probleme de virus RESOLU
Forum Sécurité - Virus : probleme de virus RESOLU
tout dabord bonjour !
j ai un gros souci des tonne de fenetre s ouvre des que je vais sur le net ,je vais peter un cable
j ai trend micro PC cillin internet security v 12
spyboot
avg-anti spyware
ect ect j ai du telecharger tout les anti virus et spy du monde et faire 400 scan de mon pc
resulta tjs le meme probleme enfin presque au debut j avais le fameux message
" NON HO TROVATO NESSUM MODEM PER LA CONNESSIONE "
qui s affichais toute les trois secondes maintenant c est regler
pour le reste (les fenetre internet) c est loin d etre le cas!!
voila mon scan
Logfile of HijackThis v1.99.1
Scan saved at 12:59:25, on 22/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wdfmgr.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\Program Files\ASUS\Probe\AsusProb.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\Program Files\BF2G15Mod\BF2 LCD.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PccGuide.exe
C:\PROGRA~1\PRINTV~1\pvmodule.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\GrabClipSave\GrabClipSave.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\RACLE~1\tracert.exe
C:\Program Files\Electronic Arts\EA Downloader\Core.exe
C:\Documents and Settings\motor\Application Data\?dobe\??anregw.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Download\scan.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R3 - URLSearchHook: (no name) - {911B8EB5-452E-48A1-2465-187495D0789E} - C:\WINDOWS\system32\ytnhvbm.dll
O2 - BHO: (no name) - {01D8721E-E0D2-4B09-4319-01837C8982F6} - C:\WINDOWS\system32\oonplu.dll
O2 - BHO: (no name) - {094BD811-40DC-440F-83AF-14349100B091} - (no file)
O2 - BHO: (no name) - {1DAEFCB9-06C8-47c6-8F20-3FB54B244DAA} - C:\WINDOWS\system32\pakohlhj.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {911B8EB5-452E-48A1-2465-187495D0789E} - C:\WINDOWS\system32\ytnhvbm.dll
O2 - BHO: PrintViewBHO Class - {D4E0C464-30CE-4075-9A10-71FD106C2847} - C:\PROGRA~1\PRINTV~1\PRINTH~1.DLL
O2 - BHO: (no name) - {EDF12FAD-011F-4878-8E17-D94A2457E00D} - C:\WINDOWS\system32\jkhhh.dll
O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\\nTune.exe" clear
O4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Probe\AsusProb.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe"
O4 - HKLM\..\Run: [PVModule] C:\PROGRA~1\PRINTV~1\pvmodule.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [GCS] "C:\Program Files\GrabClipSave\GrabClipSave.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Amtw] "C:\WINDOWS\system32\RACLE~1\tracert.exe" -vt yazb
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EA Downloader\Core.exe -silent
O4 - HKCU\..\Run: [Ccaspld] C:\Documents and Settings\motor\Application Data\?dobe\??anregw.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Download with Star Downloader - C:\PROGRA~1\STARDO~1\sdie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - AppInit_DLLs: dxclib303562752.dll
O20 - Winlogon Notify: jkhhh - C:\WINDOWS\system32\jkhhh.dll
O20 - Winlogon Notify: winwim32 - C:\WINDOWS\SYSTEM32\winwim32.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
merci si vous pouviez me sortir de la je vous envoie de champagne par email
Message édité par motor@IDN le 22-10-2006 à 17:12:56
Bonjour,
| Citation : merci si vous pouviez me sortir de la je vous envoie de champagne par email |
Va falloir tenir parole ^^
Télécharge VundoFix.exe (par Atribune) sur ton Bureau.
- Double-clique VundoFix.exe afin de le lancer
- Clique sur le bouton Scan for Vundo
- Lorsque le scan est complété, clique sur le bouton Remove Vundo
- Une invite te demandera si tu veux supprimer les fichiers, clique YES
- Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers
- Tu verras une invite qui t'annonce que ton PC va redémarrer; clique OK
- Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis! dans ta prochaine réponse
Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-haut, à partir de "clique sur le bouton Scan for Vundo".
Répondre à Angeldark
voila !! je te poste les deux rapport dans l ordre
VundoFix V6.2.6
Checking Java version...
Sun Java not detected
Scan started at 13:46:16 22/10/2006
Listing files found while scanning....
C:\WINDOWS\system32\oonplu.dll
C:\WINDOWS\system32\pakohlhj.dll
C:\WINDOWS\system32\waasanh.dll
C:\WINDOWS\system32\iudfonnx.exe
C:\WINDOWS\system32\jkhhh.dll
C:\WINDOWS\system32\hhhkj.ini
C:\WINDOWS\system32\hhhkj.bak1
C:\WINDOWS\system32\hhhkj.bak2
Beginning removal...
Attempting to delete C:\WINDOWS\system32\oonplu.dll
C:\WINDOWS\system32\oonplu.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\pakohlhj.dll
C:\WINDOWS\system32\pakohlhj.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\waasanh.dll
C:\WINDOWS\system32\waasanh.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\iudfonnx.exe
C:\WINDOWS\system32\iudfonnx.exe Has been deleted!
Attempting to delete C:\WINDOWS\system32\jkhhh.dll
C:\WINDOWS\system32\jkhhh.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\hhhkj.ini
C:\WINDOWS\system32\hhhkj.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\hhhkj.bak1
C:\WINDOWS\system32\hhhkj.bak1 Has been deleted!
Attempting to delete C:\WINDOWS\system32\hhhkj.bak2
C:\WINDOWS\system32\hhhkj.bak2 Has been deleted!
Performing Repairs to the registry.
Done!
Logfile of HijackThis v1.99.1
Scan saved at 14:00:06, on 22/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\Program Files\BF2G15Mod\BF2 LCD.exe
C:\Program Files\ASUS\Probe\AsusProb.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\PRINTV~1\pvmodule.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\GrabClipSave\GrabClipSave.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\RACLE~1\tracert.exe
C:\Program Files\Electronic Arts\EA Downloader\Core.exe
C:\Documents and Settings\motor\Application Data\?dobe\??anregw.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Download\scan.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R3 - URLSearchHook: (no name) - {911B8EB5-452E-48A1-2465-187495D0789E} - C:\WINDOWS\system32\ytnhvbm.dll
O2 - BHO: (no name) - {01D8721E-E0D2-4B09-4319-01837C8982F6} - C:\WINDOWS\system32\oonplu.dll (file missing)
O2 - BHO: (no name) - {094BD811-40DC-440F-83AF-14349100B091} - (no file)
O2 - BHO: (no name) - {1DAEFCB9-06C8-47c6-8F20-3FB54B244DAA} - C:\WINDOWS\system32\pakohlhj.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {911B8EB5-452E-48A1-2465-187495D0789E} - C:\WINDOWS\system32\ytnhvbm.dll
O2 - BHO: PrintViewBHO Class - {D4E0C464-30CE-4075-9A10-71FD106C2847} - C:\PROGRA~1\PRINTV~1\PRINTH~1.DLL
O2 - BHO: (no name) - {EDF12FAD-011F-4878-8E17-D94A2457E00D} - C:\WINDOWS\system32\jkhhh.dll (file missing)
O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\\nTune.exe" clear
O4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Probe\AsusProb.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe"
O4 - HKLM\..\Run: [PVModule] C:\PROGRA~1\PRINTV~1\pvmodule.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [GCS] "C:\Program Files\GrabClipSave\GrabClipSave.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Amtw] "C:\WINDOWS\system32\RACLE~1\tracert.exe" -vt yazb
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EA Downloader\Core.exe -silent
O4 - HKCU\..\Run: [Ccaspld] C:\Documents and Settings\motor\Application Data\?dobe\??anregw.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Download with Star Downloader - C:\PROGRA~1\STARDO~1\sdie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - AppInit_DLLs: dxclib303562752.dll
O20 - Winlogon Notify: winwim32 - C:\WINDOWS\SYSTEM32\winwim32.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
ho un petit trucs que j ai remarqué quand je lance un scan avac quasi tout les program mon anti virus detecte BKDR KLONE.BA avec le message echec de la mise en quarantaine (ca l a fait avec vundofix)
voila !
Re,
- Télécharge combofix.exe (par sUBs) sur ton Bureau
- Double clique combofix.exe.
- Tape sur la touche Y (Yes) pour démarrer le scan.
- Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.
NOTE : Le rapport se trouve également ici : C:\Combofix.txt
Répondre à Angeldark
Double post mais c'est pas grave ^^
| Citation : - Assure toi d'avoir accès aux dossiers/fichiers cachés
|
Va sur le site de VirusTotal
Clique sur Parcourir... puis ouvre:
C:\WINDOWS\system32\ytnhvbm.dll
Clique ensuite sur Send
Poste le rapport en fin d'analyse.
Si tu vois ce message:
" Your file " ***.*** " is queued in position: ***. Estimated start time is between *** and *** minutes. "
Il te faudra patienter.
