Se connecter avec
S'enregistrer | Connectez-vous

Peut etre qulques virus?(resolu)

Dernière réponse : dans Sécurité

bonjour a tous
voila mon probleme
j'ai recupere le pc de mes voisin; il rester bloquer au demarrage, j ai reussi a le demarrer et je vous ai fait un
Random's System Information Tool (RSIT)
pouvez vous m'aider
Logfile of random's system information tool 1.06 (written by random/random)
Run by falher bernard at 2006-11-15 23:22:20
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 129 GB (55%) free of 233 GB
Total RAM: 767 MB (10% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:23:11, on 15/11/2006
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Iconix\IconixService.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\spupdsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\medctrro.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Iconix\OEAddOn\OEdmn_5.exe
C:\Program Files\Nosibay\VPbubble\launcher.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\WINDOWS\system32\ctfmon.exe
C:\documents and settings\falher bernard\local settings\application data\beibi.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Documents and Settings\falher bernard\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\Nosibay\VPbubble\VPbubble.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\falher bernard\Mes documents\Téléchargements\RSIT.exe
C:\Program Files\trend micro\falher bernard.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMult.dll
R3 - URLSearchHook: Come2PlayK2P Toolbar - {b8a5b62c-517f-42a5-85ae-29b5497fb15f} - C:\Program Files\Come2PlayK2P\tbCome.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMult.dll
O2 - BHO: IconixBHOClass Class - {761233B6-F228-49E4-8F6B-668499D4E55A} - C:\Program Files\Iconix\IEAddOn\IconixBHO_41.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: Come2PlayK2P Toolbar - {b8a5b62c-517f-42a5-85ae-29b5497fb15f} - C:\Program Files\Come2PlayK2P\tbCome.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMult.dll
O3 - Toolbar: Afficher Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O3 - Toolbar: Come2PlayK2P Toolbar - {b8a5b62c-517f-42a5-85ae-29b5497fb15f} - C:\Program Files\Come2PlayK2P\tbCome.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
O4 - HKLM\..\Run: [IconixOEAddOn] "C:\Program Files\Iconix\OEAddOn\OEdmn_5.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [VPbubble] "C:\Program Files\Nosibay\VPbubble\launcher.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [beibi] "c:\documents and settings\falher bernard\local settings\application data\beibi.exe" beibi
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\falher bernard\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?f6df26822b9c445081a8377140789db6
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?f6df26822b9c445081a8377140789db6
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {400A6CFA-E326-4d61-A90C-9AD75358DC5F} - C:\Program Files\Iconix\IEAddOn\IconixBHO_41.dll
O9 - Extra 'Tools' menuitem: Email ID Préférences - {400A6CFA-E326-4d61-A90C-9AD75358DC5F} - C:\Program Files\Iconix\IEAddOn\IconixBHO_41.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {BC3F6B6D-2E49-4603-B028-7411655713F3} - C:\Program Files\Iconix\IEAddOn\IconixBHO_41.dll
O9 - Extra 'Tools' menuitem: À propos de Email ID - {BC3F6B6D-2E49-4603-B028-7411655713F3} - C:\Program Files\Iconix\IEAddOn\IconixBHO_41.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld...
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://famillyfalher.spaces.live.com/PhotoUpload/MsnPUp...
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.extrafilm.fr/ImageUploader4.cab
O16 - DPF: {D27CDB6E-AF6D-11CF-96B8-444553540000} - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://www.leaderphoto.com/uploaders/aurigma_4_7_16/Ima...
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Iconix Update Service (IconixService) - Unknown owner - C:\Program Files\Fichiers communs\Iconix\IconixService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

--
End of file - 12218 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
C:\WINDOWS\tasks\Google Software Updater.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{4B4625A3-1EEC-4D3D-99D6-0FDB0C33F5CD}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1E8A6170-7264-4D0F-BEAE-D42A53123C75}]
C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\NppBho.dll [2007-02-19 97960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2F85D76C-0569-466F-A488-493E6BD0E955}]
dsWebAllowBHO Class - C:\Program Files\Windows Desktop Search\dsWebAllow.dll [2006-03-26 265432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}]
Windows Live Family Safety Browser Helper Class - C:\Program Files\Windows Live\Family Safety\fssbho.dll [2009-08-05 113512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}]
EoBho Class

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7009fcd4-05be-44f4-9583-93fe419ab7b0}]
Multi Media France Toolbar - C:\Program Files\Multi_Media_France\tbMult.dll [2008-04-03 1523736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761233B6-F228-49E4-8F6B-668499D4E55A}]
IconixBHOClass Class - C:\Program Files\Iconix\IEAddOn\IconixBHO_41.dll [2009-05-22 717584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll [2007-07-12 501136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll [2009-09-18 762864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b8a5b62c-517f-42a5-85ae-29b5497fb15f}]
Come2PlayK2P Toolbar - C:\Program Files\Come2PlayK2P\tbCome.dll [2008-08-20 1780248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7009fcd4-05be-44f4-9583-93fe419ab7b0} - Multi Media France Toolbar - C:\Program Files\Multi_Media_France\tbMult.dll [2008-04-03 1523736]
{90222687-F593-4738-B738-FBEE9C7B26DF} - Afficher Norton Toolbar - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\UIBHO.dll [2007-02-19 609424]
{b8a5b62c-517f-42a5-85ae-29b5497fb15f} - Come2PlayK2P Toolbar - C:\Program Files\Come2PlayK2P\tbCome.dll [2008-08-20 1780248]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ccApp"=C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe [2007-01-09 115816]
"Symantec PIF AlertEng"=C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe [2008-01-29 583048]
"fssui"=C:\Program Files\Windows Live\Family Safety\fsui.exe [2009-08-05 647520]
"IconixOEAddOn"=C:\Program Files\Iconix\OEAddOn\OEdmn_5.exe [2009-03-11 335632]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2006-11-11 98304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"VPbubble"=C:\Program Files\Nosibay\VPbubble\launcher.exe [2008-06-20 239120]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-06-14 68856]
"H/PC Connection Agent"=C:\Program Files\Microsoft ActiveSync\wcescomm.exe [2006-06-26 1211176]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"beibi"=c:\documents and settings\falher bernard\local settings\application data\beibi.exe [2009-10-02 368128]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Documents and Settings\falher bernard\Menu Démarrer\Programmes\Démarrage
Notification de cadeaux MSN.lnk - C:\Documents and Settings\falher bernard\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-07-19 86016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{88485281-8b4b-4f8d-9ede-82e29a064277}"=C:\PROGRA~1\MarkAny\CONTEN~1\MACSMA~1.DLL [2004-11-23 192512]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
"C:\Documents and Settings\falher bernard\Mes documents\eMule\eMule.exe"="C:\Documents and Settings\falher bernard\Mes documents\eMule\eMule.exe:*:Enabled:eMule"
"C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\Répertoire temporaire 1 pour DSC01497(1).zip\img091307-www.photoshop.com"="C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\Répertoire temporaire 1 pour DSC01497(1).zip\img091307-www.photoshop.com:*:Enabled:Windows Sharing"
"C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\Répertoire temporaire 1 pour DSC01497.zip\img091307-www.photoshop.com"="C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\Répertoire temporaire 1 pour DSC01497.zip\img091307-www.photoshop.com:*:Enabled:Windows Sharing"
"C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\Répertoire temporaire 2 pour DSC01497.zip\img091307-www.photoshop.com"="C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\Répertoire temporaire 2 pour DSC01497.zip\img091307-www.photoshop.com:*:Enabled:Windows Sharing"
"C:\WINDOWS\system32\muzapp.exe"="C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player"
"C:\Program Files\Microsoft ActiveSync\rapimgr.exe"="C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\Program Files\Microsoft ActiveSync\wcescomm.exe"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe:*:Enabled:AOL"
"C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe:*:Enabled:AOL"
"C:\Program Files\AOL 9.0\waol.exe"="C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft ActiveSync\rapimgr.exe"="C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\Program Files\Microsoft ActiveSync\wcescomm.exe"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\I]
shell\AutoRun\command - I:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{15528940-8370-11de-b8f7-001921ab74e3}]
shell\AutoRun\command - I:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9507ed80-e6bd-11db-b5bc-00038a000015}]
shell\AutoRun\command - I:\ReadMe.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9507ed82-e6bd-11db-b5bc-00038a000015}]
shell\AutoRun\command - I:\ReadMe.exe


======List of files/folders created in the last 1 months======

2009-09-24 18:10:54 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2009-09-21 18:17:02 ----D---- C:\Documents and Settings\All Users\Application Data\McAfee
2009-09-21 18:16:32 ----D---- C:\Documents and Settings\All Users\Application Data\McAfee Security Scan
2009-09-19 15:10:47 ----D---- C:\Program Files\QUAD Utilities
2009-09-14 17:53:21 ----HD---- C:\LG3G
2009-09-10 21:38:55 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2009-09-10 21:38:49 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2009-09-10 21:38:16 ----HDC---- C:\WINDOWS\$NtUninstallKB973768$
2009-08-25 21:53:57 ----HDC---- C:\WINDOWS\$NtUninstallKB970653-v3$
2009-08-18 15:59:41 ----D---- C:\Program Files\IKEA HomePlanner
2009-08-18 15:58:55 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
2009-08-17 21:59:45 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2009-08-16 22:12:24 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2009-08-16 22:12:14 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2009-08-16 22:12:03 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2009-08-16 22:11:49 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2009-08-16 22:05:25 ----D---- C:\WINDOWS\system32\XPSViewer
2009-08-16 22:05:21 ----D---- C:\Program Files\MSBuild
2009-08-16 22:05:19 ----D---- C:\WINDOWS\system32\en-US
2009-08-16 22:05:12 ----D---- C:\Program Files\Reference Assemblies
2009-08-16 22:04:14 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2009-08-16 22:04:14 ----N---- C:\WINDOWS\system32\prntvpt.dll
2009-08-16 22:04:13 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2009-08-16 22:04:11 ----DC---- C:\846d95cf16f998efdf6e7dae6d
2009-08-15 08:42:23 ----DC---- C:\6084a09bcfb1134afd
2009-08-15 08:42:05 ----DC---- C:\849ad5b93ad1d69c4e53d1acf3
2009-08-15 08:38:25 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2009-08-15 08:37:50 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2009-08-15 08:37:04 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2009-08-15 08:35:34 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2009-08-15 08:28:02 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2009-08-07 17:34:13 ----D---- C:\Documents and Settings\falher bernard\Application Data\U3
2009-07-28 18:04:51 ----D---- C:\Program Files\ViaMichelin
2009-07-28 17:38:18 ----D---- C:\Program Files\Microsoft ActiveSync
2009-07-26 16:44:56 ----A---- C:\WINDOWS\system32\sirenacm.dll
2009-07-24 19:59:08 ----D---- C:\Games
2009-07-15 21:39:36 ----HDC---- C:\WINDOWS\$NtUninstallKB973346$
2009-07-15 21:39:27 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-07-15 21:37:22 ----HDC---- C:\WINDOWS\$NtUninstallKB961371$
2009-07-10 16:59:52 ----A---- C:\WINDOWS\ModemLog_LGE Mobile USB Modem #2.txt
2009-07-10 16:57:27 ----A---- C:\WINDOWS\ModemLog_LGE Mobile USB Modem.txt
2009-07-02 21:48:58 ----D---- C:\WINDOWS\ie8updates
2009-07-02 21:45:55 ----HDC---- C:\WINDOWS\ie8
2009-06-10 09:25:13 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-06-10 09:25:04 ----HDC---- C:\WINDOWS\$NtUninstallKB969898$
2009-06-10 09:23:12 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-06-10 09:22:27 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-06-02 16:35:47 ----D---- C:\Program Files\McDonaldsFairies
2009-04-29 20:17:48 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2009-04-15 08:12:31 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-04-15 08:12:22 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
2009-04-15 08:09:56 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-04-15 08:09:39 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-04-15 08:09:29 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-04-15 08:09:16 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-03-16 20:29:44 ----D---- C:\Documents and Settings\falher bernard\Application Data\dvdcss
2009-03-11 20:51:06 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-03-11 20:50:58 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2009-03-11 20:50:49 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$
2009-03-11 20:49:57 ----HDC---- C:\WINDOWS\$NtUninstallKB959772_WM11$
2009-03-08 18:47:33 ----D---- C:\Documents and Settings\falher bernard\Application Data\LG Electronics
2009-03-08 18:25:08 ----D---- C:\lgupload
2009-03-08 18:21:09 ----D---- C:\Program Files\LG Electronics
2009-03-08 18:19:45 ----D---- C:\Program Files\LG PC Suite 2
2009-03-08 13:17:46 ----N---- C:\WINDOWS\system32\msrating.dll.mui
2009-03-08 13:17:30 ----N---- C:\WINDOWS\system32\mshta.exe.mui
2009-03-08 13:16:06 ----N---- C:\WINDOWS\system32\ie4uinit.exe.mui
2009-03-08 13:15:48 ----N---- C:\WINDOWS\system32\iedkcs32.dll.mui
2009-02-25 20:28:59 ----A---- C:\WINDOWS\imsins.BAK
2009-02-25 20:28:52 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-02-19 20:19:51 ----A---- C:\WINDOWS\system32\TUProgSt.exe
2009-02-11 23:09:57 ----HDC---- C:\WINDOWS\$NtUninstallKB960715$
2009-01-31 10:45:59 ----D---- C:\WINDOWS\Minidump
2009-01-31 10:37:57 ----D---- C:\Program Files\Barbie(TM)
2009-01-18 18:25:46 ----D---- C:\WINDOWS\8J4D83KTORGX09ID
2009-01-18 18:24:39 ----D---- C:\WINDOWS\EVCTAR8L2PIDGBS9
2009-01-14 14:14:10 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-01-07 17:20:18 ----A---- C:\WINDOWS\system32\msdbg2.dll
