[Résolu]Urgent virus HiddenDriver + blue screen of death

Bonsoir, j'ai trouver un virus depuis quelque jours avec avg 8.5 internet security mais avg n'est pas capable de le "healer" donc je reste prit avec cette merde qui me fais crasher 2fois par jour et a chaque crash mon ordinateur ralentit.Comment enlever ce "HiddenDriver".Merci

Nom du virus : akedk4ka.SYS infection : Hiddendriver Result : Object is hidden.

Situer dans : c:\Windows\System32\Drivers

Je crois que ça va prendre un programme beaucoup plus efficace qu'un "Freeware".




Malwarebytes' Anti-Malware 1.39
Version de la base de données: 2492
Windows 6.0.6002 Service Pack 2

2009-07-23 20:42:21
mbam-log-2009-07-23 (20-42-21).txt

Type de recherche: Examen rapide
Eléments examinés: 80763
Temps écoulé: 5 minute(s), 33 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Logfile of random's system information tool 1.06 (written by random/random)
Run by darkritual at 2009-07-23 20:48:37
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
System drive C: has 347 GB (74%) free of 467 GB
Total RAM: 3070 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:48:52, on 2009-07-23
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe
C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
C:\WINDOWS\RtHDVCpl.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Xfire\Xfire.exe
C:\Program Files\Xfire\Xfire.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\darkritual\Downloads\RSIT.exe
C:\Program Files\trend micro\darkritual.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr? [...] pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr? [...] pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr? [...] pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
O1 - Hosts: 72.63.29.100 darkfrozenblizzard.dyndns.org
O1 - Hosts: 74.58.135.145 darkfrozenblizzard.dyndns.org
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [nmctxth] "C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe"
O4 - HKLM\..\Run: [nmapp] "C:\Program Files\Pure Networks\Network Magic\nmapp.exe" -autorun -nosplash
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O13 - Gopher Prefix:
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} -
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: WebEx Service Host for Support Center (atashost) - WebEx Communications, Inc. - C:\Windows\system32\atashost.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: AVG8 Firewall (avgfws8) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgfws8.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Pure Networks Platform Service (nmservice) - Cisco Systems, Inc. - C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Unknown owner - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: wampapache - Unknown owner - c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe (file missing)
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.1.33\bin\mysqld.exe (file missing)
O23 - Service: Stardock WindowBlinds (WindowBlinds) - Stardock Corporation - C:\PROGRA~1\STARDO~1\OBJECT~1\SKS\WINDOW~1\VistaSrv.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 7404 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
&Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2009-07-15 1111320]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll [2009-06-16 1004800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-04-23 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll []
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll [2009-06-16 1004800]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-04-23 148888]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2009-03-28 13687328]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2009-03-28 92704]
"nmctxth"=C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe [2009-04-07 642856]
"nmapp"=C:\Program Files\Pure Networks\Network Magic\nmapp.exe [2009-07-22 467240]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-01-15 4874240]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2009-07-13 414992]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-20 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG8_TRAY]
C:\PROGRA~1\AVG\AVG8\avgtray.exe [2009-06-10 1948440]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bandwidth Monitor Pro]
C:\Program Files\Bandwidth Monitor Pro\Bandwidth Monitor Pro.exe /minimized []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-06-27 152872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp]
c:\Program Files\Common Files\Symantec Shared\ccApp.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]
C:\Windows\ehome\ehTray.exe [2008-01-20 125952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Health Check Scheduler]
[ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
c:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpsysdrv]
c:\hp\support\hpsysdrv.exe [2007-04-18 65536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\isCfgWiz]
c:\Program Files\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\SYMCUW.exe -G:{77CCBE0B-A541-49a9-883E-14F8337EC861} -T:Config -REBOOT []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KBD]
C:\HP\KBD\KbdStub.EXE [2006-12-08 65536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\Windows\system32\NvCpl.dll [2009-03-28 13687328]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
C:\Windows\system32\NvMcTray.dll [2009-03-28 92704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvSvc]
C:\Windows\system32\nvsvc.dll [2009-03-28 641568]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OsdMaestro]
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe [2007-02-15 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Windows\RtHDVCpl.exe [2008-01-15 4874240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
c:\program files\steam\steam.exe [2009-07-07 1217784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe [2007-04-06 132760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UniblueSpeedUpMyPC]
C:\Program Files\Uniblue\SpeedUpMyPC\Launcher.exe [2009-04-29 614696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
C:\Program Files\Windows Defender\MSASCui.exe [2008-01-20 1008184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WindowsWelcomeCenter]
oobefldr.dll,ShowWelcomeCenter []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-20 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^darkritual^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^srcds.exe - Raccourci.lnk]
C:\COUNTE~1\srcds.exe -console -game cstrike +fps_max 500 -tickrate 100 +map de_dust2 +hostport 27014 +tv_port 27006 +maxplayers 10 []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="avgrsstx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WBSrv]
C:\Program Files\Stardoc2k\Object Desktop\SKS\WindowBlinds\wbsrv.dll [2007-09-24 124184]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\atashost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b3f3afe3-4ca5-11de-947e-001e901ddf9a}]
shell\AutoRun\command - K:\RunGame.exe


