système propre?

[kutzman]

bonjour a tous.

 

je souhaiterais simplement savoir si mon système est propre. je joins un log hijackthis.

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 11:02:13, on 06/04/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16608)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\ZoneLabs\vsmon.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\WINDOWS\system32\VTTimer.exe

C:\WINDOWS\system32\VTtrayp.exe

C:\WINDOWS\Philips\SPC500NC\Monitor.exe

C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe

C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe

C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe

C:\Program Files\Everest\everest.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\WINDOWS\VPro500.exe

C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe

C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe

C:\Program Files\Windows Live\Messenger\usnsvc.exe

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe

C:\WINDOWS\system32\winlogon.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe

C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Documents and Settings\Sébastien\Bureau\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Control Popups in Internet Explorer - {41353F8B-78CE-48A5-BE44-153ED293D192} - C:\PROGRA~1\POPUPP~1\PopLib.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: PicLens plug-in for Internet Explorer - {EAEE5C74-6D0D-4aca-9232-0DA4A7B866BA} - C:\Program Files\PicLensIE\PicLens.dll

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [VTTimer] VTTimer.exe

O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKLM\..\Run: [sPC500NC_Monitor] C:\WINDOWS\Philips\SPC500NC\Monitor.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"

O4 - HKLM\..\Run: [sSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot

O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"

O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"

O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe"

O4 - HKCU\..\Run: [EVEREST AutoStart] C:\Program Files\Everest\everest.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-21-602162358-1409082233-682003330-1005\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Stéphanie')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe

O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe

O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe

O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe

O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: VPro500.lnk = ?

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

O9 - Extra button: PopupPopper Control Panel - {3E94F358-9537-4BBA-8D12-D7F8A0136973} - C:\Program Files\PopupPopper\SiteList.exe

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/advanced/2.0..._instmodule.exe

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1205518054828

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://sdlc-esd.sun.com/ESD39/JSCDL/jdk/6u...ows-i586-jc.cab

O16 - DPF: {BAE1D8DF-0B35-47E3-A1E7-EEB3FF2ECD19} (CPlayFirstddfotgControl Object) - file:///C:/Documents%20and%20Settings/Stéphanie/Local%20Settings/Application%20Data/Oberon%20Media/Oberon%20Games%20Host/ddfotg.1.0.0.37.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab

O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

 

--

End of file - 8857 bytes

 

 

merci.

Modifié le 9 avril 2008 par kutzman

[pear]

Bonjour,

 

Ce rapport ne montre pas d'infection,mais cela ne veut pas dire qu'il n'y en a pas.

Si vous n'avez de disfonctionnements, c'est bon.

[kutzman]

  pear a dit :

Bonjour,

 

Ce rapport ne montre pas d'infection,mais cela ne veut pas dire qu'il n'y en a pas.

Si vous n'avez de disfonctionnements, c'est bon.

 

 

merci pour ta réponse mais si le log hijackthis ne suffit pas pour etre sur que mon système est nickel, peux tu me donner des solutions pour en etre totalement sur.

 

merci

[Zonk]

 

Tu pourrais peut être répondre à Pear:

As tu des anomalies ??

 

Pour le scan kaspersky j'aurais le temps de jeter un oeil.....

-Scan en ligne

Pense à désactiver Antivir temporairement le temps du scan ..

 

Kaspersky

-Clique sur Accept

Une barre jaune va te demander si tu acceptes d'installer le Kavwebscan_Unicode.cab, installe l'Active X.

clique une nouvelle fois sur "Accept"

Les bases de mises à jour vont s'installer, patiente un moment

-Clique sur "Next".

-Clique sur "My Compurter", le scan se met en route; attends la fin du scan sans fermer la fenêtre sinon il s'arrêtera.

 

 

A la fin du scan, clique sur Save report as...

Choisis bureau et nomme le rapport "rapport Kaspersky" et dans le champ d'enregistrement, choisis "fichiers texte" enregistre alors le rapport.

 

Copie/colle la totalité du fichier texte ouvert, par clic droit dessus, sélectionner tout/copier.

 

Colle ce rapport dans ta réponse dans ton prochain message

NOTE: Le scan est à faire avec Internet Explorer.

 

 

DiagHelp

 

Télécharge DiagHelp.zip de Malekal_morte sur ton bureau - Tuto : http://www.malekal.com/DiagHelp/DiagHelp.php

• Ne double-clic pas dessus !! Fais un clic droit sur le fichier et extraire tout
  
• Un nouveau dossier chercher va être créer DiagHelp
  
• Ouvre le et double-clic sur go.cmd (le .cmd peut ne pas apparaître)
  
• Une fenêtre va s'ouvrir, choisis l'option 1
  
• L'analyse va commencer, ceci peut durer quelques minutes, laisse faire et appuie sur une touche quand on te le demande.
  
• A la fin de l'analyse, il te sera redemandé de redémarrer l'ordinateur.
  
• Une fois l'ordinateur redémarré le rapport va apparaître sur le bloc-note.. Ce dernier se trouve sur C:\resultat.txt
  
• Copie/colle le contenu du bloc-note qui s'ouvre, pour cela :
  
• Dans le bloc-note, cliquez sur le menu Edition / Sélectionner tout
  
• A nouveau menu Edition / copier
  
• Dans un nouveau message ici, faire un clic droit / coller
  

 

Alors restera à voir si une âme charitable aura le temps de l’analyser…car ce n’est pas de tout repos….

soit patient......et je vais essayer de le regarder dans les prochains jours si personne ne te donne de contre-rendu

@+

Modifié le 6 avril 2008 par Zonk

[kutzman]

  Zonk a dit :

 

Tu pourrais peut être répondre à Pear:

As tu des anomalies ??

 

Pour le scan kaspersky j'aurais le temps de jeter un oeil.....

-Scan en ligne

Pense à désactiver Antivir temporairement le temps du scan ..

 

Kaspersky

-Clique sur Accept

Une barre jaune va te demander si tu acceptes d'installer le Kavwebscan_Unicode.cab, installe l'Active X.

clique une nouvelle fois sur "Accept"

Les bases de mises à jour vont s'installer, patiente un moment

-Clique sur "Next".

-Clique sur "My Compurter", le scan se met en route; attends la fin du scan sans fermer la fenêtre sinon il s'arrêtera.

 

 

A la fin du scan, clique sur Save report as...

Choisis bureau et nomme le rapport "rapport Kaspersky" et dans le champ d'enregistrement, choisis "fichiers texte" enregistre alors le rapport.

 

Copie/colle la totalité du fichier texte ouvert, par clic droit dessus, sélectionner tout/copier.

 

Colle ce rapport dans ta réponse dans ton prochain message

NOTE: Le scan est à faire avec Internet Explorer.

 

 

DiagHelp

 

Télécharge DiagHelp.zip de Malekal_morte sur ton bureau - Tuto : http://www.malekal.com/DiagHelp/DiagHelp.php

• Ne double-clic pas dessus !! Fais un clic droit sur le fichier et extraire tout
• Un nouveau dossier chercher va être créer DiagHelp
• Ouvre le et double-clic sur go.cmd (le .cmd peut ne pas apparaître)
• Une fenêtre va s'ouvrir, choisis l'option 1
• L'analyse va commencer, ceci peut durer quelques minutes, laisse faire et appuie sur une touche quand on te le demande.
• A la fin de l'analyse, il te sera redemandé de redémarrer l'ordinateur.
• Une fois l'ordinateur redémarré le rapport va apparaître sur le bloc-note.. Ce dernier se trouve sur C:\resultat.txt
• Copie/colle le contenu du bloc-note qui s'ouvre, pour cela :
• Dans le bloc-note, cliquez sur le menu Edition / Sélectionner tout
• A nouveau menu Edition / copier
• Dans un nouveau message ici, faire un clic droit / coller

 

Alors restera à voir si une âme charitable aura le temps de l’analyser…car ce n’est pas de tout repos….

soit patient......et je vais essayer de le regarder dans les prochains jours si personne ne te donne de contre-rendu

@+

 

 

merci de ton aide. pour réponse a Pear j'ai souvent des ralentissements et quelques déconnections d'internet explorer.

 

 

voilà le rapport de kapersky:

 

-------------------------------------------------------------------------------

KASPERSKY ONLINE SCANNER REPORT

Sunday, April 06, 2008 9:04:38 PM

Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)

Kaspersky Online Scanner version: 5.0.98.0

Kaspersky Anti-Virus database last update: 6/04/2008

Kaspersky Anti-Virus database records: 686632

-------------------------------------------------------------------------------

 

Scan Settings:

Scan using the following antivirus database: extended

Scan Archives: true

Scan Mail Bases: true

 

Scan Target - My Computer:

C:\

D:\

E:\

F:\

G:\

H:\

I:\

J:\

 

Scan Statistics:

Total number of scanned objects: 57904

Number of viruses found: 0

Number of infected objects: 0

Number of suspicious objects: 0

Duration of the scan process: 01:18:41

 

Infected Object Name / Virus Name / Last Action

C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\Stéphanie\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\ApplicationHistory\hpqimzone.exe.3204510e.ini.inuse Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\administrativeInfo.dbf Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.cdx Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.dbf Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.cdx Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.dbf Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\CB_Server_Errors.txt Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.cdx Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.dbf Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.cdx Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.dbf Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.fpt Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.cdx Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.dbf Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.cdx Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.dbf Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\managedFolderTable.dbf Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.cdx Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.dbf Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\propertiesTable.cdx Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\propertiesTable.dbf Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.cdx Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.dbf Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.cdx Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.dbf Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Historique\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Historique\History.IE5\MSHist012008040420080405\index.dat Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Temp\~DF3258.tmp Object is locked skipped

C:\Documents and Settings\Stéphanie\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\Stéphanie\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\Stéphanie\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\Sébastien\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\administrativeInfo.dbf Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.cdx Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.dbf Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.cdx Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.dbf Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\CB_Server_Errors.txt Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.cdx Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.dbf Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.cdx Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.dbf Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.fpt Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.cdx Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.dbf Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.cdx Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.dbf Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\managedFolderTable.dbf Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.cdx Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.dbf Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\propertiesTable.cdx Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\propertiesTable.dbf Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.cdx Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.dbf Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.cdx Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.dbf Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Historique\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Temp\~DF7D8A.tmp Object is locked skipped

C:\Documents and Settings\Sébastien\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\Sébastien\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\Sébastien\ntuser.dat.LOG Object is locked skipped

C:\Program Files\Avira\AntiVir PersonalEdition Classic\avnotify.exe Object is locked skipped

C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

C:\System Volume Information\_restore{A9A87E58-CB46-406E-8177-492CAE1A9FC3}\RP54\change.log Object is locked skipped

C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped

C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped

C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped

C:\WINDOWS\Internet Logs\S-16DD613F65DB4.ldb Object is locked skipped

C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped

C:\WINDOWS\SchedLgU.Txt Object is locked skipped

C:\WINDOWS\SD69D4BEA.tmp Object is locked skipped

C:\WINDOWS\SoftwareDistribution\EventCache\{7D1EF419-6838-443A-95FD-EF637D2C2BB5}.bin Object is locked skipped

C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped

C:\WINDOWS\Sti_Trace.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped

C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\default Object is locked skipped

C:\WINDOWS\system32\config\default.LOG Object is locked skipped

C:\WINDOWS\system32\config\Internet.evt Object is locked skipped

C:\WINDOWS\system32\config\ODiag.evt Object is locked skipped

C:\WINDOWS\system32\config\OSession.evt Object is locked skipped

C:\WINDOWS\system32\config\SAM Object is locked skipped

C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped

C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\SECURITY Object is locked skipped

C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped

C:\WINDOWS\system32\config\software Object is locked skipped

C:\WINDOWS\system32\config\software.LOG Object is locked skipped

C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\system Object is locked skipped

C:\WINDOWS\system32\config\system.LOG Object is locked skipped

C:\WINDOWS\system32\drivers\fidbox.dat Object is locked skipped

C:\WINDOWS\system32\drivers\fidbox.idx Object is locked skipped

C:\WINDOWS\system32\h323log.txt Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped

C:\WINDOWS\Temp\ZLT00685.TMP Object is locked skipped

C:\WINDOWS\Temp\ZLT00688.TMP Object is locked skipped

C:\WINDOWS\wiadebug.log Object is locked skipped

C:\WINDOWS\wiaservc.log Object is locked skipped

C:\WINDOWS\WindowsUpdate.log Object is locked skipped

D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

 

Scan process completed.