2009-01-05 18:19:34 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2009-01-05 18:19:34 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2009-01-05 18:19:33 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2009-01-05 18:19:33 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2009-01-05 18:19:33 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2009-01-05 18:19:33 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2009-01-05 18:19:32 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2009-01-05 18:19:32 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2009-01-05 18:19:32 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2009-01-05 18:19:32 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2009-01-05 18:19:31 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2009-01-05 18:19:31 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2009-01-05 18:19:31 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2009-01-05 18:19:31 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2009-01-05 18:19:31 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2009-01-05 18:19:30 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2009-01-05 18:19:30 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2009-01-05 18:19:30 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2009-01-05 18:19:30 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2009-01-05 18:19:29 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2009-01-05 18:19:29 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2009-01-05 18:19:29 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2009-01-05 18:19:28 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2009-01-05 18:19:28 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2009-01-05 18:19:28 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2009-01-05 18:19:28 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2009-01-05 18:19:27 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2009-01-05 18:19:27 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2009-01-05 18:19:27 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2009-01-05 18:19:26 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2009-01-05 18:19:26 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2009-01-05 18:19:25 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2009-01-05 18:19:25 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2009-01-05 18:19:25 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2009-01-05 18:19:25 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2009-01-05 18:19:25 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2009-01-05 18:19:24 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2009-01-05 18:19:24 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2009-01-05 18:19:24 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2009-01-05 18:19:23 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2009-01-05 18:19:22 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2009-01-05 18:19:21 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2009-01-05 18:19:20 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2009-01-05 18:19:18 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2009-01-05 18:19:18 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2009-01-05 18:19:18 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2009-01-05 18:19:18 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2009-01-05 18:19:18 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2009-01-05 18:19:17 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2009-01-05 18:19:17 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2009-01-05 18:19:17 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2009-01-05 18:19:16 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2009-01-05 18:19:16 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2009-01-05 18:19:16 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2009-01-05 18:19:14 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2009-01-05 18:19:14 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2009-01-05 18:19:14 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2009-01-05 18:19:13 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2009-01-05 18:19:13 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2009-01-05 18:19:13 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2009-01-05 18:19:12 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2009-01-05 18:19:12 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2009-01-05 18:19:12 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2009-01-05 18:19:11 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2009-01-05 18:15:35 ----HD---- C:\WINDOWS\msdownld.tmp
2009-01-05 18:15:26 ----D---- C:\WINDOWS\Logs
2009-01-05 16:36:35 ----D---- C:\Program Files\AbiSuite2
2009-01-05 16:02:49 ----D---- C:\Program Files\Antipub
2008-12-20 16:48:16 ----RA---- C:\WINDOWS\system32\Memorybar.exe
2008-12-17 20:23:45 ----D---- C:\Program Files\Microsoft Sync Framework
2008-12-17 20:22:52 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2008-12-17 18:09:10 ----D---- C:\WINDOWS\SxsCaPendDel
2008-12-17 17:32:20 ----D---- C:\Program Files\Microsoft Silverlight
2008-12-17 17:28:27 ----D---- C:\Program Files\Microsoft
2008-12-17 17:28:02 ----D---- C:\Program Files\Windows Live SkyDrive
2008-12-17 17:19:53 ----D---- C:\Program Files\Fichiers communs\Windows Live
2008-12-10 19:52:21 ----D---- C:\Documents and Settings\falher bernard\Application Data\InstallShield
2008-12-10 17:47:03 ----D---- C:\Documents and Settings\falher bernard\Application Data\TuneUp Software
2008-12-10 17:46:31 ----D---- C:\Documents and Settings\All Users\Application Data\TuneUp Software
2008-12-10 17:46:30 ----D---- C:\Program Files\TuneUp Utilities 2009
2008-12-10 17:46:11 ----SHD---- C:\Documents and Settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}
2008-12-10 17:19:47 ----A---- C:\WINDOWS\system32\SysRestore.dll
2008-12-10 17:19:47 ----A---- C:\WINDOWS\system32\ConTest.dll
2008-12-10 17:19:46 ----D---- C:\Program Files\Ascentive
2008-12-09 23:12:58 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2008-12-09 23:12:48 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2008-12-09 23:12:42 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2008-12-09 23:10:47 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2008-11-22 09:51:13 ----D---- C:\Program Files\IEToolbar
2008-11-22 09:50:41 ----A---- C:\WINDOWS\system32\Msvcrtd.dll
2008-11-22 09:50:34 ----D---- C:\Program Files\Zapu
2008-11-22 09:45:49 ----D---- C:\Program Files\BitDownload
2008-11-22 09:43:59 ----D---- C:\Program Files\Come2PlayK2P
2008-11-22 09:43:52 ----D---- C:\Program Files\BitTorrent Fastest Tool
2008-11-21 15:26:58 ----D---- C:\Documents and Settings\falher bernard\Application Data\WinRAR
2008-11-21 15:25:50 ----D---- C:\Program Files\WinRAR
2008-11-12 18:26:41 ----D---- C:\Documents and Settings\falher bernard\Application Data\Iconix
2008-11-12 18:26:40 ----D---- C:\Documents and Settings\All Users\Application Data\Iconix
2008-11-12 18:26:15 ----D---- C:\Program Files\Fichiers communs\Iconix
2008-11-12 18:26:12 ----D---- C:\Program Files\Iconix
2008-11-12 07:21:58 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2008-11-12 07:21:50 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2008-11-12 07:21:38 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2008-11-08 11:13:12 ----D---- C:\Documents and Settings\falher bernard\Application Data\CyberLink
2008-10-24 22:55:26 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2008-10-16 22:06:24 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2008-10-16 22:06:15 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$
2008-10-16 22:06:08 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
2008-10-16 22:05:28 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2008-10-16 22:05:15 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2008-10-07 17:29:48 ----A---- C:\WINDOWS\system32\Vb5fr.dll
2008-10-07 17:29:46 ----D---- C:\emme
2008-10-07 16:37:22 ----D---- C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-09-30 16:43:34 ----A---- C:\WINDOWS\system32\msxml4.dll
2008-09-21 02:00:59 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2008-09-20 14:20:15 ----D---- C:\WINDOWS\Prefetch
2008-09-20 09:46:36 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2008-09-20 09:46:26 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2008-09-20 09:46:14 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2008-09-20 09:46:02 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2008-09-20 09:45:51 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2008-09-20 09:45:40 ----HDC---- C:\WINDOWS\$NtUninstallKB951376$
2008-09-20 09:45:27 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2008-09-20 09:45:16 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2008-09-20 09:45:05 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2008-09-20 09:44:53 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2008-09-20 09:44:42 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2008-09-20 09:37:53 ----D---- C:\WINDOWS\system32\fr
2008-09-20 09:37:53 ----D---- C:\WINDOWS\l2schemas
2008-09-20 09:37:52 ----D---- C:\WINDOWS\system32\bits
2008-09-20 09:34:09 ----D---- C:\WINDOWS\ServicePackFiles
2008-09-20 09:25:16 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2008-09-10 02:01:53 ----HDC---- C:\WINDOWS\$NtUninstallKB938464_0$
2008-09-10 02:00:39 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2008-09-09 03:22:24 ----N---- C:\WINDOWS\system32\wlanapi.dll
2008-09-09 03:22:14 ----N---- C:\WINDOWS\system32\tspkg.dll
2008-09-09 03:22:14 ----N---- C:\WINDOWS\system32\tsgqec.dll
2008-09-09 03:22:06 ----N---- C:\WINDOWS\system32\spupdwxp.exe
2008-09-09 03:22:04 ----A---- C:\WINDOWS\system32\spdwnwxp.exe
2008-09-09 03:22:03 ----N---- C:\WINDOWS\system32\slserv.exe
2008-09-09 03:22:03 ----N---- C:\WINDOWS\system32\slrundll.exe
2008-09-09 03:22:03 ----N---- C:\WINDOWS\system32\slgen.dll
2008-09-09 03:22:03 ----N---- C:\WINDOWS\system32\slextspk.dll
2008-09-09 03:22:03 ----N---- C:\WINDOWS\system32\slcoinst.dll
2008-09-09 03:22:03 ----N---- C:\WINDOWS\slrundll.exe
2008-09-09 03:22:00 ----N---- C:\WINDOWS\system32\setupn.exe
2008-09-09 03:21:57 ----N---- C:\WINDOWS\system32\s3gnb.dll
2008-09-09 03:21:56 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2008-09-09 03:21:54 ----N---- C:\WINDOWS\system32\rasqec.dll
2008-09-09 03:21:54 ----N---- C:\WINDOWS\system32\qutil.dll
2008-09-09 03:21:53 ----N---- C:\WINDOWS\system32\qcliprov.dll
2008-09-09 03:21:52 ----N---- C:\WINDOWS\system32\qagentrt.dll
2008-09-09 03:21:52 ----N---- C:\WINDOWS\system32\qagent.dll
2008-09-09 03:21:48 ----N---- C:\WINDOWS\system32\onex.dll
2008-09-09 03:21:45 ----N---- C:\WINDOWS\system32\nv4_disp.dll
2008-09-09 03:21:39 ----N---- C:\WINDOWS\system32\napstat.exe
2008-09-09 03:21:39 ----N---- C:\WINDOWS\system32\napmontr.dll
2008-09-09 03:21:39 ----N---- C:\WINDOWS\system32\napipsec.dll
2008-09-09 03:21:39 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2008-09-09 03:21:36 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2008-09-09 03:21:36 ----N---- C:\WINDOWS\system32\mssha.dll
2008-09-09 03:21:21 ----N---- C:\WINDOWS\system32\mmcperf.exe
2008-09-09 03:21:21 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2008-09-09 03:21:21 ----N---- C:\WINDOWS\system32\mmcex.dll
2008-09-09 03:21:20 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2008-09-09 03:21:18 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2008-09-09 03:21:08 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2008-09-09 03:21:08 ----N---- C:\WINDOWS\system32\kmsvc.dll
2008-09-09 03:21:07 ----N---- C:\WINDOWS\system32\kbdpash.dll
2008-09-09 03:21:07 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2008-09-09 03:21:07 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2008-09-09 03:21:07 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2008-09-09 03:20:59 ----N---- C:\WINDOWS\system32\comsdupd.exe
2008-09-09 03:20:54 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2008-09-09 03:20:48 ----N---- C:\WINDOWS\system32\faxpatch.exe
2008-09-09 03:20:48 ----A---- C:\WINDOWS\003249_.tmp
2008-09-09 03:20:46 ----N---- C:\WINDOWS\system32\eapsvc.dll
2008-09-09 03:20:46 ----N---- C:\WINDOWS\system32\eapqec.dll
2008-09-09 03:20:46 ----N---- C:\WINDOWS\system32\eappprxy.dll
2008-09-09 03:20:46 ----N---- C:\WINDOWS\system32\eapphost.dll
2008-09-09 03:20:46 ----N---- C:\WINDOWS\system32\eappgnui.dll
2008-09-09 03:20:46 ----N---- C:\WINDOWS\system32\eappcfg.dll
2008-09-09 03:20:45 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2008-09-09 03:20:45 ----N---- C:\WINDOWS\system32\eapolqec.dll
2008-09-09 03:20:42 ----N---- C:\WINDOWS\system32\dot3ui.dll
2008-09-09 03:20:42 ----N---- C:\WINDOWS\system32\dot3svc.dll
2008-09-09 03:20:42 ----N---- C:\WINDOWS\system32\dot3msm.dll
2008-09-09 03:20:42 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2008-09-09 03:20:42 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2008-09-09 03:20:42 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2008-09-09 03:20:42 ----N---- C:\WINDOWS\system32\dot3api.dll
2008-09-09 03:20:40 ----N---- C:\WINDOWS\system32\dimsroam.dll
2008-09-09 03:20:40 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2008-09-09 03:20:40 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2008-09-09 03:20:37 ----N---- C:\WINDOWS\system32\credssp.dll
2008-09-09 03:20:30 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2008-09-09 03:20:30 ----N---- C:\WINDOWS\system32\azroles.dll
2008-09-09 03:20:29 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2008-09-09 03:20:28 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2008-09-09 03:20:28 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2008-09-09 03:20:20 ----N---- C:\WINDOWS\system32\aaclient.dll
2008-08-16 14:35:01 ----N---- C:\WINDOWS\system32\spmsg.dll
2008-08-16 14:34:13 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2008-08-16 14:33:02 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2008-08-14 16:46:35 ----HDC---- C:\WINDOWS\$NtUninstallKB952954_0$
2008-08-14 16:46:24 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$
2008-08-14 16:46:14 ----HDC---- C:\WINDOWS\$NtUninstallKB953839$
2008-08-14 16:46:04 ----HDC---- C:\WINDOWS\$NtUninstallKB950974_0$
2008-08-14 16:43:57 ----HDC---- C:\WINDOWS\$NtUninstallKB951072-v2$
2008-08-14 16:43:45 ----HDC---- C:\WINDOWS\$NtUninstallKB952287_0$
2008-08-14 16:42:18 ----HDC---- C:\WINDOWS\$NtUninstallKB951066_0$
2008-07-29 20:10:04 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2008-07-29 20:10:04 ----A---- C:\WINDOWS\system32\evr.dll
2008-07-29 20:10:04 ----A---- C:\WINDOWS\system32\dxva2.dll
2008-07-29 19:35:46 ----A---- C:\WINDOWS\system32\PresentationHost.exe
2008-07-29 18:59:58 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2008-07-29 18:59:58 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2008-07-29 18:59:58 ----A---- C:\WINDOWS\system32\PresentationHostProxy.dll
2008-07-29 18:59:58 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2008-07-29 18:24:50 ----A---- C:\WINDOWS\system32\infocardapi.dll
2008-07-29 18:24:50 ----A---- C:\WINDOWS\system32\icardres.dll
2008-07-29 18:24:50 ----A---- C:\WINDOWS\system32\icardagt.exe
2008-07-29 04:49:58 ----A---- C:\WINDOWS\system32\icardres.dll.mui
2008-07-25 10:16:58 ----A---- C:\WINDOWS\system32\mscories.dll
2008-07-25 10:16:58 ----A---- C:\WINDOWS\system32\mscorier.dll
2008-07-25 10:16:58 ----A---- C:\WINDOWS\system32\mscoree.dll
2008-07-25 10:16:46 ----A---- C:\WINDOWS\system32\dfshim.dll
2008-07-23 21:41:18 ----D---- C:\Program Files\MSXML 4.0
2008-07-23 12:27:15 ----D---- C:\tmp