======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2009-07-23 20:48:38 ----D---- C:\Program Files\trend micro
2009-07-23 20:48:37 ----D---- C:\rsit
2009-07-23 20:35:50 ----D---- C:\Users\darkritual\AppData\Roaming\Malwarebytes
2009-07-23 20:35:45 ----D---- C:\ProgramData\Malwarebytes
2009-07-23 20:35:45 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-07-22 19:38:19 ----D---- C:\Program Files\Microsoft Silverlight
2009-07-22 19:37:41 ----A---- C:\Windows\system32\ieui.dll
2009-07-22 19:37:41 ----A---- C:\Windows\system32\iesetup.dll
2009-07-22 19:37:41 ----A---- C:\Windows\system32\iertutil.dll
2009-07-22 19:37:41 ----A---- C:\Windows\system32\iernonce.dll
2009-07-22 19:37:41 ----A---- C:\Windows\system32\ie4uinit.exe
2009-07-22 19:37:40 ----A---- C:\Windows\system32\wininet.dll
2009-07-22 19:37:40 ----A---- C:\Windows\system32\urlmon.dll
2009-07-22 19:37:40 ----A---- C:\Windows\system32\jsproxy.dll
2009-07-22 19:37:40 ----A---- C:\Windows\system32\iedkcs32.dll
2009-07-22 19:37:39 ----A---- C:\Windows\system32\mshtml.dll
2009-07-22 19:37:39 ----A---- C:\Windows\system32\ieframe.dll
2009-07-22 19:36:35 ----A---- C:\Windows\system32\msls31.dll
2009-07-22 19:36:35 ----A---- C:\Windows\system32\mshtmler.dll
2009-07-22 19:36:35 ----A---- C:\Windows\system32\mshtmled.dll
2009-07-22 19:36:35 ----A---- C:\Windows\system32\ieakeng.dll
2009-07-22 19:36:35 ----A---- C:\Windows\system32\icardie.dll
2009-07-22 19:36:35 ----A---- C:\Windows\system32\corpol.dll
2009-07-22 19:36:35 ----A---- C:\Windows\system32\admparse.dll
2009-07-22 19:36:34 ----A---- C:\Windows\system32\webcheck.dll
2009-07-22 19:36:34 ----A---- C:\Windows\system32\occache.dll
2009-07-22 19:36:34 ----A---- C:\Windows\system32\msrating.dll
2009-07-22 19:36:34 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-07-22 19:36:34 ----A---- C:\Windows\system32\licmgr10.dll
2009-07-22 19:36:34 ----A---- C:\Windows\system32\inseng.dll
2009-07-22 19:36:34 ----A---- C:\Windows\system32\imgutil.dll
2009-07-22 19:36:34 ----A---- C:\Windows\system32\iepeers.dll
2009-07-22 19:36:34 ----A---- C:\Windows\system32\ieaksie.dll
2009-07-22 19:36:34 ----A---- C:\Windows\system32\dxtrans.dll
2009-07-22 19:36:34 ----A---- C:\Windows\system32\dxtmsft.dll
2009-07-22 19:36:33 ----A---- C:\Windows\system32\WinFXDocObj.exe
2009-07-22 19:36:33 ----A---- C:\Windows\system32\wextract.exe
2009-07-22 19:36:33 ----A---- C:\Windows\system32\pngfilt.dll
2009-07-22 19:36:33 ----A---- C:\Windows\system32\mstime.dll
2009-07-22 19:36:33 ----A---- C:\Windows\system32\msfeedssync.exe
2009-07-22 19:36:33 ----A---- C:\Windows\system32\msfeeds.dll
2009-07-22 19:36:33 ----A---- C:\Windows\system32\ieakui.dll
2009-07-22 19:36:33 ----A---- C:\Windows\system32\advpack.dll
2009-07-22 19:36:32 ----A---- C:\Windows\system32\vbscript.dll
2009-07-22 19:36:32 ----A---- C:\Windows\system32\url.dll
2009-07-22 19:36:32 ----A---- C:\Windows\system32\jscript.dll
2009-07-22 19:36:32 ----A---- C:\Windows\system32\ieapfltr.dll
2009-07-22 19:36:31 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2009-07-22 19:36:31 ----A---- C:\Windows\system32\SetDepNx.exe
2009-07-22 19:36:31 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2009-07-22 19:36:31 ----A---- C:\Windows\system32\PDMSetup.exe
2009-07-22 19:36:31 ----A---- C:\Windows\system32\mshta.exe
2009-07-22 19:36:31 ----A---- C:\Windows\system32\iexpress.exe
2009-07-22 19:36:31 ----A---- C:\Windows\system32\ieUnatt.exe
2009-07-22 19:36:31 ----A---- C:\Windows\system32\iesysprep.dll
2009-07-22 19:15:59 ----D---- C:\Windows\system32\eu-ES
2009-07-22 19:15:59 ----D---- C:\Windows\system32\ca-ES
2009-07-22 19:15:55 ----D---- C:\Windows\system32\vi-VN
2009-07-22 18:59:45 ----D---- C:\Windows\system32\EventProviders
2009-07-22 18:58:54 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2009-07-22 18:58:51 ----A---- C:\Windows\system32\SLsvc.exe
2009-07-22 18:58:51 ----A---- C:\Windows\system32\SLCExt.dll
2009-07-22 18:58:49 ----A---- C:\Windows\system32\FunctionDiscoveryFolder.dll
2009-07-22 18:58:49 ----A---- C:\Windows\system32\DevicePairingWizard.exe
2009-07-22 18:58:47 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2009-07-22 18:58:45 ----A---- C:\Windows\system32\mssrch.dll
2009-07-22 18:58:42 ----A---- C:\Windows\system32\tquery.dll
2009-07-22 18:58:41 ----A---- C:\Windows\system32\RMActivate_isv.exe
2009-07-22 18:58:41 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-07-22 18:58:41 ----A---- C:\Windows\system32\lsasrv.dll
2009-07-22 18:58:40 ----A---- C:\Windows\system32\scavenge.dll
2009-07-22 18:58:40 ----A---- C:\Windows\system32\RMActivate.exe
2009-07-22 18:58:40 ----A---- C:\Windows\system32\msi.dll
2009-07-22 18:58:38 ----A---- C:\Windows\system32\WscEapPr.dll
2009-07-22 18:58:38 ----A---- C:\Windows\system32\wcnwiz2.dll
2009-07-22 18:58:38 ----A---- C:\Windows\system32\sysmain.dll
2009-07-22 18:58:38 ----A---- C:\Windows\system32\secproc_isv.dll
2009-07-22 18:58:38 ----A---- C:\Windows\system32\imapi2fs.dll
2009-07-22 18:58:36 ----A---- C:\Windows\system32\icardagt.exe
2009-07-22 18:58:35 ----A---- C:\Windows\system32\mf.dll
2009-07-22 18:58:35 ----A---- C:\Windows\system32\EhStorShell.dll
2009-07-22 18:58:35 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2009-07-22 18:58:34 ----A---- C:\Windows\system32\spreview.exe
2009-07-22 18:58:34 ----A---- C:\Windows\system32\spinstall.exe
2009-07-22 18:58:34 ----A---- C:\Windows\system32\drmv2clt.dll
2009-07-22 18:58:32 ----A---- C:\Windows\system32\spwizui.dll
2009-07-22 18:58:32 ----A---- C:\Windows\system32\shell32.dll
2009-07-22 18:58:32 ----A---- C:\Windows\system32\secproc.dll
2009-07-22 18:58:32 ----A---- C:\Windows\system32\SearchIndexer.exe
2009-07-22 18:58:32 ----A---- C:\Windows\system32\p2psvc.dll
2009-07-22 18:58:32 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2009-07-22 18:58:31 ----A---- C:\Windows\system32\mssvp.dll
2009-07-22 18:58:31 ----A---- C:\Windows\system32\mscoree.dll
2009-07-22 18:58:30 ----A---- C:\Windows\system32\mssphtb.dll
2009-07-22 18:58:30 ----A---- C:\Windows\system32\mssph.dll
2009-07-22 18:58:30 ----A---- C:\Windows\system32\MSMPEG2VDEC.DLL
2009-07-22 18:58:30 ----A---- C:\Windows\system32\imapi2.dll
2009-07-22 18:58:29 ----A---- C:\Windows\system32\sdohlp.dll
2009-07-22 18:58:29 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-07-22 18:58:29 ----A---- C:\Windows\system32\IMJP10K.DLL
2009-07-22 18:58:29 ----A---- C:\Windows\system32\esent.dll
2009-07-22 18:58:28 ----A---- C:\Windows\system32\wevtsvc.dll
2009-07-22 18:58:28 ----A---- C:\Windows\system32\sperror.dll
2009-07-22 18:58:28 ----A---- C:\Windows\system32\SLC.dll
2009-07-22 18:58:28 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2009-07-22 18:58:28 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-07-22 18:58:28 ----A---- C:\Windows\system32\korwbrkr.dll
2009-07-22 18:58:28 ----A---- C:\Windows\system32\IasMigReader.exe
2009-07-22 18:58:28 ----A---- C:\Windows\system32\DevicePairing.dll
2009-07-22 18:58:27 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2009-07-22 18:58:27 ----A---- C:\Windows\system32\msshsq.dll
2009-07-22 18:58:25 ----A---- C:\Windows\system32\wmp.dll
2009-07-22 18:58:24 ----A---- C:\Windows\system32\WMVCORE.DLL
2009-07-22 18:58:23 ----A---- C:\Windows\system32\msjet40.dll
2009-07-22 18:58:22 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-07-22 18:58:22 ----A---- C:\Windows\system32\MPSSVC.dll