 

 

 

et le rapport de diaghelp:

 

 

DiagHelp version v1.4 - http://www.malekal.com

excute le 06/04/2008 à 21:08:54,83

 

 

Liste des derniers fichies modifies/crees dans windir\system32 et prefetch

C:\WINDOWS\prefetch\CHCP.COM-18156052.pf -->06/04/2008 21:08:31

C:\WINDOWS\prefetch\CMD.EXE-087B4001.pf -->06/04/2008 21:08:16

C:\WINDOWS\prefetch\WINRAR.EXE-39C6DAD9.pf -->06/04/2008 21:07:58

C:\WINDOWS\prefetch\IEXPLORE.EXE-27122324.pf -->06/04/2008 21:06:43

C:\WINDOWS\prefetch\NOTEPAD.EXE-336351A9.pf -->06/04/2008 21:04:55

C:\WINDOWS\prefetch\WUAUCLT.EXE-399A8E72.pf -->06/04/2008 19:42:58

C:\WINDOWS\prefetch\SOPADVER.EXE-1D728647.pf -->06/04/2008 19:00:40

C:\WINDOWS\prefetch\SOPCAST.EXE-14A066ED.pf -->06/04/2008 19:00:30

C:\WINDOWS\prefetch\WSCNTFY.EXE-1B24F5EB.pf -->06/04/2008 18:56:27

C:\WINDOWS\prefetch\UPDATE.EXE-264167D5.pf -->06/04/2008 18:45:18

 

C:\WINDOWS\System32\drivers\fidbox.dat -->06/04/2008 21:08:32

C:\WINDOWS\System32\drivers\fidbox.idx -->03/04/2008 19:40:27

C:\WINDOWS\System32\drivers\pcouffin.sys -->14/03/2008 22:18:49

C:\WINDOWS\System32\drivers\avipbb.sys -->14/03/2008 19:00:18

C:\WINDOWS\System32\drivers\cdralw2k.sys -->21/02/2008 04:05:40

C:\WINDOWS\System32\drivers\PxHelp20.sys -->21/02/2008 04:05:38

C:\WINDOWS\System32\drivers\cdr4_xp.sys -->21/02/2008 04:05:38

 

C:\WINDOWS\System32\wpa.dbl -->06/04/2008 07:55:36

C:\WINDOWS\System32\vsconfig.xml -->03/04/2008 19:41:38

C:\WINDOWS\System32\perfh00C.dat -->02/04/2008 08:08:21

C:\WINDOWS\System32\perfc00C.dat -->02/04/2008 08:08:21

C:\WINDOWS\System32\perfh009.dat -->02/04/2008 08:08:20

C:\WINDOWS\System32\perfc009.dat -->02/04/2008 08:08:20

C:\WINDOWS\System32\PerfStringBackup.INI -->02/04/2008 08:08:18

C:\WINDOWS\System32\UninstIPP.isu -->18/03/2008 14:39:10

C:\WINDOWS\System32\zllictbl.dat -->17/03/2008 16:57:46

C:\WINDOWS\System32\FNTCACHE.DAT -->16/03/2008 22:31:21

C:\WINDOWS\System32\jupdate-1.6.0_05-b13.log -->16/03/2008 13:55:31

C:\WINDOWS\System32\uxtheme.dll -->15/03/2008 08:38:02

C:\WINDOWS\System32\TZLog.log -->14/03/2008 19:34:41

C:\WINDOWS\System32\nscompat.tlb -->14/03/2008 19:31:08

C:\WINDOWS\System32\amcompat.tlb -->14/03/2008 19:31:08

C:\WINDOWS\System32\h323log.txt -->14/03/2008 19:27:59

C:\WINDOWS\System32\wpa.bak -->14/03/2008 19:11:23

C:\WINDOWS\System32\$winnt$.inf -->14/03/2008 18:35:02

C:\WINDOWS\System32\CONFIG.NT -->14/03/2008 18:33:08

C:\WINDOWS\System32\WindowsLogon.manifest -->14/03/2008 18:32:11

C:\WINDOWS\System32\logonui.exe.manifest -->14/03/2008 18:32:11

C:\WINDOWS\System32\wuaucpl.cpl.manifest -->14/03/2008 18:32:06

C:\WINDOWS\System32\sapi.cpl.manifest -->14/03/2008 18:32:06

C:\WINDOWS\System32\nwc.cpl.manifest -->14/03/2008 18:32:06

C:\WINDOWS\System32\ncpa.cpl.manifest -->14/03/2008 18:32:06

 

C:\WINDOWS\setupapi.log -->06/04/2008 19:24:46

C:\WINDOWS\WindowsUpdate.log -->06/04/2008 15:06:44

C:\WINDOWS\NeroDigital.ini -->06/04/2008 10:27:07

C:\WINDOWS\setuperr.log -->06/04/2008 08:39:25

C:\WINDOWS\setupact.log -->06/04/2008 08:39:25

C:\WINDOWS\wiadebug.log -->03/04/2008 19:41:29

C:\WINDOWS\wiaservc.log -->03/04/2008 19:41:27

C:\WINDOWS\bootstat.dat -->03/04/2008 19:41:08

C:\WINDOWS\SchedLgU.Txt -->03/04/2008 19:40:24

C:\WINDOWS\win.ini -->28/03/2008 19:45:55

C:\WINDOWS\bbbconfig.dat -->27/03/2008 09:46:12

C:\WINDOWS\d3dx.dat -->24/03/2008 08:27:54

C:\WINDOWS\system.ini -->21/03/2008 21:33:54

C:\WINDOWS\PhotoSnapViewer.INI -->20/03/2008 20:49:00

C:\WINDOWS\ejaymp3p.inf -->19/03/2008 21:12:22

 

winlogon.exe

Verified: Signed

svchost.exe

Verified: Signed

ws2_32.dll

Verified: Signed

user32.dll

Verified: Signed

tcpip.sys

Verified: Signed

ndis.sys

Verified: Signed

null.sys

Verified: Signed

 

 

ListDLLs v2.25 - DLL lister for Win9x/NT

Copyright © 1997-2004 Mark Russinovich

Sysinternals - www.sysinternals.com

 

------------------------------------------------------------------------------

explorer.exe pid: 1536

Command line: C:\WINDOWS\Explorer.EXE

 

Base Size Version Path

0x44080000 0xcf000 7.00.6000.16608 C:\WINDOWS\system32\WININET.dll

0x00400000 0x9000 6.00.5441.0000 C:\WINDOWS\system32\Normaliz.dll

0x43e00000 0x45000 7.00.6000.16608 C:\WINDOWS\system32\iertutil.dll

0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll

0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL

0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll

0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL

0x01670000 0x2be000 3.01.4000.4039 C:\WINDOWS\system32\msi.dll

0x44360000 0x5cd000 7.00.6000.16608 C:\WINDOWS\system32\ieframe.dll

0x44160000 0x127000 7.00.6000.16608 C:\WINDOWS\system32\urlmon.dll

0x442b0000 0x3c000 7.00.6000.16608 C:\WINDOWS\system32\webcheck.dll

0x164a0000 0x23000 5.02.5721.5145 C:\WINDOWS\system32\WPDShServiceObj.dll

0x109c0000 0x2c000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceTypes.dll

0x10930000 0x49000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceApi.dll

0x129b0000 0x24000 15.00.0000.0000 C:\Program Files\ScanSoft\OmniPageSE4.0\OpHookSE4.dll

0x10000000 0x11000 C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon.dll

0x00d60000 0xe000 1.09.0000.0000 C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.dll

0x00db0000 0x12000 C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.dll

0x01d00000 0x1f000 1.06.0001.0005 C:\PROGRA~1\POPUPP~1\PopLib.dll

0x40000000 0xaa000 6.00.0006.0240 C:\WINDOWS\system32\rtl60.bpl

0x400b0000 0x149000 6.00.0006.0240 C:\WINDOWS\system32\vcl60.bpl

0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll

0x030a0000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll

0x03c20000 0x4c000 8.00.0000.0000 C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.FRA

0x03c70000 0x1b9000 2.00.0000.0007 C:\Program Files\Fichiers communs\Ahead\Lib\NeroDigitalExt.dll

0x7c140000 0x103000 7.10.3077.0000 C:\Program Files\Fichiers communs\Ahead\Lib\MFC71.DLL

0x7c340000 0x56000 7.10.3052.0004 C:\Program Files\Fichiers communs\Ahead\Lib\MSVCR71.dll

0x7c3a0000 0x7b000 7.10.3077.0000 C:\Program Files\Fichiers communs\Ahead\Lib\MSVCP71.dll

0x5d360000 0xf000 7.10.3077.0000 C:\WINDOWS\system32\MFC71FRA.DLL

0x03100000 0x5b000 8.01.0000.0000 C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.dll

0x78130000 0x9b000 8.00.50727.1433 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\MSVCR80.dll

0x58640000 0x8a000 1.09.0000.0305 C:\WINDOWS\system32\l3codeca.acm

0x031b0000 0x1e000 2.00.0000.0000 C:\Program Files\Nero\Nero 7\Nero BackItUp\NBShell.dll

0x03610000 0x102000 7.10.3077.0000 C:\Program Files\Nero\Nero 7\Nero BackItUp\MFC71U.DLL

0x03720000 0xb000 7.00.0462.0000 C:\Program Files\Zone Labs\ZoneAlarm\zlavscan.dll

0x03730000 0x4000 5.03.0017.0000 C:\Program Files\Zone Labs\ZoneAlarm\zlavscan_Loc040c.dll

0x03840000 0x2e000 C:\Program Files\WinRAR\rarext.dll

0x038b0000 0x11000 7.00.0000.0010 C:\Program Files\Avira\AntiVir PersonalEdition Classic\shlext.dll

0x03b10000 0x41000 1.06.0004.0000 C:\Program Files\Axon Data\AxCrypt\1.6.4\ShellExt.dll

0x03970000 0x2a000 7.05.0001.0036 C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll

0x14070000 0x1b000 11.00.5721.5145 C:\WINDOWS\system32\wmpshell.dll

0x03bd0000 0x13000 7.05.0001.0036 C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll

0x046e0000 0x49000 1.00.0000.0000 C:\Program Files\Fichiers communs\Ahead\lib\MediaLibraryNSE.dll

0x5a500000 0x50000 8.05.1302.1018 C:\Program Files\Windows Live\Messenger\fsshext.8.5.1302.1018.dll

0x16210000 0x27e000 5.02.5721.5145 C:\WINDOWS\system32\wpdshext.dll

0x07160000 0x46000 5.02.5721.5145 C:\WINDOWS\system32\Audiodev.dll

0x15110000 0x25a000 11.00.5721.5145 C:\WINDOWS\system32\WMVCore.DLL

0x11c70000 0x3a000 11.00.5721.5238 C:\WINDOWS\system32\WMASF.DLL

0x05950000 0x261000 2.00.0000.3019 C:\Program Files\Fichiers communs\Ahead\lib\AdvrCntr2.dll

0x01940000 0x63000 1.03.0009.0000 C:\Program Files\Sony Ericsson\Mobile\File Manager\fmgrgui.dll

0x01a00000 0x28000 1.03.0002.0000 C:\Program Files\Sony Ericsson\Mobile\File Manager\fmgrguil.dll

0x04930000 0x21000 1.02.0001.0002 C:\WINDOWS\BricoPacks\Vista Inspirat 2\iColorFolder\CMExt.dll

0x095a0000 0x5a000 1.00.0000.0013 C:\WINDOWS\system32\LCODCCMP.DLL

------------------------------------------------------------------------------

explorer.exe pid: 1376

Command line: C:\WINDOWS\Explorer.EXE

 

Base Size Version Path

0x44080000 0xcf000 7.00.6000.16608 C:\WINDOWS\system32\WININET.dll

0x00400000 0x9000 6.00.5441.0000 C:\WINDOWS\system32\Normaliz.dll

0x43e00000 0x45000 7.00.6000.16608 C:\WINDOWS\system32\iertutil.dll

0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll

0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL

0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll

0x01400000 0x2be000 3.01.4000.4039 C:\WINDOWS\system32\msi.dll

0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL

0x44360000 0x5cd000 7.00.6000.16608 C:\WINDOWS\system32\ieframe.dll

0x44160000 0x127000 7.00.6000.16608 C:\WINDOWS\system32\urlmon.dll

0x442b0000 0x3c000 7.00.6000.16608 C:\WINDOWS\system32\webcheck.dll

0x164a0000 0x23000 5.02.5721.5145 C:\WINDOWS\system32\WPDShServiceObj.dll

0x109c0000 0x2c000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceTypes.dll

0x10930000 0x49000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceApi.dll

0x129b0000 0x24000 15.00.0000.0000 C:\Program Files\ScanSoft\OmniPageSE4.0\OpHookSE4.dll

0x78130000 0x9b000 8.00.50727.1433 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\MSVCR80.dll

0x01d80000 0x1f000 1.06.0001.0005 C:\PROGRA~1\POPUPP~1\PopLib.dll

0x40000000 0xaa000 6.00.0006.0240 C:\WINDOWS\system32\rtl60.bpl

0x400b0000 0x149000 6.00.0006.0240 C:\WINDOWS\system32\vcl60.bpl

0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll

0x02ff0000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll

0x03810000 0x4c000 8.00.0000.0000 C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.FRA

0x02e20000 0x7000 1.00.0000.0001 C:\Program Files\Adobe\Reader 8.0\Reader\viewerps.dll

0x58640000 0x8a000 1.09.0000.0305 C:\WINDOWS\system32\l3codeca.acm

 

ListDLLs v2.25 - DLL lister for Win9x/NT

Copyright © 1997-2004 Mark Russinovich

Sysinternals - www.sysinternals.com

 

------------------------------------------------------------------------------

winlogon.exe pid: 716

Command line: winlogon.exe

 

Base Size Version Path

0x01000000 0x81000 \??\C:\WINDOWS\system32\winlogon.exe

0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll

0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll

0x20000000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll

0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL

0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll

0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL

------------------------------------------------------------------------------

winlogon.exe pid: 352

Command line: winlogon.exe

 

Base Size Version Path

0x01000000 0x81000 \??\C:\WINDOWS\system32\winlogon.exe

0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll

0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll

0x20000000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll

0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL

0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll

0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL

 

 

Le volume dans le lecteur C n'a pas de nom.