2008-07-23 12:27:03 ----D---- C:\Documents and Settings\falher bernard\Application Data\Nosibay
2008-07-23 12:26:59 ----D---- C:\Program Files\Nosibay
2008-07-22 19:42:10 ----A---- C:\WINDOWS\FISHUI.INI
2008-07-22 19:29:45 ----D---- C:\Documents and Settings\falher bernard\Application Data\DataCast
2008-07-09 15:47:52 ----HDC---- C:\WINDOWS\$NtUninstallKB951748_0$
2008-07-03 06:47:01 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP10$
2008-07-02 16:56:50 ----D---- C:\Documents and Settings\All Users\Application Data\Downloaded Installations
2008-06-23 07:19:12 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2_0$
2008-06-18 13:05:25 ----D---- C:\Documents and Settings\falher bernard\Application Data\Viewpoint
2008-06-11 14:49:35 ----HDC---- C:\WINDOWS\$NtUninstallKB951698_0$
2008-06-11 14:49:26 ----HDC---- C:\WINDOWS\$NtUninstallKB950762_0$
2008-06-11 14:49:18 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2008-06-11 14:49:03 ----HDC---- C:\WINDOWS\$NtUninstallKB951376_0$
2008-06-01 17:09:17 ----D---- C:\Program Files\Conduit
2008-05-30 07:01:04 ----HDC---- C:\WINDOWS\$NtUninstallKB932823-v3$
2008-05-26 19:14:04 ----A---- C:\WINDOWS\system32\msxml4r.dll
2008-05-26 19:14:02 ----A---- C:\WINDOWS\system32\msxml4a.dll
2008-05-26 19:14:02 ----A---- C:\WINDOWS\system32\msvcr70.dll
2008-05-26 19:14:02 ----A---- C:\WINDOWS\system32\MSLUR71.dll
2008-05-26 19:14:02 ----A---- C:\WINDOWS\system32\MSLUP71.dll
2008-05-26 19:14:02 ----A---- C:\WINDOWS\system32\MFC71LU.DLL
2008-05-26 19:14:00 ----A---- C:\WINDOWS\system32\vorbisenc.dll
2008-05-26 19:14:00 ----A---- C:\WINDOWS\system32\vorbis.dll
2008-05-26 19:14:00 ----A---- C:\WINDOWS\system32\TG_DUMP0708.DLL
2008-05-26 19:14:00 ----A---- C:\WINDOWS\system32\tg_dump.dll
2008-05-26 19:14:00 ----A---- C:\WINDOWS\system32\OggDS.dll
2008-05-26 19:14:00 ----A---- C:\WINDOWS\system32\Ogg.dll
2008-05-26 19:14:00 ----A---- C:\WINDOWS\system32\muzwmts.dll
2008-05-26 19:14:00 ----A---- C:\WINDOWS\system32\mfc70.dll
2008-05-26 19:13:58 ----A---- C:\WINDOWS\system32\muzapp.exe
2008-05-26 19:13:58 ----A---- C:\WINDOWS\system32\muzapp.dll
2008-05-26 19:13:58 ----A---- C:\WINDOWS\system32\muzaf1.dll
2008-05-26 19:13:58 ----A---- C:\WINDOWS\system32\MAMACExtract.dll
2008-05-26 19:13:58 ----A---- C:\WINDOWS\system32\MaDRM.dll
2008-05-15 18:34:18 ----HDC---- C:\WINDOWS\$NtUninstallKB950749$
2008-05-05 06:25:10 ----N---- C:\WINDOWS\system32\xpsp4res.dll
2008-04-29 09:23:33 ----D---- C:\Documents and Settings\falher bernard\Application Data\Snapfish
2008-04-10 17:21:59 ----HDC---- C:\WINDOWS\$NtUninstallKB948881$
2008-04-10 17:21:21 ----HDC---- C:\WINDOWS\$NtUninstallKB941693$
2008-04-10 17:20:26 ----HDC---- C:\WINDOWS\$NtUninstallKB948590$
2008-04-10 17:18:30 ----HDC---- C:\WINDOWS\$NtUninstallKB945553$
2008-04-05 13:36:54 ----A---- C:\WINDOWS\WORDPAD.INI
2008-03-16 18:17:27 ----A---- C:\WINDOWS\system32\LAME_MP3.dll
2008-03-16 18:17:26 ----D---- C:\Program Files\Lame MP3 Codec
2008-03-16 18:16:39 ----A---- C:\WINDOWS\IFinst26.exe
2008-03-16 18:16:36 ----D---- C:\Program Files\XviD
2008-03-16 18:15:15 ----A---- C:\WINDOWS\system32\MTXSYNCICON.dll
2008-03-16 18:15:15 ----A---- C:\WINDOWS\system32\MSFLib.dll
2008-03-16 18:15:15 ----A---- C:\WINDOWS\system32\MSCLib.dll
2008-03-16 18:15:14 ----A---- C:\WINDOWS\system32\MTTELECHIP.dll
2008-03-16 18:15:14 ----A---- C:\WINDOWS\system32\MASetupWizard.dll
2008-03-16 18:15:13 ----A---- C:\WINDOWS\system32\MASetupCleaner.exe
2008-03-16 18:15:12 ----A---- C:\WINDOWS\system32\MK_Lyric.dll
2008-03-16 18:15:12 ----A---- C:\WINDOWS\system32\MaXMLProto.dll
2008-03-16 18:15:12 ----A---- C:\WINDOWS\system32\MaJUtilLib.dll
2008-03-16 18:15:12 ----A---- C:\WINDOWS\system32\MaJGUILib.dll
2008-03-16 18:15:12 ----A---- C:\WINDOWS\system32\MACXMLProto.dll
2008-03-16 18:15:08 ----D---- C:\Program Files\MarkAny
2008-03-16 18:14:59 ----D---- C:\Program Files\Samsung
2008-03-11 11:50:40 ----D---- C:\Program Files\NRJ
2008-02-13 15:36:29 ----HDC---- C:\WINDOWS\$NtUninstallKB946026$
2008-02-13 15:35:47 ----HDC---- C:\WINDOWS\$NtUninstallKB943055$
2008-02-12 16:18:10 ----D---- C:\Program Files\HomePlayer1.5.4
2008-02-12 15:59:02 ----D---- C:\Program Files\Adobe
2008-02-11 20:43:24 ----D---- C:\Program Files\Microsoft Office
2008-02-11 15:51:42 ----D---- C:\Documents and Settings\falher bernard\Application Data\OpenOffice.org2
2008-02-11 15:48:48 ----D---- C:\Program Files\OpenOffice.org 2.3
2008-01-31 11:08:54 ----A---- C:\WINDOWS\system32\ptpusd.dll
2008-01-31 11:08:54 ----A---- C:\WINDOWS\system32\ptpusb.dll
2008-01-24 17:03:46 ----D---- C:\Program Files\Freeplayer
2008-01-24 10:13:28 ----D---- C:\Documents and Settings\falher bernard\Application Data\Symantec
2008-01-23 20:47:33 ----D---- C:\Program Files\Norton 360
2008-01-23 20:46:50 ----A---- C:\WINDOWS\system32\S32EVNT1.DLL
2008-01-23 20:46:41 ----D---- C:\Program Files\Symantec
2008-01-23 19:06:09 ----RHDC---- C:\$VAULT$.AVG
2008-01-23 19:02:46 ----D---- C:\Documents and Settings\falher bernard\Application Data\AVG7
2008-01-23 19:02:15 ----D---- C:\Documents and Settings\All Users\Application Data\avg7
2008-01-23 18:10:12 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-01-22 20:08:39 ----D---- C:\Program Files\Spybot - Search & Destroy
2008-01-22 20:08:39 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-01-22 17:56:15 ----A---- C:\WINDOWS\system32\Machnm1.exe
2008-01-22 16:44:54 ----D---- C:\WINDOWS\BDOSCAN8
2008-01-09 23:15:35 ----HDC---- C:\WINDOWS\$NtUninstallKB941644$
2008-01-09 23:15:26 ----HDC---- C:\WINDOWS\$NtUninstallKB943485$
2007-12-13 09:06:56 ----HDC---- C:\WINDOWS\$NtUninstallKB937894$
2007-12-13 09:05:03 ----HDC---- C:\WINDOWS\$NtUninstallKB942763$
2007-12-13 09:04:54 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2007-12-13 09:03:57 ----HDC---- C:\WINDOWS\$NtUninstallKB941568$
2007-12-13 09:03:47 ----HDC---- C:\WINDOWS\$NtUninstallKB944653$
2007-11-24 08:35:54 ----D---- C:\Program Files\ItsLabel
2007-11-14 18:19:20 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2007-11-14 18:18:39 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2007-11-14 18:14:29 ----SHDC---- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2007-11-14 17:37:12 ----HDC---- C:\WINDOWS\$NtUninstallKB943460$
2007-10-25 21:27:27 ----DC---- C:\47642b0354e5e9ca38a678274c9957b4
2007-10-24 19:01:41 ----D---- C:\Documents and Settings\All Users\Application Data\BOONTY
2007-10-24 19:01:36 ----D---- C:\Program Files\Fichiers communs\BOONTY Shared
2007-10-24 19:01:13 ----D---- C:\Program Files\Boonty
2007-10-20 15:04:36 ----D---- C:\Program Files\7-Zip
2007-10-20 09:06:04 ----D---- C:\Program Files\MSXML 6.0
2007-10-19 19:47:18 ----D---- C:\Program Files\Microsoft SQL Server
2007-10-19 17:06:16 ----A---- C:\WINDOWS\system32\ltclr13n.dll
2007-10-19 17:06:16 ----A---- C:\WINDOWS\system32\lftif13n.dll
2007-10-19 17:06:16 ----A---- C:\WINDOWS\system32\lffax13n.dll
2007-10-19 17:05:14 ----A---- C:\WINDOWS\system32\lfgif13n.dll
2007-10-19 17:05:13 ----A---- C:\WINDOWS\system32\ltkrn13n.dll
2007-10-19 17:05:13 ----A---- C:\WINDOWS\system32\ltimg13n.dll
2007-10-19 17:05:13 ----A---- C:\WINDOWS\system32\ltfil13n.dll
2007-10-19 17:05:13 ----A---- C:\WINDOWS\system32\ltefx13n.dll
2007-10-19 17:05:13 ----A---- C:\WINDOWS\system32\ltdis13n.dll
2007-10-19 17:05:13 ----A---- C:\WINDOWS\system32\lfcmp13n.dll
2007-10-19 17:05:13 ----A---- C:\WINDOWS\system32\lfbmp13n.dll
2007-10-17 17:47:32 ----D---- C:\Documents and Settings\falher bernard\Application Data\StarOffice8
2007-10-17 17:30:05 ----D---- C:\Program Files\Sun
2007-10-16 18:23:19 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2007-10-12 15:09:06 ----A---- C:\WINDOWS\msoffice.ini
2007-10-12 14:36:58 ----D---- C:\Documents and Settings\falher bernard\Application Data\Sonic
2007-10-10 16:19:15 ----HDC---- C:\WINDOWS\$NtUninstallKB933729$
2007-10-10 16:17:05 ----HDC---- C:\WINDOWS\$NtUninstallKB941202$
2007-10-07 18:03:01 ----D---- C:\Documents and Settings\falher bernard\Application Data\EoRezo
2007-10-07 18:02:59 ----D---- C:\Program Files\EoRezo
2007-10-03 11:33:22 ----A---- C:\WINDOWS\err.txt
2007-10-03 11:33:02 ----A---- C:\WINDOWS\presd.txt
2007-10-03 11:32:36 ----A---- C:\WINDOWS\presf.txt
2007-10-03 11:32:36 ----A---- C:\WINDOWS\msnfix.txt
2007-09-30 17:44:05 ----D---- C:\Documents and Settings\falher bernard\Application Data\Leadertech
2007-09-28 17:13:48 ----D---- C:\WINDOWS\Downloaded Installations
2007-09-21 13:10:46 ----AC---- C:\UNWISE.EXE
2007-09-21 13:10:46 ----A---- C:\WINDOWS\ActiveSkin.INI
2007-09-20 19:14:21 ----D---- C:\Program Files\Multi_Media_France
2007-09-20 19:14:06 ----D---- C:\Program Files\MultiMedia France Toolbar
2007-09-05 08:28:22 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2007-09-03 22:18:36 ----D---- C:\Documents and Settings\falher bernard\Application Data\Printer Info Cache
2007-08-29 19:04:29 ----HDC---- C:\WINDOWS\$NtUninstallKB933360$
2007-08-27 15:42:36 ----D---- C:\Documents and Settings\falher bernard\Application Data\Image Zone Express
2007-08-22 14:29:50 ----D---- C:\Documents and Settings\falher bernard\Application Data\vlc
2007-08-15 17:51:32 ----HDC---- C:\WINDOWS\$NtUninstallKB936021$
2007-08-15 17:51:25 ----HDC---- C:\WINDOWS\$NtUninstallKB938828$
2007-08-15 17:51:19 ----HDC---- C:\WINDOWS\$NtUninstallKB921503$
2007-08-15 17:51:12 ----HDC---- C:\WINDOWS\$NtUninstallKB938829$
2007-08-15 17:48:51 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP11$
2007-08-10 22:59:21 ----D---- C:\Documents and Settings\All Users\Application Data\WindowsLiveInstaller
2007-08-10 22:59:13 ----D---- C:\Program Files\Windows Live
2007-08-10 22:59:06 ----D---- C:\Documents and Settings\All Users\Application Data\WLInstaller
2007-08-09 08:23:11 ----D---- C:\Program Files\VideoLAN
2007-08-07 15:52:41 ----A---- C:\WINDOWS\system32\javaws.exe
2007-08-07 15:52:41 ----A---- C:\WINDOWS\system32\javaw.exe
2007-08-07 15:52:41 ----A---- C:\WINDOWS\system32\java.exe
2007-08-04 13:41:39 ----A---- C:\WINDOWS\NCLogConfig.ini
2007-08-04 13:40:09 ----D---- C:\Documents and Settings\falher bernard\Application Data\HP
2007-08-04 13:39:53 ----D---- C:\Documents and Settings\All Users\Application Data\HP
2007-08-04 13:37:56 ----D---- C:\Program Files\Fichiers communs\HP
2007-08-04 13:35:16 ----D---- C:\Program Files\Hewlett-Packard
2007-08-04 13:34:35 ----D---- C:\Program Files\Fichiers communs\Hewlett-Packard
2007-08-04 13:33:04 ----RA---- C:\WINDOWS\system32\HPZIDS01.dll
2007-08-04 13:33:00 ----A---- C:\WINDOWS\system32\hpzll054.dll
2007-08-04 13:31:51 ----A---- C:\WINDOWS\system32\HPZisn12.dll
2007-08-04 13:31:51 ----A---- C:\WINDOWS\system32\HPZipt12.dll
2007-08-04 13:31:51 ----A---- C:\WINDOWS\system32\HPZipr12.dll
2007-08-04 13:31:51 ----A---- C:\WINDOWS\system32\HPZipm12.exe
2007-08-04 13:31:51 ----A---- C:\WINDOWS\system32\HPZinw12.exe
2007-08-04 13:31:51 ----A---- C:\WINDOWS\system32\HPZidr12.dll
2007-08-04 13:29:43 ----D---- C:\Program Files\HP
2007-08-04 13:28:41 ----HD---- C:\Config.Msi
2007-07-30 08:12:35 ----D---- C:\WINDOWS\system32\appmgmt
2007-07-17 16:30:06 ----D---- C:\Program Files\MSECache
2007-07-16 17:41:48 ----A---- C:\WINDOWS\system32\msonpmon.dll
2007-07-16 17:37:36 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2007-07-15 09:08:18 ----D---- C:\WINDOWS\ie7updates
2007-07-14 17:17:10 ----D---- C:\WINDOWS\WBEM
2007-07-14 17:17:09 ----D---- C:\WINDOWS\system32\fr-fr
2007-07-14 17:16:18 ----HDC---- C:\WINDOWS\ie7
2007-07-14 17:16:03 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2007-07-14 17:15:46 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2007-07-14 17:15:25 ----HDC---- C:\WINDOWS\$NtUninstallKB915865$
2007-07-14 17:15:23 ----A---- C:\WINDOWS\system32\xmllite.dll
2007-07-14 17:14:29 ----D---- C:\WINDOWS\network diagnostic
2007-07-14 17:14:28 ----HDC---- C:\WINDOWS\$NtUninstallKB914440$
2007-07-14 17:14:17 ----HDC---- C:\WINDOWS\$NtUninstallKB904942$
2007-07-11 14:34:02 ----HDC---- C:\WINDOWS\$NtUninstallKB936357$
2007-07-11 14:29:39 ----HDC---- C:\WINDOWS\$NtUninstallKB930494$
2007-07-03 15:48:19 ----D---- C:\WINDOWS\system32\IOSUBSYS
2007-06-22 16:34:23 ----D---- C:\Program Files\Alwil Software
2007-06-22 15:53:12 ----D---- C:\Program Files\Windows Live Safety Center
2007-06-16 07:54:06 ----D---- C:\Documents and Settings\All Users\Application Data\PC Tools
2007-06-14 19:30:31 ----D---- C:\Documents and Settings\falher bernard\Application Data\Talkback
2007-06-14 19:30:16 ----D---- C:\Documents and Settings\falher bernard\Application Data\Mozilla
2007-06-14 19:14:23 ----HDC---- C:\WINDOWS\$NtUninstallKB933566$
2007-06-14 19:14:04 ----HDC---- C:\WINDOWS\$NtUninstallKB929123$
2007-06-14 19:12:59 ----HDC---- C:\WINDOWS\$NtUninstallKB935840$
2007-06-14 18:18:37 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2007-06-14 18:15:35 ----D---- C:\Documents and Settings\falher bernard\Application Data\PC Tools
2007-06-14 18:15:35 ----A---- C:\WINDOWS\system32\msvcr80.dll
2007-06-14 18:13:52 ----D---- C:\Program Files\Mozilla Firefox
2007-06-14 18:13:44 ----D---- C:\Documents and Settings\All Users\Application Data\Mozilla
2007-06-14 18:13:43 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2007-06-14 18:12:21 ----D---- C:\Documents and Settings\All Users\Application Data\Google Updater
2007-06-14 17:27:25 ----HDC---- C:\WINDOWS\$NtUninstallKB935839$
2007-05-25 18:44:15 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2007-05-23 19:29:40 ----HDC---- C:\WINDOWS\$NtUninstallKB927891$
2007-05-23 19:08:30 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2007-05-23 19:08:30 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2007-05-23 19:08:30 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2007-05-15 14:43:10 ----A---- C:\WINDOWS\system32\msxml6.dll
2007-05-13 12:25:29 ----RA---- C:\WINDOWS\system32\lvcoinst.ini
2007-05-13 12:25:29 ----RA---- C:\WINDOWS\system32\lvcoinst.dll
2007-05-13 12:25:28 ----RA---- C:\WINDOWS\system32\LVUI2RC.dll
2007-05-13 12:25:27 ----RA---- C:\WINDOWS\system32\LVUI2.dll
2007-05-13 12:25:27 ----RA---- C:\WINDOWS\system32\lvcodec2.dll
2007-05-13 12:25:18 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2007-05-09 17:10:54 ----HDC---- C:\WINDOWS\$NtUninstallKB931768$
2007-05-09 17:10:48 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-05-09 17:10:38 ----HDC---- C:\WINDOWS\$NtUninstallKB930916$
2007-05-08 16:18:01 ----D---- C:\Documents and Settings\falher bernard\Application Data\Google
2007-05-08 16:17:36 ----D---- C:\Program Files\Google
2007-05-08 16:17:36 ----D---- C:\Documents and Settings\All Users\Application Data\Google
2007-04-22 23:04:09 ----D---- C:\Documents and Settings\falher bernard\Application Data\Media Player Classic
2007-04-22 23:01:49 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2007-04-22 23:01:49 ----A---- C:\WINDOWS\system32\wmv9vcm.dll
2007-04-22 23:01:48 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2007-04-22 23:01:48 ----A---- C:\WINDOWS\system32\xvidcore.dll
2007-04-22 23:01:48 ----A---- C:\WINDOWS\system32\ssldivx.dll
2007-04-22 23:01:48 ----A---- C:\WINDOWS\system32\qt-dx331.dll
2007-04-22 23:01:48 ----A---- C:\WINDOWS\system32\libdivx.dll
2007-04-22 23:01:48 ----A---- C:\WINDOWS\system32\dtu100.dll
2007-04-22 23:01:47 ----A---- C:\WINDOWS\system32\dpl100.dll
