[ RESOLU] Message recurrent system alert + popups

probleme resolu grace a Sham_Rock encor merci d avoir pris le temp de m aide




bonjour voila , mon probleme me semble etre le meme que mal de personnes . n etant pas tres fort en informatique
j ai lu est apliquer vos commentaire
pourrier vous me dire que faire maintenat
merci de votre reponse bien cordialement angel
ci jointle raport de HijackThis v2.0.2 >>>>>
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:44:19, on 03/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: atfxqogp - {EC2B736E-2B50-4709-A63E-F69855335854} - C:\WINDOWS\atfxqogp.dll
O4 - HKLM\..\Run: [SBI] C:\Documents and Settings\Angelo\Bureau\install_sbd_fr.exe
O4 - HKLM\..\Run: [V0350Mon.exe] C:\WINDOWS\V0350Mon.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NewsUpd] C:\Program Files\Creative\News\NewsUpd.EXE /q
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Name of App] C:\Program Files\SAMSUNG\FW LiveUpdate\FWManager.exe r
O4 - HKLM\..\Run: [Flashget] C:\Program Files\FlashGet\flashget.exe /min
O4 - HKLM\..\Run: [EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P26 "EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
O4 - HKLM\..\Run: [Easy PDF Creator] C:\Program Files\Easy PDF Creator\EasyPDFCreator.exe
O4 - HKLM\..\Run: [Détecteur de disque] C:\Program Files\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [ctfmona] C:\WINDOWS\system32\ctfmona.exe
O4 - HKLM\..\Run: [CreativeMixer] C:\Program Files\Creative\Audio2K\PROGRAM\CTMIX32.EXE /t
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [70dd8309] rundll32.exe "C:\WINDOWS\system32\oaircuoy.dll",b
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\RunOnce: [NeroHomeFirstStart] C:\Program Files\Fichiers communs\Ahead\Lib\NMFirstStart.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/Driv [...] eqlab2.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com [...] 0_4_13.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ [...] wflash.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareup [...] /CTPID.cab
O21 - SSODL: vregfwlx - {0B0B4CF9-4B47-447C-97EA-5469BD55148A} - C:\WINDOWS\vregfwlx.dll
O21 - SSODL: vltdfabw - {60ECEEE2-F39E-4007-8669-2C1AA0E7F7BA} - C:\WINDOWS\vltdfabw.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Droppix Service - Droppix - C:\Program Files\Fichiers communs\Droppix\DxService.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Microsoft security update service (msupdate) - Unknown owner - c:\windows\system32\mssrv32.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe

--
End of file - 7762 bytes


dans l attente d une reponse bien a vous

re je suis vraiment desoler si j ai l aire detre un peu lourd
mais c et que mon ordi est comme un drogue pour moi et le fait de ne pas men servir me ren fous

je vous poste le raport de a-squared Anti-Malware 3.5

Version - a-squared Anti-Malware 3.5
Dernière mise à jour : 03/06/2008 11:59:29

Paramètres des balayages :

Éléments : Mémoire, Traces, Cookies, C:\WINDOWS\, C:\Program Files
Balaye dans les archives : Marche
Analyse heuristique : Marche
Balaye dans les ADS : Marche

Début du balayage : 03/06/2008 12:00:05

c:\windows\system32\fonts Objets détectés : Trace.Directory.IamBigBrother
c:\program files\xp antivirus Objets détectés : Trace.Directory.XP Antivirus 2008
c:\documents and settings\administrateur\menu démarrer\xp antivirus 2008 Objets détectés : Trace.Directory.XP Antivirus 2008
c:\documents and settings\administrateur\application data\microsoft\internet explorer\quick launch\xp antivirus 2008.lnk Objets détectés : Trace.File.XP Antivirus 2008
c:\documents and settings\administrateur\bureau\xp antivirus 2008.lnk Objets détectés : Trace.File.XP Antivirus 2008
c:\program files\xp antivirus\xpa.exe Objets détectés : Trace.File.XP Antivirus 2008
c:\documents and settings\administrateur\menu démarrer\xp antivirus 2008\xp antivirus 2008.lnk Objets détectés : Trace.File.XP Antivirus 2008