Le numéro de série du volume est 5C6C-102C

 

Répertoire de C:\WINDOWS\system

 

16/02/1999 02:06 4 064 Aspiexec.exe

1 fichier(s) 4 064 octets

0 Rép(s) 24 172 052 480 octets libres

Le volume dans le lecteur C n'a pas de nom.

Le numéro de série du volume est 5C6C-102C

 

Répertoire de C:\WINDOWS\system32

 

02/03/2006 14:00 6 144 csrss.exe

1 fichier(s) 6 144 octets

0 Rép(s) 24 172 052 480 octets libres

 

Contenu de Downloaded Program Files

Le volume dans le lecteur C n'a pas de nom.

Le numéro de série du volume est 5C6C-102C

 

Répertoire de C:\WINDOWS\Downloaded Program Files

 

06/04/2008 17:43 <REP> .

06/04/2008 17:43 <REP> ..

07/12/2004 18:07 32 bdcore.dll

25/05/2006 02:21 118 784 bdupd.dll

15/06/2007 16:43 2 197 088 ddfotg.1.0.0.37.dll

15/06/2007 16:43 245 ddfotg.1.0.0.37.inf

14/03/2008 18:32 65 desktop.ini

25/07/2002 18:13 24 576 dwusplay.dll

25/07/2002 18:13 196 608 dwusplay.exe

20/11/2007 17:04 1 523 536 FP_AX_CAB_INSTALLER.exe

25/05/2006 02:21 53 248 ipsupd.dll

16/02/2005 17:15 401 408 isusweb.dll

22/02/2008 05:50 1 060 jinstall-6u5.inf

07/01/2007 12:55 2 305 kavwebscan.inf

16/03/2005 13:34 7 407 lang.ini

07/12/2004 18:07 32 libfn.dll

13/02/2008 18:55 130 live.ini

30/07/2007 20:24 295 muweb.inf

04/02/2008 18:53 361 OGAControl.inf

29/10/2007 17:45 1 244 oscan8.inf

25/10/2007 17:54 471 040 oscan8.ocx

14/03/2005 15:58 7 073 scanoptions.tsi

20/11/2007 16:50 247 swflash.inf

21 fichier(s) 5 006 784 octets

 

Total des fichiers listés :

21 fichier(s) 5 006 784 octets

2 Rép(s) 24 172 052 480 octets libres

 

Recherche de rootkit! (Merci S!Ri)

 

Recherche d'infections connues

 

Export des clefs sensibles..

 

 

Liste des fichiers en exception sur le pare-feu XP SP2

 

"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"

"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"

"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"

"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe"="C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe:*:Enabled:AVG Anti-Spyware"

"C:\\Program Files\\Avira\\AntiVir PersonalEdition Classic\\avcenter.exe"="C:\\Program Files\\Avira\\AntiVir PersonalEdition Classic\\avcenter.exe:*:Enabled:Start AntiVir PersonalEdition Classic"

 

"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"

"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

 

Export de la clef SharedTaskScheduler

 

[sharedTaskScheduler]

"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"

"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"

 

 

 

exports des policies

REGEDIT4

 

[system]

"dontdisplaylastusername"=dword:00000000

"legalnoticecaption"=""

"legalnoticetext"=""

"shutdownwithoutlogon"=dword:00000001

"undockwithoutlogon"=dword:00000001

 

 

 

Export des clefs sensibles..

Rechercher adresses sensibles dans le fichier HOSTS...

catchme 0.3.1319 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-04-06 21:11:07

Windows 5.1.2600 Service Pack 2 NTFS

 

scanning hidden services & system hive ...

 

IPC error: 2 Le fichier spécifié est introuvable.

scanning hidden registry entries ...

 

scanning hidden files ...

 

scan completed successfully

hidden services: 0

hidden files: 0

 

 

KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg)

 

Process list by traversal of KiWaitListHead

 

4 - System

352 - winlogon.exe

612 - sched.exe

624 - guard.exe

692 - csrss.exe

716 - winlogon.exe

760 - services.exe

772 - lsass.exe

820 - hpqtra08.exe

908 - csrss.exe

928 - svchost.exe

976 - svchost.exe

1016 - svchost.exe

1060 - Monitor.exe

1108 - svchost.exe

1188 - svchost.exe

1248 - vsmon.exe

1256 - alg.exe

1340 - avgas.exe

1376 - explorer.exe

1536 - explorer.exe

1936 - spoolsv.exe

1984 - avguard.exe

2236 - VTTimer.exe

2352 - VTTrayp.exe

2420 - Monitor.exe

2524 - zlclient.exe

2600 - VPro500.exe

2612 - ctfmon.exe

2624 - RocketDock.exe

2680 - everest.exe

2720 - VTTimer.exe

2748 - hpqtra08.exe

2756 - VPro500.exe

2844 - YzShadow.exe

3292 - zlclient.exe

3340 - VTTrayp.exe

3384 - avgnt.exe

3468 - ctfmon.exe

3856 - hpqimzone.exe

4032 - avgas.exe

5848 - hpqimzone.exe

7500 - cmd.exe

7816 - iexplore.exe

 

Total number of processes = 44

NOTE: Under WinXP, this will not show all processes.

 

KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg)

 

Driver/Module list by traversal of PsLoadedModuleList

 

