Rootkit besoin d'aide
Forum Sécurité - Virus : Rootkit besoin d'aide
ok merci :
le log:
Logfile of random's system information tool 1.06 (written by random/random)
Run by rasta at 2009-05-17 18:35:13
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 63 GB (87%) free of 73 GB
Total RAM: 2047 MB (69% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:35:24, on 17/05/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\update\update.exe
C:\Documents and Settings\rasta\Bureau\RSIT.exe
C:\Documents and Settings\rasta\Bureau\rasta.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/y [...] .yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.fr.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/y [...] .yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 0
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe /idle
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe"
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/micros [...] 2576924687
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: BitDefender Arrakis Server (Arrakis3) - BitDefender S.R.L. http://www.bitdefender.com - C:\Program Files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S. R. L. - C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
--
End of file - 8027 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-09-06 439872]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-05-17 35840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-05-17 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\WINDOWS\system32\eDStoolbar.dll [2006-03-08 106496]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar avec bloqueur de fenêtres pop-up - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-09-06 439872]
{381FFDE8-2394-4f90-B10D-FC6124A40F8C} - BitDefender Toolbar - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll [2009-05-17 95536]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray"=C:\WINDOWS\ehome\ehtray.exe [2005-09-29 67584]
"LaunchApp"=Alaunch []
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-06-01 16208384]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"ntiMUI"=c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe [2005-05-11 45056]
""= []
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-10 208952]
"IMEKRMIG6.1"=C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE [2004-08-10 44032]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-10 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-10 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-10 455168]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-05-17 148888]
"Acer Empowering Technology Monitor"=C:\WINDOWS\system32\SysMonitor.exe [2006-04-18 49152]
"eRecoveryService"=C:\Acer\Empowering Technology\eRecovery\eRAgent.exe [2006-06-01 413696]
"eDataSecurity Loader"=C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [2006-03-17 345088]
"WarReg_PopUp"=C:\Acer\WR_PopUp\WarReg_PopUp.exe [2006-09-23 61440]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-05-16 13529088]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-05-16 86016]
"BDAgent"=C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe [2009-05-17 778240]
"BitDefender Antiphishing Helper"=C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe [2009-05-17 69632]
"LFAgent"= []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-10 15360]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Acer Empowering Technology.lnk - C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
Acer WLAN 11g USB Dongle.lnk - C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-07-18 86016]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Vuze\Azureus.exe"="C:\Program Files\Vuze\Azureus.exe:*:Enabled:Vuze"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
======List of files/folders created in the last 1 months======
2009-05-17 18:35:13 ----D---- C:\rsit
2009-05-17 18:33:15 ----D---- C:\WINDOWS\ServicePackFiles
2009-05-17 18:30:55 ----D---- C:\WINDOWS\network diagnostic
2009-05-17 18:30:36 ----A---- C:\WINDOWS\system32\sprecovr.exe
2009-05-17 18:30:36 ----A---- C:\WINDOWS\sprecovr.txt
2009-05-17 18:25:52 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2009-05-17 18:18:22 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2009-05-17 17:54:28 ----D---- C:\Documents and Settings\rasta\Application Data\WinRAR
2009-05-17 17:54:03 ----D---- C:\Program Files\WinRAR
2009-05-17 17:40:16 ----D---- C:\Program Files\GRISOFT
2009-05-17 16:51:12 ----D---- C:\Documents and Settings\rasta\Application Data\Adobe
2009-05-17 16:07:34 ----D---- C:\Documents and Settings\rasta\Application Data\vlc
2009-05-17 16:05:15 ----D---- C:\Program Files\VideoLAN
2009-05-17 15:56:07 ----D---- C:\Documents and Settings\rasta\Application Data\CyberLink
2009-05-17 15:56:01 ----D---- C:\Documents and Settings\All Users\Application Data\CyberLink
2009-05-17 15:52:59 ----A---- C:\WINDOWS\system32\SET20C.tmp
2009-05-17 15:52:59 ----A---- C:\WINDOWS\system32\SET20B.tmp
2009-05-17 15:52:59 ----A---- C:\WINDOWS\system32\SET204.tmp
2009-05-17 15:52:59 ----A---- C:\WINDOWS\system32\SET202.tmp
2009-05-17 15:52:59 ----A---- C:\WINDOWS\system32\SET200.tmp
2009-05-17 15:52:59 ----A---- C:\WINDOWS\system32\SET1FE.tmp
2009-05-17 15:52:59 ----A---- C:\WINDOWS\system32\SET1FD.tmp
2009-05-17 15:52:58 ----A---- C:\WINDOWS\system32\SET222.tmp
2009-05-17 15:52:58 ----A---- C:\WINDOWS\system32\SET221.tmp
2009-05-17 15:52:58 ----A---- C:\WINDOWS\system32\SET21F.tmp
2009-05-17 15:52:58 ----A---- C:\WINDOWS\system32\SET21E.tmp
2009-05-17 15:52:58 ----A---- C:\WINDOWS\system32\SET21D.tmp
2009-05-17 15:52:58 ----A---- C:\WINDOWS\system32\SET21A.tmp
2009-05-17 15:52:58 ----A---- C:\WINDOWS\system32\SET219.tmp
2009-05-17 15:52:58 ----A---- C:\WINDOWS\system32\SET218.tmp
2009-05-17 15:52:58 ----A---- C:\WINDOWS\system32\SET20F.tmp