Analysé

Fichiers : 73731
Traces : 182836
Cookies : 2
Processus : 15

Objets trouvés

Fichiers : 0
Traces : 7
Cookies : 0
Processus : 0
Clés du Registre : 0

Fin du balayage : 03/06/2008 12:25:27
Temps du balayage : 0:25:22

c:\documents and settings\administrateur\application data\microsoft\internet explorer\quick launch\xp antivirus 2008.lnk Objets Supprimés Trace.File.XP Antivirus 2008
c:\documents and settings\administrateur\bureau\xp antivirus 2008.lnk Objets Supprimés Trace.File.XP Antivirus 2008
c:\program files\xp antivirus\xpa.exe Objets Supprimés Trace.File.XP Antivirus 2008
c:\documents and settings\administrateur\menu démarrer\xp antivirus 2008\xp antivirus 2008.lnk Objets Supprimés Trace.File.XP Antivirus 2008
c:\program files\xp antivirus Objets Supprimés Trace.Directory.XP Antivirus 2008
c:\documents and settings\administrateur\menu démarrer\xp antivirus 2008 Objets Supprimés Trace.Directory.XP Antivirus 2008
c:\windows\system32\fonts Objets Supprimés Trace.Directory.IamBigBrother

Objets Supprimés

Fichiers : 0
Traces : 7
Cookies : 0

merci a Sham_Rock d avoir repondu

ci joint le rapport de SDFix>>


SDFix: Version 1.187
Run by Administrateur on 03/06/2008 at 18:59

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

Checking Services :

Name :
msupdate
VEF05

Path :
c:\windows\system32\mssrv32.exe
System32\Drivers\veF05.sys

msupdate - Deleted
VEF05 - Deleted



Restoring Windows Registry Values
Restoring Windows Default Hosts File
Restoring Default Desktop Wallpaper
Restored Windows ProductId registry value

Rebooting

Service VEF05 - Deleted

Checking Files :

Trojan Files Found:

C:\WINDOWS\system32\ljJDWOeC.dll - Deleted
C:\WINDOWS\SYSTEM32\CTFMONB.BMP - Deleted
C:\Documents and Settings\Angelo\Favoris\Error Cleaner.url - Deleted
C:\Documents and Settings\Angelo\Favoris\Privacy Protector.url - Deleted
C:\Documents and Settings\Angelo\Favoris\Spyware&Malware Protection.url - Deleted
C:\WINDOWS\system32\Engines\plugins\UpDate\UA27601.DLL - Deleted
C:\WINDOWS\system32\Engines\plugins\UpDate\UA27602.DLL - Deleted
C:\WINDOWS\system32\Engines\plugins\UpDate\UA27603.DLL - Deleted
C:\WINDOWS\system32\Engines\plugins\UpDate\UA27604.DLL - Deleted
C:\WINDOWS\system32\Engines\plugins\UpDate\UADAILY.DLL - Deleted
C:\Program Files\Fichiers communs\AntivirusFiable\ugac.exe - Deleted
C:\WINDOWS\system32\mssrv32.exe - Deleted
C:\WINDOWS\system32\WinCtrl32.dll - Deleted
C:\WINDOWS\system32\drivers\VEF05.sys - Deleted



Folder C:\Program Files\Fichiers communs\AntivirusFiable - Removed
Folder C:\WINDOWS\system32\Engines - Removed


Removing Temp Files

ADS Check :



Final Check :

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-03 23:17:13
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services :

VEF05



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\IncrediMail\\bin\\ImApp.exe"="C:\\Program Files\\IncrediMail\\bin\\ImApp.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"="C:\\Program Files\\IncrediMail\\bin\\IncMail.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"="C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe:*:Enabled:IncrediMail"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\Orange\\Connectivity\\ConnectivityManager.exe"="C:\\Program Files\\Orange\\Connectivity\\ConnectivityManager.exe:*:enabled:CSS"
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\\Program Files\\FlashGet\\FlashGet.exe"="C:\\Program Files\\FlashGet\\FlashGet.exe:*:Enabled:Flashget"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

Remaining Files :


File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes :

Tue 3 Jun 2008 256 A.SHR --- "C:\BOOT.BAK"
Fri 25 Apr 2008 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp"
Thu 17 Apr 2008 113 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\DFC5A2B2.TMP"
Sat 19 Apr 2008 71,680 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\GLB19.tmp"
Fri 25 Apr 2008 71,680 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\GLB3C.tmp"
Fri 25 Apr 2008 71,680 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\GLB43.tmp"
Sat 19 Apr 2008 146,432 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\GLC28.tmp"
Sun 20 Apr 2008 146,432 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\GLC33.tmp"
Fri 18 May 2007 45,056 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\gtapi.dll"
Tue 22 Apr 2008 873,216 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\Hx61.tmp"
Thu 31 May 2001 340,866 A..HR --- "C:\Documents and Settings\Angelo\Local Settings\Temp\IEC3A.tmp"
Thu 31 May 2001 340,866 A..HR --- "C:\Documents and Settings\Angelo\Local Settings\Temp\IEC4B.tmp"
Thu 25 Jul 2002 346,602 A..HR --- "C:\Documents and Settings\Angelo\Local Settings\Temp\IEC9A.tmp"
Mon 21 Apr 2008 23,494 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\ms2340.tmp"
Mon 21 Apr 2008 79,915 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\ms2348.tmp"
Sun 29 Oct 2006 145,184 A..HR --- "C:\Documents and Settings\Angelo\Local Settings\Temp\ose00000.exe"
Thu 24 Apr 2008 534 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\pcf1.tmp"
Fri 25 Apr 2008 534 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\pcf2.tmp"
Tue 22 Apr 2008 534 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\pcf7.tmp"
Mon 21 Apr 2008 534 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\pcf99.tmp"
Wed 23 Apr 2008 534 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\pcfA.tmp"
Thu 24 Apr 2008 534 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\pcfC.tmp"
Fri 18 Apr 2008 5,248 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\plf1.tmp"
Fri 18 Apr 2008 5,248 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\plfD.tmp"
Tue 23 Jan 2001 59,392 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\set23.tmp"
Mon 14 Nov 2005 121,064 A..HR --- "C:\Documents and Settings\Angelo\Local Settings\Temp\Set57.tmp"
Tue 23 Jan 2001 59,392 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\setC.tmp"
Thu 24 Apr 2008 373,576 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\SystemRequirementsLab.exe"
Tue 9 Jan 2007 1,636,376 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\ycomp_setup.exe"
Sat 20 Jan 2007 455,600 A..HR --- "C:\Documents and Settings\Angelo\Local Settings\Temp\_is11.exe"
Fri 18 Apr 2008 0 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~32.tmp"
Sun 20 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF12E0.tmp"
Sun 20 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF12F3.tmp"
Fri 25 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF13F9.tmp"
Fri 25 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF1466.tmp"
Sun 20 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF1730.tmp"
Sun 20 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF1743.tmp"
Fri 25 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF1CCF.tmp"
Fri 25 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF1CF8.tmp"
Sat 26 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF1FA0.tmp"
Sat 26 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF1FC0.tmp"
Sun 20 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF25CD.tmp"
Sun 20 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF25F4.tmp"
Mon 21 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF2A95.tmp"
Mon 21 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF2AAF.tmp"
Wed 23 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF2D44.tmp"
Wed 23 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF2DB1.tmp"
Fri 25 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF2F48.tmp"
Fri 25 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF2F66.tmp"
Fri 25 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF3005.tmp"
Fri 25 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF300F.tmp"
Fri 25 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF3041.tmp"
Fri 25 Apr 2008 16,384 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF34B8.tmp"
Sat 26 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF35B8.tmp"
Sat 26 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF35CE.tmp"
Mon 2 Jun 2008 49,152 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF3710.tmp"
Tue 22 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF3A60.tmp"
Tue 22 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF3A73.tmp"
Tue 22 Apr 2008 442,368 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF3AC5.tmp"
Sat 26 Apr 2008 16,384 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF3C74.tmp"
Fri 25 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF3D0E.tmp"
Tue 22 Apr 2008 16,384 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF3E25.tmp"
Thu 24 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF4183.tmp"
Fri 25 Apr 2008 16,384 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF46B8.tmp"
Thu 24 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF46DE.tmp"
Tue 27 May 2008 16,384 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF489F.tmp"
Thu 24 Apr 2008 131,072 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF48FB.tmp"
Thu 24 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF4B61.tmp"
Thu 24 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF4B79.tmp"
Fri 25 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF50E2.tmp"
Fri 25 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF50F5.tmp"
Sat 26 Apr 2008 16,384 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF5339.tmp"
Mon 21 Apr 2008 16,384 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF553D.tmp"
Wed 23 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF556E.tmp"
Wed 23 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF5581.tmp"
Tue 22 Apr 2008 425,984 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF5641.tmp"
Wed 23 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF5776.tmp"
Wed 23 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF5789.tmp"
Sun 20 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF5806.tmp"
Sun 20 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF5819.tmp"
Thu 24 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF58DC.tmp"
Thu 24 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF59BF.tmp"
Wed 23 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF5D20.tmp"
Wed 23 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF5EEE.tmp"
Sun 27 Apr 2008 32,768 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF6027.tmp"
Sun 20 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF6210.tmp"
Sun 20 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF6223.tmp"
Fri 25 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF63DB.tmp"
Fri 25 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF67AB.tmp"
Fri 25 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF682D.tmp"
Wed 23 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF6BDE.tmp"
Wed 23 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF6BF6.tmp"