2009-07-22 18:58:21 ----A---- C:\Windows\system32\Query.dll
2009-07-22 18:58:21 ----A---- C:\Windows\system32\msxml6.dll
2009-07-22 18:58:20 ----A---- C:\Windows\system32\qmgr.dll
2009-07-22 18:58:20 ----A---- C:\Windows\system32\P2PGraph.dll
2009-07-22 18:58:20 ----A---- C:\Windows\system32\ole32.dll
2009-07-22 18:58:20 ----A---- C:\Windows\system32\msexch40.dll
2009-07-22 18:58:20 ----A---- C:\Windows\system32\diagperf.dll
2009-07-22 18:58:19 ----A---- C:\Windows\system32\srchadmin.dll
2009-07-22 18:58:19 ----A---- C:\Windows\system32\ntdll.dll
2009-07-22 18:58:18 ----A---- C:\Windows\system32\winload.exe
2009-07-22 18:58:18 ----A---- C:\Windows\system32\msxml3.dll
2009-07-22 18:58:17 ----A---- C:\Windows\system32\uDWM.dll
2009-07-22 18:58:17 ----A---- C:\Windows\system32\mmc.exe
2009-07-22 18:58:17 ----A---- C:\Windows\system32\mblctr.exe
2009-07-22 18:58:17 ----A---- C:\Windows\system32\EncDec.dll
2009-07-22 18:58:17 ----A---- C:\Windows\system32\dfsr.exe
2009-07-22 18:58:16 ----A---- C:\Windows\system32\riched20.dll
2009-07-22 18:58:16 ----A---- C:\Windows\system32\IasMigPlugin.dll
2009-07-22 18:58:15 ----A---- C:\Windows\system32\RacEngn.dll
2009-07-22 18:58:15 ----A---- C:\Windows\system32\kernel32.dll
2009-07-22 18:58:15 ----A---- C:\Windows\system32\fdBth.dll
2009-07-22 18:58:14 ----A---- C:\Windows\system32\spoolss.dll
2009-07-22 18:58:14 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2009-07-22 18:58:14 ----A---- C:\Windows\system32\SearchFilterHost.exe
2009-07-22 18:58:14 ----A---- C:\Windows\system32\schedsvc.dll
2009-07-22 18:58:14 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2009-07-22 18:58:14 ----A---- C:\Windows\system32\milcore.dll
2009-07-22 18:58:14 ----A---- C:\Windows\system32\EhStorAPI.dll
2009-07-22 18:58:14 ----A---- C:\Windows\system32\CertEnroll.dll
2009-07-22 18:58:13 ----A---- C:\Windows\system32\msvcp60.dll
2009-07-22 18:58:13 ----A---- C:\Windows\system32\msjtes40.dll
2009-07-22 18:58:13 ----A---- C:\Windows\system32\infocardapi.dll
2009-07-22 18:58:13 ----A---- C:\Windows\system32\gpedit.dll
2009-07-22 18:58:13 ----A---- C:\Windows\system32\AuxiliaryDisplayDriverLib.dll
2009-07-22 18:58:12 ----A---- C:\Windows\system32\WinSAT.exe
2009-07-22 18:58:12 ----A---- C:\Windows\system32\es.dll
2009-07-22 18:58:11 ----A---- C:\Windows\system32\PresentationSettings.exe
2009-07-22 18:58:11 ----A---- C:\Windows\system32\mstext40.dll
2009-07-22 18:58:11 ----A---- C:\Windows\system32\Magnify.exe
2009-07-22 18:58:11 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2009-07-22 18:58:11 ----A---- C:\Windows\system32\advapi32.dll
2009-07-22 18:58:10 ----A---- C:\Windows\system32\WMPhoto.dll
2009-07-22 18:58:10 ----A---- C:\Windows\system32\WebClnt.dll
2009-07-22 18:58:10 ----A---- C:\Windows\system32\slwmi.dll
2009-07-22 18:58:10 ----A---- C:\Windows\system32\msexcl40.dll
2009-07-22 18:58:10 ----A---- C:\Windows\system32\comsvcs.dll
2009-07-22 18:58:09 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll
2009-07-22 18:58:09 ----A---- C:\Windows\system32\vssapi.dll
2009-07-22 18:58:09 ----A---- C:\Windows\system32\msxbde40.dll
2009-07-22 18:58:08 ----A---- C:\Windows\system32\mstscax.dll
2009-07-22 18:58:08 ----A---- C:\Windows\system32\authui.dll
2009-07-22 18:58:07 ----A---- C:\Windows\system32\NetProjW.dll
2009-07-22 18:58:07 ----A---- C:\Windows\system32\msrepl40.dll
2009-07-22 18:58:06 ----A---- C:\Windows\system32\rpcss.dll
2009-07-22 18:58:06 ----A---- C:\Windows\system32\propsys.dll
2009-07-22 18:58:06 ----A---- C:\Windows\system32\PresentationHost.exe
2009-07-22 18:58:06 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-07-22 18:58:06 ----A---- C:\Windows\system32\newdev.dll
2009-07-22 18:58:06 ----A---- C:\Windows\system32\iasrecst.dll
2009-07-22 18:58:06 ----A---- C:\Windows\system32\gpsvc.dll
2009-07-22 18:58:06 ----A---- C:\Windows\system32\eudcedit.exe
2009-07-22 18:58:06 ----A---- C:\Windows\system32\crypt32.dll
2009-07-22 18:58:06 ----A---- C:\Windows\explorer.exe
2009-07-22 18:58:05 ----A---- C:\Windows\system32\setupapi.dll
2009-07-22 18:58:05 ----A---- C:\Windows\system32\mspbde40.dll
2009-07-22 18:58:05 ----A---- C:\Windows\system32\d3d9.dll
2009-07-22 18:58:04 ----A---- C:\Windows\system32\msltus40.dll
2009-07-22 18:58:04 ----A---- C:\Windows\system32\mfc42.dll
2009-07-22 18:58:04 ----A---- C:\Windows\system32\davclnt.dll
2009-07-22 18:58:03 ----A---- C:\Windows\system32\shlwapi.dll
2009-07-22 18:58:03 ----A---- C:\Windows\system32\msrd3x40.dll
2009-07-22 18:58:03 ----A---- C:\Windows\system32\msdtctm.dll
2009-07-22 18:58:03 ----A---- C:\Windows\system32\EhStorPwdMgr.dll
2009-07-22 18:58:03 ----A---- C:\Windows\system32\EhStorAuthn.dll
2009-07-22 18:58:02 ----A---- C:\Windows\system32\wevtapi.dll
2009-07-22 18:58:02 ----A---- C:\Windows\system32\photowiz.dll
2009-07-22 18:58:02 ----A---- C:\Windows\system32\nlhtml.dll
2009-07-22 18:58:02 ----A---- C:\Windows\system32\browseui.dll
2009-07-22 18:58:01 ----A---- C:\Windows\system32\user32.dll
2009-07-22 18:58:01 ----A---- C:\Windows\system32\samsrv.dll
2009-07-22 18:58:01 ----A---- C:\Windows\system32\ci.dll
2009-07-22 18:58:00 ----A---- C:\Windows\system32\win32spl.dll
2009-07-22 18:58:00 ----A---- C:\Windows\system32\WcnNetsh.dll
2009-07-22 18:58:00 ----A---- C:\Windows\system32\SLCommDlg.dll
2009-07-22 18:58:00 ----A---- C:\Windows\system32\quartz.dll
2009-07-22 18:58:00 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-07-22 18:58:00 ----A---- C:\Windows\system32\oleaut32.dll
2009-07-22 18:58:00 ----A---- C:\Windows\system32\netshell.dll
2009-07-22 18:58:00 ----A---- C:\Windows\system32\msv1_0.dll
2009-07-22 18:58:00 ----A---- C:\Windows\system32\kerberos.dll
2009-07-22 18:58:00 ----A---- C:\Windows\system32\IKEEXT.DLL
2009-07-22 18:57:59 ----A---- C:\Windows\system32\compcln.exe
2009-07-22 18:57:59 ----A---- C:\Windows\system32\apds.dll
2009-07-22 18:57:58 ----A---- C:\Windows\system32\xmlfilter.dll
2009-07-22 18:57:58 ----A---- C:\Windows\system32\winhttp.dll
2009-07-22 18:57:58 ----A---- C:\Windows\system32\QAGENTRT.DLL
2009-07-22 18:57:58 ----A---- C:\Windows\system32\mswstr10.dll
2009-07-22 18:57:58 ----A---- C:\Windows\system32\msvcrt.dll
2009-07-22 18:57:58 ----A---- C:\Windows\system32\msctf.dll
2009-07-22 18:57:58 ----A---- C:\Windows\system32\gdi32.dll
2009-07-22 18:57:58 ----A---- C:\Windows\system32\emdmgmt.dll
2009-07-22 18:57:58 ----A---- C:\Windows\system32\audiosrv.dll
2009-07-22 18:57:57 ----A---- C:\Windows\system32\VSSVC.exe
2009-07-22 18:57:57 ----A---- C:\Windows\system32\SLUI.exe
2009-07-22 18:57:57 ----A---- C:\Windows\system32\mfc42u.dll
2009-07-22 18:57:57 ----A---- C:\Windows\system32\iphlpsvc.dll
2009-07-22 18:57:56 ----A---- C:\Windows\system32\winresume.exe
2009-07-22 18:57:56 ----A---- C:\Windows\system32\sqlsrv32.dll
2009-07-22 18:57:56 ----A---- C:\Windows\system32\shdocvw.dll
2009-07-22 18:57:56 ----A---- C:\Windows\system32\propdefs.dll
2009-07-22 18:57:56 ----A---- C:\Windows\system32\odbc32.dll
2009-07-22 18:57:56 ----A---- C:\Windows\system32\msrd2x40.dll
2009-07-22 18:57:56 ----A---- C:\Windows\system32\eapphost.dll
2009-07-22 18:57:55 ----A---- C:\Windows\system32\wevtutil.exe
2009-07-22 18:57:55 ----A---- C:\Windows\system32\mssitlb.dll
2009-07-22 18:57:55 ----A---- C:\Windows\system32\dbgeng.dll
2009-07-22 18:57:54 ----A---- C:\Windows\system32\WsmSvc.dll
