drivers\ndis.sys 2010-08-09 08:05:12 ----A---- C:\Windows\system32\bthserv.dll 2010-08-09 08:05:12 ----A---- C:\Windows\system32\bcrypt.dll 2010-08-09 08:05:11 ----A---- C:\Windows\system32\TsWpfWrp.exe 2010-08-09 08:05:11 ----A---- C:\Windows\system32\msstrc.dll 2010-08-09 08:05:11 ----A---- C:\Windows\system32\msihnd.dll 2010-08-09 08:05:11 ----A---- C:\Windows\system32\MMDevAPI.dll 2010-08-09 08:05:10 ----A---- C:\Windows\system32\netapi32.dll 2010-08-09 08:05:10 ----A---- C:\Windows\system32\mtxclu.dll 2010-08-09 08:05:10 ----A---- C:\Windows\system32\mscories.dll 2010-08-09 08:05:10 ----A---- C:\Windows\system32\inetpp.dll 2010-08-09 08:05:10 ----A---- C:\Windows\system32\hidserv.dll 2010-08-09 08:05:10 ----A---- C:\Windows\system32\fundisc.dll 2010-08-09 08:05:10 ----A---- C:\Windows\system32\cryptsvc.dll 2010-08-09 08:05:09 ----A---- C:\Windows\system32\wmicmiplugin.dll 2010-08-09 08:05:09 ----A---- C:\Windows\system32\termsrv.dll 2010-08-09 08:05:09 ----A---- C:\Windows\system32\profsvc.dll 2010-08-09 08:05:09 ----A---- C:\Windows\system32\gameux.dll 2010-08-09 08:05:09 ----A---- C:\Windows\system32\dhcpcsvc6.dll 2010-08-09 08:05:08 ----A---- C:\Windows\system32\shsvcs.dll 2010-08-09 08:05:08 ----A---- C:\Windows\system32\msiexec.exe 2010-08-09 08:05:08 ----A---- C:\Windows\system32\imapi.dll 2010-08-09 08:05:08 ----A---- C:\Windows\system32\drivers\pci.sys 2010-08-09 08:05:08 ----A---- C:\Windows\system32\drivers\Classpnp.sys 2010-08-09 08:05:07 ----A---- C:\Windows\system32\wdc.dll 2010-08-09 08:05:07 ----A---- C:\Windows\system32\chsbrkr.dll 2010-08-09 08:05:06 ----A---- C:\Windows\system32\rasmans.dll 2010-08-09 08:05:06 ----A---- C:\Windows\system32\pnidui.dll 2010-08-09 08:05:06 ----A---- C:\Windows\system32\iassdo.dll 2010-08-09 08:05:05 ----A---- C:\Windows\system32\spoolsv.exe 2010-08-09 08:05:05 ----A---- C:\Windows\system32\icardres.dll 2010-08-09 08:05:05 ----A---- C:\Windows\system32\drivers\termdd.sys 2010-08-09 08:05:05 ----A---- C:\Windows\system32\drivers\acpi.sys 2010-08-09 08:05:05 ----A---- C:\Windows\system32\autofmt.exe 2010-08-09 08:05:04 ----A---- C:\Windows\system32\wersvc.dll 2010-08-09 08:05:04 ----A---- C:\Windows\system32\slmgr.vbs 2010-08-09 08:05:04 ----A---- C:\Windows\system32\scrrun.dll 2010-08-09 08:05:04 ----A---- C:\Windows\system32\PSHED.DLL 2010-08-09 08:05:04 ----A---- C:\Windows\system32\pdh.dll 2010-08-09 08:05:04 ----A---- C:\Windows\system32\drivers\Storport.sys 2010-08-09 08:05:04 ----A---- C:\Windows\system32\drivers\crashdmp.sys 2010-08-09 08:05:04 ----A---- C:\Windows\system32\drivers\ataport.sys 2010-08-09 08:05:04 ----A---- C:\Windows\system32\dhcpcsvc.dll 2010-08-09 08:05:04 ----A---- C:\Windows\system32\clfs.sys 2010-08-09 08:05:03 ----A---- C:\Windows\system32\CertEnrollUI.dll 2010-08-09 08:05:03 ----A---- C:\Windows\system32\azroles.dll 2010-08-09 08:05:02 ----A---- C:\Windows\system32\pidgenx.dll 2010-08-09 08:05:02 ----A---- C:\Windows\system32\drivers\partmgr.sys 2010-08-09 08:05:01 ----A---- C:\Windows\system32\wmpmde.dll 2010-08-09 08:05:01 ----A---- C:\Windows\system32\winlogon.exe 2010-08-09 08:05:01 ----A---- C:\Windows\system32\SyncCenter.dll 2010-08-09 08:05:00 ----A---- C:\Windows\system32\SLUINotify.dll 2010-08-09 08:05:00 ----A---- C:\Windows\system32\msjetoledb40.dll 2010-08-09 08:05:00 ----A---- C:\Windows\system32\drivers\mup.sys 2010-08-09 08:05:00 ----A---- C:\Windows\system32\comuid.dll 2010-08-09 08:04:59 ----A---- C:\Windows\system32\WindowsCodecsExt.dll 2010-08-09 08:04:59 ----A---- C:\Windows\system32\spp.dll 2010-08-09 08:04:59 ----A---- C:\Windows\system32\sethc.exe 2010-08-09 08:04:59 ----A---- C:\Windows\system32\ncrypt.dll 2010-08-09 08:04:59 ----A---- C:\Windows\system32\kd1394.dll 2010-08-09 08:04:59 ----A---- C:\Windows\system32\iassam.dll 2010-08-09 08:04:59 ----A---- C:\Windows\system32\drivers\disk.sys 2010-08-09 08:04:59 ----A---- C:\Windows\system32\certmgr.dll 2010-08-09 08:04:58 ----A---- C:\Windows\system32\wisptis.exe 2010-08-09 08:04:58 ----A---- C:\Windows\system32\untfs.dll 2010-08-09 08:04:58 ----A---- C:\Windows\system32\taskcomp.dll 2010-08-09 08:04:58 ----A---- C:\Windows\system32\scrobj.dll 2010-08-09 08:04:58 ----A---- C:\Windows\system32\dwm.exe 2010-08-09 08:04:58 ----A---- C:\Windows\system32\drivers\volmgrx.sys 2010-08-09 08:04:58 ----A---- C:\Windows\system32\drivers\pciidex.sys 2010-08-09 08:04:58 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS 2010-08-09 08:04:58 ----A---- C:\Windows\system32\autochk.exe 2010-08-09 08:04:57 ----A---- C:\Windows\system32\winsrv.dll 2010-08-09 08:04:57 ----A---- C:\Windows\system32\printui.dll 2010-08-09 08:04:57 ----A---- C:\Windows\system32\iasnap.dll 2010-08-09 08:04:57 ----A---- C:\Windows\system32\drivers\volsnap.sys 2010-08-09 08:04:57 ----A---- C:\Windows\system32\drivers\pciide.sys 2010-08-09 08:04:57 ----A---- C:\Windows\system32\drivers\msrpc.sys 2010-08-09 08:04:57 ----A---- C:\Windows\system32\drivers\fltMgr.sys 2010-08-09 08:04:57 ----A---- C:\Windows\system32\drivers\ecache.sys 2010-08-09 08:04:57 ----A---- C:\Windows\system32\autoconv.exe 2010-08-09 08:04:56 ----A---- C:\Windows\system32\onex.dll 2010-08-09 08:04:56 ----A---- C:\Windows\system32\kdcom.dll 2010-08-09 08:04:56 ----A---- C:\Windows\system32\drivers\Dumpata.sys 2010-08-09 08:04:56 ----A---- C:\Windows\system32\cscript.exe 2010-08-09 08:04:56 ----A---- C:\Windows\system32\basecsp.dll 2010-08-09 08:04:55 ----A---- C:\Windows\system32\wow32.dll 2010-08-09 08:04:55 ----A---- C:\Windows\system32\userenv.dll 2010-08-09 08:04:55 ----A---- C:\Windows\system32\osk.exe 2010-08-09 08:04:55 ----A---- C:\Windows\system32\mswsock.dll 2010-08-09 08:04:55 ----A---- C:\Windows\system32\audiodg.exe 2010-08-09 08:04:54 ----A---- C:\Windows\system32\winmm.dll 2010-08-09 08:04:54 ----A---- C:\Windows\system32\spcmsg.dll 2010-08-09 08:04:54 ----A---- C:\Windows\system32\RelMon.dll 2010-08-09 08:04:54 ----A---- C:\Windows\system32\kdusb.dll 2010-08-09 08:04:54 ----A---- C:\Windows\system32\drivers\atapi.sys 2010-08-09 08:04:53 ----A---- C:\Windows\system32\WinSCard.dll 2010-08-09 08:04:53 ----A---- C:\Windows\system32\rdpencom.dll 2010-08-09 08:04:53 ----A---- C:\Windows\system32\msftedit.dll 2010-08-09 08:04:53 ----A---- C:\Windows\system32\drivers\netbt.sys 2010-08-09 08:04:52 ----A---- C:\Windows\system32\WerFaultSecure.exe 2010-08-09 08:04:52 ----A---- C:\Windows\system32\offfilt.dll 2010-08-09 08:04:52 ----A---- C:\Windows\system32\dnsrslvr.dll 2010-08-09 08:04:51 ----A---- C:\Windows\system32\wsepno.dll 2010-08-09 08:04:51 ----A---- C:\Windows\system32\WerFault.exe 2010-08-09 08:04:51 ----A---- C:\Windows\system32\Utilman.exe 2010-08-09 08:04:51 ----A---- C:\Windows\system32\stobject.dll 2010-08-09 08:04:51 ----A---- C:\Windows\system32\secproc_ssp_isv.dll 2010-08-09 08:04:51 ----A---- C:\Windows\system32\secproc_ssp.dll 2010-08-09 08:04:50 ----A---- C:\Windows\system32\SndVol.exe 2010-08-09 08:04:50 ----A---- C:\Windows\system32\prnntfy.dll 2010-08-09 08:04:50 ----A---- C:\Windows\system32\msnetobj.dll 2010-08-09 08:04:50 ----A---- C:\Windows\system32\mscms.dll 2010-08-09 08:04:50 ----A---- C:\Windows\system32\mfplat.dll 2010-08-09 08:04:50 ----A---- C:\Windows\system32\mcmde.dll 2010-08-09 08:04:50 ----A---- C:\Windows\system32\diskraid.exe 2010-08-09 08:04:50 ----A---- C:\Windows\system32\apphelp.dll 2010-08-09 08:04:50 ----A---- C:\Windows\system32\adsmsext.dll 2010-08-09 08:04:49 ----A---- C:\Windows\system32\wscript.exe 2010-08-09 08:04:49 ----A---- C:\Windows\system32\wiaservc.dll 2010-08-09 08:04:49 ----A---- C:\Windows\system32\ulib.dll 2010-08-09 08:04:49 ----A---- C:\Windows\system32\sysclass.dll 2010-08-09 08:04:49 ----A---- C:\Windows\system32\odbccp32.dll 2010-08-09 08:04:49 ----A---- C:\Windows\system32\iasdatastore.dll 2010-08-09 08:04:48 ----A---- C:\Windows\system32\wscntfy.dll 2010-08-09 08:04:48 ----A---- C:\Windows\system32\rastapi.dll 2010-08-09 08:04:48 ----A---- C:\Windows\system32\pnpsetup.dll 2010-08-09 08:04:48 ----A---- C:\Windows\system32\IPHLPAPI.DLL 2010-08-09 08:04:48 ----A---- C:\Windows\system32\fdProxy.dll 2010-08-09 08:04:48 ----A---- C:\Windows\system32\dsound.dll 2010-08-09 08:04:48 ----A---- C:\Windows\system32\cryptui.dll 2010-08-09 08:04:47 ----A---- C:\Windows\system32\wlangpui.dll 2010-08-09 08:04:47 ----A---- C:\Windows\system32\vdsdyn.dll 2010-08-09 08:04:47 ----A---- C:\Windows\system32\ipsecsnp.dll 2010-08-09 08:04:47 ----A---- C:\Windows\system32\iashlpr.dll 2010-08-09 08:04:47 ----A---- C:\Windows\system32\gpapi.dll 2010-08-09 08:04:47 ----A---- C:\Windows\system32\diskpart.exe 2010-08-09 08:04:47 ----A---- C:\Windows\system32\brcpl.dll 2010-08-09 08:04:46 ----A---- C:\Windows\system32\wscsvc.dll 2010-08-09 08:04:46 ----A---- C:\Windows\system32\WMVENCOD.DLL 2010-08-09 08:04:46 ----A---- C:\Windows\system32\regsvc.dll 2010-08-09 08:04:46 ----A---- C:\Windows\system32\rasapi32.dll 2010-08-09 08:04:46 ----A---- C:\Windows\system32\ntprint.dll 2010-08-09 08:04:46 ----A---- C:\Windows\system32\logman.exe 2010-08-09 08:04:45 ----A---- C:\Windows\system32\zipfldr.dll 2010-08-09 08:04:45 ----A---- C:\Windows\system32\wusa.exe 2010-08-09 08:04:45 ----A---- C:\Windows\system32\wshext.dll 2010-08-09 08:04:45 ----A---- C:\Windows\system32\wpccpl.dll 2010-08-09 08:04:45 ----A---- C:\Windows\system32\mscorier.dll 2010-08-09 08:04:45 ----A---- C:\Windows\system32\iasrad.dll 2010-08-09 08:04:45 ----A---- C:\Windows\system32\findstr.exe 2010-08-09 08:04:44 ----A---- C:\Windows\system32\netcenter.dll 2010-08-09 08:04:43 ----A---- C:\Windows\system32\wsnmp32.dll 2010-08-09 08:04:43 ----A---- C:\Windows\system32\wer.dll 