Répondre à Angeldark
le rapport combofix
motor - 06-10-22 14:28:17,96 Service Pack 2
ComboFix 06.10.19 - Running from: "C:\Documents and Settings\motor\Bureau"
((((((((((((((((((((((((((((((((((((((((((( E-Give / Ssk's Log )))))))))))))))))))))))))))))))))))))))))))))))))
C:\Documents and Settings\motor\Application Data\Dxccwrd.dll
C:\Documents and Settings\motor\Application Data\Dxcknwrd.dll
C:\Documents and Settings\motor\Application Data\Dxcuknwrd.dll
C:\WINDOWS\system32\bkd.exe
* * * POST RUN FILES/FOLDERS * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
C:\WINDOWS\system32\wnsintsv.exe
C:\WINDOWS\system32\components
C:\WINDOWS\system32\crunner
C:\Program Files\Fichiers communs\{3093D4C4-07DA-1036-0407-060810050021}
C:\Program Files\Fichiers communs\{7093D4C4-07DA-1036-0407-060810050021}
C:\Program Files\PrintView
~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ Purity ~ ~ ~ ~ ~ ~ ~ ~~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
Folders Quarantined:
C:\QooBox\Purity\Documents and Settings\motor\Application Data\DOBE~1
C:\QooBox\Purity\Documents and Settings\motor\Application Data\MBOLS~1
C:\QooBox\Purity\Documents and Settings\motor\Application Data\DOBE~1\??anregw.exe
C:\QooBox\Purity\WINDOWS\SSTEM3~1
C:\QooBox\Purity\WINDOWS\system32\RACLE~1
C:\QooBox\Purity\WINDOWS\system32\RACLE~1\tracert.exe
C:\QooBox\Purity\WINDOWS\system32\RACLE~1\?racle
((((((((((((((((((((((((((((((( Files Created from 2006-09-22 to 2006-10-22 ))))))))))))))))))))))))))))))))))
2006-10-22 13:50 1,492 --a------ C:\WINDOWSvundofix.reg
2006-10-22 12:02 131,072 --a------ C:\WINDOWS\system32\ytnhvbm.dll
2006-10-21 17:50 43,520 --a------ C:\WINDOWS\system32\CmdLineExt03.dll
2006-10-20 11:02 67,604 --a------ C:\WINDOWS\system32\ikqfrata.exe
2006-10-19 09:48 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2006-10-17 19:57 499,712 --a------ C:\WINDOWS\system32\MSVCP71.dll
2006-10-17 19:57 348,160 --a------ C:\WINDOWS\system32\MSVCR71.dll
2006-10-17 19:57 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll
2006-10-16 00:55 18,432 --------- C:\WINDOWS\system32\winwim32.dll
2006-10-16 00:51 86,016 --a------ C:\WINDOWS\system32\OpenAL32.dll
2006-10-16 00:51 262,144 --a------ C:\WINDOWS\system32\wrap_oal.dll
2006-10-16 00:50 5,632 --a------ C:\WINDOWS\system32\drivers\Entech64.sys
2006-10-16 00:50 3,972 --a------ C:\WINDOWS\system32\drivers\PciBus.sys
2006-10-16 00:50 21,664 --a------ C:\WINDOWS\system32\drivers\Entech.sys
2006-10-15 14:01 9,856 --------- C:\WINDOWS\system32\drivers\pfc.sys
2006-10-13 11:48 63,488 --a------ C:\WINDOWS\system32\unam4ie.exe
2006-10-13 11:48 38,160 --a------ C:\WINDOWS\system32\LMRTREND.dll
2006-10-13 11:48 194,320 --a------ C:\WINDOWS\system32\qcut.dll
2006-10-13 11:48 182,032 --a------ C:\WINDOWS\system32\dxtmsft3.dll
2006-10-13 11:48 10,240 --a------ C:\WINDOWS\system32\vidx16.dll
2006-10-13 11:47 4,608 --a------ C:\WINDOWS\system32\w95inf32.dll
2006-10-13 11:47 212,480 --a------ C:\WINDOWS\pcdlib32.dll
2006-10-13 11:47 2,272 --a------ C:\WINDOWS\system32\w95inf16.dll
2006-10-12 21:20 68,888 --a------ C:\WINDOWS\system32\xinput1_3.dll
2006-10-12 21:20 62,744 --a------ C:\WINDOWS\system32\xinput1_2.dll
2006-10-12 21:20 237,848 --a------ C:\WINDOWS\system32\xactengine2_4.dll
2006-10-12 21:20 236,824 --a------ C:\WINDOWS\system32\xactengine2_3.dll
2006-10-12 21:20 2,414,360 --a------ C:\WINDOWS\system32\d3dx9_31.dll
2006-10-12 21:20 2,297,552 --a------ C:\WINDOWS\system32\d3dx9_26.dll
2006-10-12 21:20 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll
2006-10-12 12:17 40,960 --a------ C:\WINDOWS\system32\ChCfg.exe
2006-10-12 12:17 294,912 --a------ C:\WINDOWS\alcupd.exe
2006-10-12 12:17 200,704 --a------ C:\WINDOWS\alcrmv.exe
2006-10-12 12:17 2,322,816 --a------ C:\WINDOWS\system32\TUKernel.exe
2006-10-12 12:04 4,962 -ra------ C:\WINDOWS\system32\drivers\AsIO.sys
2006-10-12 12:04 24,576 -ra------ C:\WINDOWS\system32\AsIO.dll
2006-10-11 23:31 13,225 --a------ C:\WINDOWS\system32\drivers\Razerlow.sys
2006-10-11 22:45 6,656 --a------ C:\WINDOWS\system32\drivers\AsProbe.sys
2006-10-11 22:42 6,272 --a------ C:\WINDOWS\system32\drivers\ASLM75.SYS
2006-10-11 22:41 299,008 --a------ C:\WINDOWS\uninst.exe
2006-10-11 22:40 38,912 --a------ C:\WINDOWS\system32\drivers\AmdK8.sys
2006-10-11 22:35 60,416 --a------ C:\WINDOWS\ALCFDRTM.EXE
2006-10-11 22:28 32,768 --a------ C:\WINDOWS\system32\LogLCD.dll
2006-10-11 22:28 200,805 --a------ C:\WINDOWS\system32\G15BF2LCD.dll
2006-10-11 22:19 14,336 -ra------ C:\WINDOWS\system32\drivers\NetMotCM.sys
2006-10-11 22:15 94,208 --a------ C:\WINDOWS\system32\CNMLM3k.DLL
2006-10-11 22:15 5,632 --a------ C:\WINDOWS\system32\CNMVS3k.DLL
2006-10-11 22:15 36,864 --a------ C:\WINDOWS\system32\CNMCP3K.EXE
2006-10-11 22:15 327,168 --a------ C:\WINDOWS\IsUn040c.exe
2006-10-11 21:47 92,800 --a------ C:\WINDOWS\system32\drivers\nvata.sys
2006-10-11 21:42 208,896 --a------ C:\WINDOWS\system32\nvudisp.exe
2006-10-11 21:36 9,410,048 --a------ C:\WINDOWS\system32\RTLCPL.EXE
2006-10-11 21:36 77,824 --a------ C:\WINDOWS\SOUNDMAN.EXE
2006-10-11 21:36 2,324,480 --a------ C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2006-10-11 21:36 156,672 --a------ C:\WINDOWS\system32\RTLCPAPI.dll
2006-10-11 21:32 26,496 --a------ C:\WINDOWS\system32\drivers\USBSTOR.SYS
2006-10-11 21:20 82,944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2006-10-11 21:20 7,552 --a------ C:\WINDOWS\system32\drivers\mskssrv.sys
2006-10-11 21:20 60,800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2006-10-11 21:20 6,400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2006-10-11 21:20 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2006-10-11 21:20 52,864 --a------ C:\WINDOWS\system32\drivers\dmusic.sys
2006-10-11 21:20 5,376 --a------ C:\WINDOWS\system32\drivers\mspclock.sys
2006-10-11 21:20 4,992 --a------ C:\WINDOWS\system32\drivers\mspqm.sys
2006-10-11 21:20 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2006-10-11 21:20 21,504 --a------ C:\WINDOWS\system32\hidserv.dll
2006-10-11 21:20 2,944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2006-10-11 21:20 172,416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2006-10-11 21:20 142,464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2006-10-11 21:19 77,312 --a------ C:\WINDOWS\system32\usbui.dll
2006-10-11 21:19 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2006-10-11 21:19 58,496 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2006-10-11 21:19 4,096 --a------ C:\WINDOWS\system32\ksuser.dll
2006-10-11 21:19 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2006-10-11 21:19 2,944 --a------ C:\WINDOWS\system32\drivers\msmpu401.sys
2006-10-11 21:19 145,792 --a------ C:\WINDOWS\system32\drivers\portcls.sys
2006-10-11 21:19 10,624 --a------ C:\WINDOWS\system32\drivers\gameenum.sys
2006-10-11 21:18 8,192 -ra------ C:\WINDOWS\system32\kbdhept.dll
2006-10-11 21:18 7,168 -ra------ C:\WINDOWS\system32\kbdcz.dll
2006-10-11 21:18 6,656 -ra------ C:\WINDOWS\system32\kbdycl.dll
2006-10-11 21:18 6,656 -ra------ C:\WINDOWS\system32\kbdsl1.dll
2006-10-11 21:18 6,656 -ra------ C:\WINDOWS\system32\kbdsl.dll
2006-10-11 21:18 6,656 -ra------ C:\WINDOWS\system32\kbdpl.dll
2006-10-11 21:18 6,656 -ra------ C:\WINDOWS\system32\kbdhu.dll
2006-10-11 21:18 6,656 -ra------ C:\WINDOWS\system32\kbdhela3.dll
2006-10-11 21:18 6,656 -ra------ C:\WINDOWS\system32\kbdcz2.dll
2006-10-11 21:18 6,656 -ra------ C:\WINDOWS\system32\kbdcz1.dll
2006-10-11 21:18 6,656 -ra------ C:\WINDOWS\system32\kbdcr.dll
2006-10-11 21:18 6,656 -ra------ C:\WINDOWS\system32\KBDAL.DLL
2006-10-11 21:18 6,144 -ra------ C:\WINDOWS\system32\kbdtuq.dll
2006-10-11 21:18 6,144 -ra------ C:\WINDOWS\system32\kbdtuf.dll
2006-10-11 21:18 6,144 -ra------ C:\WINDOWS\system32\kbdlv1.dll
2006-10-11 21:18 6,144 -ra------ C:\WINDOWS\system32\kbdlv.dll