2007-04-22 23:01:47 ----A---- C:\WINDOWS\system32\divx.dll
2007-04-22 23:01:46 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2007-04-22 23:01:46 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2007-04-22 23:01:45 ----D---- C:\Program Files\K-Lite Codec Pack
2007-04-16 20:38:45 ----D---- C:\Program Files\Fichiers communs\Adobe
2007-04-15 15:17:58 ----A---- C:\WINDOWS\ka.ini
2007-04-15 15:16:18 ----D---- C:\Program Files\Fichiers communs\Vivendi Universal Games
2007-04-12 17:41:15 ----HDC---- C:\WINDOWS\$NtUninstallKB931784$
2007-04-12 17:41:05 ----HDC---- C:\WINDOWS\$NtUninstallKB935448$
2007-04-12 17:40:38 ----HDC---- C:\WINDOWS\$NtUninstallKB931261$
2007-04-12 17:40:31 ----HDC---- C:\WINDOWS\$NtUninstallKB930178$
2007-04-12 17:40:24 ----HDC---- C:\WINDOWS\$NtUninstallKB932168$
2007-04-12 17:40:00 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2007-04-11 19:02:37 ----D---- C:\Documents and Settings\falher bernard\Application Data\Help
2007-04-10 18:52:40 ----D---- C:\Documents and Settings\falher bernard\Application Data\VadeRetro
2007-04-10 18:16:44 ----HDC---- C:\WINDOWS\$NtUninstallKB926239$
2007-04-10 18:16:21 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2007-04-10 18:16:07 ----D---- C:\Program Files\Windows Media Connect 2
2007-04-10 18:14:54 ----D---- C:\WINDOWS\system32\LogFiles
2007-04-10 18:14:50 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2007-04-10 18:14:19 ----A---- C:\WINDOWS\system32\psisdecd.dll
2007-04-10 15:29:27 ----D---- C:\Documents and Settings\All Users\Application Data\CyberLink
2007-04-05 17:24:43 ----D---- C:\Documents and Settings\falher bernard\Application Data\Windows Desktop Search
2007-04-05 17:19:36 ----D---- C:\Program Files\Windows Desktop Search
2007-04-05 17:19:31 ----HDC---- C:\WINDOWS\$NtUninstallKB911993-V2$
2007-04-04 06:36:40 ----HDC---- C:\WINDOWS\$NtUninstallKB925902$
2007-04-03 21:53:21 ----DC---- C:\Archivos de programa
2007-04-03 21:47:00 ----D---- C:\Program Files\eMule
2007-04-01 19:10:36 ----HDC---- C:\WINDOWS\$NtUninstallKB920213$
2007-04-01 17:48:45 ----A---- C:\WINDOWS\system32\muweb.dll
2007-04-01 17:48:45 ----A---- C:\WINDOWS\system32\mucltui.dll
2007-04-01 09:23:38 ----SHD---- C:\RECYCLER
2007-03-31 12:47:25 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Live Toolbar
2007-03-31 12:46:51 ----D---- C:\Program Files\Windows Live Toolbar
2007-03-31 12:44:22 ----DC---- C:\WINDOWS\system32\DRVSTORE
2007-03-31 12:38:52 ----HDC---- C:\WINDOWS\$NtUninstallKB927779$
2007-03-31 12:38:46 ----HDC---- C:\WINDOWS\$NtUninstallKB927802$
2007-03-31 12:38:40 ----HDC---- C:\WINDOWS\$NtUninstallKB924191$
2007-03-31 12:38:33 ----HDC---- C:\WINDOWS\$NtUninstallKB922819$
2007-03-31 12:38:25 ----HDC---- C:\WINDOWS\$NtUninstallKB923414$
2007-03-31 12:38:16 ----HDC---- C:\WINDOWS\$NtUninstallKB928255$
2007-03-31 12:38:10 ----HDC---- C:\WINDOWS\$NtUninstallKB929969$
2007-03-31 12:38:04 ----HDC---- C:\WINDOWS\$NtUninstallKB925398_WMP64$
2007-03-31 12:37:49 ----HDC---- C:\WINDOWS\$NtUninstallKB920685$
2007-03-31 12:37:41 ----HDC---- C:\WINDOWS\$NtUninstallKB923980$
2007-03-31 12:36:25 ----HDC---- C:\WINDOWS\$NtUninstallKB924667$
2007-03-31 12:36:08 ----A---- C:\WINDOWS\system32\MRT.exe
2007-03-31 12:36:01 ----HDC---- C:\WINDOWS\$NtUninstallKB924270$
2007-03-31 12:35:51 ----HDC---- C:\WINDOWS\$NtUninstallKB929338$
2007-03-31 12:35:43 ----HDC---- C:\WINDOWS\$NtUninstallKB924496$
2007-03-31 12:35:36 ----HDC---- C:\WINDOWS\$NtUninstallKB931836$
2007-03-31 12:35:27 ----HDC---- C:\WINDOWS\$NtUninstallKB926251$
2007-03-31 12:33:45 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2007-03-31 12:33:04 ----HDC---- C:\WINDOWS\$NtUninstallKB923689$
2007-03-31 12:32:47 ----HDC---- C:\WINDOWS\$NtUninstallKB926436$
2007-03-31 12:32:39 ----HDC---- C:\WINDOWS\$NtUninstallKB920872$
2007-03-31 12:32:28 ----HDC---- C:\WINDOWS\$NtUninstallKB919007$
2007-03-31 12:32:21 ----HDC---- C:\WINDOWS\$NtUninstallKB914388$
2007-03-31 12:32:13 ----HDC---- C:\WINDOWS\$NtUninstallKB923191$
2007-03-31 12:32:05 ----HDC---- C:\WIND

Autres pages sur : qulques virus resolu

Lassé par la pub ? Créez un compte

il etait pas complet; voila la suite

2007-03-31 12:31:13 ----HDC---- C:\WINDOWS\$NtUninstallKB928843$
2007-03-31 12:26:54 ----D---- C:\Documents and Settings\falher bernard\Application Data\MSNInstaller
2007-03-31 12:10:12 ----D---- C:\Documents and Settings\falher bernard\Application Data\OD2
2007-03-31 11:19:52 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2007-03-31 11:14:49 ----D---- C:\Documents and Settings\falher bernard\Application Data\AdobeUM
2007-03-31 11:13:40 ----D---- C:\Documents and Settings\falher bernard\Application Data\Adobe
2007-03-31 11:09:04 ----D---- C:\Program Files\Free
2007-03-31 11:09:02 ----SHD---- C:\WINDOWS\ftpcache
2007-03-29 19:53:58 ----D---- C:\WINDOWS\Sun
2007-03-29 19:53:57 ----D---- C:\Documents and Settings\falher bernard\Application Data\Sun
2007-03-29 19:50:43 ----ASH---- C:\Documents and Settings\falher bernard\Application Data\desktop.ini
2007-03-29 19:50:42 ----SD---- C:\Documents and Settings\falher bernard\Application Data\Microsoft
2007-03-29 19:50:42 ----D---- C:\Documents and Settings\falher bernard\Application Data\You've Got Pictures Screensaver
2007-03-29 19:50:42 ----D---- C:\Documents and Settings\falher bernard\Application Data\SampleView
2007-03-29 19:50:42 ----D---- C:\Documents and Settings\falher bernard\Application Data\Macromedia
2007-03-29 19:50:42 ----D---- C:\Documents and Settings\falher bernard\Application Data\Identities
2007-03-29 19:50:42 ----D---- C:\Documents and Settings\falher bernard\Application Data\ATI
2007-03-29 19:50:42 ----D---- C:\Documents and Settings\falher bernard\Application Data\AOL
2007-03-29 18:47:50 ----SHD---- C:\System Volume Information
2007-03-15 17:19:28 ----A---- C:\WINDOWS\system32\LegitCheckControl.DLL
2007-03-15 17:17:20 ----N---- C:\WINDOWS\system32\WgaTray.exe
2007-03-15 17:16:48 ----N---- C:\WINDOWS\system32\WgaLogon.dll
2007-02-19 04:23:04 ----A---- C:\WINDOWS\system32\SymNPPWA.dll
2007-01-29 09:58:06 ----N---- C:\WINDOWS\system32\tzchange.exe
2007-01-10 03:47:37 ----A---- C:\WINDOWS\system32\SymRedir.dll
2007-01-10 03:47:37 ----A---- C:\WINDOWS\system32\SymNeti.dll
2007-01-03 03:11:20 ----A---- C:\WINDOWS\system32\7-zip32.dll
2006-11-21 15:57:10 ----D---- C:\WINDOWS\I386
2006-11-21 15:56:55 ----A---- C:\WINDOWS\system32\wowfaxui.dll
2006-11-21 15:56:51 ----A---- C:\WINDOWS\system32\wowfax.dll
2006-11-21 15:56:44 ----A---- C:\WINDOWS\system32\usrvpa.dll
2006-11-21 15:56:41 ----A---- C:\WINDOWS\system32\usrvoica.dll
2006-11-21 15:56:38 ----A---- C:\WINDOWS\system32\usrv80a.dll
2006-11-21 15:56:34 ----A---- C:\WINDOWS\system32\usrv42a.dll
2006-11-21 15:56:31 ----A---- C:\WINDOWS\system32\usrsvpia.dll
2006-11-21 15:56:28 ----A---- C:\WINDOWS\system32\usrshuta.exe
2006-11-21 15:56:24 ----A---- C:\WINDOWS\system32\usrsdpia.dll
2006-11-21 15:56:21 ----A---- C:\WINDOWS\system32\usrrtosa.dll
2006-11-21 15:56:18 ----A---- C:\WINDOWS\system32\usrprbda.exe
2006-11-21 15:56:15 ----A---- C:\WINDOWS\system32\usrmlnka.exe
2006-11-21 15:56:11 ----A---- C:\WINDOWS\system32\usrlbva.dll
2006-11-21 15:56:08 ----A---- C:\WINDOWS\system32\usrfaxa.dll
2006-11-21 15:56:05 ----A---- C:\WINDOWS\system32\usrdtea.dll
2006-11-21 15:56:01 ----A---- C:\WINDOWS\system32\usrdpa.dll
2006-11-21 15:55:58 ----A---- C:\WINDOWS\system32\usrcoina.dll
2006-11-21 15:55:55 ----A---- C:\WINDOWS\system32\usrcntra.dll
2006-11-21 15:55:54 ----A---- C:\WINDOWS\system32\usbui.dll
2006-11-21 15:55:51 ----A---- C:\WINDOWS\system32\tsbyuv.dll
2006-11-21 15:55:48 ----A---- C:\WINDOWS\system32\streamci.dll
2006-11-21 15:55:47 ----A---- C:\WINDOWS\system32\storprop.dll
2006-11-21 15:55:44 ----A---- C:\WINDOWS\system32\sprio800.dll
2006-11-21 15:55:41 ----A---- C:\WINDOWS\system32\sprio600.dll
2006-11-21 15:55:36 ----A---- C:\WINDOWS\system32\spnike.dll
2006-11-21 15:55:34 ----A---- C:\WINDOWS\system32\pjlmon.dll
2006-11-21 15:55:34 ----A---- C:\WINDOWS\system32\pid.dll
2006-11-21 15:55:31 ----A---- C:\WINDOWS\system32\paqsp.dll
2006-11-21 15:55:27 ----A---- C:\WINDOWS\system32\msyuv.dll
2006-11-21 15:55:23 ----A---- C:\WINDOWS\system32\mdwmdmsp.dll
2006-11-21 15:55:22 ----A---- C:\WINDOWS\system32\ksuser.dll
2006-11-21 15:55:21 ----A---- C:\WINDOWS\system32\iyuv_32.dll
2006-11-21 15:55:20 ----A---- C:\WINDOWS\system32\hidserv.dll
2006-11-21 15:55:20 ----A---- C:\WINDOWS\system32\hid.dll
2006-11-21 15:55:18 ----A---- C:\WINDOWS\system32\dvdplay.exe
2006-11-21 15:54:22 ----A---- C:\WINDOWS\system32\dmutil.dll
2006-11-21 15:53:43 ----A---- C:\WINDOWS\system32\cnbjmon.dll
2006-11-21 15:50:14 ----RD---- C:\Program Files
2006-11-21 15:46:08 ----RSD---- C:\WINDOWS\assembly
2006-11-21 15:46:04 ----RD---- C:\WINDOWS\Offline Web Pages
2006-11-21 15:44:18 ----RSHDC---- C:\WINDOWS\system32\dllcache
2006-11-21 15:14:05 ----A---- C:\WINDOWS\system32\zipfldr.dll
2006-11-21 15:14:00 ----A---- C:\WINDOWS\system32\xmlprovi.dll
2006-11-21 15:14:00 ----A---- C:\WINDOWS\system32\xmlprov.dll
2006-11-21 15:13:59 ----A---- C:\WINDOWS\system32\xenroll.dll
2006-11-21 15:13:59 ----A---- C:\WINDOWS\system32\xcopy.exe
2006-11-21 15:13:59 ----A---- C:\WINDOWS\system32\xactsrv.dll
2006-11-21 15:13:58 ----A---- C:\WINDOWS\system32\wuweb.dll
2006-11-21 15:13:58 ----A---- C:\WINDOWS\system32\wups.dll
2006-11-21 15:13:58 ----A---- C:\WINDOWS\system32\wupdmgr.exe
2006-11-21 15:13:58 ----A---- C:\WINDOWS\system32\wucltui.dll
2006-11-21 15:13:58 ----A---- C:\WINDOWS\system32\wuauserv.dll
2006-11-21 15:13:58 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2006-11-21 15:13:57 ----A---- C:\WINDOWS\system32\wuaueng.dll
2006-11-21 15:13:57 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2006-11-21 15:13:57 ----A---- C:\WINDOWS\system32\wuauclt.exe
2006-11-21 15:13:57 ----A---- C:\WINDOWS\system32\wuapi.dll
2006-11-21 15:13:57 ----A---- C:\WINDOWS\system32\wtsapi32.dll
2006-11-21 15:13:56 ----A---- C:\WINDOWS\system32\wstdecod.dll
2006-11-21 15:13:56 ----A---- C:\WINDOWS\system32\wsock32.dll
2006-11-21 15:13:56 ----A---- C:\WINDOWS\system32\wsnmp32.dll
2006-11-21 15:13:56 ----A---- C:\WINDOWS\system32\wshtcpip.dll
2006-11-21 15:13:56 ----A---- C:\WINDOWS\system32\wshrm.dll
2006-11-21 15:13:56 ----A---- C:\WINDOWS\system32\wshnetbs.dll
2006-11-21 15:13:56 ----A---- C:\WINDOWS\system32\wshisn.dll
2006-11-21 15:13:56 ----A---- C:\WINDOWS\system32\wship6.dll
2006-11-21 15:13:56 ----A---- C:\WINDOWS\system32\wshfr.dll
2006-11-21 15:13:56 ----A---- C:\WINDOWS\system32\wshext.dll
2006-11-21 15:13:56 ----A---- C:\WINDOWS\system32\wshcon.dll
2006-11-21 15:13:56 ----A---- C:\WINDOWS\system32\wshbth.dll
2006-11-21 15:13:56 ----A---- C:\WINDOWS\system32\wshatm.dll
2006-11-21 15:13:56 ----A---- C:\WINDOWS\system32\wsecedit.dll
2006-11-21 15:13:56 ----A---- C:\WINDOWS\system32\wscsvc.dll
2006-11-21 15:13:55 ----A---- C:\WINDOWS\system32\wscript.exe
2006-11-21 15:13:55 ----A---- C:\WINDOWS\system32\wscntfy.exe
2006-11-21 15:13:55 ----A---- C:\WINDOWS\system32\ws2help.dll
2006-11-21 15:13:55 ----A---- C:\WINDOWS\system32\ws2_32.dll
2006-11-21 15:13:55 ----A---- C:\WINDOWS\system32\write.exe
2006-11-21 15:13:55 ----A---- C:\WINDOWS\system32\wpnpinst.exe
2006-11-21 15:13:55 ----A---- C:\WINDOWS\system32\wpabaln.exe
2006-11-21 15:13:55 ----A---- C:\WINDOWS\system32\wowexec.exe
2006-11-21 15:13:55 ----A---- C:\WINDOWS\system32\wowdeb.exe
2006-11-21 15:13:54 ----A---- C:\WINDOWS\system32\wow32.dll
2006-11-21 15:13:52 ----A---- C:\WINDOWS\system32\wmstream.dll
2006-11-21 15:13:51 ----A---- C:\WINDOWS\system32\wmsdmoe.dll
2006-11-21 15:13:50 ----A---- C:\WINDOWS\system32\wmpsrcwp.dll
2006-11-21 15:13:50 ----A---- C:\WINDOWS\system32\wmpshell.dll
2006-11-21 15:13:48 ----A---- C:\WINDOWS\system32\wmpencen.dll
2006-11-21 15:13:48 ----A---- C:\WINDOWS\system32\wmpdxm.dll
2006-11-21 15:13:47 ----A---- C:\WINDOWS\system32\wmpasf.dll
2006-11-21 15:13:42 ----A---- C:\WINDOWS\system32\wmiscmgr.dll
2006-11-21 15:13:42 ----A---- C:\WINDOWS\system32\wmiprop.dll
2006-11-21 15:13:41 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2006-11-21 15:13:41 ----A---- C:\WINDOWS\system32\wmi.dll
2006-11-21 15:13:41 ----A---- C:\WINDOWS\system32\wmerror.dll
2006-11-21 15:13:41 ----A---- C:\WINDOWS\system32\wmerrFRA.dll
2006-11-21 15:13:40 ----A---- C:\WINDOWS\system32\wlnotify.dll
2006-11-21 15:13:40 ----A---- C:\WINDOWS\system32\wldap32.dll
2006-11-21 15:13:40 ----A---- C:\WINDOWS\system32\wkssvc.dll
2006-11-21 15:13:39 ----A---- C:\WINDOWS\system32\winver.exe
2006-11-21 15:13:39 ----A---- C:\WINDOWS\system32\wintrust.dll
2006-11-21 15:13:39 ----A---- C:\WINDOWS\system32\winstrm.dll
2006-11-21 15:13:39 ----A---- C:\WINDOWS\system32\winsta.dll
2006-11-21 15:13:39 ----A---- C:\WINDOWS\system32\winspool.exe
2006-11-21 15:13:39 ----A---- C:\WINDOWS\system32\winsock.dll
2006-11-21 15:13:39 ----A---- C:\WINDOWS\system32\winshfhc.dll
2006-11-21 15:13:39 ----A---- C:\WINDOWS\system32\winscard.dll
2006-11-21 15:13:39 ----A---- C:\WINDOWS\system32\winrnr.dll
2006-11-21 15:13:38 ----A---- C:\WINDOWS\system32\winntbbu.dll
2006-11-21 15:13:35 ----A---- C:\WINDOWS\system32\winnls.dll
2006-11-21 15:13:35 ----A---- C:\WINDOWS\system32\winmsd.exe
2006-11-21 15:13:35 ----A---- C:\WINDOWS\system32\winmm.dll
2006-11-21 15:13:35 ----A---- C:\WINDOWS\system32\winmine.exe
2006-11-21 15:13:35 ----A---- C:\WINDOWS\system32\winlogon.exe
2006-11-21 15:13:35 ----A---- C:\WINDOWS\system32\winipsec.dll
2006-11-21 15:13:34 ----A---- C:\WINDOWS\winhlp32.exe
2006-11-21 15:13:34 ----A---- C:\WINDOWS\winhelp.exe
2006-11-21 15:13:34 ----A---- C:\WINDOWS\system32\winhttp.dll
2006-11-21 15:13:34 ----A---- C:\WINDOWS\system32\winhlp32.exe
2006-11-21 15:13:34 ----A---- C:\WINDOWS\system32\winfax.dll
2006-11-21 15:13:32 ----A---- C:\WINDOWS\system32\winchat.exe
2006-11-21 15:13:32 ----A---- C:\WINDOWS\system32\winbrand.dll
2006-11-21 15:13:32 ----A---- C:\WINDOWS\system32\win87em.dll
2006-11-21 15:13:32 ----A---- C:\WINDOWS\system32\win32spl.dll
2006-11-21 15:13:31 ----A---- C:\WINDOWS\system32\win.com
2006-11-21 15:13:31 ----A---- C:\WINDOWS\system32\wifeman.dll
2006-11-21 15:13:31 ----A---- C:\WINDOWS\system32\wiavusd.dll
2006-11-21 15:13:31 ----A---- C:\WINDOWS\system32\wiavideo.dll
2006-11-21 15:13:31 ----A---- C:\WINDOWS\system32\wiashext.dll
2006-11-21 15:13:30 ----A---- C:\WINDOWS\system32\wiaservc.dll
2006-11-21 15:13:30 ----A---- C:\WINDOWS\system32\wiascr.dll
2006-11-21 15:13:30 ----A---- C:\WINDOWS\system32\wiadss.dll
2006-11-21 15:13:30 ----A---- C:\WINDOWS\system32\wiadefui.dll
2006-11-21 15:13:30 ----A---- C:\WINDOWS\system32\wiaacmgr.exe
2006-11-21 15:13:30 ----A---- C:\WINDOWS\system32\wextract.exe
2006-11-21 15:13:29 ----A---- C:\WINDOWS\system32\webvw.dll
2006-11-21 15:13:29 ----A---- C:\WINDOWS\system32\webhits.dll
2006-11-21 15:13:28 ----A---- C:\WINDOWS\system32\webcheck.dll
2006-11-21 15:13:28 ----A---- C:\WINDOWS\system32\wdigest.dll
2006-11-21 15:13:23 ----A---- C:\WINDOWS\system32\wavemsp.dll
2006-11-21 15:13:22 ----A---- C:\WINDOWS\system32\w3ssl.dll
2006-11-21 15:13:22 ----A---- C:\WINDOWS\system32\w32topl.dll
2006-11-21 15:13:22 ----A---- C:\WINDOWS\system32\w32tm.exe
2006-11-21 15:13:22 ----A---- C:\WINDOWS\system32\w32time.dll