2010-08-09 08:04:43 ----A---- C:\Windows\system32\themecpl.dll 2010-08-09 08:04:43 ----A---- C:\Windows\system32\rasdlg.dll 2010-08-09 08:04:43 ----A---- C:\Windows\system32\iassvcs.dll 2010-08-09 08:04:43 ----A---- C:\Windows\system32\drivers\usbehci.sys 2010-08-09 08:04:41 ----A---- C:\Windows\system32\uxsms.dll 2010-08-09 08:04:41 ----A---- C:\Windows\system32\srvsvc.dll 2010-08-09 08:04:41 ----A---- C:\Windows\system32\slcc.dll 2010-08-09 08:04:41 ----A---- C:\Windows\system32\scansetting.dll 2010-08-09 08:04:41 ----A---- C:\Windows\system32\ntmarta.dll 2010-08-09 08:04:41 ----A---- C:\Windows\system32\msutb.dll 2010-08-09 08:04:41 ----A---- C:\Windows\system32\mstlsapi.dll 2010-08-09 08:04:41 ----A---- C:\Windows\system32\mssprxy.dll 2010-08-09 08:04:41 ----A---- C:\Windows\system32\iasads.dll 2010-08-09 08:04:40 ----A---- C:\Windows\system32\powrprof.dll 2010-08-09 08:04:40 ----A---- C:\Windows\system32\powercpl.dll 2010-08-09 08:04:40 ----A---- C:\Windows\system32\PerfCenterCPL.dll 2010-08-09 08:04:40 ----A---- C:\Windows\system32\networkmap.dll 2010-08-09 08:04:40 ----A---- C:\Windows\system32\mstsc.exe 2010-08-09 08:04:40 ----A---- C:\Windows\system32\iasacct.dll 2010-08-09 08:04:40 ----A---- C:\Windows\system32\drivers\ks.sys 2010-08-09 08:04:39 ----A---- C:\Windows\system32\sud.dll 2010-08-09 08:04:39 ----A---- C:\Windows\system32\newdev.exe 2010-08-09 08:04:39 ----A---- C:\Windows\system32\dot3svc.dll 2010-08-09 08:04:39 ----A---- C:\Windows\system32\connect.dll 2010-08-09 08:04:39 ----A---- C:\Windows\system32\authz.dll 2010-08-09 08:04:38 ----A---- C:\Windows\system32\systemcpl.dll 2010-08-09 08:04:38 ----A---- C:\Windows\system32\pcaui.dll 2010-08-09 08:04:37 ----A---- C:\Windows\system32\themeui.dll 2010-08-09 08:04:37 ----A---- C:\Windows\system32\samlib.dll 2010-08-09 08:04:37 ----A---- C:\Windows\system32\accessibilitycpl.dll 2010-08-09 08:04:36 ----A---- C:\Windows\system32\usercpl.dll 2010-08-09 08:04:36 ----A---- C:\Windows\system32\qdvd.dll 2010-08-09 08:04:36 ----A---- C:\Windows\system32\mmci.dll 2010-08-09 08:04:36 ----A---- C:\Windows\system32\autoplay.dll 2010-08-09 08:04:35 ----A---- C:\Windows\system32\wlanpref.dll 2010-08-09 08:04:35 ----A---- C:\Windows\system32\rpchttp.dll 2010-08-09 08:04:35 ----A---- C:\Windows\system32\regapi.dll 2010-08-09 08:04:35 ----A---- C:\Windows\system32\msinfo32.exe 2010-08-09 08:04:34 ----A---- C:\Windows\system32\wpcao.dll 2010-08-09 08:04:34 ----A---- C:\Windows\system32\vdsutil.dll 2010-08-09 08:04:34 ----A---- C:\Windows\system32\tapisrv.dll 2010-08-09 08:04:34 ----A---- C:\Windows\system32\scksp.dll 2010-08-09 08:04:34 ----A---- C:\Windows\system32\scesrv.dll 2010-08-09 08:04:34 ----A---- C:\Windows\system32\psisdecd.dll 2010-08-09 08:04:34 ----A---- C:\Windows\system32\mpr.dll 2010-08-09 08:04:34 ----A---- C:\Windows\system32\feclient.dll 2010-08-09 08:04:33 ----A---- C:\Windows\system32\rekeywiz.exe 2010-08-09 08:04:33 ----A---- C:\Windows\system32\oleprn.dll 2010-08-09 08:04:33 ----A---- C:\Windows\system32\imm32.dll 2010-08-09 08:04:33 ----A---- C:\Windows\system32\Faultrep.dll 2010-08-09 08:04:33 ----A---- C:\Windows\system32\drivers\exfat.sys 2010-08-09 08:04:33 ----A---- C:\Windows\system32\dot3msm.dll 2010-08-09 08:04:33 ----A---- C:\Windows\system32\AudioSes.dll 2010-08-09 08:04:32 ----A---- C:\Windows\system32\wscisvif.dll 2010-08-09 08:04:32 ----A---- C:\Windows\system32\sdclt.exe 2010-08-09 08:04:32 ----A---- C:\Windows\system32\ncryptui.dll 2010-08-09 08:04:32 ----A---- C:\Windows\system32\iaspolcy.dll 2010-08-09 08:04:32 ----A---- C:\Windows\system32\dpapimig.exe 2010-08-09 08:04:32 ----A---- C:\Windows\system32\DeviceEject.exe 2010-08-09 08:04:31 ----A---- C:\Windows\system32\scecli.dll 2010-08-09 08:04:31 ----A---- C:\Windows\system32\rasgcw.dll 2010-08-09 08:04:31 ----A---- C:\Windows\system32\qedit.dll 2010-08-09 08:04:31 ----A---- C:\Windows\system32\pnpui.dll 2010-08-09 08:04:31 ----A---- C:\Windows\system32\perfdisk.dll 2010-08-09 08:04:31 ----A---- C:\Windows\system32\hdwwiz.exe 2010-08-09 08:04:31 ----A---- C:\Windows\system32\certreq.exe 2010-08-09 08:04:30 ----A---- C:\Windows\system32\TSTheme.exe 2010-08-09 08:04:30 ----A---- C:\Windows\system32\spwinsat.dll 2010-08-09 08:04:30 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll 2010-08-09 08:04:30 ----A---- C:\Windows\system32\rasplap.dll 2010-08-09 08:04:30 ----A---- C:\Windows\system32\FWPUCLNT.DLL 2010-08-09 08:04:29 ----A---- C:\Windows\system32\whealogr.dll 2010-08-09 08:04:29 ----A---- C:\Windows\system32\tcpmon.dll 2010-08-09 08:04:29 ----A---- C:\Windows\system32\tcpipcfg.dll 2010-08-09 08:04:29 ----A---- C:\Windows\system32\srcore.dll 2010-08-09 08:04:29 ----A---- C:\Windows\system32\PnPUnattend.exe 2010-08-09 08:04:29 ----A---- C:\Windows\system32\fdWSD.dll 2010-08-09 08:04:29 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys 2010-08-09 08:04:29 ----A---- C:\Windows\system32\drivers\USBCAMD.sys 2010-08-09 08:04:29 ----A---- C:\Windows\system32\drivers\portcls.sys 2010-08-09 08:04:29 ----A---- C:\Windows\system32\cmmon32.exe 2010-08-09 08:04:29 ----A---- C:\Windows\system32\cmdial32.dll 2010-08-09 08:04:28 ----A---- C:\Windows\system32\SnippingTool.exe 2010-08-09 08:04:28 ----A---- C:\Windows\system32\SCardSvr.dll 2010-08-09 08:04:28 ----A---- C:\Windows\system32\raschap.dll 2010-08-09 08:04:28 ----A---- C:\Windows\system32\MSVidCtl.dll 2010-08-09 08:04:28 ----A---- C:\Windows\system32\fontext.dll 2010-08-09 08:04:28 ----A---- C:\Windows\system32\drivers\afd.sys 2010-08-09 08:04:28 ----A---- C:\Windows\system32\conime.exe 2010-08-09 08:04:27 ----A---- C:\Windows\system32\WMVXENCD.DLL 2010-08-09 08:04:27 ----A---- C:\Windows\system32\wlanui.dll 2010-08-09 08:04:27 ----A---- C:\Windows\system32\wiaaut.dll 2010-08-09 08:04:27 ----A---- C:\Windows\system32\shwebsvc.dll 2010-08-09 08:04:27 ----A---- C:\Windows\system32\rasppp.dll 2010-08-09 08:04:27 ----A---- C:\Windows\system32\PnPutil.exe 2010-08-09 08:04:27 ----A---- C:\Windows\system32\dsprop.dll 2010-08-09 08:04:27 ----A---- C:\Windows\system32\drivers\npfs.sys 2010-08-09 08:04:26 ----A---- C:\Windows\system32\oobefldr.dll 2010-08-09 08:04:26 ----A---- C:\Windows\system32\drivers\tdx.sys 2010-08-09 08:04:26 ----A---- C:\Windows\system32\dimsroam.dll 2010-08-09 08:04:25 ----A---- C:\Windows\system32\shsetup.dll 2010-08-09 08:04:25 ----A---- C:\Windows\system32\rasmontr.dll 2010-08-09 08:04:25 ----A---- C:\Windows\system32\mscandui.dll 2010-08-09 08:04:25 ----A---- C:\Windows\system32\modemui.dll 2010-08-09 08:04:25 ----A---- C:\Windows\system32\drivers\pacer.sys 2010-08-09 08:04:24 ----A---- C:\Windows\system32\wmdrmsdk.dll 2010-08-09 08:04:24 ----A---- C:\Windows\system32\wlgpclnt.dll 2010-08-09 08:04:24 ----A---- C:\Windows\system32\drivers\fastfat.sys 2010-08-09 08:04:24 ----A---- C:\Windows\system32\dataclen.dll 2010-08-09 08:04:24 ----A---- C:\Windows\system32\chtbrkr.dll 2010-08-09 08:04:24 ----A---- C:\Windows\system32\blackbox.dll 2010-08-09 08:04:23 ----A---- C:\Windows\system32\WSDMon.dll 2010-08-09 08:04:23 ----A---- C:\Windows\system32\wmpeffects.dll 2010-08-09 08:04:23 ----A---- C:\Windows\system32\smss.exe 2010-08-09 08:04:23 ----A---- C:\Windows\system32\rdpwsx.dll 2010-08-09 08:04:23 ----A---- C:\Windows\system32\netplwiz.dll 2010-08-09 08:04:23 ----A---- C:\Windows\system32\credui.dll 2010-08-09 08:04:23 ----A---- C:\Windows\system32\certprop.dll 2010-08-09 08:04:22 ----A---- C:\Windows\system32\wscapi.dll 2010-08-09 08:04:22 ----A---- C:\Windows\system32\wpcsvc.dll 2010-08-09 08:04:22 ----A---- C:\Windows\system32\networkexplorer.dll 2010-08-09 08:04:22 ----A---- C:\Windows\system32\msscp.dll 2010-08-09 08:04:22 ----A---- C:\Windows\system32\logagent.exe 2010-08-09 08:04:22 ----A---- C:\Windows\system32\InkEd.dll 2010-08-09 08:04:22 ----A---- C:\Windows\system32\ifmon.dll 2010-08-09 08:04:22 ----A---- C:\Windows\system32\gpresult.exe 2010-08-09 08:04:22 ----A---- C:\Windows\system32\drivers\rmcast.sys 2010-08-09 08:04:22 ----A---- C:\Windows\system32\drivers\ohci1394.sys 2010-08-09 08:04:22 ----A---- C:\Windows\system32\cipher.exe 2010-08-09 08:04:21 ----A---- C:\Windows\system32\thawbrkr.dll 2010-08-09 08:04:21 ----A---- C:\Windows\system32\softkbd.dll 2010-08-09 08:04:21 ----A---- C:\Windows\system32\sendmail.dll 2010-08-09 08:04:21 ----A---- C:\Windows\system32\msimtf.dll 2010-08-09 08:04:21 ----A---- C:\Windows\system32\drivers\watchdog.sys 2010-08-09 08:04:20 ----A---- C:\Windows\system32\olepro32.dll 2010-08-09 08:04:20 ----A---- C:\Windows\system32\msctfui.dll 2010-08-09 08:04:20 ----A---- C:\Windows\system32\MediaMetadataHandler.dll 2010-08-09 08:04:20 ----A---- C:\Windows\system32\drivers\smb.sys 2010-08-09 08:04:20 ----A---- C:\Windows\system32\drivers\hidusb.sys 2010-08-09 08:04:20 ----A---- C:\Windows\system32\dmsynth.dll 2010-08-09 08:04:20 ----A---- C:\Windows\system32\Apphlpdm.dll 2010-08-09 08:04:19 ----A---- C:\Windows\system32\version.dll 2010-08-09 08:04:19 ----A---- C:\Windows\system32\puiapi.dll 2010-08-09 08:04:19 ----A---- C:\Windows\system32\input.dll 2010-08-09 08:04:19 ----A---- C:\Windows\system32\ExplorerFrame.dll 2010-08-09 08:04:19 ----A---- C:\Windows\system32\drmmgrtn.dll 2010-08-09 08:04:19 ----A---- C:\Windows\system32\drivers\udfs.sys 2010-08-09 08:04:19 ----A---- C:\Windows\system32\cdd.dll 2010-08-09 08:04:18 ----A---- C:\Windows\system32\wshbth.dll 2010-08-09 08:04:18 ----A---- C:\Windows\system32\SLLUA.exe 2010-08-09 08:04:18 ----A---- C:\Windows\system32\msisip.dll 2010-08-09 08:04:18 ----A---- C:\Windows\system32\mprapi.dll 2010-08-09 08:04:18 ----A---- C:\Windows\system32\fc.exe 