804D7000 - \WINDOWS\system32\ntkrnlpa.exe

806CE000 - \WINDOWS\system32\hal.dll

BADA8000 - \WINDOWS\system32\KDCOM.DLL

BACB8000 - \WINDOWS\system32\BOOTVID.dll

BA778000 - ACPI.sys

BADAA000 - \WINDOWS\system32\DRIVERS\WMILIB.SYS

BA767000 - pci.sys

BA8A8000 - isapnp.sys

BAE70000 - pciide.sys

BAB28000 - \WINDOWS\system32\DRIVERS\PCIIDEX.SYS

BADAC000 - viaide.sys

BA8B8000 - MountMgr.sys

BA748000 - ftdisk.sys

BAB30000 - PartMgr.sys

BA8C8000 - VolSnap.sys

BA730000 - atapi.sys

BA8D8000 - disk.sys

BA8E8000 - \WINDOWS\system32\DRIVERS\CLASSPNP.SYS

BA710000 - fltMgr.sys

BA6FE000 - sr.sys

BA8F8000 - PxHelp20.sys

BA6E7000 - KSecDD.sys

BA65A000 - Ntfs.sys

BA62D000 - NDIS.sys

BA619000 - srescan.sys

BA5FE000 - Mup.sys

BA908000 - gagp30kx.sys

BAAA8000 - \SystemRoot\system32\DRIVERS\AmdPPM.sys

BA58B000 - \SystemRoot\system32\DRIVERS\vtmini.sys

BA577000 - \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS

BAAB8000 - \SystemRoot\system32\DRIVERS\imapi.sys

BADCA000 - \SystemRoot\System32\Drivers\ElbyDelay.sys

BAAC8000 - \SystemRoot\system32\DRIVERS\cdrom.sys

BAAD8000 - \SystemRoot\system32\DRIVERS\redbook.sys

BA554000 - \SystemRoot\system32\DRIVERS\ks.sys

BABD8000 - \SystemRoot\system32\drivers\InCDRm.sys

BABE0000 - \SystemRoot\system32\DRIVERS\usbuhci.sys

BA531000 - \SystemRoot\system32\DRIVERS\USBPORT.SYS

BABE8000 - \SystemRoot\system32\DRIVERS\usbehci.sys

BA141000 - \SystemRoot\system32\drivers\ALCXWDM.SYS

BA11D000 - \SystemRoot\system32\drivers\portcls.sys

BAAE8000 - \SystemRoot\system32\drivers\drmk.sys

BABF0000 - \SystemRoot\system32\DRIVERS\RTL8139.SYS

BABF8000 - \SystemRoot\system32\DRIVERS\fdc.sys

BA10C000 - \SystemRoot\system32\DRIVERS\serial.sys

BAD7C000 - \SystemRoot\system32\DRIVERS\serenum.sys

BA0F8000 - \SystemRoot\system32\DRIVERS\parport.sys

BAAF8000 - \SystemRoot\system32\DRIVERS\i8042prt.sys

BAC00000 - \SystemRoot\system32\DRIVERS\kbdclass.sys

BAF10000 - \SystemRoot\system32\DRIVERS\audstub.sys

BAB08000 - \SystemRoot\system32\DRIVERS\rasl2tp.sys

BAD84000 - \SystemRoot\system32\DRIVERS\ndistapi.sys

BA0E1000 - \SystemRoot\system32\DRIVERS\ndiswan.sys

BAB18000 - \SystemRoot\system32\DRIVERS\raspppoe.sys

BA938000 - \SystemRoot\system32\DRIVERS\raspptp.sys

BAC08000 - \SystemRoot\system32\DRIVERS\TDI.SYS

BA0D0000 - \SystemRoot\system32\DRIVERS\psched.sys

BA948000 - \SystemRoot\system32\DRIVERS\msgpc.sys

BAC10000 - \SystemRoot\system32\DRIVERS\ptilink.sys

BAC18000 - \SystemRoot\system32\DRIVERS\raspti.sys

BA958000 - \SystemRoot\System32\Drivers\pcouffin.sys

BA968000 - \SystemRoot\system32\DRIVERS\termdd.sys

BAC20000 - \SystemRoot\system32\DRIVERS\mouclass.sys

BADD4000 - \SystemRoot\system32\DRIVERS\swenum.sys

B9BC9000 - \SystemRoot\system32\DRIVERS\update.sys

BAD94000 - \SystemRoot\system32\DRIVERS\mssmbios.sys

BA978000 - \SystemRoot\System32\Drivers\NDProxy.SYS

BA988000 - \SystemRoot\system32\DRIVERS\usbhub.sys

BADD6000 - \SystemRoot\system32\DRIVERS\USBD.SYS

B8836000 - \SystemRoot\system32\DRIVERS\klif.sys

BAC38000 - \SystemRoot\system32\DRIVERS\USBSTOR.SYS

BADE0000 - \SystemRoot\System32\Drivers\Fs_Rec.SYS

BAF76000 - \SystemRoot\System32\Drivers\Null.SYS

BADE2000 - \SystemRoot\System32\Drivers\Beep.SYS

BAF7B000 - \SystemRoot\System32\DRIVERS\AvgAsCln.sys

BAC40000 - \SystemRoot\System32\drivers\vga.sys

BADE4000 - \SystemRoot\System32\Drivers\mnmdd.SYS

BADE6000 - \SystemRoot\System32\DRIVERS\RDPCDD.sys

BAC48000 - \SystemRoot\System32\Drivers\Msfs.SYS

BAC50000 - \SystemRoot\System32\Drivers\Npfs.SYS

BAD4C000 - \SystemRoot\system32\DRIVERS\rasacd.sys

B8803000 - \SystemRoot\system32\DRIVERS\ipsec.sys

B87AB000 - \SystemRoot\system32\DRIVERS\tcpip.sys

B8783000 - \SystemRoot\system32\DRIVERS\netbt.sys

B8723000 - \SystemRoot\System32\vsdatant.sys

B8702000 - \SystemRoot\system32\DRIVERS\ipnat.sys

BA9A8000 - \SystemRoot\system32\DRIVERS\wanarp.sys

B86E0000 - \SystemRoot\System32\drivers\afd.sys

BA9B8000 - \SystemRoot\system32\DRIVERS\netbios.sys

BAC60000 - \SystemRoot\system32\DRIVERS\ssmdrv.sys

B86B5000 - \SystemRoot\system32\DRIVERS\rdbss.sys

B8646000 - \SystemRoot\system32\DRIVERS\mrxsmb.sys

BA9D8000 - \SystemRoot\System32\Drivers\Fips.SYS

BAC68000 - \SystemRoot\System32\Drivers\ElbyCDIO.sys

BA9E8000 - \SystemRoot\system32\DRIVERS\avipbb.sys

BADE8000 - \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys

BAFED000 - \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys

BAC70000 - \SystemRoot\system32\DRIVERS\usbccgp.sys

BAC78000 - \SystemRoot\system32\DRIVERS\usbprint.sys

B9BC5000 - \SystemRoot\system32\DRIVERS\hidusb.sys

BAA08000 - \SystemRoot\system32\DRIVERS\HIDCLASS.SYS

BAC80000 - \SystemRoot\system32\DRIVERS\HIDPARSE.SYS

B8556000 - \SystemRoot\system32\DRIVERS\SPC610NC.SYS

BAA18000 - \SystemRoot\system32\DRIVERS\STREAM.SYS

BA5BE000 - \SystemRoot\system32\DRIVERS\mouhid.sys

BAA48000 - \SystemRoot\System32\Drivers\Cdfs.SYS

B8476000 - \SystemRoot\System32\Drivers\dump_atapi.sys

BAE0A000 - \SystemRoot\System32\Drivers\dump_WMILIB.SYS

BF800000 - \SystemRoot\System32\win32k.sys

B8861000 - \SystemRoot\System32\drivers\Dxapi.sys

BAC98000 - \SystemRoot\System32\watchdog.sys

BF9C3000 - \SystemRoot\System32\drivers\dxg.sys

BAE7F000 - \SystemRoot\System32\drivers\dxgthk.sys

AFB6E000 - \SystemRoot\system32\DRIVERS\ndisuio.sys

AF74A000 - \SystemRoot\system32\DRIVERS\mrxdav.sys

AF70D000 - \SystemRoot\system32\drivers\wdmaud.sys

AF896000 - \SystemRoot\system32\drivers\sysaudio.sys

AF3BE000 - \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys

BAE4A000 - \SystemRoot\System32\Drivers\ParVdm.SYS

AF84E000 - \SystemRoot\System32\Drivers\AspiXNT.SYS

AF204000 - \SystemRoot\system32\DRIVERS\srv.sys

AEEA3000 - \SystemRoot\System32\Drivers\HTTP.sys

AF1A4000 - \??\C:\Program Files\Everest\kerneld.wnt

BFF50000 - \SystemRoot\System32\TSDDD.dll

BF9D5000 - \SystemRoot\System32\vtdisp.dll

BADF4000 - \SystemRoot\system32\DRIVERS\k600wh.sys

BADB2000 - \SystemRoot\system32\DRIVERS\k600cm.sys

A17F0000 - \SystemRoot\System32\Drivers\Fastfat.SYS

A1718000 - \SystemRoot\system32\DRIVERS\WlanBZXP.sys

BAFE2000 - \SystemRoot\System32\DRIVERS\KProcCheck.sys

 

Total number of drivers = 130

 

Liste des programmes installes

 

2007 Microsoft Office Suite Service Pack 1 (SP1)

2007 Microsoft Office Suite Service Pack 1 (SP1)

2007 Microsoft Office Suite Service Pack 1 (SP1)

2007 Microsoft Office Suite Service Pack 1 (SP1)

2007 Microsoft Office Suite Service Pack 1 (SP1)

2007 Microsoft Office Suite Service Pack 1 (SP1)

2007 Microsoft Office Suite Service Pack 1 (SP1)

2007 Microsoft Office Suite Service Pack 1 (SP1)

2007 Microsoft Office Suite Service Pack 1 (SP1)

2007 Microsoft Office Suite Service Pack 1 (SP1)

2007 Microsoft Office Suite Service Pack 1 (SP1)

2007 Microsoft Office Suite Service Pack 1 (SP1)

2007 Microsoft Office Suite Service Pack 1 (SP1)

2007 Microsoft Office Suite Service Pack 1 (SP1)

AC3Filter (remove only)

Adobe Flash Player ActiveX

Adobe Reader 8.1.2 - Français

AlauxSoft Comptes et Budget Free V5.0

Archiveur WinRAR

ArcSoft PhotoStudio 5.5

AutoUpdate

AVG Anti-Spyware 7.5

Avira AntiVir PersonalEdition Classic

AxCrypt (Désinstaller uniquement)

Azureus Vuze

Bayden PopupPopper (remove only)

Big Fish Games Client

BufferChm

C'est Quoi Ca - v3.0.0.0

CameraDrivers

CameraUserGuides

CamfrogWEB Advanced ActiveX Plugin (remove only)

Canon CanoScan Toolbox 5.0

Canon iP4200

Canon Utilities Easy-PhotoPrint

CanoScan 4400F

CCleaner (remove only)

CloneDVD2

ConvertXtoDVD 3.0.0.1

Correctif pour Lecteur Windows Media 11 (KB939683)

Correctif pour Windows XP (KB914440)

Correctif Windows XP - KB873339

Correctif Windows XP - KB885836

Correctif Windows XP - KB886185

Correctif Windows XP - KB887472

Correctif Windows XP - KB888302

Correctif Windows XP - KB890859

Correctif Windows XP - KB891781

CP_AtenaShokunin1Config

CP_CalendarTemplates1

cp_OnlineProjectsConfig

CP_Package_Basic1

CP_Panorama1Config

cp_PosterPrintConfig

CueTour

DeepBurner v1.9.0.228

Destinations

DeviceFunctionQFolder

DeviceManagementQFolder

DivX Codec

DivX Player

eMule

eSupportQFolder

Free Easy Burner V 2.1

FullDPAppQFolder

HijackThis 2.0.2

Hotfix for Windows Media Format 11 SDK (KB929399)

Hotfix for Windows XP (KB915865)

Hotfix for Windows XP (KB926239)

HP Appareils photos Photosmart 6.0

HP Imaging Device Functions 6.0

HP Photosmart Premier Software 6.0

HP Software Update

HP Solution Center and Imaging Support Tools 6.0

hpiCamDrvQFolder

HPProductAssistant

InstantShareDevices

Java 6 Update 5

Kaspersky Online Scanner

Lecteur Windows Media 11

livebox

LSI Logic ASPI for Windows 2000

Microsoft .NET Framework 1.1

Microsoft .NET Framework 1.1

Microsoft .NET Framework 1.1 French Language Pack

Microsoft .NET Framework 1.1 Hotfix (KB928366)

Microsoft .NET Framework 2.0 Language Pack - FRA

Microsoft .NET Framework 2.0 Service Pack 1

Microsoft Compression Client Pack 1.0 for Windows XP

Microsoft Internationalized Domain Names Mitigation APIs

Microsoft National Language Support Downlevel APIs

Microsoft Office Access MUI (French) 2007

Microsoft Office Excel MUI (French) 2007

Microsoft Office InfoPath MUI (French) 2007

Microsoft Office Language Pack 2007 Service Pack 1 (SP1)

Microsoft Office Outlook MUI (French) 2007

Microsoft Office PowerPoint MUI (French) 2007

Microsoft Office Professional Plus 2007

Microsoft Office Professional Plus 2007

Microsoft Office Proof (Arabic) 2007

Microsoft Office Proof (Dutch) 2007

Microsoft Office Proof (English) 2007

Microsoft Office Proof (French) 2007

Microsoft Office Proof (German) 2007

Microsoft Office Proof (Spanish) 2007

Microsoft Office Proofing (French) 2007

Microsoft Office Publisher MUI (French) 2007

Microsoft Office Shared MUI (French) 2007

Microsoft Office Word MUI (French) 2007

Microsoft Silverlight

Microsoft Software Update for Web Folders (French) 12

Microsoft User-Mode Driver Framework Feature Pack 1.0

Mise à jour de sécurité pour Lecteur Windows Media (KB911564)

Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)

Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)

Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)

Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)

Mise à jour de sécurité pour Windows XP (KB893756)

Mise à jour de sécurité pour Windows XP (KB896358)

Mise à jour de sécurité pour Windows XP (KB896423)

Mise à jour de sécurité pour Windows XP (KB896428)

Mise à jour de sécurité pour Windows XP (KB899587)

Mise à jour de sécurité pour Windows XP (KB899591)

Mise à jour de sécurité pour Windows XP (KB900725)

Mise à jour de sécurité pour Windows XP (KB901017)

Mise à jour de sécurité pour Windows XP (KB901214)

Mise à jour de sécurité pour Windows XP (KB902400)

Mise à jour de sécurité pour Windows XP (KB905414)

Mise à jour de sécurité pour Windows XP (KB905749)

Mise à jour de sécurité pour Windows XP (KB908519)

Mise à jour de sécurité pour Windows XP (KB911562)

Mise à jour de sécurité pour Windows XP (KB911927)

Mise à jour de sécurité pour Windows XP (KB913580)

Mise à jour de sécurité pour Windows XP (KB914388)

Mise à jour de sécurité pour Windows XP (KB914389)

Mise à jour de sécurité pour Windows XP (KB917344)

Mise à jour de sécurité pour Windows XP (KB918118)

Mise à jour de sécurité pour Windows XP (KB918439)

Mise à jour de sécurité pour Windows XP (KB919007)

Mise à jour de sécurité pour Windows XP (KB920213)

Mise à jour de sécurité pour Windows XP (KB920670)

Mise à jour de sécurité pour Windows XP (KB920683)

Mise à jour de sécurité pour Windows XP (KB920685)

Mise à jour de sécurité pour Windows XP (KB922819)

Mise à jour de sécurité pour Windows XP (KB923191)

Mise à jour de sécurité pour Windows XP (KB923414)

Mise à jour de sécurité pour Windows XP (KB923789)

Mise à jour de sécurité pour Windows XP (KB923980)

Mise à jour de sécurité pour Windows XP (KB924270)

Mise à jour de sécurité pour Windows XP (KB924496)

Mise à jour de sécurité pour Windows XP (KB924667)

Mise à jour de sécurité pour Windows XP (KB925902)

Mise à jour de sécurité pour Windows XP (KB926255)

Mise à jour de sécurité pour Windows XP (KB926436)

Mise à jour de sécurité pour Windows XP (KB927779)

Mise à jour de sécurité pour Windows XP (KB927802)

Mise à jour de sécurité pour Windows XP (KB928255)

Mise à jour de sécurité pour Windows XP (KB928843)

Mise à jour de sécurité pour Windows XP (KB929123)

Mise à jour de sécurité pour Windows XP (KB930178)

Mise à jour de sécurité pour Windows XP (KB931261)

Mise à jour de sécurité pour Windows XP (KB931784)

Mise à jour de sécurité pour Windows XP (KB932168)

Mise à jour de sécurité pour Windows XP (KB933729)

Mise à jour de sécurité pour Windows XP (KB935839)

Mise à jour de sécurité pour Windows XP (KB935840)

Mise à jour de sécurité pour Windows XP (KB936021)

Mise à jour de sécurité pour Windows XP (KB938127)

Mise à jour de sécurité pour Windows XP (KB938829)

Mise à jour de sécurité pour Windows XP (KB941202)

Mise à jour de sécurité pour Windows XP (KB941568)

Mise à jour de sécurité pour Windows XP (KB941569)

Mise à jour de sécurité pour Windows XP (KB941644)

Mise à jour de sécurité pour Windows XP (KB943055)

Mise à jour de sécurité pour Windows XP (KB943460)

Mise à jour de sécurité pour Windows XP (KB943485)

Mise à jour de sécurité pour Windows XP (KB944533)

Mise à jour de sécurité pour Windows XP (KB944653)

Mise à jour de sécurité pour Windows XP (KB946026)

Mise à jour pour Windows XP (KB898461)

Mise à jour pour Windows XP (KB900485)

Mise à jour pour Windows XP (KB904942)

Mise à jour pour Windows XP (KB908531)

Mise à jour pour Windows XP (KB910437)

Mise à jour pour Windows XP (KB911164)

Mise à jour pour Windows XP (KB911280)

Mise à jour pour Windows XP (KB916595)

Mise à jour pour Windows XP (KB920872)

Mise à jour pour Windows XP (KB922582)

Mise à jour pour Windows XP (KB927891)

Mise à jour pour Windows XP (KB930916)

Mise à jour pour Windows XP (KB938828)

Mise à jour pour Windows XP (KB942763)

Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA

Mozilla Firefox (2.0.0.13)

MSXML 4.0 SP2 (KB936181)

Nero 7 Premium

Nvu 1.0PR

Pack Vista Inspirat 2 1.0

PanoStandAlone

PC Booster

Philips SPC500NC Webcam

Philips VLounge

PhotoGallery

PicLens for Internet Explorer

Presto! PageManager 7.15.14

RandMap

Realtek AC'97 Audio

RocketDock 1.3.5

S3GSetup

Sagem Wi-Fi 11g USB adapter (driver)

ScanSoft OmniPage SE 4.0

Security Update for CAPICOM (KB931906)

Security Update for CAPICOM (KB931906)

Security Update for Excel 2007 (KB946974)

Security Update for Office 2007 (KB947801)

Security Update for Outlook 2007 (KB946983)

SkinsHP1

SolutionCenter

Sonic_PrimoSDK

Sony Ericsson PC Suite

SopCast 3.0.1

Spelling Dictionaries Support For Adobe Reader 8

Status

SUPER © Version 2008.bld.30 (Mar 22, 2008)

TrayApp

Unload

Update for Outlook 2007 Junk Email Filter (kb947945)

VIA/S3G Display Driver

VideoLAN VLC media player 0.8.6e

WebFldrs XP

WebReg

Windows Genuine Advantage Validation Tool (KB892130)

Windows Genuine Advantage Validation Tool (KB892130)

Windows Installer 3.1 (KB893803)

Windows Internet Explorer 7

Windows Live installer

Windows Live Messenger

Windows Live Sign-in Assistant

Windows Media Format 11 runtime

Windows Media Format 11 runtime

Windows Media Player 11

ZebHelpProcess 2.24

ZoneAlarm

 

 

 

Le volume dans le lecteur C n'a pas de nom.

