re, Mon virus apparemment c'est
Win32:VBStat-C [Trj] Encore une fois ! Please help !

Bonjour,

Peux tu STP nous donner l'emplacement des fichiers infectieux trouvés par Avast!

&

Poste un rapport HijackThis

Télécharge le, puis met le dans un dossier dédié (exemple : ..\Bureau\Hijackthis\Hijackthis.exe ).

Dézippe-le dans un dossier ou directement sur ton bureau sur ton Bureau.

Ensuite, lance le appuie sur Do a system scan a save a logfile, le bloc note va alors s’ouvrir, tu copies et tu colles le rapport ici dans ta prochaine réponse.

Aide : N'hésite pas à consulter l'aide HiJackThis

Fichiers Infectés :

D:\WINDOWS\system32\uxoptsnx.dll
D:\WINDOWS\system32\fccawww.dll
D:\WINDOWS\system32\windbg48.sys
D:\WINDOWS\system32\ddcya.dll
D:\WINDOWS\system32\fccawww.dll
D:\WINDOWS\system32\hlpggucb.dll
D:\WINDOWS\system32\ddcya.dll

Vundo:

VundoFix V6.3.23

Checking Java version...

Java version is 1.5.0.7
Old versions of java are exploitable and should be removed.

Scan started at 23:19:58 15/05/2007

Listing files found while scanning....

D:\WINDOWS\system32\ugpjkrkq.dll

Beginning removal...

Attempting to delete D:\WINDOWS\system32\ugpjkrkq.dll
D:\WINDOWS\system32\ugpjkrkq.dll Has been deleted!

Performing Repairs to the registry.
Done!

Hijackthis:
Logfile of HijackThis v1.99.1
Scan saved at 23:40:46, on 15/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\ZoneLabs\vsmon.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
D:\Program Files\Alwil Software\Avast4\ashServ.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
D:\WINDOWS\Mixer.exe
D:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
D:\WINDOWS\smanager.7.exe
D:\Program Files\QuickTime\qttask.exe
D:\WINDOWS\system32\avp.exe
D:\Program Files\MSN Messenger\MsnMsgr.Exe
D:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
E:\eMule\emule.exe
D:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
D:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe
D:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
D:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
D:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
D:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
D:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
D:\PROGRA~1\INCRED~1\bin\IMApp.exe
D:\Program Files\Messenger\msmsgs.exe
D:\WINDOWS\system32\wuauclt.exe
D:\WINDOWS\system32\wuauclt.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\Program Files\WinRAR\WinRAR.exe
D:\DOCUME~1\Zuzzu\LOCALS~1\Temp\Rar$EX00.360\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com/french
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/search?q=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {6211D16B-3CFE-4C44-BBDC-34B298AF5CCA} - D:\WINDOWS\system32\ddcya.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A05DA7E0-383C-4E99-A72A-742050A152A2} - D:\WINDOWS\system32\fccawww.dll (file missing)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - D:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - D:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [EPSON Stylus DX4200 Series] D:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P26 "EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [NeroFilterCheck] D:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [WorksFUD] D:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] D:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] D:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [SManager] smanager.7.exe
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TrojanScanner] D:\Program Files\Trojan Remover\Trjscan.exe
O4 - HKLM\..\Run: [avp] D:\WINDOWS\system32\avp.exe
O4 - HKCU\..\Run: [MsnMsgr] "D:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [IncrediMail] D:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "D:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [eMuleAutoStart] E:\eMule\emule.exe -AutoStart
O4 - Startup: MSN Pictures Displayer.lnk = D:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
O4 - Startup: Outil de détection de support de Cyber-shot Viewer.lnk = D:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Startup: Stardock ObjectDock.lnk = D:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O4 - Startup: Y'z ToolBar.lnk = D:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
O4 - Global Startup: Microsoft Office.lnk = D:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\MSMSGS.EXE
O15 - Trusted Zone: http://www.msi.com.tw
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - D:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: winmyy32 - D:\WINDOWS\SYSTEM32\winmyy32.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - D:\WINDOWS\system32\Ati2evxx.exe (file missing)
O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - D:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - D:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - D:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - D:\WINDOWS\system32\ZoneLabs\vsmon.exe

Voila Voila

Rapport Combofix:
"Zuzzu" - 2007-05-16 11:33:12 Service Pack 2
ComboFix 07-05.13.2.V - Running from: "D:\Program Files\Mozilla Firefox\"


(((((((((((((((((((((((((((((((((((((((((((((((((( V Log )))))))))))))))))))))))))))))))))))))))))))))))))))))))


D:\WINDOWS\system32\urqqonn.dll
D:\WINDOWS\system32\winmyy32.dll


* * * POST RUN FILES/FOLDERS * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *


((((((((((((((((((((((((((((((( Files Created from 2007-04-05 to 2007-05-16 ))))))))))))))))))))))))))))))))))