2010-08-09 08:04:16 ----A---- C:\Windows\system32\drivers\rdpwd.sys 2010-08-09 08:04:13 ----A---- C:\Windows\system32\fdSSDP.dll 2010-08-09 08:04:12 ----A---- C:\Windows\system32\dmusic.dll 2010-08-09 08:04:11 ----A---- C:\Windows\system32\MsCtfMonitor.dll 2010-08-09 08:04:11 ----A---- C:\Windows\system32\drivers\ndiswan.sys 2010-08-09 08:04:10 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll 2010-08-09 08:04:10 ----A---- C:\Windows\system32\msjint40.dll 2010-08-09 08:04:10 ----A---- C:\Windows\system32\l2nacp.dll 2010-08-09 08:04:10 ----A---- C:\Windows\system32\eapp3hst.dll 2010-08-09 08:04:10 ----A---- C:\Windows\system32\cscapi.dll 2010-08-09 08:04:09 ----A---- C:\Windows\system32\ftp.exe 2010-08-09 08:04:08 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll 2010-08-09 08:04:08 ----A---- C:\Windows\system32\cscdll.dll 2010-08-09 08:04:07 ----A---- C:\Windows\system32\wsdchngr.dll 2010-08-09 08:04:06 ----A---- C:\Windows\system32\SMBHelperClass.dll 2010-08-09 08:04:06 ----A---- C:\Windows\system32\PortableDeviceTypes.dll 2010-08-09 08:04:05 ----A---- C:\Windows\system32\Storprop.dll 2010-08-09 08:04:05 ----A---- C:\Windows\system32\bthci.dll 2010-08-09 08:04:04 ----A---- C:\Windows\system32\rasdial.exe 2010-08-09 08:04:04 ----A---- C:\Windows\system32\rasdiag.dll 2010-08-09 08:04:04 ----A---- C:\Windows\system32\fdWCN.dll 2010-08-09 08:04:04 ----A---- C:\Windows\system32\bthudtask.exe 2010-08-09 08:04:03 ----A---- C:\Windows\system32\eappcfg.dll 2010-08-09 08:04:03 ----A---- C:\Windows\system32\dot3cfg.dll 2010-08-09 08:04:02 ----A---- C:\Windows\system32\ipconfig.exe 2010-08-09 08:04:02 ----A---- C:\Windows\system32\drivers\rassstp.sys 2010-08-09 08:04:02 ----A---- C:\Windows\system32\CHxReadingStringIME.dll 2010-08-09 08:04:01 ----A---- C:\Windows\system32\tscupgrd.exe 2010-08-09 08:04:01 ----A---- C:\Windows\system32\slcinst.dll 2010-08-09 08:04:00 ----A---- C:\Windows\system32\ocsetup.exe 2010-08-09 08:04:00 ----A---- C:\Windows\system32\nslookup.exe 2010-08-09 08:04:00 ----A---- C:\Windows\system32\networkitemfactory.dll 2010-08-09 08:04:00 ----A---- C:\Windows\system32\eappgnui.dll 2010-08-09 08:04:00 ----A---- C:\Windows\system32\drivers\hidclass.sys 2010-08-09 08:03:59 ----A---- C:\Windows\system32\mmcico.dll 2010-08-09 08:03:59 ----A---- C:\Windows\system32\hbaapi.dll 2010-08-09 08:03:59 ----A---- C:\Windows\system32\FwRemoteSvr.dll 2010-08-09 08:03:59 ----A---- C:\Windows\system32\fdeploy.dll 2010-08-09 08:03:59 ----A---- C:\Windows\system32\drivers\dfsc.sys 2010-08-09 08:03:58 ----A---- C:\Windows\system32\PNPXAssoc.dll 2010-08-09 08:03:58 ----A---- C:\Windows\system32\gpupdate.exe 2010-08-09 08:03:58 ----A---- C:\Windows\system32\drivers\nwifi.sys 2010-08-09 08:03:58 ----A---- C:\Windows\system32\drivers\cdrom.sys 2010-08-09 08:03:57 ----A---- C:\Windows\system32\csrstub.exe 2010-08-09 08:03:57 ----A---- C:\Windows\system32\cbsra.exe 2010-08-09 08:03:57 ----A---- C:\Windows\system32\bitsigd.dll 2010-08-09 08:03:56 ----A---- C:\Windows\system32\NcdProp.dll 2010-08-09 08:03:56 ----A---- C:\Windows\system32\iscsilog.dll 2010-08-09 08:03:55 ----A---- C:\Windows\system32\vdmdbg.dll 2010-08-09 08:03:55 ----A---- C:\Windows\system32\odbcconf.dll 2010-08-09 08:03:55 ----A---- C:\Windows\system32\drivers\dxg.sys 2010-08-09 08:03:54 ----A---- C:\Windows\system32\winrnr.dll 2010-08-09 08:03:54 ----A---- C:\Windows\system32\slwga.dll 2010-08-09 08:03:54 ----A---- C:\Windows\system32\midimap.dll 2010-08-09 08:03:54 ----A---- C:\Windows\system32\inetppui.dll 2010-08-09 08:03:54 ----A---- C:\Windows\system32\drivers\Diskdump.sys 2010-08-09 08:03:52 ----A---- C:\Windows\system32\drivers\stream.sys 2010-08-09 08:03:52 ----A---- C:\Windows\system32\drivers\RNDISMP.sys 2010-08-09 08:03:51 ----A---- C:\Windows\system32\drivers\usbohci.sys 2010-08-09 08:03:51 ----A---- C:\Windows\system32\drivers\bridge.sys 2010-08-09 08:03:50 ----A---- C:\Windows\system32\drivers\usb8023.sys 2010-08-09 08:03:50 ----A---- C:\Windows\system32\drivers\raspppoe.sys 2010-08-09 08:03:49 ----A---- C:\Windows\system32\msimsg.dll 2010-08-09 08:03:49 ----A---- C:\Windows\system32\f3ahvoas.dll 2010-08-09 08:03:15 ----A---- C:\Windows\system32\SmiEngine.dll 2010-08-09 08:03:09 ----A---- C:\Windows\system32\wdscore.dll 2010-08-09 08:03:09 ----A---- C:\Windows\system32\PkgMgr.exe 2010-08-09 08:02:50 ----A---- C:\Windows\system32\drvstore.dll 2010-08-05 19:15:21 ----A---- C:\Windows\system32\PresentationHostProxy.dll 2010-08-05 19:15:21 ----A---- C:\Windows\system32\PresentationHost.exe 2010-08-05 19:15:21 ----A---- C:\Windows\system32\netfxperf.dll 2010-08-05 19:15:21 ----A---- C:\Windows\system32\mscoree.dll 2010-08-05 19:15:21 ----A---- C:\Windows\system32\dfshim.dll 2010-08-05 13:42:30 ----A---- C:\Windows\system32\inetcomm.dll 2010-08-05 13:41:33 ----A---- C:\Windows\system32\tzres.dll 2010-08-05 13:41:08 ----A---- C:\Windows\system32\asycfilt.dll 2010-08-05 13:41:05 ----A---- C:\Windows\system32\atmfd.dll 2010-08-05 13:41:04 ----A---- C:\Windows\system32\atmlib.dll 2010-08-05 13:40:40 ----A---- C:\Windows\system32\shell32.dll 2010-08-04 12:38:52 ----D---- C:\PerfLogs 2010-08-04 11:57:14 ----D---- C:\Program Files\Ask.com 2010-08-04 11:56:24 ----D---- C:\Program Files\uTorrent 2010-08-04 11:55:26 ----D---- C:\Users\stephanie\AppData\Roaming\uTorrent 2010-08-04 11:25:11 ----D---- C:\Users\stephanie\AppData\Roaming\Malwarebytes 2010-08-04 11:25:08 ----D---- C:\ProgramData\Malwarebytes 2010-08-04 11:25:08 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2010-08-04 11:25:08 ----A---- C:\Windows\system32\drivers\mbamcatchme.sys 2010-08-04 11:25:08 ----A---- C:\Windows\system32\drivers\mbam.sys 2010-08-04 11:02:33 ----D---- C:\Program Files\CCleaner ======List of files/folders modified in the last 1 months====== 2010-08-24 11:08:53 ----D---- C:\Windows\Prefetch 2010-08-24 11:08:44 ----D---- C:\Windows\Temp 2010-08-24 10:56:42 ----RD---- C:\Program Files 2010-08-24 10:54:25 ----D---- C:\Windows\SMINST 2010-08-24 10:35:44 ----SHD---- C:\System Volume Information 2010-08-18 13:03:45 ----D---- C:\Windows\Microsoft.NET 2010-08-18 13:03:39 ----RSD---- C:\Windows\assembly 2010-08-18 12:36:46 ----D---- C:\Windows\System32 2010-08-18 12:36:45 ----D---- C:\Windows\inf 2010-08-18 12:36:45 ----A---- C:\Windows\system32\PerfStringBackup.INI 2010-08-18 12:27:35 ----D---- C:\Windows\system32\catroot2 2010-08-18 12:20:40 ----D---- C:\Windows\winsxs 2010-08-18 12:18:41 ----D---- C:\Windows\system32\wbem 2010-08-18 09:28:07 ----D---- C:\Windows\system32\catroot 2010-08-18 09:07:28 ----D---- C:\Windows\system32\WDI 2010-08-17 23:48:32 ----D---- C:\Windows\rescache 2010-08-17 23:29:25 ----D---- C:\Windows 2010-08-17 23:29:07 ----SHD---- C:\Boot 2010-08-17 23:23:19 ----D---- C:\Windows\system32\drivers\UMDF 2010-08-17 23:16:28 ----D---- C:\Program Files\Windows Mail 2010-08-17 23:16:28 ----D---- C:\Program Files\Windows Calendar 2010-08-17 23:16:28 ----D---- C:\Program Files\Movie Maker 2010-08-17 23:16:26 ----D---- C:\Program Files\Windows Sidebar 2010-08-17 23:16:26 ----D---- C:\Program Files\Internet Explorer 2010-08-17 23:16:25 ----D---- C:\Program Files\Windows Media Player 2010-08-17 23:16:24 ----D---- C:\Program Files\Windows Collaboration 2010-08-17 23:16:23 ----D---- C:\Program Files\Windows Journal 2010-08-17 23:16:20 ----D---- C:\Program Files\Windows Photo Gallery 2010-08-17 23:16:20 ----D---- C:\Program Files\Common Files\System 2010-08-17 23:16:09 ----D---- C:\Program Files\Windows Defender 2010-08-17 23:16:08 ----D---- C:\Windows\servicing 2010-08-17 23:16:08 ----D---- C:\Windows\ehome 2010-08-17 23:15:27 ----D---- C:\Windows\IME 2010-08-17 23:15:26 ----D---- C:\Windows\system32\lv-LV 2010-08-17 23:15:25 ----D---- C:\Windows\system32\XPSViewer 2010-08-17 23:15:25 ----D---- C:\Windows\system32\hr-HR 2010-08-17 23:15:25 ----D---- C:\Windows\system32\da-DK 2010-08-17 23:15:24 ----D---- C:\Windows\system32\sk-SK 2010-08-17 23:15:24 ----D---- C:\Windows\system32\ko-KR 2010-08-17 23:15:24 ----D---- C:\Windows\system32\et-EE 2010-08-17 23:15:23 ----D---- C:\Windows\system32\en-US 2010-08-17 23:15:22 ----D---- C:\Windows\system32\it-IT 2010-08-17 23:15:22 ----D---- C:\Windows\system32\el-GR 2010-08-17 23:15:22 ----D---- C:\Windows\system32\de-DE 2010-08-17 23:15:21 ----D---- C:\Windows\system32\oobe 2010-08-17 23:15:20 ----D---- C:\Windows\system32\migration 2010-08-17 23:15:20 ----D---- C:\Windows\system32\fr 2010-08-17 23:15:12 ----D---- C:\Windows\system32\AdvancedInstallers 2010-08-17 23:15:11 ----D---- C:\Windows\system32\ru-RU 2010-08-17 23:15:05 ----D---- C:\Windows\system32\fr-FR 2010-08-17 23:14:52 ----D---- C:\Windows\system32\sv-SE 2010-08-17 23:14:52 ----D---- C:\Windows\system32\he-IL 2010-08-17 23:14:51 ----D---- C:\Windows\system32\setup 2010-08-17 23:14:51 ----D---- C:\Windows\system32\hu-HU 2010-08-17 23:14:51 ----D---- C:\Windows\system32\fi-FI 2010-08-17 23:14:51 ----D---- C:\Windows\system32\cs-CZ 2010-08-17 23:14:50 ----D---- C:\Windows\system32\SLUI 2010-08-17 23:14:50 ----D---- C:\Windows\system32\pt-PT 2010-08-17 23:14:43 ----D---- C:\Windows\system32\zh-CN 2010-08-17 23:14:43 ----D---- C:\Windows\system32\sr-Latn-CS 2010-08-17 23:14:43 ----D---- C:\Windows\system32\manifeststore 2010-08-17 23:14:42 ----D---- C:\Windows\system32\zh-TW 2010-08-17 23:14:42 ----D---- C:\Windows\system32\sl-SI 2010-08-17 23:14:42 ----D---- C:\Windows\system32\es-ES 2010-08-17 23:14:41 ----D---- C:\Windows\system32\uk-UA 2010-08-17 23:14:41 ----D---- C:\Windows\system32\pl-PL 2010-08-17 23:14:41 ----D---- C:\Windows\system32\ja-JP 2010-08-17 23:14:40 ----D---- C:\Windows\system32\ro-RO 