Le numéro de série du volume est 5C6C-102C

 

Répertoire de C:\Program Files

 

06/04/2008 08:38 <REP> .

06/04/2008 08:38 <REP> ..

16/03/2008 22:29 <REP> AC3Filter

15/03/2008 08:17 <REP> Adobe

16/03/2008 16:38 <REP> ArcSoft

27/03/2008 06:21 <REP> Astonsoft

14/03/2008 18:45 <REP> Avira

19/03/2008 21:51 <REP> AviSynth 2.5

15/03/2008 14:49 <REP> Axon Data

23/03/2008 12:23 <REP> Azureus

25/03/2008 21:51 <REP> BankPerfect

26/03/2008 10:21 <REP> bfgclient

26/03/2008 21:46 <REP> Boonty

26/03/2008 21:46 <REP> BoontyGames

18/03/2008 14:33 <REP> Canon

14/03/2008 22:17 <REP> CCleaner

14/03/2008 21:06 <REP> CFWebAdvancedU

14/03/2008 18:30 <REP> ComPlus Applications

25/03/2008 21:57 <REP> Comptes et Budget Free V5.0

15/03/2008 08:59 <REP> DivX

14/03/2008 22:15 <REP> Elaborate Bytes

06/04/2008 08:49 <REP> eMule

27/03/2008 21:48 <REP> eRightSoft

02/04/2008 20:55 <REP> Everest

31/03/2008 10:05 <REP> Fichiers communs

17/03/2008 06:30 <REP> Free Easy Burner

27/03/2008 23:35 <REP> GamesBar

18/03/2008 00:22 <REP> Grisoft

16/03/2008 16:49 <REP> Hewlett-Packard

16/03/2008 16:48 <REP> HP

14/03/2008 20:39 <REP> inKline Global

26/03/2008 21:24 <REP> Internet Explorer

16/03/2008 13:55 <REP> Java

27/03/2008 22:56 <REP> Law & Order 2 Demo

19/03/2008 21:15 <REP> LSI Logic

14/03/2008 19:35 <REP> Messenger

16/03/2008 20:37 <REP> Microsoft CAPICOM 2.1.0.2

14/03/2008 18:33 <REP> microsoft frontpage

15/03/2008 08:24 <REP> Microsoft Office

15/03/2008 13:26 <REP> Microsoft Silverlight

15/03/2008 08:24 <REP> Microsoft Visual Studio

15/03/2008 08:25 <REP> Microsoft Works

15/03/2008 08:39 <REP> Movie Maker

04/04/2008 21:20 <REP> Mozilla Firefox

19/03/2008 21:19 <REP> MP3Gain

15/03/2008 08:25 <REP> MSBuild

14/03/2008 18:29 <REP> MSN

14/03/2008 18:29 <REP> MSN Gaming Zone

16/03/2008 20:36 <REP> MSXML 4.0

17/03/2008 06:04 <REP> Nero

14/03/2008 18:31 <REP> NetMeeting

18/03/2008 14:37 <REP> NewSoft

01/04/2008 21:25 <REP> Nvu

27/03/2008 23:58 <REP> Oberon Media

14/03/2008 18:30 <REP> Online Services

26/03/2008 13:48 <REP> orange

15/03/2008 08:39 <REP> Outlook Express

17/03/2008 06:19 <REP> PardaliS Software

28/03/2008 19:46 <REP> Philips

15/03/2008 22:54 <REP> PicLensIE

15/03/2008 22:57 <REP> PopupPopper

26/03/2008 21:26 <REP> Real

14/03/2008 18:39 <REP> Realtek AC97

26/03/2008 21:26 774 144 RngInterstitial.dll

15/03/2008 08:44 <REP> RocketDock

14/03/2008 18:49 <REP> SAGEM

16/03/2008 16:39 <REP> ScanSoft

14/03/2008 18:48 <REP> Securitoo

14/03/2008 18:31 <REP> Services en ligne

21/03/2008 21:17 <REP> Simpli Software

24/03/2008 16:50 <REP> Sony Ericsson

06/04/2008 13:36 <REP> SopCast

24/03/2008 08:20 0 temp01

14/03/2008 18:39 <REP> VIA

15/03/2008 12:16 <REP> VideoLAN

14/03/2008 22:18 <REP> VSO

14/03/2008 18:52 <REP> Wanadoo

14/03/2008 19:19 <REP> Windows Live

14/03/2008 19:30 <REP> Windows Media Connect 2

14/03/2008 19:35 <REP> Windows Media Player

14/03/2008 18:29 <REP> Windows NT

14/03/2008 18:57 <REP> WinRAR

14/03/2008 18:33 <REP> xerox

27/03/2008 07:01 <REP> ZebHelpProcess 2

17/03/2008 16:55 <REP> Zone Labs

25/03/2008 15:30 <REP> Zylom Games

2 fichier(s) 774 144 octets

84 Rép(s) 24 171 188 224 octets libres

Le volume dans le lecteur C n'a pas de nom.

Le numéro de série du volume est 5C6C-102C

 

Répertoire de C:\Program Files\fichiers communs

 

31/03/2008 10:05 <REP> .

31/03/2008 10:05 <REP> ..

15/03/2008 08:17 <REP> Adobe

17/03/2008 06:04 <REP> Ahead

28/03/2008 19:46 <REP> ArcSoft

26/03/2008 21:44 <REP> BOONTY Shared

27/03/2008 06:56 <REP> Borland Shared

16/03/2008 16:37 <REP> CANON

15/03/2008 08:24 <REP> DESIGNER

16/03/2008 16:53 <REP> HP

16/03/2008 16:39 <REP> InstallShield

16/03/2008 13:54 <REP> Java

15/03/2008 13:26 <REP> Microsoft Shared

14/03/2008 18:31 <REP> MSSoap

14/03/2008 19:04 <REP> ODBC

18/03/2008 14:38 <REP> PDFView

26/03/2008 21:31 <REP> Real

16/03/2008 16:39 <REP> ScanSoft Shared

14/03/2008 18:31 <REP> Services

16/03/2008 16:54 <REP> Sonic Shared

28/03/2008 19:45 <REP> SPC500NC

14/03/2008 19:04 <REP> SpeechEngines

15/03/2008 08:21 <REP> System

24/03/2008 16:50 <REP> Teleca Shared

0 fichier(s) 0 octets

24 Rép(s) 24 171 188 224 octets libres

Le volume dans le lecteur C n'a pas de nom.

Le numéro de série du volume est 5C6C-102C

 

Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders

 

15/03/2008 13:25 <REP> .

15/03/2008 13:25 <REP> ..

15/03/2008 08:21 <REP> 1036

29/08/2007 00:55 973 168 MSONSEXT.DLL

26/10/2006 21:12 40 256 MSOSV.DLL

03/06/1999 13:09 122 937 MSOWS409.DLL

07/03/2001 08:00 127 033 MSOWS40c.DLL

4 fichier(s) 1 263 394 octets

3 Rép(s) 24 171 188 224 octets libres

 

 

 

 

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Inst2\Cnmvsa.exe

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Inst2\helpkicker.exe

c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\Zylom\ZylomExtension\HardwareTest.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\animal-agents_s5_l4_gF2338T1L4_d175727143.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\animal-agents_s5_l4_gF2338T1L4_d177187237.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylominstallertemp1206390017\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylominstallertemp1206400004\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylomisrtemp1206266225\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylomisrtemp1206288341\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylomisrtemp1206339248\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylomisrtemp1206343770\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylomisrtemp1206345730\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylomisrtemp1206351290\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylomisrtemp1206352595\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylomisrtemp1206355938\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylomisrtemp1206387693\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylomisrtemp1206388450\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylomisrtemp1206389288\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylomisrtemp1206389716\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylomisrtemp1206394459\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylomisrtemp1206396900\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylomisrtemp1206400019\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylomisrtemp1206445050\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylomisrtemp1206448733\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylomisrtemp1206451780\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\.zylomisrtemp1206451810\ZylomGameITemp.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\SLF39A3.tmp\Alexandra_Ledermann_5_Telecharger{297407}.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\__ArcadeDownloadFoler__poshshopfr_FR_rf\RealOneArcade.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temp\__ArcadeDownloadFoler__poshshopfr_FR_rf\RngcBundler.exe

c:\Documents and Settings\Stéphanie\Local Settings\Temporary Internet Files\Content.IE5\09MBGPE3\amazingadventuresthelosttombdownload[1].exe

c:\Documents and Settings\Stéphanie\Local Settings\Temporary Internet Files\Content.IE5\09MBGPE3\RealArcade[1].exe

c:\Documents and Settings\Stéphanie\Local Settings\Temporary Internet Files\Content.IE5\45MN8HAZ\bonniesbookstoredownload[1].exe

c:\Documents and Settings\Stéphanie\Mes documents\Mes vidéos\Rar$EX00.625\Bomberman.exe

c:\Documents and Settings\Stéphanie\Mes documents\Mes vidéos\Rar$EX00.625\MakeLevel\BMLevEd.exe

c:\Documents and Settings\Stéphanie\Mes documents\programme\audioextractor.exe

c:\Documents and Settings\Stéphanie\Mes documents\programme\Firefox Setup 2.0.0.6.exe

c:\Documents and Settings\Stéphanie\Mes documents\programme\flv2video_converter.exe

c:\Documents and Settings\Stéphanie\Mes documents\programme\FLVPlayerSetup.exe

c:\Documents and Settings\Stéphanie\Mes documents\programme\gamesplayer.exe

c:\Documents and Settings\Stéphanie\Mes documents\programme\Install MPD.exe

c:\Documents and Settings\Stéphanie\Mes documents\programme\RCATSetup.exe

c:\Documents and Settings\Stéphanie\Mes documents\programme\Shockwave_Installer_Slim.exe

c:\Documents and Settings\Sébastien\Application Data\inst.exe

c:\Documents and Settings\Sébastien\Bureau\HijackThis.exe

c:\Documents and Settings\Sébastien\Bureau\crack avg\crack.exe

c:\Documents and Settings\Sébastien\Bureau\DiagHelp\DiagHelp\catchme.exe

c:\Documents and Settings\Sébastien\Bureau\DiagHelp\DiagHelp\diff.exe

c:\Documents and Settings\Sébastien\Bureau\DiagHelp\DiagHelp\dumphive.exe

c:\Documents and Settings\Sébastien\Bureau\DiagHelp\DiagHelp\FilesInfoCmd.exe

c:\Documents and Settings\Sébastien\Bureau\DiagHelp\DiagHelp\find2.exe

c:\Documents and Settings\Sébastien\Bureau\DiagHelp\DiagHelp\Fport.exe

c:\Documents and Settings\Sébastien\Bureau\DiagHelp\DiagHelp\grep.exe

c:\Documents and Settings\Sébastien\Bureau\DiagHelp\DiagHelp\gzip.exe

c:\Documents and Settings\Sébastien\Bureau\DiagHelp\DiagHelp\KProcCheck.exe

c:\Documents and Settings\Sébastien\Bureau\DiagHelp\DiagHelp\LFiles.exe

c:\Documents and Settings\Sébastien\Bureau\DiagHelp\DiagHelp\LISTDLLS.exe

c:\Documents and Settings\Sébastien\Bureau\DiagHelp\DiagHelp\md5sums.exe

c:\Documents and Settings\Sébastien\Bureau\DiagHelp\DiagHelp\pslist.exe

c:\Documents and Settings\Sébastien\Bureau\DiagHelp\DiagHelp\sigcheck.exe

c:\Documents and Settings\Sébastien\Bureau\DiagHelp\DiagHelp\streams.exe

c:\Documents and Settings\Sébastien\Bureau\DiagHelp\DiagHelp\swreg.exe

c:\Documents and Settings\Sébastien\Bureau\DiagHelp\DiagHelp\tar.exe

c:\Documents and Settings\Sébastien\Bureau\site\nvu-1.0PR-win32-installer-fr.exe

c:\Documents and Settings\Sébastien\Bureau\SopCast\Setup-SopCast-3.0.1-2008-3-28.exe

c:\Documents and Settings\Sébastien\Local Settings\Temp\closedbgout.exe

c:\Documents and Settings\Sébastien\Local Settings\Temp\enableirsocketutil.exe

c:\Documents and Settings\Sébastien\Local Settings\Temp\i4jdel0.exe

c:\Documents and Settings\Sébastien\Local Settings\Temp\~nsu.tmp\Au_.exe

c:\Documents and Settings\Sébastien\Mes documents\eMule0.48a-Installer2.exe

c:\Documents and Settings\Sébastien\Mes documents\SUPERsetup.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\ac3filter_1_46.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\antivir_workstation_win7u_en_h.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\AxCrypt-Setup.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\ccsetup206.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\CQC3000.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\DeepBurner1.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\desetup.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\DSLtest2003.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\edit.EXE