2009-05-17 15:52:57 ----A---- C:\WINDOWS\system32\SET238.tmp
2009-05-17 15:52:57 ----A---- C:\WINDOWS\system32\SET237.tmp
2009-05-17 15:52:57 ----A---- C:\WINDOWS\system32\SET236.tmp
2009-05-17 15:52:57 ----A---- C:\WINDOWS\system32\SET235.tmp
2009-05-17 15:52:57 ----A---- C:\WINDOWS\system32\SET228.tmp
2009-05-17 15:52:57 ----A---- C:\WINDOWS\system32\SET227.tmp
2009-05-17 15:52:57 ----A---- C:\WINDOWS\system32\SET226.tmp
2009-05-17 15:52:57 ----A---- C:\WINDOWS\system32\SET225.tmp
2009-05-17 15:52:56 ----A---- C:\WINDOWS\system32\SET24B.tmp
2009-05-17 15:52:56 ----A---- C:\WINDOWS\system32\SET249.tmp
2009-05-17 15:52:56 ----A---- C:\WINDOWS\system32\SET248.tmp
2009-05-17 15:52:56 ----A---- C:\WINDOWS\system32\SET247.tmp
2009-05-17 15:52:56 ----A---- C:\WINDOWS\system32\SET245.tmp
2009-05-17 15:52:56 ----A---- C:\WINDOWS\system32\SET23E.tmp
2009-05-17 15:52:56 ----A---- C:\WINDOWS\system32\SET23D.tmp
2009-05-17 15:52:56 ----A---- C:\WINDOWS\system32\SET23B.tmp
2009-05-17 15:52:55 ----A---- C:\WINDOWS\system32\SET25B.tmp
2009-05-17 15:52:55 ----A---- C:\WINDOWS\system32\SET258.tmp
2009-05-17 15:52:55 ----A---- C:\WINDOWS\system32\SET255.tmp
2009-05-17 15:52:55 ----A---- C:\WINDOWS\system32\SET254.tmp
2009-05-17 15:52:55 ----A---- C:\WINDOWS\system32\SET253.tmp
2009-05-17 15:52:55 ----A---- C:\WINDOWS\system32\SET252.tmp
2009-05-17 15:52:55 ----A---- C:\WINDOWS\system32\SET24D.tmp
2009-05-17 15:52:55 ----A---- C:\WINDOWS\system32\SET24C.tmp
2009-05-17 15:52:54 ----N---- C:\WINDOWS\system32\SET263.tmp
2009-05-17 15:52:54 ----A---- C:\WINDOWS\system32\SET26E.tmp
2009-05-17 15:52:54 ----A---- C:\WINDOWS\system32\SET26D.tmp
2009-05-17 15:52:54 ----A---- C:\WINDOWS\system32\SET26C.tmp
2009-05-17 15:52:54 ----A---- C:\WINDOWS\system32\SET269.tmp
2009-05-17 15:52:54 ----A---- C:\WINDOWS\system32\SET266.tmp
2009-05-17 15:52:54 ----A---- C:\WINDOWS\system32\SET265.tmp
2009-05-17 15:52:54 ----A---- C:\WINDOWS\system32\SET264.tmp
2009-05-17 15:52:54 ----A---- C:\WINDOWS\system32\SET25E.tmp
2009-05-17 15:52:53 ----A---- C:\WINDOWS\system32\SET27D.tmp
2009-05-17 15:52:53 ----A---- C:\WINDOWS\system32\SET279.tmp
2009-05-17 15:52:53 ----A---- C:\WINDOWS\system32\SET276.tmp
2009-05-17 15:52:53 ----A---- C:\WINDOWS\system32\SET274.tmp
2009-05-17 15:52:52 ----A---- C:\WINDOWS\system32\spdwnwxp.exe
2009-05-17 15:52:52 ----A---- C:\WINDOWS\system32\SET292.tmp
2009-05-17 15:52:52 ----A---- C:\WINDOWS\system32\SET291.tmp
2009-05-17 15:52:52 ----A---- C:\WINDOWS\system32\SET290.tmp
2009-05-17 15:52:52 ----A---- C:\WINDOWS\system32\SET28F.tmp
2009-05-17 15:52:52 ----A---- C:\WINDOWS\system32\SET28E.tmp
2009-05-17 15:52:52 ----A---- C:\WINDOWS\system32\SET28C.tmp
2009-05-17 15:52:52 ----A---- C:\WINDOWS\system32\SET287.tmp
2009-05-17 15:52:52 ----A---- C:\WINDOWS\system32\SET286.tmp
2009-05-17 15:52:50 ----A---- C:\WINDOWS\system32\SET2BA.tmp
2009-05-17 15:52:50 ----A---- C:\WINDOWS\system32\SET2B7.tmp
2009-05-17 15:52:50 ----A---- C:\WINDOWS\system32\SET2B6.tmp
2009-05-17 15:52:50 ----A---- C:\WINDOWS\system32\SET2B2.tmp
2009-05-17 15:52:50 ----A---- C:\WINDOWS\system32\SET2B1.tmp
2009-05-17 15:52:50 ----A---- C:\WINDOWS\system32\SET2AF.tmp
2009-05-17 15:52:50 ----A---- C:\WINDOWS\system32\SET2AE.tmp
2009-05-17 15:52:50 ----A---- C:\WINDOWS\system32\SET2AD.tmp
2009-05-17 15:52:50 ----A---- C:\WINDOWS\system32\SET2AC.tmp
2009-05-17 15:52:50 ----A---- C:\WINDOWS\system32\SET2AA.tmp
2009-05-17 15:52:50 ----A---- C:\WINDOWS\system32\SET2A7.tmp
2009-05-17 15:52:50 ----A---- C:\WINDOWS\system32\SET2A2.tmp
2009-05-17 15:52:49 ----N---- C:\WINDOWS\system32\SET2CB.tmp
2009-05-17 15:52:49 ----A---- C:\WINDOWS\system32\SET2D4.tmp
2009-05-17 15:52:49 ----A---- C:\WINDOWS\system32\SET2D3.tmp
2009-05-17 15:52:49 ----A---- C:\WINDOWS\system32\SET2D2.tmp
2009-05-17 15:52:49 ----A---- C:\WINDOWS\system32\SET2CC.tmp
2009-05-17 15:52:49 ----A---- C:\WINDOWS\system32\SET2C4.tmp
2009-05-17 15:52:49 ----A---- C:\WINDOWS\system32\SET2C3.tmp
2009-05-17 15:52:49 ----A---- C:\WINDOWS\system32\SET2C2.tmp
2009-05-17 15:52:49 ----A---- C:\WINDOWS\system32\SET2BC.tmp
2009-05-17 15:52:49 ----A---- C:\WINDOWS\system32\SET2BB.tmp
2009-05-17 15:52:48 ----A---- C:\WINDOWS\system32\SET2EF.tmp
2009-05-17 15:52:48 ----A---- C:\WINDOWS\system32\SET2EA.tmp
2009-05-17 15:52:48 ----A---- C:\WINDOWS\system32\SET2DE.tmp
2009-05-17 15:52:48 ----A---- C:\WINDOWS\system32\SET2DD.tmp
2009-05-17 15:52:48 ----A---- C:\WINDOWS\system32\SET2D8.tmp
2009-05-17 15:52:47 ----A---- C:\WINDOWS\system32\SET309.tmp
2009-05-17 15:52:47 ----A---- C:\WINDOWS\system32\SET305.tmp
2009-05-17 15:52:47 ----A---- C:\WINDOWS\system32\SET303.tmp
2009-05-17 15:52:47 ----A---- C:\WINDOWS\system32\SET300.tmp
2009-05-17 15:52:47 ----A---- C:\WINDOWS\system32\SET2FF.tmp
2009-05-17 15:52:47 ----A---- C:\WINDOWS\system32\SET2FD.tmp
2009-05-17 15:52:47 ----A---- C:\WINDOWS\system32\SET2F4.tmp
2009-05-17 15:52:47 ----A---- C:\WINDOWS\system32\SET2F3.tmp
2009-05-17 15:52:47 ----A---- C:\WINDOWS\system32\SET2F0.tmp
2009-05-17 15:52:46 ----A---- C:\WINDOWS\system32\SET314.tmp
2009-05-17 15:52:46 ----A---- C:\WINDOWS\system32\SET313.tmp
2009-05-17 15:52:46 ----A---- C:\WINDOWS\system32\SET311.tmp
2009-05-17 15:52:46 ----A---- C:\WINDOWS\system32\SET310.tmp
2009-05-17 15:52:46 ----A---- C:\WINDOWS\system32\SET30F.tmp
2009-05-17 15:52:45 ----A---- C:\WINDOWS\system32\SET339.tmp
2009-05-17 15:52:45 ----A---- C:\WINDOWS\system32\SET335.tmp
2009-05-17 15:52:45 ----A---- C:\WINDOWS\system32\SET334.tmp
2009-05-17 15:52:45 ----A---- C:\WINDOWS\system32\SET333.tmp
2009-05-17 15:52:45 ----A---- C:\WINDOWS\system32\SET331.tmp
2009-05-17 15:52:45 ----A---- C:\WINDOWS\system32\SET330.tmp
2009-05-17 15:52:45 ----A---- C:\WINDOWS\system32\SET32F.tmp
2009-05-17 15:52:45 ----A---- C:\WINDOWS\system32\SET32D.tmp
2009-05-17 15:52:45 ----A---- C:\WINDOWS\system32\SET32C.tmp