2010-08-17 23:14:40 ----D---- C:\Windows\system32\bg-BG 2010-08-17 23:14:39 ----D---- C:\Windows\system32\th-TH 2010-08-17 23:14:39 ----D---- C:\Windows\system32\drivers\fr-FR 2010-08-17 23:14:38 ----D---- C:\Windows\system32\drivers 2010-08-17 23:14:35 ----D---- C:\Windows\system32\tr-TR 2010-08-17 23:14:26 ----D---- C:\Windows\system32\nb-NO 2010-08-17 23:14:25 ----D---- C:\Windows\system32\nl-NL 2010-08-17 23:14:25 ----D---- C:\Windows\system32\lt-LT 2010-08-17 23:14:25 ----D---- C:\Windows\system32\ar-SA 2010-08-17 23:14:23 ----D---- C:\Windows\system32\migwiz 2010-08-17 23:14:22 ----D---- C:\Windows\system32\pt-BR 2010-08-17 23:12:22 ----RSD---- C:\Windows\Fonts 2010-08-17 23:12:20 ----D---- C:\Windows\AppPatch 2010-08-17 23:11:38 ----D---- C:\Windows\system32\Boot 2010-08-17 23:09:09 ----D---- C:\Windows\system32\RTCOM 2010-08-17 21:20:18 ----A---- C:\Windows\fonts\GlobalUserInterface.CompositeFont 2010-08-17 15:04:44 ----D---- C:\Windows\Logs 2010-08-12 23:10:54 ----SHD---- C:\Windows\Installer 2010-08-12 23:07:59 ----D---- C:\Windows\Debug 2010-08-05 23:18:08 ----HD---- C:\Program Files\InstallShield Installation Information 2010-08-05 23:18:08 ----D---- C:\Windows\system 2010-08-05 23:18:08 ----A---- C:\Windows\compedia.ini 2010-08-05 23:17:23 ----D---- C:\Program Files\Mindscape 2010-08-05 23:14:37 ----D---- C:\Program Files\Micro Application 2010-08-05 23:11:20 ----HD---- C:\ProgramData 2010-08-05 23:11:17 ----A---- C:\Windows\disney.ini 2010-08-04 13:02:47 ----ASH---- C:\Program Files\desktop.ini 2010-08-04 12:56:19 ----D---- C:\Program Files\Google 2010-08-04 12:56:19 ----D---- C:\Program Files\Bandoo 2010-08-04 12:46:17 ----D---- C:\Windows\MSAgent 2010-08-04 12:46:10 ----D---- C:\Windows\DigitalLocker 2010-08-04 12:46:09 ----D---- C:\Windows\L2Schemas 2010-08-04 12:46:05 ----D---- C:\Windows\PolicyDefinitions 2010-08-04 12:46:04 ----D---- C:\Windows\system32\com 2010-08-04 12:45:56 ----D---- C:\Windows\system32\sysprep 2010-08-04 12:45:38 ----D---- C:\Windows\system32\ias 2010-08-04 12:44:58 ----D---- C:\Windows\system32\ras 2010-08-04 12:44:37 ----D---- C:\Windows\system32\icsxml 2010-08-04 12:39:16 ----D---- C:\Windows\Boot 2010-08-04 12:02:40 ----A---- C:\Windows\system32\ifxcardm.dll 2010-08-04 12:01:56 ----A---- C:\Windows\system32\axaltocm.dll 2010-08-04 11:57:28 ----D---- C:\Windows\system32\Tasks 2010-08-04 11:14:07 ----D---- C:\Program Files\PC-Doctor 5 for Windows 2010-08-04 11:08:31 ----D---- C:\ProgramData\Google 2010-08-04 11:05:42 ----D---- C:\Windows\Minidump 2010-08-03 20:09:31 ----A---- C:\Windows\system32\mrt.exe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 nvstor32;nvstor32; C:\Windows\system32\drivers\nvstor32.sys [2007-03-19 101672] R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2007-02-02 43528] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-03-01 1744928] R3 NVENETFD;Pilote du contrôleur de réseau NVIDIA nForce; C:\Windows\system32\DRIVERS\nvm60x32.sys [2006-11-02 429056] R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2007-02-11 7409024] R3 Ps2;PS2; C:\Windows\system32\DRIVERS\PS2.sys [2005-12-12 19072] R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328] S3 Dot4;Pilote MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-19 131584] S3 Dot4Print;Pilote de classe Imprimante pour IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-19 16384] S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-19 36864] S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632] S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520] S3 MBAMCatchMe;MBAMCatchMe; \??\C:\Windows\system32\drivers\mbamcatchme.sys [2008-06-10 34296] S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192] S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888] S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504] S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016] S3 PCAMPR4;PCAMPR4 NDIS Protocol Driver; \??\C:\Windows\system32\PCAMPR4.SYS [] S3 PCANDIS4;PCANDIS4 NDIS Protocol Driver; \??\C:\Windows\system32\PCANDIS4.SYS [] S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328] S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-19 39936] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 FTRTSVC;France Telecom Routing Table Service; C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [2009-08-24 69632] R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2008-01-19 21504] R2 LightScribeService;LightScribeService Direct Disc Labeling Service; c:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440] R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504] R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504] R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-19 21504] S3 IDriverT;InstallDriver Table Manager; c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136] S3 RoxMediaDB9;RoxMediaDB9; c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2007-03-26 887544] S3 stllssvr;stllssvr; c:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2007-03-08 74656] -----------------EOF-----------------

Bonjour je fais appel à vous malgré tous les programmes de nettoyage . PC rame , pages de pubs sur internet qui apparaissent et moteur de recherche LO.ST qui revient toujours . Le pc bloque quelques fois meme le CTRL+ALT+SUPPRI ne fonctionne pas . Je suis sous VISTA chez orange avec l antivirus d orange . Voilà je vous remerçie de votre patience . Voiçi le rapport Scan saved at 10:57:19, on 24/08/2010 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18943) Boot mode: Normal Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\hp\support\hpsysdrv.exe C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe C:\Windows\RtHDVCpl.exe C:\Program Files\HP\HP Software Update\hpwuSchd2.exe C:\Program Files\Fisher-Price\DACS\MiniApp\DACSMiniApp.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Soft2PC\soft2pc.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Orange\MailNotifier\MailNotifier.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Users\stephanie\AppData\Roaming\Soft2PC\Software\SoftwareHP.exe C:\Program Files\Orange\Connexion Internet Orange\Launcher\Launcher.exe C:\Windows\System32\rundll32.exe C:\Windows\ehome\ehmsas.exe C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\Orange\Connexion Internet Orange\systray\systrayapp.exe C:\Program Files\Orange\Connexion Internet Orange\connectivity\connectivitymanager.exe C:\Program Files\Orange\Connexion Internet Orange\connectivity\CoreCom\CoreCom.exe C:\Program Files\Orange\Connexion Internet Orange\connectivity\CoreCom\OraConfigRecover.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\Macromed\Flash\FlashUtil10e.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\hp\kbd\kbd.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Moteur de recherche : Web, Photos, Videos, Voyages, Encyclopédie R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HP Desktop | MSN R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = HP Desktop | MSN R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {AEEC3B59-CA98-4EBA-A140-57B94E283583} - (no file) R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\Connexion Internet Orange\SearchURLHook\SearchPageURL.dll F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe O1 - Hosts: ::1 localhost O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SOFT2PCBHO - {3475D2C4-BBD1-4255-A70D-4125A4D30956} - C:\Program Files\Soft2PC\soft2pcBHO.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe" O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [DACSMiniApp] C:\Program Files\Fisher-Price\DACS\MiniApp\DACSMiniApp.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [ORAHSSSessionManager] "C:\Program Files\Orange\Connexion Internet Orange\SessionManager\SessionManager.exe" O4 - HKLM\..\Run: [soft2PC] "C:\Program Files\Soft2PC\soft2pc.exe" O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe O4 - HKLM\..\RunOnce: [Helper] C:\Users\stephanie\AppData\Roaming\Soft2PC\Software\SoftwareHP.exe -runonce O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [MailNotifier] C:\Program Files\Orange\MailNotifier\MailNotifier.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU') O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: ajouter cette page à vos favoris Orange - C:\Users\STEPHA~1\AppData\Local\Temp\cceDC48.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: envoyer le texte sélectionné par sms - C:\Users\stephanie\AppData\Roaming\Orange\MessengerByOrange\sendsmsselectedtext.html O8 - Extra context menu item: envoyer par sms - C:\Users\stephanie\AppData\Roaming\Orange\MessengerByOrange\sendsms.html O8 - Extra context menu item: envoyer un mail - C:\Users\stephanie\AppData\Roaming\Orange\MessengerByOrange\sendmail.html O8 - Extra context menu item: orange.fr - C:\Users\stephanie\AppData\Roaming\Orange\MessengerByOrange\orange.html O8 - Extra context menu item: rechercher le texte sélectionné - C:\Users\stephanie\AppData\Roaming\Orange\MessengerByOrange\selectedsearch.html O8 - Extra context menu item: traduire la page - C:\Users\STEPHA~1\AppData\Local\Temp\cceDC46.html O8 - Extra context menu item: traduire le texte sélectionné - C:\Users\STEPHA~1\AppData\Local\Temp\cceDC47.html O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O13 - Gopher Prefix: O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe -- End of file - 7728 bytes Merçi

[ RESOLU ] Le disque avait une table de partition endommagée pour un disque neuf bizarre Voilà j ai fait un formatage de bas niveau de mon disque neuf (Sansung HD753LJ) avec utilitaire HUTIL(programme samsung) . et l installation s est bien passée .