Fri 25 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF6C2A.tmp"
Thu 24 Apr 2008 16,384 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF6DEF.tmp"
Fri 25 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF6FFC.tmp"
Tue 22 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF7093.tmp"
Fri 25 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF70B2.tmp"
Tue 22 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF70B6.tmp"
Mon 21 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF76F.tmp"
Fri 25 Apr 2008 16,384 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF7758.tmp"
Fri 25 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF7802.tmp"
Mon 21 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF782.tmp"
Fri 25 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF7878.tmp"
Thu 24 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF7AB4.tmp"
Thu 24 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF7ACB.tmp"
Sat 31 May 2008 32,768 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF7FD0.tmp"
Fri 25 Apr 2008 16,384 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF85E0.tmp"
Wed 23 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF860B.tmp"
Wed 23 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF87F4.tmp"
Tue 22 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF88EB.tmp"
Thu 24 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF8B48.tmp"
Tue 22 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF8C04.tmp"
Thu 24 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF8C1F.tmp"
Thu 24 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF8CCC.tmp"
Thu 24 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF8CDF.tmp"
Tue 22 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF8D35.tmp"
Sun 20 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF8D74.tmp"
Sun 20 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF8D87.tmp"
Tue 22 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF9498.tmp"
Tue 22 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF9574.tmp"
Sat 26 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF9597.tmp"
Sat 26 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF95EE.tmp"
Sun 20 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF97B.tmp"
Sun 20 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF98E.tmp"
Sun 20 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF9C74.tmp"
Sun 20 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF9CAE.tmp"
Thu 29 May 2008 131,072 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF9CEA.tmp"
Sun 1 Jun 2008 16,384 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF9F18.tmp"
Fri 25 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DF9FDB.tmp"
Fri 25 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFA041.tmp"
Sat 26 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFA3D.tmp"
Sat 26 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFA50.tmp"
Tue 22 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFA7BD.tmp"
Tue 22 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFA84A.tmp"
Fri 25 Apr 2008 16,384 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFA8CA.tmp"
Tue 22 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFAAD0.tmp"
Tue 22 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFAAE3.tmp"
Fri 25 Apr 2008 16,384 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFABF3.tmp"
Fri 25 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFAE7A.tmp"
Fri 25 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFB068.tmp"
Thu 24 Apr 2008 16,384 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFB0E9.tmp"
Tue 22 Apr 2008 131,072 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFB5B1.tmp"
Wed 28 May 2008 32,768 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFB5B5.tmp"
Thu 24 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFBFA6.tmp"
Thu 24 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFC080.tmp"
Tue 22 Apr 2008 16,384 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFC0B2.tmp"
Sun 1 Jun 2008 131,072 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFC0E.tmp"
Tue 22 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFC28.tmp"
Tue 22 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFC3CC.tmp"
Tue 22 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFC56.tmp"
Fri 25 Apr 2008 16,384 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFC68D.tmp"
Tue 22 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFCAE1.tmp"
Tue 22 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFCAF4.tmp"
Fri 25 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFCDE3.tmp"
Tue 22 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFCF1C.tmp"
Tue 22 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFCF32.tmp"
Tue 22 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFD21E.tmp"
Fri 25 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFD2EF.tmp"
Fri 25 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFD475.tmp"
Fri 25 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFDC85.tmp"
Thu 24 Apr 2008 16,384 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFE514.tmp"
Fri 25 Apr 2008 131,072 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFE5F8.tmp"
Mon 21 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFEA9F.tmp"
Mon 21 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFEC0A.tmp"
Thu 24 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFF757.tmp"
Thu 24 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFF76A.tmp"
Fri 25 Apr 2008 16,384 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFFB77.tmp"
Mon 21 Apr 2008 311,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFFC2B.tmp"
Mon 21 Apr 2008 512 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~DFFC40.tmp"
Sun 20 Apr 2008 0 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~E7.tmp"
Thu 24 Apr 2008 37,601,280 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~PST1235.tmp"
Thu 24 Apr 2008 48,254,976 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\~PST1978.tmp"
Sun 1 Jun 2008 802 A..H. --- "C:\Documents and Settings\Angelo\Mes documents\eMule Downloads\downloads.bak"
Fri 25 Apr 2008 170,697,558 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\26924cbc8132a10b438ce6e2b49d4652\BIT11.tmp"
Sat 19 Apr 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\523d056929e13eacf8392044f602e53e\BIT8.tmp"
Sat 19 Apr 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\afa5528a2269b5106016bdbc1ea3037f\BIT7.tmp"
Tue 27 May 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\f1d01f188c8132c12d35c3222b7723a4\BITA.tmp"
Sun 1 Jun 2008 5 A..H. --- "C:\Documents and Settings\Angelo\Application Data\eMule\config\clients.met.bak"
Fri 18 Apr 2008 141 A..H. --- "C:\Documents and Settings\Angelo\Application Data\Microsoft\Internet Explorer\brndlog.bak"
Mon 2 Jun 2008 16,072 A..H. --- "C:\Documents and Settings\Angelo\Application Data\Microsoft\Office\fbc117.tmp"
Thu 24 Apr 2008 254 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\IncrediMail\CMD14.tmp"
Wed 23 Apr 2008 242 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\IncrediMail\CMD147.tmp"
Fri 30 May 2008 2,904 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\IncrediMail\CMD8C.tmp"