2006-11-21 15:13:22 ----A---- C:\WINDOWS\system32\vwipxspx.exe
2006-11-21 15:13:22 ----A---- C:\WINDOWS\system32\vwipxspx.dll
2006-11-21 15:13:22 ----A---- C:\WINDOWS\system32\vssvc.exe
2006-11-21 15:13:22 ----A---- C:\WINDOWS\system32\vss_ps.dll
2006-11-21 15:13:21 ----A---- C:\WINDOWS\vmmreg32.dll
2006-11-21 15:13:21 ----A---- C:\WINDOWS\system32\vssapi.dll
2006-11-21 15:13:21 ----A---- C:\WINDOWS\system32\vssadmin.exe
2006-11-21 15:13:21 ----A---- C:\WINDOWS\system32\vjoy.dll
2006-11-21 15:13:20 ----A---- C:\WINDOWS\system32\vga64k.dll
2006-11-21 15:13:20 ----A---- C:\WINDOWS\system32\vga256.dll
2006-11-21 15:13:20 ----A---- C:\WINDOWS\system32\vga.dll
2006-11-21 15:13:20 ----A---- C:\WINDOWS\system32\vfpodbc.dll
2006-11-21 15:13:20 ----A---- C:\WINDOWS\system32\version.dll
2006-11-21 15:13:20 ----A---- C:\WINDOWS\system32\verifier.exe
2006-11-21 15:13:20 ----A---- C:\WINDOWS\system32\verifier.dll
2006-11-21 15:13:19 ----A---- C:\WINDOWS\system32\ver.dll
2006-11-21 15:13:19 ----A---- C:\WINDOWS\system32\vdmredir.dll
2006-11-21 15:13:19 ----A---- C:\WINDOWS\system32\vdmdbg.dll
2006-11-21 15:13:19 ----A---- C:\WINDOWS\system32\vcdex.dll
2006-11-21 15:13:19 ----A---- C:\WINDOWS\system32\vbsfr.dll
2006-11-21 15:13:19 ----A---- C:\WINDOWS\system32\vbscript.dll
2006-11-21 15:13:19 ----A---- C:\WINDOWS\system32\vbajet32.dll
2006-11-21 15:13:19 ----A---- C:\WINDOWS\system32\uxtheme.dll
2006-11-21 15:13:18 ----A---- C:\WINDOWS\system32\utilman.exe
2006-11-21 15:13:18 ----A---- C:\WINDOWS\system32\utildll.dll
2006-11-21 15:13:18 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2006-11-21 15:13:18 ----A---- C:\WINDOWS\system32\usp10.dll
2006-11-21 15:13:17 ----A---- C:\WINDOWS\system32\userinit.exe
2006-11-21 15:13:17 ----A---- C:\WINDOWS\system32\userenv.dll
2006-11-21 15:13:17 ----A---- C:\WINDOWS\system32\user.exe
2006-11-21 15:13:17 ----A---- C:\WINDOWS\system32\usbmon.dll
2006-11-21 15:13:16 ----A---- C:\WINDOWS\system32\url.dll
2006-11-21 15:13:16 ----A---- C:\WINDOWS\system32\ureg.dll
2006-11-21 15:13:16 ----A---- C:\WINDOWS\system32\ups.exe
2006-11-21 15:13:16 ----A---- C:\WINDOWS\system32\upnpui.dll
2006-11-21 15:13:16 ----A---- C:\WINDOWS\system32\upnphost.dll
2006-11-21 15:13:16 ----A---- C:\WINDOWS\system32\upnpcont.exe
2006-11-21 15:13:16 ----A---- C:\WINDOWS\system32\upnp.dll
2006-11-21 15:13:14 ----A---- C:\WINDOWS\system32\untfs.dll
2006-11-21 15:13:14 ----A---- C:\WINDOWS\system32\unlodctr.exe
2006-11-21 15:13:14 ----A---- C:\WINDOWS\system32\uniplat.dll
2006-11-21 15:13:14 ----A---- C:\WINDOWS\system32\unimdmat.dll
2006-11-21 15:13:13 ----A---- C:\WINDOWS\system32\umdmxfrm.dll
2006-11-21 15:13:13 ----A---- C:\WINDOWS\system32\umandlg.dll
2006-11-21 15:13:13 ----A---- C:\WINDOWS\system32\ulib.dll
2006-11-21 15:13:13 ----A---- C:\WINDOWS\system32\ufat.dll
2006-11-21 15:13:13 ----A---- C:\WINDOWS\system32\udhisapi.dll
2006-11-21 15:13:13 ----A---- C:\WINDOWS\system32\typeperf.exe
2006-11-21 15:13:13 ----A---- C:\WINDOWS\system32\typelib.dll
2006-11-21 15:13:12 ----A---- C:\WINDOWS\twunk_32.exe
2006-11-21 15:13:12 ----A---- C:\WINDOWS\twunk_16.exe
2006-11-21 15:13:12 ----A---- C:\WINDOWS\twain_32.dll
2006-11-21 15:13:12 ----A---- C:\WINDOWS\twain.dll
2006-11-21 15:13:12 ----A---- C:\WINDOWS\system32\twext.dll
2006-11-21 15:13:12 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2006-11-21 15:13:12 ----A---- C:\WINDOWS\system32\tslabels.ini
2006-11-21 15:13:12 ----A---- C:\WINDOWS\system32\tskill.exe
2006-11-21 15:13:11 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2006-11-21 15:13:11 ----A---- C:\WINDOWS\system32\tsddd.dll
2006-11-21 15:13:11 ----A---- C:\WINDOWS\system32\tsd32.dll
2006-11-21 15:13:11 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2006-11-21 15:13:11 ----A---- C:\WINDOWS\system32\tscon.exe
2006-11-21 15:13:11 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2006-11-21 15:13:11 ----A---- C:\WINDOWS\system32\tsappcmp.dll
2006-11-21 15:13:11 ----A---- C:\WINDOWS\system32\trkwks.dll
2006-11-21 15:13:11 ----A---- C:\WINDOWS\system32\tree.com
2006-11-21 15:13:11 ----A---- C:\WINDOWS\system32\traffic.dll
2006-11-21 15:13:10 ----A---- C:\WINDOWS\system32\tracert6.exe
2006-11-21 15:13:10 ----A---- C:\WINDOWS\system32\tracert.exe
2006-11-21 15:13:10 ----A---- C:\WINDOWS\system32\tracerpt.exe
2006-11-21 15:13:08 ----A---- C:\WINDOWS\system32\tourstart.exe
2006-11-21 15:13:08 ----A---- C:\WINDOWS\system32\toolhelp.dll
2006-11-21 15:13:07 ----A---- C:\WINDOWS\system32\tlntsvrp.dll
2006-11-21 15:13:07 ----A---- C:\WINDOWS\system32\tlntsvr.exe
2006-11-21 15:13:07 ----A---- C:\WINDOWS\system32\tlntsess.exe
2006-11-21 15:13:07 ----A---- C:\WINDOWS\system32\tlntadmn.exe
2006-11-21 15:13:05 ----A---- C:\WINDOWS\system32\themeui.dll
2006-11-21 15:13:04 ----A---- C:\WINDOWS\system32\tftp.exe
2006-11-21 15:13:04 ----A---- C:\WINDOWS\system32\termmgr.dll
2006-11-21 15:13:03 ----A---- C:\WINDOWS\TASKMAN.EXE
2006-11-21 15:13:03 ----A---- C:\WINDOWS\system32\tcpsvcs.exe
2006-11-21 15:13:03 ----A---- C:\WINDOWS\system32\tcpmonui.dll
2006-11-21 15:13:03 ----A---- C:\WINDOWS\system32\tcpmon.ini
2006-11-21 15:13:03 ----A---- C:\WINDOWS\system32\tcpmon.dll
2006-11-21 15:13:03 ----A---- C:\WINDOWS\system32\tcpmib.dll
2006-11-21 15:13:03 ----A---- C:\WINDOWS\system32\tcmsetup.exe
2006-11-21 15:13:03 ----A---- C:\WINDOWS\system32\taskmgr.exe
2006-11-21 15:13:03 ----A---- C:\WINDOWS\system32\taskman.exe
2006-11-21 15:13:03 ----A---- C:\WINDOWS\system32\tasklist.exe
2006-11-21 15:13:03 ----A---- C:\WINDOWS\system32\taskkill.exe
2006-11-21 15:13:03 ----A---- C:\WINDOWS\system32\tapiui.dll
2006-11-21 15:13:03 ----A---- C:\WINDOWS\system32\tapiperf.dll
2006-11-21 15:13:03 ----A---- C:\WINDOWS\system32\tapi32.dll
2006-11-21 15:13:02 ----A---- C:\WINDOWS\system32\tapi3.dll
2006-11-21 15:13:02 ----A---- C:\WINDOWS\system32\tapi.dll
2006-11-21 15:13:01 ----A---- C:\WINDOWS\system32\systray.exe
2006-11-21 15:11:44 ----A---- C:\WINDOWS\system32\syssetup.dll
2006-11-21 15:11:44 ----A---- C:\WINDOWS\system32\sysocmgr.exe
2006-11-21 15:11:43 ----A---- C:\WINDOWS\system32\systeminfo.exe
2006-11-21 15:11:43 ----A---- C:\WINDOWS\system32\syskey.exe
2006-11-21 15:11:43 ----A---- C:\WINDOWS\system32\sysinv.dll
2006-11-21 15:11:43 ----A---- C:\WINDOWS\system32\sysedit.exe
2006-11-21 15:11:43 ----A---- C:\WINDOWS\system32\syncui.dll
2006-11-21 15:11:42 ----A---- C:\WINDOWS\system32\synceng.dll
2006-11-21 15:11:42 ----A---- C:\WINDOWS\system32\syncapp.exe
2006-11-21 15:11:42 ----A---- C:\WINDOWS\system32\sxs.dll
2006-11-21 15:11:42 ----A---- C:\WINDOWS\system32\swprv.dll
2006-11-21 15:11:42 ----A---- C:\WINDOWS\system32\svcpack.dll
2006-11-21 15:09:59 ----A---- C:\WINDOWS\system32\svchost.exe
2006-11-21 15:09:57 ----A---- C:\WINDOWS\system32\subst.exe
2006-11-21 15:09:57 ----A---- C:\WINDOWS\system32\strmfilt.dll
2006-11-21 15:09:57 ----A---- C:\WINDOWS\system32\strmdll.dll
2006-11-21 15:09:57 ----A---- C:\WINDOWS\system32\storage.dll
2006-11-21 15:09:57 ----A---- C:\WINDOWS\system32\stobject.dll
2006-11-21 15:09:57 ----A---- C:\WINDOWS\system32\stimon.exe
2006-11-21 15:09:57 ----A---- C:\WINDOWS\system32\sti_ci.dll
2006-11-21 15:09:57 ----A---- C:\WINDOWS\system32\sti.dll
2006-11-21 15:09:57 ----A---- C:\WINDOWS\system32\stclient.dll
2006-11-21 15:09:55 ----A---- C:\WINDOWS\system32\ssdpsrv.dll
2006-11-21 15:09:55 ----A---- C:\WINDOWS\system32\ssdpapi.dll
2006-11-21 15:09:54 ----A---- C:\WINDOWS\system32\srsvc.dll
2006-11-21 15:09:54 ----A---- C:\WINDOWS\system32\srrstr.dll
2006-11-21 15:09:54 ----A---- C:\WINDOWS\system32\srclient.dll
2006-11-21 15:09:54 ----A---- C:\WINDOWS\system32\sqlwoa.dll
2006-11-21 15:09:54 ----A---- C:\WINDOWS\system32\sqlwid.dll
2006-11-21 15:09:54 ----A---- C:\WINDOWS\system32\sqlunirl.dll
2006-11-21 15:09:53 ----A---- C:\WINDOWS\system32\sqlsrv32.dll
2006-11-21 15:09:53 ----A---- C:\WINDOWS\system32\spxcoins.dll
2006-11-21 15:09:52 ----A---- C:\WINDOWS\system32\xpsp2res.dll
2006-11-21 15:09:52 ----A---- C:\WINDOWS\system32\xpsp1res.dll
2006-11-21 15:09:52 ----A---- C:\WINDOWS\system32\sprestrt.exe
2006-11-21 15:09:52 ----A---- C:\WINDOWS\system32\spoolss.dll
2006-11-21 15:09:52 ----A---- C:\WINDOWS\system32\spnpinst.exe
2006-11-21 15:09:52 ----A---- C:\WINDOWS\system32\spiisupd.exe
2006-11-21 15:09:51 ----A---- C:\WINDOWS\system32\spider.exe
2006-11-21 15:09:49 ----A---- C:\WINDOWS\system32\sort.exe
2006-11-21 15:09:49 ----A---- C:\WINDOWS\system32\sol.exe
2006-11-21 15:09:49 ----A---- C:\WINDOWS\system32\softpub.dll
2006-11-21 15:09:49 ----A---- C:\WINDOWS\system32\snmpsnap.dll
2006-11-21 15:09:48 ----A---- C:\WINDOWS\system32\snmpapi.dll
2006-11-21 15:09:48 ----A---- C:\WINDOWS\system32\sndvol32.exe
2006-11-21 15:09:48 ----A---- C:\WINDOWS\system32\sndrec32.exe
2006-11-21 15:09:47 ----A---- C:\WINDOWS\system32\smss.exe
2006-11-21 15:09:47 ----A---- C:\WINDOWS\system32\smlogsvc.exe
2006-11-21 15:09:47 ----A---- C:\WINDOWS\system32\smlogcfg.dll
2006-11-21 15:09:47 ----A---- C:\WINDOWS\system32\smbinst.exe
2006-11-21 15:09:46 ----A---- C:\WINDOWS\system32\slbrccsp.dll
2006-11-21 15:09:46 ----A---- C:\WINDOWS\system32\slbiop.dll
2006-11-21 15:09:46 ----A---- C:\WINDOWS\system32\slbcsp.dll
2006-11-21 15:09:46 ----A---- C:\WINDOWS\system32\slayerxp.dll
2006-11-21 15:09:46 ----A---- C:\WINDOWS\system32\skeys.exe
2006-11-21 15:09:45 ----A---- C:\WINDOWS\system32\skdll.dll
2006-11-21 15:09:45 ----A---- C:\WINDOWS\system32\sisbkup.dll
2006-11-21 15:09:45 ----A---- C:\WINDOWS\system32\sigverif.exe
2006-11-21 15:09:45 ----A---- C:\WINDOWS\system32\sigtab.dll
2006-11-21 15:09:44 ----A---- C:\WINDOWS\system32\shutdown.exe
2006-11-21 15:09:44 ----A---- C:\WINDOWS\system32\shsvcs.dll
2006-11-21 15:09:44 ----A---- C:\WINDOWS\system32\shscrap.dll
2006-11-21 15:09:44 ----A---- C:\WINDOWS\system32\shrpubw.exe
2006-11-21 15:09:44 ----A---- C:\WINDOWS\system32\shmgrate.exe
2006-11-21 15:09:44 ----A---- C:\WINDOWS\system32\shmedia.dll
2006-11-21 15:09:43 ----A---- C:\WINDOWS\system32\shimgvw.dll
2006-11-21 15:09:43 ----A---- C:\WINDOWS\system32\shimeng.dll
2006-11-21 15:09:43 ----A---- C:\WINDOWS\system32\shgina.dll
2006-11-21 15:09:43 ----A---- C:\WINDOWS\system32\shfolder.dll
2006-11-21 15:09:41 ----A---- C:\WINDOWS\system32\shell.dll
2006-11-21 15:09:40 ----A---- C:\WINDOWS\system32\shdoclc.dll
2006-11-21 15:09:40 ----A---- C:\WINDOWS\system32\share.exe
2006-11-21 15:09:40 ----A---- C:\WINDOWS\system32\shadow.exe
2006-11-21 15:09:40 ----A---- C:\WINDOWS\system32\sfmapi.dll
2006-11-21 15:09:40 ----A---- C:\WINDOWS\system32\sfc_os.dll
2006-11-21 15:09:39 ----A---- C:\WINDOWS\system32\sfcfiles.dll
2006-11-21 15:09:39 ----A---- C:\WINDOWS\system32\sfc.exe
2006-11-21 15:09:39 ----A---- C:\WINDOWS\system32\sfc.dll
2006-11-21 15:09:39 ----A---- C:\WINDOWS\system32\setver.exe
2006-11-21 15:09:38 ----A---- C:\WINDOWS\system32\setupdll.dll
2006-11-21 15:09:38 ----A---- C:\WINDOWS\system32\setupapi.dll
2006-11-21 15:09:38 ----A---- C:\WINDOWS\system32\setup.exe
2006-11-21 15:09:38 ----A---- C:\WINDOWS\system32\sethc.exe
2006-11-21 15:09:38 ----A---- C:\WINDOWS\system32\sessmgr.exe
2006-11-21 15:09:38 ----A---- C:\WINDOWS\system32\serwvdrv.dll
2006-11-21 15:09:38 ----A---- C:\WINDOWS\system32\services.msc
2006-11-21 15:09:38 ----A---- C:\WINDOWS\system32\services.exe
2006-11-21 15:09:38 ----A---- C:\WINDOWS\system32\servdeps.dll
2006-11-21 15:09:37 ----A---- C:\WINDOWS\system32\serialui.dll
2006-11-21 15:09:37 ----A---- C:\WINDOWS\system32\senscfg.dll
2006-11-21 15:09:37 ----A---- C:\WINDOWS\system32\sensapi.dll
2006-11-21 15:09:37 ----A---- C:\WINDOWS\system32\sens.dll
2006-11-21 15:09:37 ----A---- C:\WINDOWS\system32\sendmail.dll
2006-11-21 15:09:37 ----A---- C:\WINDOWS\system32\sendcmsg.dll
2006-11-21 15:09:37 ----A---- C:\WINDOWS\system32\security.dll
2006-11-21 15:09:37 ----A---- C:\WINDOWS\system32\secur32.dll
2006-11-21 15:09:37 ----A---- C:\WINDOWS\system32\secpol.msc
2006-11-21 15:09:36 ----A---- C:\WINDOWS\system32\seclogon.dll
2006-11-21 15:09:36 ----A---- C:\WINDOWS\system32\secedit.exe
2006-11-21 15:09:36 ----A---- C:\WINDOWS\system32\sdpblb.dll
2006-11-21 15:09:36 ----A---- C:\WINDOWS\system32\sdhcinst.dll
2006-11-21 15:09:36 ----A---- C:\WINDOWS\system32\sdbinst.exe
2006-11-21 15:09:36 ----A---- C:\WINDOWS\system32\scrrun.dll
2006-11-21 15:09:36 ----A---- C:\WINDOWS\system32\scrrnfr.dll
2006-11-21 15:09:36 ----A---- C:\WINDOWS\system32\scrobj.dll
2006-11-21 15:09:36 ----A---- C:\WINDOWS\system32\scriptpw.dll
2006-11-21 15:09:36 ----A---- C:\WINDOWS\system32\scredir.dll
2006-11-21 15:09:36 ----A---- C:\WINDOWS\system32\scofr.dll
2006-11-21 15:09:36 ----A---- C:\WINDOWS\system32\schtasks.exe
2006-11-21 15:09:35 ----A---- C:\WINDOWS\system32\sclgntfy.dll
2006-11-21 15:09:35 ----A---- C:\WINDOWS\system32\schedsvc.dll
2006-11-21 15:09:35 ----A---- C:\WINDOWS\system32\schannel.dll
2006-11-21 15:09:35 ----A---- C:\WINDOWS\system32\scesrv.dll
2006-11-21 15:09:35 ----A---- C:\WINDOWS\system32\scecli.dll
2006-11-21 15:09:35 ----A---- C:\WINDOWS\system32\sccsccp.dll
2006-11-21 15:09:35 ----A---- C:\WINDOWS\system32\sccbase.dll
2006-11-21 15:09:35 ----A---- C:\WINDOWS\system32\scardsvr.exe
2006-11-21 15:09:35 ----A---- C:\WINDOWS\system32\scardssp.dll
2006-11-21 15:09:35 ----A---- C:\WINDOWS\system32\scarddlg.dll
2006-11-21 15:09:35 ----A---- C:\WINDOWS\system32\sc.exe
2006-11-21 15:09:34 ----A---- C:\WINDOWS\system32\sbeio.dll
2006-11-21 15:09:34 ----A---- C:\WINDOWS\system32\sbe.dll
2006-11-21 15:09:34 ----A---- C:\WINDOWS\system32\savedump.exe
2006-11-21 15:09:34 ----A---- C:\WINDOWS\system32\samsrv.dll
2006-11-21 15:09:33 ----A---- C:\WINDOWS\system32\samlib.dll
2006-11-21 15:09:32 ----A---- C:\WINDOWS\system32\safrslv.dll
2006-11-21 15:09:32 ----A---- C:\WINDOWS\system32\safrdm.dll
2006-11-21 15:09:32 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2006-11-21 15:09:32 ----A---- C:\WINDOWS\system32\rwinsta.exe
2006-11-21 15:09:31 ----R---- C:\WINDOWS\system32\rsop.msc
2006-11-21 15:09:31 ----A---- C:\WINDOWS\system32\runonce.exe
2006-11-21 15:09:31 ----A---- C:\WINDOWS\system32\rundll32.exe
2006-11-21 15:09:31 ----A---- C:\WINDOWS\system32\runas.exe
2006-11-21 15:09:31 ----A---- C:\WINDOWS\system32\rtutils.dll
2006-11-21 15:09:31 ----A---- C:\WINDOWS\system32\rtm.dll
2006-11-21 15:09:31 ----A---- C:\WINDOWS\system32\rtipxmib.dll
2006-11-21 15:09:31 ----A---- C:\WINDOWS\system32\rtcshare.exe
2006-11-21 15:09:31 ----A---- C:\WINDOWS\system32\rsvpsp.dll
2006-11-21 15:09:31 ----A---- C:\WINDOWS\system32\rsvpperf.dll
2006-11-21 15:09:31 ----A---- C:\WINDOWS\system32\rsvpmsg.dll
2006-11-21 15:09:31 ----A---- C:\WINDOWS\system32\rsvp.ini
2006-11-21 15:09:31 ----A---- C:\WINDOWS\system32\rsvp.exe
2006-11-21 15:09:31 ----A---- C:\WINDOWS\system32\rsopprov.exe
2006-11-21 15:09:31 ----A---- C:\WINDOWS\system32\rsnotify.exe
2006-11-21 15:09:30 ----A---- C:\WINDOWS\system32\rsmui.exe
2006-11-21 15:09:30 ----A---- C:\WINDOWS\system32\rsmsink.exe
2006-11-21 15:09:30 ----A---- C:\WINDOWS\system32\rsmps.dll
2006-11-21 15:09:30 ----A---- C:\WINDOWS\system32\rsm.exe
2006-11-21 15:09:30 ----A---- C:\WINDOWS\system32\rshx32.dll
2006-11-21 15:09:30 ----A---- C:\WINDOWS\system32\rsh.exe
2006-11-21 15:09:30 ----A---- C:\WINDOWS\system32\rsfsaps.dll
2006-11-21 15:09:30 ----A---- C:\WINDOWS\system32\rsaenh.dll