2009-05-17 15:52:45 ----A---- C:\WINDOWS\system32\SET32B.tmp
2009-05-17 15:52:45 ----A---- C:\WINDOWS\system32\SET32A.tmp
2009-05-17 15:52:45 ----A---- C:\WINDOWS\system32\SET329.tmp
2009-05-17 15:52:45 ----A---- C:\WINDOWS\system32\SET326.tmp
2009-05-17 15:52:45 ----A---- C:\WINDOWS\system32\SET325.tmp
2009-05-17 15:52:45 ----A---- C:\WINDOWS\system32\SET31E.tmp
2009-05-17 15:52:45 ----A---- C:\WINDOWS\system32\SET31D.tmp
2009-05-17 15:52:45 ----A---- C:\WINDOWS\system32\SET31C.tmp
2009-05-17 15:52:45 ----A---- C:\WINDOWS\system32\SET31A.tmp
2009-05-17 15:52:44 ----A---- C:\WINDOWS\system32\SET343.tmp
2009-05-17 15:52:44 ----A---- C:\WINDOWS\system32\SET342.tmp
2009-05-17 15:52:44 ----A---- C:\WINDOWS\system32\SET341.tmp
2009-05-17 15:52:44 ----A---- C:\WINDOWS\system32\SET33C.tmp
2009-05-17 15:52:43 ----A---- C:\WINDOWS\system32\SET35E.tmp
2009-05-17 15:52:43 ----A---- C:\WINDOWS\system32\SET35C.tmp
2009-05-17 15:52:43 ----A---- C:\WINDOWS\system32\SET359.tmp
2009-05-17 15:52:43 ----A---- C:\WINDOWS\system32\SET356.tmp
2009-05-17 15:52:43 ----A---- C:\WINDOWS\system32\SET352.tmp
2009-05-17 15:52:43 ----A---- C:\WINDOWS\system32\SET351.tmp
2009-05-17 15:52:43 ----A---- C:\WINDOWS\system32\SET34F.tmp
2009-05-17 15:52:43 ----A---- C:\WINDOWS\system32\SET34C.tmp
2009-05-17 15:52:43 ----A---- C:\WINDOWS\system32\SET34A.tmp
2009-05-17 15:52:43 ----A---- C:\WINDOWS\system32\SET349.tmp
2009-05-17 15:52:43 ----A---- C:\WINDOWS\system32\SET348.tmp
2009-05-17 15:52:42 ----A---- C:\WINDOWS\system32\SET389.tmp
2009-05-17 15:52:42 ----A---- C:\WINDOWS\system32\SET388.tmp
2009-05-17 15:52:42 ----A---- C:\WINDOWS\system32\SET387.tmp
2009-05-17 15:52:42 ----A---- C:\WINDOWS\system32\SET385.tmp
2009-05-17 15:52:42 ----A---- C:\WINDOWS\system32\SET383.tmp
2009-05-17 15:52:42 ----A---- C:\WINDOWS\system32\SET377.tmp
2009-05-17 15:52:42 ----A---- C:\WINDOWS\system32\SET376.tmp
2009-05-17 15:52:42 ----A---- C:\WINDOWS\system32\SET373.tmp
2009-05-17 15:52:42 ----A---- C:\WINDOWS\system32\SET372.tmp
2009-05-17 15:52:42 ----A---- C:\WINDOWS\system32\SET36C.tmp
2009-05-17 15:52:42 ----A---- C:\WINDOWS\system32\SET367.tmp
2009-05-17 15:52:42 ----A---- C:\WINDOWS\system32\SET365.tmp
2009-05-17 15:52:41 ----A---- C:\WINDOWS\system32\SET395.tmp
2009-05-17 15:52:41 ----A---- C:\WINDOWS\system32\SET394.tmp
2009-05-17 15:52:41 ----A---- C:\WINDOWS\system32\SET393.tmp
2009-05-17 15:52:40 ----A---- C:\WINDOWS\system32\SET3B4.tmp
2009-05-17 15:52:40 ----A---- C:\WINDOWS\system32\SET3B3.tmp
2009-05-17 15:52:40 ----A---- C:\WINDOWS\system32\SET3B2.tmp
2009-05-17 15:52:40 ----A---- C:\WINDOWS\system32\SET3B0.tmp
2009-05-17 15:52:40 ----A---- C:\WINDOWS\system32\SET3AE.tmp
2009-05-17 15:52:40 ----A---- C:\WINDOWS\system32\SET3A4.tmp
2009-05-17 15:52:40 ----A---- C:\WINDOWS\system32\SET3A0.tmp
2009-05-17 15:52:40 ----A---- C:\WINDOWS\system32\SET39F.tmp
2009-05-17 15:52:40 ----A---- C:\WINDOWS\system32\SET39E.tmp
2009-05-17 15:52:40 ----A---- C:\WINDOWS\system32\SET39C.tmp
2009-05-17 15:52:40 ----A---- C:\WINDOWS\system32\SET39A.tmp
2009-05-17 15:52:40 ----A---- C:\WINDOWS\system32\SET398.tmp
2009-05-17 15:52:40 ----A---- C:\WINDOWS\system32\SET397.tmp
2009-05-17 15:52:40 ----A---- C:\WINDOWS\system32\SET396.tmp
2009-05-17 15:52:39 ----A---- C:\WINDOWS\system32\SET6E7.tmp
2009-05-17 15:52:39 ----A---- C:\WINDOWS\system32\SET6E1.tmp
2009-05-17 15:52:39 ----A---- C:\WINDOWS\system32\SET3C0.tmp
2009-05-17 15:52:39 ----A---- C:\WINDOWS\system32\SET3BF.tmp
2009-05-17 15:52:39 ----A---- C:\WINDOWS\system32\SET3BD.tmp
2009-05-17 15:52:39 ----A---- C:\WINDOWS\system32\SET3B8.tmp
2009-05-17 15:52:39 ----A---- C:\WINDOWS\system32\SET3B6.tmp
2009-05-17 15:52:38 ----A---- C:\WINDOWS\system32\SET3D2.tmp
2009-05-17 15:52:38 ----A---- C:\WINDOWS\system32\SET3C6.tmp
2009-05-17 15:52:37 ----A---- C:\WINDOWS\system32\SET3EE.tmp
2009-05-17 15:52:37 ----A---- C:\WINDOWS\system32\SET3EC.tmp
2009-05-17 15:52:37 ----A---- C:\WINDOWS\system32\SET3E6.tmp
2009-05-17 15:52:37 ----A---- C:\WINDOWS\system32\SET3E4.tmp
2009-05-17 15:52:37 ----A---- C:\WINDOWS\system32\SET3DC.tmp
2009-05-17 15:52:37 ----A---- C:\WINDOWS\system32\SET3D8.tmp
2009-05-17 15:52:37 ----A---- C:\WINDOWS\system32\SET3D7.tmp
2009-05-17 15:52:37 ----A---- C:\WINDOWS\system32\SET3D6.tmp
2009-05-17 15:52:33 ----A---- C:\WINDOWS\system32\SET403.tmp
2009-05-17 15:52:33 ----A---- C:\WINDOWS\system32\SET3F7.tmp
2009-05-17 15:52:33 ----A---- C:\WINDOWS\system32\SET3F5.tmp
2009-05-17 15:52:33 ----A---- C:\WINDOWS\system32\SET3F3.tmp
2009-05-17 15:52:32 ----A---- C:\WINDOWS\system32\SET41A.tmp
2009-05-17 15:52:32 ----A---- C:\WINDOWS\system32\SET418.tmp
2009-05-17 15:52:32 ----A---- C:\WINDOWS\system32\SET416.tmp
2009-05-17 15:52:32 ----A---- C:\WINDOWS\system32\SET412.tmp
2009-05-17 15:52:31 ----A---- C:\WINDOWS\system32\SET426.tmp
2009-05-17 15:52:31 ----A---- C:\WINDOWS\system32\SET424.tmp
2009-05-17 15:52:31 ----A---- C:\WINDOWS\system32\SET421.tmp
2009-05-17 15:52:31 ----A---- C:\WINDOWS\system32\SET41F.tmp
2009-05-17 15:52:30 ----A---- C:\WINDOWS\system32\SET44B.tmp
2009-05-17 15:52:30 ----A---- C:\WINDOWS\system32\SET449.tmp
2009-05-17 15:52:30 ----A---- C:\WINDOWS\system32\SET447.tmp
2009-05-17 15:52:30 ----A---- C:\WINDOWS\system32\SET445.tmp
2009-05-17 15:52:30 ----A---- C:\WINDOWS\system32\SET43F.tmp
2009-05-17 15:52:30 ----A---- C:\WINDOWS\system32\SET434.tmp
2009-05-17 15:52:29 ----A---- C:\WINDOWS\system32\SET465.tmp
2009-05-17 15:52:29 ----A---- C:\WINDOWS\system32\SET45F.tmp
2009-05-17 15:52:29 ----A---- C:\WINDOWS\system32\SET45D.tmp
2009-05-17 15:52:29 ----A---- C:\WINDOWS\system32\SET45C.tmp
2009-05-17 15:52:29 ----A---- C:\WINDOWS\system32\SET45A.tmp
2009-05-17 15:52:29 ----A---- C:\WINDOWS\system32\SET453.tmp
2009-05-17 15:52:29 ----A---- C:\WINDOWS\system32\SET44F.tmp
2009-05-17 15:52:29 ----A---- C:\WINDOWS\system32\SET44E.tmp