Fri 25 Apr 2008 222 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\IncrediMail\CMDA7.tmp"
Fri 25 Apr 2008 390 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\IncrediMail\CMDBE.tmp"
Tue 18 Dec 2007 2,048 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\InstTemp0\userinstall.dll"
Tue 27 Sep 2005 86,016 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\is-DV2JP.tmp\SecurityUtil.dll"
Mon 21 Apr 2008 147,456 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\isp35.tmp\_Setup.dll"
Fri 18 Apr 2008 368,640 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\isp5B.tmp\_Setup.dll"
Fri 17 Nov 2006 1,556,480 ...H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\SetupX.exe"
Fri 24 Sep 2004 2,361,579 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\TFRINS\ftpexpert3.exe"
Sun 5 Jan 2003 1,507,584 A..HR --- "C:\Documents and Settings\Angelo\Local Settings\Temp\VIES1220\Ins9xmsi.exe"
Sun 5 Jan 2003 1,520,896 A..HR --- "C:\Documents and Settings\Angelo\Local Settings\Temp\VIES1220\Insntmsi.exe"
Tue 4 Feb 2003 446,464 A..HR --- "C:\Documents and Settings\Angelo\Local Settings\Temp\VIES1220\Setup.exe"
Sat 20 Jan 2007 492,032 A..HR --- "C:\Documents and Settings\Angelo\Local Settings\Temp\{9B64C10A-36F0-4843-B70F-18CA7E2E8514}\ISSetup.dll"
Wed 17 May 2006 373,680 A..HR --- "C:\Documents and Settings\Angelo\Local Settings\Temp\{9B64C10A-36F0-4843-B70F-18CA7E2E8514}\_Setup.dll"
Mon 21 Apr 2008 116,688 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\bye40.tmp\Disk1\setup.exe"
Tue 22 Apr 2008 121,064 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\bye6C.tmp\Disk1\setup.exe"
Wed 18 Dec 2002 509,984 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Redist\50comupd.exe"
Fri 10 Nov 2006 598,016 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Redist\AReadyLB_Nero.dll"
Mon 11 Mar 2002 1,708,856 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Redist\instmsia.exe"
Mon 11 Mar 2002 1,822,520 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Redist\instmsiw.exe"
Tue 23 Jan 2001 117,288 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Redist\ShFolder.Exe"
Mon 27 May 2002 263,848 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Setup\APATCH.DLL"
Fri 17 Nov 2006 860,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Setup\NeroDelTmp.exe"
Fri 22 Sep 2006 823,296 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Setup\NiReg.exe"
Fri 17 Nov 2006 3,334,144 ...H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Setup\NPS.dll"
Fri 17 Nov 2006 946,176 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Setup\UninstallNero.exe"
Thu 5 Jan 2006 160,768 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Setup\unrar.dll"
Fri 5 Mar 2004 815,104 A..H. --- "C:\Documents and Settings\Angelo\Application Data\Macromedia\Dreamweaver MX 2004\Configuration\Flash Player\FlashPlayerW.dll"
Fri 5 Mar 2004 757,760 A..H. --- "C:\Documents and Settings\Angelo\Application Data\Macromedia\Dreamweaver MX 2004\Configuration\Flash Player\NPSWF32.dll"
Fri 30 May 2008 0 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Application Data\IM\Identities\{F962A678-4983-4883-A976-913E0946550D}\34E74534-CFA6-405E-83AB-B5A6EC541A13_data.bak"
Mon 2 Jun 2008 0 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Application Data\IM\Identities\{F962A678-4983-4883-A976-913E0946550D}\9A4C8EC9-4E87-4DEE-92EB-224F2B6187AB_data.bak"
Sun 18 May 2008 0 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Application Data\IM\Identities\{F962A678-4983-4883-A976-913E0946550D}\A84D2A17-CBD7-4FDD-86B9-92287D9657C9_data.bak"
Mon 17 Oct 2005 2,600,960 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\BCGCBPRO8002D9B60E3.dll"
Fri 23 Dec 2005 32,768 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\BCGPOleAcc9B39C142.dll"
Wed 31 May 2006 1,347,584 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\Drweb323680E0DF.dll"
Thu 9 Nov 2006 184,320 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\em2v01DC7D73.dll"
Thu 9 Nov 2006 184,320 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\em2v6300DBD6.dll"
Tue 4 May 2004 1,645,320 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\gdiplus78D63180.DLL"
Tue 4 May 2004 1,645,320 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\gdiplusAF831C96.DLL"
Tue 4 May 2004 1,645,320 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\gdiplus9071448E.DLL"
Tue 4 May 2004 1,645,320 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\gdiplus74C97B78.DLL"
Tue 4 May 2004 1,645,320 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\gdiplus985FC367.DLL"
Tue 4 May 2004 1,645,320 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\gdiplusD6EBAEF5.DLL"
Tue 4 May 2004 1,645,320 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\gdiplusA455ADFC.DLL"
Tue 4 May 2004 1,645,320 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\gdiplusDC8C5D2A.DLL"
Tue 4 May 2004 1,645,320 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\gdiplusE1DA3D0E.DLL"
Tue 4 May 2004 1,645,320 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\gdiplus5C39907C.DLL"
Tue 4 May 2004 1,645,320 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\gdiplus55EBB4A3.DLL"
Tue 4 May 2004 1,645,320 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\gdiplus536CC5AD.DLL"
Tue 4 May 2004 1,645,320 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\gdiplusB1DBFAF0.DLL"
Tue 4 May 2004 1,645,320 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\gdiplus38B07F0B.DLL"
Tue 4 May 2004 1,645,320 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\gdiplusF33DEC0A.DLL"
Tue 4 May 2004 1,645,320 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\gdiplus5461AF19.DLL"
Tue 4 May 2004 1,645,320 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\gdiplus5ABC3C3B.DLL"
Tue 18 Mar 2003 1,047,552 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\mfc71u4D1989F2.dll"
Tue 18 Mar 2003 1,047,552 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\mfc71uF18EADFB.dll"
Tue 18 Mar 2003 1,047,552 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\mfc71u12406601.dll"
Wed 19 Mar 2003 1,060,864 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\MFC71109CB9C7.dll"
Wed 19 Mar 2003 1,060,864 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\MFC71249A74F9.dll"
Wed 19 Mar 2003 1,060,864 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\MFC713F517409.dll"
Wed 19 Mar 2003 1,060,864 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\MFC71461BF8FA.dll"
Wed 19 Mar 2003 1,060,864 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\MFC7149090881.dll"
Wed 19 Mar 2003 1,060,864 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\MFC715B49AA52.dll"
Wed 19 Mar 2003 1,060,864 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\MFC716011AF24.dll"
Wed 19 Mar 2003 1,060,864 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\MFC716251E7FF.dll"
Wed 19 Mar 2003 1,060,864 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\MFC718A0B572D.dll"
Wed 19 Mar 2003 1,060,864 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\MFC71AE66EE48.dll"
Wed 19 Mar 2003 1,060,864 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\MFC71CB545924.dll"