2009-07-22 18:57:53 ----A---- C:\Windows\system32\usp10.dll
2009-07-22 18:57:53 ----A---- C:\Windows\system32\swprv.dll
2009-07-22 18:57:53 ----A---- C:\Windows\system32\mmcndmgr.dll
2009-07-22 18:57:52 ----A---- C:\Windows\system32\wcnwiz.dll
2009-07-22 18:57:52 ----A---- C:\Windows\system32\vds.exe
2009-07-22 18:57:52 ----A---- C:\Windows\system32\schannel.dll
2009-07-22 18:57:52 ----A---- C:\Windows\system32\netlogon.dll
2009-07-22 18:57:52 ----A---- C:\Windows\system32\msscb.dll
2009-07-22 18:57:52 ----A---- C:\Windows\system32\msctfp.dll
2009-07-22 18:57:52 ----A---- C:\Windows\system32\fdBthProxy.dll
2009-07-22 18:57:52 ----A---- C:\Windows\system32\evr.dll
2009-07-22 18:57:52 ----A---- C:\Windows\system32\drvinst.exe
2009-07-22 18:57:52 ----A---- C:\Windows\system32\devmgr.dll
2009-07-22 18:57:52 ----A---- C:\Windows\system32\DevicePairingProxy.dll
2009-07-22 18:57:52 ----A---- C:\Windows\system32\BFE.DLL
2009-07-22 18:57:52 ----A---- C:\Windows\system32\adsldpc.dll
2009-07-22 18:57:51 ----A---- C:\Windows\system32\WSDApi.dll
2009-07-22 18:57:51 ----A---- C:\Windows\system32\WMVSDECD.DLL
2009-07-22 18:57:51 ----A---- C:\Windows\system32\Wldap32.dll
2009-07-22 18:57:51 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2009-07-22 18:57:50 ----A---- C:\Windows\system32\WindowsCodecs.dll
2009-07-22 18:57:50 ----A---- C:\Windows\system32\wercon.exe
2009-07-22 18:57:50 ----A---- C:\Windows\system32\services.exe
2009-07-22 18:57:49 ----A---- C:\Windows\system32\wcncsvc.dll
2009-07-22 18:57:49 ----A---- C:\Windows\system32\umpnpmgr.dll
2009-07-22 18:57:49 ----A---- C:\Windows\system32\taskeng.exe
2009-07-22 18:57:49 ----A---- C:\Windows\system32\rtffilt.dll
2009-07-22 18:57:49 ----A---- C:\Windows\system32\reg.exe
2009-07-22 18:57:49 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2009-07-22 18:57:49 ----A---- C:\Windows\system32\mswdat10.dll
2009-07-22 18:57:49 ----A---- C:\Windows\system32\msjter40.dll
2009-07-22 18:57:49 ----A---- C:\Windows\system32\msdtcprx.dll
2009-07-22 18:57:49 ----A---- C:\Windows\system32\msdrm.dll
2009-07-22 18:57:49 ----A---- C:\Windows\system32\mimefilt.dll
2009-07-22 18:57:49 ----A---- C:\Windows\system32\ipsmsnap.dll
2009-07-22 18:57:49 ----A---- C:\Windows\system32\dnsapi.dll
2009-07-22 18:57:49 ----A---- C:\Windows\system32\comdlg32.dll
2009-07-22 18:57:49 ----A---- C:\Windows\system32\certutil.exe
2009-07-22 18:57:49 ----A---- C:\Windows\system32\certcli.dll
2009-07-22 18:57:49 ----A---- C:\Windows\system32\adtschema.dll
2009-07-22 18:57:48 ----A---- C:\Windows\system32\WMNetMgr.dll
2009-07-22 18:57:48 ----A---- C:\Windows\system32\w32time.dll
2009-07-22 18:57:48 ----A---- C:\Windows\system32\TsWpfWrp.exe
2009-07-22 18:57:48 ----A---- C:\Windows\system32\rsaenh.dll
2009-07-22 18:57:48 ----A---- C:\Windows\system32\msstrc.dll
2009-07-22 18:57:48 ----A---- C:\Windows\system32\msshooks.dll
2009-07-22 18:57:48 ----A---- C:\Windows\system32\msscntrs.dll
2009-07-22 18:57:48 ----A---- C:\Windows\system32\msihnd.dll
2009-07-22 18:57:48 ----A---- C:\Windows\system32\MMDevAPI.dll
2009-07-22 18:57:48 ----A---- C:\Windows\system32\IPSECSVC.DLL
2009-07-22 18:57:48 ----A---- C:\Windows\system32\bthserv.dll
2009-07-22 18:57:48 ----A---- C:\Windows\system32\bcrypt.dll
2009-07-22 18:57:47 ----A---- C:\Windows\system32\netapi32.dll
2009-07-22 18:57:47 ----A---- C:\Windows\system32\mtxclu.dll
2009-07-22 18:57:47 ----A---- C:\Windows\system32\inetpp.dll
2009-07-22 18:57:47 ----A---- C:\Windows\system32\inetcomm.dll
2009-07-22 18:57:47 ----A---- C:\Windows\system32\dfshim.dll
2009-07-22 18:57:47 ----A---- C:\Windows\system32\cryptsvc.dll
2009-07-22 18:57:46 ----A---- C:\Windows\system32\wmicmiplugin.dll
2009-07-22 18:57:46 ----A---- C:\Windows\system32\termsrv.dll
2009-07-22 18:57:46 ----A---- C:\Windows\system32\shsvcs.dll
2009-07-22 18:57:46 ----A---- C:\Windows\system32\profsvc.dll
2009-07-22 18:57:46 ----A---- C:\Windows\system32\msiexec.exe
2009-07-22 18:57:46 ----A---- C:\Windows\system32\mscories.dll
2009-07-22 18:57:46 ----A---- C:\Windows\system32\imapi.dll
2009-07-22 18:57:46 ----A---- C:\Windows\system32\hidserv.dll
2009-07-22 18:57:46 ----A---- C:\Windows\system32\gameux.dll
2009-07-22 18:57:46 ----A---- C:\Windows\system32\fundisc.dll
2009-07-22 18:57:46 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2009-07-22 18:57:45 ----A---- C:\Windows\system32\wdc.dll
2009-07-22 18:57:45 ----A---- C:\Windows\system32\spoolsv.exe
2009-07-22 18:57:45 ----A---- C:\Windows\system32\rasmans.dll
2009-07-22 18:57:45 ----A---- C:\Windows\system32\pnidui.dll
2009-07-22 18:57:45 ----A---- C:\Windows\system32\icardres.dll
2009-07-22 18:57:45 ----A---- C:\Windows\system32\iassdo.dll
2009-07-22 18:57:45 ----A---- C:\Windows\system32\chsbrkr.dll
2009-07-22 18:57:45 ----A---- C:\Windows\system32\autofmt.exe
2009-07-22 18:57:44 ----A---- C:\Windows\system32\wersvc.dll
2009-07-22 18:57:44 ----A---- C:\Windows\system32\slmgr.vbs
2009-07-22 18:57:44 ----A---- C:\Windows\system32\scrrun.dll
2009-07-22 18:57:44 ----A---- C:\Windows\system32\PSHED.DLL
2009-07-22 18:57:44 ----A---- C:\Windows\system32\pidgenx.dll
2009-07-22 18:57:44 ----A---- C:\Windows\system32\pdh.dll
2009-07-22 18:57:44 ----A---- C:\Windows\system32\dhcpcsvc.dll
2009-07-22 18:57:44 ----A---- C:\Windows\system32\CertEnrollUI.dll
2009-07-22 18:57:44 ----A---- C:\Windows\system32\azroles.dll
2009-07-22 18:57:41 ----A---- C:\Windows\system32\wmpmde.dll
2009-07-22 18:57:41 ----A---- C:\Windows\system32\winlogon.exe
2009-07-22 18:57:41 ----A---- C:\Windows\system32\SyncCenter.dll
2009-07-22 18:57:38 ----A---- C:\Windows\system32\SLUINotify.dll
2009-07-22 18:57:38 ----A---- C:\Windows\system32\msjetoledb40.dll
2009-07-22 18:57:38 ----A---- C:\Windows\system32\comuid.dll
2009-07-22 18:57:38 ----A---- C:\Windows\system32\certmgr.dll
2009-07-22 18:57:37 ----A---- C:\Windows\system32\wisptis.exe
2009-07-22 18:57:37 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2009-07-22 18:57:37 ----A---- C:\Windows\system32\untfs.dll
2009-07-22 18:57:37 ----A---- C:\Windows\system32\taskcomp.dll
2009-07-22 18:57:37 ----A---- C:\Windows\system32\spp.dll
2009-07-22 18:57:37 ----A---- C:\Windows\system32\sethc.exe
2009-07-22 18:57:37 ----A---- C:\Windows\system32\scrobj.dll
2009-07-22 18:57:37 ----A---- C:\Windows\system32\rtutils.dll
2009-07-22 18:57:37 ----A---- C:\Windows\system32\ncrypt.dll
2009-07-22 18:57:37 ----A---- C:\Windows\system32\kd1394.dll
2009-07-22 18:57:37 ----A---- C:\Windows\system32\iassam.dll
2009-07-22 18:57:37 ----A---- C:\Windows\system32\dwm.exe
2009-07-22 18:57:36 ----A---- C:\Windows\system32\winsrv.dll
2009-07-22 18:57:36 ----A---- C:\Windows\system32\printui.dll
2009-07-22 18:57:36 ----A---- C:\Windows\system32\iasnap.dll
2009-07-22 18:57:36 ----A---- C:\Windows\system32\autoconv.exe
2009-07-22 18:57:36 ----A---- C:\Windows\system32\autochk.exe
2009-07-22 18:57:35 ----A---- C:\Windows\system32\wow32.dll
2009-07-22 18:57:35 ----A---- C:\Windows\system32\userenv.dll
2009-07-22 18:57:35 ----A---- C:\Windows\system32\osk.exe
2009-07-22 18:57:35 ----A---- C:\Windows\system32\onex.dll
2009-07-22 18:57:35 ----A---- C:\Windows\system32\mswsock.dll
2009-07-22 18:57:35 ----A---- C:\Windows\system32\kdcom.dll
2009-07-22 18:57:35 ----A---- C:\Windows\system32\cscript.exe
2009-07-22 18:57:35 ----A---- C:\Windows\system32\basecsp.dll