2006-10-11 21:18 6,144 -ra------ C:\WINDOWS\system32\kbdhela2.dll
2006-10-11 21:18 6,144 -ra------ C:\WINDOWS\system32\kbdgkl.dll
2006-10-11 21:18 6,144 -ra------ C:\WINDOWS\system32\kbdest.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdycc.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbduzb.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdur.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdtat.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdru1.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdru.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdro.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdpl1.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdmon.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdlt1.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdlt.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdkyr.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdkaz.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdhu1.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdhe319.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdhe220.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdhe.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdbu.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdblr.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdazel.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdaze.dll
2006-10-11 21:17 86,044 --a------ C:\WINDOWS\system32\dgsetup.dll
2006-10-11 21:17 8,704 --a------ C:\WINDOWS\system32\batt.dll
2006-10-11 21:17 76,800 --a------ C:\WINDOWS\system32\storprop.dll
2006-10-11 21:17 70,656 --a------ C:\WINDOWS\notepad.exe
2006-10-11 21:17 24,661 --a------ C:\WINDOWS\system32\spxcoins.dll
2006-10-11 21:17 176,157 --a------ C:\WINDOWS\system32\dgrpsetu.dll
2006-10-11 21:17 15,872 --a------ C:\WINDOWS\TASKMAN.EXE
2006-10-11 21:17 13,312 --a------ C:\WINDOWS\system32\irclass.dll
2006-10-11 21:17 11,264 --a------ C:\WINDOWS\system32\drivers\irenum.sys
2006-10-11 21:17 103,424 --a------ C:\WINDOWS\system32\EqnClass.Dll
2006-10-11 21:03 306,688 --a------ C:\WINDOWS\IsUninst.exe
2006-10-11 21:01 88,576 -ra------ C:\WINDOWS\system32\drivers\nvatabus.sys
2006-10-11 21:01 454,656 --a------ C:\WINDOWS\system32\CapabilityTable.exe
2006-10-11 21:01 300,032 --a------ C:\WINDOWS\system32\idecoi.dll
2006-10-11 21:01 208,896 --------- C:\WINDOWS\system32\nvuide.exe
2006-10-11 21:00 9,728 --a------ C:\WINDOWS\system32\bdco1ins.dll
2006-10-11 21:00 9,728 --a------ C:\WINDOWS\system32\bdco1.dll
2006-10-11 21:00 33,536 --a------ C:\WINDOWS\system32\drivers\NVENETFD.sys
2006-10-11 21:00 32,256 --a------ C:\WINDOWS\system32\nvconrm.dll
2006-10-11 21:00 261,888 --a------ C:\WINDOWS\system32\drivers\nvnrm.sys
2006-10-11 21:00 208,896 --a------ C:\WINDOWS\system32\nvunrm.exe
2006-10-11 21:00 208,896 --a------ C:\WINDOWS\system32\NVUNINST.EXE
2006-10-11 21:00 208,256 --a------ C:\WINDOWS\system32\drivers\nvsnpu.sys
2006-10-11 21:00 201,728 --a------ C:\WINDOWS\system32\fdco1ins.dll
2006-10-11 21:00 201,728 --a------ C:\WINDOWS\system32\fdco1.dll
2006-10-11 21:00 176,128 --a------ C:\WINDOWS\system32\nvusmb.exe
2006-10-11 21:00 12,928 --a------ C:\WINDOWS\system32\drivers\nvnetbus.sys
2006-10-11 20:59 5,824 --a------ C:\WINDOWS\system32\drivers\ASUSHWIO.SYS
2006-10-11 20:59 5,810 -ra------ C:\WINDOWS\system32\drivers\ASACPI.sys
2006-10-11 20:44 95,424 --------- C:\WINDOWS\system32\drivers\slnthal.sys
2006-10-11 20:44 940,544 --a------ C:\WINDOWS\system32\wmspdmoe.dll
2006-10-11 20:44 938,496 --------- C:\WINDOWS\system32\winbrand.dll
2006-10-11 20:44 9,728 --------- C:\WINDOWS\system32\comsdupd.exe
2006-10-11 20:44 88,064 --------- C:\WINDOWS\system32\p2pnetsh.dll
2006-10-11 20:44 870,784 --------- C:\WINDOWS\system32\ati3d1ag.dll
2006-10-11 20:44 86,016 --------- C:\WINDOWS\system32\p2pgasvc.dll
2006-10-11 20:44 86,016 --------- C:\WINDOWS\system32\mdmxsdk.dll
2006-10-11 20:44 81,920 --------- C:\WINDOWS\system32\ieencode.dll
2006-10-11 20:44 81,408 --------- C:\WINDOWS\system32\wscsvc.dll
2006-10-11 20:44 8,192 --------- C:\WINDOWS\system32\smbinst.exe
2006-10-11 20:44 8,192 --------- C:\WINDOWS\system32\bitsprx2.dll
2006-10-11 20:44 78,464 --------- C:\WINDOWS\system32\drivers\usbvideo.sys
2006-10-11 20:44 75,776 --------- C:\WINDOWS\system32\strmfilt.dll
2006-10-11 20:44 73,832 --------- C:\WINDOWS\system32\slcoinst.dll
2006-10-11 20:44 73,796 --------- C:\WINDOWS\system32\slserv.exe
2006-10-11 20:44 73,216 --------- C:\WINDOWS\system32\drivers\atintuxx.sys
2006-10-11 20:44 71,680 --------- C:\WINDOWS\system32\blastcln.exe
2006-10-11 20:44 701,440 --------- C:\WINDOWS\system32\drivers\ati2mtag.sys
2006-10-11 20:44 7,680 --------- C:\WINDOWS\system32\kbdsmsno.dll
2006-10-11 20:44 7,680 --------- C:\WINDOWS\system32\kbdsmsfi.dll
2006-10-11 20:44 7,168 --------- C:\WINDOWS\system32\kbdukx.dll
2006-10-11 20:44 7,168 --------- C:\WINDOWS\system32\kbdno1.dll
2006-10-11 20:44 7,168 --------- C:\WINDOWS\system32\kbdfi1.dll
2006-10-11 20:44 7,168 --------- C:\WINDOWS\system32\hccoin.dll
2006-10-11 20:44 7,168 --------- C:\WINDOWS\system32\bitsprx3.dll
2006-10-11 20:44 685,056 --------- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2006-10-11 20:44 67,584 --------- C:\WINDOWS\system32\drivers\sdbus.sys
2006-10-11 20:44 63,663 --------- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2006-10-11 20:44 63,488 --------- C:\WINDOWS\system32\drivers\atinxsxx.sys
2006-10-11 20:44 60,416 --------- C:\WINDOWS\system32\fwcfg.dll
2006-10-11 20:44 6,656 --------- C:\WINDOWS\system32\kbdinmal.dll
2006-10-11 20:44 6,656 --------- C:\WINDOWS\system32\kbdinben.dll
2006-10-11 20:44 6,144 --------- C:\WINDOWS\system32\kbdmlt48.dll
2006-10-11 20:44 6,144 --------- C:\WINDOWS\system32\kbdmlt47.dll
2006-10-11 20:44 6,144 --------- C:\WINDOWS\system32\kbdinbe1.dll
2006-10-11 20:44 6,016 --------- C:\WINDOWS\system32\drivers\smbali.sys
2006-10-11 20:44 59,648 --------- C:\WINDOWS\system32\drivers\rfcomm.sys
2006-10-11 20:44 57,856 --------- C:\WINDOWS\system32\drivers\atinbtxx.sys
2006-10-11 20:44 56,623 --------- C:\WINDOWS\system32\drivers\ati1btxx.sys
2006-10-11 20:44 537,088 --------- C:\WINDOWS\system32\msftedit.dll
2006-10-11 20:44 526,848 --------- C:\WINDOWS\system32\p2psvc.dll
2006-10-11 20:44 52,224 --------- C:\WINDOWS\system32\drivers\atinraxx.sys
2006-10-11 20:44 516,768 --------- C:\WINDOWS\system32\ativvaxx.dll
2006-10-11 20:44 50,688 --------- C:\WINDOWS\system32\btpanui.dll
2006-10-11 20:44 50,176 --------- C:\WINDOWS\system32\xmlprovi.dll
2006-10-11 20:44 5,632 --------- C:\WINDOWS\system32\kbdmaori.dll
2006-10-11 20:44 49,152 --------- C:\WINDOWS\system32\powercfg.exe
2006-10-11 20:44 48,640 --------- C:\WINDOWS\system32\pnrpnsp.dll
2006-10-11 20:44 467,224 --a------ C:\WINDOWS\system32\wuapi.dll
2006-10-11 20:44 46,464 --------- C:\WINDOWS\system32\drivers\gagp30kx.sys
2006-10-11 20:44 452,736 --------- C:\WINDOWS\system32\drivers\mtxparhm.sys
2006-10-11 20:44 445,440 --------- C:\WINDOWS\system32\xpob2res.dll
2006-10-11 20:44 44,928 --------- C:\WINDOWS\system32\drivers\agpcpq.sys
2006-10-11 20:44 44,672 --------- C:\WINDOWS\system32\drivers\uagp35.sys
2006-10-11 20:44 44,032 --------- C:\WINDOWS\system32\twext.dll
2006-10-11 20:44 43,008 --------- C:\WINDOWS\system32\drivers\amdagp.sys
2006-10-11 20:44 42,752 --------- C:\WINDOWS\system32\drivers\alim1541.sys
2006-10-11 20:44 42,368 --------- C:\WINDOWS\system32\drivers\agp440.sys
2006-10-11 20:44 42,240 --------- C:\WINDOWS\system32\drivers\viaagp.sys
2006-10-11 20:44 413,944 --a------ C:\WINDOWS\system32\wmspdmod.dll
2006-10-11 20:44 41,600 --------- C:\WINDOWS\system32\drivers\amdk7.sys
2006-10-11 20:44 41,240 --a------ C:\WINDOWS\system32\wups.dll
2006-10-11 20:44 41,088 --------- C:\WINDOWS\system32\drivers\sisagp.sys