personne !!!!!!!!

Toujours personne !!!!

Personne !!!

Sur le site de gigabyte pour y retrouver les drivers sata il y a un fichier de 3Mo ; Suite à décompreesion de celui çi , il y a plusieurs fichier INF. Faut il y integrer tous dans Nlite.

Bonjour Je vous écris car je n ai plus que vous comme recours. Voilà je viens de faire acquisition d un nouveau pc monté sans OS installé. Je voudrais y installer Windows XP Pro . Avant installation , j avais un probleme avec xp qui ne reconnaissait pas le disque dur car brancher en sataII .J avais ce message d erreur Stop:c000021 Unknown Hard Error Suite à ça après consultation sur le net , j utilise Nlite en ayant copier l os avec les pilotes sata de la carte méres en plus sur CD .N ayant pas de disquette pour y installer driver sata de la carte mère ( F6 à l installation ) Ensuite j utilise le Cd pour lancer l installer de l os en espérant qui y intègre tous les drivers SATA de la carte mère. Je n ai plus le message d erreur de tout à l heure . L installation se poursuit , je formate le disque dur , xp s intalle . Et là lors de la fin de l installation , lors du rédémarrge en rétirant le cd . Il n arrive pas à rebooter sur le disque dur Dans le bios j ai bien mis one ship sata type Native IDE Onboard GsataII ctrl Mode IDE Est ce que j ai bien mis tout les drivers sata de ma carte mère Ma configuration Gigabyte MA790X-UD3P AMD Phenom II X3 720 Black edition Samsung Sprintpoint F1 S-SATA 750 Go 32 Mo Corsair Twin2X 2X2 Go DDRII PC 8500 Voilà je ne sais plus quoi faire Merçi pour votre réponse

j ai bien everest mais une chose dont je ne comprend pas je n ai pas la température du cpu mais j ai celle du gpu et du disque dur dans l onglet des sondes peut etre est ce problème .

Je vous fais part de votre expérience pour résoudre mon probléme . J ai toujours coupure et redémarrage de mon pc . Malgré les recommandations faites au dessus.Même changé d antivirus, restauration à une date antérieure aussi J ai pensé à un problème matériel , changé alimentation , vérification des barrettes mémoires et toujours une coupure . Le pire c est que c est de plus en plus souvent 3 à 4 fois en 20 minutes. Je vous écrit en mode sans échec prise en charge réseau Voiçi le rapport en mode sans échec Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:51:30, on 28/10/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Safe mode with network support Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\system32\svchost.exe D:\Program Files\Lavasoft\Ad-Aware\aawservice.exe D:\WINDOWS\Explorer.EXE D:\Program Files\Mozilla Firefox\firefox.exe D:\Documents and Settings\Franck\Bureau\hijackthis-2.0.2.exe D:\DOCUME~1\Franck\LOCALS~1\Temp\hijackthis-2.0.2.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local;*.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe O4 - HKLM\..\Run: [Dit] Dit.exe O4 - HKLM\..\Run: [bJCFD] D:\Program Files\BroadJump\Client Foundation\CFD.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [sunJavaUpdateSched] "D:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://D:\WINDOWS\system32\GPhotos.scr/200 O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - D:\Poker\Titan Poker\casino.exe O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - D:\Poker\Titan Poker\casino.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1205285021565 O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://clydemax.spaces.live.com/PhotoUpload/MsnPUpld.cab O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player/in...l/installer.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{2FE1051C-F9F4-4147-8812-14C85C167671}: NameServer = 194.117.200.10,194.117.200.15 O17 - HKLM\System\CCS\Services\Tcpip\..\{371A8A11-AF34-4B8B-9EF7-B9834FAD24A9}: NameServer = 194.117.200.10,194.117.200.15 O18 - Protocol: skyline - {3A4F9195-65A8-11D5-85C1-0001023952C1} - D:\Program Files\Skyline\TerraExplorer\TerraExplorerX.dll O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - D:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: Apple Mobile Device - Apple Inc. - D:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - D:\WINDOWS\ATKKBService.exe O23 - Service: avast! Antivirus - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - D:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Boonty Games - BOONTY - D:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - D:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: Google Update Service (gupdate1c992c6c78978a8) (gupdate1c992c6c78978a8) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Updater Service (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - D:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - D:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - D:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - D:\WINDOWS\system32\PnkBstrB.exe O24 - Desktop Component 0: (no name) - file:///D:/DOCUME~1/Franck/LOCALS~1/Temp/msohtml1/01/clip_image002.gif -- End of file - 7127 bytes

Bonjour tout le monde Voilà j expose mon problème depuis 3 à 4 jours mon pc s éteint et redémarre sans aucune raison que je sois ou non sur internet . J ai depuis une erreur de antivir . Me dit que avgnt.exe a rencontré un probléme J ai fais tout les nettoyages possibles ccleaner ,malwarebytes ,. Voiçi le rapport Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:21:35, on 27/10/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\svchost.exe D:\Program Files\Lavasoft\Ad-Aware\aawservice.exe D:\WINDOWS\Explorer.EXE D:\WINDOWS\Dit.exe D:\Program Files\BroadJump\Client Foundation\CFD.exe D:\WINDOWS\system32\RUNDLL32.EXE D:\Program Files\Avira\AntiVir Desktop\avgnt.exe D:\Program Files\Java\jre6\bin\jusched.exe D:\Program Files\DNA\btdna.exe D:\WINDOWS\system32\ctfmon.exe D:\WINDOWS\system32\spoolsv.exe D:\Program Files\Avira\AntiVir Desktop\sched.exe D:\Program Files\Avira\AntiVir Desktop\avguard.exe D:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe D:\WINDOWS\ATKKBService.exe D:\Program Files\Bonjour\mDNSResponder.exe D:\WINDOWS\system32\CTsvcCDA.EXE D:\Program Files\Java\jre6\bin\jqs.exe D:\WINDOWS\system32\nvsvc32.exe D:\WINDOWS\system32\PnkBstrA.exe D:\WINDOWS\system32\PnkBstrB.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\system32\wuauclt.exe D:\WINDOWS\System32\svchost.exe D:\Program Files\Mozilla Firefox\firefox.exe D:\Documents and Settings\Franck\Bureau\HiJackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local;*.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe O4 - HKLM\..\Run: [Dit] Dit.exe O4 - HKLM\..\Run: [bJCFD] D:\Program Files\BroadJump\Client Foundation\CFD.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [avgnt] "D:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [sunJavaUpdateSched] "D:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKCU\..\Run: [bitTorrent DNA] "D:\Program Files\DNA\btdna.exe" O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://D:\WINDOWS\system32\GPhotos.scr/200 O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - D:\Poker\Titan Poker\casino.exe O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - D:\Poker\Titan Poker\casino.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1205285021565 O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://clydemax.spaces.live.com/PhotoUpload/MsnPUpld.cab O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player/in...l/installer.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{2FE1051C-F9F4-4147-8812-14C85C167671}: NameServer = 194.117.200.10,194.117.200.15 O17 - HKLM\System\CCS\Services\Tcpip\..\{371A8A11-AF34-4B8B-9EF7-B9834FAD24A9}: NameServer = 194.117.200.10,194.117.200.15 O18 - Protocol: skyline - {3A4F9195-65A8-11D5-85C1-0001023952C1} - D:\Program Files\Skyline\TerraExplorer\TerraExplorerX.dll O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - D:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - D:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - D:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Apple Mobile Device - Apple Inc. - D:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - D:\WINDOWS\ATKKBService.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - D:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Boonty Games - BOONTY - D:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - D:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: Google Update Service (gupdate1c992c6c78978a8) (gupdate1c992c6c78978a8) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Updater Service (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - D:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - D:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - D:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - D:\WINDOWS\system32\PnkBstrB.exe O24 - Desktop Component 0: (no name) - file:///D:/DOCUME~1/Franck/LOCALS~1/Temp/msohtml1/01/clip_image002.gif -- End of file - 7813 bytes Merçi

Je voudrais vous dire merçi Suite aux exécutions des 2 programmes Navilog et LOP s&d , il semble que les 2 problemes soient résolus . Plus de pub , et plus la fermeture de firefox sur certaines pages web.