2009-07-22 18:57:35 ----A---- C:\Windows\system32\audiodg.exe
2009-07-22 18:57:34 ----A---- C:\Windows\system32\WinSCard.dll
2009-07-22 18:57:34 ----A---- C:\Windows\system32\winmm.dll
2009-07-22 18:57:34 ----A---- C:\Windows\system32\spcmsg.dll
2009-07-22 18:57:34 ----A---- C:\Windows\system32\RelMon.dll
2009-07-22 18:57:34 ----A---- C:\Windows\system32\rdpencom.dll
2009-07-22 18:57:34 ----A---- C:\Windows\system32\kdusb.dll
2009-07-22 18:57:33 ----A---- C:\Windows\system32\WerFaultSecure.exe
2009-07-22 18:57:33 ----A---- C:\Windows\system32\offfilt.dll
2009-07-22 18:57:33 ----A---- C:\Windows\system32\msftedit.dll
2009-07-22 18:57:33 ----A---- C:\Windows\system32\dnsrslvr.dll
2009-07-22 18:57:32 ----A---- C:\Windows\system32\wsepno.dll
2009-07-22 18:57:32 ----A---- C:\Windows\system32\wscript.exe
2009-07-22 18:57:32 ----A---- C:\Windows\system32\wiaservc.dll
2009-07-22 18:57:32 ----A---- C:\Windows\system32\WerFault.exe
2009-07-22 18:57:32 ----A---- C:\Windows\system32\Utilman.exe
2009-07-22 18:57:32 ----A---- C:\Windows\system32\ulib.dll
2009-07-22 18:57:32 ----A---- C:\Windows\system32\sysclass.dll
2009-07-22 18:57:32 ----A---- C:\Windows\system32\stobject.dll
2009-07-22 18:57:32 ----A---- C:\Windows\system32\SndVol.exe
2009-07-22 18:57:32 ----A---- C:\Windows\system32\secur32.dll
2009-07-22 18:57:32 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2009-07-22 18:57:32 ----A---- C:\Windows\system32\secproc_ssp.dll
2009-07-22 18:57:32 ----A---- C:\Windows\system32\prnntfy.dll
2009-07-22 18:57:32 ----A---- C:\Windows\system32\odbccp32.dll
2009-07-22 18:57:32 ----A---- C:\Windows\system32\msnetobj.dll
2009-07-22 18:57:32 ----A---- C:\Windows\system32\mscms.dll
2009-07-22 18:57:32 ----A---- C:\Windows\system32\mfplat.dll
2009-07-22 18:57:32 ----A---- C:\Windows\system32\mcmde.dll
2009-07-22 18:57:32 ----A---- C:\Windows\system32\iasdatastore.dll
2009-07-22 18:57:32 ----A---- C:\Windows\system32\dsound.dll
2009-07-22 18:57:32 ----A---- C:\Windows\system32\diskraid.exe
2009-07-22 18:57:32 ----A---- C:\Windows\system32\apphelp.dll
2009-07-22 18:57:32 ----A---- C:\Windows\system32\adsmsext.dll
2009-07-22 18:57:31 ----A---- C:\Windows\system32\wscsvc.dll
2009-07-22 18:57:31 ----A---- C:\Windows\system32\wscntfy.dll
2009-07-22 18:57:31 ----A---- C:\Windows\system32\WMVENCOD.DLL
2009-07-22 18:57:31 ----A---- C:\Windows\system32\wlansvc.dll
2009-07-22 18:57:31 ----A---- C:\Windows\system32\wlangpui.dll
2009-07-22 18:57:31 ----A---- C:\Windows\system32\vdsdyn.dll
2009-07-22 18:57:31 ----A---- C:\Windows\system32\regsvc.dll
2009-07-22 18:57:31 ----A---- C:\Windows\system32\rastls.dll
2009-07-22 18:57:31 ----A---- C:\Windows\system32\rastapi.dll
2009-07-22 18:57:31 ----A---- C:\Windows\system32\rasapi32.dll
2009-07-22 18:57:31 ----A---- C:\Windows\system32\pnpsetup.dll
2009-07-22 18:57:31 ----A---- C:\Windows\system32\ntprint.dll
2009-07-22 18:57:31 ----A---- C:\Windows\system32\netiohlp.dll
2009-07-22 18:57:31 ----A---- C:\Windows\system32\mscorier.dll
2009-07-22 18:57:31 ----A---- C:\Windows\system32\logman.exe
2009-07-22 18:57:31 ----A---- C:\Windows\system32\ipsecsnp.dll
2009-07-22 18:57:31 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2009-07-22 18:57:31 ----A---- C:\Windows\system32\iashlpr.dll
2009-07-22 18:57:31 ----A---- C:\Windows\system32\gpapi.dll
2009-07-22 18:57:31 ----A---- C:\Windows\system32\fdProxy.dll
2009-07-22 18:57:31 ----A---- C:\Windows\system32\diskpart.exe
2009-07-22 18:57:31 ----A---- C:\Windows\system32\cryptui.dll
2009-07-22 18:57:31 ----A---- C:\Windows\system32\brcpl.dll
2009-07-22 18:57:30 ----A---- C:\Windows\system32\zipfldr.dll
2009-07-22 18:57:30 ----A---- C:\Windows\system32\wusa.exe
2009-07-22 18:57:30 ----A---- C:\Windows\system32\wsnmp32.dll
2009-07-22 18:57:30 ----A---- C:\Windows\system32\wshext.dll
2009-07-22 18:57:30 ----A---- C:\Windows\system32\wpccpl.dll
2009-07-22 18:57:30 ----A---- C:\Windows\system32\wer.dll
2009-07-22 18:57:30 ----A---- C:\Windows\system32\themecpl.dll
2009-07-22 18:57:30 ----A---- C:\Windows\system32\rasdlg.dll
2009-07-22 18:57:30 ----A---- C:\Windows\system32\netcenter.dll
2009-07-22 18:57:30 ----A---- C:\Windows\system32\iassvcs.dll
2009-07-22 18:57:30 ----A---- C:\Windows\system32\iasrad.dll
2009-07-22 18:57:30 ----A---- C:\Windows\system32\findstr.exe
2009-07-22 18:57:29 ----A---- C:\Windows\system32\uxsms.dll
2009-07-22 18:57:29 ----A---- C:\Windows\system32\tsbyuv.dll
2009-07-22 18:57:29 ----A---- C:\Windows\system32\srvsvc.dll
2009-07-22 18:57:29 ----A---- C:\Windows\system32\slcc.dll
2009-07-22 18:57:29 ----A---- C:\Windows\system32\scansetting.dll
2009-07-22 18:57:29 ----A---- C:\Windows\system32\ntmarta.dll
2009-07-22 18:57:29 ----A---- C:\Windows\system32\msutb.dll
2009-07-22 18:57:29 ----A---- C:\Windows\system32\mstlsapi.dll
2009-07-22 18:57:29 ----A---- C:\Windows\system32\mssprxy.dll
2009-07-22 18:57:29 ----A---- C:\Windows\system32\iasads.dll
2009-07-22 18:57:28 ----A---- C:\Windows\system32\wlanhlp.dll
2009-07-22 18:57:28 ----A---- C:\Windows\system32\powrprof.dll
2009-07-22 18:57:28 ----A---- C:\Windows\system32\powercpl.dll
2009-07-22 18:57:28 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2009-07-22 18:57:28 ----A---- C:\Windows\system32\newdev.exe
2009-07-22 18:57:28 ----A---- C:\Windows\system32\networkmap.dll
2009-07-22 18:57:28 ----A---- C:\Windows\system32\mstsc.exe
2009-07-22 18:57:28 ----A---- C:\Windows\system32\iasacct.dll
2009-07-22 18:57:28 ----A---- C:\Windows\system32\connect.dll
2009-07-22 18:57:28 ----A---- C:\Windows\system32\authz.dll
2009-07-22 18:57:27 ----A---- C:\Windows\system32\usercpl.dll
2009-07-22 18:57:27 ----A---- C:\Windows\system32\themeui.dll
2009-07-22 18:57:27 ----A---- C:\Windows\system32\systemcpl.dll
2009-07-22 18:57:27 ----A---- C:\Windows\system32\sud.dll
2009-07-22 18:57:27 ----A---- C:\Windows\system32\samlib.dll
2009-07-22 18:57:27 ----A---- C:\Windows\system32\pcaui.dll
2009-07-22 18:57:27 ----A---- C:\Windows\system32\mmci.dll
2009-07-22 18:57:27 ----A---- C:\Windows\system32\dot3svc.dll
2009-07-22 18:57:27 ----A---- C:\Windows\system32\accessibilitycpl.dll
2009-07-22 18:57:26 ----A---- C:\Windows\system32\wscisvif.dll
2009-07-22 18:57:26 ----A---- C:\Windows\system32\wpcao.dll
2009-07-22 18:57:26 ----A---- C:\Windows\system32\wlanpref.dll
2009-07-22 18:57:26 ----A---- C:\Windows\system32\vdsutil.dll
2009-07-22 18:57:26 ----A---- C:\Windows\system32\tapisrv.dll
2009-07-22 18:57:26 ----A---- C:\Windows\system32\scksp.dll
2009-07-22 18:57:26 ----A---- C:\Windows\system32\scesrv.dll
2009-07-22 18:57:26 ----A---- C:\Windows\system32\rpchttp.dll
2009-07-22 18:57:26 ----A---- C:\Windows\system32\rekeywiz.exe
2009-07-22 18:57:26 ----A---- C:\Windows\system32\regapi.dll
2009-07-22 18:57:26 ----A---- C:\Windows\system32\qdvd.dll
2009-07-22 18:57:26 ----A---- C:\Windows\system32\psisdecd.dll
2009-07-22 18:57:26 ----A---- C:\Windows\system32\oleprn.dll
2009-07-22 18:57:26 ----A---- C:\Windows\system32\msinfo32.exe
2009-07-22 18:57:26 ----A---- C:\Windows\system32\mpr.dll
2009-07-22 18:57:26 ----A---- C:\Windows\system32\imm32.dll
2009-07-22 18:57:26 ----A---- C:\Windows\system32\iaspolcy.dll
2009-07-22 18:57:26 ----A---- C:\Windows\system32\feclient.dll
2009-07-22 18:57:26 ----A---- C:\Windows\system32\Faultrep.dll
2009-07-22 18:57:26 ----A---- C:\Windows\system32\dot3msm.dll
2009-07-22 18:57:26 ----A---- C:\Windows\system32\autoplay.dll