2007-05-15 23:19 <REP> d-------- D:\VundoFix Backups
2007-05-15 14:19 17,408 --a------ D:\WINDOWS\system32\avp.exe
2007-05-15 09:30 <REP> d-------- D:\DOCUME~1\Zuzzu\APPLIC~1\BSplayer PRO
2007-05-15 01:59 132,660 --a------ D:\WINDOWS\system32\uxoptsnx.dll.ren
2007-05-15 01:59 1,427,066 --a------ D:\WINDOWS\system32\xnstpoxu.ini.ren
2007-05-15 01:44 132,660 --a------ D:\WINDOWS\system32\ajbqxbmn.dll.ren
2007-05-15 01:44 1,428,713 --a------ D:\WINDOWS\system32\nmbxqbja.ini.ren
2007-05-15 01:41 75,264 --a------ D:\WINDOWS\system32\unacev2.dll
2007-05-15 01:41 153,088 --a------ D:\WINDOWS\system32\UNRAR3.dll
2007-05-15 01:41 <REP> d-a------ D:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
2007-05-15 01:41 <REP> d-------- D:\Program Files\Trojan Remover
2007-05-15 01:41 <REP> d-------- D:\DOCUME~1\Zuzzu\APPLIC~1\Simply Super Software
2007-05-15 01:41 <REP> d-------- D:\DOCUME~1\ALLUSE~1\APPLIC~1\Simply Super Software
2007-05-15 01:39 <REP> d-------- D:\Program Files\a-squared Free
2007-05-14 17:36 621,353 --a------ D:\WINDOWS\system32\aycdd.bak1.ren
2007-05-14 16:58 <REP> d-------- D:\Program Files\eMule
2007-05-12 09:41 <REP> d-------- D:\WINDOWS\BDOSCAN8
2007-05-11 22:31 132,660 --a------ D:\WINDOWS\system32\elbffubd.dll.ren
2007-05-11 22:31 1,429,151 --a------ D:\WINDOWS\system32\dbuffble.ini.ren
2007-05-11 22:28 621,908 --a------ D:\WINDOWS\system32\aycdd.ini.ren
2007-05-11 22:28 285,268 --a------ D:\WINDOWS\system32\ddcya.dll.ren
2007-05-11 20:29 11,264 --a------ D:\WINDOWS\smanager.7.exe
2007-05-11 20:28 26,678 --a------ D:\WINDOWS\system32\fccawww.dll.ren
2007-05-11 13:55 <REP> d-------- D:\Program Files\Microsoft ActiveSync
2007-05-11 13:54 <REP> d-------- D:\WINDOWS\ShellNew
2007-05-04 18:39 10,624 --a------ D:\WINDOWS\system32\drivers\gameenum.sys
2007-05-04 18:35 765,952 -ra------ D:\WINDOWS\system\crlds3d.dll
2007-05-04 18:35 712,704 -ra------ D:\WINDOWS\system32\Audio3D.dll
2007-05-04 18:35 712,704 -ra------ D:\WINDOWS\system32\a3d.dll
2007-05-04 18:35 357,070 -ra------ D:\WINDOWS\system32\drivers\cmaudio.sys
2007-05-04 18:35 32,768 -ra------ D:\WINDOWS\system32\cmnprop.dll
2007-05-04 18:35 122,880 -ra------ D:\WINDOWS\cmuninst.exe
2007-05-04 18:35 122,880 -ra------ D:\WINDOWS\cmuninst.dat
2007-05-04 18:35 1,216,512 -ra------ D:\WINDOWS\mixer.exe
2007-05-04 18:21 <REP> d-------- D:\Program Files\VIAudioi
2007-05-04 17:55 <REP> d-------- D:\Program Files\Setup Files
2007-05-04 12:01 <REP> d-------- D:\DOCUME~1\Zuzzu\APPLIC~1\ArcSoft
2007-05-04 00:08 <REP> d-------- D:\Program Files\wkslnchr
2007-05-04 00:08 <REP> d-------- D:\Program Files\Shoebox
2007-05-04 00:08 <REP> d-------- D:\Program Files\PIP
2007-05-04 00:08 <REP> d-------- D:\Program Files\GWID
2007-05-04 00:05 <REP> d-------- D:\Program Files\1036
2007-05-04 00:04 <REP> d-------- D:\Program Files\PiFiles
2007-05-04 00:04 <REP> d-------- D:\Program Files\Content
2007-05-03 23:54 <REP> d-------- D:\Program Files\Microsoft Works
2007-05-03 23:53 <REP> d-------- D:\Program Files\Microsoft Works Suite 2002
2007-05-03 12:21 <REP> d-------- D:\Program Files\Nero
2007-05-03 12:21 <REP> d-------- D:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
2007-05-03 12:19 <REP> d-------- D:\WINDOWS\system32\DirectX
2007-05-02 18:16 <REP> d-------- D:\Program Files\Audacity
2007-05-02 11:52 <REP> d-------- D:\DOCUME~1\Zuzzu\APPLIC~1\EPSON
2007-04-30 21:46 <REP> d-------- D:\Program Files\pspvideo9
2007-04-30 21:46 <REP> d-------- D:\Program Files\AviSynth 2.5
2007-04-28 03:48 <REP> d-------- D:\Program Files\AVIcodec
2007-04-28 02:04 <REP> d-------- D:\WINDOWS\wb
2007-04-27 20:13 <REP> d-------- D:\Program Files\Messenger
2007-04-27 20:13 <REP> d-------- D:\DOCUME~1\Zuzzu\APPLIC~1\MSN Pictures Displayer
2007-04-27 20:12 <REP> d-------- D:\Program Files\MSN Pictures Displayer
2007-04-26 21:27 <REP> d-------- D:\WINDOWS\system32\slideApp
2007-04-26 21:26 <REP> d--hs---- D:\WINDOWS\ftpcache
2007-04-26 21:24 <REP> d-------- D:\Program Files\Slide
2007-04-26 17:26 69,632 --a------ D:\WINDOWS\system32\lfgif13n.dll
2007-04-26 17:26 57,344 --a------ D:\WINDOWS\system32\lfbmp13n.dll
2007-04-26 17:26 462,848 --a------ D:\WINDOWS\system32\ltkrn13n.dll
2007-04-26 17:26 450,560 --a------ D:\WINDOWS\system32\ltimg13n.dll
2007-04-26 17:26 401,408 --a------ D:\WINDOWS\system32\lfcmp13n.dll
2007-04-26 17:26 299,008 --a------ D:\WINDOWS\system32\ltdis13n.dll
2007-04-26 17:26 206,336 --a------ D:\WINDOWS\system32\ltefx13n.dll
2007-04-26 17:26 163,840 --a------ D:\WINDOWS\system32\ltfil13n.dll
2007-04-26 16:11 <REP> d-------- D:\Program Files\Easy Thumbnails
2007-04-26 16:11 <REP> d-------- D:\DOCUME~1\Zuzzu\APPLIC~1\Easy Thumbnails
2007-04-25 22:45 <REP> d-------- D:\DOCUME~1\Zuzzu\APPLIC~1\Ahead
2007-04-25 22:37 569,344 --a------ D:\WINDOWS\system32\imagr5.dll
2007-04-25 22:37 544,768 --a------ D:\WINDOWS\system32\imagx5.dll
2007-04-25 22:37 38,912 --a------ D:\WINDOWS\system32\picn20.dll
2007-04-25 22:37 283,920 --a------ D:\WINDOWS\system32\ImagXpr5.dll
2007-04-25 22:37 155,648 --a------ D:\WINDOWS\system32\NeroCheck.exe
2007-04-25 19:36 <REP> d--h----- D:\WINDOWS\PIF
2007-04-25 19:26 7,552 --a------ D:\WINDOWS\system32\drivers\SONYPVU1.SYS
2007-04-25 18:38 <REP> d-------- D:\DOCUME~1\Zuzzu\APPLIC~1\Sony Corporation
2007-04-25 18:33 6,097 --a------ D:\WINDOWS\system32\drivers\sonyhcb.sys
2007-04-25 18:33 53,248 --a------ D:\WINDOWS\system32\SONYHCY.DLL
2007-04-25 18:33 38,739 --a------ D:\WINDOWS\system32\drivers\sonyhcc.sys
2007-04-25 18:33 3,654 --a------ D:\WINDOWS\system32\drivers\Sonyhcp.dll
2007-04-25 18:33 299,923 --a------ D:\WINDOWS\system32\drivers\sonyhcs.sys
2007-04-25 18:33 102,220 --a------ D:\WINDOWS\system32\drivers\sonypvs1.sys
2007-04-25 18:33 <REP> d-------- D:\Drivers
2007-04-25 18:32 <REP> d-------- D:\Program Files\Sony
2007-04-25 13:23 <REP> d-------- D:\DOCUME~1\Zuzzu\APPLIC~1\DivX
2007-04-25 10:50 <REP> d-------- D:\Program Files\DivX
2007-04-25 09:44 77,312 --a------ D:\WINDOWS\system32\TWAIN_32.DLL
2007-04-25 09:44 212,480 --a------ D:\WINDOWS\system32\PCDLIB32.DLL
2007-04-25 09:44 1,706,800 --a------ D:\WINDOWS\system32\gdiplus.dll
2007-04-25 09:44 <REP> d-------- D:\Program Files\ArcSoft
2007-04-24 21:54 <REP> d-------- D:\DOCUME~1\Zuzzu\APPLIC~1\Google
2007-04-24 21:53 <REP> d-------- D:\Program Files\Google
2007-04-24 21:41 <REP> d-------- D:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
2007-04-24 21:39 <REP> d-------- D:\Program Files\Messenger Plus! Live
2007-04-24 21:34 <REP> d-------- D:\Program Files\MSN Messenger
2007-04-24 21:12 <REP> d-------- D:\WINDOWS\SxsCaPendDel
2007-04-24 20:55 <REP> d---s---- D:\DOCUME~1\Zuzzu\UserData
2007-04-24 20:10 <REP> d-------- D:\Program Files\MSXML 4.0
2007-04-24 09:58 <REP> d-------- D:\Program Files\Fichiers communs\Ahead
2007-04-24 09:23 <REP> d-------- D:\WINDOWS\system32\appmgmt
2007-04-23 17:34 <REP> d-------- D:\DOCUME~1\Zuzzu\APPLIC~1\Nokia
2007-04-23 17:34 <REP> d-------- D:\DOCUME~1\Zuzzu\APPLIC~1\Datalayer
2007-04-23 17:29 <REP> d-------- D:\DOCUME~1\Zuzzu\Phone Browser
2007-04-23 17:29 <REP> d-------- D:\DOCUME~1\Zuzzu\APPLIC~1\PC Suite
2007-04-23 17:28 <REP> d-------- D:\Program Files\Nokia
2007-04-23 17:28 <REP> d-------- D:\Program Files\Fichiers communs\PCSuite
2007-04-23 17:28 <REP> d-------- D:\Program Files\Fichiers communs\Nokia
2007-04-23 17:13 <REP> d-------- D:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
2007-04-23 17:11 89,430 --a------ D:\WINDOWS\system32\EPPICPrinterDB.dat
2007-04-23 17:11 65,536 --a------ D:\WINDOWS\system32\EPPicMgr.dll
2007-04-23 17:11 479,232 --a------ D:\WINDOWS\system32\PICSDK.dll
2007-04-23 17:11 4,943 --a------ D:\WINDOWS\system32\EPPICPattern6.dat
2007-04-23 17:11 26,154 --a------ D:\WINDOWS\system32\EPPICPattern1.dat
2007-04-23 17:11 24,903 --a------ D:\WINDOWS\system32\EPPICPattern3.dat
2007-04-23 17:11 21,390 --a------ D:\WINDOWS\system32\EPPICPattern5.dat
2007-04-23 17:11 20,148 --a------ D:\WINDOWS\system32\EPPICPattern2.dat
2007-04-23 17:11 114,688 --a------ D:\WINDOWS\system32\EpPicPrt.dll
2007-04-23 17:11 11,811 --a------ D:\WINDOWS\system32\EPPICPattern4.dat
2007-04-23 17:11 1,146 --a------ D:\WINDOWS\system32\EPPICPresetData_DU.dat
2007-04-23 17:11 1,139 --a------ D:\WINDOWS\system32\EPPICPresetData_PT.dat
2007-04-23 17:11 1,139 --a------ D:\WINDOWS\system32\EPPICPresetData_BP.dat
2007-04-23 17:11 1,136 --a------ D:\WINDOWS\system32\EPPICPresetData_ES.dat
2007-04-23 17:11 1,129 --a------ D:\WINDOWS\system32\EPPICPresetData_FR.dat
2007-04-23 17:11 1,129 --a------ D:\WINDOWS\system32\EPPICPresetData_CF.dat
2007-04-23 17:11 1,120 --a------ D:\WINDOWS\system32\EPPICPresetData_IT.dat
2007-04-23 17:11 1,107 --a------ D:\WINDOWS\system32\EPPICPresetData_GE.dat
2007-04-23 17:11 1,104 --a------ D:\WINDOWS\system32\EPPICPresetData_EN.dat
2007-04-23 17:08 79,679 --a------ D:\WINDOWS\system32\E_FLMAEE.DLL
2007-04-23 17:08 64,000 --a------ D:\WINDOWS\system32\E_FBCBAEE.DLL
2007-04-23 17:08 49,152 --a------ D:\WINDOWS\system32\E_DCINST.DLL
2007-04-23 17:08 34,304 --a------ D:\WINDOWS\system32\E_FBCHAEE.DLL
2007-04-23 17:06 25,856 --a------ D:\WINDOWS\system32\drivers\usbprint.sys
2007-04-23 17:05 <REP> d-------- D:\Program Files\iPod
2007-04-23 17:04 31,616 --a------ D:\WINDOWS\system32\drivers\usbccgp.sys
2007-04-23 17:04 15,104 --a------ D:\WINDOWS\system32\drivers\usbscan.sys
2007-04-23 16:56 <REP> d-------- D:\Program Files\iTunes
2007-04-23 16:56 <REP> d-------- D:\DOCUME~1\Zuzzu\APPLIC~1\Apple Computer
2007-04-23 16:55 <REP> d-------- D:\Program Files\QuickTime
2007-04-23 16:55 <REP> d-------- D:\Program Files\Apple Software Update
2007-04-23 16:55 <REP> d-------- D:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
2007-04-23 16:53 46,080 --a------ D:\WINDOWS\system32\escimgd.dll
2007-04-23 16:53 29,696 --a------ D:\WINDOWS\system32\escwiad.dll
2007-04-23 16:53 22,016 --a------ D:\WINDOWS\system32\esccmd.dll
2007-04-23 16:53 <REP> d-------- D:\Program Files\epson
2007-04-23 16:41 82,944 --a------ D:\WINDOWS\system32\drivers\wdmaud.sys
2007-04-23 16:41 6,400 --a------ D:\WINDOWS\system32\drivers\splitter.sys
2007-04-23 16:40 54,272 --a------ D:\WINDOWS\system32\drivers\swmidi.sys
2007-04-23 16:40 52,864 --a------ D:\WINDOWS\system32\drivers\DMusic.sys
2007-04-23 16:40 142,464 --a------ D:\WINDOWS\system32\drivers\aec.sys
2007-04-23 16:39 7,552 --a------ D:\WINDOWS\system32\drivers\MSKSSRV.sys
2007-04-23 16:39 60,800 --a------ D:\WINDOWS\system32\drivers\sysaudio.sys
2007-04-23 16:39 2,944 --a------ D:\WINDOWS\system32\drivers\drmkaud.sys
2007-04-23 16:39 172,416 --a------ D:\WINDOWS\system32\drivers\kmixer.sys
2007-04-23 16:38 5,376 --a------ D:\WINDOWS\system32\drivers\MSPCLOCK.sys
2007-04-23 16:38 4,992 --a------ D:\WINDOWS\system32\drivers\MSPQM.sys
2007-04-23 16:37 60,288 --a------ D:\WINDOWS\system32\drivers\drmk.sys
2007-04-23 16:37 4,096 --a------ D:\WINDOWS\system32\ksuser.dll
2007-04-23 16:37 204,160 -ra------ D:\WINDOWS\system32\drivers\vinyl97.sys
2007-04-23 16:37 145,792 --a------ D:\WINDOWS\system32\drivers\portcls.sys
2007-04-23 16:31 516,096 --------- D:\WINDOWS\system32\ati2sgag.exe
2007-04-23 16:31 294,912 -ra------ D:\WINDOWS\system32\atiiiexx.dll
2007-04-23 16:30 131,072 -ra------ D:\WINDOWS\system32\ATIDEMGR.dll
2007-04-23 16:30 <REP> d-------- D:\Program Files\ATI Technologies
2007-04-23 16:28 <REP> d-------- D:\Program Files\uTorrent
2007-04-23 16:28 <REP> d-------- D:\DOCUME~1\Zuzzu\APPLIC~1\uTorrent
2007-04-23 16:10 <REP> d-------- D:\Program Files\IncrediMail
2007-04-23 15:46 306,688 --a------ D:\WINDOWS\IsUninst.exe
2007-04-23 15:43 36,913 --a------ D:\WINDOWS\BricoPackUninst.cmd
2007-04-23 15:41 2,150 --a------ D:\WINDOWS\BricoPackFoldersDelete.cmd
2007-04-23 15:41 <REP> d-------- D:\WINDOWS\BricoPacks
2007-04-23 15:36 <REP> d--h----- D:\Program Files\InstallShield Installation Information
2007-04-23 15:32 331,184 --------- D:\WINDOWS\system32\difxapi.dll
2007-04-23 15:23 <REP> d-------- D:\Program Files\HardwareDetection
2007-04-23 15:20 <REP> d-------- D:\DOCUME~1\Zuzzu\APPLIC~1\AdobeUM
2007-04-23 15:17 3,413 --a------ D:\WINDOWS\mozver.dat
2007-04-23 15:14 870,784 --a------ D:\WINDOWS\system32\ati3d1ag.dll
2007-04-23 15:14 746,496 --a------ D:\WINDOWS\system32\drivers\ati2mtag.sys
2007-04-23 15:14 58,496 --a------ D:\WINDOWS\system32\drivers\redbook.sys
2007-04-23 15:14 518,240 --a------ D:\WINDOWS\system32\ativvaxx.dll
2007-04-23 15:14 3,072 --a------ D:\WINDOWS\system32\drivers\audstub.sys
2007-04-23 15:14 229,376 --a------ D:\WINDOWS\system32\ati2cqag.dll