2006-11-21 15:09:30 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2006-11-21 15:09:30 ----A---- C:\WINDOWS\system32\rpcns4.dll
2006-11-21 15:09:28 ----A---- C:\WINDOWS\system32\routetab.dll
2006-11-21 15:09:28 ----A---- C:\WINDOWS\system32\routemon.exe
2006-11-21 15:09:28 ----A---- C:\WINDOWS\system32\route.exe
2006-11-21 15:09:28 ----A---- C:\WINDOWS\system32\rnr20.dll
2006-11-21 15:09:28 ----A---- C:\WINDOWS\system32\riched32.dll
2006-11-21 15:09:28 ----A---- C:\WINDOWS\system32\riched20.dll
2006-11-21 15:09:28 ----A---- C:\WINDOWS\system32\rexec.exe
2006-11-21 15:09:28 ----A---- C:\WINDOWS\system32\resutils.dll
2006-11-21 15:09:28 ----A---- C:\WINDOWS\system32\reset.exe
2006-11-21 15:09:28 ----A---- C:\WINDOWS\system32\replace.exe
2006-11-21 15:09:27 ----A---- C:\WINDOWS\system32\rend.dll
2006-11-21 15:09:27 ----A---- C:\WINDOWS\system32\remotepg.dll
2006-11-21 15:09:27 ----A---- C:\WINDOWS\system32\relog.exe
2006-11-21 15:09:27 ----A---- C:\WINDOWS\system32\regwizc.dll
2006-11-21 15:09:27 ----A---- C:\WINDOWS\system32\regwiz.exe
2006-11-21 15:09:27 ----A---- C:\WINDOWS\system32\regsvr32.exe
2006-11-21 15:09:27 ----A---- C:\WINDOWS\system32\regsvc.dll
2006-11-21 15:09:27 ----A---- C:\WINDOWS\system32\regini.exe
2006-11-21 15:09:27 ----A---- C:\WINDOWS\system32\regedt32.exe
2006-11-21 15:09:27 ----A---- C:\WINDOWS\system32\regapi.dll
2006-11-21 15:09:27 ----A---- C:\WINDOWS\system32\reg.exe
2006-11-21 15:09:27 ----A---- C:\WINDOWS\system32\redir.exe
2006-11-21 15:09:27 ----A---- C:\WINDOWS\system32\recover.exe
2006-11-21 15:09:27 ----A---- C:\WINDOWS\regedit.exe
2006-11-21 15:09:26 ----A---- C:\WINDOWS\system32\rdshost.exe
2006-11-21 15:09:26 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2006-11-21 15:09:26 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2006-11-21 15:09:26 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2006-11-21 15:09:26 ----A---- C:\WINDOWS\system32\rdpdd.dll
2006-11-21 15:09:26 ----A---- C:\WINDOWS\system32\rdpclip.exe
2006-11-21 15:09:26 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2006-11-21 15:09:26 ----A---- C:\WINDOWS\system32\rdchost.dll
2006-11-21 15:09:26 ----A---- C:\WINDOWS\system32\rcp.exe
2006-11-21 15:09:26 ----A---- C:\WINDOWS\system32\rcimlby.exe
2006-11-21 15:09:26 ----A---- C:\WINDOWS\system32\rcbdyctl.dll
2006-11-21 15:09:26 ----A---- C:\WINDOWS\system32\rastls.dll
2006-11-21 15:09:26 ----A---- C:\WINDOWS\system32\rastapi.dll
2006-11-21 15:09:26 ----A---- C:\WINDOWS\system32\rasser.dll
2006-11-21 15:09:26 ----A---- C:\WINDOWS\system32\rassapi.dll
2006-11-21 15:09:26 ----A---- C:\WINDOWS\system32\rasrad.dll
2006-11-21 15:09:25 ----A---- C:\WINDOWS\system32\rasppp.dll
2006-11-21 15:09:25 ----A---- C:\WINDOWS\system32\rasphone.exe
2006-11-21 15:09:25 ----A---- C:\WINDOWS\system32\rasmxs.dll
2006-11-21 15:09:25 ----A---- C:\WINDOWS\system32\rasmontr.dll
2006-11-21 15:09:25 ----A---- C:\WINDOWS\system32\rasman.dll
2006-11-21 15:09:25 ----A---- C:\WINDOWS\system32\rasdlg.dll
2006-11-21 15:09:25 ----A---- C:\WINDOWS\system32\rasdial.exe
2006-11-21 15:09:25 ----A---- C:\WINDOWS\system32\rasctrs.ini
2006-11-21 15:09:25 ----A---- C:\WINDOWS\system32\rasctrs.dll
2006-11-21 15:09:25 ----A---- C:\WINDOWS\system32\raschap.dll
2006-11-21 15:09:25 ----A---- C:\WINDOWS\system32\rasautou.exe
2006-11-21 15:09:25 ----A---- C:\WINDOWS\system32\rasauto.dll
2006-11-21 15:09:25 ----A---- C:\WINDOWS\system32\rasapi32.dll
2006-11-21 15:09:24 ----A---- C:\WINDOWS\system32\racpldlg.dll
2006-11-21 15:09:24 ----A---- C:\WINDOWS\system32\qwinsta.exe
2006-11-21 15:09:24 ----A---- C:\WINDOWS\system32\query.dll
2006-11-21 15:09:23 ----A---- C:\WINDOWS\system32\qprocess.exe
2006-11-21 15:09:23 ----A---- C:\WINDOWS\system32\qosname.dll
2006-11-21 15:09:23 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2006-11-21 15:09:23 ----A---- C:\WINDOWS\system32\qmgr.dll
2006-11-21 15:09:21 ----A---- C:\WINDOWS\system32\qedwipes.dll
2006-11-21 15:09:21 ----A---- C:\WINDOWS\system32\qedit.dll
2006-11-21 15:09:21 ----A---- C:\WINDOWS\system32\qdv.dll
2006-11-21 15:09:21 ----A---- C:\WINDOWS\system32\qcap.dll
2006-11-21 15:09:21 ----A---- C:\WINDOWS\system32\qappsrv.exe
2006-11-21 15:09:21 ----A---- C:\WINDOWS\system32\pubprn.vbs
2006-11-21 15:09:21 ----A---- C:\WINDOWS\system32\pstorsvc.dll
2006-11-21 15:09:21 ----A---- C:\WINDOWS\system32\pstorec.dll
2006-11-21 15:09:21 ----A---- C:\WINDOWS\system32\psnppagn.dll
2006-11-21 15:09:21 ----A---- C:\WINDOWS\system32\pschdprf.ini
2006-11-21 15:09:21 ----A---- C:\WINDOWS\system32\pschdprf.dll
2006-11-21 15:09:21 ----A---- C:\WINDOWS\system32\psbase.dll
2006-11-21 15:09:20 ----A---- C:\WINDOWS\system32\psapi.dll
2006-11-21 15:09:09 ----A---- C:\WINDOWS\system32\proxycfg.exe
2006-11-21 15:09:09 ----A---- C:\WINDOWS\system32\proquota.exe
2006-11-21 15:09:09 ----A---- C:\WINDOWS\system32\progman.exe
2006-11-21 15:09:09 ----A---- C:\WINDOWS\system32\profmap.dll
2006-11-21 15:09:09 ----A---- C:\WINDOWS\system32\prodspec.ini
2006-11-21 15:09:08 ----A---- C:\WINDOWS\system32\prnqctl.vbs
2006-11-21 15:09:08 ----A---- C:\WINDOWS\system32\prnport.vbs
2006-11-21 15:09:08 ----A---- C:\WINDOWS\system32\prnmngr.vbs
2006-11-21 15:09:08 ----A---- C:\WINDOWS\system32\prnjobs.vbs
2006-11-21 15:09:08 ----A---- C:\WINDOWS\system32\prndrvr.vbs
2006-11-21 15:09:08 ----A---- C:\WINDOWS\system32\prncnfg.vbs
2006-11-21 15:09:08 ----A---- C:\WINDOWS\system32\printui.dll
2006-11-21 15:09:08 ----A---- C:\WINDOWS\system32\print.exe
2006-11-21 15:09:08 ----A---- C:\WINDOWS\system32\prflbmsg.dll
2006-11-21 15:09:07 ----A---- C:\WINDOWS\system32\powrprof.dll
2006-11-21 15:09:07 ----A---- C:\WINDOWS\system32\powercfg.exe
2006-11-21 15:09:07 ----A---- C:\WINDOWS\system32\polstore.dll
2006-11-21 15:09:07 ----A---- C:\WINDOWS\system32\pnrpnsp.dll
2006-11-21 15:09:07 ----A---- C:\WINDOWS\system32\pmspl.dll
2006-11-21 15:09:07 ----A---- C:\WINDOWS\system32\plustab.dll
2006-11-21 15:09:06 ----A---- C:\WINDOWS\system32\ping6.exe
2006-11-21 15:09:06 ----A---- C:\WINDOWS\system32\ping.exe
2006-11-21 15:09:06 ----A---- C:\WINDOWS\system32\pifmgr.dll
2006-11-21 15:09:06 ----A---- C:\WINDOWS\system32\pidgen.dll
2006-11-21 15:09:05 ----R---- C:\WINDOWS\system32\perfmon.msc
2006-11-21 15:09:05 ----A---- C:\WINDOWS\system32\photowiz.dll
2006-11-21 15:09:05 ----A---- C:\WINDOWS\system32\perfwci.ini
2006-11-21 15:09:05 ----A---- C:\WINDOWS\system32\perfts.dll
2006-11-21 15:09:05 ----A---- C:\WINDOWS\system32\perfproc.dll
2006-11-21 15:09:05 ----A---- C:\WINDOWS\system32\perfos.dll
2006-11-21 15:09:05 ----A---- C:\WINDOWS\system32\perfnw.dll
2006-11-21 15:09:05 ----A---- C:\WINDOWS\system32\perfnet.dll
2006-11-21 15:09:05 ----A---- C:\WINDOWS\system32\perfmon.exe
2006-11-21 15:09:05 ----A---- C:\WINDOWS\system32\perffilt.ini
2006-11-21 15:09:05 ----A---- C:\WINDOWS\system32\perfdisk.dll
2006-11-21 15:09:05 ----A---- C:\WINDOWS\system32\perfctrs.dll
2006-11-21 15:09:05 ----A---- C:\WINDOWS\system32\perfci.ini
2006-11-21 15:09:04 ----A---- C:\WINDOWS\system32\pentnt.exe
2006-11-21 15:09:04 ----A---- C:\WINDOWS\system32\pdh.dll
2006-11-21 15:09:01 ----A---- C:\WINDOWS\system32\pautoenr.dll
2006-11-21 15:09:01 ----A---- C:\WINDOWS\system32\pathping.exe
2006-11-21 15:09:01 ----A---- C:\WINDOWS\system32\panmap.dll
2006-11-21 15:09:00 ----A---- C:\WINDOWS\system32\pagefileconfig.vbs
2006-11-21 15:09:00 ----A---- C:\WINDOWS\system32\packager.exe
2006-11-21 15:09:00 ----A---- C:\WINDOWS\system32\p2psvc.dll
2006-11-21 15:09:00 ----A---- C:\WINDOWS\system32\p2pnetsh.dll
2006-11-21 15:08:59 ----A---- C:\WINDOWS\system32\p2pgraph.dll
2006-11-21 15:08:59 ----A---- C:\WINDOWS\system32\p2pgasvc.dll
2006-11-21 15:08:59 ----A---- C:\WINDOWS\system32\p2p.dll
2006-11-21 15:08:59 ----A---- C:\WINDOWS\system32\osuninst.exe
2006-11-21 15:08:59 ----A---- C:\WINDOWS\system32\osuninst.dll
2006-11-21 15:08:59 ----A---- C:\WINDOWS\system32\osk.exe
2006-11-21 15:08:59 ----A---- C:\WINDOWS\system32\opengl32.dll
2006-11-21 15:08:59 ----A---- C:\WINDOWS\system32\openfiles.exe
2006-11-21 15:08:58 ----A---- C:\WINDOWS\system32\olethk32.dll
2006-11-21 15:08:58 ----A---- C:\WINDOWS\system32\olesvr32.dll
2006-11-21 15:08:58 ----A---- C:\WINDOWS\system32\olesvr.dll
2006-11-21 15:08:58 ----A---- C:\WINDOWS\system32\olepro32.dll
2006-11-21 15:08:58 ----A---- C:\WINDOWS\system32\oleprn.dll
2006-11-21 15:08:58 ----A---- C:\WINDOWS\system32\oledlg.dll
2006-11-21 15:08:58 ----A---- C:\WINDOWS\system32\olecli.dll
2006-11-21 15:08:57 ----N---- C:\WINDOWS\system32\oleaut32.dll
2006-11-21 15:08:57 ----A---- C:\WINDOWS\system32\oleaccrc.dll
2006-11-21 15:08:57 ----A---- C:\WINDOWS\system32\oleacc.dll
2006-11-21 15:08:57 ----A---- C:\WINDOWS\system32\ole2nls.dll
2006-11-21 15:08:57 ----A---- C:\WINDOWS\system32\ole2disp.dll
2006-11-21 15:08:57 ----A---- C:\WINDOWS\system32\ole2.dll
2006-11-21 15:08:57 ----A---- C:\WINDOWS\system32\offfilt.dll
2006-11-21 15:08:45 ----A---- C:\WINDOWS\system32\odtext32.dll
2006-11-21 15:08:45 ----A---- C:\WINDOWS\system32\odpdx32.dll
2006-11-21 15:08:45 ----A---- C:\WINDOWS\system32\odfox32.dll
2006-11-21 15:08:45 ----A---- C:\WINDOWS\system32\odexl32.dll
2006-11-21 15:08:45 ----A---- C:\WINDOWS\system32\oddbse32.dll
2006-11-21 15:08:45 ----A---- C:\WINDOWS\system32\odbctrac.dll
2006-11-21 15:08:45 ----A---- C:\WINDOWS\system32\odbcp32r.dll
2006-11-21 15:08:45 ----A---- C:\WINDOWS\system32\odbcjt32.dll
2006-11-21 15:08:45 ----A---- C:\WINDOWS\system32\odbcji32.dll
2006-11-21 15:08:45 ----A---- C:\WINDOWS\system32\odbcint.dll
2006-11-21 15:08:45 ----A---- C:\WINDOWS\system32\odbccu32.dll
2006-11-21 15:08:45 ----A---- C:\WINDOWS\system32\odbccr32.dll
2006-11-21 15:08:45 ----A---- C:\WINDOWS\system32\odbccp32.dll
2006-11-21 15:08:45 ----A---- C:\WINDOWS\system32\odbcconf.exe
2006-11-21 15:08:45 ----A---- C:\WINDOWS\system32\odbcconf.dll
2006-11-21 15:08:45 ----A---- C:\WINDOWS\system32\odbcbcp.dll
2006-11-21 15:08:45 ----A---- C:\WINDOWS\system32\odbcad32.exe
2006-11-21 15:08:45 ----A---- C:\WINDOWS\system32\odbc32gt.dll
2006-11-21 15:08:44 ----A---- C:\WINDOWS\system32\xpob2res.dll
2006-11-21 15:08:44 ----A---- C:\WINDOWS\system32\odbc32.dll
2006-11-21 15:08:44 ----A---- C:\WINDOWS\system32\odbc16gt.dll
2006-11-21 15:08:44 ----A---- C:\WINDOWS\system32\ocmanage.dll
2006-11-21 15:08:44 ----A---- C:\WINDOWS\system32\occache.dll
2006-11-21 15:08:44 ----A---- C:\WINDOWS\system32\objsel.dll
2006-11-21 15:08:44 ----A---- C:\WINDOWS\system32\oakley.dll
2006-11-21 15:08:44 ----A---- C:\WINDOWS\system32\nwscript.exe
2006-11-21 15:08:43 ----A---- C:\WINDOWS\system32\nwprovau.dll
2006-11-21 15:08:43 ----A---- C:\WINDOWS\system32\nwevent.dll
2006-11-21 15:08:43 ----A---- C:\WINDOWS\system32\nwcfg.dll
2006-11-21 15:08:43 ----A---- C:\WINDOWS\system32\nwapi32.dll
2006-11-21 15:08:43 ----A---- C:\WINDOWS\system32\nwapi16.dll
2006-11-21 15:08:43 ----A---- C:\WINDOWS\system32\nw16.exe
2006-11-21 15:08:42 ----A---- C:\WINDOWS\system32\ntvdmd.dll
2006-11-21 15:08:42 ----A---- C:\WINDOWS\system32\ntvdm.exe
2006-11-21 15:08:42 ----A---- C:\WINDOWS\system32\ntshrui.dll
2006-11-21 15:08:42 ----A---- C:\WINDOWS\system32\ntsdexts.dll
2006-11-21 15:08:42 ----A---- C:\WINDOWS\system32\ntsd.exe
2006-11-21 15:08:40 ----A---- C:\WINDOWS\system32\ntprint.dll
2006-11-21 15:08:38 ----A---- C:\WINDOWS\system32\ntmssvc.dll
2006-11-21 15:08:38 ----A---- C:\WINDOWS\system32\ntmsoprq.msc
2006-11-21 15:08:38 ----A---- C:\WINDOWS\system32\ntmsmgr.msc
2006-11-21 15:08:38 ----A---- C:\WINDOWS\system32\ntmsmgr.dll
2006-11-21 15:08:38 ----A---- C:\WINDOWS\system32\ntmsevt.dll
2006-11-21 15:08:38 ----A---- C:\WINDOWS\system32\ntmsdba.dll
2006-11-21 15:08:38 ----A---- C:\WINDOWS\system32\ntmsapi.dll
2006-11-21 15:08:38 ----A---- C:\WINDOWS\system32\ntmarta.dll
2006-11-21 15:08:38 ----A---- C:\WINDOWS\system32\ntlsapi.dll
2006-11-21 15:08:38 ----A---- C:\WINDOWS\system32\ntlanui2.dll
2006-11-21 15:08:38 ----A---- C:\WINDOWS\system32\ntlanui.dll
2006-11-21 15:08:38 ----A---- C:\WINDOWS\system32\ntlanman.dll
2006-11-21 15:08:36 ----A---- C:\WINDOWS\system32\ntdsbcli.dll
2006-11-21 15:08:36 ----A---- C:\WINDOWS\system32\ntdsapi.dll
2006-11-21 15:08:35 ----A---- C:\WINDOWS\system32\ntdll.dll
2006-11-21 15:08:34 ----A---- C:\WINDOWS\system32\ntbackup.exe
2006-11-21 15:08:32 ----A---- C:\WINDOWS\system32\nslookup.exe
2006-11-21 15:08:32 ----A---- C:\WINDOWS\system32\npptools.dll
2006-11-21 15:08:32 ----A---- C:\WINDOWS\system32\notepad.exe
2006-11-21 15:08:32 ----A---- C:\WINDOWS\notepad.exe
2006-11-21 15:08:31 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2006-11-21 15:08:31 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2006-11-21 15:08:31 ----A---- C:\WINDOWS\system32\nlsfunc.exe
2006-11-21 15:08:30 ----A---- C:\WINDOWS\system32\nlhtml.dll
2006-11-21 15:08:29 ----A---- C:\WINDOWS\system32\newdev.dll
2006-11-21 15:08:28 ----A---- C:\WINDOWS\system32\netui2.dll
2006-11-21 15:08:28 ----A---- C:\WINDOWS\system32\netui1.dll
2006-11-21 15:08:28 ----A---- C:\WINDOWS\system32\netui0.dll
2006-11-21 15:08:28 ----A---- C:\WINDOWS\system32\netstat.exe
2006-11-21 15:08:27 ----A---- C:\WINDOWS\system32\netsh.exe
2006-11-21 15:08:27 ----A---- C:\WINDOWS\system32\netsetup.exe
2006-11-21 15:08:27 ----A---- C:\WINDOWS\system32\netrap.dll
2006-11-21 15:08:27 ----A---- C:\WINDOWS\system32\netplwiz.dll
2006-11-21 15:08:26 ----A---- C:\WINDOWS\system32\netmsg.dll
2006-11-21 15:08:26 ----A---- C:\WINDOWS\system32\netlogon.dll
2006-11-21 15:08:26 ----A---- C:\WINDOWS\system32\netid.dll
2006-11-21 15:08:26 ----A---- C:\WINDOWS\system32\neth.dll
2006-11-21 15:08:25 ----A---- C:\WINDOWS\system32\netevent.dll
2006-11-21 15:08:25 ----A---- C:\WINDOWS\system32\netdde.exe
2006-11-21 15:08:25 ----A---- C:\WINDOWS\system32\netcfgx.dll
2006-11-21 15:08:23 ----A---- C:\WINDOWS\system32\netapi.dll
2006-11-21 15:08:23 ----A---- C:\WINDOWS\system32\net1.exe
2006-11-21 15:08:23 ----A---- C:\WINDOWS\system32\net.exe
2006-11-21 15:08:23 ----A---- C:\WINDOWS\system32\nddenb32.dll
2006-11-21 15:08:23 ----A---- C:\WINDOWS\system32\nddeapir.exe
2006-11-21 15:08:23 ----A---- C:\WINDOWS\system32\nddeapi.dll
2006-11-21 15:08:23 ----A---- C:\WINDOWS\system32\ncxpnt.dll
2006-11-21 15:08:23 ----A---- C:\WINDOWS\system32\ncobjapi.dll
2006-11-21 15:08:23 ----A---- C:\WINDOWS\system32\nbtstat.exe
2006-11-21 15:08:23 ----A---- C:\WINDOWS\system32\narrhook.dll
2006-11-21 15:08:23 ----A---- C:\WINDOWS\system32\narrator.exe
2006-11-21 15:08:22 ----A---- C:\WINDOWS\system32\mydocs.dll
2006-11-21 15:08:22 ----A---- C:\WINDOWS\system32\mycomput.dll
2006-11-21 15:08:19 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2006-11-21 15:08:19 ----A---- C:\WINDOWS\system32\mtxex.dll
2006-11-21 15:08:19 ----A---- C:\WINDOWS\system32\mtxdm.dll
2006-11-21 15:08:19 ----A---- C:\WINDOWS\system32\msxmlr.dll
2006-11-21 15:08:19 ----A---- C:\WINDOWS\system32\msxml3r.dll
2006-11-21 15:08:18 ----A---- C:\WINDOWS\system32\msxml3.dll
2006-11-21 15:08:18 ----A---- C:\WINDOWS\system32\msxml2r.dll
2006-11-21 15:08:18 ----A---- C:\WINDOWS\system32\msxml2.dll
2006-11-21 15:08:18 ----A---- C:\WINDOWS\system32\msxml.dll
2006-11-21 15:08:18 ----A---- C:\WINDOWS\system32\msxbde40.dll
2006-11-21 15:08:17 ----A---- C:\WINDOWS\system32\mswstr10.dll
2006-11-21 15:08:17 ----A---- C:\WINDOWS\system32\mswsock.dll