c:\Documents and Settings\Sébastien\Mes documents\DVD\eMule0.48a-Installer2.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\IDPhotoStudio.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Install_Messenger.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\installcptfree.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\mp3gain-win-1_2_5.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\MSNFix.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\OODefrag_10_BlueSquad32_FRA.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\poiedit_poiedit_5.1.0_francais_35736.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\POILoaderforWindows_242.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\RocketDock-v1.3.5.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Setup_FreeBurner.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\SetupCloneDVD2912Slysoft.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\spybotsd152.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\SUPERsetup.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\vlc-0.8.6e-win32.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\vsoConvertXtoDVD3_setup-01net.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\WLinstaller.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\zaSetup_fr.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Ahead Nero 7 Premium Multilang With Keygen Cd Version By Verdigo Dcp\Nero7\setupx.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Ahead Nero 7 Premium Multilang With Keygen Cd Version By Verdigo Dcp\Nero7\Nero 7 Premium\SetupX.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Ahead Nero 7 Premium Multilang With Keygen Cd Version By Verdigo Dcp\Nero7\Nero 7 Premium\Redist\50comupd.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Ahead Nero 7 Premium Multilang With Keygen Cd Version By Verdigo Dcp\Nero7\Nero 7 Premium\Redist\instmsia.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Ahead Nero 7 Premium Multilang With Keygen Cd Version By Verdigo Dcp\Nero7\Nero 7 Premium\Redist\instmsiw.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Ahead Nero 7 Premium Multilang With Keygen Cd Version By Verdigo Dcp\Nero7\Nero 7 Premium\Redist\ShFolder.Exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Ahead Nero 7 Premium Multilang With Keygen Cd Version By Verdigo Dcp\Nero7\Nero 7 Premium\Redist\WMFADist.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Ahead Nero 7 Premium Multilang With Keygen Cd Version By Verdigo Dcp\Nero7\Nero 7 Premium\Redist\wmfdist.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Ahead Nero 7 Premium Multilang With Keygen Cd Version By Verdigo Dcp\Nero7\Nero 7 Premium\Redist\DirectX\DXSETUP.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Ahead Nero 7 Premium Multilang With Keygen Cd Version By Verdigo Dcp\Nero7\Nero 7 Premium\Redist\TTS\AgtX0407.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Ahead Nero 7 Premium Multilang With Keygen Cd Version By Verdigo Dcp\Nero7\Nero 7 Premium\Redist\TTS\InstMsiA.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Ahead Nero 7 Premium Multilang With Keygen Cd Version By Verdigo Dcp\Nero7\Nero 7 Premium\Redist\TTS\InstMsiW.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Ahead Nero 7 Premium Multilang With Keygen Cd Version By Verdigo Dcp\Nero7\Nero 7 Premium\Redist\TTS\msagent.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Ahead Nero 7 Premium Multilang With Keygen Cd Version By Verdigo Dcp\Nero7\Nero 7 Premium\Redist\TTS\Setup.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Ahead Nero 7 Premium Multilang With Keygen Cd Version By Verdigo Dcp\Nero7\Nero 7 Premium\Redist\TTS\spchapi.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\avg antispyware\avg-anti-spyware_avg_anti-spyware_7.5.1.36_francais_27645.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\bricopack-vista-inspirat-ultimate-2-crystalxp.net-fr-130\pack-vista-inspirat-2-1.0.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\BSplayer Pro 2.24 Build 954 + Key - By Annimo.[wnet.co.il]\BSplayer Pro 2.24 Build 954 + Key - By Anónimo\bsplayer_pro224.954.de.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\BSplayer Pro 2.24 Build 954 + Key - By Annimo.[wnet.co.il]\BSplayer Pro 2.24 Build 954 + Key - By Anónimo\keygen.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Bsplayer Pro v2.0.0.937 Multilangages Incl Serial\bsplayer_pro200.937.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\CloneDVD v.2.9.1.2 Multilenguaje + KeyGen_DnGnMsTr\CloneDVD v.2.9.1.2 Multilenguaje + KeyGen_DnGnMsTr\KeyMaker.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\CloneDVD v.2.9.1.2 Multilenguaje + KeyGen_DnGnMsTr\CloneDVD v.2.9.1.2 Multilenguaje + KeyGen_DnGnMsTr\SetupCloneDVD.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\CX2DVD3.0.0.1\VSO ConvertXToDVD3001.F4CG\vsoConvertXtoDVD3_setup.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\CX2DVD3.0.0.1\VSO ConvertXToDVD3001.F4CG\cvxtodvd301f\cvxtodvd301f\VSO.Software.ConvertXtoDVD.v3.0.0.1.Cracked.READ.NFO-F4CG\patch.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\DivX Player 6.3+DivX Codec 6.2.5+DivX Converter 6.2+KeyGen\DivX Player 6.3+DivX Codec 6.2.5+DivX Converter 6.2+KeyGen\DivX6.3.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\DivX Player 6.3+DivX Codec 6.2.5+DivX Converter 6.2+KeyGen\DivX Player 6.3+DivX Codec 6.2.5+DivX Converter 6.2+KeyGen\keyGen\DVT-Keymaker.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\DivX Player 6.3+DivX Codec 6.2.5+DivX Converter 6.2+KeyGen\DivX Player 6.3+DivX Codec 6.2.5+DivX Converter 6.2+KeyGen\keyGen\keygen.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Lavasoft\Lavasoft_Adaware2007_fr.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Lavasoft\Crack\AAWLic.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Lavasoft\Crack\Ad-Aware2007.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Lavasoft\Crack\Ad-Watch2007.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Lavasoft\Crack\HostFileEditor.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Lavasoft\Crack\ProcessWatch.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\MSNFix\MSNFix\incl\MD5File.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\MSNFix\MSNFix\incl\msnchk.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\MSNFix\MSNFix\incl\Process.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\MSNFix\MSNFix\incl\setpath.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\MSNFix\MSNFix\incl\swreg.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\MSNFix\MSNFix\incl\zip.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Partition_Magic_8_FR_Complet\BTMagic\Rescueme\Setup.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Partition_Magic_8_FR_Complet\BTMagic\Rescueme\DOSYSTEM\CHKDSK.EXE

c:\Documents and Settings\Sébastien\Mes documents\DVD\Partition_Magic_8_FR_Complet\BTMagic\Setup\setup.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Partition_Magic_8_FR_Complet\DKeeper\instmsia.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Partition_Magic_8_FR_Complet\DKeeper\instmsiw.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Partition_Magic_8_FR_Complet\DKeeper\setup.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Partition_Magic_8_FR_Complet\Rescueme\Setup.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Partition_Magic_8_FR_Complet\Rescueme\DOSYSTEM\CHKDSK.EXE

c:\Documents and Settings\Sébastien\Mes documents\DVD\Partition_Magic_8_FR_Complet\Rescueme\DOSYSTEM\FLOPPY.EXE

c:\Documents and Settings\Sébastien\Mes documents\DVD\Partition_Magic_8_FR_Complet\Rescueme\DOSYSTEM\FLOPPY9x.EXE

c:\Documents and Settings\Sébastien\Mes documents\DVD\Partition_Magic_8_FR_Complet\Rescueme\DOSYSTEM\FLOPPYME.EXE

c:\Documents and Settings\Sébastien\Mes documents\DVD\Partition_Magic_8_FR_Complet\Rescueme\DOSYSTEM\PTEDIT32.EXE

c:\Documents and Settings\Sébastien\Mes documents\DVD\Partition_Magic_8_FR_Complet\Setup\instmsia.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Partition_Magic_8_FR_Complet\Setup\instmsiw.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Partition_Magic_8_FR_Complet\Setup\setup.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\PC Booster 5\pcb50_FRA_Full.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\pcsecuritytest\setup.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Power Dvd7 Deluxe+Crack{by Lucky}\Install\Setup.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Power Dvd7 Deluxe+Crack{by Lucky}\Install\GoogleToolbar\win2kxp\GoogleToolbarInstaller_Chs.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Power Dvd7 Deluxe+Crack{by Lucky}\Install\GoogleToolbar\win2kxp\GoogleToolbarInstaller_Cht.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Power Dvd7 Deluxe+Crack{by Lucky}\Install\GoogleToolbar\win2kxp\GoogleToolbarInstaller_Deu.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Power Dvd7 Deluxe+Crack{by Lucky}\Install\GoogleToolbar\win2kxp\GoogleToolbarInstaller_Enu.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Power Dvd7 Deluxe+Crack{by Lucky}\Install\GoogleToolbar\win2kxp\GoogleToolbarInstaller_Esp.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Power Dvd7 Deluxe+Crack{by Lucky}\Install\GoogleToolbar\win2kxp\GoogleToolbarInstaller_Fra.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Power Dvd7 Deluxe+Crack{by Lucky}\Install\GoogleToolbar\win2kxp\GoogleToolbarInstaller_Ita.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Power Dvd7 Deluxe+Crack{by Lucky}\Install\GoogleToolbar\win2kxp\GoogleToolbarInstaller_Jpn.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Power Dvd7 Deluxe+Crack{by Lucky}\Install\GoogleToolbar\win2kxp\GoogleToolbarInstaller_Kor.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Power Dvd7 Deluxe+Crack{by Lucky}\Install\RichVideo\RichVideo.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Power Dvd7 Deluxe+Crack{by Lucky}\Install\RichVideo\RichVideoInstall.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\Power Dvd7 Deluxe+Crack{by Lucky}\Install\RichVideo\RichVideoUnInstall.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\viruskeeper2007pro\setup.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\WinRAR.v3.70.FR.Incl-Crack\wrar371fr.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\WinRAR.v3.70.FR.Incl-Crack\Crack\WinRAR.v3.xx.Crack.exe

c:\Documents and Settings\Sébastien\Mes documents\DVD\ZHP 2.24\ZHP 2.24.exe

c:\Documents and Settings\Sébastien\Mes documents\Mes albums\SUPERsetup.exe

c:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\BACKUP\FAILSAFE\avewin32.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0404\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0404\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0404\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0405\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0405\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0405\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0406\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0406\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0406\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0407\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0407\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0407\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0408\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0408\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0408\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0409\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0409\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0409\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\040b\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\040b\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\040b\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\040c\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\040c\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\040c\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\040e\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\040e\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\040e\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0410\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0410\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0410\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0411\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0411\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0411\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0412\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0412\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0412\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0413\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0413\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0413\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0414\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0414\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0414\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0415\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0415\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0415\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0419\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0419\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0419\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\041D\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\041D\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\041D\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\041E\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\041E\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\041E\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\041F\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\041F\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\041F\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0804\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0804\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0804\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0816\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0816\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0816\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0c0a\CNMlr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0c0a\CNMsr78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200\LanguageModules\0c0a\CNMur78.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNM_0260.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMBR260.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMDRV.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMDUMP5.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMFUS.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMINST.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLMON2.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLR.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRCN.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRCZ.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRDE.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRDK.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRES.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRFI.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRFR.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRGR.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRHU.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRIT.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRJ.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRKR.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRNL.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRNO.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRPL.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRPT.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRRU.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRSE.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRTH.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRTR.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMLRTW.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMOP78.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMP_260.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMPCOMM.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMPD.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMPP.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMPV.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMQUEUE.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSMSD.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSR.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRCN.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRCZ.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRDE.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRDK.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRES.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRFI.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRFR.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRGR.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRHU.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRIT.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRJ.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRKR.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRNL.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRNO.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRPL.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRPT.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRRU.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRSE.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRTH.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRTR.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSRTW.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMSTMN.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMUI.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMUR.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURCN.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURCZ.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURDE.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURDK.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURES.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURFI.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURFR.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURGR.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURHU.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURIT.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURJ.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURKR.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURNL.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURNO.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURPL.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURPT.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURRU.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURSE.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURTH.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURTR.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMURTW.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMVS.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Driver2\CNMW3.DLL