2009-05-17 15:52:28 ----A---- C:\WINDOWS\system32\SET478.tmp
2009-05-17 15:52:28 ----A---- C:\WINDOWS\system32\SET477.tmp
2009-05-17 15:52:28 ----A---- C:\WINDOWS\system32\SET476.tmp
2009-05-17 15:52:28 ----A---- C:\WINDOWS\system32\SET474.tmp
2009-05-17 15:52:28 ----A---- C:\WINDOWS\system32\SET46F.tmp
2009-05-17 15:52:28 ----A---- C:\WINDOWS\SET55E.tmp
2009-05-17 15:52:28 ----A---- C:\WINDOWS\002943_.tmp
2009-05-17 15:52:27 ----A---- C:\WINDOWS\system32\SET491.tmp
2009-05-17 15:52:27 ----A---- C:\WINDOWS\system32\SET48B.tmp
2009-05-17 15:52:27 ----A---- C:\WINDOWS\system32\SET486.tmp
2009-05-17 15:52:27 ----A---- C:\WINDOWS\system32\SET47B.tmp
2009-05-17 15:52:27 ----A---- C:\WINDOWS\system32\SET47A.tmp
2009-05-17 15:52:25 ----A---- C:\WINDOWS\system32\SET4C4.tmp
2009-05-17 15:52:25 ----A---- C:\WINDOWS\system32\SET4C2.tmp
2009-05-17 15:52:25 ----A---- C:\WINDOWS\system32\SET4B1.tmp
2009-05-17 15:52:25 ----A---- C:\WINDOWS\system32\SET4A7.tmp
2009-05-17 15:52:25 ----A---- C:\WINDOWS\system32\SET4A2.tmp
2009-05-17 15:52:25 ----A---- C:\WINDOWS\system32\SET4A1.tmp
2009-05-17 15:52:24 ----A---- C:\WINDOWS\system32\SET4E6.tmp
2009-05-17 15:52:24 ----A---- C:\WINDOWS\system32\SET4E5.tmp
2009-05-17 15:52:24 ----A---- C:\WINDOWS\system32\SET4E4.tmp
2009-05-17 15:52:24 ----A---- C:\WINDOWS\system32\SET4E2.tmp
2009-05-17 15:52:24 ----A---- C:\WINDOWS\system32\SET4E0.tmp
2009-05-17 15:52:24 ----A---- C:\WINDOWS\system32\SET4DF.tmp
2009-05-17 15:52:24 ----A---- C:\WINDOWS\system32\SET4DE.tmp
2009-05-17 15:52:24 ----A---- C:\WINDOWS\system32\SET4DD.tmp
2009-05-17 15:52:24 ----A---- C:\WINDOWS\system32\SET4DB.tmp
2009-05-17 15:52:24 ----A---- C:\WINDOWS\system32\SET4DA.tmp
2009-05-17 15:52:24 ----A---- C:\WINDOWS\system32\SET4D9.tmp
2009-05-17 15:52:24 ----A---- C:\WINDOWS\system32\SET4D5.tmp
2009-05-17 15:52:24 ----A---- C:\WINDOWS\system32\SET4D0.tmp
2009-05-17 15:52:24 ----A---- C:\WINDOWS\system32\SET4CD.tmp
2009-05-17 15:52:24 ----A---- C:\WINDOWS\system32\SET4C8.tmp
2009-05-17 15:52:24 ----A---- C:\WINDOWS\system32\SET4C5.tmp
2009-05-17 15:52:23 ----A---- C:\WINDOWS\system32\SET501.tmp
2009-05-17 15:52:23 ----A---- C:\WINDOWS\system32\SET4FA.tmp
2009-05-17 15:52:23 ----A---- C:\WINDOWS\system32\SET4F2.tmp
2009-05-17 15:52:23 ----A---- C:\WINDOWS\system32\SET4F1.tmp
2009-05-17 15:52:23 ----A---- C:\WINDOWS\system32\SET4EC.tmp
2009-05-17 15:52:23 ----A---- C:\WINDOWS\system32\SET4EA.tmp
2009-05-17 15:52:23 ----A---- C:\WINDOWS\system32\SET4E8.tmp
2009-05-17 15:52:23 ----A---- C:\WINDOWS\system32\SET4E7.tmp
2009-05-17 15:52:22 ----A---- C:\WINDOWS\system32\SET51D.tmp
2009-05-17 15:52:22 ----A---- C:\WINDOWS\system32\SET51C.tmp
2009-05-17 15:52:22 ----A---- C:\WINDOWS\system32\SET519.tmp
2009-05-17 15:52:22 ----A---- C:\WINDOWS\system32\SET518.tmp
2009-05-17 15:52:22 ----A---- C:\WINDOWS\system32\SET517.tmp
2009-05-17 15:52:22 ----A---- C:\WINDOWS\system32\SET514.tmp
2009-05-17 15:52:22 ----A---- C:\WINDOWS\system32\SET510.tmp
2009-05-17 15:52:22 ----A---- C:\WINDOWS\system32\SET50E.tmp
2009-05-17 15:52:22 ----A---- C:\WINDOWS\system32\SET50B.tmp
2009-05-17 15:52:21 ----A---- C:\WINDOWS\system32\SET527.tmp
2009-05-17 15:52:21 ----A---- C:\WINDOWS\system32\SET522.tmp
2009-05-17 15:52:21 ----A---- C:\WINDOWS\system32\SET521.tmp
2009-05-17 15:52:19 ----A---- C:\WINDOWS\system32\SET534.tmp
2009-05-17 15:52:19 ----A---- C:\WINDOWS\system32\SET531.tmp
2009-05-17 15:52:19 ----A---- C:\WINDOWS\system32\SET52F.tmp
2009-05-17 15:52:19 ----A---- C:\WINDOWS\system32\SET52C.tmp
2009-05-17 15:52:18 ----A---- C:\WINDOWS\system32\SET539.tmp
2009-05-17 15:47:18 ----D---- C:\Documents and Settings\All Users\Application Data\Azureus
2009-05-17 15:47:11 ----D---- C:\Documents and Settings\rasta\Application Data\Azureus
2009-05-17 15:44:08 ----D---- C:\Program Files\Vuze
2009-05-17 15:43:06 ----HD---- C:\WINDOWS\system32\GroupPolicy
2009-05-17 15:30:46 ----A---- C:\WINDOWS\system32\javaws.exe
2009-05-17 15:30:46 ----A---- C:\WINDOWS\system32\javaw.exe
2009-05-17 15:30:46 ----A---- C:\WINDOWS\system32\java.exe
2009-05-17 15:30:46 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-05-17 15:16:03 ----D---- C:\Documents and Settings\rasta\Application Data\Sun
2009-05-17 15:14:04 ----D---- C:\Program Files\Microsoft
2009-05-17 15:13:46 ----D---- C:\Program Files\Windows Live SkyDrive
2009-05-17 15:13:23 ----D---- C:\Program Files\Windows Live
2009-05-17 15:08:18 ----D---- C:\Program Files\Fichiers communs\Windows Live
2009-05-17 15:07:13 ----D---- C:\WINDOWS\system32\CatRoot_bak
2009-05-17 15:01:26 ----D---- C:\Program Files\Fichiers communs\Everstrike Software
2009-05-17 14:57:11 ----D---- C:\Documents and Settings\rasta\Application Data\Mozilla
2009-05-17 14:56:04 ----D---- C:\Program Files\Mozilla Firefox
2009-05-17 14:50:16 ----D---- C:\Documents and Settings\rasta\Application Data\BitDefender
2009-05-17 14:50:01 ----D---- C:\Program Files\BitDefender
2009-05-17 14:50:01 ----D---- C:\Documents and Settings\All Users\Application Data\BitDefender
2009-05-17 14:49:30 ----D---- C:\Program Files\Fichiers communs\BitDefender
2009-05-17 14:42:19 ----A---- C:\WINDOWS\system32\LuResult.txt
2009-05-17 14:42:01 ----SHD---- C:\Config.Msi
2009-05-17 14:39:19 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2009-05-17 01:26:15 ----D---- C:\WINDOWS\system32\PreInstall
2009-05-17 01:26:14 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-05-17 01:23:39 ----SHD---- C:\RECYCLER
2009-05-17 01:22:25 ----RA---- C:\WINDOWS\system32\nvuninst.exe
2009-05-17 01:22:25 ----D---- C:\WINDOWS\nview
2009-05-17 01:22:24 ----A---- C:\WINDOWS\system32\nvudisp.exe
2009-05-17 01:17:52 ----D---- C:\Program Files\comsummer
2009-05-17 01:17:52 ----D---- C:\Documents and Settings\rasta\Application Data\Macromedia
2009-05-17 01:17:52 ----A---- C:\WINDOWS\comsummer.ini
2009-05-17 01:17:32 ----D---- C:\Program Files\Yahoo!