2006-10-11 20:44 404,990 --------- C:\WINDOWS\system32\drivers\slntamr.sys
2006-10-11 20:44 40,832 --------- C:\WINDOWS\system32\drivers\irbus.sys
2006-10-11 20:44 40,320 --------- C:\WINDOWS\system32\drivers\intelppm.sys
2006-10-11 20:44 4,526,464 --a------ C:\WINDOWS\system32\nv4_disp.dll
2006-10-11 20:44 4,255 --------- C:\WINDOWS\system32\drivers\adv01nt5.dll
2006-10-11 20:44 4,096 --------- C:\WINDOWS\system32\dsprpres.dll
2006-10-11 20:44 397,056 --------- C:\WINDOWS\system32\s3gnb.dll
2006-10-11 20:44 384,512 --------- C:\WINDOWS\system32\mp4sdmod.dll
2006-10-11 20:44 38,016 --------- C:\WINDOWS\system32\drivers\bthmodem.sys
2006-10-11 20:44 377,984 --------- C:\WINDOWS\system32\ati2dvaa.dll
2006-10-11 20:44 36,463 --------- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2006-10-11 20:44 351,232 --------- C:\WINDOWS\system32\winhttp.dll
2006-10-11 20:44 35,456 --------- C:\WINDOWS\system32\drivers\bthprint.sys
2006-10-11 20:44 34,735 --------- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2006-10-11 20:44 327,168 --------- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2006-10-11 20:44 32,866 --------- C:\WINDOWS\system32\slrundll.exe
2006-10-11 20:44 32,866 --------- C:\WINDOWS\slrundll.exe
2006-10-11 20:44 32,768 --------- C:\WINDOWS\system32\ativtmxx.dll
2006-10-11 20:44 32,768 --------- C:\WINDOWS\system32\asr_pfu.exe
2006-10-11 20:44 32,285 --------- C:\WINDOWS\system32\hsfcisp2.dll
2006-10-11 20:44 312,320 --------- C:\WINDOWS\system32\p2pgraph.dll
2006-10-11 20:44 310,272 --------- C:\WINDOWS\system32\mp43dmod.dll
2006-10-11 20:44 31,744 --------- C:\WINDOWS\system32\drivers\atinxbxx.sys
2006-10-11 20:44 30,671 --------- C:\WINDOWS\system32\drivers\ati1raxx.sys
2006-10-11 20:44 30,208 --------- C:\WINDOWS\system32\bthserv.dll
2006-10-11 20:44 30,080 --------- C:\WINDOWS\system32\drivers\rndismpx.sys
2006-10-11 20:44 3,983,680 --a------ C:\WINDOWS\system32\drivers\nv4_mini.sys
2006-10-11 20:44 3,967 --------- C:\WINDOWS\system32\drivers\adv02nt5.dll
2006-10-11 20:44 3,901 --------- C:\WINDOWS\system32\drivers\siint5.dll
2006-10-11 20:44 3,775 --------- C:\WINDOWS\system32\drivers\adv11nt5.dll
2006-10-11 20:44 3,711 --------- C:\WINDOWS\system32\drivers\adv09nt5.dll
2006-10-11 20:44 3,647 --------- C:\WINDOWS\system32\drivers\adv07nt5.dll
2006-10-11 20:44 3,615 --------- C:\WINDOWS\system32\drivers\adv05nt5.dll
2006-10-11 20:44 3,135 --------- C:\WINDOWS\system32\drivers\adv08nt5.dll
2006-10-11 20:44 29,455 --------- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2006-10-11 20:44 29,184 --------- C:\WINDOWS\system32\sdhcinst.dll
2006-10-11 20:44 29,056 --------- C:\WINDOWS\system32\drivers\ip6fw.sys
2006-10-11 20:44 286,792 --------- C:\WINDOWS\system32\slextspk.dll
2006-10-11 20:44 282,624 --a------ C:\WINDOWS\system32\wmpdxm.dll
2006-10-11 20:44 28,672 --------- C:\WINDOWS\system32\drivers\atinsnxx.sys
2006-10-11 20:44 274,944 --------- C:\WINDOWS\system32\drivers\bthport.sys
2006-10-11 20:44 270,848 --------- C:\WINDOWS\system32\sbe.dll
2006-10-11 20:44 262,784 --------- C:\WINDOWS\system32\drivers\http.sys
2006-10-11 20:44 26,624 --------- C:\WINDOWS\system32\drivers\usbehci.sys
2006-10-11 20:44 26,367 --------- C:\WINDOWS\system32\drivers\ati1snxx.sys
2006-10-11 20:44 25,856 --------- C:\WINDOWS\system32\drivers\hidbth.sys
2006-10-11 20:44 25,471 --------- C:\WINDOWS\system32\drivers\watv10nt.sys
2006-10-11 20:44 25,471 --------- C:\WINDOWS\system32\drivers\atv04nt5.dll
2006-10-11 20:44 25,088 --a------ C:\WINDOWS\system32\MsPMSNSv.dll
2006-10-11 20:44 24,576 --------- C:\WINDOWS\system32\httpapi.dll
2006-10-11 20:44 23,040 --a------ C:\WINDOWS\system32\fltmc.exe
2006-10-11 20:44 229,376 --------- C:\WINDOWS\system32\ati2cqag.dll
2006-10-11 20:44 226,304 --a------ C:\WINDOWS\system32\wmerror.dll
2006-10-11 20:44 220,032 --------- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2006-10-11 20:44 22,271 --------- C:\WINDOWS\system32\drivers\watv06nt.sys
2006-10-11 20:44 21,343 --------- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2006-10-11 20:44 21,183 --------- C:\WINDOWS\system32\drivers\atv01nt5.dll
2006-10-11 20:44 201,728 --------- C:\WINDOWS\system32\ati2dvag.dll
2006-10-11 20:44 20,992 --------- C:\WINDOWS\system32\bthci.dll
2006-10-11 20:44 20,480 --------- C:\WINDOWS\system32\encapi.dll
2006-10-11 20:44 2,986,496 --------- C:\WINDOWS\system32\xpsp2res.dll
2006-10-11 20:44 2,113,536 --------- C:\WINDOWS\system32\dxdiagn.dll
2006-10-11 20:44 197,632 --------- C:\WINDOWS\system32\xpsp1res.dll
2006-10-11 20:44 195,352 --a------ C:\WINDOWS\system32\wuaueng1.dll
2006-10-11 20:44 193,024 --------- C:\WINDOWS\system32\fsquirt.exe
2006-10-11 20:44 188,508 --------- C:\WINDOWS\system32\slgen.dll
2006-10-11 20:44 186,368 --------- C:\WINDOWS\system32\encdec.dll
2006-10-11 20:44 180,360 --------- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2006-10-11 20:44 18,944 --------- C:\WINDOWS\system32\drivers\bthusb.sys
2006-10-11 20:44 175,896 --a------ C:\WINDOWS\system32\wuauclt1.exe
2006-10-11 20:44 173,536 --a------ C:\WINDOWS\system32\wuweb.dll
2006-10-11 20:44 17,408 --------- C:\WINDOWS\system32\winshfhc.dll
2006-10-11 20:44 17,279 --------- C:\WINDOWS\system32\drivers\atv10nt5.dll
2006-10-11 20:44 17,024 --------- C:\WINDOWS\system32\drivers\bthenum.sys
2006-10-11 20:44 166,912 --------- C:\WINDOWS\system32\drivers\s3gnbm.sys
2006-10-11 20:44 16,896 --a------ C:\WINDOWS\system32\fltlib.dll
2006-10-11 20:44 159,232 --------- C:\WINDOWS\system32\sbeio.dll
2006-10-11 20:44 150,016 --a------ C:\WINDOWS\system32\wmidx.dll
2006-10-11 20:44 15,872 --------- C:\WINDOWS\system32\w3ssl.dll
2006-10-11 20:44 15,488 --------- C:\WINDOWS\system32\drivers\mssmbios.sys
2006-10-11 20:44 15,423 --------- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2006-10-11 20:44 15,104 --------- C:\WINDOWS\system32\drivers\hidir.sys
2006-10-11 20:44 14,336 --------- C:\WINDOWS\system32\drivers\atinpdxx.sys
2006-10-11 20:44 14,336 --------- C:\WINDOWS\system32\auditusr.exe
2006-10-11 20:44 14,143 --------- C:\WINDOWS\system32\drivers\atv06nt5.dll
2006-10-11 20:44 135,168 --a------ C:\WINDOWS\system32\wmpasf.dll
2006-10-11 20:44 134,656 --------- C:\WINDOWS\system32\mssap.dll
2006-10-11 20:44 13,824 --------- C:\WINDOWS\system32\wscntfy.exe
2006-10-11 20:44 13,824 --------- C:\WINDOWS\system32\drivers\atinttxx.sys
2006-10-11 20:44 13,824 --------- C:\WINDOWS\system32\drivers\atinmdxx.sys
2006-10-11 20:44 13,824 --------- C:\WINDOWS\system32\cmsetacl.dll
2006-10-11 20:44 13,776 --------- C:\WINDOWS\system32\drivers\recagent.sys
2006-10-11 20:44 13,568 --------- C:\WINDOWS\system32\drivers\wacompen.sys
2006-10-11 20:44 13,240 --------- C:\WINDOWS\system32\drivers\slwdmsup.sys
2006-10-11 20:44 129,536 --------- C:\WINDOWS\system32\xmlprov.dll
2006-10-11 20:44 129,535 --------- C:\WINDOWS\system32\drivers\slnt7554.sys
2006-10-11 20:44 128,896 --------- C:\WINDOWS\system32\drivers\fltmgr.sys
2006-10-11 20:44 128,792 --a------ C:\WINDOWS\system32\wucltui.dll
2006-10-11 20:44 126,686 --------- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2006-10-11 20:44 12,800 --------- C:\WINDOWS\system32\spiisupd.exe
2006-10-11 20:44 12,672 --------- C:\WINDOWS\system32\drivers\usb8023x.sys
2006-10-11 20:44 12,672 --------- C:\WINDOWS\system32\drivers\mutohpen.sys
2006-10-11 20:44 12,416 --------- C:\WINDOWS\system32\drivers\tunmp.sys
2006-10-11 20:44 12,047 --------- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2006-10-11 20:44 118,784 --------- C:\WINDOWS\system32\msdadiag.dll
2006-10-11 20:44 116,224 --------- C:\WINDOWS\system32\p2p.dll
2006-10-11 20:44 11,935 --------- C:\WINDOWS\system32\drivers\wadv11nt.sys
2006-10-11 20:44 11,871 --------- C:\WINDOWS\system32\drivers\wadv09nt.sys
2006-10-11 20:44 11,868 --------- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2006-10-11 20:44 11,807 --------- C:\WINDOWS\system32\drivers\wadv07nt.sys
