probleme de virus RESOLU

Bonjour,


Va falloir tenir parole ^^

Télécharge VundoFix.exe (par Atribune) sur ton Bureau.

Double-clique VundoFix.exe afin de le lancer

Clique sur le bouton Scan for Vundo

Lorsque le scan est complété, clique sur le bouton Remove Vundo

Une invite te demandera si tu veux supprimer les fichiers, clique YES

Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers

Tu verras une invite qui t'annonce que ton PC va redémarrer; clique OK

Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis! dans ta prochaine réponse

Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-haut, à partir de "clique sur le bouton Scan for Vundo".

voila !! je te poste les deux rapport dans l ordre


VundoFix V6.2.6

Checking Java version...

Sun Java not detected
Scan started at 13:46:16 22/10/2006

Listing files found while scanning....

C:\WINDOWS\system32\oonplu.dll
C:\WINDOWS\system32\pakohlhj.dll
C:\WINDOWS\system32\waasanh.dll
C:\WINDOWS\system32\iudfonnx.exe
C:\WINDOWS\system32\jkhhh.dll
C:\WINDOWS\system32\hhhkj.ini
C:\WINDOWS\system32\hhhkj.bak1
C:\WINDOWS\system32\hhhkj.bak2

Beginning removal...

Attempting to delete C:\WINDOWS\system32\oonplu.dll
C:\WINDOWS\system32\oonplu.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\pakohlhj.dll
C:\WINDOWS\system32\pakohlhj.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\waasanh.dll
C:\WINDOWS\system32\waasanh.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\iudfonnx.exe
C:\WINDOWS\system32\iudfonnx.exe Has been deleted!

Attempting to delete C:\WINDOWS\system32\jkhhh.dll
C:\WINDOWS\system32\jkhhh.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\hhhkj.ini
C:\WINDOWS\system32\hhhkj.ini Has been deleted!

Attempting to delete C:\WINDOWS\system32\hhhkj.bak1
C:\WINDOWS\system32\hhhkj.bak1 Has been deleted!

Attempting to delete C:\WINDOWS\system32\hhhkj.bak2
C:\WINDOWS\system32\hhhkj.bak2 Has been deleted!

Performing Repairs to the registry.
Done!

Logfile of HijackThis v1.99.1
Scan saved at 14:00:06, on 22/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\Program Files\BF2G15Mod\BF2 LCD.exe
C:\Program Files\ASUS\Probe\AsusProb.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\PRINTV~1\pvmodule.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\GrabClipSave\GrabClipSave.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\RACLE~1\tracert.exe
C:\Program Files\Electronic Arts\EA Downloader\Core.exe
C:\Documents and Settings\motor\Application Data\?dobe\??anregw.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Download\scan.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R3 - URLSearchHook: (no name) - {911B8EB5-452E-48A1-2465-187495D0789E} - C:\WINDOWS\system32\ytnhvbm.dll
O2 - BHO: (no name) - {01D8721E-E0D2-4B09-4319-01837C8982F6} - C:\WINDOWS\system32\oonplu.dll (file missing)
O2 - BHO: (no name) - {094BD811-40DC-440F-83AF-14349100B091} - (no file)
O2 - BHO: (no name) - {1DAEFCB9-06C8-47c6-8F20-3FB54B244DAA} - C:\WINDOWS\system32\pakohlhj.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {911B8EB5-452E-48A1-2465-187495D0789E} - C:\WINDOWS\system32\ytnhvbm.dll
O2 - BHO: PrintViewBHO Class - {D4E0C464-30CE-4075-9A10-71FD106C2847} - C:\PROGRA~1\PRINTV~1\PRINTH~1.DLL
O2 - BHO: (no name) - {EDF12FAD-011F-4878-8E17-D94A2457E00D} - C:\WINDOWS\system32\jkhhh.dll (file missing)
O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\\nTune.exe" clear
O4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Probe\AsusProb.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe"
O4 - HKLM\..\Run: [PVModule] C:\PROGRA~1\PRINTV~1\pvmodule.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [GCS] "C:\Program Files\GrabClipSave\GrabClipSave.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Amtw] "C:\WINDOWS\system32\RACLE~1\tracert.exe" -vt yazb
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EA Downloader\Core.exe -silent
O4 - HKCU\..\Run: [Ccaspld] C:\Documents and Settings\motor\Application Data\?dobe\??anregw.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Download with Star Downloader - C:\PROGRA~1\STARDO~1\sdie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - AppInit_DLLs: dxclib303562752.dll
O20 - Winlogon Notify: winwim32 - C:\WINDOWS\SYSTEM32\winwim32.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe

ho un petit trucs que j ai remarqué quand je lance un scan avac quasi tout les program mon anti virus detecte BKDR KLONE.BA avec le message echec de la mise en quarantaine (ca l a fait avec vundofix)
voila !  

Re,

Télécharge combofix.exe (par sUBs) sur ton Bureau

Double clique combofix.exe.

Tape sur la touche Y (Yes) pour démarrer le scan.

Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

Double post mais c'est pas grave ^^



Va sur le site de VirusTotal
Clique sur Parcourir... puis ouvre:

C:\WINDOWS\system32\ytnhvbm.dll

Clique ensuite sur Send
Poste le rapport en fin d'analyse.

Si tu vois ce message:
" Your file " ***.*** " is queued in position: ***. Estimated start time is between *** and *** minutes. "
Il te faudra patienter.

le rapport combofix
motor - 06-10-22 14:28:17,96 Service Pack 2
ComboFix 06.10.19 - Running from: "C:\Documents and Settings\motor\Bureau"

((((((((((((((((((((((((((((((((((((((((((( E-Give / Ssk's Log )))))))))))))))))))))))))))))))))))))))))))))))))


C:\Documents and Settings\motor\Application Data\Dxccwrd.dll
C:\Documents and Settings\motor\Application Data\Dxcknwrd.dll
C:\Documents and Settings\motor\Application Data\Dxcuknwrd.dll
C:\WINDOWS\system32\bkd.exe


* * * POST RUN FILES/FOLDERS * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *


(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\system32\wnsintsv.exe
C:\WINDOWS\system32\components
C:\WINDOWS\system32\crunner
C:\Program Files\Fichiers communs\{3093D4C4-07DA-1036-0407-060810050021}
C:\Program Files\Fichiers communs\{7093D4C4-07DA-1036-0407-060810050021}
C:\Program Files\PrintView

~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ Purity ~ ~ ~ ~ ~ ~ ~ ~~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~

Folders Quarantined:

C:\QooBox\Purity\Documents and Settings\motor\Application Data\DOBE~1
C:\QooBox\Purity\Documents and Settings\motor\Application Data\MBOLS~1
C:\QooBox\Purity\Documents and Settings\motor\Application Data\DOBE~1\??anregw.exe
C:\QooBox\Purity\WINDOWS\SSTEM3~1
C:\QooBox\Purity\WINDOWS\system32\RACLE~1
C:\QooBox\Purity\WINDOWS\system32\RACLE~1\tracert.exe
C:\QooBox\Purity\WINDOWS\system32\RACLE~1\?racle


((((((((((((((((((((((((((((((( Files Created from 2006-09-22 to 2006-10-22 ))))))))))))))))))))))))))))))))))