2007-04-23 15:14 207,360 --a------ D:\WINDOWS\system32\ati2dvag.dll
2007-04-23 15:14 2,155,680 --a------ D:\WINDOWS\system32\ati3duag.dll
2007-04-23 15:13 77,312 --a------ D:\WINDOWS\system32\usbui.dll
2007-04-23 15:13 46,464 --a------ D:\WINDOWS\system32\drivers\GAGP30KX.SYS
2007-04-23 15:13 27,165 --a------ D:\WINDOWS\system32\drivers\fetnd5.sys
2007-04-23 15:12 9,936 --a------ D:\WINDOWS\system\LZEXPAND.DLL
2007-04-23 15:12 9,104 --a------ D:\WINDOWS\system\VER.DLL
2007-04-23 15:12 86,044 --a------ D:\WINDOWS\system32\dgsetup.dll
2007-04-23 15:12 83,456 --a------ D:\WINDOWS\system\OLECLI.DLL
2007-04-23 15:12 8,704 --a------ D:\WINDOWS\system32\batt.dll
2007-04-23 15:12 8,192 -ra------ D:\WINDOWS\system32\kbdhept.dll
2007-04-23 15:12 76,800 --a------ D:\WINDOWS\system32\storprop.dll
2007-04-23 15:12 70,688 --a------ D:\WINDOWS\system\MMSYSTEM.DLL
2007-04-23 15:12 70,352 --a------ D:\WINDOWS\system\AVICAP.DLL
2007-04-23 15:12 7,168 -ra------ D:\WINDOWS\system32\kbdcz.dll
2007-04-23 15:12 6,656 -ra------ D:\WINDOWS\system32\kbdycl.dll
2007-04-23 15:12 6,656 -ra------ D:\WINDOWS\system32\kbdsl1.dll
2007-04-23 15:12 6,656 -ra------ D:\WINDOWS\system32\kbdsl.dll
2007-04-23 15:12 6,656 -ra------ D:\WINDOWS\system32\kbdpl.dll
2007-04-23 15:12 6,656 -ra------ D:\WINDOWS\system32\kbdhu.dll
2007-04-23 15:12 6,656 -ra------ D:\WINDOWS\system32\kbdhela3.dll
2007-04-23 15:12 6,656 -ra------ D:\WINDOWS\system32\kbdcz2.dll
2007-04-23 15:12 6,656 -ra------ D:\WINDOWS\system32\kbdcz1.dll
2007-04-23 15:12 6,656 -ra------ D:\WINDOWS\system32\kbdcr.dll
2007-04-23 15:12 6,656 -ra------ D:\WINDOWS\system32\KBDAL.DLL
2007-04-23 15:12 6,144 -ra------ D:\WINDOWS\system32\kbdtuq.dll
2007-04-23 15:12 6,144 -ra------ D:\WINDOWS\system32\kbdtuf.dll
2007-04-23 15:12 6,144 -ra------ D:\WINDOWS\system32\kbdlv1.dll
2007-04-23 15:12 6,144 -ra------ D:\WINDOWS\system32\kbdlv.dll
2007-04-23 15:12 6,144 -ra------ D:\WINDOWS\system32\kbdhela2.dll
2007-04-23 15:12 6,144 -ra------ D:\WINDOWS\system32\kbdgkl.dll
2007-04-23 15:12 6,144 -ra------ D:\WINDOWS\system32\kbdest.dll
2007-04-23 15:12 5,632 -ra------ D:\WINDOWS\system32\kbdro.dll
2007-04-23 15:12 5,632 -ra------ D:\WINDOWS\system32\kbdpl1.dll
2007-04-23 15:12 5,632 -ra------ D:\WINDOWS\system32\kbdmon.dll
2007-04-23 15:12 5,632 -ra------ D:\WINDOWS\system32\kbdlt1.dll
2007-04-23 15:12 5,632 -ra------ D:\WINDOWS\system32\kbdlt.dll
2007-04-23 15:12 5,632 -ra------ D:\WINDOWS\system32\kbdkyr.dll
2007-04-23 15:12 5,632 -ra------ D:\WINDOWS\system32\kbdhu1.dll
2007-04-23 15:12 5,632 -ra------ D:\WINDOWS\system32\kbdhe319.dll
2007-04-23 15:12 5,632 -ra------ D:\WINDOWS\system32\kbdhe220.dll
2007-04-23 15:12 5,632 -ra------ D:\WINDOWS\system32\kbdhe.dll
2007-04-23 15:12 5,632 -ra------ D:\WINDOWS\system32\kbdazel.dll
2007-04-23 15:12 5,120 --a------ D:\WINDOWS\system\SHELL.DLL
2007-04-23 15:12 33,904 --a------ D:\WINDOWS\system\COMMDLG.DLL
2007-04-23 15:12 24,661 --a------ D:\WINDOWS\system32\spxcoins.dll
2007-04-23 15:12 24,064 --a------ D:\WINDOWS\system\OLESVR.DLL
2007-04-23 15:12 19,200 --a------ D:\WINDOWS\system\TAPI.DLL
2007-04-23 15:12 176,157 --a------ D:\WINDOWS\system32\dgrpsetu.dll
2007-04-23 15:12 15,872 --a------ D:\WINDOWS\TASKMAN.EXE
2007-04-23 15:12 13,312 --a------ D:\WINDOWS\system32\irclass.dll
2007-04-23 15:12 127,168 --a------ D:\WINDOWS\system\MSVIDEO.DLL
2007-04-23 15:12 11,264 --a------ D:\WINDOWS\system32\drivers\irenum.sys
2007-04-23 15:12 109,568 --a------ D:\WINDOWS\system\AVIFILE.DLL
2007-04-23 15:12 103,424 --a------ D:\WINDOWS\system32\EqnClass.Dll
2007-04-23 15:12 <REP> dr------- D:\Program Files
2007-04-23 15:12 <REP> d--hs---- D:\WINDOWS\Installer
2007-04-23 15:12 <REP> d-------- D:\Program Files\Fichiers communs\SpeechEngines
2007-04-23 15:12 <REP> d-------- D:\Program Files\Fichiers communs\ODBC
2007-04-23 15:11 <REP> dr------- D:\DOCUME~1\DEFAUL~1\Menu D‚marrer
2007-04-23 15:11 <REP> dr------- D:\DOCUME~1\ALLUSE~1\Menu D‚marrer
2007-04-23 15:11 <REP> dr------- D:\DOCUME~1\ALLUSE~1\Documents
2007-04-23 15:11 <REP> d--hs---- D:\System Volume Information
2007-04-23 15:11 <REP> d--h----- D:\DOCUME~1\DEFAUL~1\Voisinage r‚seau
2007-04-23 15:11 <REP> d--h----- D:\DOCUME~1\DEFAUL~1\Voisinage d'impression
2007-04-23 15:11 <REP> d--h----- D:\DOCUME~1\DEFAUL~1\ModŠles
2007-04-23 15:11 <REP> d--h----- D:\DOCUME~1\ALLUSE~1\ModŠles
2007-04-23 15:11 <REP> d-------- D:\WINDOWS\system32\CatRoot2
2007-04-23 15:11 <REP> d-------- D:\WINDOWS\system32\CatRoot
2007-04-23 15:11 <REP> d-------- D:\Documents and Settings
2007-04-23 15:11 <REP> d-------- D:\DOCUME~1\DEFAUL~1\Mes documents
2007-04-23 15:11 <REP> d-------- D:\DOCUME~1\DEFAUL~1\Favoris
2007-04-23 15:11 <REP> d-------- D:\DOCUME~1\DEFAUL~1\Bureau
2007-04-23 15:11 <REP> d-------- D:\DOCUME~1\ALLUSE~1\Favoris
2007-04-23 15:11 <REP> d-------- D:\DOCUME~1\ALLUSE~1\Bureau
2007-04-23 15:10 0 --a------ D:\WINDOWS\nsreg.dat
2007-04-23 15:09 <REP> d-------- D:\applications
2007-04-23 15:06 <REP> dr-hsc--- D:\WINDOWS\system32\dllcache
2007-04-23 15:06 <REP> dr--s---- D:\WINDOWS\Fonts
2007-04-23 15:06 <REP> dr------- D:\WINDOWS\Web
2007-04-23 15:06 <REP> d-a------ D:\WINDOWS\system32
2007-04-23 15:06 <REP> d--h----- D:\WINDOWS\inf
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\WinSxS
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\twain_32
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\wins
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\wbem
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\usmt
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\spool
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\ShellExt
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\Setup
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\ras
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\PreInstall
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\oobe
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\npp
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\mui
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\inetsrv
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\IME
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\icsxml
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\ias
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\export
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\en
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\drivers\etc
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\drivers\disdn
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\drivers
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\dhcp
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\config
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\3com_dmi
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\3076
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\2052
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\1054
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\1042
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\1041
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\1037
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\1036
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\1033
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\1031
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\1028
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system32\1025
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\system
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\security
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\Resources
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\repair
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\Provisioning
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\PeerNet
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\pchealth
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\mui
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\msapps
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\msagent
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\Media
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\ime
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\Help
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\ehome
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\Driver Cache
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\Debug
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\Cursors
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\Connection Wizard
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\Config
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\AppPatch
2007-04-23 15:06 <REP> d-------- D:\WINDOWS\addins
2007-04-23 15:06 <REP> d-------- D:\WINDOWS
2007-04-23 14:45 <REP> d-------- D:\Program Files\Yahoo!
2007-04-23 14:45 <REP> d-------- D:\Program Files\CCleaner
2007-04-23 14:45 <REP> d-------- D:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
2007-04-23 14:44 <REP> d-------- D:\Program Files\Webteh
2007-04-23 14:39 <REP> d-------- D:\DOCUME~1\Zuzzu\Contacts
2007-04-23 14:39 <REP> d-------- D:\DOCUME~1\Zuzzu\APPLIC~1\Screenshot Sender
2007-04-23 14:34 <REP> d----c--- D:\WINDOWS\system32\DRVSTORE
2007-04-23 14:20 75,512 --a------ D:\WINDOWS\zllsputility.exe
2007-04-23 14:20 54,936 --a------ D:\WINDOWS\system32\vsutil_loc040c.dll
2007-04-23 14:20 42,648 --a------ D:\WINDOWS\zllsputility_loc040c.dll
2007-04-23 14:20 4,212 ---h----- D:\WINDOWS\system32\zllictbl.dat
2007-04-23 14:20 22,168 --a------ D:\WINDOWS\system32\imsinstall_loc040c.dll
2007-04-23 14:20 18,072 --a------ D:\WINDOWS\system32\imslsp_install_loc040c.dll
2007-04-23 14:20 11,264 --a------ D:\WINDOWS\system32\SpOrder.dll
2007-04-23 14:19 1,087,216 --a------ D:\WINDOWS\system32\zpeng24.dll
2007-04-23 14:19 <REP> d-------- D:\WINDOWS\system32\ZoneLabs
2007-04-23 14:18 <REP> d-------- D:\WINDOWS\Internet Logs
2007-04-23 14:15 94,552 --a------ D:\WINDOWS\system32\drivers\aswmon2.sys
2007-04-23 14:15 90,112 --a------ D:\WINDOWS\system32\AvastSS.scr
2007-04-23 14:15 85,952 --a------ D:\WINDOWS\system32\drivers\aswmon.sys
2007-04-23 14:15 733,824 --a------ D:\WINDOWS\system32\aswBoot.exe
2007-04-23 14:15 43,176 --a------ D:\WINDOWS\system32\drivers\aswTdi.sys
2007-04-23 14:15 26,888 --a------ D:\WINDOWS\system32\drivers\aavmker4.sys
2007-04-23 14:15 23,416 --a------ D:\WINDOWS\system32\drivers\aswRdr.sys
2007-04-23 14:15 1,060,864 --a------ D:\WINDOWS\system32\MFC71.dll
2007-04-23 14:15 <REP> d-------- D:\Program Files\Alwil Software
2007-04-23 14:09 <REP> d--hs---- D:\RECYCLER
2007-04-23 14:05 60,672 --a------ D:\WINDOWS\system32\drivers\viamraid.sys
2007-04-23 14:05 42,496 --a------ D:\WINDOWS\system32\drivers\fetnd5b.sys
2007-04-23 14:04 9,728 -ra------ D:\WINDOWS\system32\drivers\videX32.sys
2007-04-23 14:04 36,352 -ra------ D:\WINDOWS\system32\drivers\AmdK8.sys
2007-04-23 14:04 <REP> d-------- D:\WINDOWS\system32\ReinstallBackups
2007-04-23 14:04 <REP> d-------- D:\Program Files\VIA
2007-04-23 13:56 <REP> d-------- D:\WINDOWS\system32\SoftwareDistribution
2007-04-23 13:37 <REP> d-------- D:\Program Files\Fichiers communs\InstallShield
2007-04-23 13:35 <REP> d-------- D:\Program Files\Photo Story 3 for Windows
2007-04-23 13:34 <REP> d-------- D:\WINDOWS\system32\windows media
2007-04-23 13:34 <REP> d-------- D:\Program Files\WMV9_VCM
2007-04-23 13:34 <REP> d-------- D:\Program Files\Windows Media Components
2007-04-23 13:33 <REP> d-------- D:\Program Files\Windows Journal Viewer
2007-04-23 13:32 <REP> d-------- D:\WINDOWS\system32\URTTEMP
2007-04-23 13:29 262,144 --a------ D:\DOCUME~1\ALLUSE~1\ntuser.dat
2007-04-23 13:28 890,987 --a------ D:\WINDOWS\system32\Axialis Aurora.scr
2007-04-23 13:28 86,016 --a------ D:\WINDOWS\system32\Sherlock.exe
2007-04-23 13:28 851,959 --a------ D:\WINDOWS\system32\X64.scr
2007-04-23 13:28 773,120 --a------ D:\WINDOWS\system32\Vista Bubbles.scr
2007-04-23 13:28 749,568 --a------ D:\WINDOWS\system32\Extinction.exe
2007-04-23 13:28 692,224 --a------ D:\WINDOWS\system32\ReallySlick_Skyrocket_v1.scr
2007-04-23 13:28 596,450 --a------ D:\WINDOWS\system32\The Summoning.scr
2007-04-23 13:28 532,480 --a------ D:\WINDOWS\system32\ReallySlick Hyperspace.scr
2007-04-23 13:28 53,248 --a------ D:\WINDOWS\system32\SMPSeesaw.exe
2007-04-23 13:28 507,904 --a------ D:\WINDOWS\system32\Nostalgic.scr
2007-04-23 13:28 483,328 --a------ D:\WINDOWS\system32\ReallySlick Helios.scr
2007-04-23 13:28 450,560 --a------ D:\WINDOWS\system32\ReallySlick Euphoria.scr