2006-10-11 20:44 11,615 --------- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2006-10-11 20:44 11,359 --------- C:\WINDOWS\system32\drivers\atv02nt5.dll
2006-10-11 20:44 11,325 --------- C:\WINDOWS\system32\drivers\vchnt5.dll
2006-10-11 20:44 11,295 --------- C:\WINDOWS\system32\drivers\wadv08nt.sys
2006-10-11 20:44 11,136 --------- C:\WINDOWS\system32\drivers\sffdisk.sys
2006-10-11 20:44 108,032 --------- C:\WINDOWS\system32\wshbth.dll
2006-10-11 20:44 104,960 --------- C:\WINDOWS\system32\drivers\atinrvxx.sys
2006-10-11 20:44 100,992 --------- C:\WINDOWS\system32\drivers\bthpan.sys
2006-10-11 20:44 10,240 --------- C:\WINDOWS\system32\drivers\sffp_sd.sys
2006-10-11 20:44 1,888,992 --------- C:\WINDOWS\system32\ati3duag.dll
2006-10-11 20:44 1,737,856 --------- C:\WINDOWS\system32\mtxparhd.dll
2006-10-11 20:44 1,689,088 --------- C:\WINDOWS\system32\d3d9.dll
2006-10-11 20:44 1,309,184 --------- C:\WINDOWS\system32\drivers\mtlstrm.sys
2006-10-11 20:44 1,119,744 --a------ C:\WINDOWS\system32\wmsdmoe2.dll
2006-10-11 20:44 1,041,536 --------- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2006-10-11 20:44 1,003,008 --a------ C:\WINDOWS\system32\wmvdmoe2.dll
2006-10-11 20:42 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe
2006-10-11 20:27 112,128 --a------ C:\WINDOWS\system32\mapi32.dll
2006-10-11 20:27 0 -rahs---- C:\MSDOS.SYS
2006-10-11 20:27 0 -rahs---- C:\IO.SYS
2006-10-11 20:27 0 --a------ C:\CONFIG.SYS
2006-10-11 20:27 0 --a------ C:\AUTOEXEC.BAT
2006-10-11 20:26 45,568 --a------ C:\WINDOWS\system32\safrslv.dll
2006-10-11 20:26 43,520 --a------ C:\WINDOWS\system32\safrcdlg.dll
2006-10-11 20:26 43,520 --a------ C:\WINDOWS\system32\racpldlg.dll
2006-10-11 20:26 382,464 --a------ C:\WINDOWS\system32\qmgr.dll
2006-10-11 20:26 29,696 --a------ C:\WINDOWS\system32\safrdm.dll
2006-10-11 20:26 18,944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2006-10-11 20:26 11,264 --a------ C:\WINDOWS\system32\atrace.dll
2006-10-11 20:25 86,016 --a------ C:\WINDOWS\system32\isign32.dll
2006-10-11 20:25 81,920 --a------ C:\WINDOWS\system32\ils.dll
2006-10-11 20:25 73,728 --a------ C:\WINDOWS\system32\icwdial.dll
2006-10-11 20:25 73,600 --a------ C:\WINDOWS\system32\drivers\sr.sys
2006-10-11 20:25 72,192 --a------ C:\WINDOWS\system32\acctres.dll
2006-10-11 20:25 69,632 --a------ C:\WINDOWS\system32\msconf.dll
2006-10-11 20:25 679,424 --a------ C:\WINDOWS\system32\inetcomm.dll
2006-10-11 20:25 67,584 --a------ C:\WINDOWS\system32\srclient.dll
2006-10-11 20:25 65,536 --a------ C:\WINDOWS\system32\icwphbk.dll
2006-10-11 20:25 50,688 --a------ C:\WINDOWS\system32\inetres.dll
2006-10-11 20:25 34,560 --a------ C:\WINDOWS\system32\mnmdd.dll
2006-10-11 20:25 32,768 --a------ C:\WINDOWS\system32\mnmsrvc.exe
2006-10-11 20:25 32,768 --a------ C:\WINDOWS\system32\isrdbg32.dll
2006-10-11 20:25 282,624 --a------ C:\WINDOWS\system32\inetcfg.dll
2006-10-11 20:25 281,600 --a------ C:\WINDOWS\system32\mstask.dll
2006-10-11 20:25 28,672 --a------ C:\WINDOWS\system32\nmmkcert.dll
2006-10-11 20:25 252,928 --a------ C:\WINDOWS\system32\msoeacct.dll
2006-10-11 20:25 241,664 --a------ C:\WINDOWS\system32\srrstr.dll
2006-10-11 20:25 193,024 --a------ C:\WINDOWS\system32\schedsvc.dll
2006-10-11 20:25 171,008 --a------ C:\WINDOWS\system32\srsvc.dll
2006-10-11 20:25 16,384 --a------ C:\WINDOWS\system32\icfgnt5.dll
2006-10-11 20:25 12,288 --a------ C:\WINDOWS\system32\nmevtmsg.dll
2006-10-11 20:25 12,288 --a------ C:\WINDOWS\system32\mstinit.exe
2006-10-11 20:25 105,984 --a------ C:\WINDOWS\system32\msoert2.dll
2006-10-11 20:24 97,792 --a------ C:\WINDOWS\system32\comrepl.dll
2006-10-11 20:24 956,416 --a------ C:\WINDOWS\system32\msdtctm.dll
2006-10-11 20:24 94,208 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2006-10-11 20:24 91,136 --a------ C:\WINDOWS\system32\mtxoci.dll
2006-10-11 20:24 87,176 --a------ C:\WINDOWS\system32\rdpwsx.dll
2006-10-11 20:24 85,504 --a------ C:\WINDOWS\system32\catsrvps.dll
2006-10-11 20:24 80,896 --a------ C:\WINDOWS\system32\charmap.exe
2006-10-11 20:24 73,216 --a------ C:\WINDOWS\system32\avwav.dll
2006-10-11 20:24 67,072 --a------ C:\WINDOWS\system32\rdshost.exe
2006-10-11 20:24 655,360 --a------ C:\WINDOWS\system32\mstscax.dll
2006-10-11 20:24 634,880 --a------ C:\WINDOWS\system32\getuname.dll
2006-10-11 20:24 625,152 --a------ C:\WINDOWS\system32\catsrvut.dll
2006-10-11 20:24 62,464 --a------ C:\WINDOWS\system32\rdpclip.exe
2006-10-11 20:24 61,952 --a------ C:\WINDOWS\system32\remotepg.dll
2006-10-11 20:24 60,416 --a------ C:\WINDOWS\system32\colbact.dll
2006-10-11 20:24 6,656 --a------ C:\WINDOWS\system32\wuauserv.dll
2006-10-11 20:24 6,144 --a------ C:\WINDOWS\system32\msdtc.exe
2006-10-11 20:24 58,880 --a------ C:\WINDOWS\system32\msdtclog.dll
2006-10-11 20:24 58,880 --a------ C:\WINDOWS\system32\licwmi.dll
2006-10-11 20:24 57,344 --a------ C:\WINDOWS\system32\sol.exe
2006-10-11 20:24 56,320 --a------ C:\WINDOWS\system32\servdeps.dll
2006-10-11 20:24 55,808 --a------ C:\WINDOWS\system32\freecell.exe
2006-10-11 20:24 540,160 --a------ C:\WINDOWS\system32\comuid.dll
2006-10-11 20:24 54,272 --a------ C:\WINDOWS\system32\stclient.dll
2006-10-11 20:24 539,136 --a------ C:\WINDOWS\system32\spider.exe
2006-10-11 20:24 5,632 --a------ C:\WINDOWS\system32\write.exe
2006-10-11 20:24 5,120 --a------ C:\WINDOWS\system32\dcomcnfg.exe
2006-10-11 20:24 498,688 --a------ C:\WINDOWS\system32\clbcatq.dll
2006-10-11 20:24 44,544 --a------ C:\WINDOWS\system32\tscupgrd.exe
2006-10-11 20:24 44,544 --a------ C:\WINDOWS\system32\hticons.dll
2006-10-11 20:24 426,496 --a------ C:\WINDOWS\system32\msdtcprx.dll
2006-10-11 20:24 411,648 --a------ C:\WINDOWS\system32\mstsc.exe
2006-10-11 20:24 40,840 --a------ C:\WINDOWS\system32\drivers\termdd.sys
2006-10-11 20:24 4,608 --a------ C:\WINDOWS\system32\rdpcfgex.dll
2006-10-11 20:24 4,096 --a------ C:\WINDOWS\system32\mtxex.dll
2006-10-11 20:24 39,424 --a------ C:\WINDOWS\system32\cfgbkend.dll
2006-10-11 20:24 354,304 --a------ C:\WINDOWS\system32\hypertrm.dll
2006-10-11 20:24 35,840 --a------ C:\WINDOWS\system32\winchat.exe
2006-10-11 20:24 347,648 --a------ C:\WINDOWS\system32\mspaint.exe
2006-10-11 20:24 33,792 --a------ C:\WINDOWS\system32\regini.exe
2006-10-11 20:24 297,984 --a------ C:\WINDOWS\system32\termsrv.dll
2006-10-11 20:24 25,600 --a------ C:\WINDOWS\system32\comaddin.dll
2006-10-11 20:24 25,088 --a------ C:\WINDOWS\system32\mtxlegih.dll
2006-10-11 20:24 232,960 --a------ C:\WINDOWS\system32\avtapi.dll
2006-10-11 20:24 225,792 --a------ C:\WINDOWS\system32\catsrv.dll
2006-10-11 20:24 22,528 --a------ C:\WINDOWS\system32\qwinsta.exe
2006-10-11 20:24 22,528 --a------ C:\WINDOWS\system32\msg.exe
2006-10-11 20:24 21,896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys
2006-10-11 20:24 20,992 --a------ C:\WINDOWS\system32\qprocess.exe
2006-10-11 20:24 20,480 --a------ C:\WINDOWS\system32\mtxdm.dll
2006-10-11 20:24 196,864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys
2006-10-11 20:24 191,488 --a------ C:\WINDOWS\system32\cmprops.dll
2006-10-11 20:24 19,968 --a------ C:\WINDOWS\system32\rdpsnd.dll
2006-10-11 20:24 189,952 --a------ C:\WINDOWS\system32\accwiz.exe
2006-10-11 20:24 17,920 --a------ C:\WINDOWS\system32\mmfutil.dll
2006-10-11 20:24 17,408 --a------ C:\WINDOWS\system32\tsshutdn.exe
2006-10-11 20:24 17,408 --a------ C:\WINDOWS\system32\qappsrv.exe
2006-10-11 20:24 161,280 --a------ C:\WINDOWS\system32\msdtcuiu.dll
2006-10-11 20:24 16,896 --a------ C:\WINDOWS\system32\tskill.exe
2006-10-11 20:24 16,384 --a------ C:\WINDOWS\system32\rwinsta.exe
2006-10-11 20:24 16,384 --a------ C:\WINDOWS\system32\avmeter.dll
2006-10-11 20:24 15,872 --a------ C:\WINDOWS\system32\logoff.exe
2006-10-11 20:24 15,872 --a------ C:\WINDOWS\system32\cdmodem.dll