2006-10-22 13:50 1,492 --a------ C:\WINDOWSvundofix.reg
2006-10-22 12:02 131,072 --a------ C:\WINDOWS\system32\ytnhvbm.dll
2006-10-21 17:50 43,520 --a------ C:\WINDOWS\system32\CmdLineExt03.dll
2006-10-20 11:02 67,604 --a------ C:\WINDOWS\system32\ikqfrata.exe
2006-10-19 09:48 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2006-10-17 19:57 499,712 --a------ C:\WINDOWS\system32\MSVCP71.dll
2006-10-17 19:57 348,160 --a------ C:\WINDOWS\system32\MSVCR71.dll
2006-10-17 19:57 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll
2006-10-16 00:55 18,432 --------- C:\WINDOWS\system32\winwim32.dll
2006-10-16 00:51 86,016 --a------ C:\WINDOWS\system32\OpenAL32.dll
2006-10-16 00:51 262,144 --a------ C:\WINDOWS\system32\wrap_oal.dll
2006-10-16 00:50 5,632 --a------ C:\WINDOWS\system32\drivers\Entech64.sys
2006-10-16 00:50 3,972 --a------ C:\WINDOWS\system32\drivers\PciBus.sys
2006-10-16 00:50 21,664 --a------ C:\WINDOWS\system32\drivers\Entech.sys
2006-10-15 14:01 9,856 --------- C:\WINDOWS\system32\drivers\pfc.sys
2006-10-13 11:48 63,488 --a------ C:\WINDOWS\system32\unam4ie.exe
2006-10-13 11:48 38,160 --a------ C:\WINDOWS\system32\LMRTREND.dll
2006-10-13 11:48 194,320 --a------ C:\WINDOWS\system32\qcut.dll
2006-10-13 11:48 182,032 --a------ C:\WINDOWS\system32\dxtmsft3.dll
2006-10-13 11:48 10,240 --a------ C:\WINDOWS\system32\vidx16.dll
2006-10-13 11:47 4,608 --a------ C:\WINDOWS\system32\w95inf32.dll
2006-10-13 11:47 212,480 --a------ C:\WINDOWS\pcdlib32.dll
2006-10-13 11:47 2,272 --a------ C:\WINDOWS\system32\w95inf16.dll
2006-10-12 21:20 68,888 --a------ C:\WINDOWS\system32\xinput1_3.dll
2006-10-12 21:20 62,744 --a------ C:\WINDOWS\system32\xinput1_2.dll
2006-10-12 21:20 237,848 --a------ C:\WINDOWS\system32\xactengine2_4.dll
2006-10-12 21:20 236,824 --a------ C:\WINDOWS\system32\xactengine2_3.dll
2006-10-12 21:20 2,414,360 --a------ C:\WINDOWS\system32\d3dx9_31.dll
2006-10-12 21:20 2,297,552 --a------ C:\WINDOWS\system32\d3dx9_26.dll
2006-10-12 21:20 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll
2006-10-12 12:17 40,960 --a------ C:\WINDOWS\system32\ChCfg.exe
2006-10-12 12:17 294,912 --a------ C:\WINDOWS\alcupd.exe
2006-10-12 12:17 200,704 --a------ C:\WINDOWS\alcrmv.exe
2006-10-12 12:17 2,322,816 --a------ C:\WINDOWS\system32\TUKernel.exe
2006-10-12 12:04 4,962 -ra------ C:\WINDOWS\system32\drivers\AsIO.sys
2006-10-12 12:04 24,576 -ra------ C:\WINDOWS\system32\AsIO.dll
2006-10-11 23:31 13,225 --a------ C:\WINDOWS\system32\drivers\Razerlow.sys
2006-10-11 22:45 6,656 --a------ C:\WINDOWS\system32\drivers\AsProbe.sys
2006-10-11 22:42 6,272 --a------ C:\WINDOWS\system32\drivers\ASLM75.SYS
2006-10-11 22:41 299,008 --a------ C:\WINDOWS\uninst.exe
2006-10-11 22:40 38,912 --a------ C:\WINDOWS\system32\drivers\AmdK8.sys
2006-10-11 22:35 60,416 --a------ C:\WINDOWS\ALCFDRTM.EXE
2006-10-11 22:28 32,768 --a------ C:\WINDOWS\system32\LogLCD.dll
2006-10-11 22:28 200,805 --a------ C:\WINDOWS\system32\G15BF2LCD.dll
2006-10-11 22:19 14,336 -ra------ C:\WINDOWS\system32\drivers\NetMotCM.sys
2006-10-11 22:15 94,208 --a------ C:\WINDOWS\system32\CNMLM3k.DLL
2006-10-11 22:15 5,632 --a------ C:\WINDOWS\system32\CNMVS3k.DLL
2006-10-11 22:15 36,864 --a------ C:\WINDOWS\system32\CNMCP3K.EXE
2006-10-11 22:15 327,168 --a------ C:\WINDOWS\IsUn040c.exe
2006-10-11 21:47 92,800 --a------ C:\WINDOWS\system32\drivers\nvata.sys
2006-10-11 21:42 208,896 --a------ C:\WINDOWS\system32\nvudisp.exe
2006-10-11 21:36 9,410,048 --a------ C:\WINDOWS\system32\RTLCPL.EXE
2006-10-11 21:36 77,824 --a------ C:\WINDOWS\SOUNDMAN.EXE
2006-10-11 21:36 2,324,480 --a------ C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2006-10-11 21:36 156,672 --a------ C:\WINDOWS\system32\RTLCPAPI.dll
2006-10-11 21:32 26,496 --a------ C:\WINDOWS\system32\drivers\USBSTOR.SYS
2006-10-11 21:20 82,944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2006-10-11 21:20 7,552 --a------ C:\WINDOWS\system32\drivers\mskssrv.sys
2006-10-11 21:20 60,800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2006-10-11 21:20 6,400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2006-10-11 21:20 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2006-10-11 21:20 52,864 --a------ C:\WINDOWS\system32\drivers\dmusic.sys
2006-10-11 21:20 5,376 --a------ C:\WINDOWS\system32\drivers\mspclock.sys
2006-10-11 21:20 4,992 --a------ C:\WINDOWS\system32\drivers\mspqm.sys
2006-10-11 21:20 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2006-10-11 21:20 21,504 --a------ C:\WINDOWS\system32\hidserv.dll
2006-10-11 21:20 2,944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2006-10-11 21:20 172,416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2006-10-11 21:20 142,464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2006-10-11 21:19 77,312 --a------ C:\WINDOWS\system32\usbui.dll
2006-10-11 21:19 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2006-10-11 21:19 58,496 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2006-10-11 21:19 4,096 --a------ C:\WINDOWS\system32\ksuser.dll
2006-10-11 21:19 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2006-10-11 21:19 2,944 --a------ C:\WINDOWS\system32\drivers\msmpu401.sys
2006-10-11 21:19 145,792 --a------ C:\WINDOWS\system32\drivers\portcls.sys
2006-10-11 21:19 10,624 --a------ C:\WINDOWS\system32\drivers\gameenum.sys
2006-10-11 21:18 8,192 -ra------ C:\WINDOWS\system32\kbdhept.dll
2006-10-11 21:18 7,168 -ra------ C:\WINDOWS\system32\kbdcz.dll
2006-10-11 21:18 6,656 -ra------ C:\WINDOWS\system32\kbdycl.dll
2006-10-11 21:18 6,656 -ra------ C:\WINDOWS\system32\kbdsl1.dll
2006-10-11 21:18 6,656 -ra------ C:\WINDOWS\system32\kbdsl.dll
2006-10-11 21:18 6,656 -ra------ C:\WINDOWS\system32\kbdpl.dll
2006-10-11 21:18 6,656 -ra------ C:\WINDOWS\system32\kbdhu.dll
2006-10-11 21:18 6,656 -ra------ C:\WINDOWS\system32\kbdhela3.dll
2006-10-11 21:18 6,656 -ra------ C:\WINDOWS\system32\kbdcz2.dll
2006-10-11 21:18 6,656 -ra------ C:\WINDOWS\system32\kbdcz1.dll
2006-10-11 21:18 6,656 -ra------ C:\WINDOWS\system32\kbdcr.dll
2006-10-11 21:18 6,656 -ra------ C:\WINDOWS\system32\KBDAL.DLL
2006-10-11 21:18 6,144 -ra------ C:\WINDOWS\system32\kbdtuq.dll
2006-10-11 21:18 6,144 -ra------ C:\WINDOWS\system32\kbdtuf.dll
2006-10-11 21:18 6,144 -ra------ C:\WINDOWS\system32\kbdlv1.dll
2006-10-11 21:18 6,144 -ra------ C:\WINDOWS\system32\kbdlv.dll
2006-10-11 21:18 6,144 -ra------ C:\WINDOWS\system32\kbdhela2.dll
2006-10-11 21:18 6,144 -ra------ C:\WINDOWS\system32\kbdgkl.dll
2006-10-11 21:18 6,144 -ra------ C:\WINDOWS\system32\kbdest.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdycc.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbduzb.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdur.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdtat.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdru1.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdru.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdro.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdpl1.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdmon.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdlt1.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdlt.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdkyr.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdkaz.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdhu1.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdhe319.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdhe220.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdhe.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdbu.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdblr.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdazel.dll
2006-10-11 21:18 5,632 -ra------ C:\WINDOWS\system32\kbdaze.dll
2006-10-11 21:17 86,044 --a------ C:\WINDOWS\system32\dgsetup.dll
2006-10-11 21:17 8,704 --a------ C:\WINDOWS\system32\batt.dll