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Inst2\cnmi040c.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Inst2\cnminst2.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Inst2\cnmis.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Inst2\cnmis4.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Inst2\cnmis5.dll

c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP4200 Installer\Inst2\devid.dll

c:\Documents and Settings\All Users\Application Data\Grisoft\AVG Anti-Spyware 7.5\Downloads\help.dll

c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig.dll

c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll

c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylomgamesplayer.dll

c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\Zylom\BigIslandBlends\fr-FR\BigIslandBlends.dll

c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\Zylom\GenericGameExtension\GenericGameExtension.dll

c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\Zylom\hotelmahjong\fr-FR\fmod.dll

c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\Zylom\hotelmahjong\fr-FR\HotelMahjong.dll

c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\Zylom\MindMedley\fr-FR\MindMedley.dll

c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\Zylom\MyZylomExtension\MyZylomExtension.dll

c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\Zylom\ZylomDeluxeInstaller\ZylomDeluxeInstaller.dll

c:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\Zylom\ZylomExtension\ZylomExtension.dll

c:\Documents and Settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{00013KEU-UKQE-K6V0-6KK2-254E2EDG6VVP}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{00013KEU-UKQE-K6V0-LCDK-256UOEQ6SVVA}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{00013KEU-UKQE-K6V0-QFBF-21L0MSNVAVVA}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{000HQ7FF-AD7A-3FG1-0C15-24GTSFND4VV1}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{000HQ7FF-AD7A-3FG1-7LLS-22TDACKJ0VT8}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{000HQ7FF-AD7A-3FG1-7LLS-22TDACKJ0VU0}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{000HQ7FF-AD7A-3FG1-97R9-24PV6P1ROVVC}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{000HQ7FF-AD7A-3FG1-FP6A-248DTTL0QVVP}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{000HQ7FF-AD7A-3FG2-C4D7-2608OHPQ6VV3}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{000HQ7FF-AD7A-3FG2-CB1H-264U84BSAVVA}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{000HQ7FF-AD7A-3FG2-LJ35-231UUOKHKVVO}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{000HQ7FF-AD7A-3FG3-4CGG-25UBCLN2KVVA}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{000HQ7FF-AD7A-3FG3-NGIN-25I8KVHMGVVG}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{000HQ7FF-AD7A-3FG4-OIBL-25SSVB6LMVV7}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{000HQ7FF-AD7A-3FG5-BPAV-24QJBB1JIVUR}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{000HQ7FF-AD7A-3FG5-EG1B-25KGP2UCCVU0}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{000HQ7FF-AD7A-3FG5-KO19-25DIJFDG6VUK}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{000HQ7FF-AD7A-3FG6-L514-25CJ6NICMVUR}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{000HQ7FF-AD7A-3FG7-7R56-23RS4QKC0VUD}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{1000278T-TT9K-T8DU-1KFV-23O5NTEJMVU6}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Identities\{100HQ7FF-AD7A-3FG6-DVOD-2314O61S2VVN}\xmlparse.dll

c:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\f1eewlf9.default\extensions\OberonGameHost@OberonGames.com\platform\WINNT_x86-msvc\plugins\js32.dll

c:\Documents and Settings\Stéphanie\Application Data\Mozilla\Firefox\Profiles\f1eewlf9.default\extensions\OberonGameHost@OberonGames.com\platform\WINNT_x86-msvc\plugins\npOberonGameHost.dll

c:\Documents and Settings\Sébastien\Application Data\Microsoft\IdentityCRL\Production\ppcrlconfig.dll

 

****** Fin du rapport DiagHelp

Veuillez svp envoyer le fichier C:\upload_moi_S-16DD613F65DB4.tar.gz a l'adresse http://upload.malekal.com

 

 

 

mais j'ai aussi eu un rapport nommé catchme.log, est ce normal? je le joins a tout hasard:

catchme 0.3.1319 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-04-06 21:11:07

Windows 5.1.2600 Service Pack 2 NTFS

 

scanning hidden services & system hive ...

 

IPC error: 2 Le fichier spécifié est introuvable.

scanning hidden registry entries ...

 

scanning hidden files ...

 

scan completed successfully

hidden services: 0

hidden files: 0

 

 

 

et pendant le scan de diaghelp antivir a detecté un trojan nommé TR/infect.MF que j'ai mis en quarantaine.

 

voilà j'espère qu'avec tout ça vous allez pouvoir m'aider. d'avance merci.

 

[Zonk]

Allo

Déja que Kaspersky ne voit rien est un très bon point......

pour ce qui est de la détection de Antivir durant le scan DiagHelp ,je ne peux te dire....mais la coïncidence semble lier à Antivir vs DiagHelp......

Tu auras surement plus d'infos des gens qui si connaissent d'avantage avec DiagHelp

@+ et soit patient...

[kutzman]

  Zonk a dit :

Allo

Déja que Kaspersky ne voit rien est un très bon point......

pour ce qui est de la détection de Antivir durant le scan DiagHelp ,je ne peux te dire....mais la coïncidence semble lier à Antivir vs DiagHelp......

Tu auras surement plus d'infos des gens qui si connaissent d'avantage avec DiagHelp

@+ et soit patient...

 

 

merci beaucoup d'avoir pris le temps de me répondre et pour le trjan détecté je vais attendre la réponse d'un spécialiste de diaghelp.

 

encore merci a+

[pear]

Bonjour,

 

  Citation

et pendant le scan de diaghelp antivir a detecté un trojan nommé TR/infect.MF que j'ai mis en quarantaine.

 

[La détection par Antivir de "TR/inject.MF"

est en fait catchme ,un composant de diaghelp :c'est donc un faux positif./color]

 

Vous allez télécharger Combofix.

Auparavant, et pour pour éviter quelque mauvaise manoeuvre avec ce logiciel très puissant,lisez attentivement ce tutoriel:

http://www.bleepingcomputer.com/combofix/f...iliser-combofix

 

Télécharger combofix.exe de sUBs et sauvegardez le sur le bureau

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Fermez ou désactivez tous les programmes Antivirus, Antispyware, ainsi que tout pare-feu en cours d'exécution car ils pourraient perturber le fonctionnement de ComboFix.

Cela est absolument nécessaire au succès de la procédure.

Bien évidemment, vous les rétablirez ensuite.

 

*Double cliquer sur combofix.exe pour le lancer.

Ne pas fermer la fenêtre qui vient de s'ouvrir , le bureau serait vide et cela pourrait entraîner un plantage du programme!

1)Certaines infections (Rootkit en Mbr)ne peuvent être traitées qu'en utilisant la Console de Récupération,

Nous allons d'abord installer la Console de Récupération sur le pc .

Cela permettra de réparer le système au cas ou le pc ne redémarrerait plus suite à la désinfection.

Si c'est déjà fait, passez au point 2).

* Après avoir cliqué sur le lien correspondant à votre version de Windows, vous serez dirigé sur une page:

cliquez sur le bouton Télécharger afin de récupérer le package d'installation sur leBureau:

Ne modifiez pas le nom du fichier

Windows XP Service Pack 2 (SP2) > Microsoft Windows XP Professionnel SP2

* Faites un glisser/déposer de ce fichier sur le fichier ComboFix.exe comme sur la capture >

http://i261.photobucket.com/albums/ii49/Ma...te/CFScript.gif

* Suivre les indications à l'écran pour lancer ComboFix et lorsqu'on le demande, accepter le Contrat de Licence d'Utilisateur Final pour installer la Console de Récupération Microsoft.

* Lorsque ce sera terminé, un message disant que la Console a bien été installée apparait, puis un rapport nommé CF_RC.txt va s'afficher:

postez en le contenu .

Si pour une raison quelconque, Vista par exemple, combofix ne se lançait pas,

Démarrez en mode sans échec, choisissez le compte Administrateur, lancez Combofix

2)

* Taper sur la touche 1 pour démarrer le scan.

Lorsque ComboFix tourne, ne touchez plus du tout à votre ordinateur, vous risqueriez de planter le programme.

* Lorsque le scan sera terminé,( cela pourrait prendre un certain temps),un rapport sera généré : postez en le contenu dans un prochain message.

* Si le rapport est trop long, postez le en deux fois.

Il se trouve à c:\combofix.txt

[kutzman]

merci beaucoup de prendre le temps de me répondre. voici le log de combofix:

 

ComboFix 08-04-08.10 - Sébastien 2008-04-09 17:41:12.1 - NTFSx86

Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.1042 [GMT 2:00]

Endroit: C:\Documents and Settings\Sébastien\Bureau\ComboFix.exe

* Création d'un nouveau point de restauration

.

 

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

 

C:\Documents and Settings\Sébastien\Application Data\inst.exe

 

.

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

-------\Service_poof

 

 

((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-03-09 to 2008-04-09 ))))))))))))))))))))))))))))))))))))

.

 

2008-04-09 17:10 . 2008-04-09 17:13 1,355 --a------ C:\WINDOWS\imsins.BAK

2008-04-09 15:37 . 2008-04-09 15:37 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Escape From Paradise

2008-04-09 14:40 . 2008-04-09 15:15 <REP> d-------- C:\Program Files\M6 Jeux

2008-04-08 23:34 . 2008-04-08 23:34 107,888 --a------ C:\WINDOWS\system32\CmdLineExt.dll

2008-04-08 15:28 . 2008-04-08 15:28 <REP> d-------- C:\Documents and Settings\All Users\Application Data\eGames

2008-04-06 21:12 . 2008-04-06 21:12 114,802 --a------ C:\upload_moi_S-16DD613F65DB4.tar.gz

2008-04-06 17:43 . 2008-04-06 17:43 <REP> d-------- C:\WINDOWS\system32\Kaspersky Lab

2008-04-06 17:43 . 2008-04-06 17:43 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab

2008-04-02 20:55 . 2008-04-02 20:55 <REP> d-------- C:\Program Files\Everest

2008-04-01 21:24 . 2008-04-01 21:25 <REP> d-------- C:\Program Files\Nvu

2008-03-28 19:46 . 2008-03-28 19:46 <REP> d-------- C:\Program Files\Philips

2008-03-28 19:46 . 2008-03-28 19:46 <REP> d-------- C:\Program Files\Fichiers communs\ArcSoft

2008-03-28 19:46 . 2004-12-07 11:11 258,352 --a------ C:\WINDOWS\system32\unicows.dll

2008-03-28 19:45 . 2008-03-28 19:45 <REP> d-------- C:\WINDOWS\PixArt

2008-03-28 19:45 . 2008-03-28 19:45 <REP> d-------- C:\Program Files\Fichiers communs\SPC500NC

2008-03-28 19:45 . 2006-06-03 00:50 470,016 --a------ C:\WINDOWS\VPro500.exe

2008-03-28 19:45 . 2005-05-17 16:21 10,240 --a------ C:\WINDOWS\system32\SPC610NC.dll

2008-03-27 23:36 . 2008-03-27 23:36 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Go Go Gourmet

2008-03-27 23:35 . 2008-03-27 23:58 <REP> d-------- C:\Program Files\Oberon Media

2008-03-27 22:49 . 2008-03-27 22:56 <REP> d-------- C:\Program Files\Law & Order 2 Demo

2008-03-27 21:48 . 2008-03-27 21:48 <REP> d-------- C:\Program Files\eRightSoft

2008-03-27 21:48 . 2006-09-12 13:46 227,328 -r-hs---- C:\WINDOWS\system32\ac3DX.ax

2008-03-27 21:48 . 2006-03-10 23:48 169,472 -r-hs---- C:\WINDOWS\system32\MatroskaDX.ax

2008-03-27 21:48 . 2006-05-03 12:06 163,328 -r-hs---- C:\WINDOWS\system32\flvDX.dll

2008-03-27 21:48 . 2005-11-25 22:46 161,792 -r-hs---- C:\WINDOWS\system32\RealMediaDX.ax

2008-03-27 21:48 . 2006-01-13 01:23 123,904 -r-hs---- C:\WINDOWS\system32\AVCDX.ax

2008-03-27 21:48 . 2003-11-21 01:00 54,784 -r-hs---- C:\WINDOWS\system32\RLAPEDec.ax

2008-03-27 21:48 . 2004-04-27 01:00 37,888 -r-hs---- C:\WINDOWS\system32\RLMPCDec.ax

2008-03-27 21:48 . 2007-02-21 13:47 31,232 -r-hs---- C:\WINDOWS\system32\msfDX.dll

2008-03-27 21:48 . 2007-12-17 15:43 27,648 ---hs---- C:\WINDOWS\system32\Smab0.dll

2008-03-27 18:13 . 2008-03-27 18:42 <REP> d-------- C:\WINDOWS\BDOSCAN8

2008-03-27 13:52 . 2008-03-27 13:52 <REP> d--hs---- C:\WINDOWS\ftpcache

2008-03-27 10:08 . 2008-03-27 10:08 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Oberon Games

2008-03-27 09:41 . 2008-03-27 09:46 289 --a------ C:\WINDOWS\bbbconfig.dat

2008-03-27 07:00 . 2008-04-06 11:01 13,030 --a------ C:\PDOXUSRS.NET

2008-03-27 06:56 . 2008-03-27 07:01 <REP> d-------- C:\Program Files\ZebHelpProcess 2

2008-03-27 06:56 . 2008-03-27 06:56 <REP> d-------- C:\Program Files\Fichiers communs\Borland Shared

2008-03-27 06:56 . 1999-01-20 06:01 210,032 --a------ C:\WINDOWS\system32\DBCLIENT.DLL

2008-03-27 06:56 . 1999-11-12 06:11 183,808 --a------ C:\WINDOWS\system32\BDEADMIN.CPL

2008-03-27 06:21 . 2008-03-27 06:21 <REP> d-------- C:\Program Files\Astonsoft

2008-03-26 22:04 . 2008-03-26 22:04 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Gogii

2008-03-26 21:46 . 2008-04-09 16:50 <REP> d-------- C:\Program Files\BoontyGames

2008-03-26 21:46 . 2008-03-26 21:46 <REP> d-------- C:\Program Files\Boonty

2008-03-26 21:44 . 2008-03-26 21:44 <REP> d-------- C:\Program Files\Fichiers communs\BOONTY Shared