2006-10-11 20:24 15,360 --a------ C:\WINDOWS\system32\tscon.exe
2006-10-11 20:24 15,360 --a------ C:\WINDOWS\system32\shadow.exe
2006-10-11 20:24 147,968 --a------ C:\WINDOWS\system32\rdchost.dll
2006-10-11 20:24 147,456 --a------ C:\WINDOWS\system32\comsnap.dll
2006-10-11 20:24 142,336 --a------ C:\WINDOWS\system32\sessmgr.exe
2006-10-11 20:24 14,848 --a------ C:\WINDOWS\system32\tsdiscon.exe
2006-10-11 20:24 139,528 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys
2006-10-11 20:24 139,264 --a------ C:\WINDOWS\system32\sndvol32.exe
2006-10-11 20:24 133,120 --a------ C:\WINDOWS\system32\sndrec32.exe
2006-10-11 20:24 13,824 --a------ C:\WINDOWS\system32\rdsaddin.exe
2006-10-11 20:24 128,000 --a------ C:\WINDOWS\system32\mshearts.exe
2006-10-11 20:24 125,720 --a------ C:\WINDOWS\system32\wuauclt.exe
2006-10-11 20:24 124,928 --a------ C:\WINDOWS\system32\mplay32.exe
2006-10-11 20:24 12,040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys
2006-10-11 20:24 119,808 --a------ C:\WINDOWS\system32\winmine.exe
2006-10-11 20:24 115,200 --a------ C:\WINDOWS\system32\calc.exe
2006-10-11 20:24 110,080 --a------ C:\WINDOWS\system32\clbcatex.dll
2006-10-11 20:24 11,776 --a------ C:\WINDOWS\system32\xolehlp.dll
2006-10-11 20:24 11,264 --a------ C:\WINDOWS\system32\icaapi.dll
2006-10-11 20:24 104,448 --a------ C:\WINDOWS\system32\clipbrd.exe
2006-10-11 20:24 10,240 --a------ C:\WINDOWS\system32\reset.exe
2006-10-11 20:24 1,343,768 --a------ C:\WINDOWS\system32\wuaueng.dll
2006-10-11 20:24 1,267,200 --a------ C:\WINDOWS\system32\comsvcs.dll
2006-10-11 20:24 1,263 --a------ C:\WINDOWS\system32\usrlogon.cmd
(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))
2006-10-22 14:28 -------- d-------- C:\Program Files\Fichiers communs
2006-10-21 17:51 -------- d-------- C:\Documents and Settings\motor\Application Data\Sierra
2006-10-21 17:41 -------- d--h----- C:\Program Files\InstallShield Installation Information
2006-10-21 17:41 -------- d-------- C:\Program Files\Sierra
2006-10-20 20:19 -------- d---s---- C:\Documents and Settings\motor\Application Data\Microsoft
2006-10-20 12:42 -------- d-------- C:\Program Files\Spyware Doctor
2006-10-20 12:39 -------- d-------- C:\Program Files\DivX
2006-10-20 12:39 -------- d-------- C:\Program Files\Apple Software Update
2006-10-19 12:32 -------- d-------- C:\Program Files\Electronic Arts
2006-10-19 11:23 -------- d-------- C:\Program Files\CCleaner
2006-10-19 10:01 -------- d-------- C:\Program Files\Google
2006-10-19 09:53 -------- d-------- C:\Program Files\Yahoo!
2006-10-19 09:48 -------- d-------- C:\Program Files\Grisoft
2006-10-19 09:18 -------- d-------- C:\Program Files\Common Files
2006-10-17 00:58 -------- d-------- C:\Documents and Settings\motor\Application Data\MSN6
2006-10-16 20:54 -------- d-------- C:\Program Files\Lavasoft
2006-10-16 20:54 -------- d-------- C:\Documents and Settings\motor\Application Data\Lavasoft
2006-10-16 20:23 -------- d-------- C:\Program Files\GrabClipSave
2006-10-16 00:33 -------- d-------- C:\Program Files\Star Downloader
2006-10-15 14:04 -------- d-------- C:\Program Files\Windows Media Player
2006-10-15 14:04 -------- d-------- C:\Program Files\CyberLink
2006-10-15 13:57 -------- d-------- C:\Program Files\ASUSTek
2006-10-15 13:47 -------- d-------- C:\Program Files\Fichiers communs\Microsoft Shared
2006-10-15 13:47 -------- d-------- C:\Program Files\Fichiers communs\Designer
2006-10-15 13:46 -------- d-------- C:\Program Files\Fichiers communs\System
2006-10-15 13:45 -------- d-------- C:\Program Files\Microsoft Office
2006-10-15 13:45 -------- d-------- C:\Program Files\microsoft frontpage
2006-10-15 13:45 -------- d-------- C:\Documents and Settings\motor\Application Data\Microsoft Web Folders
2006-10-14 23:33 -------- d-------- C:\Documents and Settings\motor\Application Data\Macromedia
2006-10-14 20:02 -------- d-------- C:\Program Files\BF2G15Mod
2006-10-14 13:04 -------- d-------- C:\Documents and Settings\motor\Application Data\Apple Computer
2006-10-14 13:02 -------- d-------- C:\Program Files\iTunes
2006-10-14 13:02 -------- d-------- C:\Program Files\iPod
2006-10-13 22:23 -------- d-------- C:\Program Files\Messenger
2006-10-13 22:20 -------- d-------- C:\Program Files\Internet Explorer
2006-10-13 22:18 -------- d-------- C:\Program Files\Outlook Express
2006-10-13 19:30 -------- d--h----- C:\Program Files\WindowsUpdate
2006-10-13 11:48 -------- d-------- C:\Documents and Settings\motor\Application Data\ArcSoft
2006-10-13 11:47 -------- d-------- C:\Program Files\ArcSoft
2006-10-12 22:11 -------- d-------- C:\Program Files\Realtek AC97
2006-10-12 22:11 -------- d-------- C:\Program Files\AvRack
2006-10-12 12:17 -------- d-------- C:\Program Files\Realtek Sound Manager
2006-10-12 12:08 -------- d-------- C:\Documents and Settings\motor\Application Data\Google
2006-10-12 12:04 -------- d-------- C:\Program Files\Fichiers communs\InstallShield
2006-10-12 12:04 -------- d-------- C:\Program Files\ASUS
2006-10-12 11:51 -------- d-------- C:\Documents and Settings\motor\Application Data\Ventrilo
2006-10-12 00:35 -------- d-------- C:\Program Files\TuneUp Utilities 2006
2006-10-12 00:35 -------- d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
2006-10-12 00:35 -------- d-------- C:\Documents and Settings\motor\Application Data\TuneUp Software
2006-10-11 23:43 -------- d-------- C:\Program Files\GameSpy Arcade
2006-10-11 23:38 -------- d-------- C:\Program Files\EA GAMES
2006-10-11 23:24 -------- d-------- C:\Program Files\NBPROF
2006-10-11 22:41 -------- d-------- C:\Program Files\NVIDIA Corporation
2006-10-11 22:40 -------- d-------- C:\Program Files\AMD
2006-10-11 22:32 -------- d-------- C:\Program Files\Ventrilo
2006-10-11 22:12 -------- d-------- C:\Program Files\Logitech
2006-10-11 22:07 -------- d-------- C:\Program Files\Trend Micro
2006-10-11 21:45 -------- d-------- C:\Program Files\WinRAR
2006-10-11 21:18 -------- d-------- C:\Program Files\Fichiers communs\SpeechEngines
2006-10-11 21:18 -------- d-------- C:\Program Files\Fichiers communs\ODBC
2006-10-11 21:17 62 --ahs---- C:\Documents and Settings\motor\Application Data\desktop.ini
2006-10-11 20:44 -------- d-------- C:\Program Files\Movie Maker
2006-10-11 20:43 -------- d-------- C:\Program Files\Windows NT
2006-10-11 20:43 -------- d-------- C:\Program Files\NetMeeting
2006-10-11 20:31 -------- d--h----- C:\Program Files\Uninstall Information
2006-10-11 20:31 -------- d-------- C:\Documents and Settings\motor\Application Data\Identities
2006-10-11 20:27 -------- d-------- C:\Program Files\xerox
2006-10-11 20:25 -------- d-------- C:\Program Files\Fichiers communs\Services
2006-10-11 20:25 -------- d-------- C:\Program Files\Fichiers communs\MSSoap
2006-10-11 20:25 -------- d-------- C:\Program Files\ComPlus Applications
2006-10-11 20:24 -------- d-------- C:\Program Files\Services en ligne
2006-10-11 20:24 -------- d-------- C:\Program Files\MSN Gaming Zone
2006-10-11 20:24 -------- d-------- C:\Program Files\MSN
2006-09-13 07:03 1084416 --a------ C:\WINDOWS\system32\msxml3.dll
2006-09-06 20:27 31248 --a------ C:\WINDOWS\system32\drivers\tmpreflt.sys
2006-09-06 20:27 197648 --a------ C:\WINDOWS\system32\drivers\tmxpflt.sys
2006-09-06 20:09 1051456 --a------ C:\WINDOWS\system32\drivers\VsapiNT.sys
2006-08-25 17:51 617472 --a------ C:\WINDOWS\system32\comctl32.dll
2006-08-24 14:46 888832 --a------ C:\WINDOWS\system32\nvmobls.dll
2006-08-24 14:46 86016 --a------ C:\WINDOWS\system32\nvmctray.dll
2006-08-24 14:46 81920 --a------ C:\WINDOWS\system32\nvwddi.dll
2006-08-24 14:46 794624 --a------ C:\WINDOWS\system32\nvcplui.exe
2006-08-24 14:46 7696384 --a------ C:\WINDOWS\system32\nvcpl.dll
2006-08-24 14:46 581632 --a------ C:\WINDOWS\system32\nvhwvid.dll
2006-08-24 14:46 5644288 --a------ C:\WINDOWS\system32\nvoglnt.dll