Wed 19 Mar 2003 1,060,864 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\MFC71E906F697.dll"
Wed 19 Mar 2003 1,060,864 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\MFC71F47B49DB.dll"
Tue 18 Mar 2003 1,047,552 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\mfc71uE8BEE4D1.dll"
Tue 18 Mar 2003 1,047,552 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\mfc71u4C5C5DD0.dll"
Tue 18 Mar 2003 1,047,552 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\mfc71u93490C3B.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp714D58BA94.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp7198B02AF4.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp7150E1E867.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp71346249B2.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp7162535DFA.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp71EF1A49EE.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp71EB0FA0C2.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp71BBF6D7CF.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr719D484A5A.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp71F4FBCFF4.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr71402AC422.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr71E0570AA5.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr7144B7F012.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr71E0BAC39B.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr7166D31FF4.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr71F02E11D7.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr71BB261ECC.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp7169869529.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp71318C1171.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr71F2E0F0EF.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp710E7F954E.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp71C138A21F.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp714536764D.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp71FC7343DA.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp71C50F23DB.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp7151207FF7.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp712CF144D3.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr7193442B58.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr7113A22A6A.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr7135AD2B54.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr712E243769.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr71EE7C0081.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr71CC2005AB.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr71D1A5E404.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr71F5084597.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr716A7F987A.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr71BA5A88D0.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr713C2058C6.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp71B4C16822.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp7158986D1C.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp7177B7CF3F.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp7178516802.dll"
Wed 19 Mar 2003 499,712 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcp71F525E9F7.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr7103CBFF9A.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr71264D7D03.dll"
Fri 21 Feb 2003 348,160 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\msvcr71FD47894B.dll"
Fri 4 May 2001 290,869 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\Msvcrt11D4118E.dll"
Thu 9 Nov 2006 45,568 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\ndvddiscD56CC44A.dll"
Thu 9 Nov 2006 126,976 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\NeAcEnc9FC8C58A.dll"
Thu 9 Nov 2006 135,168 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\NeEm2a57A96039.dll"
Thu 9 Nov 2006 135,168 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\NeEm2a529CBA7F.dll"
Thu 9 Nov 2006 3,371,008 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\NeroIPP55B9FD4A.dll"
Thu 9 Nov 2006 3,371,008 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\NeroIPP18F99FA5.dll"
Thu 9 Nov 2006 1,265,664 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\NeroMediaConD4CB9F82.dll"
Thu 9 Nov 2006 1,265,664 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\NeroMediaCon041A55CE.dll"
Thu 16 Nov 2006 81,920 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\NeroRcPluginHauppaugeD1EEA012.dll"
Thu 16 Nov 2006 81,920 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\NeroRcPluginAti3935D9B2.dll"
Fri 27 Oct 2006 34,816 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\NeRSDB05C2D9D9.dll"
Thu 9 Nov 2006 323,584 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\NeVcr50E5ADBC.dll"
Thu 16 Nov 2006 3,375,705 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\SetupNeroMobileUnsignedA8C35C16.exe"
Fri 27 Oct 2006 94,208 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\TMPVImporterF67588C5.dll"
Fri 27 Oct 2006 425,984 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\UDFImporter4B649A67.dll"
Wed 31 May 2006 364,544 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Cab\Tmp\VMPEGEncNDX44D4A2E4.dll"
Mon 14 Aug 2006 74,520 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Redist\DirectX\DSETUP.dll"
Mon 14 Aug 2006 2,248,984 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Redist\DirectX\dsetup32.dll"
Mon 14 Aug 2006 484,632 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Redist\DirectX\dxsetup.exe"
Sat 19 Apr 2008 54 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Application Data\IM\Identities\{8E7E718E-D9CE-45A6-87F6-EAEEAC89F140}\AddressBook\AddressBook.imb.bak"
Tue 12 Feb 2008 210,843 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Application Data\IM\Identities\{8E7E718E-D9CE-45A6-87F6-EAEEAC89F140}\EmoticonCenter\emoticons.bak"
Sat 19 Apr 2008 604 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Application Data\IM\Identities\{8E7E718E-D9CE-45A6-87F6-EAEEAC89F140}\Message Store\Folders.bak"
Fri 30 May 2008 137,702 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Application Data\IM\Identities\{F962A678-4983-4883-A976-913E0946550D}\AddressBook\AddressBook.imb.bak"
Tue 12 Feb 2008 210,843 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Application Data\IM\Identities\{F962A678-4983-4883-A976-913E0946550D}\EmoticonCenter\emoticons.bak"
Mon 8 Mar 1999 147,728 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Redist\MS\System\asycfilt.dll"
Thu 6 Apr 2000 995,383 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Redist\MS\System\mfc42.dll"
Thu 6 Apr 2000 77,878 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Redist\MS\System\msvcirt.dll"
Tue 29 Aug 2000 401,462 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Redist\MS\System\msvcp60.dll"
Thu 6 Apr 2000 278,581 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Redist\MS\System\msvcrt.dll"
Wed 12 Apr 2000 598,288 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Redist\MS\System\oleaut32.dll"
Mon 8 Mar 1999 164,112 A..H. --- "C:\Documents and Settings\Angelo\Local Settings\Temp\NeroDemo11545\Redist\MS\System\olepro32.dll"