2006-11-21 15:08:17 ----A---- C:\WINDOWS\system32\mswebdvd.dll
2006-11-21 15:08:16 ----N---- C:\WINDOWS\system32\msvcrt.dll
2006-11-21 15:08:16 ----A---- C:\WINDOWS\system32\mswdat10.dll
2006-11-21 15:08:16 ----A---- C:\WINDOWS\system32\msw3prt.dll
2006-11-21 15:08:16 ----A---- C:\WINDOWS\system32\msvideo.dll
2006-11-21 15:08:16 ----A---- C:\WINDOWS\system32\msvidctl.dll
2006-11-21 15:08:16 ----A---- C:\WINDOWS\system32\msvidc32.dll
2006-11-21 15:08:16 ----A---- C:\WINDOWS\system32\msvfw32.dll
2006-11-21 15:08:16 ----A---- C:\WINDOWS\system32\msvcrt40.dll
2006-11-21 15:08:16 ----A---- C:\WINDOWS\system32\msvcrt20.dll
2006-11-21 15:08:16 ----A---- C:\WINDOWS\system32\msvcp60.dll
2006-11-21 15:08:15 ----A---- C:\WINDOWS\system32\msvcp50.dll
2006-11-21 15:08:15 ----A---- C:\WINDOWS\system32\msvcirt.dll
2006-11-21 15:08:15 ----A---- C:\WINDOWS\system32\msvbvm60.dll
2006-11-21 15:08:14 ----N---- C:\WINDOWS\system32\msvbvm50.dll
2006-11-21 15:08:14 ----A---- C:\WINDOWS\system32\msv1_0.dll
2006-11-21 15:08:14 ----A---- C:\WINDOWS\system32\msutb.dll
2006-11-21 15:08:14 ----A---- C:\WINDOWS\system32\mstscax.dll
2006-11-21 15:08:14 ----A---- C:\WINDOWS\system32\mstsc.exe
2006-11-21 15:08:14 ----A---- C:\WINDOWS\system32\mstlsapi.dll
2006-11-21 15:08:14 ----A---- C:\WINDOWS\system32\mstinit.exe
2006-11-21 15:08:13 ----A---- C:\WINDOWS\system32\mstext40.dll
2006-11-21 15:08:13 ----A---- C:\WINDOWS\system32\mstask.dll
2006-11-21 15:08:13 ----A---- C:\WINDOWS\system32\msswchx.exe
2006-11-21 15:08:13 ----A---- C:\WINDOWS\system32\msswch.dll
2006-11-21 15:08:13 ----A---- C:\WINDOWS\system32\mssip32.dll
2006-11-21 15:08:13 ----A---- C:\WINDOWS\system32\mssign32.dll
2006-11-21 15:08:13 ----A---- C:\WINDOWS\system32\mssap.dll
2006-11-21 15:08:13 ----A---- C:\WINDOWS\system32\msrle32.dll
2006-11-21 15:08:12 ----A---- C:\WINDOWS\system32\msrepl40.dll
2006-11-21 15:08:12 ----A---- C:\WINDOWS\system32\msrecr40.dll
2006-11-21 15:08:12 ----A---- C:\WINDOWS\system32\msrd3x40.dll
2006-11-21 15:08:12 ----A---- C:\WINDOWS\system32\msrd2x40.dll
2006-11-21 15:08:12 ----A---- C:\WINDOWS\system32\msrclr40.dll
2006-11-21 15:08:12 ----A---- C:\WINDOWS\system32\msratelc.dll
2006-11-21 15:08:12 ----A---- C:\WINDOWS\system32\msr2cenu.dll
2006-11-21 15:08:12 ----A---- C:\WINDOWS\system32\msr2c.dll
2006-11-21 15:08:11 ----A---- C:\WINDOWS\system32\msprivs.dll
2006-11-21 15:08:11 ----A---- C:\WINDOWS\system32\msports.dll
2006-11-21 15:08:11 ----A---- C:\WINDOWS\system32\mspbde40.dll
2006-11-21 15:08:11 ----A---- C:\WINDOWS\system32\mspatcha.dll
2006-11-21 15:08:11 ----A---- C:\WINDOWS\system32\mspaint.exe
2006-11-21 15:08:11 ----A---- C:\WINDOWS\system32\msorcl32.dll
2006-11-21 15:08:11 ----A---- C:\WINDOWS\system32\msorc32r.dll
2006-11-21 15:08:11 ----A---- C:\WINDOWS\system32\msoert2.dll
2006-11-21 15:08:10 ----A---- C:\WINDOWS\system32\msoeacct.dll
2006-11-21 15:08:09 ----A---- C:\WINDOWS\system32\msobjs.dll
2006-11-21 15:08:08 ----A---- C:\WINDOWS\system32\msnsspc.dll
2006-11-21 15:07:54 ----A---- C:\WINDOWS\system32\msltus40.dll
2006-11-21 15:07:54 ----A---- C:\WINDOWS\system32\msls31.dll
2006-11-21 15:07:54 ----A---- C:\WINDOWS\system32\mslbui.dll
2006-11-21 15:07:54 ----A---- C:\WINDOWS\system32\msjtes40.dll
2006-11-21 15:07:53 ----A---- C:\WINDOWS\system32\msjter40.dll
2006-11-21 15:07:53 ----A---- C:\WINDOWS\system32\msjint40.dll
2006-11-21 15:07:53 ----A---- C:\WINDOWS\system32\msjetoledb40.dll
2006-11-21 15:07:53 ----A---- C:\WINDOWS\system32\msjet40.dll
2006-11-21 15:07:52 ----A---- C:\WINDOWS\system32\msimtf.dll
2006-11-21 15:07:52 ----A---- C:\WINDOWS\system32\msimg32.dll
2006-11-21 15:07:52 ----A---- C:\WINDOWS\system32\msieftp.dll
2006-11-21 15:07:52 ----A---- C:\WINDOWS\system32\msidntld.dll
2006-11-21 15:07:52 ----A---- C:\WINDOWS\system32\msidle.dll
2006-11-21 15:07:52 ----A---- C:\WINDOWS\system32\msident.dll
2006-11-21 15:07:51 ----A---- C:\WINDOWS\system32\mshtmler.dll
2006-11-21 15:07:48 ----A---- C:\WINDOWS\system32\mshta.exe
2006-11-21 15:07:48 ----A---- C:\WINDOWS\system32\mshearts.exe
2006-11-21 15:07:48 ----A---- C:\WINDOWS\system32\msgsvc.dll
2006-11-21 15:07:47 ----A---- C:\WINDOWS\system32\msgina.dll
2006-11-21 15:07:47 ----A---- C:\WINDOWS\system32\msg.exe
2006-11-21 15:07:47 ----A---- C:\WINDOWS\system32\msftedit.dll
2006-11-21 15:07:46 ----A---- C:\WINDOWS\system32\msexcl40.dll
2006-11-21 15:07:46 ----A---- C:\WINDOWS\system32\msexch40.dll
2006-11-21 15:07:46 ----A---- C:\WINDOWS\system32\msencode.dll
2006-11-21 15:07:46 ----A---- C:\WINDOWS\system32\msdxmlc.dll
2006-11-21 15:07:45 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2006-11-21 15:07:45 ----A---- C:\WINDOWS\system32\msdtclog.dll
2006-11-21 15:07:45 ----A---- C:\WINDOWS\system32\msdtc.exe
2006-11-21 15:07:45 ----A---- C:\WINDOWS\system32\msdmo.dll
2006-11-21 15:07:45 ----A---- C:\WINDOWS\system32\msdart.dll
2006-11-21 15:07:45 ----A---- C:\WINDOWS\msdfmap.ini
2006-11-21 15:07:44 ----A---- C:\WINDOWS\system32\msdadiag.dll
2006-11-21 15:07:44 ----A---- C:\WINDOWS\system32\msctfp.dll
2006-11-21 15:07:44 ----A---- C:\WINDOWS\system32\msctf.dll
2006-11-21 15:07:44 ----A---- C:\WINDOWS\system32\mscpxl32.dll
2006-11-21 15:07:44 ----A---- C:\WINDOWS\system32\mscpx32r.dll
2006-11-21 15:07:44 ----A---- C:\WINDOWS\system32\msconf.dll
2006-11-21 15:07:44 ----A---- C:\WINDOWS\system32\mscdexnt.exe
2006-11-21 15:07:44 ----A---- C:\WINDOWS\system32\mscat32.dll
2006-11-21 15:07:44 ----A---- C:\WINDOWS\system32\msaudite.dll
2006-11-21 15:07:44 ----A---- C:\WINDOWS\system32\msasn1.dll
2006-11-21 15:07:43 ----A---- C:\WINDOWS\system32\msapsspc.dll
2006-11-21 15:07:43 ----A---- C:\WINDOWS\system32\msafd.dll
2006-11-21 15:07:43 ----A---- C:\WINDOWS\system32\msacm32.dll
2006-11-21 15:07:42 ----A---- C:\WINDOWS\system32\msacm.dll
2006-11-21 15:07:42 ----A---- C:\WINDOWS\system32\msaatext.dll
2006-11-21 15:07:40 ----A---- C:\WINDOWS\system32\mrinfo.exe
2006-11-21 15:07:40 ----A---- C:\WINDOWS\system32\mqutil.dll
2006-11-21 15:07:40 ----A---- C:\WINDOWS\system32\mqupgrd.dll
2006-11-21 15:07:40 ----A---- C:\WINDOWS\system32\mqtrig.dll
2006-11-21 15:07:40 ----A---- C:\WINDOWS\system32\mqtgsvc.exe
2006-11-21 15:07:40 ----A---- C:\WINDOWS\system32\mqsvc.exe
2006-11-21 15:07:40 ----A---- C:\WINDOWS\system32\mqsnap.dll
2006-11-21 15:07:40 ----A---- C:\WINDOWS\system32\mqsec.dll
2006-11-21 15:07:40 ----A---- C:\WINDOWS\system32\mqrtdep.dll
2006-11-21 15:07:40 ----A---- C:\WINDOWS\system32\mqrt.dll
2006-11-21 15:07:39 ----A---- C:\WINDOWS\system32\mqqm.dll
2006-11-21 15:07:39 ----A---- C:\WINDOWS\system32\mqperf.ini
2006-11-21 15:07:39 ----A---- C:\WINDOWS\system32\mqperf.dll
2006-11-21 15:07:39 ----A---- C:\WINDOWS\system32\mqoa.dll
2006-11-21 15:07:39 ----A---- C:\WINDOWS\system32\mqlogmgr.dll
2006-11-21 15:07:39 ----A---- C:\WINDOWS\system32\mqise.dll
2006-11-21 15:07:39 ----A---- C:\WINDOWS\system32\mqgentr.dll
2006-11-21 15:07:39 ----A---- C:\WINDOWS\system32\mqdscli.dll
2006-11-21 15:07:39 ----A---- C:\WINDOWS\system32\mqcertui.dll
2006-11-21 15:07:39 ----A---- C:\WINDOWS\system32\mqbkup.exe
2006-11-21 15:07:39 ----A---- C:\WINDOWS\system32\mqad.dll
2006-11-21 15:07:39 ----A---- C:\WINDOWS\system32\mprui.dll
2006-11-21 15:07:39 ----A---- C:\WINDOWS\system32\mprmsg.dll
2006-11-21 15:07:39 ----A---- C:\WINDOWS\system32\mprdim.dll
2006-11-21 15:07:39 ----A---- C:\WINDOWS\system32\mprddm.dll
2006-11-21 15:07:39 ----A---- C:\WINDOWS\system32\mprapi.dll
2006-11-21 15:07:39 ----A---- C:\WINDOWS\system32\mpr.dll
2006-11-21 15:07:39 ----A---- C:\WINDOWS\system32\mpnotify.exe
2006-11-21 15:07:38 ----A---- C:\WINDOWS\system32\mplay32.exe
2006-11-21 15:07:38 ----A---- C:\WINDOWS\system32\MPG4DMOD.dll
2006-11-21 15:07:38 ----A---- C:\WINDOWS\system32\MP4SDMOD.dll
2006-11-21 15:07:38 ----A---- C:\WINDOWS\system32\MP43DMOD.dll
2006-11-21 15:07:36 ----A---- C:\WINDOWS\system32\mountvol.exe
2006-11-21 15:07:36 ----A---- C:\WINDOWS\system32\moricons.dll
2006-11-21 15:07:36 ----A---- C:\WINDOWS\system32\more.com
2006-11-21 15:07:35 ----A---- C:\WINDOWS\system32\modex.dll
2006-11-21 15:07:35 ----A---- C:\WINDOWS\system32\modemui.dll
2006-11-21 15:07:34 ----A---- C:\WINDOWS\system32\mode.com
2006-11-21 15:07:34 ----A---- C:\WINDOWS\system32\mobsync.exe
2006-11-21 15:07:34 ----A---- C:\WINDOWS\system32\mobsync.dll
2006-11-21 15:07:34 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2006-11-21 15:07:34 ----A---- C:\WINDOWS\system32\mnmdd.dll
2006-11-21 15:07:34 ----A---- C:\WINDOWS\system32\mmutilse.dll
2006-11-21 15:07:34 ----A---- C:\WINDOWS\system32\mmsystem.dll
2006-11-21 15:07:33 ----A---- C:\WINDOWS\system32\mmfutil.dll
2006-11-21 15:07:33 ----A---- C:\WINDOWS\system32\mmdrv.dll
2006-11-21 15:07:33 ----A---- C:\WINDOWS\system32\mmcshext.dll
2006-11-21 15:07:32 ----A---- C:\WINDOWS\system32\mmcndmgr.dll
2006-11-21 15:07:32 ----A---- C:\WINDOWS\system32\mmcbase.dll
2006-11-21 15:07:32 ----A---- C:\WINDOWS\system32\mmc.exe
2006-11-21 15:07:32 ----A---- C:\WINDOWS\system32\mll_qic.dll
2006-11-21 15:07:32 ----A---- C:\WINDOWS\system32\mll_mtf.dll
2006-11-21 15:07:32 ----A---- C:\WINDOWS\system32\mll_hp.dll
2006-11-21 15:07:32 ----A---- C:\WINDOWS\system32\mlang.dll
2006-11-21 15:07:31 ----A---- C:\WINDOWS\system32\mimefilt.dll
2006-11-21 15:07:31 ----A---- C:\WINDOWS\system32\migpwd.exe
2006-11-21 15:07:31 ----A---- C:\WINDOWS\system32\miglibnt.dll
2006-11-21 15:07:30 ----A---- C:\WINDOWS\system32\midimap.dll
2006-11-21 15:07:30 ----A---- C:\WINDOWS\system32\mgmtapi.dll
2006-11-21 15:07:30 ----A---- C:\WINDOWS\system32\mfcsubs.dll
2006-11-21 15:07:29 ----A---- C:\WINDOWS\system32\mfc42u.dll
2006-11-21 15:07:29 ----A---- C:\WINDOWS\system32\mfc42loc.dll
2006-11-21 15:07:29 ----A---- C:\WINDOWS\system32\mfc42.dll
2006-11-21 15:07:29 ----A---- C:\WINDOWS\system32\mfc40u.dll
2006-11-21 15:07:29 ----A---- C:\WINDOWS\system32\mfc40loc.dll
2006-11-21 15:07:28 ----A---- C:\WINDOWS\system32\mfc40.dll
2006-11-21 15:07:28 ----A---- C:\WINDOWS\system32\mf3216.dll
2006-11-21 15:07:26 ----A---- C:\WINDOWS\system32\mem.exe
2006-11-21 15:07:25 ----A---- C:\WINDOWS\system32\mdminst.dll
2006-11-21 15:07:23 ----A---- C:\WINDOWS\system32\mdhcp.dll
2006-11-21 15:07:23 ----A---- C:\WINDOWS\system32\mciwave.dll
2006-11-21 15:07:23 ----A---- C:\WINDOWS\system32\mciseq.dll
2006-11-21 15:07:23 ----A---- C:\WINDOWS\system32\mciqtz32.dll
2006-11-21 15:07:23 ----A---- C:\WINDOWS\system32\mciole32.dll
2006-11-21 15:07:23 ----A---- C:\WINDOWS\system32\mciole16.dll
2006-11-21 15:07:23 ----A---- C:\WINDOWS\system32\mcicda.dll
2006-11-21 15:07:23 ----A---- C:\WINDOWS\system32\mciavi32.dll
2006-11-21 15:07:23 ----A---- C:\WINDOWS\system32\mchgrcoi.dll
2006-11-21 15:07:23 ----A---- C:\WINDOWS\system32\mcdsrv32.dll
2006-11-21 15:07:23 ----A---- C:\WINDOWS\system32\mcd32.dll
2006-11-21 15:07:23 ----A---- C:\WINDOWS\system32\mcastmib.dll
2006-11-21 15:07:23 ----A---- C:\WINDOWS\system32\mapistub.dll
2006-11-21 15:07:22 ----A---- C:\WINDOWS\system32\makecab.exe
2006-11-21 15:07:22 ----A---- C:\WINDOWS\system32\magnify.exe
2006-11-21 15:07:22 ----A---- C:\WINDOWS\system32\mag_hook.dll
2006-11-21 15:07:22 ----A---- C:\WINDOWS\system32\lzexpand.dll
2006-11-21 15:07:22 ----A---- C:\WINDOWS\system32\lz32.dll
2006-11-21 15:07:21 ----A---- C:\WINDOWS\system32\lusrmgr.msc
2006-11-21 15:07:21 ----A---- C:\WINDOWS\system32\lsass.exe
2006-11-21 15:07:20 ----A---- C:\WINDOWS\system32\lprmonui.dll
2006-11-21 15:07:20 ----A---- C:\WINDOWS\system32\lprhelp.dll
2006-11-21 15:07:20 ----A---- C:\WINDOWS\system32\lpr.exe
2006-11-21 15:07:20 ----A---- C:\WINDOWS\system32\lpq.exe
2006-11-21 15:07:20 ----A---- C:\WINDOWS\system32\lpk.dll
2006-11-21 15:07:20 ----A---- C:\WINDOWS\system32\logonui.exe
2006-11-21 15:07:20 ----A---- C:\WINDOWS\system32\logoff.exe
2006-11-21 15:07:19 ----A---- C:\WINDOWS\system32\logman.exe
2006-11-21 15:07:19 ----A---- C:\WINDOWS\system32\login.cmd
2006-11-21 15:07:19 ----A---- C:\WINDOWS\system32\loghours.dll
2006-11-21 15:07:19 ----A---- C:\WINDOWS\system32\lodctr.exe
2006-11-21 15:07:19 ----A---- C:\WINDOWS\system32\locator.exe
2006-11-21 15:07:19 ----A---- C:\WINDOWS\system32\localui.dll
2006-11-21 15:07:19 ----A---- C:\WINDOWS\system32\localspl.dll
2006-11-21 15:07:19 ----A---- C:\WINDOWS\system32\localsec.dll
2006-11-21 15:07:19 ----A---- C:\WINDOWS\system32\loadperf.dll
2006-11-21 15:07:19 ----A---- C:\WINDOWS\system32\loadfix.com
2006-11-21 15:07:19 ----A---- C:\WINDOWS\system32\lnkstub.exe
2006-11-21 15:07:19 ----A---- C:\WINDOWS\system32\lmrt.dll
2006-11-21 15:07:19 ----A---- C:\WINDOWS\system32\lmhsvc.dll
2006-11-21 15:07:19 ----A---- C:\WINDOWS\system32\lights.exe
2006-11-21 15:07:19 ----A---- C:\WINDOWS\system32\licwmi.dll
2006-11-21 15:07:19 ----A---- C:\WINDOWS\system32\licmgr10.dll
2006-11-21 15:07:18 ----A---- C:\WINDOWS\system32\licdll.dll
2006-11-21 15:07:17 ----A---- C:\WINDOWS\system32\langwrbk.dll
2006-11-21 15:05:51 ----A---- C:\WINDOWS\system32\label.exe
2006-11-21 15:05:50 ----A---- C:\WINDOWS\system32\krnl386.exe
2006-11-21 15:05:50 ----A---- C:\WINDOWS\system32\keymgr.dll
2006-11-21 15:05:50 ----A---- C:\WINDOWS\system32\kdcom.dll
2006-11-21 15:05:50 ----A---- C:\WINDOWS\system32\kd1394.dll
2006-11-21 15:05:50 ----A---- C:\WINDOWS\system32\kbdycl.dll
2006-11-21 15:05:50 ----A---- C:\WINDOWS\system32\kbdycc.dll
2006-11-21 15:05:50 ----A---- C:\WINDOWS\system32\kbduzb.dll
2006-11-21 15:05:50 ----A---- C:\WINDOWS\system32\kbdusx.dll
2006-11-21 15:05:50 ----A---- C:\WINDOWS\system32\kbdusr.dll
2006-11-21 15:05:50 ----A---- C:\WINDOWS\system32\kbdusl.dll
2006-11-21 15:05:50 ----A---- C:\WINDOWS\system32\kbdus.dll
2006-11-21 15:05:50 ----A---- C:\WINDOWS\system32\kbdur.dll
2006-11-21 15:05:50 ----A---- C:\WINDOWS\system32\kbdukx.dll
2006-11-21 15:05:50 ----A---- C:\WINDOWS\system32\kbduk.dll
2006-11-21 15:05:50 ----A---- C:\WINDOWS\system32\kbdtuq.dll
2006-11-21 15:05:50 ----A---- C:\WINDOWS\system32\kbdtuf.dll
2006-11-21 15:05:50 ----A---- C:\WINDOWS\system32\kbdtat.dll