2006-10-11 21:17 76,800 --a------ C:\WINDOWS\system32\storprop.dll
2006-10-11 21:17 70,656 --a------ C:\WINDOWS\notepad.exe
2006-10-11 21:17 24,661 --a------ C:\WINDOWS\system32\spxcoins.dll
2006-10-11 21:17 176,157 --a------ C:\WINDOWS\system32\dgrpsetu.dll
2006-10-11 21:17 15,872 --a------ C:\WINDOWS\TASKMAN.EXE
2006-10-11 21:17 13,312 --a------ C:\WINDOWS\system32\irclass.dll
2006-10-11 21:17 11,264 --a------ C:\WINDOWS\system32\drivers\irenum.sys
2006-10-11 21:17 103,424 --a------ C:\WINDOWS\system32\EqnClass.Dll
2006-10-11 21:03 306,688 --a------ C:\WINDOWS\IsUninst.exe
2006-10-11 21:01 88,576 -ra------ C:\WINDOWS\system32\drivers\nvatabus.sys
2006-10-11 21:01 454,656 --a------ C:\WINDOWS\system32\CapabilityTable.exe
2006-10-11 21:01 300,032 --a------ C:\WINDOWS\system32\idecoi.dll
2006-10-11 21:01 208,896 --------- C:\WINDOWS\system32\nvuide.exe
2006-10-11 21:00 9,728 --a------ C:\WINDOWS\system32\bdco1ins.dll
2006-10-11 21:00 9,728 --a------ C:\WINDOWS\system32\bdco1.dll
2006-10-11 21:00 33,536 --a------ C:\WINDOWS\system32\drivers\NVENETFD.sys
2006-10-11 21:00 32,256 --a------ C:\WINDOWS\system32\nvconrm.dll
2006-10-11 21:00 261,888 --a------ C:\WINDOWS\system32\drivers\nvnrm.sys
2006-10-11 21:00 208,896 --a------ C:\WINDOWS\system32\nvunrm.exe
2006-10-11 21:00 208,896 --a------ C:\WINDOWS\system32\NVUNINST.EXE
2006-10-11 21:00 208,256 --a------ C:\WINDOWS\system32\drivers\nvsnpu.sys
2006-10-11 21:00 201,728 --a------ C:\WINDOWS\system32\fdco1ins.dll
2006-10-11 21:00 201,728 --a------ C:\WINDOWS\system32\fdco1.dll
2006-10-11 21:00 176,128 --a------ C:\WINDOWS\system32\nvusmb.exe
2006-10-11 21:00 12,928 --a------ C:\WINDOWS\system32\drivers\nvnetbus.sys
2006-10-11 20:59 5,824 --a------ C:\WINDOWS\system32\drivers\ASUSHWIO.SYS
2006-10-11 20:59 5,810 -ra------ C:\WINDOWS\system32\drivers\ASACPI.sys
2006-10-11 20:44 95,424 --------- C:\WINDOWS\system32\drivers\slnthal.sys
2006-10-11 20:44 940,544 --a------ C:\WINDOWS\system32\wmspdmoe.dll
2006-10-11 20:44 938,496 --------- C:\WINDOWS\system32\winbrand.dll
2006-10-11 20:44 9,728 --------- C:\WINDOWS\system32\comsdupd.exe
2006-10-11 20:44 88,064 --------- C:\WINDOWS\system32\p2pnetsh.dll
2006-10-11 20:44 870,784 --------- C:\WINDOWS\system32\ati3d1ag.dll
2006-10-11 20:44 86,016 --------- C:\WINDOWS\system32\p2pgasvc.dll
2006-10-11 20:44 86,016 --------- C:\WINDOWS\system32\mdmxsdk.dll
2006-10-11 20:44 81,920 --------- C:\WINDOWS\system32\ieencode.dll
2006-10-11 20:44 81,408 --------- C:\WINDOWS\system32\wscsvc.dll
2006-10-11 20:44 8,192 --------- C:\WINDOWS\system32\smbinst.exe
2006-10-11 20:44 8,192 --------- C:\WINDOWS\system32\bitsprx2.dll
2006-10-11 20:44 78,464 --------- C:\WINDOWS\system32\drivers\usbvideo.sys
2006-10-11 20:44 75,776 --------- C:\WINDOWS\system32\strmfilt.dll
2006-10-11 20:44 73,832 --------- C:\WINDOWS\system32\slcoinst.dll
2006-10-11 20:44 73,796 --------- C:\WINDOWS\system32\slserv.exe
2006-10-11 20:44 73,216 --------- C:\WINDOWS\system32\drivers\atintuxx.sys
2006-10-11 20:44 71,680 --------- C:\WINDOWS\system32\blastcln.exe
2006-10-11 20:44 701,440 --------- C:\WINDOWS\system32\drivers\ati2mtag.sys
2006-10-11 20:44 7,680 --------- C:\WINDOWS\system32\kbdsmsno.dll
2006-10-11 20:44 7,680 --------- C:\WINDOWS\system32\kbdsmsfi.dll
2006-10-11 20:44 7,168 --------- C:\WINDOWS\system32\kbdukx.dll
2006-10-11 20:44 7,168 --------- C:\WINDOWS\system32\kbdno1.dll
2006-10-11 20:44 7,168 --------- C:\WINDOWS\system32\kbdfi1.dll
2006-10-11 20:44 7,168 --------- C:\WINDOWS\system32\hccoin.dll
2006-10-11 20:44 7,168 --------- C:\WINDOWS\system32\bitsprx3.dll
2006-10-11 20:44 685,056 --------- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2006-10-11 20:44 67,584 --------- C:\WINDOWS\system32\drivers\sdbus.sys
2006-10-11 20:44 63,663 --------- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2006-10-11 20:44 63,488 --------- C:\WINDOWS\system32\drivers\atinxsxx.sys
2006-10-11 20:44 60,416 --------- C:\WINDOWS\system32\fwcfg.dll
2006-10-11 20:44 6,656 --------- C:\WINDOWS\system32\kbdinmal.dll
2006-10-11 20:44 6,656 --------- C:\WINDOWS\system32\kbdinben.dll
2006-10-11 20:44 6,144 --------- C:\WINDOWS\system32\kbdmlt48.dll
2006-10-11 20:44 6,144 --------- C:\WINDOWS\system32\kbdmlt47.dll
2006-10-11 20:44 6,144 --------- C:\WINDOWS\system32\kbdinbe1.dll
2006-10-11 20:44 6,016 --------- C:\WINDOWS\system32\drivers\smbali.sys
2006-10-11 20:44 59,648 --------- C:\WINDOWS\system32\drivers\rfcomm.sys
2006-10-11 20:44 57,856 --------- C:\WINDOWS\system32\drivers\atinbtxx.sys
2006-10-11 20:44 56,623 --------- C:\WINDOWS\system32\drivers\ati1btxx.sys
2006-10-11 20:44 537,088 --------- C:\WINDOWS\system32\msftedit.dll
2006-10-11 20:44 526,848 --------- C:\WINDOWS\system32\p2psvc.dll
2006-10-11 20:44 52,224 --------- C:\WINDOWS\system32\drivers\atinraxx.sys
2006-10-11 20:44 516,768 --------- C:\WINDOWS\system32\ativvaxx.dll
2006-10-11 20:44 50,688 --------- C:\WINDOWS\system32\btpanui.dll
2006-10-11 20:44 50,176 --------- C:\WINDOWS\system32\xmlprovi.dll
2006-10-11 20:44 5,632 --------- C:\WINDOWS\system32\kbdmaori.dll
2006-10-11 20:44 49,152 --------- C:\WINDOWS\system32\powercfg.exe
2006-10-11 20:44 48,640 --------- C:\WINDOWS\system32\pnrpnsp.dll
2006-10-11 20:44 467,224 --a------ C:\WINDOWS\system32\wuapi.dll
2006-10-11 20:44 46,464 --------- C:\WINDOWS\system32\drivers\gagp30kx.sys
2006-10-11 20:44 452,736 --------- C:\WINDOWS\system32\drivers\mtxparhm.sys
2006-10-11 20:44 445,440 --------- C:\WINDOWS\system32\xpob2res.dll
2006-10-11 20:44 44,928 --------- C:\WINDOWS\system32\drivers\agpcpq.sys
2006-10-11 20:44 44,672 --------- C:\WINDOWS\system32\drivers\uagp35.sys
2006-10-11 20:44 44,032 --------- C:\WINDOWS\system32\twext.dll
2006-10-11 20:44 43,008 --------- C:\WINDOWS\system32\drivers\amdagp.sys
2006-10-11 20:44 42,752 --------- C:\WINDOWS\system32\drivers\alim1541.sys
2006-10-11 20:44 42,368 --------- C:\WINDOWS\system32\drivers\agp440.sys
2006-10-11 20:44 42,240 --------- C:\WINDOWS\system32\drivers\viaagp.sys
2006-10-11 20:44 413,944 --a------ C:\WINDOWS\system32\wmspdmod.dll
2006-10-11 20:44 41,600 --------- C:\WINDOWS\system32\drivers\amdk7.sys
2006-10-11 20:44 41,240 --a------ C:\WINDOWS\system32\wups.dll
2006-10-11 20:44 41,088 --------- C:\WINDOWS\system32\drivers\sisagp.sys
2006-10-11 20:44 404,990 --------- C:\WINDOWS\system32\drivers\slntamr.sys
2006-10-11 20:44 40,832 --------- C:\WINDOWS\system32\drivers\irbus.sys
2006-10-11 20:44 40,320 --------- C:\WINDOWS\system32\drivers\intelppm.sys
2006-10-11 20:44 4,526,464 --a------ C:\WINDOWS\system32\nv4_disp.dll
2006-10-11 20:44 4,255 --------- C:\WINDOWS\system32\drivers\adv01nt5.dll
2006-10-11 20:44 4,096 --------- C:\WINDOWS\system32\dsprpres.dll
2006-10-11 20:44 397,056 --------- C:\WINDOWS\system32\s3gnb.dll
2006-10-11 20:44 384,512 --------- C:\WINDOWS\system32\mp4sdmod.dll
2006-10-11 20:44 38,016 --------- C:\WINDOWS\system32\drivers\bthmodem.sys
2006-10-11 20:44 377,984 --------- C:\WINDOWS\system32\ati2dvaa.dll
2006-10-11 20:44 36,463 --------- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2006-10-11 20:44 351,232 --------- C:\WINDOWS\system32\winhttp.dll
2006-10-11 20:44 35,456 --------- C:\WINDOWS\system32\drivers\bthprint.sys
2006-10-11 20:44 34,735 --------- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2006-10-11 20:44 327,168 --------- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2006-10-11 20:44 32,866 --------- C:\WINDOWS\system32\slrundll.exe
2006-10-11 20:44 32,866 --------- C:\WINDOWS\slrundll.exe
2006-10-11 20:44 32,768 --------- C:\WINDOWS\system32\ativtmxx.dll
2006-10-11 20:44 32,768 --------- C:\WINDOWS\system32\asr_pfu.exe
2006-10-11 20:44 32,285 --------- C:\WINDOWS\system32\hsfcisp2.dll
2006-10-11 20:44 312,320 --------- C:\WINDOWS\system32\p2pgraph.dll
2006-10-11 20:44 310,272 --------- C:\WINDOWS\system32\mp43dmod.dll