2007-04-23 13:28 439,149 --a------ D:\WINDOWS\system32\Tunnel-B12.scr
2007-04-23 13:28 433,152 --a------ D:\WINDOWS\system32\ParticleFountain.scr
2007-04-23 13:28 37,376 --a------ D:\WINDOWS\system32\faview.exe
2007-04-23 13:28 352,256 --a------ D:\WINDOWS\system32\autoruns.exe
2007-04-23 13:28 35,840 --a------ D:\WINDOWS\system32\wul.exe
2007-04-23 13:28 33,280 --a------ D:\WINDOWS\system32\shman.exe
2007-04-23 13:28 3,271,168 --a------ D:\WINDOWS\system32\Pernille.scr
2007-04-23 13:28 28,672 --a------ D:\WINDOWS\system32\jrview.exe
2007-04-23 13:28 274,432 --a------ D:\WINDOWS\system32\ReallySlick Cyclone.scr
2007-04-23 13:28 249,856 --a------ D:\WINDOWS\system32\ReallySlick Flocks.scr
2007-04-23 13:28 245,760 --a------ D:\WINDOWS\system32\ReallySlick Flux.scr
2007-04-23 13:28 237,568 --a------ D:\WINDOWS\system32\ReallySlick Solar Winds.scr
2007-04-23 13:28 237,568 --a------ D:\WINDOWS\system32\ReallySlick Field Lines.scr
2007-04-23 13:28 229,376 --a------ D:\WINDOWS\system32\ReallySlick Plasma.scr
2007-04-23 13:28 155,648 --a------ D:\WINDOWS\system32\Tunnel.scr
2007-04-23 13:28 120,947 --a------ D:\WINDOWS\system32\FlushCode.exe
2007-04-23 13:28 120,832 --a------ D:\WINDOWS\system32\TweakUi.exe
2007-04-23 13:28 119,568 --a------ D:\WINDOWS\system32\VB6FR.DLL
2007-04-23 13:28 118,845 --a------ D:\WINDOWS\system32\Flurry.scr
2007-04-23 13:28 101,888 --a------ D:\WINDOWS\system32\VB6STKIT.DLL
2007-04-23 13:28 1,626,112 --a------ D:\WINDOWS\system32\3D Windows XP.scr
2007-04-23 13:28 1,263,616 --a------ D:\WINDOWS\system32\Vista Aurora.scr
2007-04-23 13:28 <REP> d-------- D:\Program Files\UTILS
2007-04-23 13:28 <REP> d-------- D:\Program Files\JEUX
2007-04-23 13:27 3,670,016 --ah----- D:\DOCUME~1\Zuzzu\NTUSER.DAT
2007-04-23 13:27 <REP> dr------- D:\DOCUME~1\Zuzzu\Menu D‚marrer
2007-04-23 13:27 <REP> d-a------ D:\DOCUME~1\Zuzzu\Mes documents
2007-04-23 13:27 <REP> d-a------ D:\DOCUME~1\Zuzzu\Favoris
2007-04-23 13:27 <REP> d--h----- D:\DOCUME~1\Zuzzu\Voisinage r‚seau
2007-04-23 13:27 <REP> d--h----- D:\DOCUME~1\Zuzzu\Voisinage d'impression
2007-04-23 13:27 <REP> d--h----- D:\DOCUME~1\Zuzzu\ModŠles
2007-04-23 13:27 <REP> d-------- D:\DOCUME~1\Zuzzu\Bureau
2007-04-23 13:26 786,432 --ah----- D:\DOCUME~1\LOCALS~1\NTUSER.DAT
2007-04-23 13:26 <REP> d-------- D:\WINDOWS\SoftwareDistribution
2007-04-23 13:26 <REP> d-------- D:\WINDOWS\Prefetch
2007-04-23 13:25 786,432 --ah----- D:\DOCUME~1\NETWOR~1\NTUSER.DAT
2007-04-23 13:21 229,376 ---h----- D:\DOCUME~1\DEFAUL~1\NTUSER.DAT
2007-04-23 13:21 22,752 --a------ D:\WINDOWS\system32\spupdsvc.exe
2007-04-23 13:21 <REP> d-------- D:\WINDOWS\system32\xircom
2007-04-23 13:21 <REP> d-------- D:\WINDOWS\srchasst
2007-04-23 13:21 <REP> d-------- D:\WINDOWS\RegisteredPackages
2007-04-23 13:21 <REP> d-------- D:\Program Files\Windows Media Connect 2
2007-04-23 13:21 <REP> d-------- D:\Program Files\microsoft frontpage
2007-04-23 13:20 112,128 --a------ D:\WINDOWS\system32\mapi32.dll
2007-04-23 13:20 <REP> d--h----- D:\WINDOWS\$hf_mig$
2007-04-23 13:19 <REP> dr------- D:\WINDOWS\Offline Web Pages
2007-04-23 13:19 <REP> d--hs---- D:\DOCUME~1\ALLUSE~1\DRM
2007-04-23 13:19 <REP> d--h----- D:\Program Files\WindowsUpdate
2007-04-23 13:19 <REP> d---s---- D:\WINDOWS\Downloaded Program Files
2007-04-23 13:18 86,016 --a------ D:\WINDOWS\system32\isign32.dll
2007-04-23 13:18 81,920 --a------ D:\WINDOWS\system32\ils.dll
2007-04-23 13:18 8,192 --a------ D:\WINDOWS\system32\bitsprx2.dll
2007-04-23 13:18 73,728 --a------ D:\WINDOWS\system32\icwdial.dll
2007-04-23 13:18 73,600 --a------ D:\WINDOWS\system32\drivers\sr.sys
2007-04-23 13:18 72,192 --a------ D:\WINDOWS\system32\acctres.dll
2007-04-23 13:18 7,168 --a------ D:\WINDOWS\system32\bitsprx3.dll
2007-04-23 13:18 69,632 --a------ D:\WINDOWS\system32\msconf.dll
2007-04-23 13:18 679,424 --a------ D:\WINDOWS\system32\inetcomm.dll
2007-04-23 13:18 67,584 --a------ D:\WINDOWS\system32\srclient.dll
2007-04-23 13:18 65,536 --a------ D:\WINDOWS\system32\icwphbk.dll
2007-04-23 13:18 6,656 --a------ D:\WINDOWS\system32\wuauserv.dll
2007-04-23 13:18 50,688 --a------ D:\WINDOWS\system32\inetres.dll
2007-04-23 13:18 467,224 --a------ D:\WINDOWS\system32\wuapi.dll
2007-04-23 13:18 45,568 --a------ D:\WINDOWS\system32\safrslv.dll
2007-04-23 13:18 43,520 --a------ D:\WINDOWS\system32\safrcdlg.dll
2007-04-23 13:18 43,520 --a------ D:\WINDOWS\system32\racpldlg.dll
2007-04-23 13:18 41,240 --a------ D:\WINDOWS\system32\wups.dll
2007-04-23 13:18 382,464 --a------ D:\WINDOWS\system32\qmgr.dll
2007-04-23 13:18 34,560 --a------ D:\WINDOWS\system32\mnmdd.dll
2007-04-23 13:18 32,768 --a------ D:\WINDOWS\system32\mnmsrvc.exe
2007-04-23 13:18 32,768 --a------ D:\WINDOWS\system32\isrdbg32.dll
2007-04-23 13:18 29,696 --a------ D:\WINDOWS\system32\safrdm.dll
2007-04-23 13:18 286,208 --a------ D:\WINDOWS\system32\mstask.dll
2007-04-23 13:18 282,624 --a------ D:\WINDOWS\system32\inetcfg.dll
2007-04-23 13:18 28,672 --a------ D:\WINDOWS\system32\nmmkcert.dll
2007-04-23 13:18 252,928 --a------ D:\WINDOWS\system32\msoeacct.dll
2007-04-23 13:18 241,664 --a------ D:\WINDOWS\system32\srrstr.dll
2007-04-23 13:18 23,040 --a------ D:\WINDOWS\system32\fltmc.exe
2007-04-23 13:18 195,352 --a------ D:\WINDOWS\system32\wuaueng1.dll
2007-04-23 13:18 193,024 --a------ D:\WINDOWS\system32\schedsvc.dll
2007-04-23 13:18 18,944 --a------ D:\WINDOWS\system32\qmgrprxy.dll
2007-04-23 13:18 175,896 --a------ D:\WINDOWS\system32\wuauclt1.exe
2007-04-23 13:18 173,536 --a------ D:\WINDOWS\system32\wuweb.dll
2007-04-23 13:18 171,008 --a------ D:\WINDOWS\system32\srsvc.dll
2007-04-23 13:18 16,896 --a------ D:\WINDOWS\system32\fltlib.dll
2007-04-23 13:18 16,384 --a------ D:\WINDOWS\system32\icfgnt5.dll
2007-04-23 13:18 128,896 --a------ D:\WINDOWS\system32\drivers\fltmgr.sys
2007-04-23 13:18 128,792 --a------ D:\WINDOWS\system32\wucltui.dll
2007-04-23 13:18 125,720 --a------ D:\WINDOWS\system32\wuauclt.exe
2007-04-23 13:18 12,288 --a------ D:\WINDOWS\system32\nmevtmsg.dll
2007-04-23 13:18 12,288 --a------ D:\WINDOWS\system32\mstinit.exe
2007-04-23 13:18 11,264 --a------ D:\WINDOWS\system32\atrace.dll
2007-04-23 13:18 105,984 --a------ D:\WINDOWS\system32\msoert2.dll
2007-04-23 13:18 1,343,768 --a------ D:\WINDOWS\system32\wuaueng.dll
2007-04-23 13:18 <REP> d---s---- D:\WINDOWS\Tasks
2007-04-23 13:18 <REP> d-------- D:\WINDOWS\system32\Restore
2007-04-23 13:18 <REP> d-------- D:\WINDOWS\system32\Macromed
2007-04-23 13:18 <REP> d-------- D:\Program Files\Movie Maker
2007-04-23 13:18 <REP> d-------- D:\Program Files\Fichiers communs\MSSoap
2007-04-23 13:17 97,792 --a------ D:\WINDOWS\system32\comrepl.dll
2007-04-23 13:17 963,344 --a------ D:\WINDOWS\system32\calc.exe
2007-04-23 13:17 956,416 --a------ D:\WINDOWS\system32\msdtctm.dll
2007-04-23 13:17 94,208 --a------ D:\WINDOWS\system32\tscfgwmi.dll
2007-04-23 13:17 91,136 --a------ D:\WINDOWS\system32\mtxoci.dll
2007-04-23 13:17 87,176 --a------ D:\WINDOWS\system32\rdpwsx.dll
2007-04-23 13:17 85,504 --a------ D:\WINDOWS\system32\catsrvps.dll
2007-04-23 13:17 80,896 --a------ D:\WINDOWS\system32\charmap.exe
2007-04-23 13:17 73,216 --a------ D:\WINDOWS\system32\avwav.dll
2007-04-23 13:17 67,072 --a------ D:\WINDOWS\system32\rdshost.exe
2007-04-23 13:17 657,408 --a------ D:\WINDOWS\system32\mstscax.dll
2007-04-23 13:17 634,880 --a------ D:\WINDOWS\system32\getuname.dll
2007-04-23 13:17 625,152 --a------ D:\WINDOWS\system32\catsrvut.dll
2007-04-23 13:17 62,464 --a------ D:\WINDOWS\system32\rdpclip.exe
2007-04-23 13:17 61,952 --a------ D:\WINDOWS\system32\remotepg.dll
2007-04-23 13:17 60,416 --a------ D:\WINDOWS\system32\colbact.dll
2007-04-23 13:17 6,144 --a------ D:\WINDOWS\system32\msdtc.exe
2007-04-23 13:17 58,880 --a------ D:\WINDOWS\system32\msdtclog.dll
2007-04-23 13:17 58,880 --a------ D:\WINDOWS\system32\licwmi.dll
2007-04-23 13:17 57,344 --a------ D:\WINDOWS\system32\sol.exe
2007-04-23 13:17 56,320 --a------ D:\WINDOWS\system32\servdeps.dll
2007-04-23 13:17 55,808 --a------ D:\WINDOWS\system32\freecell.exe
2007-04-23 13:17 540,160 --a------ D:\WINDOWS\system32\comuid.dll
2007-04-23 13:17 54,272 --a------ D:\WINDOWS\system32\stclient.dll
2007-04-23 13:17 539,136 --a------ D:\WINDOWS\system32\spider.exe
2007-04-23 13:17 5,632 --a------ D:\WINDOWS\system32\write.exe
2007-04-23 13:17 5,120 --a------ D:\WINDOWS\system32\dcomcnfg.exe
2007-04-23 13:17 498,688 --a------ D:\WINDOWS\system32\clbcatq.dll
2007-04-23 13:17 479,744 --a------ D:\WINDOWS\system32\mspaint.exe
2007-04-23 13:17 468,480 --a------ D:\WINDOWS\system32\sndvol32.exe
2007-04-23 13:17 44,544 --a------ D:\WINDOWS\system32\tscupgrd.exe
2007-04-23 13:17 44,544 --a------ D:\WINDOWS\system32\hticons.dll
2007-04-23 13:17 426,496 --a------ D:\WINDOWS\system32\msdtcprx.dll
2007-04-23 13:17 411,648 --a------ D:\WINDOWS\system32\mstsc.exe
2007-04-23 13:17 4,608 --a------ D:\WINDOWS\system32\rdpcfgex.dll
2007-04-23 13:17 4,096 --a------ D:\WINDOWS\system32\mtxex.dll
2007-04-23 13:17 391,680 --a------ D:\WINDOWS\system32\sndrec32.exe
2007-04-23 13:17 39,424 --a------ D:\WINDOWS\system32\cfgbkend.dll
2007-04-23 13:17 354,304 --a------ D:\WINDOWS\system32\hypertrm.dll
2007-04-23 13:17 35,840 --a------ D:\WINDOWS\system32\winchat.exe
2007-04-23 13:17 33,792 --a------ D:\WINDOWS\system32\regini.exe
2007-04-23 13:17 297,984 --a------ D:\WINDOWS\system32\termsrv.dll
2007-04-23 13:17 25,600 --a------ D:\WINDOWS\system32\comaddin.dll
2007-04-23 13:17 25,088 --a------ D:\WINDOWS\system32\mtxlegih.dll
2007-04-23 13:17 232,960 --a------ D:\WINDOWS\system32\avtapi.dll
2007-04-23 13:17 225,792 --a------ D:\WINDOWS\system32\catsrv.dll
2007-04-23 13:17 22,528 --a------ D:\WINDOWS\system32\qwinsta.exe
2007-04-23 13:17 22,528 --a------ D:\WINDOWS\system32\msg.exe
2007-04-23 13:17 21,896 --a------ D:\WINDOWS\system32\drivers\tdtcp.sys
2007-04-23 13:17 21,892 --a------ D:\WINDOWS\system32\emptyregdb.dat
2007-04-23 13:17 20,992 --a------ D:\WINDOWS\system32\qprocess.exe
2007-04-23 13:17 20,480 --a------ D:\WINDOWS\system32\mtxdm.dll
2007-04-23 13:17 191,488 --a------ D:\WINDOWS\system32\cmprops.dll
2007-04-23 13:17 19,968 --a------ D:\WINDOWS\system32\rdpsnd.dll
2007-04-23 13:17 189,952 --a------ D:\WINDOWS\system32\accwiz.exe
2007-04-23 13:17 17,920 --a------ D:\WINDOWS\system32\mmfutil.dll
2007-04-23 13:17 17,408 --a------ D:\WINDOWS\system32\tsshutdn.exe
2007-04-23 13:17 17,408 --a------ D:\WINDOWS\system32\qappsrv.exe
2007-04-23 13:17 161,280 --a------ D:\WINDOWS\system32\msdtcuiu.dll
2007-04-23 13:17 16,896 --a------ D:\WINDOWS\system32\tskill.exe
2007-04-23 13:17 16,384 --a------ D:\WINDOWS\system32\rwinsta.exe
2007-04-23 13:17 16,384 --a------ D:\WINDOWS\system32\avmeter.dll
2007-04-23 13:17 15,872 --a------ D:\WINDOWS\system32\logoff.exe
2007-04-23 13:17 15,872 --a------ D:\WINDOWS\system32\cdmodem.dll
2007-04-23 13:17 15,360 --a------ D:\WINDOWS\system32\tscon.exe
2007-04-23 13:17 15,360 --a------ D:\WINDOWS\system32\shadow.exe
2007-04-23 13:17 147,968 --a------ D:\WINDOWS\system32\rdchost.dll
2007-04-23 13:17 147,456 --a------ D:\WINDOWS\system32\comsnap.dll
2007-04-23 13:17 142,336 --a------ D:\WINDOWS\system32\sessmgr.exe
2007-04-23 13:17 14,848 --a------ D:\WINDOWS\system32\tsdiscon.exe
2007-04-23 13:17 139,528 --a------ D:\WINDOWS\system32\drivers\rdpwd.sys
2007-04-23 13:17 13,824 --a------ D:\WINDOWS\system32\rdsaddin.exe
2007-04-23 13:17 128,000 --a------ D:\WINDOWS\system32\mshearts.exe
2007-04-23 13:17 124,928 --a------ D:\WINDOWS\system32\mplay32.exe
2007-04-23 13:17 12,040 --a------ D:\WINDOWS\system32\drivers\tdpipe.sys
2007-04-23 13:17 119,808 --a------ D:\WINDOWS\system32\winmine.exe
2007-04-23 13:17 110,080 --a------ D:\WINDOWS\system32\clbcatex.dll
2007-04-23 13:17 11,776 --a------ D:\WINDOWS\system32\xolehlp.dll
2007-04-23 13:17 11,264 --a------ D:\WINDOWS\system32\icaapi.dll
2007-04-23 13:17 104,448 --a------ D:\WINDOWS\system32\clipbrd.exe
2007-04-23 13:17 10,240 --a------ D:\WINDOWS\system32\reset.exe
2007-04-23 13:17 1,267,200 --a------ D:\WINDOWS\system32\comsvcs.dll
2007-04-23 13:17 1,263 --a------ D:\WINDOWS\system32\usrlogon.cmd
2007-04-23 13:17 <REP> d-------- D:\WINDOWS\system32\MsDtc
2007-04-23 13:17 <REP> d-------- D:\WINDOWS\system32\Com
2007-04-23 13:17 <REP> d-------- D:\WINDOWS\Registration
2007-04-23 13:17 <REP> d-------- D:\Program Files\Windows NT
2007-04-23 13:17 <REP> d-------- D:\Program Files\MSN Gaming Zone
2007-04-23 13:16 40,840 --a------ D:\WINDOWS\system32\drivers\termdd.sys
2007-04-23 13:16 196,864 --a------ D:\WINDOWS\system32\drivers\rdpdr.sys