Voiçi les 2 rapports LOP s&d --------------------\\ Lop S&D 4.2.5-0 XP/Vista Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Multiprocessor Free : Intel® Pentium® 4 CPU 3.20GHz ) BIOS : Phoenix - AwardBIOS v6.00PG USER : Franck ( Administrator ) BOOT : Normal boot Antivirus : avast! antivirus 4.8.1335 [VPS 090531-0] 4.8.1335 (Activated) C:\ (Local Disk) - NTFS - Total:2 Go (Free:2 Go) D:\ (Local Disk) - NTFS - Total:192 Go (Free:46 Go) E:\ (USB) F:\ (USB) G:\ (USB) H:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go) I:\ (CD or DVD) "D:\Lop SD" ( MAJ : 19-12-2008|23:40 ) Option : [1] ( 01/06/2009|17:56 ) --------------------\\ Listing des dossiers dans APPLIC~1 [13/11/2008|03:59] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe [01/11/2008|14:00] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple [12/03/2008|13:55] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer [12/05/2009|22:22] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Babylon [12/05/2009|22:25] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Bin Wait Ante Cast [21/01/2009|00:57] D:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY [30/03/2008|13:33] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Creative [12/03/2008|04:45] D:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink [10/07/2008|18:14] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft [08/04/2009|01:48] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft [12/03/2008|03:00] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive [14/04/2009|22:03] D:\DOCUME~1\ALLUSE~1\APPLIC~1\MusicMP3Get [11/03/2008|21:34] D:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles [17/11/2008|00:46] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Skyline [01/06/2009|17:28] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy [12/03/2009|23:12] D:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU Networks [12/03/2008|03:27] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage [12/03/2008|04:44] D:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller [20/05/2009|02:18] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia [11/03/2008|21:22] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft [23/07/2008|19:06] D:\DOCUME~1\Franck\APPLIC~1\Adobe [15/04/2008|17:40] D:\DOCUME~1\Franck\APPLIC~1\Apple Computer [12/05/2009|22:22] D:\DOCUME~1\Franck\APPLIC~1\Babylon [26/05/2009|23:05] D:\DOCUME~1\Franck\APPLIC~1\BitTorrent [01/07/2008|19:02] D:\DOCUME~1\Franck\APPLIC~1\Creative [31/10/2008|15:00] D:\DOCUME~1\Franck\APPLIC~1\DAEMON Tools [21/01/2009|20:06] D:\DOCUME~1\Franck\APPLIC~1\DivX [01/06/2009|17:54] D:\DOCUME~1\Franck\APPLIC~1\DNA [15/10/2008|02:09] D:\DOCUME~1\Franck\APPLIC~1\dvdcss [12/03/2008|05:50] D:\DOCUME~1\Franck\APPLIC~1\Elaborate Bytes [14/03/2008|21:17] D:\DOCUME~1\Franck\APPLIC~1\GARMIN [12/03/2008|19:44] D:\DOCUME~1\Franck\APPLIC~1\GibbHill Properties Ltd [12/03/2008|14:43] D:\DOCUME~1\Franck\APPLIC~1\Google [12/03/2008|06:57] D:\DOCUME~1\Franck\APPLIC~1\Help [11/03/2008|21:29] D:\DOCUME~1\Franck\APPLIC~1\Identities [12/03/2008|15:00] D:\DOCUME~1\Franck\APPLIC~1\Leadertech [23/05/2009|16:08] D:\DOCUME~1\Franck\APPLIC~1\LimeWire [12/03/2008|03:56] D:\DOCUME~1\Franck\APPLIC~1\Macromedia [15/03/2008|17:07] D:\DOCUME~1\Franck\APPLIC~1\Media Player Classic [08/04/2009|20:30] D:\DOCUME~1\Franck\APPLIC~1\Microsoft [03/09/2008|17:24] D:\DOCUME~1\Franck\APPLIC~1\Mozilla [14/04/2009|22:01] D:\DOCUME~1\Franck\APPLIC~1\MusicMP3Get [05/04/2008|11:59] D:\DOCUME~1\Franck\APPLIC~1\Real [17/11/2008|19:20] D:\DOCUME~1\Franck\APPLIC~1\SecuROM [26/03/2008|21:09] D:\DOCUME~1\Franck\APPLIC~1\Skyline [12/03/2008|05:48] D:\DOCUME~1\Franck\APPLIC~1\SlySoft [12/03/2008|06:17] D:\DOCUME~1\Franck\APPLIC~1\Sun [17/11/2008|19:28] D:\DOCUME~1\Franck\APPLIC~1\SystemRequirementsLab [31/08/2008|18:39] D:\DOCUME~1\Franck\APPLIC~1\Talkback [31/05/2009|18:42] D:\DOCUME~1\Franck\APPLIC~1\tor [31/05/2009|18:44] D:\DOCUME~1\Franck\APPLIC~1\TransOpen [31/05/2009|10:10] D:\DOCUME~1\Franck\APPLIC~1\Vidalia [13/03/2008|16:40] D:\DOCUME~1\Franck\APPLIC~1\vlc [12/03/2008|04:45] D:\DOCUME~1\Franck\APPLIC~1\WinRAR [12/03/2008|14:39] D:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft [11/03/2008|21:22] D:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft --------------------\\ Tâches planifiées dans D:\WINDOWS\tasks [01/06/2009 13:02][--ah-----] D:\WINDOWS\tasks\User_Feed_Synchronization-{AFEE8260-2EA1-4AF8-8E50-CDD38C072162}.job [01/06/2009 17:43][--a------] D:\WINDOWS\tasks\GoogleUpdateTaskMachine.job [30/05/2009 14:11][--a------] D:\WINDOWS\tasks\AppleSoftwareUpdate.job [01/06/2009 17:43][--ah-----] D:\WINDOWS\tasks\SA.DAT [05/08/2004 14:00][-r-h-----] D:\WINDOWS\tasks\desktop.ini --------------------\\ Listing des dossiers dans D:\Program Files [12/03/2008|15:17] D:\Program Files\Activision [13/11/2008|03:59] D:\Program Files\Adobe [12/03/2008|05:20] D:\Program Files\Ahead [12/03/2008|04:26] D:\Program Files\Alwil Software [01/11/2008|14:00] D:\Program Files\Apple Software Update [02/12/2008|21:13] D:\Program Files\BitTorrent [21/01/2009|00:55] D:\Program Files\Boonty [21/01/2009|01:44] D:\Program Files\BoontyGames [12/03/2008|02:58] D:\Program Files\BroadJump [05/04/2008|14:34] D:\Program Files\Canal [12/03/2008|05:08] D:\Program Files\Capturino 1.4 [02/04/2009|20:12] D:\Program Files\CCleaner [30/03/2008|13:10] D:\Program Files\CDex_170b2 [12/03/2008|03:18] D:\Program Files\Club-Internet [12/03/2008|03:00] D:\Program Files\Common Files [12/03/2008|14:08] D:\Program Files\Creative [02/11/2008|12:09] D:\Program Files\DAEMON Tools Lite [31/10/2008|15:12] D:\Program Files\DAEMON Tools Toolbar [25/11/2008|14:54] D:\Program Files\DivX [01/06/2009|17:44] D:\Program Files\DNA [12/03/2008|22:28] D:\Program Files\Dnote Software [12/03/2008|04:45] D:\Program Files\DVD Shrink [31/10/2008|14:29] D:\Program Files\Elaborate Bytes [18/05/2009|20:26] D:\Program Files\eMule [16/05/2009|18:42] D:\Program Files\Everest Casino [01/05/2009|20:14] D:\Program Files\Everest Poker [08/04/2009|01:48] D:\Program Files\Fichiers communs [07/04/2008|14:37] D:\Program Files\Garmin [20/05/2009|02:18] D:\Program Files\Google [24/04/2009|12:25] D:\Program Files\InstallShield Installation Information [31/05/2009|18:43] D:\Program Files\Internet Explorer [30/05/2009|12:59] D:\Program Files\Java [12/03/2008|04:58] D:\Program Files\K-Lite Codec Pack [28/03/2008|13:51] D:\Program Files\Lavalys [10/07/2008|18:27] D:\Program Files\Lavasoft [10/10/2008|22:26] D:\Program Files\LimeWire [01/07/2008|19:02] D:\Program Files\Media [14/11/2008|04:23] D:\Program Files\MeowMultiSound100 [07/09/2008|01:30] D:\Program Files\Messenger [08/04/2009|01:51] D:\Program Files\Microsoft [11/03/2008|21:23] D:\Program Files\microsoft frontpage [09/09/2008|00:01] D:\Program Files\Microsoft Hardware [12/03/2008|12:49] D:\Program Files\Microsoft Office [12/03/2009|23:01] D:\Program Files\Microsoft Silverlight [07/09/2008|01:28] D:\Program Files\Movie Maker [01/06/2009|17:49] D:\Program Files\Mozilla Firefox [08/10/2008|23:47] D:\Program Files\MSECache [11/03/2008|21:18] D:\Program Files\MSN [11/03/2008|21:19] D:\Program Files\MSN Gaming Zone [05/04/2008|14:32] D:\Program Files\MSXML 6.0 [14/04/2009|22:01] D:\Program Files\MusicMP3Get [07/09/2008|01:26] D:\Program Files\NetMeeting [25/05/2008|15:05] D:\Program Files\NovaLogic [11/03/2008|21:19] D:\Program Files\Online Services [07/09/2008|01:26] D:\Program Files\Outlook Express [23/05/2009|23:28] D:\Program Files\PKR [12/03/2008|06:54] D:\Program Files\PowerQuest [12/03/2008|13:55] D:\Program Files\QuickTime [12/03/2008|16:55] D:\Program Files\R4 [12/03/2008|13:50] D:\Program Files\Real [11/03/2008|21:21] D:\Program Files\Services en ligne [17/11/2008|00:46] D:\Program Files\Skyline [12/03/2008|05:45] D:\Program Files\SlySoft [01/06/2009|17:28] D:\Program Files\Spybot - Search & Destroy [05/09/2008|18:43] D:\Program Files\StuffPlug3 [17/11/2008|19:40] D:\Program Files\SystemRequirementsLab [24/04/2009|12:25] D:\Program Files\Ubisoft [12/03/2008|03:53] D:\Program Files\Uninstall Information [04/01/2009|17:53] D:\Program Files\Vidalia Bundle [12/03/2008|04:34] D:\Program Files\VideoLAN [17/05/2009|13:24] D:\Program Files\WinamaxPoker [23/09/2008|21:50] D:\Program Files\Winamp [08/04/2009|01:50] D:\Program Files\Windows Live [08/04/2009|01:51] D:\Program Files\Windows Live SkyDrive [07/09/2008|01:26] D:\Program Files\Windows Media Player [07/09/2008|01:26] D:\Program Files\Windows NT [12/03/2008|04:34] D:\Program Files\WinRAR [11/03/2008|21:23] D:\Program Files\xerox --------------------\\ Listing des dossiers dans D:\Program Files\Fichiers communs [13/11/2008|03:59] D:\Program Files\Fichiers communs\Adobe [05/04/2008|14:33] D:\Program Files\Fichiers communs\Adobe AIR [12/03/2008|04:50] D:\Program Files\Fichiers communs\Ahead [24/12/2008|01:51] D:\Program Files\Fichiers communs\Blizzard Entertainment [21/01/2009|00:57] D:\Program Files\Fichiers communs\BOONTY Shared [11/03/2008|21:30] D:\Program Files\Fichiers communs\InstallShield [12/03/2008|07:19] D:\Program Files\Fichiers communs\Java [06/03/2009|04:00] D:\Program Files\Fichiers communs\Microsoft Shared [11/03/2008|21:20] D:\Program Files\Fichiers communs\MSSoap [12/03/2008|16:36] D:\Program Files\Fichiers communs\NSV [12/03/2008|13:50] D:\Program Files\Fichiers communs\Real [11/03/2008|21:20] D:\Program Files\Fichiers communs\Services [11/03/2008|22:14] D:\Program Files\Fichiers communs\SpeechEngines [07/09/2008|01:26] D:\Program Files\Fichiers communs\System [08/04/2009|01:48] D:\Program Files\Fichiers communs\Windows Live [12/03/2008|04:41] D:\Program Files\Fichiers communs\WindowsLiveInstaller [05/04/2009|23:51] D:\Program Files\Fichiers communs\Wise Installation Wizard [12/03/2008|13:51] D:\Program Files\Fichiers communs\xing shared --------------------\\ Process ( 45 Processes ) IEXPLORE.EXE ~ [PID:1212] --------------------\\ Recherche avec S_Lop D:\DOCUME~1\Franck\APPLIC~1\TRANSO~1 D:\DOCUME~1\Franck\APPLIC~1\TRANSO~1\idlepurefunk.exe D:\DOCUME~1\Franck\APPLIC~1\TRANSO~1\zfbqadhw.exe --------------------\\ Recherche de Fichiers / Dossiers Lop D:\DOCUME~1\ALLUSE~1\APPLIC~1\Bin Wait Ante Cast D:\DOCUME~1\ALLUSE~1\APPLIC~1\Bin Wait Ante Cast\Chin hide.dat D:\DOCUME~1\ALLUSE~1\APPLIC~1\Bin Wait Ante Cast\Chin hide.exe D:\DOCUME~1\Franck\Cookies\franck@advertstream[1].txt