2009-07-22 18:57:26 ----A---- C:\Windows\system32\AudioSes.dll
2009-07-22 18:57:25 ----A---- C:\Windows\system32\TSTheme.exe
2009-07-22 18:57:25 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2009-07-22 18:57:25 ----A---- C:\Windows\system32\sdclt.exe
2009-07-22 18:57:25 ----A---- C:\Windows\system32\scecli.dll
2009-07-22 18:57:25 ----A---- C:\Windows\system32\rasplap.dll
2009-07-22 18:57:25 ----A---- C:\Windows\system32\rasgcw.dll
2009-07-22 18:57:25 ----A---- C:\Windows\system32\qedit.dll
2009-07-22 18:57:25 ----A---- C:\Windows\system32\pnpui.dll
2009-07-22 18:57:25 ----A---- C:\Windows\system32\perfdisk.dll
2009-07-22 18:57:25 ----A---- C:\Windows\system32\ncryptui.dll
2009-07-22 18:57:25 ----A---- C:\Windows\system32\hdwwiz.exe
2009-07-22 18:57:25 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2009-07-22 18:57:25 ----A---- C:\Windows\system32\dpapimig.exe
2009-07-22 18:57:25 ----A---- C:\Windows\system32\DeviceEject.exe
2009-07-22 18:57:25 ----A---- C:\Windows\system32\certreq.exe
2009-07-22 18:57:24 ----A---- C:\Windows\system32\whealogr.dll
2009-07-22 18:57:24 ----A---- C:\Windows\system32\tcpmon.dll
2009-07-22 18:57:24 ----A---- C:\Windows\system32\tcpipcfg.dll
2009-07-22 18:57:24 ----A---- C:\Windows\system32\srcore.dll
2009-07-22 18:57:24 ----A---- C:\Windows\system32\spwinsat.dll
2009-07-22 18:57:24 ----A---- C:\Windows\system32\SCardSvr.dll
2009-07-22 18:57:24 ----A---- C:\Windows\system32\PnPUnattend.exe
2009-07-22 18:57:24 ----A---- C:\Windows\system32\fdWSD.dll
2009-07-22 18:57:24 ----A---- C:\Windows\system32\conime.exe
2009-07-22 18:57:24 ----A---- C:\Windows\system32\cmmon32.exe
2009-07-22 18:57:24 ----A---- C:\Windows\system32\cmdial32.dll
2009-07-22 18:57:23 ----A---- C:\Windows\system32\WMVXENCD.DLL
2009-07-22 18:57:23 ----A---- C:\Windows\system32\wlanui.dll
2009-07-22 18:57:23 ----A---- C:\Windows\system32\wlanmsm.dll
2009-07-22 18:57:23 ----A---- C:\Windows\system32\wiaaut.dll
2009-07-22 18:57:23 ----A---- C:\Windows\system32\SnippingTool.exe
2009-07-22 18:57:23 ----A---- C:\Windows\system32\shwebsvc.dll
2009-07-22 18:57:23 ----A---- C:\Windows\system32\rasppp.dll
2009-07-22 18:57:23 ----A---- C:\Windows\system32\raschap.dll
2009-07-22 18:57:23 ----A---- C:\Windows\system32\PnPutil.exe
2009-07-22 18:57:23 ----A---- C:\Windows\system32\MSVidCtl.dll
2009-07-22 18:57:23 ----A---- C:\Windows\system32\fontext.dll
2009-07-22 18:57:23 ----A---- C:\Windows\system32\dsprop.dll
2009-07-22 18:57:22 ----A---- C:\Windows\system32\shsetup.dll
2009-07-22 18:57:22 ----A---- C:\Windows\system32\rasmontr.dll
2009-07-22 18:57:22 ----A---- C:\Windows\system32\oobefldr.dll
2009-07-22 18:57:22 ----A---- C:\Windows\system32\mscandui.dll
2009-07-22 18:57:22 ----A---- C:\Windows\system32\modemui.dll
2009-07-22 18:57:22 ----A---- C:\Windows\system32\dimsroam.dll
2009-07-22 18:57:22 ----A---- C:\Windows\system32\chtbrkr.dll
2009-07-22 18:57:21 ----A---- C:\Windows\system32\WSDMon.dll
2009-07-22 18:57:21 ----A---- C:\Windows\system32\wmpeffects.dll
2009-07-22 18:57:21 ----A---- C:\Windows\system32\wmdrmsdk.dll
2009-07-22 18:57:21 ----A---- C:\Windows\system32\wlgpclnt.dll
2009-07-22 18:57:21 ----A---- C:\Windows\system32\smss.exe
2009-07-22 18:57:21 ----A---- C:\Windows\system32\rdpwsx.dll
2009-07-22 18:57:21 ----A---- C:\Windows\system32\networkexplorer.dll
2009-07-22 18:57:21 ----A---- C:\Windows\system32\netplwiz.dll
2009-07-22 18:57:21 ----A---- C:\Windows\system32\dataclen.dll
2009-07-22 18:57:21 ----A---- C:\Windows\system32\credui.dll
2009-07-22 18:57:21 ----A---- C:\Windows\system32\certprop.dll
2009-07-22 18:57:21 ----A---- C:\Windows\system32\blackbox.dll
2009-07-22 18:57:20 ----A---- C:\Windows\system32\wscapi.dll
2009-07-22 18:57:20 ----A---- C:\Windows\system32\wpcsvc.dll
2009-07-22 18:57:20 ----A---- C:\Windows\system32\thawbrkr.dll
2009-07-22 18:57:20 ----A---- C:\Windows\system32\softkbd.dll
2009-07-22 18:57:20 ----A---- C:\Windows\system32\sendmail.dll
2009-07-22 18:57:20 ----A---- C:\Windows\system32\msscp.dll
2009-07-22 18:57:20 ----A---- C:\Windows\system32\msimtf.dll
2009-07-22 18:57:20 ----A---- C:\Windows\system32\logagent.exe
2009-07-22 18:57:20 ----A---- C:\Windows\system32\InkEd.dll
2009-07-22 18:57:20 ----A---- C:\Windows\system32\ifmon.dll
2009-07-22 18:57:20 ----A---- C:\Windows\system32\gpresult.exe
2009-07-22 18:57:20 ----A---- C:\Windows\system32\cipher.exe
2009-07-22 18:57:19 ----A---- C:\Windows\system32\wshbth.dll
2009-07-22 18:57:19 ----A---- C:\Windows\system32\version.dll
2009-07-22 18:57:19 ----A---- C:\Windows\system32\SLLUA.exe
2009-07-22 18:57:19 ----A---- C:\Windows\system32\puiapi.dll
2009-07-22 18:57:19 ----A---- C:\Windows\system32\olepro32.dll
2009-07-22 18:57:19 ----A---- C:\Windows\system32\msisip.dll
2009-07-22 18:57:19 ----A---- C:\Windows\system32\msctfui.dll
2009-07-22 18:57:19 ----A---- C:\Windows\system32\mprapi.dll
2009-07-22 18:57:19 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2009-07-22 18:57:19 ----A---- C:\Windows\system32\input.dll
2009-07-22 18:57:19 ----A---- C:\Windows\system32\fc.exe
2009-07-22 18:57:19 ----A---- C:\Windows\system32\ExplorerFrame.dll
2009-07-22 18:57:19 ----A---- C:\Windows\system32\drmmgrtn.dll
2009-07-22 18:57:19 ----A---- C:\Windows\system32\dmsynth.dll
2009-07-22 18:57:19 ----A---- C:\Windows\system32\cdd.dll
2009-07-22 18:57:19 ----A---- C:\Windows\system32\Apphlpdm.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\wsdchngr.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\tscupgrd.exe
2009-07-22 18:57:18 ----A---- C:\Windows\system32\Storprop.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\SMBHelperClass.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\slcinst.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\rrinstaller.exe
2009-07-22 18:57:18 ----A---- C:\Windows\system32\rasdial.exe
2009-07-22 18:57:18 ----A---- C:\Windows\system32\rasdiag.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\ocsetup.exe
2009-07-22 18:57:18 ----A---- C:\Windows\system32\nslookup.exe
2009-07-22 18:57:18 ----A---- C:\Windows\system32\networkitemfactory.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\msjint40.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\MsCtfMonitor.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\mfps.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\l2nacp.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\ipconfig.exe
2009-07-22 18:57:18 ----A---- C:\Windows\system32\hbaapi.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\ftp.exe
2009-07-22 18:57:18 ----A---- C:\Windows\system32\fdWCN.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\fdSSDP.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\fdeploy.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\eappgnui.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\eappcfg.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\eapp3hst.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\dot3cfg.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\dmusic.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\cscdll.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\cscapi.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\CHxReadingStringIME.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\bthudtask.exe
2009-07-22 18:57:18 ----A---- C:\Windows\system32\bthci.dll
2009-07-22 18:57:18 ----A---- C:\Windows\system32\aaclient.dll