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2007-04-23 14:06:55 75,696 ----a-w D:\WINDOWS\system32\perfc00C.dat
2007-04-23 14:06:55 467,620 ----a-w D:\WINDOWS\system32\perfh00C.dat
2007-03-27 07:55:57 524,288 ----a-w D:\WINDOWS\system32\DivXsm.exe
2007-03-27 07:55:48 3,596,288 ----a-w D:\WINDOWS\system32\qt-dx331.dll
2007-03-27 07:55:23 200,704 ----a-w D:\WINDOWS\system32\ssldivx.dll
2007-03-27 07:55:23 1,044,480 ----a-w D:\WINDOWS\system32\libdivx.dll
2007-03-27 07:49:07 73,728 ----a-w D:\WINDOWS\system32\dpl100.dll
2007-03-27 07:49:07 196,608 ----a-w D:\WINDOWS\system32\dtu100.dll
2007-03-27 07:49:05 53,248 ----a-w D:\WINDOWS\system32\dpuGUI10.dll
2007-03-27 07:49:03 593,920 ----a-w D:\WINDOWS\system32\dpuGUI11.dll
2007-03-27 07:49:02 57,344 ----a-w D:\WINDOWS\system32\dpv11.dll
2007-03-27 07:49:02 344,064 ----a-w D:\WINDOWS\system32\dpus11.dll
2007-03-27 07:49:02 294,912 ----a-w D:\WINDOWS\system32\dpu11.dll
2007-03-27 07:49:02 294,912 ----a-w D:\WINDOWS\system32\dpu10.dll
2007-03-27 07:48:59 823,296 ----a-w D:\WINDOWS\system32\divx_xx07.dll
2007-03-27 07:48:58 823,296 ----a-w D:\WINDOWS\system32\divx_xx0c.dll
2007-03-27 07:48:58 802,816 ----a-w D:\WINDOWS\system32\divx_xx11.dll
2007-03-27 07:48:58 639,066 ----a-w D:\WINDOWS\system32\DivX.dll
2007-03-17 13:44:47 431,616 ----a-w D:\WINDOWS\system32\winsrv.dll
2007-03-12 11:51:08 972,336 ----a-w D:\WINDOWS\UNNeroMediaHome.exe
2007-03-08 15:50:30 579,072 ----a-w D:\WINDOWS\system32\user32.dll
2007-03-08 15:50:30 40,960 ----a-w D:\WINDOWS\system32\mf3216.dll
2007-03-08 15:50:30 282,112 ----a-w D:\WINDOWS\system32\gdi32.dll
2007-03-08 15:45:59 1,844,096 ----a-w D:\WINDOWS\system32\win32k.sys
2007-02-28 18:53:50 972,336 ----a-w D:\WINDOWS\UNNeroVision.exe
2007-02-28 13:41:02 972,336 ----a-w D:\WINDOWS\UNNeroShowTime.exe
2007-02-16 01:40:35 124,472 ----a-w D:\WINDOWS\system32\DivXCodecUpdateChecker.exe
2007-02-05 20:19:06 185,344 ----a-w D:\WINDOWS\system32\upnphost.dll