2006-10-11 20:44 31,744 --------- C:\WINDOWS\system32\drivers\atinxbxx.sys
2006-10-11 20:44 30,671 --------- C:\WINDOWS\system32\drivers\ati1raxx.sys
2006-10-11 20:44 30,208 --------- C:\WINDOWS\system32\bthserv.dll
2006-10-11 20:44 30,080 --------- C:\WINDOWS\system32\drivers\rndismpx.sys
2006-10-11 20:44 3,983,680 --a------ C:\WINDOWS\system32\drivers\nv4_mini.sys
2006-10-11 20:44 3,967 --------- C:\WINDOWS\system32\drivers\adv02nt5.dll
2006-10-11 20:44 3,901 --------- C:\WINDOWS\system32\drivers\siint5.dll
2006-10-11 20:44 3,775 --------- C:\WINDOWS\system32\drivers\adv11nt5.dll
2006-10-11 20:44 3,711 --------- C:\WINDOWS\system32\drivers\adv09nt5.dll
2006-10-11 20:44 3,647 --------- C:\WINDOWS\system32\drivers\adv07nt5.dll
2006-10-11 20:44 3,615 --------- C:\WINDOWS\system32\drivers\adv05nt5.dll
2006-10-11 20:44 3,135 --------- C:\WINDOWS\system32\drivers\adv08nt5.dll
2006-10-11 20:44 29,455 --------- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2006-10-11 20:44 29,184 --------- C:\WINDOWS\system32\sdhcinst.dll
2006-10-11 20:44 29,056 --------- C:\WINDOWS\system32\drivers\ip6fw.sys
2006-10-11 20:44 286,792 --------- C:\WINDOWS\system32\slextspk.dll
2006-10-11 20:44 282,624 --a------ C:\WINDOWS\system32\wmpdxm.dll
2006-10-11 20:44 28,672 --------- C:\WINDOWS\system32\drivers\atinsnxx.sys
2006-10-11 20:44 274,944 --------- C:\WINDOWS\system32\drivers\bthport.sys
2006-10-11 20:44 270,848 --------- C:\WINDOWS\system32\sbe.dll
2006-10-11 20:44 262,784 --------- C:\WINDOWS\system32\drivers\http.sys
2006-10-11 20:44 26,624 --------- C:\WINDOWS\system32\drivers\usbehci.sys
2006-10-11 20:44 26,367 --------- C:\WINDOWS\system32\drivers\ati1snxx.sys
2006-10-11 20:44 25,856 --------- C:\WINDOWS\system32\drivers\hidbth.sys
2006-10-11 20:44 25,471 --------- C:\WINDOWS\system32\drivers\watv10nt.sys
2006-10-11 20:44 25,471 --------- C:\WINDOWS\system32\drivers\atv04nt5.dll
2006-10-11 20:44 25,088 --a------ C:\WINDOWS\system32\MsPMSNSv.dll
2006-10-11 20:44 24,576 --------- C:\WINDOWS\system32\httpapi.dll
2006-10-11 20:44 23,040 --a------ C:\WINDOWS\system32\fltmc.exe
2006-10-11 20:44 229,376 --------- C:\WINDOWS\system32\ati2cqag.dll
2006-10-11 20:44 226,304 --a------ C:\WINDOWS\system32\wmerror.dll
2006-10-11 20:44 220,032 --------- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2006-10-11 20:44 22,271 --------- C:\WINDOWS\system32\drivers\watv06nt.sys
2006-10-11 20:44 21,343 --------- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2006-10-11 20:44 21,183 --------- C:\WINDOWS\system32\drivers\atv01nt5.dll
2006-10-11 20:44 201,728 --------- C:\WINDOWS\system32\ati2dvag.dll
2006-10-11 20:44 20,992 --------- C:\WINDOWS\system32\bthci.dll
2006-10-11 20:44 20,480 --------- C:\WINDOWS\system32\encapi.dll
2006-10-11 20:44 2,986,496 --------- C:\WINDOWS\system32\xpsp2res.dll
2006-10-11 20:44 2,113,536 --------- C:\WINDOWS\system32\dxdiagn.dll
2006-10-11 20:44 197,632 --------- C:\WINDOWS\system32\xpsp1res.dll
2006-10-11 20:44 195,352 --a------ C:\WINDOWS\system32\wuaueng1.dll
2006-10-11 20:44 193,024 --------- C:\WINDOWS\system32\fsquirt.exe
2006-10-11 20:44 188,508 --------- C:\WINDOWS\system32\slgen.dll
2006-10-11 20:44 186,368 --------- C:\WINDOWS\system32\encdec.dll
2006-10-11 20:44 180,360 --------- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2006-10-11 20:44 18,944 --------- C:\WINDOWS\system32\drivers\bthusb.sys
2006-10-11 20:44 175,896 --a------ C:\WINDOWS\system32\wuauclt1.exe
2006-10-11 20:44 173,536 --a------ C:\WINDOWS\system32\wuweb.dll
2006-10-11 20:44 17,408 --------- C:\WINDOWS\system32\winshfhc.dll
2006-10-11 20:44 17,279 --------- C:\WINDOWS\system32\drivers\atv10nt5.dll
2006-10-11 20:44 17,024 --------- C:\WINDOWS\system32\drivers\bthenum.sys
2006-10-11 20:44 166,912 --------- C:\WINDOWS\system32\drivers\s3gnbm.sys
2006-10-11 20:44 16,896 --a------ C:\WINDOWS\system32\fltlib.dll
2006-10-11 20:44 159,232 --------- C:\WINDOWS\system32\sbeio.dll
2006-10-11 20:44 150,016 --a------ C:\WINDOWS\system32\wmidx.dll
2006-10-11 20:44 15,872 --------- C:\WINDOWS\system32\w3ssl.dll
2006-10-11 20:44 15,488 --------- C:\WINDOWS\system32\drivers\mssmbios.sys
2006-10-11 20:44 15,423 --------- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2006-10-11 20:44 15,104 --------- C:\WINDOWS\system32\drivers\hidir.sys
2006-10-11 20:44 14,336 --------- C:\WINDOWS\system32\drivers\atinpdxx.sys
2006-10-11 20:44 14,336 --------- C:\WINDOWS\system32\auditusr.exe
2006-10-11 20:44 14,143 --------- C:\WINDOWS\system32\drivers\atv06nt5.dll
2006-10-11 20:44 135,168 --a------ C:\WINDOWS\system32\wmpasf.dll
2006-10-11 20:44 134,656 --------- C:\WINDOWS\system32\mssap.dll
2006-10-11 20:44 13,824 --------- C:\WINDOWS\system32\wscntfy.exe
2006-10-11 20:44 13,824 --------- C:\WINDOWS\system32\drivers\atinttxx.sys
2006-10-11 20:44 13,824 --------- C:\WINDOWS\system32\drivers\atinmdxx.sys
2006-10-11 20:44 13,824 --------- C:\WINDOWS\system32\cmsetacl.dll
2006-10-11 20:44 13,776 --------- C:\WINDOWS\system32\drivers\recagent.sys
2006-10-11 20:44 13,568 --------- C:\WINDOWS\system32\drivers\wacompen.sys
2006-10-11 20:44 13,240 --------- C:\WINDOWS\system32\drivers\slwdmsup.sys
2006-10-11 20:44 129,536 --------- C:\WINDOWS\system32\xmlprov.dll
2006-10-11 20:44 129,535 --------- C:\WINDOWS\system32\drivers\slnt7554.sys
2006-10-11 20:44 128,896 --------- C:\WINDOWS\system32\drivers\fltmgr.sys
2006-10-11 20:44 128,792 --a------ C:\WINDOWS\system32\wucltui.dll
2006-10-11 20:44 126,686 --------- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2006-10-11 20:44 12,800 --------- C:\WINDOWS\system32\spiisupd.exe
2006-10-11 20:44 12,672 --------- C:\WINDOWS\system32\drivers\usb8023x.sys
2006-10-11 20:44 12,672 --------- C:\WINDOWS\system32\drivers\mutohpen.sys
2006-10-11 20:44 12,416 --------- C:\WINDOWS\system32\drivers\tunmp.sys
2006-10-11 20:44 12,047 --------- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2006-10-11 20:44 118,784 --------- C:\WINDOWS\system32\msdadiag.dll
2006-10-11 20:44 116,224 --------- C:\WINDOWS\system32\p2p.dll
2006-10-11 20:44 11,935 --------- C:\WINDOWS\system32\drivers\wadv11nt.sys
2006-10-11 20:44 11,871 --------- C:\WINDOWS\system32\drivers\wadv09nt.sys
2006-10-11 20:44 11,868 --------- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2006-10-11 20:44 11,807 --------- C:\WINDOWS\system32\drivers\wadv07nt.sys
2006-10-11 20:44 11,615 --------- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2006-10-11 20:44 11,359 --------- C:\WINDOWS\system32\drivers\atv02nt5.dll
2006-10-11 20:44 11,325 --------- C:\WINDOWS\system32\drivers\vchnt5.dll
2006-10-11 20:44 11,295 --------- C:\WINDOWS\system32\drivers\wadv08nt.sys
2006-10-11 20:44 11,136 --------- C:\WINDOWS\system32\drivers\sffdisk.sys
2006-10-11 20:44 108,032 --------- C:\WINDOWS\system32\wshbth.dll
2006-10-11 20:44 104,960 --------- C:\WINDOWS\system32\drivers\atinrvxx.sys
2006-10-11 20:44 100,992 --------- C:\WINDOWS\system32\drivers\bthpan.sys
2006-10-11 20:44 10,240 --------- C:\WINDOWS\system32\drivers\sffp_sd.sys
2006-10-11 20:44 1,888,992 --------- C:\WINDOWS\system32\ati3duag.dll
2006-10-11 20:44 1,737,856 --------- C:\WINDOWS\system32\mtxparhd.dll
2006-10-11 20:44 1,689,088 --------- C:\WINDOWS\system32\d3d9.dll
2006-10-11 20:44 1,309,184 --------- C:\WINDOWS\system32\drivers\mtlstrm.sys
2006-10-11 20:44 1,119,744 --a------ C:\WINDOWS\system32\wmsdmoe2.dll
2006-10-11 20:44 1,041,536 --------- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2006-10-11 20:44 1,003,008 --a------ C:\WINDOWS\system32\wmvdmoe2.dll
2006-10-11 20:42 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe
2006-10-11 20:27 112,128 --a------ C:\WINDOWS\system32\mapi32.dll
2006-10-11 20:27 0 -rahs---- C:\MSDOS.SYS
2006-10-11 20:27 0 -rahs---- C:\IO.SYS
2006-10-11 20:27 0 --a------ C:\CONFIG.SYS
2006-10-11 20:27 0 --a------ C:\AUTOEXEC.BAT