Finished!

puis un nouveu log HijackThis>>>>

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:37: VIRUS ALERT!, on 03/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\V0350Mon.exe
C:\Program Files\Orange\Systray\SystrayApp.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Creative\News\NewsUpd.EXE
C:\Program Files\SAMSUNG\FW LiveUpdate\FWManager.exe
C:\Program Files\FlashGet\flashget.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE
C:\Program Files\Softwin\BitDefender10\bdmcon.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\a-squared Anti-Malware\a2guard.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Orange\Launcher\Launcher.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\PROGRA~1\INCRED~1\bin\ImApp.exe
C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
C:\Program Files\Orange\Deskboard\deskboard.exe
C:\Program Files\Orange\connectivity\connectivitymanager.exe
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [V0350Mon.exe] C:\WINDOWS\V0350Mon.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NewsUpd] C:\Program Files\Creative\News\NewsUpd.EXE /q
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Name of App] C:\Program Files\SAMSUNG\FW LiveUpdate\FWManager.exe r
O4 - HKLM\..\Run: [Flashget] C:\Program Files\FlashGet\flashget.exe /min
O4 - HKLM\..\Run: [EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P26 "EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
O4 - HKLM\..\Run: [Easy PDF Creator] C:\Program Files\Easy PDF Creator\EasyPDFCreator.exe
O4 - HKLM\..\Run: [Détecteur de disque] C:\Program Files\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [70dd8309] rundll32.exe "C:\WINDOWS\system32\scbqyxlq.dll",b
O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe" /d=60
O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [16899942494817479532891503971405] C:\Program Files\XP Antivirus\xpa.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www.orange.fr
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/Driv [...] eqlab2.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com [...] 0_4_13.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ [...] wflash.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareup [...] /CTPID.cab
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Droppix Service - Droppix - C:\Program Files\Fichiers communs\Droppix\DxService.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
O24 - Desktop Component 0: Privacy Protection - file:///C:\WINDOWS\privacy_danger\index.htm