2009-07-22 18:57:17 ----A---- C:\Windows\system32\tsgqec.dll
2009-07-22 18:57:17 ----A---- C:\Windows\system32\PNPXAssoc.dll
2009-07-22 18:57:17 ----A---- C:\Windows\system32\NcdProp.dll
2009-07-22 18:57:17 ----A---- C:\Windows\system32\mmcico.dll
2009-07-22 18:57:17 ----A---- C:\Windows\system32\mfpmp.exe
2009-07-22 18:57:17 ----A---- C:\Windows\system32\iscsilog.dll
2009-07-22 18:57:17 ----A---- C:\Windows\system32\gpupdate.exe
2009-07-22 18:57:17 ----A---- C:\Windows\system32\csrstub.exe
2009-07-22 18:57:17 ----A---- C:\Windows\system32\cbsra.exe
2009-07-22 18:57:17 ----A---- C:\Windows\system32\bitsigd.dll
2009-07-22 18:57:16 ----A---- C:\Windows\system32\winrnr.dll
2009-07-22 18:57:16 ----A---- C:\Windows\system32\vdmdbg.dll
2009-07-22 18:57:16 ----A---- C:\Windows\system32\spwmp.dll
2009-07-22 18:57:16 ----A---- C:\Windows\system32\slwga.dll
2009-07-22 18:57:16 ----A---- C:\Windows\system32\odbcconf.dll
2009-07-22 18:57:16 ----A---- C:\Windows\system32\midimap.dll
2009-07-22 18:57:16 ----A---- C:\Windows\system32\inetppui.dll
2009-07-22 18:57:15 ----A---- C:\Windows\system32\wmploc.DLL
2009-07-22 18:57:15 ----A---- C:\Windows\system32\dxmasf.dll
2009-07-22 18:57:09 ----A---- C:\Windows\system32\msimsg.dll
2009-07-22 18:57:09 ----A---- C:\Windows\system32\mferror.dll
2009-07-22 18:57:09 ----A---- C:\Windows\system32\f3ahvoas.dll
2009-07-22 18:56:57 ----A---- C:\Windows\system32\SmiEngine.dll
2009-07-22 18:56:56 ----A---- C:\Windows\system32\wdscore.dll
2009-07-22 18:56:56 ----A---- C:\Windows\system32\PkgMgr.exe
2009-07-22 18:56:51 ----A---- C:\Windows\system32\drvstore.dll
2009-07-21 01:07:26 ----D---- C:\Program Files\Pure Networks
2009-07-21 01:06:48 ----A---- C:\Windows\system32\atsckernel.exe
2009-07-21 01:06:46 ----A---- C:\Windows\system32\atashost.exe
2009-07-21 01:06:44 ----D---- C:\ProgramData\webex
2009-07-21 01:04:34 ----DC---- C:\Windows\system32\DRVSTORE
2009-07-21 01:04:32 ----D---- C:\Program Files\Common Files\Pure Networks Shared
2009-07-21 01:04:05 ----D---- C:\ProgramData\Pure Networks
2009-07-20 19:25:39 ----D---- C:\Users\darkritual\AppData\Roaming\PeerNetworking
2009-07-19 23:12:25 ----D---- C:\vcs5BGEffects
2009-07-19 18:22:11 ----D---- C:\Program Files\TightVNC
2009-07-18 19:20:14 ----D---- C:\Users\darkritual\AppData\Roaming\Screaming Bee
2009-07-18 19:19:24 ----D---- C:\ProgramData\Screaming Bee
2009-07-18 19:19:24 ----D---- C:\Program Files\Screaming Bee
2009-07-17 15:27:23 ----A---- C:\Windows\system32\PnkBstrB.exe
2009-07-17 15:27:22 ----A---- C:\Windows\system32\PnkBstrA.exe
2009-07-17 15:27:22 ----A---- C:\Windows\system32\pbsvc.exe
2009-07-17 09:17:19 ----A---- C:\Windows\system32\xinput1_3.dll
2009-07-17 09:17:19 ----A---- C:\Windows\system32\xactengine2_8.dll
2009-07-17 09:17:19 ----A---- C:\Windows\system32\xactengine2_7.dll
2009-07-17 09:17:19 ----A---- C:\Windows\system32\x3daudio1_2.dll
2009-07-17 09:17:19 ----A---- C:\Windows\system32\d3dx9_34.dll
2009-07-17 09:17:19 ----A---- C:\Windows\system32\d3dx10_34.dll
2009-07-17 09:17:19 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2009-07-17 09:17:18 ----A---- C:\Windows\system32\xactengine2_6.dll
2009-07-17 09:17:18 ----A---- C:\Windows\system32\d3dx9_33.dll
2009-07-17 09:17:18 ----A---- C:\Windows\system32\d3dx10_33.dll
2009-07-17 09:17:18 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2009-07-17 09:17:17 ----A---- C:\Windows\system32\xactengine2_5.dll
2009-07-17 09:17:17 ----A---- C:\Windows\system32\xactengine2_4.dll
2009-07-17 09:17:17 ----A---- C:\Windows\system32\x3daudio1_1.dll
2009-07-17 09:17:17 ----A---- C:\Windows\system32\d3dx9_32.dll
2009-07-17 09:17:17 ----A---- C:\Windows\system32\d3dx9_31.dll
2009-07-17 09:17:17 ----A---- C:\Windows\system32\d3dx10.dll
2009-07-17 09:17:16 ----A---- C:\Windows\system32\xinput1_2.dll
2009-07-17 09:17:16 ----A---- C:\Windows\system32\xinput1_1.dll
2009-07-17 09:17:16 ----A---- C:\Windows\system32\xactengine2_3.dll
2009-07-17 09:17:16 ----A---- C:\Windows\system32\xactengine2_2.dll
2009-07-17 09:17:16 ----A---- C:\Windows\system32\xactengine2_1.dll
2009-07-17 09:17:12 ----A---- C:\Windows\system32\xactengine2_0.dll
2009-07-17 09:17:12 ----A---- C:\Windows\system32\x3daudio1_0.dll
2009-07-17 09:17:10 ----A---- C:\Windows\system32\d3dx9_27.dll
2009-07-17 09:17:10 ----A---- C:\Windows\system32\d3dx9_26.dll
2009-07-17 09:17:10 ----A---- C:\Windows\system32\d3dx9_25.dll
2009-07-17 09:17:10 ----A---- C:\Windows\system32\d3dx9_24.dll
2009-07-17 09:16:55 ----A---- C:\Windows\game.ini
2009-07-17 08:59:00 ----D---- C:\Program Files\Activision
2009-07-16 23:54:18 ----D---- C:\Program Files\AV Vcs 6.0 DIAMOND
2009-07-15 22:58:34 ----D---- C:\Program Files\MSNImageText
2009-07-15 18:01:32 ----D---- C:\Windows\Minidump
2009-07-15 11:57:50 ----D---- C:\Windows\pss
2009-07-15 11:56:39 ----D---- C:\Windows\system32\ErrorLogs
2009-07-15 11:51:16 ----D---- C:\Windows\Sun
2009-07-15 11:42:56 ----D---- C:\Users\darkritual\AppData\Roaming\uniblue
2009-07-15 11:42:09 ----D---- C:\Program Files\Uniblue
2009-07-15 11:42:04 ----HDC---- C:\ProgramData\{C4C0E335-EDDF-46A0-A57D-F3802AE44275}
2009-07-15 06:55:46 ----A---- C:\Windows\system32\atmfd.dll
2009-07-15 06:55:45 ----A---- C:\Windows\system32\t2embed.dll
2009-07-15 06:55:45 ----A---- C:\Windows\system32\lpk.dll
2009-07-15 06:55:45 ----A---- C:\Windows\system32\fontsub.dll
2009-07-15 06:55:45 ----A---- C:\Windows\system32\dciman32.dll
2009-07-15 06:55:45 ----A---- C:\Windows\system32\atmlib.dll
2009-07-10 06:28:47 ----D---- C:\Program Files\Project64 1.6
2009-07-09 18:33:40 ----D---- C:\Program Files\Nemex
2009-07-09 15:51:29 ----A---- C:\Windows\system32\tsccvid.dll
2009-07-09 15:51:28 ----D---- C:\Windows\system32\QuickTime
2009-07-09 15:51:22 ----D---- C:\ProgramData\TechSmith
2009-07-09 15:51:21 ----D---- C:\Windows\system32\Flash
2009-07-09 15:51:05 ----D---- C:\Program Files\TechSmith
2009-07-09 15:51:05 ----D---- C:\Program Files\Common Files\TechSmith Shared
2009-07-08 10:09:41 ----D---- C:\Program Files\PhotoFiltre
2009-07-08 09:21:11 ----D---- C:\ProgramData\FLEXnet
2009-07-08 09:15:40 ----D---- C:\Program Files\Adobe Media Player
2009-07-08 09:14:07 ----D---- C:\Program Files\Common Files\Adobe AIR
2009-07-08 09:11:09 ----D---- C:\Program Files\Common Files\Macrovision Shared
2009-07-08 09:05:10 ----D---- C:\ADBEPHSPCS4_LS1
2009-07-07 20:48:19 ----A---- C:\Windows\system32\wbload.dll
2009-07-07 20:48:18 ----A---- C:\Windows\system32\wbsys.dll
2009-07-07 20:41:02 ----HDC---- C:\ProgramData\{CCD0104E-95C0-4C73-A3E3-42C3D2072E43}
2009-07-07 20:40:49 ----D---- C:\Program Files\Stardoc2k
2009-07-07 20:37:40 ----D---- C:\Program Files\Stardock
2009-07-07 05:56:08 ----D---- C:\Program Files\Common Files\Steam
2009-07-07 05:55:58 ----D---- C:\Program Files\Steam
2009-07-04 12:44:39 ----D---- C:\Users\darkritual\AppData\Roaming\TortoiseSVN
2009-07-04 12:39:02 ----D---- C:\Users\darkritual\AppData\Roaming\Subversion
2009-07-04 12:37:09 ----D---- C:\Program Files\Common Files\TortoiseOverlays
2009-07-04 12:37:08 ----D---- C:\Program Files\TortoiseSVN
2009-07-03 10:01:54 ----D---- C:\Users\darkritual\AppData\Roaming\Xfire
2009-07-03 10:01:51 ----D---- C:\ProgramData\Xfire
2009-07-03 10:01:51 ----D---- C:\Program Files\Xfire
2009-07-02 14:55:52 ----A---- C:\Windows\system32\xfcodec.dll
2009-06-30 13:17:56 ----D---- C:\ProgramData\TrackMania