2006-08-24 14:46 5611520 --a------ C:\WINDOWS\system32\nvdisps.dll
2006-08-24 14:46 5251072 --a------ C:\WINDOWS\system32\nvdispsr.dll
2006-08-24 14:46 466944 --a------ C:\WINDOWS\system32\nvshell.dll
2006-08-24 14:46 458752 --a------ C:\WINDOWS\system32\nvmccssr.dll
2006-08-24 14:46 45056 --a------ C:\WINDOWS\system32\nvmccsrs.dll
2006-08-24 14:46 442368 --a------ C:\WINDOWS\system32\nvappbar.exe
2006-08-24 14:46 425984 --a------ C:\WINDOWS\system32\keystone.exe
2006-08-24 14:46 35840 --a------ C:\WINDOWS\system32\nvcodins.dll
2006-08-24 14:46 35840 --a------ C:\WINDOWS\system32\nvcod.dll
2006-08-24 14:46 335872 --a------ C:\WINDOWS\system32\nvwrses.dll
2006-08-24 14:46 335872 --a------ C:\WINDOWS\system32\nvwrsel.dll
2006-08-24 14:46 327680 --a------ C:\WINDOWS\system32\nvwrsfr.dll
2006-08-24 14:46 327680 --a------ C:\WINDOWS\system32\nvwrsesm.dll
2006-08-24 14:46 323584 --a------ C:\WINDOWS\system32\nvwrspt.dll
2006-08-24 14:46 323584 --a------ C:\WINDOWS\system32\nvwrsit.dll
2006-08-24 14:46 323584 --a------ C:\WINDOWS\system32\nvrshe.dll
2006-08-24 14:46 323584 --a------ C:\WINDOWS\system32\nvrsar.dll
2006-08-24 14:46 319488 --a------ C:\WINDOWS\system32\nvwrsptb.dll
2006-08-24 14:46 319488 --a------ C:\WINDOWS\system32\nvwrsnl.dll
2006-08-24 14:46 315392 --a------ C:\WINDOWS\system32\nvwrsru.dll
2006-08-24 14:46 315392 --a------ C:\WINDOWS\system32\nvwrshu.dll
2006-08-24 14:46 311296 --a------ C:\WINDOWS\system32\nvwrsde.dll
2006-08-24 14:46 311296 --a------ C:\WINDOWS\system32\nvexpbar.dll
2006-08-24 14:46 3039232 --a------ C:\WINDOWS\system32\nvgames.dll
2006-08-24 14:46 303104 --a------ C:\WINDOWS\system32\nvwrstr.dll
2006-08-24 14:46 303104 --a------ C:\WINDOWS\system32\nvwrssl.dll
2006-08-24 14:46 303104 --a------ C:\WINDOWS\system32\nvwrsfi.dll
2006-08-24 14:46 299008 --a------ C:\WINDOWS\system32\nvwrssk.dll
2006-08-24 14:46 299008 --a------ C:\WINDOWS\system32\nvwrsno.dll
2006-08-24 14:46 2953216 --a------ C:\WINDOWS\system32\nvvitvsr.dll
2006-08-24 14:46 294912 --a------ C:\WINDOWS\system32\nvwrssv.dll
2006-08-24 14:46 294912 --a------ C:\WINDOWS\system32\nvwrspl.dll
2006-08-24 14:46 294912 --a------ C:\WINDOWS\system32\nvwrsda.dll
2006-08-24 14:46 2928640 --a------ C:\WINDOWS\system32\nvgamesr.dll
2006-08-24 14:46 2904064 --a------ C:\WINDOWS\system32\nvvitvs.dll
2006-08-24 14:46 286720 --a------ C:\WINDOWS\system32\nvwrseng.dll
2006-08-24 14:46 286720 --a------ C:\WINDOWS\system32\nvwrscs.dll
2006-08-24 14:46 286720 --a------ C:\WINDOWS\system32\nvnt4cpl.dll
2006-08-24 14:46 2859008 --a------ C:\WINDOWS\system32\nvmoblsr.dll
2006-08-24 14:46 282624 --a------ C:\WINDOWS\system32\nvwrsar.dll
2006-08-24 14:46 278528 --a------ C:\WINDOWS\system32\nvwrshe.dll
2006-08-24 14:46 278528 --a------ C:\WINDOWS\system32\nvrsfr.dll
2006-08-24 14:46 274432 --a------ C:\WINDOWS\system32\nvrsit.dll
2006-08-24 14:46 274432 --a------ C:\WINDOWS\system32\nvrses.dll
2006-08-24 14:46 274432 --a------ C:\WINDOWS\system32\nvrsel.dll
2006-08-24 14:46 270336 --a------ C:\WINDOWS\system32\nvrsde.dll
2006-08-24 14:46 266240 --a------ C:\WINDOWS\system32\nvrspt.dll
2006-08-24 14:46 266240 --a------ C:\WINDOWS\system32\nvrsnl.dll
2006-08-24 14:46 266240 --a------ C:\WINDOWS\system32\nvrsesm.dll
2006-08-24 14:46 262144 --a------ C:\WINDOWS\system32\nvrsru.dll
2006-08-24 14:46 262144 --a------ C:\WINDOWS\system32\nvrsptb.dll
2006-08-24 14:46 262144 --a------ C:\WINDOWS\system32\nvrsja.dll
2006-08-24 14:46 258048 --a------ C:\WINDOWS\system32\nvrsko.dll
2006-08-24 14:46 249856 --a------ C:\WINDOWS\system32\nvrstr.dll
2006-08-24 14:46 249856 --a------ C:\WINDOWS\system32\nvrssl.dll
2006-08-24 14:46 249856 --a------ C:\WINDOWS\system32\nvrssk.dll
2006-08-24 14:46 249856 --a------ C:\WINDOWS\system32\nvrspl.dll
2006-08-24 14:46 249856 --a------ C:\WINDOWS\system32\nvrsno.dll
2006-08-24 14:46 249856 --a------ C:\WINDOWS\system32\nvrshu.dll
2006-08-24 14:46 245760 --a------ C:\WINDOWS\system32\nvrssv.dll
2006-08-24 14:46 245760 --a------ C:\WINDOWS\system32\nvrsda.dll
2006-08-24 14:46 241664 --a------ C:\WINDOWS\system32\nvrsfi.dll
2006-08-24 14:46 241664 --a------ C:\WINDOWS\system32\nvrseng.dll
2006-08-24 14:46 241664 --a------ C:\WINDOWS\system32\nvrscs.dll
2006-08-24 14:46 229376 --a------ C:\WINDOWS\system32\nvmccs.dll
2006-08-24 14:46 221184 --a------ C:\WINDOWS\system32\nvrszhc.dll
2006-08-24 14:46 212992 --a------ C:\WINDOWS\system32\nvwrsja.dll
2006-08-24 14:46 212992 --a------ C:\WINDOWS\system32\nvapi.dll
2006-08-24 14:46 196608 --a------ C:\WINDOWS\system32\nvwrsko.dll
2006-08-24 14:46 188416 --a------ C:\WINDOWS\system32\nvmccss.dll
2006-08-24 14:46 1732608 --a------ C:\WINDOWS\system32\nvwssr.dll
2006-08-24 14:46 167936 --a------ C:\WINDOWS\system32\nvwrszht.dll
2006-08-24 14:46 1662976 --a------ C:\WINDOWS\system32\nvwdmcpl.dll
2006-08-24 14:46 163840 --a------ C:\WINDOWS\system32\nvwrszhc.dll
2006-08-24 14:46 1617920 --a------ C:\WINDOWS\system32\nwiz.exe
2006-08-24 14:46 159810 --a------ C:\WINDOWS\system32\nvsvc32.exe
2006-08-24 14:46 147456 --a------ C:\WINDOWS\system32\nvcolor.exe
2006-08-24 14:46 1470464 --a------ C:\WINDOWS\system32\nview.dll
2006-08-24 14:46 1339392 --a------ C:\WINDOWS\system32\nvdspsch.exe
2006-08-24 14:46 1236992 --a------ C:\WINDOWS\system32\nvwss.dll
2006-08-24 14:46 122880 --a------ C:\WINDOWS\system32\nvrszht.dll
2006-08-24 14:46 1019904 --a------ C:\WINDOWS\system32\nvwimg.dll
2006-08-24 14:46 1011712 --a------ C:\WINDOWS\system32\nvcpluir.dll
2006-08-16 13:59 100352 --a------ C:\WINDOWS\system32\6to4svc.dll
(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries are not shown
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"GCS"="\"C:\\Program Files\\GrabClipSave\\GrabClipSave.exe\""
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"Amtw"="\"C:\\WINDOWS\\system32\\RACLE~1\\tracert.exe\" -vt yazb"
"EA Core"="C:\\Program Files\\Electronic Arts\\EA Downloader\\Core.exe -silent"
"Ccaspld"="C:\\Documents and Settings\\motor\\Application Data\\?dobe\\??anregw.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"NvMediaCenter"="RunDLL32.exe NvMCTray.dll,NvTaskbarInit"
@=""
"Launch LGDCore"="\"C:\\Program Files\\Logitech\\G-series Software\\LGDCore.exe\" /SHOWHIDE"
"Launch LCDMon"="\"C:\\Program Files\\Logitech\\G-series Software\\LCDMon.exe\""
"NVIDIA nTune"="\"C:\\Program Files\\NVIDIA Corporation\\nTune\\\\nTune.exe\" clear"
"ASUS Probe"="C:\\Program Files\\ASUS\\Probe\\AsusProb.exe"
"SoundMan"="SOUNDMAN.EXE"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"RemoteControl"="\"C:\\Program Files\\ASUSTek\\ASUSDVD\\PDVDServ.exe\""
"pccguide.exe"="\"C:\\Program Files\\Trend Micro\\Internet Security 12\\pccguide.exe\""
"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"NoChange"="1"
"Installed"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"
[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001
[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,00,01,00,00,00,00,00,00,00,04,00,00,e0,03,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,6a,02,00,00,23,00,00,00,a4,00,00,00,9a,00,\
00,00,01,00,00,00
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winwim32
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"
~ ~ ~ ~ ~ ~ ~ ~ Hijackthis Backups ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
backup-20061020-130449-864
O21 - SSODL: incestuously - {03413bf7-e34c-445b-bfc0-a2b127255871} - (no file)
backup-20061020-130449-229
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\Maintenance en 1 clic.job
Completion time: 06-10-22 14:30:24.46
C:\ComboFix.txt ... 06-10-22 14:30
pour ton deuxiéme post le site m a rien afficher
encor se probleme de virus detecté par trend micro
voila le chemin d acces "C:\WINDOWS\system32\winwim32.dll"
a chaque fois que je clic sur le fichier dll le message s ouvre
je te le dis je sais pas si ca peut t aider ??