2009-05-17 01:17:25 ----HDC---- C:\WINDOWS\$NtUninstallKB908246$
2009-05-17 01:17:12 ----HDC---- C:\WINDOWS\$NtUninstallKB908531$
2009-05-17 01:16:59 ----HDC---- C:\WINDOWS\$NtUninstallKB898444$
2009-05-17 01:16:40 ----HDC---- C:\WINDOWS\$NtUninstallKB914548$
2009-05-17 01:16:24 ----HDC---- C:\WINDOWS\$NtUninstallKB911565$
2009-05-17 01:16:09 ----HDC---- C:\WINDOWS\$NtUninstallKB910393$
2009-05-17 01:13:33 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2009-05-17 01:13:23 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
2009-05-17 01:13:16 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-05-17 01:13:07 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2009-05-17 01:12:21 ----D---- C:\WINDOWS\Downloaded Installations
2009-05-17 01:10:44 ----A---- C:\WINDOWS\system32\Uninstall_eRecovery.exe
2009-05-17 01:10:44 ----A---- C:\WINDOWS\system32\ERUpdateHidden.EXE
2009-05-17 01:10:44 ----A---- C:\WINDOWS\system32\CloseProcessWindow.dll
2009-05-17 01:10:44 ----A---- C:\WINDOWS\system32\ClearEvent.exe
2009-05-17 01:10:44 ----A---- C:\WINDOWS\system32\CheckD2DSystem.exe
2009-05-17 01:10:44 ----A---- C:\WINDOWS\system32\Acer EULA.txt
2009-05-17 01:10:15 ----A---- C:\WINDOWS\system32\eRecUtil.dll
2009-05-17 01:10:14 ----A---- C:\WINDOWS\system32\SysMonitor.exe
2009-05-17 01:10:14 ----A---- C:\WINDOWS\system32\ScrollBarLib.dll
2009-05-17 01:10:14 ----A---- C:\WINDOWS\system32\Interop.Shell32.dll
2009-05-17 01:10:14 ----A---- C:\WINDOWS\system32\Acer.Empowering.Windows.Forms.dll
2009-05-17 01:10:07 ----D---- C:\Acer
2009-05-17 01:09:57 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-05-17 01:09:13 ----D---- C:\Program Files\Java
2009-05-17 01:09:13 ----D---- C:\Program Files\Fichiers communs\Java
2009-05-17 01:08:29 ----D---- C:\Documents and Settings\rasta\Application Data\Identities
2009-05-17 01:08:29 ----ASH---- C:\Documents and Settings\rasta\Application Data\desktop.ini
2009-05-17 01:08:28 ----SD---- C:\Documents and Settings\rasta\Application Data\Microsoft
======List of files/folders modified in the last 1 months======
2009-05-17 18:35:31 ----AD---- C:\WINDOWS
2009-05-17 18:35:25 ----D---- C:\WINDOWS\Prefetch
2009-05-17 18:33:15 ----D---- C:\WINDOWS\system32\wbem
2009-05-17 18:33:14 ----D---- C:\WINDOWS\system32\Setup
2009-05-17 18:33:14 ----AD---- C:\WINDOWS\system32\drivers
2009-05-17 18:33:14 ----AD---- C:\WINDOWS\system32
2009-05-17 18:33:09 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-05-17 18:33:09 ----HD---- C:\WINDOWS\inf
2009-05-17 18:33:04 ----D---- C:\Program Files\Movie Maker
2009-05-17 18:33:04 ----D---- C:\Program Files\Internet Explorer
2009-05-17 18:33:03 ----D---- C:\WINDOWS\system32\Restore
2009-05-17 18:33:03 ----D---- C:\WINDOWS\system32\npp
2009-05-17 18:33:01 ----D---- C:\WINDOWS\msagent
2009-05-17 18:32:59 ----D---- C:\WINDOWS\srchasst
2009-05-17 18:32:57 ----D---- C:\WINDOWS\ime
2009-05-17 18:32:56 ----D---- C:\Program Files\NetMeeting
2009-05-17 18:32:54 ----D---- C:\WINDOWS\system32\Com
2009-05-17 18:32:54 ----D---- C:\WINDOWS\AppPatch
2009-05-17 18:32:52 ----D---- C:\Program Files\Windows NT
2009-05-17 18:32:51 ----D---- C:\Program Files\Outlook Express
2009-05-17 18:32:49 ----D---- C:\WINDOWS\Help
2009-05-17 18:32:48 ----D---- C:\Program Files\Fichiers communs\System
2009-05-17 18:32:31 ----RSD---- C:\WINDOWS\Fonts
2009-05-17 18:32:29 ----AD---- C:\WINDOWS\system32\oobe
2009-05-17 18:32:28 ----D---- C:\WINDOWS\system32\usmt
2009-05-17 18:32:27 ----AD---- C:\WINDOWS\system
2009-05-17 18:29:49 ----D---- C:\WINDOWS\system32\CatRoot2
2009-05-17 18:29:26 ----D---- C:\WINDOWS\security
2009-05-17 18:29:14 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-05-17 18:28:59 ----D---- C:\WINDOWS\temp
2009-05-17 18:23:29 ----D---- C:\WINDOWS\ehome
2009-05-17 18:19:28 ----D---- C:\WINDOWS\system32\CatRoot
2009-05-17 18:15:30 ----D---- C:\WINDOWS\SoftwareDistribution
2009-05-17 18:15:29 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-05-17 18:06:02 ----A---- C:\WINDOWS\win.ini
2009-05-17 17:57:57 ----SHD---- C:\WINDOWS\Installer
2009-05-17 17:57:28 ----D---- C:\WINDOWS\Registration
2009-05-17 17:55:32 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-05-17 17:54:03 ----RD---- C:\Program Files
2009-05-17 17:09:10 ----A---- C:\WINDOWS\system32\txmlutil.dll
2009-05-17 15:14:14 ----D---- C:\WINDOWS\WinSxS
2009-05-17 15:13:52 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-05-17 15:13:52 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-05-17 15:13:06 ----D---- C:\WINDOWS\pchealth
2009-05-17 15:10:49 ----A---- C:\WINDOWS\imsins.BAK
2009-05-17 15:10:43 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-05-17 15:08:18 ----D---- C:\Program Files\Fichiers communs
2009-05-17 15:07:13 ----D---- C:\WINDOWS\Debug
2009-05-17 15:02:09 ----HD---- C:\WINDOWS\$hf_mig$
2009-05-17 14:41:54 ----SD---- C:\WINDOWS\Tasks
2009-05-17 10:03:51 ----AD---- C:\GUIDE
2009-05-17 10:03:19 ----RD---- C:\WINDOWS\Web
2009-05-17 09:59:40 ----D---- C:\WINDOWS\system32\URTTemp
2009-05-17 09:59:38 ----D---- C:\WINDOWS\system32\spool
2009-05-17 09:59:36 ----D---- C:\WINDOWS\system32\RTCOM
2009-05-17 09:59:36 ----D---- C:\WINDOWS\system32\ras
2009-05-17 09:59:30 ----D---- C:\WINDOWS\system32\mui
2009-05-17 09:59:30 ----D---- C:\WINDOWS\system32\MsDtc
2009-05-17 09:59:16 ----D---- C:\WINDOWS\system32\IME
2009-05-17 09:59:14 ----D---- C:\WINDOWS\system32\icsxml
2009-05-17 09:59:14 ----D---- C:\WINDOWS\system32\ias
2009-05-17 09:54:25 ----D---- C:\WINDOWS\system32\config
2009-05-17 09:54:01 ----D---- C:\WINDOWS\Resources
2009-05-17 09:53:55 ----D---- C:\WINDOWS\RegisteredPackages
2009-05-17 09:53:34 ----D---- C:\WINDOWS\PeerNet
2009-05-17 09:53:19 ----RD---- C:\WINDOWS\Offline Web Pages
2009-05-17 09:53:19 ----D---- C:\WINDOWS\msapps
2009-05-17 09:52:34 ----D---- C:\WINDOWS\Microsoft.NET
2009-05-17 09:52:32 ----D---- C:\WINDOWS\Media
2009-05-17 09:52:26 ----D---- C:\WINDOWS\java
2009-05-17 09:45:34 ----RSD---- C:\WINDOWS\assembly
2009-05-17 09:45:34 ----D---- C:\WINDOWS\Cursors
2009-05-17 09:44:55 ----D---- C:\WINDOWS\addins
2009-05-17 09:44:55 ----D---- C:\WINDOWS\AcerDRV
2009-05-17 09:44:53 ----HDC---- C:\WINDOWS\$UninstallOCA-X86Fre-ENU$
2009-05-17 09:44:53 ----HDC---- C:\WINDOWS\$NtUninstallKB913580$
2009-05-17 09:44:51 ----HDC---- C:\WINDOWS\$NtUninstallKB913446$
2009-05-17 09:44:50 ----HDC---- C:\WINDOWS\$NtUninstallKB912945$
2009-05-17 09:44:39 ----HDC---- C:\WINDOWS\$NtUninstallKB912919$