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{53707962-6F74-2D53-2644-206D7942484F}=D:\PROGRA~1\SPYBOT~1\SDHelper.dll [2005-05-31 01:04]
{6211D16B-3CFE-4C44-BBDC-34B298AF5CCA}=D:\WINDOWS\system32\ddcya.dll []
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=D:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [2007-03-14 03:43]
{9030D464-4C02-4ABF-8ECC-5164760863C6}=D:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-08-31 20:33]
{A05DA7E0-383C-4E99-A72A-742050A152A2}=D:\WINDOWS\system32\fccawww.dll []
{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}=D:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 21:50]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"avast!"="D:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"ZoneAlarm Client"="\"D:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe\""
"EPSON Stylus DX4200 Series"="D:\\WINDOWS\\System32\\spool\\DRIVERS\\W32X86\\3\\E_FATIAEE.EXE /P26 \"EPSON Stylus DX4200 Series\" /O6 \"USB001\" /M \"Stylus DX4200\""
"C-Media Mixer"="Mixer.exe /startup"
"NeroFilterCheck"="D:\\Program Files\\Fichiers communs\\Ahead\\Lib\\NeroCheck.exe"
"WorksFUD"="D:\\Program Files\\Microsoft Works\\wkfud.exe"
"Microsoft Works Portfolio"="D:\\Program Files\\Microsoft Works\\WksSb.exe /AllUsers"
"Microsoft Works Update Detection"="D:\\Program Files\\Fichiers communs\\Microsoft Shared\\Works Shared\\WkUFind.exe"
"SManager"="smanager.7.exe"
"QuickTime Task"="\"D:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"TrojanScanner"="D:\\Program Files\\Trojan Remover\\Trjscan.exe"
"avp"="D:\\WINDOWS\\system32\\avp.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-04-18 18:13]
"ZoneAlarm Client"="D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-03-09 00:02]
"EPSON Stylus DX4200 Series"="D:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE" [2005-03-07 21:00]
"C-Media Mixer"="Mixer.exe" [])
"NeroFilterCheck"="D:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2007-03-09 18:53]
"WorksFUD"="D:\Program Files\Microsoft Works\wkfud.exe" [2001-10-09 13:28]
"Microsoft Works Portfolio"="D:\Program Files\Microsoft Works\WksSb.exe" [2001-10-05 16:53]
"Microsoft Works Update Detection"="D:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe" [2001-10-05 16:51]
"SManager"="smanager.7.exe" [])
"QuickTime Task"="D:\Program Files\QuickTime\qttask.exe" [2007-02-16 10:54]
"TrojanScanner"="D:\Program Files\Trojan Remover\Trjscan.exe" [2007-05-12 14:21]
"avp"="D:\WINDOWS\system32\avp.exe" [2007-05-15 14:19]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="D:\Program Files\MSN Messenger\MsnMsgr.Exe" [2007-04-24 21:41]
"IncrediMail"="D:\Program Files\IncrediMail\bin\IncMail.exe" [2007-04-15 17:14]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="D:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2007-03-12 13:49]
"eMuleAutoStart"="E:\eMule\emule.exe" [2007-02-07 19:39]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"MsnMsgr"="\"D:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background"
"IncrediMail"="D:\\Program Files\\IncrediMail\\bin\\IncMail.exe /c"
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="\"D:\\Program Files\\Fichiers communs\\Ahead\\Lib\\NMBgMonitor.exe\""
"eMuleAutoStart"="E:\\eMule\\emule.exe -AutoStart"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"SynchronousMachineGroupPolicy"=dword:00000000
"SynchronousUserGroupPolicy"=dword:00000000