--
End of file - 11213 bytes

bonjour
j'ai bien dit que tu étais multi infecté...

Télécharge MalwareByte's Anti-Malware sur ton Bureau.
Installe-le en double-cliquant sur le fichier Download_mbam-setup.exe.

Une fois l'installation et la mise à jour effectuées, redémarre en mode sans échec.
AIDE : Redémarrer en mode sans échec

• Exécute maintenant MalwareByte's Anti-Malware. Si cela n'est pas déjà fait, sélectionne "Exécuter un examen complet".
• Afin de lancer la recherche, clic sur"Rechercher".
• Une fois le scan terminé, une fenêtre s'ouvre, clic sur OK. Deux possibilités s'offrent à toi :

-- si le programme n'a rien trouvé, appuie sur OK. Un rapport va apparaître, ferme-le.
-- si des infections sont présentes, clic sur "Afficher les résultats" puis sur "Supprimer la sélection". Enregistre le rapport sur ton Bureau afin de le poster dans ta prochaine réponse.
REMARQUE : Si MalwareByte's Anti-Malware a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok.

AIDE : Tuto en images sur MBAM

re

Désactive ton antivirus et tout autre type de protection.
Télécharge ComboFix de sUBs :
ComboFix.exe
et sauvegarde le sur ton bureau et pas ailleurs!

Double-clic sur ComboFix, Il va te poser une question, suis les invites puis attends que combofix ait terminé, il est possible que ton PC reboot, c’est normal, un rapport sera créé.Poste le rapport\Combofix.txt
clique dessus pour l'ouvrir, puis édition "sélectionner tout", édition "copier"

viens sur le forum et édition "coller"

ajoute un nouveau rapport Hijackthis.

re

~Télécharge OTMoveIt (d'OldTimer). Sauvegarde-le sur ton Bureau.

~Lance Hijackthis “Do a system scan only”.
Coche les lignes qui suivent si encore présentes et uniquement celles-là.

O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O24 - Desktop Component 0: Privacy Protection - (no file)

Clique sur Fix checked (en bas à gauche)


Sélectionne TOUS les emplacements en gras ci-dessous :

C:\327882R2FWJFW
C:\WINDOWS\system32\CF28365.exe
C:\WINDOWS\system32\tmp.reg
C:\WINDOWS\system32\ieupdates.exe.tmp
C:\WINDOWS\ekaf.exe
C:\AntivirusFiable
C:\Documents and Settings\Angelo\Application Data\AntivirusFiable

---> Clique-droit puis Copier (ou Ctrl+C)

Double-clique sur OTMoveIt.exe afin de le lancer.
Fais un Clique-droit sur le cadre de gauche puis choisis Coller (ou Ctrl+V).
Clique maintenant sur MoveIt!

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log

re

supprime:
C:\_OTMoveIt
C:\Qoobox

vide ta corbeille

~Fais une analyse antivirus en ligne sur le site de Kaspersky
http://webscanner.kaspersky.fr/

~ Clique sur Online Scanner.
~Accepte l'installation du contrôle ActiveX en cliquant sur le bouton Install.

~Sélectionne le poste de travail comme analyse.

~Enregistre le rapport en cliquant sur le bouton "Enregistrer rapport sous". Nomme-le, tu feras un copier/coller dans ta prochaine réponse.

Tuto du scan en ligne

bonsoir

~Désactive puis réactive la restauration en suivant ce tuto:
http://service1.symantec.com/SUPPO [...] 0101856924
Il faudra désactiver la restauration, redémarrer l'ordinateur et réactiver aussitôt la restauration.

Supprime tous les programmes installés pour la désinfection.


Merci de consulter ce dossier (en pdf) pour en connaître davantage sur les risques du Net.



Si tu trouves ce document intéressant, n'hésite pas à le transmettre à tes contacts.

~Edite ton premier message (en cliquant sur la gomme) et marque [résolu] dans le titre.