D:\DOCUME~1\Franck\Cookies\franck@d2.advertserve[1].txt D:\DOCUME~1\Franck\Cookies\franck@advertising[1].txt D:\DOCUME~1\Franck\Cookies\franck@advertising[2].txt D:\DOCUME~1\Franck\Cookies\franck@advertising[3].txt D:\DOCUME~1\Franck\Cookies\franck@bigpoint[2].txt D:\DOCUME~1\Franck\Cookies\franck@fr.deepolis.bigpoint[2].txt D:\DOCUME~1\Franck\Cookies\franck@banner.cotedazurpalace[2].txt D:\DOCUME~1\Franck\Cookies\franck@banner.cotedazurpalace[3].txt D:\DOCUME~1\Franck\Cookies\franck@cotedazurpalace[1].txt D:\DOCUME~1\Franck\Cookies\franck@www.cotedazurpalace[2].txt D:\DOCUME~1\Franck\Cookies\franck@partypoker[2].txt D:\DOCUME~1\Franck\Cookies\franck@serve.32vegas[1].txt D:\DOCUME~1\Franck\Cookies\franck@www.32vegas[1].txt D:\DOCUME~1\Franck\Cookies\franck@888[2].txt --------------------\\ Verification du Registre [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\wipe bait does] "DisplayName"="CiD Help" "UninstallString"="D:\\DOCUME~1\\Franck\\APPLIC~1\\TRANSO~1\\bits hide loud.exe -uninstall" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ante cast ooze tray"="D:\\Documents and Settings\\All Users\\Application Data\\Bin Wait Ante Cast\\Chin hide.exe" --------------------\\ Verification du fichier Hosts Fichier Hosts PROPRE --------------------\\ Recherche de fichiers avec Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-06-01 17:58:09 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 0 --------------------\\ Recherche d'autres infections --------------------\\ Cracks & Keygens .. D:\DOCUME~1\Franck\Application Data\BitTorrent\Far Cry 2 with no CD or activation required crack.torrent D:\DOCUME~1\Franck\Mes documents\Ma musique\A Hundred Million Suns\Crack The Shutters.mp3 D:\DOCUME~1\Franck\Mes documents\Ma musique\Snow.Patrol-A.Hundred.Million .Suns(2008)\02 Crack The Shutters.mp3 [F:4][D:5]-> D:\DOCUME~1\Franck\LOCALS~1\Temp [F:456][D:0]-> D:\DOCUME~1\Franck\Cookies [F:2715][D:21]-> D:\DOCUME~1\Franck\LOCALS~1\TEMPOR~1\content.IE5 1 - "D:\Lop SD\LopR_1.txt" - 01/06/2009|17:58 - Option : [1] --------------------\\ Fin du rapport a 17:58:53 Le 2 eme rapport apres suppression --------------------\\ Lop S&D 4.2.5-0 XP/Vista Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Multiprocessor Free : Intel® Pentium® 4 CPU 3.20GHz ) BIOS : Phoenix - AwardBIOS v6.00PG USER : Franck ( Administrator ) BOOT : Normal boot Antivirus : avast! antivirus 4.8.1335 [VPS 090531-0] 4.8.1335 (Activated) C:\ (Local Disk) - NTFS - Total:2 Go (Free:2 Go) D:\ (Local Disk) - NTFS - Total:192 Go (Free:46 Go) E:\ (USB) F:\ (USB) G:\ (USB) H:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go) I:\ (CD or DVD) "D:\Lop SD" ( MAJ : 19-12-2008|23:40 ) Option : [2] ( 01/06/2009|18:00 ) \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION Supprime! - D:\DOCUME~1\ALLUSE~1\APPLIC~1\Bin Wait Ante Cast\Chin hide.dat Supprime! - D:\DOCUME~1\ALLUSE~1\APPLIC~1\Bin Wait Ante Cast\Chin hide.exe Supprime! - D:\DOCUME~1\Franck\Cookies\franck@advertstream[1].txt Supprime! - D:\DOCUME~1\Franck\Cookies\franck@d2.advertserve[1].txt Supprime! - D:\DOCUME~1\Franck\Cookies\franck@advertising[1].txt Supprime! - D:\DOCUME~1\Franck\Cookies\franck@advertising[2].txt Supprime! - D:\DOCUME~1\Franck\Cookies\franck@advertising[3].txt Supprime! - D:\DOCUME~1\Franck\Cookies\franck@bigpoint[2].txt Supprime! - D:\DOCUME~1\Franck\Cookies\franck@fr.deepolis.bigpoint[2].txt Supprime! - D:\DOCUME~1\Franck\Cookies\franck@banner.cotedazurpalace[2].txt Supprime! - D:\DOCUME~1\Franck\Cookies\franck@banner.cotedazurpalace[3].txt Supprime! - D:\DOCUME~1\Franck\Cookies\franck@cotedazurpalace[1].txt Supprime! - D:\DOCUME~1\Franck\Cookies\franck@www.cotedazurpalace[2].txt Supprime! - D:\DOCUME~1\Franck\Cookies\franck@partypoker[2].txt Supprime! - D:\DOCUME~1\Franck\Cookies\franck@serve.32vegas[1].txt Supprime! - D:\DOCUME~1\Franck\Cookies\franck@www.32vegas[1].txt Supprime! - D:\DOCUME~1\Franck\Cookies\franck@888[2].txt Supprime! - D:\DOCUME~1\Franck\APPLIC~1\TRANSO~1\idlepurefunk.exe Supprime! - D:\DOCUME~1\Franck\APPLIC~1\TRANSO~1\zfbqadhw.exe Supprime! - D:\DOCUME~1\ALLUSE~1\APPLIC~1\Bin Wait Ante Cast Supprime! - D:\DOCUME~1\Franck\APPLIC~1\TRANSO~1 \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ --------------------\\ Listing des dossiers dans APPLIC~1 [13/11/2008|03:59] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe [01/11/2008|14:00] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple [12/03/2008|13:55] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer [12/05/2009|22:22] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Babylon [21/01/2009|00:57] D:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY [30/03/2008|13:33] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Creative [12/03/2008|04:45] D:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink [10/07/2008|18:14] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft [08/04/2009|01:48] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft [12/03/2008|03:00] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive [14/04/2009|22:03] D:\DOCUME~1\ALLUSE~1\APPLIC~1\MusicMP3Get [11/03/2008|21:34] D:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles [17/11/2008|00:46] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Skyline [01/06/2009|17:28] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy [12/03/2009|23:12] D:\DOCUME~1\ALLUSE~1\APPLIC~1\TVU Networks [12/03/2008|03:27] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage [12/03/2008|04:44] D:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller [20/05/2009|02:18] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia [11/03/2008|21:22] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft [23/07/2008|19:06] D:\DOCUME~1\Franck\APPLIC~1\Adobe [15/04/2008|17:40] D:\DOCUME~1\Franck\APPLIC~1\Apple Computer [12/05/2009|22:22] D:\DOCUME~1\Franck\APPLIC~1\Babylon [26/05/2009|23:05] D:\DOCUME~1\Franck\APPLIC~1\BitTorrent [01/07/2008|19:02] D:\DOCUME~1\Franck\APPLIC~1\Creative [31/10/2008|15:00] D:\DOCUME~1\Franck\APPLIC~1\DAEMON Tools [21/01/2009|20:06] D:\DOCUME~1\Franck\APPLIC~1\DivX [01/06/2009|17:54] D:\DOCUME~1\Franck\APPLIC~1\DNA [15/10/2008|02:09] D:\DOCUME~1\Franck\APPLIC~1\dvdcss [12/03/2008|05:50] D:\DOCUME~1\Franck\APPLIC~1\Elaborate Bytes [14/03/2008|21:17] D:\DOCUME~1\Franck\APPLIC~1\GARMIN [12/03/2008|19:44] D:\DOCUME~1\Franck\APPLIC~1\GibbHill Properties Ltd [12/03/2008|14:43] D:\DOCUME~1\Franck\APPLIC~1\Google [12/03/2008|06:57] D:\DOCUME~1\Franck\APPLIC~1\Help [11/03/2008|21:29] D:\DOCUME~1\Franck\APPLIC~1\Identities [12/03/2008|15:00] D:\DOCUME~1\Franck\APPLIC~1\Leadertech [23/05/2009|16:08] D:\DOCUME~1\Franck\APPLIC~1\LimeWire [12/03/2008|03:56] D:\DOCUME~1\Franck\APPLIC~1\Macromedia [15/03/2008|17:07] D:\DOCUME~1\Franck\APPLIC~1\Media Player Classic [08/04/2009|20:30] D:\DOCUME~1\Franck\APPLIC~1\Microsoft [03/09/2008|17:24] D:\DOCUME~1\Franck\APPLIC~1\Mozilla [14/04/2009|22:01] D:\DOCUME~1\Franck\APPLIC~1\MusicMP3Get [05/04/2008|11:59] D:\DOCUME~1\Franck\APPLIC~1\Real [17/11/2008|19:20] D:\DOCUME~1\Franck\APPLIC~1\SecuROM [26/03/2008|21:09] D:\DOCUME~1\Franck\APPLIC~1\Skyline [12/03/2008|05:48] D:\DOCUME~1\Franck\APPLIC~1\SlySoft [12/03/2008|06:17] D:\DOCUME~1\Franck\APPLIC~1\Sun [17/11/2008|19:28] D:\DOCUME~1\Franck\APPLIC~1\SystemRequirementsLab [31/08/2008|18:39] D:\DOCUME~1\Franck\APPLIC~1\Talkback [31/05/2009|18:42] D:\DOCUME~1\Franck\APPLIC~1\tor [31/05/2009|10:10] D:\DOCUME~1\Franck\APPLIC~1\Vidalia [13/03/2008|16:40] D:\DOCUME~1\Franck\APPLIC~1\vlc [12/03/2008|04:45] D:\DOCUME~1\Franck\APPLIC~1\WinRAR [12/03/2008|14:39] D:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft [11/03/2008|21:22] D:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft --------------------\\ Tâches planifiées dans D:\WINDOWS\tasks [01/06/2009 13:02][--ah-----] D:\WINDOWS\tasks\User_Feed_Synchronization-{AFEE8260-2EA1-4AF8-8E50-CDD38C072162}.job [01/06/2009 17:43][--a------] D:\WINDOWS\tasks\GoogleUpdateTaskMachine.job [30/05/2009 14:11][--a------] D:\WINDOWS\tasks\AppleSoftwareUpdate.job [01/06/2009 17:43][--ah-----] D:\WINDOWS\tasks\SA.DAT [05/08/2004 14:00][-r-h-----] D:\WINDOWS\tasks\desktop.ini --------------------\\ Listing des dossiers dans D:\Program Files [12/03/2008|15:17] D:\Program Files\Activision [13/11/2008|03:59] D:\Program Files\Adobe [12/03/2008|05:20] D:\Program Files\Ahead [12/03/2008|04:26] D:\Program Files\Alwil Software [01/11/2008|14:00] D:\Program Files\Apple Software Update [02/12/2008|21:13] D:\Program Files\BitTorrent [21/01/2009|00:55] D:\Program Files\Boonty [21/01/2009|01:44] D:\Program Files\BoontyGames [12/03/2008|02:58] D:\Program Files\BroadJump [05/04/2008|14:34] D:\Program Files\Canal [12/03/2008|05:08] D:\Program Files\Capturino 1.4 [02/04/2009|20:12] D:\Program Files\CCleaner [30/03/2008|13:10] D:\Program Files\CDex_170b2 [12/03/2008|03:18] D:\Program Files\Club-Internet [12/03/2008|03:00] D:\Program Files\Common Files [12/03/2008|14:08] D:\Program Files\Creative [02/11/2008|12:09] D:\Program Files\DAEMON Tools Lite [31/10/2008|15:12] D:\Program Files\DAEMON Tools Toolbar [25/11/2008|14:54] D:\Program Files\DivX [01/06/2009|17:44] D:\Program Files\DNA [12/03/2008|22:28] D:\Program Files\Dnote Software [12/03/2008|04:45] D:\Program Files\DVD Shrink [31/10/2008|14:29] D:\Program Files\Elaborate Bytes [18/05/2009|20:26] D:\Program Files\eMule [16/05/2009|18:42] D:\Program Files\Everest Casino [01/05/2009|20:14] D:\Program Files\Everest Poker [08/04/2009|01:48] D:\Program Files\Fichiers communs [07/04/2008|14:37] D:\Program Files\Garmin [20/05/2009|02:18] D:\Program Files\Google [24/04/2009|12:25] D:\Program Files\InstallShield Installation Information [31/05/2009|18:43] D:\Program Files\Internet Explorer [30/05/2009|12:59] D:\Program Files\Java [12/03/2008|04:58] D:\Program Files\K-Lite Codec Pack [28/03/2008|13:51] D:\Program Files\Lavalys [10/07/2008|18:27] D:\Program Files\Lavasoft [10/10/2008|22:26] D:\Program Files\LimeWire [01/07/2008|19:02] D:\Program Files\Media [14/11/2008|04:23] D:\Program Files\MeowMultiSound100 [07/09/2008|01:30] D:\Program Files\Messenger [08/04/2009|01:51] D:\Program Files\Microsoft [11/03/2008|21:23] D:\Program Files\microsoft frontpage [09/09/2008|00:01] D:\Program Files\Microsoft Hardware [12/03/2008|12:49] D:\Program Files\Microsoft Office [12/03/2009|23:01] D:\Program Files\Microsoft Silverlight [07/09/2008|01:28] D:\Program