j ai aussi passé winwim32.dll sur virustotal rien non plus
cois-tu que je peut la supprimer avec killbox sans risque
J'attend le scan de :
C:\WINDOWS\system32\ytnhvbm.dll
sur VirusTotal
Répondre à Angeldark
il se passe rien c est normal ???
je fait parcourir ect .. je cilc send et la rien voila
Essaie ici :
http://virusscan.jotti.org/
Répondre à Angeldark
Service load: 0% 100%
File: ytnhvbm.dll
Status: INFECTED/MALWARE
MD5 488c6bf131026223a82de5f23534d98b
Packers detected: -
Scanner results
AntiVir Found Adware-Spyware/PurityScan.AK.124 adware
ArcaVir Found nothing
Avast Found Win32:Agent-RY
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found Trojan.PurityScan.AK
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found Adware/ClickSpring
Kaspersky Anti-Virus Found not-a-virus:AdWare.Win32.PurityScan.ak
NOD32 Found a variant of Win32/Adware.PurityScan application
Norman Virus Control Found nothing
VirusBuster Found nothing
VBA32 Found AdWare.Win32.PurityScan.ak
S'il te plaît, va ici pour uploader un fichier douteux pour analyse.
- "Your Username:" - Entre ton pseudo sur ce forum
- "Topic Where File Was Requested:" - Copie-colle le lien vers cette discussion
- "File(s) To Submit:" - Bouton "Parcourir..." pour naviguer vers ce nom de fichier : C:\WINDOWS\system32\ytnhvbm.dll
- Cliquez sur Send File
Fais pareil avec :
C:\WINDOWS\system32\winwim32.dll
- Double-clique VundoFix.exe afin de le lancer
- NE clique PAS sur le bouton Scan for Vundo
- Clique Droit dans la fenêtre blanche, choisis Add more files ?
- Rajoute dans la première ligne :
C:\WINDOWS\system32\ytnhvbm.dll
Dans la deuxième :
C:\WINDOWS\system32\winwim32.dll
- Clique successivement sur :
- Add Files
- Close Windows
- Remove Vundo
- Si l'outil te demande de redémarrer, accepte.
- Copie/Colle ensuite le rapport C:\vundofix.txt
Répondre à Angeldark
VundoFix V6.2.6
Checking Java version...
Sun Java not detected
Scan started at 13:46:16 22/10/2006
Listing files found while scanning....
C:\WINDOWS\system32\oonplu.dll
C:\WINDOWS\system32\pakohlhj.dll
C:\WINDOWS\system32\waasanh.dll
C:\WINDOWS\system32\iudfonnx.exe
C:\WINDOWS\system32\jkhhh.dll
C:\WINDOWS\system32\hhhkj.ini
C:\WINDOWS\system32\hhhkj.bak1
C:\WINDOWS\system32\hhhkj.bak2
Beginning removal...
Attempting to delete C:\WINDOWS\system32\oonplu.dll
C:\WINDOWS\system32\oonplu.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\pakohlhj.dll
C:\WINDOWS\system32\pakohlhj.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\waasanh.dll
C:\WINDOWS\system32\waasanh.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\iudfonnx.exe
C:\WINDOWS\system32\iudfonnx.exe Has been deleted!
Attempting to delete C:\WINDOWS\system32\jkhhh.dll
C:\WINDOWS\system32\jkhhh.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\hhhkj.ini
C:\WINDOWS\system32\hhhkj.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\hhhkj.bak1
C:\WINDOWS\system32\hhhkj.bak1 Has been deleted!
Attempting to delete C:\WINDOWS\system32\hhhkj.bak2
C:\WINDOWS\system32\hhhkj.bak2 Has been deleted!
Performing Repairs to the registry.
Done!
Beginning removal...
Attempting to delete C:\WINDOWS\system32\ytnhvbm.dll
C:\WINDOWS\system32\ytnhvbm.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\winwim32.dll
C:\WINDOWS\system32\winwim32.dll Has been deleted!
Performing Repairs to the registry.
Done!
VundoFix V6.2.6
Checking Java version...
Sun Java not detected
Scan started at 16:34:39 22/10/2006
Listing files found while scanning....
il n a afficher un message d erreur et a redemarré mais apparamant les deux fichier .dll on ete supprimé et au redémarage il m as dit qu il n avait pas trouver de fichier infecté apres le scan
| Citation : il n a afficher un message d erreur et a redemarré mais apparamant les deux fichier .dll on ete supprimé et au redémarage il m as dit qu il n avait pas trouver de fichier infecté apres le scan |
Normal
On va y remedier.
Reposte un rapport Hijackthis.
Répondre à Angeldark
Logfile of HijackThis v1.99.1
Scan saved at 16:55:21, on 22/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\Program Files\ASUS\Probe\AsusProb.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe
C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\GrabClipSave\GrabClipSave.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\Program Files\Electronic Arts\EA Downloader\Core.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\Program Files\BF2G15Mod\BF2 LCD.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\alg.exe
C:\Download\VundoFix.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Download\scan.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R3 - URLSearchHook: (no name) - {911B8EB5-452E-48A1-2465-187495D0789E} - C:\WINDOWS\system32\ytnhvbm.dll (file missing)
O2 - BHO: (no name) - {01D8721E-E0D2-4B09-4319-01837C8982F6} - C:\WINDOWS\system32\oonplu.dll (file missing)
O2 - BHO: (no name) - {094BD811-40DC-440F-83AF-14349100B091} - (no file)
O2 - BHO: (no name) - {1DAEFCB9-06C8-47c6-8F20-3FB54B244DAA} - C:\WINDOWS\system32\pakohlhj.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {911B8EB5-452E-48A1-2465-187495D0789E} - C:\WINDOWS\system32\ytnhvbm.dll (file missing)
O2 - BHO: (no name) - {EDF12FAD-011F-4878-8E17-D94A2457E00D} - C:\WINDOWS\system32\jkhhh.dll (file missing)
O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\\nTune.exe" clear
O4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Probe\AsusProb.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [GCS] "C:\Program Files\GrabClipSave\GrabClipSave.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Amtw] "C:\WINDOWS\system32\RACLE~1\tracert.exe" -vt yazb
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EA Downloader\Core.exe -silent
O4 - HKCU\..\Run: [Ccaspld] C:\Documents and Settings\motor\Application Data\?dobe\??anregw.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Download with Star Downloader - C:\PROGRA~1\STARDO~1\sdie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
Re,
- Lance Hijackthis ->Do a system scan only
->Coche les lignes ci-dessous :
R3 - URLSearchHook: (no name) - {911B8EB5-452E-48A1-2465-187495D0789E} - C:\WINDOWS\system32\ytnhvbm.dll (file missing)
O2 - BHO: (no name) - {01D8721E-E0D2-4B09-4319-01837C8982F6} - C:\WINDOWS\system32\oonplu.dll (file missing)
O2 - BHO: (no name) - {094BD811-40DC-440F-83AF-14349100B091} - (no file)
O2 - BHO: (no name) - {1DAEFCB9-06C8-47c6-8F20-3FB54B244DAA} - C:\WINDOWS\system32\pakohlhj.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {911B8EB5-452E-48A1-2465-187495D0789E} - C:\WINDOWS\system32\ytnhvbm.dll (file missing)
O2 - BHO: (no name) - {EDF12FAD-011F-4878-8E17-D94A2457E00D} - C:\WINDOWS\system32\jkhhh.dll (file missing)
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [Amtw] "C:\WINDOWS\system32\RACLE~1\tracert.exe" -vt yazb
O4 - HKCU\..\Run: [Ccaspld] C:\Documents and Settings\motor\Application Data\?dobe\??anregw.exe
Clique sur Fix checked (en bas à gauche)
- Assure toi d'avoir accès aux dossiers/fichiers cachés
-> Démarrer
-> Panneau de configuration
-> Options des Dossiers, onglet Affichage :
. Clique sur Afficher les dossiers cachés
. Décoche Masquer les extensions des fichiers dont le type est connu
. Décoche Masquer les fichiers protégés du système d'exploitation
- Suppime ces fichiers et/ou dossiers s'ils existent encore :
C:\WINDOWS\system32\RACLE~1\ NOM DE DOSSIER COMMENCANT PAR "RACLE"
C:\Documents and Settings\motor\Application Data\?dobe\ ?=CARACTERE ALEATOIRE
C:\QooBox\
Vide ta crobeille.
D'autres problemes ?
Répondre à Angeldark
oui comment on ajoute resolu au permier post
c est super sypma de perdre du temps pour moi et tout les autre noob qui se ramasse des merde dans leurs pc !!!!!!!!!!!!!!! ![]()
![]()
![]()
![]()
![]()
![]()
http://www.infos-du-net.com/forum/ [...] formulaire
-> tu rajoute RESOLU au titre
Dénonce ton infection (Vundo/PurityScan) pour faire condamner les auteurs, ça serait sympa.
Crée un message pour faire avancer les choses sur Malware-Complaints, nous devons être le plus nombreux possibles, alors rends compte de ton infection.
AIDE : Comment rapporter son infection sur Malware-Complaints ?
Consulte cette page pour éviter que ces problèmes ne réapparaissent pas.
Répondre à Angeldark
Il y a 2911 utilisateurs connus et inconnus. Pour voir la liste des connectés connus, cliquez ici.