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"CDRAutoRun"=dword:00000001
"NoRemoteRecursiveEvents"=dword:00000001
"ForceClassicControlPanel"=dword:00000001
"NoSimpleStartMenu"=dword:00000000

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\NoDriveTypeAutoRun]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"CDRAutoRun"=dword:00000001
"NoStrCmpLogical"=dword:00000001
"NoSaveSettings"=dword:00000000
"NoTrayItemsDisplay"=dword:00000000
"NoToolbarsOnTaskbar"=dword:00000000
"NoResolveTrack"=dword:00000000
"NoResolveSearch"=dword:00000000
"NoNetworkConnections"=dword:00000000
"NoSMHelp"=dword:00000000
"NoRecentDocsMenu"=dword:00000000
"NoSMMyPictures"=dword:00000000
"NoRecentDocsHistory"=dword:00000000
"NoStartMenuMFUprogramsList"=dword:00000000
"NoUserNameInStartMenu"=dword:00000000
"NoStartMenuMorePrograms"=dword:00000000
"ClearRecentDocsOnExit"=dword:00000000
"MaxRecentDocs"=dword:0000000f
"NoInstrumentation"=dword:00000000
"NoCDBurning"=dword:00000001
"MemCheckBoxInRunDlg"=dword:00000001
"NoSMBalloonTip"=dword:00000000
"DisallowCpl"=dword:00000001
"NoLowDiskSpaceChecks"=dword:00000001