Files\Movie Maker [01/06/2009|17:49] D:\Program Files\Mozilla Firefox [08/10/2008|23:47] D:\Program Files\MSECache [11/03/2008|21:18] D:\Program Files\MSN [11/03/2008|21:19] D:\Program Files\MSN Gaming Zone [05/04/2008|14:32] D:\Program Files\MSXML 6.0 [14/04/2009|22:01] D:\Program Files\MusicMP3Get [07/09/2008|01:26] D:\Program Files\NetMeeting [25/05/2008|15:05] D:\Program Files\NovaLogic [11/03/2008|21:19] D:\Program Files\Online Services [07/09/2008|01:26] D:\Program Files\Outlook Express [23/05/2009|23:28] D:\Program Files\PKR [12/03/2008|06:54] D:\Program Files\PowerQuest [12/03/2008|13:55] D:\Program Files\QuickTime [12/03/2008|16:55] D:\Program Files\R4 [12/03/2008|13:50] D:\Program Files\Real [11/03/2008|21:21] D:\Program Files\Services en ligne [17/11/2008|00:46] D:\Program Files\Skyline [12/03/2008|05:45] D:\Program Files\SlySoft [01/06/2009|17:28] D:\Program Files\Spybot - Search & Destroy [05/09/2008|18:43] D:\Program Files\StuffPlug3 [17/11/2008|19:40] D:\Program Files\SystemRequirementsLab [24/04/2009|12:25] D:\Program Files\Ubisoft [12/03/2008|03:53] D:\Program Files\Uninstall Information [04/01/2009|17:53] D:\Program Files\Vidalia Bundle [12/03/2008|04:34] D:\Program Files\VideoLAN [17/05/2009|13:24] D:\Program Files\WinamaxPoker [23/09/2008|21:50] D:\Program Files\Winamp [08/04/2009|01:50] D:\Program Files\Windows Live [08/04/2009|01:51] D:\Program Files\Windows Live SkyDrive [07/09/2008|01:26] D:\Program Files\Windows Media Player [07/09/2008|01:26] D:\Program Files\Windows NT [12/03/2008|04:34] D:\Program Files\WinRAR [11/03/2008|21:23] D:\Program Files\xerox --------------------\\ Listing des dossiers dans D:\Program Files\Fichiers communs [13/11/2008|03:59] D:\Program Files\Fichiers communs\Adobe [05/04/2008|14:33] D:\Program Files\Fichiers communs\Adobe AIR [12/03/2008|04:50] D:\Program Files\Fichiers communs\Ahead [24/12/2008|01:51] D:\Program Files\Fichiers communs\Blizzard Entertainment [21/01/2009|00:57] D:\Program Files\Fichiers communs\BOONTY Shared [11/03/2008|21:30] D:\Program Files\Fichiers communs\InstallShield [12/03/2008|07:19] D:\Program Files\Fichiers communs\Java [06/03/2009|04:00] D:\Program Files\Fichiers communs\Microsoft Shared [11/03/2008|21:20] D:\Program Files\Fichiers communs\MSSoap [12/03/2008|16:36] D:\Program Files\Fichiers communs\NSV [12/03/2008|13:50] D:\Program Files\Fichiers communs\Real [11/03/2008|21:20] D:\Program Files\Fichiers communs\Services [11/03/2008|22:14] D:\Program Files\Fichiers communs\SpeechEngines [07/09/2008|01:26] D:\Program Files\Fichiers communs\System [08/04/2009|01:48] D:\Program Files\Fichiers communs\Windows Live [12/03/2008|04:41] D:\Program Files\Fichiers communs\WindowsLiveInstaller [05/04/2009|23:51] D:\Program Files\Fichiers communs\Wise Installation Wizard [12/03/2008|13:51] D:\Program Files\Fichiers communs\xing shared --------------------\\ Process ( 44 Processes ) ... OK ! --------------------\\ Recherche avec S_Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Recherche de Fichiers / Dossiers Lop Aucun fichier / dossier Lop trouvé ! --------------------\\ Verification du Registre ..... OK ! --------------------\\ Verification du fichier Hosts Fichier Hosts PROPRE --------------------\\ Recherche de fichiers avec Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-06-01 18:02:02 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 0 --------------------\\ Recherche d'autres infections --------------------\\ Cracks & Keygens .. D:\DOCUME~1\Franck\Application Data\BitTorrent\Far Cry 2 with no CD or activation required crack.torrent D:\DOCUME~1\Franck\Mes documents\Ma musique\A Hundred Million Suns\Crack The Shutters.mp3 D:\DOCUME~1\Franck\Mes documents\Ma musique\Snow.Patrol-A.Hundred.Million .Suns(2008)\02 Crack The Shutters.mp3 [F:4][D:5]-> D:\DOCUME~1\Franck\LOCALS~1\Temp [F:441][D:0]-> D:\DOCUME~1\Franck\Cookies [F:2715][D:21]-> D:\DOCUME~1\Franck\LOCALS~1\TEMPOR~1\content.IE5 1 - "D:\Lop SD\LopR_1.txt" - 01/06/2009|17:58 - Option : [1] 2 - "D:\Lop SD\LopR_2.txt" - 01/06/2009|18:02 - Option : [2] --------------------\\ Fin du rapport a 18:02:38

Voiçi les 2 rapports de navilog Search Navipromo version 3.7.7 commencé le 01/06/2009 à 17:34:25,32 !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!! !!! Postez ce rapport sur le forum pour le faire analyser !!! !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!! Outil exécuté depuis D:\Program Files\navilog1 Mise à jour le 12.05.2009 à 18h00 par IL-MAFIOSO Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Multiprocessor Free : Intel® Pentium® 4 CPU 3.20GHz ) BIOS : Phoenix - AwardBIOS v6.00PG USER : Franck ( Administrator ) BOOT : Normal boot Antivirus : avast! antivirus 4.8.1335 [VPS 090531-0] 4.8.1335 (Not Activated) C:\ (Local Disk) - NTFS - Total:2 Go (Free:2 Go) D:\ (Local Disk) - NTFS - Total:192 Go (Free:46 Go) E:\ (USB) F:\ (USB) G:\ (USB) H:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go) I:\ (CD or DVD) Recherche executé en mode normal *** Recherche dossiers dans "D:\WINDOWS" *** *** Recherche dossiers dans "D:\Program Files" *** *** Recherche dossiers dans "D:\Documents and Settings\All Users\menudm~1\progra~1" *** *** Recherche dossiers dans "D:\Documents and Settings\All Users\menudm~1" *** *** Recherche dossiers dans "d:\docume~1\alluse~1\applic~1" *** *** Recherche dossiers dans "D:\Documents and Settings\Franck\applic~1" *** *** Recherche dossiers dans "D:\Documents and Settings\Franck\locals~1\applic~1" *** *** Recherche dossiers dans "D:\Documents and Settings\Franck\menudm~1\progra~1" *** *** Recherche avec Catchme-rootkit/stealth malware detector par gmer *** pour + d'infos : http://www.gmer.net *** Recherche avec GenericNaviSearch *** !!! Tous ces résultats peuvent révéler des fichiers légitimes !!! !!! A vérifier impérativement avant toute suppression manuelle !!! * Recherche dans "D:\WINDOWS\system32" * * Recherche dans "D:\Documents and Settings\Franck\locals~1\applic~1" * *** Recherche fichiers *** *** Recherche clés spécifiques dans le Registre *** !! Les clés trouvées ne sont pas forcément infectées !! HKEY_CURRENT_USER\Software\Lanconfig [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "quowmsi"="\"d:\\documents and settings\\franck\\local settings\\application data\\quowmsi.exe\" quowmsi" *** Module de Recherche complémentaire *** (Recherche fichiers spécifiques) 1)Recherche nouveaux fichiers Instant Access : 2)Recherche Heuristique : * Dans "D:\WINDOWS\system32" : * Dans "D:\Documents and Settings\Franck\locals~1\applic~1" : quowmsi.exe trouvé ! quowmsi.dat trouvé ! quowmsi_nav.dat trouvé ! quowmsi_navps.dat trouvé ! 3)Recherche Certificats : Certificat Egroup trouvé ! Certificat Electronic-Group trouvé ! Certificat Montorgueil absent ! Certificat OOO-Favorit trouvé ! Certificat Sunny-Day-Design-Ltd absent ! 4)Recherche autres dossiers et fichiers connus : *** Analyse terminée le 01/06/2009 à 17:37:19,54 *** 2 eme rapport suite à la suppression Clean Navipromo version 3.7.7 commencé le 01/06/2009 à 17:41:12,90 Outil exécuté depuis D:\Program Files\navilog1 Mise à jour le 12.05.2009 à 18h00 par IL-MAFIOSO Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3 X86-based PC ( Multiprocessor Free : Intel® Pentium® 4 CPU 3.20GHz ) BIOS : Phoenix - AwardBIOS v6.00PG USER : Franck ( Administrator ) BOOT : Normal boot Antivirus : avast! antivirus 4.8.1335 [VPS 090531-0] 4.8.1335 (Not Activated) C:\ (Local Disk) - NTFS - Total:2 Go (Free:2 Go) D:\ (Local Disk) - NTFS - Total:192 Go (Free:46 Go) E:\ (USB) F:\ (USB) G:\ (USB) H:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go) I:\ (CD or DVD) Mode suppression automatique avec prise en charge résultats Catchme et GNS Nettoyage exécuté au redémarrage de l'ordinateur *** fsbl1.txt non trouvé *** (Assurez-vous que Catchme n'avait rien trouvé lors de la recherche) *** Suppression avec sauvegardes résultats GenericNaviSearch *** * Suppression dans "D:\WINDOWS\System32" * * Suppression dans "D:\Documents and Settings\Franck\locals~1\applic~1" * *** Suppression dossiers dans "D:\WINDOWS" *** *** Suppression dossiers dans "D:\Program Files" *** *** Suppression dossiers dans "D:\Documents and Settings\All Users\menudm~1\progra~1" *** *** Suppression dossiers dans "D:\Documents and Settings\All Users\menudm~1" *** *** Suppression dossiers dans "d:\docume~1\alluse~1\applic~1" *** *** Suppression dossiers dans "D:\Documents and Settings\Franck\applic~1" *** *** Suppression dossiers dans "D:\Documents and Settings\Franck\locals~1\applic~1" *** *** Suppression dossiers dans "D:\Documents and Settings\Franck\menudm~1\progra~1" *** *** Suppression fichiers *** *** Suppression fichiers temporaires *** Nettoyage contenu D:\WINDOWS\Temp effectué ! Nettoyage contenu D:\Documents and Settings\Franck\locals~1\Temp effectué ! *** Traitement Recherche complémentaire *** (Recherche fichiers spécifiques) 1)Suppression avec sauvegardes nouveaux fichiers Instant Access : 2)Recherche, création sauvegardes et suppression Heuristique : * Dans "D:\WINDOWS\system32" * * Dans "D:\Documents and Settings\Franck\locals~1\applic~1" * quowmsi.exe trouvé ! Copie quowmsi.exe réalisée avec succès ! quowmsi.exe supprimé ! quowmsi.dat trouvé ! Copie quowmsi.dat réalisée avec succès ! quowmsi.dat supprimé ! quowmsi_nav.dat trouvé ! Copie quowmsi_nav.dat réalisée avec succès ! quowmsi_nav.dat supprimé ! quowmsi_navps.dat trouvé ! Copie quowmsi_navps.dat réalisée avec succès ! quowmsi_navps.dat supprimé ! *** Sauvegarde du Registre vers dossier Safebackup *** sauvegarde du Registre réalisée avec succès ! *** Nettoyage Registre *** Nettoyage Registre Ok *** Certificats *** Certificat Egroup supprimé ! Certificat Electronic-Group supprimé ! Certificat Montorgueil absent ! Certificat OOO-Favorit supprimé ! Certificat Sunny-Day-Design-Ltdt absent ! *** Recherche autres dossiers et fichiers connus *** *** Nettoyage terminé le 01/06/2009 à 17:44:17,50 ***

Bonjour , Voilà depuis quelques temps , j 'ai des petits soucis avec mon navigateur mozilla firefox derniere mise à jour effectuée. Certaines pages web ferme mon navigateur me retrouve sur le bureau . A chaque tentative sur la page toujours le meme resultat . Ma version java est à jour Je suis sous XP SP3 navigateur mozilla firefox à jour Operateur sfr neufbox Modules complementaires installés -IE Tab - Java quick starter -torbutton - TVU web player