======List of files/folders modified in the last 1 months======

2009-07-23 20:48:41 ----D---- C:\Windows\Temp
2009-07-23 20:48:38 ----RD---- C:\Program Files
2009-07-23 20:35:46 ----D---- C:\Windows\system32\drivers
2009-07-23 20:35:45 ----HD---- C:\ProgramData
2009-07-23 20:17:23 ----D---- C:\Windows\System32
2009-07-23 20:17:23 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-07-23 20:10:29 ----D---- C:\WINDOWS
2009-07-23 18:27:57 ----D---- C:\Windows\system32\catroot2
2009-07-23 18:27:57 ----D---- C:\Windows\system32\catroot
2009-07-23 18:27:56 ----D---- C:\Windows\winsxs
2009-07-23 10:04:39 ----SHD---- C:\System Volume Information
2009-07-22 20:06:37 ----D---- C:\Windows\rescache
2009-07-22 19:51:47 ----D---- C:\Windows\Prefetch
2009-07-22 19:49:01 ----D---- C:\Windows\system32\migration
2009-07-22 19:49:00 ----D---- C:\Windows\system32\fr-FR
2009-07-22 19:49:00 ----D---- C:\Program Files\Internet Explorer
2009-07-22 19:48:58 ----D---- C:\Windows\system32\en-US
2009-07-22 19:48:58 ----D---- C:\Windows\PolicyDefinitions
2009-07-22 19:38:21 ----SHD---- C:\Windows\Installer
2009-07-22 19:29:25 ----D---- C:\ProgramData\NVIDIA
2009-07-22 19:28:56 ----D---- C:\Windows\Microsoft.NET
2009-07-22 19:28:47 ----RSD---- C:\Windows\assembly
2009-07-22 19:25:09 ----SHD---- C:\Boot
2009-07-22 19:23:28 ----D---- C:\Windows\inf
2009-07-22 19:18:52 ----D---- C:\Program Files\Windows Calendar
2009-07-22 19:18:51 ----D---- C:\Program Files\Windows Mail
2009-07-22 19:18:51 ----D---- C:\Program Files\Movie Maker
2009-07-22 19:18:49 ----D---- C:\Program Files\Windows Sidebar
2009-07-22 19:18:48 ----D---- C:\Program Files\Windows Media Player
2009-07-22 19:18:48 ----D---- C:\Program Files\Windows Journal
2009-07-22 19:18:48 ----D---- C:\Program Files\Windows Collaboration
2009-07-22 19:18:46 ----D---- C:\Program Files\Windows Photo Gallery
2009-07-22 19:18:46 ----D---- C:\Program Files\Common Files\System
2009-07-22 19:18:36 ----D---- C:\Windows\servicing
2009-07-22 19:18:36 ----D---- C:\Windows\ehome
2009-07-22 19:18:36 ----D---- C:\Program Files\Windows Defender
2009-07-22 19:18:09 ----D---- C:\Windows\system32\XPSViewer
2009-07-22 19:18:09 ----D---- C:\Windows\system32\sk-SK
2009-07-22 19:18:09 ----D---- C:\Windows\system32\oobe
2009-07-22 19:18:09 ----D---- C:\Windows\system32\lv-LV
2009-07-22 19:18:09 ----D---- C:\Windows\system32\ko-KR
2009-07-22 19:18:09 ----D---- C:\Windows\system32\it-IT
2009-07-22 19:18:09 ----D---- C:\Windows\system32\hr-HR
2009-07-22 19:18:09 ----D---- C:\Windows\system32\et-EE
2009-07-22 19:18:09 ----D---- C:\Windows\system32\el-GR
2009-07-22 19:18:09 ----D---- C:\Windows\system32\de-DE
2009-07-22 19:18:09 ----D---- C:\Windows\system32\da-DK
2009-07-22 19:18:09 ----D---- C:\Windows\IME
2009-07-22 19:18:08 ----D---- C:\Windows\system32\fr
2009-07-22 19:18:04 ----D---- C:\Windows\system32\ru-RU
2009-07-22 19:18:04 ----D---- C:\Windows\system32\AdvancedInstallers
2009-07-22 19:18:03 ----D---- C:\Windows\system32\sv-SE
2009-07-22 19:18:03 ----D---- C:\Windows\system32\setup
2009-07-22 19:18:03 ----D---- C:\Windows\system32\he-IL
2009-07-22 1

Le rapport log est incomplet.

Pour me transmettre le rapport :

• Clique sur ce lien : http://www.cijoint.fr/
• Clique sur Parcourir... et cherche le fichier du rapport que tu souhaites me transmettre.
• Clique sur Ouvrir.
• Clique sur Cliquez ici pour déposer le fichier.
• Un lien de cette forme, hxxp://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt, est ajouté dans la page.
• Copie ce lien dans ta réponse.

• Télécharge The Avenger sur ton Bureau.
• Dézippe le fichier avenger.zip (Clique droit > Extraire).
• Ferme toutes les fenêtres et toutes les applications en cours.
• Clique droit sur l'icône avenger (Icône avec l'épée) et choisis Exécuter en tant qu'administrateur.
• Clique sur OK pour accepter les termes d'utilisation.
• Une fois le programme lancé, verifie bien que :

• Clique sur Execute pour lancer le scan.
• Répondre Oui à ce message de confirmation.
• Répondre Oui pour exécuter un scan antirootkit.
• La première étape étant finie, The Avenger a désormais besoin de redémarrer votre PC pour finir, clique sur Oui.

Ton PC redémarrera alors automatiquement.

• Au redémarrage, le rapport de The Avenger s'ouvrira automatiquement, poste-le (C:\avenger.txt).

Tu es sûr que c'est un virus ce qu'AVG détecte ?

Et aussi, je ne voudrais pas avoir a reformater mon système car, j'ai plus de 200gb de fichiers sur mon disque dur :S (allo les dvd gaspiller).

le programme a crasher en essayant de deleter le fichier donc, j'ai taper explorer.exe dans Ctrl-Alt-Delete pour que tout redevienne normal.Donc, je force le fichier a ce fermer pour refaire les étapes?

--> Il est pratique d'avoir un disque dur externe.

Le virus semble avoir été complètement détruit.Merci =]

Non.