2008-03-26 21:44 . 2008-03-26 21:44 <REP> d-------- C:\Documents and Settings\All Users\Application Data\BOONTY

2008-03-26 21:30 . 2008-03-26 21:30 <REP> d-------- C:\My Download Files

2008-03-26 21:28 . 2008-03-26 21:26 774,144 --a------ C:\Program Files\RngInterstitial.dll

2008-03-26 21:26 . 2008-03-26 21:26 <REP> d-------- C:\Program Files\Real

2008-03-26 21:26 . 2008-03-26 21:31 <REP> d-------- C:\Program Files\Fichiers communs\Real

2008-03-26 13:48 . 2008-03-26 13:48 <REP> d-------- C:\Program Files\orange

2008-03-26 13:48 . 2008-03-27 23:35 <REP> d-------- C:\Program Files\GamesBar

2008-03-26 11:39 . 2008-03-26 11:39 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Valusoft

2008-03-26 10:31 . 2008-04-09 15:15 <REP> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP

2008-03-26 10:21 . 2008-03-26 10:21 <REP> d-------- C:\Program Files\bfgclient

2008-03-26 10:21 . 2008-03-26 10:31 <REP> d-------- C:\Documents and Settings\All Users\Application Data\BigFishGamesCache

2008-03-25 21:51 . 2008-03-25 21:57 <REP> d-------- C:\Program Files\Comptes et Budget Free V5.0

2008-03-25 21:49 . 2008-03-25 21:51 <REP> d-------- C:\Program Files\BankPerfect

2008-03-25 21:42 . 2008-03-25 21:42 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage

2008-03-24 21:54 . 2008-03-26 14:04 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Sandlot Games

2008-03-24 16:50 . 2008-03-24 16:50 <REP> d-------- C:\Program Files\Sony Ericsson

2008-03-24 16:50 . 2008-03-24 16:50 <REP> d-------- C:\Program Files\Fichiers communs\Teleca Shared

2008-03-24 16:50 . 2008-03-24 16:50 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Sony Ericsson

2008-03-24 16:49 . 2008-03-24 16:49 <REP> d-------- C:\WINDOWS\Downloaded Installations

2008-03-24 16:47 . 2005-05-11 13:12 87,456 -ra------ C:\WINDOWS\system32\drivers\k600mdm.sys

2008-03-24 16:47 . 2005-05-11 13:12 79,248 -ra------ C:\WINDOWS\system32\drivers\k600mgmt.sys

2008-03-24 16:47 . 2005-05-11 13:12 77,072 -ra------ C:\WINDOWS\system32\drivers\k600obex.sys

2008-03-24 16:47 . 2005-05-11 13:12 6,112 -ra------ C:\WINDOWS\system32\drivers\k600cmnt.sys

2008-03-24 16:47 . 2005-05-11 13:12 6,112 -ra------ C:\WINDOWS\system32\drivers\k600cm.sys

2008-03-24 16:47 . 2005-05-11 13:12 6,096 -ra------ C:\WINDOWS\system32\drivers\k600mdfl.sys

2008-03-24 16:46 . 2005-05-11 13:12 52,384 -ra------ C:\WINDOWS\system32\drivers\k600bus.sys

2008-03-24 16:46 . 2005-05-11 13:12 5,744 -ra------ C:\WINDOWS\system32\drivers\k600whnt.sys

2008-03-24 16:46 . 2005-05-11 13:12 5,744 -ra------ C:\WINDOWS\system32\drivers\k600wh.sys

2008-03-24 12:53 . 2008-03-24 12:53 <REP> d-------- C:\Documents and Settings\All Users\Application Data\iWin

2008-03-24 10:03 . 2008-03-24 10:03 <REP> d-------- C:\Documents and Settings\All Users\Application Data\NannyMania

2008-03-24 08:27 . 2008-03-24 08:27 4,096 --a------ C:\WINDOWS\d3dx.dat

2008-03-23 17:04 . 2008-04-09 14:48 <REP> d-------- C:\Documents and Settings\All Users\Application Data\PlayFirst

2008-03-23 16:22 . 2008-04-06 13:36 <REP> d-------- C:\Program Files\SopCast

2008-03-23 14:44 . 2007-05-30 14:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys

2008-03-23 12:14 . 2008-03-23 12:14 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Azureus

2008-03-23 12:13 . 2008-03-23 12:23 <REP> d-------- C:\Program Files\Azureus

2008-03-23 09:14 . 2008-03-23 18:07 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Zylom

2008-03-23 09:13 . 2008-04-08 15:26 <REP> d-------- C:\Program Files\Zylom Games

2008-03-21 21:17 . 2008-03-21 21:17 <REP> d-------- C:\Program Files\Simpli Software

2008-03-21 01:32 . 2008-03-21 01:32 <REP> d--h----- C:\WINDOWS\PIF

2008-03-20 20:48 . 2008-03-20 20:49 151 --a------ C:\WINDOWS\PhotoSnapViewer.INI

2008-03-19 22:23 . 2005-02-22 18:55 81,920 -r-hs---- C:\WINDOWS\system32\aac_parser.ax

2008-03-19 21:51 . 2008-03-19 21:51 <REP> d-------- C:\Program Files\AviSynth 2.5

2008-03-19 21:19 . 2008-03-19 21:19 <REP> d-------- C:\Program Files\MP3Gain

2008-03-19 21:15 . 2008-03-19 21:15 <REP> d-------- C:\Program Files\LSI Logic

2008-03-19 21:15 . 2001-02-26 17:37 57,344 --a------ C:\WINDOWS\system32\Wnaspi32.dll

2008-03-19 21:15 . 2001-02-21 15:51 14,208 --a------ C:\WINDOWS\system32\drivers\Aspixnt.sys

2008-03-19 21:15 . 1999-02-16 02:06 6,672 --a------ C:\WINDOWS\system\Winaspi.dll

2008-03-19 21:15 . 1999-02-16 02:06 4,064 --a------ C:\WINDOWS\system\Aspiexec.exe

2008-03-18 19:19 . 2008-03-14 19:04 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage r‚seau

2008-03-18 19:19 . 2008-03-14 19:04 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression

2008-03-18 19:19 . 2008-03-14 18:29 <REP> d--h----- C:\Documents and Settings\Administrateur\ModŠles

2008-03-18 19:19 . 2008-03-14 19:04 <REP> d-------- C:\Documents and Settings\Administrateur\Mes documents

2008-03-18 19:19 . 2008-03-14 19:04 <REP> dr------- C:\Documents and Settings\Administrateur\Menu D‚marrer

2008-03-18 19:19 . 2008-03-14 19:04 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris

2008-03-18 19:19 . 2008-03-20 18:30 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-03-28 17:46 --------- d--h--w C:\Program Files\InstallShield Installation Information

2008-03-24 06:20 0 ----a-w C:\Program Files\temp01

2008-03-16 14:39 --------- d-----w C:\Program Files\Fichiers communs\InstallShield

2008-03-14 16:52 --------- d-----w C:\Program Files\Wanadoo

2008-03-14 16:49 --------- d-----w C:\Program Files\SAGEM

2008-03-14 16:48 --------- d-----w C:\Program Files\Securitoo

2008-03-14 16:46 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft

2008-03-14 16:45 --------- d-----w C:\Program Files\Avira

2008-03-14 16:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\Avira

2008-03-14 16:41 --------- d-----w C:\Documents and Settings\All Users\Application Data\MailFrontier

2008-03-14 16:39 --------- d-----w C:\Program Files\VIA

2008-03-14 16:39 --------- d-----w C:\Program Files\Realtek AC97

2008-03-14 16:33 --------- d-----w C:\Program Files\microsoft frontpage

2008-03-14 16:31 --------- d-----w C:\Program Files\Services en ligne

2008-02-21 02:05 43,528 ------w C:\WINDOWS\system32\drivers\PxHelp20.sys

2006-05-03 10:06 163,328 --sh--r C:\WINDOWS\system32\flvDX.dll

2007-02-21 11:47 31,232 --sh--r C:\WINDOWS\system32\msfDX.dll

2007-12-17 13:43 27,648 --sh--w C:\WINDOWS\system32\Smab0.dll

.

 

------- Sigcheck -------

 

2007-06-13 15:22 979456 80a5400514eb32d393654768c4017e46 C:\WINDOWS\explorer.exe

2007-06-13 15:10 1037312 b795475444d6d57a572c14b9e1a29839 C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe

2006-03-02 14:00 1036288 2a7bd330924252a2fd80344fc949bb72 C:\WINDOWS\$NtUninstallKB938828$\explorer.exe

2007-06-13 15:22 979456 80a5400514eb32d393654768c4017e46 C:\WINDOWS\system32\dllcache\explorer.exe

.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

REGEDIT4

*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

 

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EAEE5C74-6D0D-4aca-9232-0DA4A7B866BA}]

2008-03-10 21:21 1662976 --a------ C:\Program Files\PicLensIE\PicLens.dll

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 14:00 15360]

"RocketDock"="C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe" [2007-03-19 00:05 630784]

"EVEREST AutoStart"="C:\Program Files\Everest\everest.exe" [2007-10-17 01:00 2043488]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SoundMan"="SOUNDMAN.EXE" [2007-04-16 16:28 577536 C:\WINDOWS\soundman.exe]

"VTTimer"="VTTimer.exe" [2005-03-08 04:33 53248 C:\WINDOWS\system32\VTTimer.exe]

"VTTrayp"="VTtrayp.exe" [2005-03-11 18:33 147456 C:\WINDOWS\system32\VTTrayp.exe]

"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-03-14 19:00 249896]

"SPC500NC_Monitor"="C:\WINDOWS\Philips\SPC500NC\Monitor.exe" [2006-11-03 12:01 319488]

"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]

"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]

"SSBkgdUpdate"="C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-09-28 14:16 185896]

"OpwareSE4"="C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" [2006-10-11 13:45 75304]

"NWEReboot"="" []

"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-12-13 20:27 919016]

"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2008-04-09 17:18 6731312]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 14:00 15360]

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]

"DisableMonitoring"=dword:00000001

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

"C:\\Program Files\\eMule\\emule.exe"=

"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe"=

"C:\\Program Files\\Avira\\AntiVir PersonalEdition Classic\\avcenter.exe"=

 

R2 AspiXNT;AspiXNT;C:\WINDOWS\system32\drivers\AspiXNT.sys [2001-02-21 15:51]

R3 SPC500NC;SPC 500NC Laptop Camera;C:\WINDOWS\system32\DRIVERS\SPC610NC.SYS [2007-01-19 18:14]

S3 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" [2008-03-26 21:44]

S3 k600bus;Sony Ericsson 600i driver (WDM);C:\WINDOWS\system32\DRIVERS\k600bus.sys [2005-05-11 13:12]

S3 k600mdfl;Sony Ericsson 600i USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\k600mdfl.sys [2005-05-11 13:12]

S3 k600mdm;Sony Ericsson 600i USB WMC Modem Drivers;C:\WINDOWS\system32\DRIVERS\k600mdm.sys [2005-05-11 13:12]

S3 k600mgmt;Sony Ericsson 600i USB WMC Device Management Drivers;C:\WINDOWS\system32\DRIVERS\k600mgmt.sys [2005-05-11 13:12]

S3 k600obex;Sony Ericsson 600i USB WMC OBEX Interface Drivers;C:\WINDOWS\system32\DRIVERS\k600obex.sys [2005-05-11 13:12]

S3 SG762_XP;SAGEM 802.11g XG762 1211B Driver;C:\WINDOWS\system32\DRIVERS\WlanBZXP.sys [2005-12-22 15:45]

S3 ZDCndis5;ZDCndis5 Protocol Driver;C:\WINDOWS\system32\ZDCndis5.SYS []

 

.

**************************************************************************

 

catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-04-09 17:46:43

Windows 5.1.2600 Service Pack 2 NTFS

 

Balayage processus cach‚s ...

 

Balayage cach‚ autostart entries ...

 

Balayage des fichiers cach‚s ...

 

Scan termin‚ avec succŠs

Les fichiers cach‚s: 0

 

**************************************************************************

.

--------------------- DLLs a charg‚ sous des processus courants ---------------------

 

PROCESS: C:\WINDOWS\explorer.exe

-> C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.dll

-> C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon.dll

.

------------------------ Other Running Processes ------------------------

.

C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\WINDOWS\VPro500.exe

C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe

C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe

C:\WINDOWS\system32\wscntfy.exe

C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe

.

**************************************************************************

.

Temps d'accomplissement: 2008-04-09 17:48:26 - machine was rebooted

ComboFix-quarantined-files.txt 2008-04-09 15:48:19

Pre-Run: 22,669,119,488 octets libres

Post-Run: 22,591,377,408 octets libres

.

2008-04-09 15:15:03 --- E O F ---

 

 

 

encore merci

[pear]

Bonsoir,

 

je pense que c'est bon.

Je ne vois plus rien d'infectieux.