2009-05-17 09:44:39 ----HDC---- C:\WINDOWS\$NtUninstallKB912812$
2009-05-17 09:44:28 ----HDC---- C:\WINDOWS\$NtUninstallKB911927$
2009-05-17 09:44:28 ----HDC---- C:\WINDOWS\$NtUninstallKB911567$
2009-05-17 09:44:25 ----HDC---- C:\WINDOWS\$NtUninstallKB911564$
2009-05-17 09:44:25 ----HDC---- C:\WINDOWS\$NtUninstallKB911562$
2009-05-17 09:44:24 ----HDC---- C:\WINDOWS\$NtUninstallKB910437$
2009-05-17 09:44:20 ----HDC---- C:\WINDOWS\$NtUninstallKB908531_0$
2009-05-17 09:44:15 ----HDC---- C:\WINDOWS\$NtUninstallKB908519$
2009-05-17 09:44:15 ----HDC---- C:\WINDOWS\$NtUninstallKB906569$
2009-05-17 09:44:13 ----HDC---- C:\WINDOWS\$NtUninstallKB905915$
2009-05-17 09:44:03 ----HDC---- C:\WINDOWS\$NtUninstallKB905749$
2009-05-17 09:44:03 ----HDC---- C:\WINDOWS\$NtUninstallKB905414$
2009-05-17 09:44:02 ----HDC---- C:\WINDOWS\$NtUninstallKB904706_0$
2009-05-17 09:44:00 ----HDC---- C:\WINDOWS\$NtUninstallKB904706$
2009-05-17 09:44:00 ----HDC---- C:\WINDOWS\$NtUninstallKB903235$
2009-05-17 09:43:56 ----HDC---- C:\WINDOWS\$NtUninstallKB903157$
2009-05-17 09:43:56 ----HDC---- C:\WINDOWS\$NtUninstallKB902841$
2009-05-17 09:43:56 ----HDC---- C:\WINDOWS\$NtUninstallKB902400$
2009-05-17 09:43:50 ----HDC---- C:\WINDOWS\$NtUninstallKB901214$
2009-05-17 09:43:49 ----HDC---- C:\WINDOWS\$NtUninstallKB901190$
2009-05-17 09:43:48 ----HDC---- C:\WINDOWS\$NtUninstallKB901017$
2009-05-17 09:43:48 ----HDC---- C:\WINDOWS\$NtUninstallKB900725$
2009-05-17 09:43:38 ----HDC---- C:\WINDOWS\$NtUninstallKB900325$
2009-05-17 09:43:15 ----HDC---- C:\WINDOWS\$NtUninstallKB899591$
2009-05-17 09:43:15 ----HDC---- C:\WINDOWS\$NtUninstallKB899589$
2009-05-17 09:43:14 ----HDC---- C:\WINDOWS\$NtUninstallKB899588$
2009-05-17 09:43:14 ----HDC---- C:\WINDOWS\$NtUninstallKB899587$
2009-05-17 09:43:13 ----HDC---- C:\WINDOWS\$NtUninstallKB899510$
2009-05-17 09:43:13 ----HDC---- C:\WINDOWS\$NtUninstallKB899337$
2009-05-17 09:43:11 ----HDC---- C:\WINDOWS\$NtUninstallKB898458$
2009-05-17 09:43:11 ----HDC---- C:\WINDOWS\$NtUninstallKB896727$
2009-05-17 09:43:01 ----HDC---- C:\WINDOWS\$NtUninstallKB896428$
2009-05-17 09:43:00 ----HDC---- C:\WINDOWS\$NtUninstallKB896424$
2009-05-17 09:42:59 ----HDC---- C:\WINDOWS\$NtUninstallKB896423$
2009-05-17 09:42:59 ----HDC---- C:\WINDOWS\$NtUninstallKB896422$
2009-05-17 09:42:58 ----HDC---- C:\WINDOWS\$NtUninstallKB896358$
2009-05-17 09:42:56 ----HDC---- C:\WINDOWS\$NtUninstallKB896256$
2009-05-17 09:42:49 ----HDC---- C:\WINDOWS\$NtUninstallKB895961$
2009-05-17 09:42:48 ----HDC---- C:\WINDOWS\$NtUninstallKB894391$
2009-05-17 09:42:46 ----HDC---- C:\WINDOWS\$NtUninstallKB893756$
2009-05-17 09:42:45 ----HDC---- C:\WINDOWS\$NtUninstallKB893357$
2009-05-17 09:42:40 ----HDC---- C:\WINDOWS\$NtUninstallKB893086$
2009-05-17 09:42:35 ----HDC---- C:\WINDOWS\$NtUninstallKB891781$
2009-05-17 09:42:35 ----HDC---- C:\WINDOWS\$NtUninstallKB891593$
2009-05-17 09:42:34 ----HDC---- C:\WINDOWS\$NtUninstallKB890923$
2009-05-17 09:42:25 ----HDC---- C:\WINDOWS\$NtUninstallKB890859$
2009-05-17 09:42:20 ----HDC---- C:\WINDOWS\$NtUninstallKB890175$
2009-05-17 09:42:15 ----HDC---- C:\WINDOWS\$NtUninstallKB890047$
2009-05-17 09:42:15 ----HDC---- C:\WINDOWS\$NtUninstallKB890046_0$
2009-05-17 09:42:15 ----HDC---- C:\WINDOWS\$NtUninstallKB890046$
2009-05-17 09:42:15 ----HDC---- C:\WINDOWS\$NtUninstallKB888795$
2009-05-17 09:42:14 ----HDC---- C:\WINDOWS\$NtUninstallKB888302$
2009-05-17 09:42:14 ----HDC---- C:\WINDOWS\$NtUninstallKB888239$
2009-05-17 09:42:14 ----HDC---- C:\WINDOWS\$NtUninstallKB888113$
2009-05-17 09:42:13 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$
2009-05-17 09:42:12 ----HDC---- C:\WINDOWS\$NtUninstallKB887472$
2009-05-17 09:42:12 ----HDC---- C:\WINDOWS\$NtUninstallKB885836$
2009-05-17 09:42:12 ----HDC---- C:\WINDOWS\$NtUninstallKB885835$
2009-05-17 09:42:11 ----HDC---- C:\WINDOWS\$NtUninstallKB885250$
2009-05-17 09:42:11 ----HDC---- C:\WINDOWS\$NtUninstallKB883939$
2009-05-17 09:42:01 ----HDC---- C:\WINDOWS\$NtUninstallKB873339$
2009-05-17 09:42:01 ----HDC---- C:\WINDOWS\$NtUninstallKB873333$
2009-05-17 09:41:59 ----HDC---- C:\WINDOWS\$NtUninstallKB867282$
2009-05-17 09:40:19 ----AD---- C:\VALUEADD
2009-05-17 09:40:13 ----D---- C:\SYSINFO
2009-05-17 09:40:13 ----D---- C:\Program Files\xerox
2009-05-17 09:40:00 ----D---- C:\Program Files\Windows Plus
2009-05-17 09:39:44 ----D---- C:\Program Files\Services en ligne
2009-05-17 09:39:22 ----D---- C:\Program Files\Realtek
2009-05-17 09:39:20 ----D---- C:\Program Files\Oca History Tool
2009-05-17 09:37:45 ----D---- C:\Program Files\NewTech Infosystems
2009-05-17 09:37:26 ----D---- C:\Program Files\MSN Gaming Zone
2009-05-17 09:37:11 ----D---- C:\Program Files\MSN
2009-05-17 09:37:05 ----D---- C:\Program Files\microsoft frontpage
2009-05-17 09:37:05 ----D---- C:\Program Files\Messenger
2009-05-17 09:36:53 ----D---- C:\Program Files\GemMasterFrench
2009-05-17 09:36:50 ----D---- C:\Program Files\FrenchOtto
2009-05-17 09:36:34 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2009-05-17 09:36:34 ----D---- C:\Program Files\Fichiers communs\Services
2009-05-17 09:36:34 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-05-17 09:36:32 ----D---- C:\Program Files\Fichiers communs\NewTech Infosystems
2009-05-17 09:36:29 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-05-17 09:36:25 ----D---- C:\Program Files\Fichiers communs\LightScribe
2009-05-17 09:36:20 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-05-17 09:36:17 ----D---- C:\Program Files\Fichiers communs\Adobe
2009-05-17 09:36:17 ----D---- C:\Program Files\CyberLink
2009-05-17 09:35:12 ----D---- C:\Program Files\Adobe
2009-05-17 09:35:12 ----D---- C:\Program Files\Acer WLAN 11g USB Dongle
2009-05-17 09:35:10 ----AD---- C:\i386
2009-05-17 09:28:32 ----D---- C:\drv
2009-05-17 09:27:49 ----AD---- C:\dotnetfx
2009-05-17 09:22:44 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-05-17 09:22:08 ----AD---- C:\CMPNENTS
2009-05-17 01:22:03 ----A---- C:\WINDOWS\alaunch.ini
2009-05-17 01:16:13 ----D---- C:\Program Files\Windows Media Player
2009-05-17 01:11:22 ----HD---- C:\Program Files\InstallShield Installation Information
2009-05-17 01:08:54 ----A---- C:\WINDOWS\OEWABLog.txt
2009-05-17 01:08:28 ----D---- C:\Documents and Settings
2009-05-17 01:07:33 ----A---- C:\WINDOWS\setuplog.txt
2009-05-17 01:07:30 ----SHD---- C:\System Volume Information
2009-05-17 01:07:27 ----RASH---- C:\boot.ini