2006-10-11 20:26 45,568 --a------ C:\WINDOWS\system32\safrslv.dll
2006-10-11 20:26 43,520 --a------ C:\WINDOWS\system32\safrcdlg.dll
2006-10-11 20:26 43,520 --a------ C:\WINDOWS\system32\racpldlg.dll
2006-10-11 20:26 382,464 --a------ C:\WINDOWS\system32\qmgr.dll
2006-10-11 20:26 29,696 --a------ C:\WINDOWS\system32\safrdm.dll
2006-10-11 20:26 18,944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2006-10-11 20:26 11,264 --a------ C:\WINDOWS\system32\atrace.dll
2006-10-11 20:25 86,016 --a------ C:\WINDOWS\system32\isign32.dll
2006-10-11 20:25 81,920 --a------ C:\WINDOWS\system32\ils.dll
2006-10-11 20:25 73,728 --a------ C:\WINDOWS\system32\icwdial.dll
2006-10-11 20:25 73,600 --a------ C:\WINDOWS\system32\drivers\sr.sys
2006-10-11 20:25 72,192 --a------ C:\WINDOWS\system32\acctres.dll
2006-10-11 20:25 69,632 --a------ C:\WINDOWS\system32\msconf.dll
2006-10-11 20:25 679,424 --a------ C:\WINDOWS\system32\inetcomm.dll
2006-10-11 20:25 67,584 --a------ C:\WINDOWS\system32\srclient.dll
2006-10-11 20:25 65,536 --a------ C:\WINDOWS\system32\icwphbk.dll
2006-10-11 20:25 50,688 --a------ C:\WINDOWS\system32\inetres.dll
2006-10-11 20:25 34,560 --a------ C:\WINDOWS\system32\mnmdd.dll
2006-10-11 20:25 32,768 --a------ C:\WINDOWS\system32\mnmsrvc.exe
2006-10-11 20:25 32,768 --a------ C:\WINDOWS\system32\isrdbg32.dll
2006-10-11 20:25 282,624 --a------ C:\WINDOWS\system32\inetcfg.dll
2006-10-11 20:25 281,600 --a------ C:\WINDOWS\system32\mstask.dll
2006-10-11 20:25 28,672 --a------ C:\WINDOWS\system32\nmmkcert.dll
2006-10-11 20:25 252,928 --a------ C:\WINDOWS\system32\msoeacct.dll
2006-10-11 20:25 241,664 --a------ C:\WINDOWS\system32\srrstr.dll
2006-10-11 20:25 193,024 --a------ C:\WINDOWS\system32\schedsvc.dll
2006-10-11 20:25 171,008 --a------ C:\WINDOWS\system32\srsvc.dll
2006-10-11 20:25 16,384 --a------ C:\WINDOWS\system32\icfgnt5.dll
2006-10-11 20:25 12,288 --a------ C:\WINDOWS\system32\nmevtmsg.dll
2006-10-11 20:25 12,288 --a------ C:\WINDOWS\system32\mstinit.exe
2006-10-11 20:25 105,984 --a------ C:\WINDOWS\system32\msoert2.dll
2006-10-11 20:24 97,792 --a------ C:\WINDOWS\system32\comrepl.dll
2006-10-11 20:24 956,416 --a------ C:\WINDOWS\system32\msdtctm.dll
2006-10-11 20:24 94,208 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2006-10-11 20:24 91,136 --a------ C:\WINDOWS\system32\mtxoci.dll
2006-10-11 20:24 87,176 --a------ C:\WINDOWS\system32\rdpwsx.dll
2006-10-11 20:24 85,504 --a------ C:\WINDOWS\system32\catsrvps.dll
2006-10-11 20:24 80,896 --a------ C:\WINDOWS\system32\charmap.exe
2006-10-11 20:24 73,216 --a------ C:\WINDOWS\system32\avwav.dll
2006-10-11 20:24 67,072 --a------ C:\WINDOWS\system32\rdshost.exe
2006-10-11 20:24 655,360 --a------ C:\WINDOWS\system32\mstscax.dll
2006-10-11 20:24 634,880 --a------ C:\WINDOWS\system32\getuname.dll
2006-10-11 20:24 625,152 --a------ C:\WINDOWS\system32\catsrvut.dll
2006-10-11 20:24 62,464 --a------ C:\WINDOWS\system32\rdpclip.exe
2006-10-11 20:24 61,952 --a------ C:\WINDOWS\system32\remotepg.dll
2006-10-11 20:24 60,416 --a------ C:\WINDOWS\system32\colbact.dll
2006-10-11 20:24 6,656 --a------ C:\WINDOWS\system32\wuauserv.dll
2006-10-11 20:24 6,144 --a------ C:\WINDOWS\system32\msdtc.exe
2006-10-11 20:24 58,880 --a------ C:\WINDOWS\system32\msdtclog.dll
2006-10-11 20:24 58,880 --a------ C:\WINDOWS\system32\licwmi.dll
2006-10-11 20:24 57,344 --a------ C:\WINDOWS\system32\sol.exe
2006-10-11 20:24 56,320 --a------ C:\WINDOWS\system32\servdeps.dll
2006-10-11 20:24 55,808 --a------ C:\WINDOWS\system32\freecell.exe
2006-10-11 20:24 540,160 --a------ C:\WINDOWS\system32\comuid.dll
2006-10-11 20:24 54,272 --a------ C:\WINDOWS\system32\stclient.dll
2006-10-11 20:24 539,136 --a------ C:\WINDOWS\system32\spider.exe
2006-10-11 20:24 5,632 --a------ C:\WINDOWS\system32\write.exe
2006-10-11 20:24 5,120 --a------ C:\WINDOWS\system32\dcomcnfg.exe
2006-10-11 20:24 498,688 --a------ C:\WINDOWS\system32\clbcatq.dll
2006-10-11 20:24 44,544 --a------ C:\WINDOWS\system32\tscupgrd.exe
2006-10-11 20:24 44,544 --a------ C:\WINDOWS\system32\hticons.dll
2006-10-11 20:24 426,496 --a------ C:\WINDOWS\system32\msdtcprx.dll
2006-10-11 20:24 411,648 --a------ C:\WINDOWS\system32\mstsc.exe
2006-10-11 20:24 40,840 --a------ C:\WINDOWS\system32\drivers\termdd.sys
2006-10-11 20:24 4,608 --a------ C:\WINDOWS\system32\rdpcfgex.dll
2006-10-11 20:24 4,096 --a------ C:\WINDOWS\system32\mtxex.dll
2006-10-11 20:24 39,424 --a------ C:\WINDOWS\system32\cfgbkend.dll
2006-10-11 20:24 354,304 --a------ C:\WINDOWS\system32\hypertrm.dll
2006-10-11 20:24 35,840 --a------ C:\WINDOWS\system32\winchat.exe
2006-10-11 20:24 347,648 --a------ C:\WINDOWS\system32\mspaint.exe
2006-10-11 20:24 33,792 --a------ C:\WINDOWS\system32\regini.exe
2006-10-11 20:24 297,984 --a------ C:\WINDOWS\system32\termsrv.dll
2006-10-11 20:24 25,600 --a------ C:\WINDOWS\system32\comaddin.dll
2006-10-11 20:24 25,088 --a------ C:\WINDOWS\system32\mtxlegih.dll
2006-10-11 20:24 232,960 --a------ C:\WINDOWS\system32\avtapi.dll
2006-10-11 20:24 225,792 --a------ C:\WINDOWS\system32\catsrv.dll
2006-10-11 20:24 22,528 --a------ C:\WINDOWS\system32\qwinsta.exe
2006-10-11 20:24 22,528 --a------ C:\WINDOWS\system32\msg.exe
2006-10-11 20:24 21,896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys
2006-10-11 20:24 20,992 --a------ C:\WINDOWS\system32\qprocess.exe
2006-10-11 20:24 20,480 --a------ C:\WINDOWS\system32\mtxdm.dll
2006-10-11 20:24 196,864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys
2006-10-11 20:24 191,488 --a------ C:\WINDOWS\system32\cmprops.dll
2006-10-11 20:24 19,968 --a------ C:\WINDOWS\system32\rdpsnd.dll
2006-10-11 20:24 189,952 --a------ C:\WINDOWS\system32\accwiz.exe
2006-10-11 20:24 17,920 --a------ C:\WINDOWS\system32\mmfutil.dll
2006-10-11 20:24 17,408 --a------ C:\WINDOWS\system32\tsshutdn.exe
2006-10-11 20:24 17,408 --a------ C:\WINDOWS\system32\qappsrv.exe
2006-10-11 20:24 161,280 --a------ C:\WINDOWS\system32\msdtcuiu.dll
2006-10-11 20:24 16,896 --a------ C:\WINDOWS\system32\tskill.exe
2006-10-11 20:24 16,384 --a------ C:\WINDOWS\system32\rwinsta.exe
2006-10-11 20:24 16,384 --a------ C:\WINDOWS\system32\avmeter.dll
2006-10-11 20:24 15,872 --a------ C:\WINDOWS\system32\logoff.exe
2006-10-11 20:24 15,872 --a------ C:\WINDOWS\system32\cdmodem.dll
2006-10-11 20:24 15,360 --a------ C:\WINDOWS\system32\tscon.exe
2006-10-11 20:24 15,360 --a------ C:\WINDOWS\system32\shadow.exe
2006-10-11 20:24 147,968 --a------ C:\WINDOWS\system32\rdchost.dll
2006-10-11 20:24 147,456 --a------ C:\WINDOWS\system32\comsnap.dll
2006-10-11 20:24 142,336 --a------ C:\WINDOWS\system32\sessmgr.exe
2006-10-11 20:24 14,848 --a------ C:\WINDOWS\system32\tsdiscon.exe
2006-10-11 20:24 139,528 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys
2006-10-11 20:24 139,264 --a------ C:\WINDOWS\system32\sndvol32.exe
2006-10-11 20:24 133,120 --a------ C:\WINDOWS\system32\sndrec32.exe
2006-10-11 20:24 13,824 --a------ C:\WINDOWS\system32\rdsaddin.exe
2006-10-11 20:24 128,000 --a------ C:\WINDOWS\system32\mshearts.exe
2006-10-11 20:24 125,720 --a------ C:\WINDOWS\system32\wuauclt.exe
2006-10-11 20:24 124,928 --a------ C:\WINDOWS\system32\mplay32.exe
2006-10-11 20:24 12,040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys
2006-10-11 20:24 119,808 --a------ C:\WINDOWS\system32\winmine.exe
2006-10-11 20:24 115,200 --a------ C:\WINDOWS\system32\calc.exe
2006-10-11 20:24 110,080 --a------ C:\WINDOWS\system32\clbcatex.dll
2006-10-11 20:24 11,776 --a------ C:\WINDOWS\system32\xolehlp.dll
2006-10-11 20:24 11,264 --a------ C:\WINDOWS\system32\icaapi.dll
2006-10-11 20:24 104,448 --a------ C:\WINDOWS\system32\clipbrd.exe
2006-10-11 20:24 10,240 --a------ C:\WINDOWS\system32\reset.exe
2006-10-11 20:24 1,343,768 --a------ C:\WINDOWS\system32\wuaueng.dll
2006-10-11 20:24 1,267,200 --a------ C:\WINDOWS\system32\comsvcs.dll
2006-10-11 20:24 1,263 --a------ C:\WINDOWS\system32\usrlogon.cmd