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\DisallowCpl]
"1"="Polices"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{A05DA7E0-383C-4E99-A72A-742050A152A2}"="D:\WINDOWS\system32\fccawww.dll" []


HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa
Authentication Packages msv1_0\0\0
Security Packages kerberos\0msv1_0\0schannel\0wdigest\0\0
Notification Packages scecli\0\0




[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter HTTPFilter\0\0
LocalService Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService DnsCache\0\0
DcomLaunch DcomLaunch\0TermService\0\0
rpcss RpcSs\0\0
imgsvc StiSvc\0\0
termsvcs TermService\0\0

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost


Contents of the 'Scheduled Tasks' folder
D:\WINDOWS\tasks\AppleSoftwareUpdate.job

********************************************************************

catchme 0.3.660 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-05-16 11:41:34
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


********************************************************************

Completion time: 2007-05-16 11:42:05 - machine was rebooted
D:\ComboFix-quarantined-files.txt ... 2007-05-16 11:42

alor voici le rapport AVG :
le rapport avg je ne sais pas pourquoi est en carré ! je le mets quand mais je suis désolé : - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

A V G A n t i - S p y w a r e - R a p p o r t d ' a n a l y s e

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



+ C r é é à : 1 5 : 1 8 : 0 1 1 7 / 0 5 / 2 0 0 7



+ R é s u l t a t d e l ' a n a l y s e :







D : \ W I N D O W S \ s y s t e m 3 2 \ f c c a w w w . d l l . r e n - > A d w a r e . V i r t u m o n d e : N e t t o y é e t s a u v e g a r d é ( m i s e e n q u a r a n t a i n e ) .

D : \ W I N D O W S \ s y s t e m 3 2 \ c o n f i g \ s y s t e m p r o f i l e \ L o c a l S e t t i n g s \ T e m p \ _ a v a s t 4 _ \ u n p 1 3 2 2 6 2 8 1 1 . t m p - > D o w n l o a d e r . A l p h a b e t : N e t t o y é e t s a u v e g a r d é ( m i s e e n q u a r a n t a i n e ) .

C : \ p v d s j f p . e x e - > H i j a c k e r . C o s t r a t . a k : N e t t o y é e t s a u v e g a r d é ( m i s e e n q u a r a n t a i n e ) .

D : \ Q o o B o x \ Q u a r a n t i n e \ D \ W I N D O W S \ s y s t e m 3 2 \ w i n m y y 3 2 . d l l . v i r - > T r o j a n . A g e n t . q t : N e t t o y é e t s a u v e g a r d é ( m i s e e n q u a r a n t a i n e ) .





F i n d u r a p p o r t




rapport HijackThis :
Logfile of HijackThis v1.99.1
Scan saved at 15:21:49, on 17/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\ZoneLabs\vsmon.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
D:\Program Files\Alwil Software\Avast4\ashServ.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
D:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE
D:\WINDOWS\Mixer.exe
D:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
D:\Program Files\QuickTime\qttask.exe
D:\WINDOWS\system32\avp.exe
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
D:\Program Files\MSN Messenger\MsnMsgr.Exe
D:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
D:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
D:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
D:\WINDOWS\system32\wuauclt.exe
E:\eMule\emule.exe
D:\Documents and Settings\Zuzzu\Bureau\HijackThis.exe
D:\PROGRA~1\INCRED~1\bin\IMApp.exe
D:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe
D:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
D:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
D:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
D:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
D:\Program Files\Alwil Software\Avast4\setup\avast.setup
D:\WINDOWS\system32\wuauclt.exe
D:\Program Files\Messenger\msmsgs.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com/french
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/search?q=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {6211D16B-3CFE-4C44-BBDC-34B298AF5CCA} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A05DA7E0-383C-4E99-A72A-742050A152A2} - (no file)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - D:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - D:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [EPSON Stylus DX4200 Series] D:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P26 "EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [NeroFilterCheck] D:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [WorksFUD] D:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] D:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] D:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TrojanScanner] D:\Program Files\Trojan Remover\Trjscan.exe
O4 - HKLM\..\Run: [avp] D:\WINDOWS\system32\avp.exe
O4 - HKLM\..\Run: [SManager] smanager.7.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MsnMsgr] "D:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [IncrediMail] D:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "D:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [eMuleAutoStart] E:\eMule\emule.exe -AutoStart
O4 - Startup: MSN Pictures Displayer.lnk = D:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
O4 - Startup: Outil de détection de support de Cyber-shot Viewer.lnk = D:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Startup: Stardock ObjectDock.lnk = D:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O4 - Startup: Y'z ToolBar.lnk = D:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
O4 - Global Startup: Microsoft Office.lnk = D:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\MSMSGS.EXE
O15 - Trusted Zone: http://www.msi.com.tw
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - D:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - D:\WINDOWS\system32\Ati2evxx.exe (file missing)
O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\system32\ati2sgag.exe (file missing)
O23 - Service: avast! Antivirus - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - D:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - D:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - D:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - D:\WINDOWS\system32\ZoneLabs\vsmon.exe


J'ai le virus trojan détecté par Avast toutes les 2 minutes, c'est vraiment chié je le supprime ou mets en quarantaine il revient tt le temps!

Voila le rapport:

[05/18/2007, 1:14:17] - VirtumundoBeGone v1.5 ( "D:\Documents and Settings\Zuzzu\Bureau\VirtumundoBeGone.exe" )
[05/18/2007, 1:14:18] - Detected System Information:
[05/18/2007, 1:14:18] - Windows Version: 5.1.2600, Service Pack 2
[05/18/2007, 1:14:18] - Current Username: Zuzzu (Admin)
[05/18/2007, 1:14:18] - Windows is in NORMAL mode.
[05/18/2007, 1:14:18] - Searching for Browser Helper Objects:
[05/18/2007, 1:14:18] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Adobe PDF Reader Link Helper)
[05/18/2007, 1:14:18] - BHO 2: {53707962-6F74-2D53-2644-206D7942484F} ()
[05/18/2007, 1:14:18] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/18/2007, 1:14:18] - Checking for HKLM\...\Winlogon\Notify\SDHelper
[05/18/2007, 1:14:18] - Key not found: HKLM\...\Winlogon\Notify\SDHelper, continuing.
[05/18/2007, 1:14:18] - BHO 3: {6211D16B-3CFE-4C44-BBDC-34B298AF5CCA} ()
[05/18/2007, 1:14:18] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/18/2007, 1:14:18] - No filename found. Continuing.
[05/18/2007, 1:14:18] - BHO 4: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
[05/18/2007, 1:14:18] - BHO 5: {7E853D72-626A-48EC-A868-BA8D5E23E045} ()
[05/18/2007, 1:14:18] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/18/2007, 1:14:18] - No filename found. Continuing.
[05/18/2007, 1:14:18] - BHO 6: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
[05/18/2007, 1:14:18] - BHO 7: {A05DA7E0-383C-4E99-A72A-742050A152A2} ()
[05/18/2007, 1:14:18] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/18/2007, 1:14:18] - No filename found. Continuing.
[05/18/2007, 1:14:18] - BHO 8: {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} (EpsonToolBandKicker Class)
[05/18/2007, 1:14:18] - Finished Searching Browser Helper Objects
[05/18/2007, 1:14:18] - Finishing up...
[05/18/2007, 1:14:18] - Nothing found! Exiting...

passe sous Linux!