2009-05-17 01:04:41 ----D---- C:\WINDOWS\repair
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AvgArCln;Avg Anti-Rootkit Clean Driver; C:\WINDOWS\System32\DRIVERS\AvgArCln.sys [2007-01-18 3968]
R1 bdftdif;bdftdif; \??\C:\Program Files\Fichiers communs\BitDefender\BitDefender Firewall\bdftdif.sys []
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R2 LF30FS;LF30FS; \??\E:\LF30XP.sys []
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 bdfm;BDFM; C:\WINDOWS\system32\drivers\bdfm.sys [2009-05-17 111112]
R3 bdfsfltr;bdfsfltr; C:\WINDOWS\system32\drivers\bdfsfltr.sys [2009-05-17 242184]
R3 BDSelfPr;BDSelfPr; \??\C:\Program Files\BitDefender\BitDefender 2009\bdselfpr.sys []
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 int15.sys;int15.sys; \??\C:\Acer\Empowering Technology\eRecovery\int15.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-06-06 4284928]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2006-09-08 6144]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-05-16 6557408]
R3 psdfilter;psdfilter; \??\C:\WINDOWS\system32\Drivers\psdfilter.sys []
R3 psdvdisk;psdvdisk; \??\C:\WINDOWS\system32\Drivers\psdvdisk.sys []
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2006-07-10 244864]
R3 ZDPSp50;ZDPSp50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\ZDPSp50.sys [2004-10-25 17664]
S3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-07-18 1621504]
S3 MHNDRV;Pilote MHN; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008]
S3 Profos;Profos; \??\C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\profos.sys []
S3 Trufos;Trufos; \??\C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\trufos.sys []
S3 ZD1211BU(ZyDAS);ZyDAS ZD1211B IEEE 802.11 b+g Wireless LAN Driver (USB)(ZyDAS); C:\WINDOWS\system32\DRIVERS\zd1211Bu.sys [2005-10-28 402432]
S3 ZD1211U(ZyDAS);ZyDAS ZD1211 IEEE 802.11b+g Wireless LAN Driver (USB)(ZyDAS); C:\WINDOWS\system32\DRIVERS\zd1211u.sys [2005-10-04 280064]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AcerMemUsageCheckService;Memory Check Service; C:\Acer\Empowering Technology\ePerformance\MemCheck.exe [2006-05-11 28672]
R2 ehRecvr;Media Center Receiver Service; C:\WINDOWS\eHome\ehRecvr.exe [2006-04-09 237568]
R2 ehSched;Service de planification Media Center; C:\WINDOWS\eHome\ehSched.exe [2005-08-05 103424]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-05-17 152984]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [2006-02-17 73728]
R2 LIVESRV;BitDefender Desktop Update Service; C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe [2009-05-17 415024]
R2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-05 99328]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-05-16 159812]
R2 VSSERV;BitDefender Virus Shield; C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe [2009-05-17 1626112]
S2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-07-18 401408]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
S3 Arrakis3;BitDefender Arrakis Server; C:\Program Files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [2008-07-17 118784]
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2004-08-10 14336]
S3 scan;BitDefender Threat Scanner; C:\WINDOWS\System32\svchost.exe [2004-08-10 14336]
S3 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-08-03 38912]
-----------------EOF-----------------
le fichier info:
info.txt logfile of random's system information tool 1.06 2009-05-17 18:35:35
======Uninstall list======
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Acer eDataSecurity Management 2.0.3077-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1150\INTEL3~1\IDriver.exe /M{4AD13F68-CADA-4C6B-9759-C33753F89908} /l1036
Acer eDataSecurity Management-->C:\Acer\Empowering Technology\eDataSecurity\eDStbmngr.exe UNINSTALL 1
Acer Empowering Technology-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB6097D9-D722-4987-BD9E-A076E2848EE2}\setup.exe" -l0x40c -removeonly
Acer ePerformance Management-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7057702F-6D71-4F30-8000-9E72BC771887}\setup.exe" -l0x40c -removeonly
Acer WLAN 11g USB Dongle-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{0CB98AC0-D691-4B21-AD3D-95982517021D} /l1036
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 7.0-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70000000000}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class
ISPLAY -clean
AVG Anti-Rootkit Free-->C:\Program Files\GRISOFT\AVG Anti-Rootkit Free\Uninstall.exe
BitDefender Antivirus 2009-->MsiExec.exe /X{5DF86878-462F-41F2-96E0-E82EE57EC7D3}
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
comsummer-1024x768-->MsiExec.exe /I{D27E6ABB-AF22-4618-838E-B4A3A1B02F98}
Correctif n° 2 pour Windows XP Édition Media Center 2005-->C:\WINDOWS\$NtUninstallKB900325$\spuninst\spuninst.exe
Correctif pour Windows XP (KB888795)-->"C:\WINDOWS\$NtUninstallKB888795$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB891593)-->"C:\WINDOWS\$NtUninstallKB891593$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB893357)-->"C:\WINDOWS\$NtUninstallKB893357$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB896256)-->"C:\WINDOWS\$NtUninstallKB896256$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB898444)-->"C:\WINDOWS\$NtUninstallKB898444$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB899337)-->"C:\WINDOWS\$NtUninstallKB899337$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB899510)-->"C:\WINDOWS\$NtUninstallKB899510$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB902841)-->"C:\WINDOWS\$NtUninstallKB902841$\spuninst\spuninst.exe"
Correctif pour Windows XP (KB906569)-->"C:\WINDOWS\$NtUninstallKB906569$\spuninst\spuninst.exe"
Correctif Windows XP - KB867282-->C:\WINDOWS\$NtUninstallKB867282$\spuninst\spuninst.exe
Correctif Windows XP - KB873333-->C:\WINDOWS\$NtUninstallKB873333$\spuninst\spuninst.exe
Correctif Windows XP - KB873339-->C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
Correctif Windows XP - KB885250-->C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe
Correctif Windows XP - KB885835-->C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
Correctif Windows XP - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
Correctif Windows XP - KB887472-->C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
Correctif Windows XP - KB888113-->C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe