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2006-10-22 14:28 -------- d-------- C:\Program Files\Fichiers communs
2006-10-21 17:51 -------- d-------- C:\Documents and Settings\motor\Application Data\Sierra
2006-10-21 17:41 -------- d--h----- C:\Program Files\InstallShield Installation Information
2006-10-21 17:41 -------- d-------- C:\Program Files\Sierra
2006-10-20 20:19 -------- d---s---- C:\Documents and Settings\motor\Application Data\Microsoft
2006-10-20 12:42 -------- d-------- C:\Program Files\Spyware Doctor
2006-10-20 12:39 -------- d-------- C:\Program Files\DivX
2006-10-20 12:39 -------- d-------- C:\Program Files\Apple Software Update
2006-10-19 12:32 -------- d-------- C:\Program Files\Electronic Arts
2006-10-19 11:23 -------- d-------- C:\Program Files\CCleaner
2006-10-19 10:01 -------- d-------- C:\Program Files\Google
2006-10-19 09:53 -------- d-------- C:\Program Files\Yahoo!
2006-10-19 09:48 -------- d-------- C:\Program Files\Grisoft
2006-10-19 09:18 -------- d-------- C:\Program Files\Common Files
2006-10-17 00:58 -------- d-------- C:\Documents and Settings\motor\Application Data\MSN6
2006-10-16 20:54 -------- d-------- C:\Program Files\Lavasoft
2006-10-16 20:54 -------- d-------- C:\Documents and Settings\motor\Application Data\Lavasoft
2006-10-16 20:23 -------- d-------- C:\Program Files\GrabClipSave
2006-10-16 00:33 -------- d-------- C:\Program Files\Star Downloader
2006-10-15 14:04 -------- d-------- C:\Program Files\Windows Media Player
2006-10-15 14:04 -------- d-------- C:\Program Files\CyberLink
2006-10-15 13:57 -------- d-------- C:\Program Files\ASUSTek
2006-10-15 13:47 -------- d-------- C:\Program Files\Fichiers communs\Microsoft Shared
2006-10-15 13:47 -------- d-------- C:\Program Files\Fichiers communs\Designer
2006-10-15 13:46 -------- d-------- C:\Program Files\Fichiers communs\System
2006-10-15 13:45 -------- d-------- C:\Program Files\Microsoft Office
2006-10-15 13:45 -------- d-------- C:\Program Files\microsoft frontpage
2006-10-15 13:45 -------- d-------- C:\Documents and Settings\motor\Application Data\Microsoft Web Folders
2006-10-14 23:33 -------- d-------- C:\Documents and Settings\motor\Application Data\Macromedia
2006-10-14 20:02 -------- d-------- C:\Program Files\BF2G15Mod
2006-10-14 13:04 -------- d-------- C:\Documents and Settings\motor\Application Data\Apple Computer
2006-10-14 13:02 -------- d-------- C:\Program Files\iTunes
2006-10-14 13:02 -------- d-------- C:\Program Files\iPod
2006-10-13 22:23 -------- d-------- C:\Program Files\Messenger
2006-10-13 22:20 -------- d-------- C:\Program Files\Internet Explorer
2006-10-13 22:18 -------- d-------- C:\Program Files\Outlook Express
2006-10-13 19:30 -------- d--h----- C:\Program Files\WindowsUpdate
2006-10-13 11:48 -------- d-------- C:\Documents and Settings\motor\Application Data\ArcSoft
2006-10-13 11:47 -------- d-------- C:\Program Files\ArcSoft
2006-10-12 22:11 -------- d-------- C:\Program Files\Realtek AC97
2006-10-12 22:11 -------- d-------- C:\Program Files\AvRack
2006-10-12 12:17 -------- d-------- C:\Program Files\Realtek Sound Manager
2006-10-12 12:08 -------- d-------- C:\Documents and Settings\motor\Application Data\Google
2006-10-12 12:04 -------- d-------- C:\Program Files\Fichiers communs\InstallShield
2006-10-12 12:04 -------- d-------- C:\Program Files\ASUS
2006-10-12 11:51 -------- d-------- C:\Documents and Settings\motor\Application Data\Ventrilo
2006-10-12 00:35 -------- d-------- C:\Program Files\TuneUp Utilities 2006
2006-10-12 00:35 -------- d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
2006-10-12 00:35 -------- d-------- C:\Documents and Settings\motor\Application Data\TuneUp Software
2006-10-11 23:43 -------- d-------- C:\Program Files\GameSpy Arcade
2006-10-11 23:38 -------- d-------- C:\Program Files\EA GAMES
2006-10-11 23:24 -------- d-------- C:\Program Files\NBPROF
2006-10-11 22:41 -------- d-------- C:\Program Files\NVIDIA Corporation
2006-10-11 22:40 -------- d-------- C:\Program Files\AMD
2006-10-11 22:32 -------- d-------- C:\Program Files\Ventrilo
2006-10-11 22:12 -------- d-------- C:\Program Files\Logitech
2006-10-11 22:07 -------- d-------- C:\Program Files\Trend Micro
2006-10-11 21:45 -------- d-------- C:\Program Files\WinRAR
2006-10-11 21:18 -------- d-------- C:\Program Files\Fichiers communs\SpeechEngines
2006-10-11 21:18 -------- d-------- C:\Program Files\Fichiers communs\ODBC
2006-10-11 21:17 62 --ahs---- C:\Documents and Settings\motor\Application Data\desktop.ini
2006-10-11 20:44 -------- d-------- C:\Program Files\Movie Maker
2006-10-11 20:43 -------- d-------- C:\Program Files\Windows NT
2006-10-11 20:43 -------- d-------- C:\Program Files\NetMeeting
2006-10-11 20:31 -------- d--h----- C:\Program Files\Uninstall Information
2006-10-11 20:31 -------- d-------- C:\Documents and Settings\motor\Application Data\Identities
2006-10-11 20:27 -------- d-------- C:\Program Files\xerox
2006-10-11 20:25 -------- d-------- C:\Program Files\Fichiers communs\Services
2006-10-11 20:25 -------- d-------- C:\Program Files\Fichiers communs\MSSoap
2006-10-11 20:25 -------- d-------- C:\Program Files\ComPlus Applications
2006-10-11 20:24 -------- d-------- C:\Program Files\Services en ligne
2006-10-11 20:24 -------- d-------- C:\Program Files\MSN Gaming Zone
2006-10-11 20:24 -------- d-------- C:\Program Files\MSN
2006-09-13 07:03 1084416 --a------ C:\WINDOWS\system32\msxml3.dll
2006-09-06 20:27 31248 --a------ C:\WINDOWS\system32\drivers\tmpreflt.sys
2006-09-06 20:27 197648 --a------ C:\WINDOWS\system32\drivers\tmxpflt.sys
2006-09-06 20:09 1051456 --a------ C:\WINDOWS\system32\drivers\VsapiNT.sys
2006-08-25 17:51 617472 --a------ C:\WINDOWS\system32\comctl32.dll
2006-08-24 14:46 888832 --a------ C:\WINDOWS\system32\nvmobls.dll
2006-08-24 14:46 86016 --a------ C:\WINDOWS\system32\nvmctray.dll
2006-08-24 14:46 81920 --a------ C:\WINDOWS\system32\nvwddi.dll
2006-08-24 14:46 794624 --a------ C:\WINDOWS\system32\nvcplui.exe
2006-08-24 14:46 7696384 --a------ C:\WINDOWS\system32\nvcpl.dll
2006-08-24 14:46 581632 --a------ C:\WINDOWS\system32\nvhwvid.dll
2006-08-24 14:46 5644288 --a------ C:\WINDOWS\system32\nvoglnt.dll
2006-08-24 14:46 5611520 --a------ C:\WINDOWS\system32\nvdisps.dll
2006-08-24 14:46 5251072 --a------ C:\WINDOWS\system32\nvdispsr.dll
2006-08-24 14:46 466944 --a------ C:\WINDOWS\system32\nvshell.dll
2006-08-24 14:46 458752 --a------ C:\WINDOWS\system32\nvmccssr.dll
2006-08-24 14:46 45056 --a------ C:\WINDOWS\system32\nvmccsrs.dll
2006-08-24 14:46 442368 --a------ C:\WINDOWS\system32\nvappbar.exe
2006-08-24 14:46 425984 --a------ C:\WINDOWS\system32\keystone.exe
2006-08-24 14:46 35840 --a------ C:\WINDOWS\system32\nvcodins.dll
2006-08-24 14:46 35840 --a------ C:\WINDOWS\system32\nvcod.dll
2006-08-24 14:46 335872 --a------ C:\WINDOWS\system32\nvwrses.dll
2006-08-24 14:46 335872 --a------ C:\WINDOWS\system32\nvwrsel.dll
2006-08-24 14:46 327680 --a------ C:\WINDOWS\system32\nvwrsfr.dll
2006-08-24 14:46 327680 --a------ C:\WINDOWS\system32\nvwrsesm.dll
2006-08-24 14:46 323584 --a------ C:\WINDOWS\system32\nvwrspt.dll
2006-08-24 14:46 323584 --a------ C:\WINDOWS\system32\nvwrsit.dll
2006-08-24 14:46 323584 --a------ C:\WINDOWS\system32\nvrshe.dll
2006-08-24 14:46 323584 --a------ C:\WINDOWS\system32\nvrsar.dll
2006-08-24 14:46 319488 --a------ C:\WINDOWS\system32\nvwrsptb.dll
2006-08-24 14:46 319488 --a------ C:\WINDOWS\system32\nvwrsnl.dll
2006-08-24 14:46 315392 --a------ C:\WINDOWS\system32\nvwrsru.dll
2006-08-24 14:46 315392 --a------ C:\WINDOWS\system32\nvwrshu.dll
2006-08-24 14:46 311296 --a------ C:\WINDOWS\system32\nvwrsde.dll
2006-08-24 14:46 311296 --a------ C:\WINDOWS\system32\nvexpbar.dll
2006-08-24 14:46 3039232 --a------ C:\WINDOWS\system32\nvgames.dll
2006-08-24 14:46 303104 --a------ C:\WINDOWS\system32\nvwrstr.dll
2006-08-24 14:46 303104 --a------ C:\WINDOWS\system32\nvwrssl.dll
2006-08-24 14:46 303104 --a------ C:\WINDOWS\system32\nvwrsfi.dll
2006-08-24 14:46 299008 --a------ C:\WINDOWS\system32\nvwrssk.dll
2006-08-24 14:46 299008 --a------ C:\WINDOWS\system32\nvwrsno.dll
2006-08-24 14:46 2953216 --a------ C:\WINDOWS\system32\nvvitvsr.dll
2006-08-24 14:46 294912 --a------ C:\WINDOWS\system32\nvwrssv.dll
2006-08-24 14:46 294912 --a------ C:\WINDOWS\system32\nvwrspl.dll
2006-08-24 14:46 294912 --a------ C:\WINDOWS\system32\nvwrsda.dll
2006-08-24 14:46 2928640 --a------ C:\WINDOWS\system32\nvgamesr.dll
2006-08-24 14:46 2904064 --a------ C:\WINDOWS\system32\nvvitvs.dll
2006-08-24 14:46 286720 --a------ C:\WINDOWS\system32\nvwrseng.dll
2006-08-24 14:46 286720 --a------ C:\WINDOWS\system32\nvwrscs.dll
2006-08-24 14:46 286720 --a------ C:\WINDOWS\system32\nvnt4cpl.dll
2006-08-24 14:46 2859008 --a------ C:\WINDOWS\system32\nvmoblsr.dll
2006-08-24 14:46 282624 --a------ C:\WINDOWS\system32\nvwrsar.dll
2006-08-24 14:46 278528 --a------ C:\WINDOWS\system32\nvwrshe.dll
2006-08-24 14:46 278528 --a------ C:\WINDOWS\system32\nvrsfr.dll
2006-08-24 14:46 274432 --a------ C:\WINDOWS\system32\nvrsit.dll
2006-08-24 14:46 274432 --a------ C:\WINDOWS\system32\nvrses.dll
2006-08-24 14:46 274432 --a------ C:\WINDOWS\system32\nvrsel.dll
2006-08-24 14:46 270336 --a------ C:\WINDOWS\system32\nvrsde.dll
2006-08-24 14:46 266240 --a------ C:\WINDOWS\system32\nvrspt.dll
2006-08-24 14:46 266240 --a------ C:\WINDOWS\system32\nvrsnl.dll
2006-08-24 14:46 266240 --a------ C:\WINDOWS\system32\nvrsesm.dll
2006-08-24 14:46 262144 --a------ C:\WINDOWS\system32\nvrsru.dll
2006-08-24 14:46 262144 --a------ C:\WINDOWS\system32\nvrsptb.dll
2006-08-24 14:46 262144 --a------ C:\WINDOWS\system32\nvrsja.dll
2006-08-24 14:46 258048 --a------ C:\WINDOWS\system32\nvrsko.dll
2006-08-24 14:46 249856 --a------ C:\WINDOWS\system32\nvrstr.dll
2006-08-24 14:46 249856 --a------ C:\WINDOWS\system32\nvrssl.dll
2006-08-24 14:46 249856 --a------ C:\WINDOWS\system32\nvrssk.dll
2006-08-24 14:46 249856 --a------ C:\WINDOWS\system32\nvrspl.dll
2006-08-24 14:46 249856 --a------ C:\WINDOWS\system32\nvrsno.dll
2006-08-24 14:46 249856 --a------ C:\WINDOWS\system32\nvrshu.dll
2006-08-24 14:46 245760 --a------ C:\WINDOWS\system32\nvrssv.dll
2006-08-24 14:46 245760 --a------ C:\WINDOWS\system32\nvrsda.dll
2006-08-24 14:46 241664 --a------ C:\WINDOWS\system32\nvrsfi.dll
2006-08-24 14:46 241664 --a------ C:\WINDOWS\system32\nvrseng.dll
2006-08-24 14:46 241664 --a------ C:\WINDOWS\system32\nvrscs.dll
2006-08-24 14:46 229376 --a------ C:\WINDOWS\system32\nvmccs.dll
2006-08-24 14:46 221184 --a------ C:\WINDOWS\system32\nvrszhc.dll
2006-08-24 14:46 212992 --a------ C:\WINDOWS\system32\nvwrsja.dll
2006-08-24 14:46 212992 --a------ C:\WINDOWS\system32\nvapi.dll
2006-08-24 14:46 196608 --a------ C:\WINDOWS\system32\nvwrsko.dll
2006-08-24 14:46 188416 --a------ C:\WINDOWS\system32\nvmccss.dll
2006-08-24 14:46 1732608 --a------ C:\WINDOWS\system32\nvwssr.dll
2006-08-24 14:46 167936 --a------ C:\WINDOWS\system32\nvwrszht.dll
2006-08-24 14:46 1662976 --a------ C:\WINDOWS\system32\nvwdmcpl.dll
2006-08-24 14:46 163840 --a------ C:\WINDOWS\system32\nvwrszhc.dll
2006-08-24 14:46 1617920 --a------ C:\WINDOWS\system32\nwiz.exe
2006-08-24 14:46 159810 --a------ C:\WINDOWS\system32\nvsvc32.exe
2006-08-24 14:46 147456 --a------ C:\WINDOWS\system32\nvcolor.exe
2006-08-24 14:46 1470464 --a------ C:\WINDOWS\system32\nview.dll
2006-08-24 14:46 1339392 --a------ C:\WINDOWS\system32\nvdspsch.exe
2006-08-24 14:46 1236992 --a------ C:\WINDOWS\system32\nvwss.dll
2006-08-24 14:46 122880 --a------ C:\WINDOWS\system32\nvrszht.dll
2006-08-24 14:46 1019904 --a------ C:\WINDOWS\system32\nvwimg.dll
2006-08-24 14:46 1011712 --a------ C:\WINDOWS\system32\nvcpluir.dll
2006-08-16 13:59 100352 --a------ C:\WINDOWS\system32\6to4svc.dll


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"GCS"="\"C:\\Program Files\\GrabClipSave\\GrabClipSave.exe\""
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"Amtw"="\"C:\\WINDOWS\\system32\\RACLE~1\\tracert.exe\" -vt yazb"
"EA Core"="C:\\Program Files\\Electronic Arts\\EA Downloader\\Core.exe -silent"
"Ccaspld"="C:\\Documents and Settings\\motor\\Application Data\\?dobe\\??anregw.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"NvMediaCenter"="RunDLL32.exe NvMCTray.dll,NvTaskbarInit"
@=""
"Launch LGDCore"="\"C:\\Program Files\\Logitech\\G-series Software\\LGDCore.exe\" /SHOWHIDE"
"Launch LCDMon"="\"C:\\Program Files\\Logitech\\G-series Software\\LCDMon.exe\""
"NVIDIA nTune"="\"C:\\Program Files\\NVIDIA Corporation\\nTune\\\\nTune.exe\" clear"
"ASUS Probe"="C:\\Program Files\\ASUS\\Probe\\AsusProb.exe"
"SoundMan"="SOUNDMAN.EXE"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"RemoteControl"="\"C:\\Program Files\\ASUSTek\\ASUSDVD\\PDVDServ.exe\""
"pccguide.exe"="\"C:\\Program Files\\Trend Micro\\Internet Security 12\\pccguide.exe\""
"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"NoChange"="1"
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,00,01,00,00,00,00,00,00,00,04,00,00,e0,03,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,6a,02,00,00,23,00,00,00,a4,00,00,00,9a,00,\
00,00,01,00,00,00