Correctif Windows XP - KB888239-->C:\WINDOWS\$NtUninstallKB888239$\spuninst\spuninst.exe
Correctif Windows XP - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
Correctif Windows XP - KB890047-->C:\WINDOWS\$NtUninstallKB890047$\spuninst\spuninst.exe
Correctif Windows XP - KB890175-->C:\WINDOWS\$NtUninstallKB890175$\spuninst\spuninst.exe
Correctif Windows XP - KB890859-->"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
Correctif Windows XP - KB890923-->"C:\WINDOWS\$NtUninstallKB890923$\spuninst\spuninst.exe"
Correctif Windows XP - KB891781-->C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
Correctif Windows XP - KB893086-->"C:\WINDOWS\$NtUninstallKB893086$\spuninst\spuninst.exe"
Correctif Windows XP - KB895961-->"C:\WINDOWS\$NtUninstallKB895961$\spuninst\spuninst.exe"
GemMaster Mystic-->"C:\Program Files\GemMasterFrench\uninstallgemmaster.exe"
High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Documents and Settings\rasta\Bureau\HijackThis.exe" /uninstall
Hotfix for Windows Media Player 10 (KB903157)-->"C:\WINDOWS\$NtUninstallKB903157$\spuninst\spuninst.exe"
Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
Lock Folder XP 3.6-->"E:\Uninstall.exe" "C:\Program Files\Fichiers communs\Everstrike Software\Lock Folder XP 3.6\install.log"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Mise à jour de sécurité pour Lecteur Windows Media (KB911564)-->"C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB883939)-->"C:\WINDOWS\$NtUninstallKB883939$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB890046)-->"C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB893756)-->"C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896358)-->"C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896422)-->"C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896423)-->"C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896424)-->"C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896428)-->"C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899587)-->"C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899588)-->"C:\WINDOWS\$NtUninstallKB899588$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899589)-->"C:\WINDOWS\$NtUninstallKB899589$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899591)-->"C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB900725)-->"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901017)-->"C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901190)-->"C:\WINDOWS\$NtUninstallKB901190$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901214)-->"C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB902400)-->"C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB903235)-->"C:\WINDOWS\$NtUninstallKB903235$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB904706)-->"C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905414)-->"C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905749)-->"C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905915)-->"C:\WINDOWS\$NtUninstallKB905915$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB908519)-->"C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB908531)-->"C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911562)-->"C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911567)-->"C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911927)-->"C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB912812)-->"C:\WINDOWS\$NtUninstallKB912812$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB912919)-->"C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB913433)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB913433.inf
Mise à jour de sécurité pour Windows XP (KB913446)-->"C:\WINDOWS\$NtUninstallKB913446$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB913580)-->"C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
Mise à jour pour Lecteur Windows Media 10 (KB910393)-->"C:\WINDOWS\$NtUninstallKB910393$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB894391)-->"C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB896727)-->"C:\WINDOWS\$NtUninstallKB896727$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB910437)-->"C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB912945)-->"C:\WINDOWS\$NtUninstallKB912945$\spuninst\spuninst.exe"
Mozilla Firefox (3.0.10)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
NTI Backup NOW! 4-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{385979FE-DC4F-4140-8EAD-A59625000D72} /l1036 BUN4
NTI CD & DVD-Maker-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} /l1036 CDM7
NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
OCA Client history tool install-->"C:\WINDOWS\$UninstallOCA-X86Fre-ENU$\spuninst\spuninst.exe"
Otto-->"C:\Program Files\FrenchOtto\uninstallotto.exe"
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.EXE" -uninstall
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -l0x40c -removeonly
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Sonic Encoders-->MsiExec.exe /I{9941F0AA-B903-4AF4-A055-83A9815CC011}
VLC media player 0.9.9-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Vuze-->C:\Program Files\Vuze\uninstall.exe
Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows XP Media Center Edition 2005 KB908246-->"C:\WINDOWS\$NtUninstallKB908246$\spuninst\spuninst.exe"
Windows XP Media Center Edition 2005 KB914548-->"C:\WINDOWS\$NtUninstallKB914548$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Yahoo! Toolbar avec bloqueur de fenêtres pop-up-->C:\PROGRA~1\Yahoo!\common\unyt.exe
======Security center information======
AV: BitDefender Antivirus
======System event log======
Computer Name: ACER-DC6C4D74B4
Event Code: 7035
Message: Un contrôle Arrêter a correctement été envoyé au service Fax.
Record Number: 5
Source Name: Service Control Manager
Time Written: 20090517010848.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM
Computer Name: ACER-DC6C4D74B4
Event Code: 121
Message: Port A is up with 100 Mbps
Record Number: 4
Source Name: yukonwxp
Time Written: 200905170
Oula, c'est quoi ce pâté
Pour me transmettre les rapports :
--> Clique sur ce lien : http://www.cijoint.fr/
--> Clique sur Parcourir... et cherche le fichier du rapport que tu souhaites me transmettre.
--> Clique sur Ouvrir .
--> Clique sur Cliquez ici pour déposer le fichier .
--> Un lien de cette forme, http://www.cijoint.fr/cjlink.php?f [...] KAP5fU.txt, est ajouté dans la page.
--> Copie ce lien dans ta réponse.