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winwim32

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"



~ ~ ~ ~ ~ ~ ~ ~ Hijackthis Backups ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~

backup-20061020-130449-864
O21 - SSODL: incestuously - {03413bf7-e34c-445b-bfc0-a2b127255871} - (no file)
backup-20061020-130449-229
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\Maintenance en 1 clic.job

Completion time: 06-10-22 14:30:24.46
C:\ComboFix.txt ... 06-10-22 14:30


pour ton deuxiéme post le site m a rien afficher  

encor se probleme de virus detecté par trend micro
voila le chemin d acces "C:\WINDOWS\system32\winwim32.dll"
a chaque fois que je clic sur le fichier dll le message s ouvre
je te le dis je sais pas si ca peut t aider ??  

j ai aussi passé winwim32.dll sur virustotal rien non plus

cois-tu que je peut la supprimer avec killbox sans risque

J'attend le scan de :
C:\WINDOWS\system32\ytnhvbm.dll
sur VirusTotal  

il se passe rien c est normal ???

je fait parcourir ect .. je cilc send et la rien voila

Essaie ici :
http://virusscan.jotti.org/

Service load: 0% 100%

File: ytnhvbm.dll
Status: INFECTED/MALWARE
MD5 488c6bf131026223a82de5f23534d98b
Packers detected: -
Scanner results
AntiVir Found Adware-Spyware/PurityScan.AK.124 adware
ArcaVir Found nothing
Avast Found Win32:Agent-RY
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found Trojan.PurityScan.AK
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found Adware/ClickSpring
Kaspersky Anti-Virus Found not-a-virus:AdWare.Win32.PurityScan.ak
NOD32 Found a variant of Win32/Adware.PurityScan application
Norman Virus Control Found nothing
VirusBuster Found nothing
VBA32 Found AdWare.Win32.PurityScan.ak

S'il te plaît, va ici pour uploader un fichier douteux pour analyse.

"Your Username:" - Entre ton pseudo sur ce forum

"Topic Where File Was Requested:" - Copie-colle le lien vers cette discussion

"File(s) To Submit:" - Bouton "Parcourir..." pour naviguer vers ce nom de fichier : C:\WINDOWS\system32\ytnhvbm.dll

Cliquez sur Send File
Fais pareil avec :
C:\WINDOWS\system32\winwim32.dll

Double-clique VundoFix.exe afin de le lancer

NE clique PAS sur le bouton Scan for Vundo

Clique Droit dans la fenêtre blanche, choisis Add more files ?

Rajoute dans la première ligne :
C:\WINDOWS\system32\ytnhvbm.dll
Dans la deuxième :
C:\WINDOWS\system32\winwim32.dll

Clique successivement sur :
- Add Files
- Close Windows
- Remove Vundo

Si l'outil te demande de redémarrer, accepte.

Copie/Colle ensuite le rapport C:\vundofix.txt

VundoFix V6.2.6

Checking Java version...

Sun Java not detected
Scan started at 13:46:16 22/10/2006

Listing files found while scanning....

C:\WINDOWS\system32\oonplu.dll
C:\WINDOWS\system32\pakohlhj.dll
C:\WINDOWS\system32\waasanh.dll
C:\WINDOWS\system32\iudfonnx.exe
C:\WINDOWS\system32\jkhhh.dll
C:\WINDOWS\system32\hhhkj.ini
C:\WINDOWS\system32\hhhkj.bak1
C:\WINDOWS\system32\hhhkj.bak2

Beginning removal...

Attempting to delete C:\WINDOWS\system32\oonplu.dll
C:\WINDOWS\system32\oonplu.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\pakohlhj.dll
C:\WINDOWS\system32\pakohlhj.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\waasanh.dll
C:\WINDOWS\system32\waasanh.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\iudfonnx.exe
C:\WINDOWS\system32\iudfonnx.exe Has been deleted!

Attempting to delete C:\WINDOWS\system32\jkhhh.dll
C:\WINDOWS\system32\jkhhh.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\hhhkj.ini
C:\WINDOWS\system32\hhhkj.ini Has been deleted!

Attempting to delete C:\WINDOWS\system32\hhhkj.bak1
C:\WINDOWS\system32\hhhkj.bak1 Has been deleted!

Attempting to delete C:\WINDOWS\system32\hhhkj.bak2
C:\WINDOWS\system32\hhhkj.bak2 Has been deleted!

Performing Repairs to the registry.
Done!

Beginning removal...

Attempting to delete C:\WINDOWS\system32\ytnhvbm.dll
C:\WINDOWS\system32\ytnhvbm.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\winwim32.dll
C:\WINDOWS\system32\winwim32.dll Has been deleted!

Performing Repairs to the registry.
Done!

VundoFix V6.2.6

Checking Java version...

Sun Java not detected
Scan started at 16:34:39 22/10/2006

Listing files found while scanning....

il n a afficher un message d erreur et a redemarré mais apparamant les deux fichier .dll on ete supprimé et au redémarage il m as dit qu il n avait pas trouver de fichier infecté apres le scan

Normal  
On va y remedier.
Reposte un rapport Hijackthis.

Logfile of HijackThis v1.99.1
Scan saved at 16:55:21, on 22/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Logitech\G-series Software\LGDCore.exe
C:\Program Files\Logitech\G-series Software\LCDMon.exe
C:\Program Files\ASUS\Probe\AsusProb.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe
C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\GrabClipSave\GrabClipSave.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe
C:\Program Files\Electronic Arts\EA Downloader\Core.exe
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe
C:\Program Files\BF2G15Mod\BF2 LCD.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\alg.exe
C:\Download\VundoFix.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Download\scan.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R3 - URLSearchHook: (no name) - {911B8EB5-452E-48A1-2465-187495D0789E} - C:\WINDOWS\system32\ytnhvbm.dll (file missing)
O2 - BHO: (no name) - {01D8721E-E0D2-4B09-4319-01837C8982F6} - C:\WINDOWS\system32\oonplu.dll (file missing)
O2 - BHO: (no name) - {094BD811-40DC-440F-83AF-14349100B091} - (no file)
O2 - BHO: (no name) - {1DAEFCB9-06C8-47c6-8F20-3FB54B244DAA} - C:\WINDOWS\system32\pakohlhj.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {911B8EB5-452E-48A1-2465-187495D0789E} - C:\WINDOWS\system32\ytnhvbm.dll (file missing)
O2 - BHO: (no name) - {EDF12FAD-011F-4878-8E17-D94A2457E00D} - C:\WINDOWS\system32\jkhhh.dll (file missing)
O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe"
O4 - HKLM\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\\nTune.exe" clear
O4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Probe\AsusProb.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [GCS] "C:\Program Files\GrabClipSave\GrabClipSave.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Amtw] "C:\WINDOWS\system32\RACLE~1\tracert.exe" -vt yazb
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EA Downloader\Core.exe -silent
O4 - HKCU\..\Run: [Ccaspld] C:\Documents and Settings\motor\Application Data\?dobe\??anregw.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Download with Star Downloader - C:\PROGRA~1\STARDO~1\sdie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe

Re,

- Lance Hijackthis ->Do a system scan only
->Coche les lignes ci-dessous :

R3 - URLSearchHook: (no name) - {911B8EB5-452E-48A1-2465-187495D0789E} - C:\WINDOWS\system32\ytnhvbm.dll (file missing)
O2 - BHO: (no name) - {01D8721E-E0D2-4B09-4319-01837C8982F6} - C:\WINDOWS\system32\oonplu.dll (file missing)
O2 - BHO: (no name) - {094BD811-40DC-440F-83AF-14349100B091} - (no file)
O2 - BHO: (no name) - {1DAEFCB9-06C8-47c6-8F20-3FB54B244DAA} - C:\WINDOWS\system32\pakohlhj.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {911B8EB5-452E-48A1-2465-187495D0789E} - C:\WINDOWS\system32\ytnhvbm.dll (file missing)
O2 - BHO: (no name) - {EDF12FAD-011F-4878-8E17-D94A2457E00D} - C:\WINDOWS\system32\jkhhh.dll (file missing)
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [Amtw] "C:\WINDOWS\system32\RACLE~1\tracert.exe" -vt yazb
O4 - HKCU\..\Run: [Ccaspld] C:\Documents and Settings\motor\Application Data\?dobe\??anregw.exe

Clique sur Fix checked (en bas à gauche)

- Assure toi d'avoir accès aux dossiers/fichiers cachés
-> Démarrer
-> Panneau de configuration
-> Options des Dossiers, onglet Affichage :
. Clique sur Afficher les dossiers cachés
. Décoche Masquer les extensions des fichiers dont le type est connu
. Décoche Masquer les fichiers protégés du système d'exploitation

- Suppime ces fichiers et/ou dossiers s'ils existent encore :

C:\WINDOWS\system32\RACLE~1\ NOM DE DOSSIER COMMENCANT PAR "RACLE"
C:\Documents and Settings\motor\Application Data\?dobe\ ?=CARACTERE ALEATOIRE
C:\QooBox\

Vide ta crobeille.

D'autres problemes ?

oui comment on ajoute resolu au permier post

c est super sypma de perdre du temps pour moi et tout les autre noob qui se ramasse des merde dans leurs pc !!!!!!!!!!!!!!!        

http://www.infos-du-net.com/forum/Securite-Virus/editer...
-> tu rajoute RESOLU au titre

Dénonce ton infection (Vundo/PurityScan) pour faire condamner les auteurs, ça serait sympa.
Crée un message pour faire avancer les choses sur Malware-Complaints, nous devons être le plus nombreux possibles, alors rends compte de ton infection.
AIDE : Comment rapporter son infection sur Malware-Complaints ?

Consulte cette page pour éviter que ces problèmes ne réapparaissent pas.