2006-11-21 15:05:50 ----A---- C:\WINDOWS\system32\kbdsw.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdsp.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdsmsno.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdsmsfi.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdsl.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdsg.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdsf.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdru1.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdru.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdro.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdpo.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdpl.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdno1.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdno.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdnec.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdne.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdmon.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdmlt48.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdmlt47.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdmaori.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdmac.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdlv1.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdlv.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdlt1.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdlt.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdla.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdkyr.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdkaz.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdit142.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdit.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdir.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdinmal.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdinben.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdinbe1.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdic.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdhu.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdhept.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdhela3.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdhela2.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdhe319.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdhe220.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdhe.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdgr1.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdgr.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdgkl.dll
2006-11-21 15:05:49 ----A---- C:\WINDOWS\system32\kbdgae.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdfr.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdfo.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdfi1.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdfi.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdfc.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdest.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdes.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbddv.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdda.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdcz2.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdcz1.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdcz.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdcr.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdcan.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdca.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdbu.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdbr.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdblr.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdbene.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdbe.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdazel.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kbdaze.dll
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\kb16.com
2006-11-21 15:05:48 ----A---- C:\WINDOWS\system32\jsfr.dll
2006-11-21 15:05:47 ----A---- C:\WINDOWS\system32\jobexec.dll
2006-11-21 15:05:47 ----A---- C:\WINDOWS\system32\jet500.dll
2006-11-21 15:05:47 ----A---- C:\WINDOWS\system32\ixsso.dll
2006-11-21 15:05:47 ----A---- C:\WINDOWS\system32\iuengine.dll
2006-11-21 15:05:47 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2006-11-21 15:05:47 ----A---- C:\WINDOWS\system32\isign32.dll
2006-11-21 15:05:46 ----A---- C:\WINDOWS\system32\irclass.dll
2006-11-21 15:05:46 ----A---- C:\WINDOWS\system32\ir50_qcx.dll
2006-11-21 15:05:46 ----A---- C:\WINDOWS\system32\ir50_qc.dll
2006-11-21 15:05:46 ----A---- C:\WINDOWS\system32\ir50_32.dll
2006-11-21 15:05:46 ----A---- C:\WINDOWS\system32\ir41_qcx.dll
2006-11-21 15:05:46 ----A---- C:\WINDOWS\system32\ir41_qc.dll
2006-11-21 15:05:45 ----A---- C:\WINDOWS\system32\ir32_32.dll
2006-11-21 15:05:45 ----A---- C:\WINDOWS\system32\ipxwan.dll
2006-11-21 15:05:45 ----A---- C:\WINDOWS\system32\ipxsap.dll
2006-11-21 15:05:45 ----A---- C:\WINDOWS\system32\ipxrtmgr.dll
2006-11-21 15:05:45 ----A---- C:\WINDOWS\system32\ipxroute.exe
2006-11-21 15:05:45 ----A---- C:\WINDOWS\system32\ipxrip.dll
2006-11-21 15:05:45 ----A---- C:\WINDOWS\system32\ipxpromn.dll
2006-11-21 15:05:45 ----A---- C:\WINDOWS\system32\ipxmontr.dll
2006-11-21 15:05:45 ----A---- C:\WINDOWS\system32\ipv6mon.dll
2006-11-21 15:05:45 ----A---- C:\WINDOWS\system32\ipv6.exe
2006-11-21 15:05:45 ----A---- C:\WINDOWS\system32\ipsmsnap.dll
2006-11-21 15:05:45 ----A---- C:\WINDOWS\system32\ipsecsvc.dll
2006-11-21 15:05:45 ----A---- C:\WINDOWS\system32\ipsecsnp.dll
2006-11-21 15:05:44 ----A---- C:\WINDOWS\system32\ipsec6.exe
2006-11-21 15:05:44 ----A---- C:\WINDOWS\system32\iprtrmgr.dll
2006-11-21 15:05:44 ----A---- C:\WINDOWS\system32\iprtprio.dll
2006-11-21 15:05:44 ----A---- C:\WINDOWS\system32\iprop.dll
2006-11-21 15:05:44 ----A---- C:\WINDOWS\system32\ippromon.dll
2006-11-21 15:05:44 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2006-11-21 15:05:44 ----A---- C:\WINDOWS\system32\ipmontr.dll
2006-11-21 15:05:44 ----A---- C:\WINDOWS\system32\iphlpapi.dll
2006-11-21 15:05:44 ----A---- C:\WINDOWS\system32\ipconfig.exe
2006-11-21 15:05:44 ----A---- C:\WINDOWS\system32\iologmsg.dll
2006-11-21 15:05:42 ----A---- C:\WINDOWS\system32\input.dll
2006-11-21 15:05:42 ----A---- C:\WINDOWS\system32\initpki.dll
2006-11-21 15:05:42 ----A---- C:\WINDOWS\system32\infosoft.dll
2006-11-21 15:05:42 ----A---- C:\WINDOWS\system32\inetres.dll
2006-11-21 15:05:41 ----A---- C:\WINDOWS\system32\inetppui.dll
2006-11-21 15:05:41 ----A---- C:\WINDOWS\system32\inetpp.dll
2006-11-21 15:05:41 ----A---- C:\WINDOWS\system32\inetmib1.dll
2006-11-21 15:05:41 ----A---- C:\WINDOWS\system32\inetcplc.dll
2006-11-21 15:05:41 ----A---- C:\WINDOWS\system32\inetcfg.dll
2006-11-21 15:05:40 ----A---- C:\WINDOWS\system32\imm32.dll
2006-11-21 15:05:40 ----A---- C:\WINDOWS\system32\imgutil.dll
2006-11-21 15:05:40 ----A---- C:\WINDOWS\system32\imeshare.dll
2006-11-21 15:05:40 ----A---- C:\WINDOWS\system32\imapi.exe
2006-11-21 15:05:39 ----A---- C:\WINDOWS\system32\imagehlp.dll
2006-11-21 15:05:39 ----A---- C:\WINDOWS\system32\ils.dll
2006-11-21 15:05:39 ----A---- C:\WINDOWS\system32\iissuba.dll
2006-11-21 15:05:36 ----A---- C:\WINDOWS\system32\igmpagnt.dll
2006-11-21 15:05:36 ----A---- C:\WINDOWS\system32\ifsutil.dll
2006-11-21 15:05:36 ----A---- C:\WINDOWS\system32\ifmon.dll
2006-11-21 15:05:36 ----A---- C:\WINDOWS\system32\iexpress.exe
2006-11-21 15:05:36 ----A---- C:\WINDOWS\system32\iesetup.dll
2006-11-21 15:05:36 ----A---- C:\WINDOWS\system32\iernonce.dll
2006-11-21 15:05:35 ----N---- C:\WINDOWS\system32\iedkcs32.dll
2006-11-21 15:05:35 ----N---- C:\WINDOWS\system32\ie4uinit.exe
2006-11-21 15:05:35 ----A---- C:\WINDOWS\system32\ieakui.dll
2006-11-21 15:05:35 ----A---- C:\WINDOWS\system32\ieaksie.dll
2006-11-21 15:05:35 ----A---- C:\WINDOWS\system32\ieakeng.dll
2006-11-21 15:05:35 ----A---- C:\WINDOWS\system32\idq.dll
2006-11-21 15:05:35 ----A---- C:\WINDOWS\system32\icwphbk.dll
2006-11-21 15:05:35 ----A---- C:\WINDOWS\system32\icwdial.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\icmui.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\icmp.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\iccvid.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\icaapi.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\iassvcs.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\iassdo.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\iassam.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\iasrecst.dll

2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\icmui.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\icmp.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\iccvid.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\icaapi.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\iassvcs.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\iassdo.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\iassam.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\iasrecst.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\iasrad.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\iaspolcy.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\iasnap.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\iashlpr.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\iasads.dll
2006-11-21 15:05:34 ----A---- C:\WINDOWS\system32\iasacct.dll
2006-11-21 15:05:33 ----A---- C:\WINDOWS\system32\htui.dll
2006-11-21 15:05:33 ----A---- C:\WINDOWS\system32\httpapi.dll
2006-11-21 15:05:32 ----A---- C:\WINDOWS\system32\hticons.dll
2006-11-21 15:05:30 ----A---- C:\WINDOWS\system32\hotplug.dll
2006-11-21 15:05:30 ----A---- C:\WINDOWS\system32\hostname.exe
2006-11-21 15:05:30 ----A---- C:\WINDOWS\system32\hnetwiz.dll
2006-11-21 15:05:30 ----A---- C:\WINDOWS\system32\hnetmon.dll
2006-11-21 15:05:30 ----A---- C:\WINDOWS\system32\hnetcfg.dll
2006-11-21 15:05:26 ----A---- C:\WINDOWS\system32\help.exe
2006-11-21 15:05:26 ----A---- C:\WINDOWS\system32\hccoin.dll
2006-11-21 15:05:25 ----A---- C:\WINDOWS\system32\h323msp.dll
2006-11-21 15:05:24 ----A---- C:\WINDOWS\system32\grpconv.exe
2006-11-21 15:05:24 ----A---- C:\WINDOWS\system32\graphics.com
2006-11-21 15:05:24 ----A---- C:\WINDOWS\system32\graftabl.com
2006-11-21 15:05:24 ----A---- C:\WINDOWS\system32\gpupdate.exe
2006-11-21 15:05:24 ----A---- C:\WINDOWS\system32\gptext.dll
2006-11-21 15:05:24 ----A---- C:\WINDOWS\system32\gpresult.exe
2006-11-21 15:05:24 ----A---- C:\WINDOWS\system32\gpkrsrc.dll
2006-11-21 15:05:24 ----A---- C:\WINDOWS\system32\gpkcsp.dll
2006-11-21 15:05:24 ----A---- C:\WINDOWS\system32\gpedit.msc
2006-11-21 15:05:23 ----A---- C:\WINDOWS\system32\gpedit.dll
2006-11-21 15:05:21 ----A---- C:\WINDOWS\system32\glu32.dll
2006-11-21 15:05:20 ----A---- C:\WINDOWS\system32\glmf32.dll
2006-11-21 15:05:20 ----A---- C:\WINDOWS\system32\getuname.dll
2006-11-21 15:05:20 ----A---- C:\WINDOWS\system32\getmac.exe
2006-11-21 15:05:19 ----A---- C:\WINDOWS\system32\gdi.exe
2006-11-21 15:05:19 ----A---- C:\WINDOWS\system32\gcdef.dll
2006-11-21 15:04:29 ----A---- C:\WINDOWS\system32\fxsxp32.dll
2006-11-21 15:04:29 ----A---- C:\WINDOWS\system32\fxswzrd.dll
2006-11-21 15:04:29 ----A---- C:\WINDOWS\system32\fxsui.dll
2006-11-21 15:04:29 ----A---- C:\WINDOWS\system32\fxstiff.dll
2006-11-21 15:04:29 ----A---- C:\WINDOWS\system32\fxst30.dll
2006-11-21 15:04:29 ----A---- C:\WINDOWS\system32\fxssvc.exe
2006-11-21 15:04:29 ----A---- C:\WINDOWS\system32\fxsst.dll
2006-11-21 15:04:29 ----A---- C:\WINDOWS\system32\fxssend.exe
2006-11-21 15:04:29 ----A---- C:\WINDOWS\system32\fxsroute.dll
2006-11-21 15:04:29 ----A---- C:\WINDOWS\system32\fxsres.dll
2006-11-21 15:04:29 ----A---- C:\WINDOWS\system32\fxsperf.ini
2006-11-21 15:04:29 ----A---- C:\WINDOWS\system32\fxsperf.dll
2006-11-21 15:04:29 ----A---- C:\WINDOWS\system32\fxsmon.dll
2006-11-21 15:04:29 ----A---- C:\WINDOWS\system32\fxsext32.dll
2006-11-21 15:04:29 ----A---- C:\WINDOWS\system32\fxsevent.dll
2006-11-21 15:04:29 ----A---- C:\WINDOWS\system32\fxsdrv.dll
2006-11-21 15:04:29 ----A---- C:\WINDOWS\system32\fxscover.exe
2006-11-21 15:04:28 ----A---- C:\WINDOWS\system32\fxscomex.dll
2006-11-21 15:04:28 ----A---- C:\WINDOWS\system32\fxscom.dll
2006-11-21 15:04:28 ----A---- C:\WINDOWS\system32\fxsclntR.dll
2006-11-21 15:04:28 ----A---- C:\WINDOWS\system32\fxsclnt.exe
2006-11-21 15:04:28 ----A---- C:\WINDOWS\system32\fxscfgwz.dll
2006-11-21 15:04:28 ----A---- C:\WINDOWS\system32\fxsapi.dll
2006-11-21 15:04:28 ----A---- C:\WINDOWS\system32\fwcfg.dll
2006-11-21 15:04:28 ----A---- C:\WINDOWS\system32\ftsrch.dll
2006-11-21 15:04:28 ----A---- C:\WINDOWS\system32\ftp.exe
2006-11-21 15:04:28 ----A---- C:\WINDOWS\system32\fsutil.exe
2006-11-21 15:04:28 ----A---- C:\WINDOWS\system32\fsusd.dll
2006-11-21 15:04:28 ----A---- C:\WINDOWS\system32\fsquirt.exe
2006-11-21 15:04:27 ----A---- C:\WINDOWS\system32\fsmgmt.msc
2006-11-21 15:04:27 ----A---- C:\WINDOWS\system32\freecell.exe
2006-11-21 15:04:27 ----A---- C:\WINDOWS\system32\framebuf.dll
2006-11-21 15:04:26 ----A---- C:\WINDOWS\system32\format.com
2006-11-21 15:04:25 ----A---- C:\WINDOWS\system32\forcedos.exe
2006-11-21 15:04:25 ----A---- C:\WINDOWS\system32\fontview.exe
2006-11-21 15:04:25 ----A---- C:\WINDOWS\system32\fontext.dll
2006-11-21 15:04:25 ----A---- C:\WINDOWS\system32\fmifs.dll
2006-11-21 15:04:25 ----A---- C:\WINDOWS\system32\fltmc.exe
2006-11-21 15:04:25 ----A---- C:\WINDOWS\system32\fltlib.dll
2006-11-21 15:04:25 ----A---- C:\WINDOWS\system32\fldrclnr.dll
2006-11-21 15:04:25 ----A---- C:\WINDOWS\system32\fixmapi.exe
2006-11-21 15:04:25 ----A---- C:\WINDOWS\system32\finger.exe
2006-11-21 15:04:25 ----A---- C:\WINDOWS\system32\findstr.exe
2006-11-21 15:04:25 ----A---- C:\WINDOWS\system32\find.exe
2006-11-21 15:04:24 ----A---- C:\WINDOWS\system32\filemgmt.dll
2006-11-21 15:04:24 ----A---- C:\WINDOWS\system32\feclient.dll
2006-11-21 15:04:24 ----A---- C:\WINDOWS\system32\fdeploy.dll
2006-11-21 15:04:24 ----A---- C:\WINDOWS\system32\fde.dll
2006-11-21 15:04:24 ----A---- C:\WINDOWS\system32\fc.exe
2006-11-21 15:04:24 ----A---- C:\WINDOWS\system32\faultrep.dll
2006-11-21 15:04:24 ----A---- C:\WINDOWS\system32\fastopen.exe
2006-11-21 15:04:23 ----A---- C:\WINDOWS\system32\exts.dll
2006-11-21 15:04:23 ----A---- C:\WINDOWS\system32\extrac32.exe
2006-11-21 15:04:23 ----A---- C:\WINDOWS\system32\expsrv.dll
2006-11-21 15:04:23 ----A---- C:\WINDOWS\system32\expand.exe
2006-11-21 15:04:23 ----A---- C:\WINDOWS\explorer.exe
2006-11-21 15:04:21 ----A---- C:\WINDOWS\system32\exe2bin.exe
2006-11-21 15:04:21 ----A---- C:\WINDOWS\system32\eventvwr.msc
2006-11-21 15:04:21 ----A---- C:\WINDOWS\system32\eventvwr.exe
2006-11-21 15:04:21 ----A---- C:\WINDOWS\system32\eventtriggers.exe
2006-11-21 15:04:21 ----A---- C:\WINDOWS\system32\eventquery.vbs
2006-11-21 15:04:21 ----A---- C:\WINDOWS\system32\eventlog.dll
2006-11-21 15:04:21 ----A---- C:\WINDOWS\system32\eventcreate.exe
2006-11-21 15:04:21 ----A---- C:\WINDOWS\system32\eventcls.dll
2006-11-21 15:04:21 ----A---- C:\WINDOWS\system32\eudcedit.exe
2006-11-21 15:04:21 ----A---- C:\WINDOWS\system32\esentutl.exe
2006-11-21 15:04:21 ----A---- C:\WINDOWS\system32\esentprf.ini
2006-11-21 15:04:20 ----A---- C:\WINDOWS\system32\esentprf.dll
2006-11-21 15:04:20 ----A---- C:\WINDOWS\system32\esent97.dll
2006-11-21 15:04:19 ----A---- C:\WINDOWS\system32\ersvc.dll
2006-11-21 15:04:19 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2006-11-21 15:04:19 ----A---- C:\WINDOWS\system32\encdec.dll
2006-11-21 15:04:19 ----A---- C:\WINDOWS\system32\encapi.dll
2006-11-21 15:04:19 ----A---- C:\WINDOWS\system32\els.dll
2006-11-21 15:04:19 ----A---- C:\WINDOWS\system32\efsadu.dll
2006-11-21 15:04:19 ----A---- C:\WINDOWS\system32\edlin.exe
2006-11-21 15:04:19 ----A---- C:\WINDOWS\system32\edit.com
2006-11-21 15:04:17 ----A---- C:\WINDOWS\system32\dxmasf.dll
2006-11-21 15:04:17 ----A---- C:\WINDOWS\system32\dxdiagn.dll
2006-11-21 15:04:17 ----A---- C:\WINDOWS\system32\dxdiag.exe
2006-11-21 15:04:16 ----A---- C:\WINDOWS\system32\dx8vb.dll
2006-11-21 15:04:16 ----A---- C:\WINDOWS\system32\dx7vb.dll
2006-11-21 15:04:16 ----A---- C:\WINDOWS\system32\dwwin.exe
2006-11-21 15:04:16 ----A---- C:\WINDOWS\system32\dvdupgrd.exe
2006-11-21 15:04:16 ----A---- C:\WINDOWS\system32\duser.dll
2006-11-21 15:04:16 ----A---- C:\WINDOWS\system32\dumprep.exe
2006-11-21 15:04:16 ----A---- C:\WINDOWS\system32\dswave.dll
2006-11-21 15:04:16 ----A---- C:\WINDOWS\system32\dsuiext.dll
2006-11-21 15:04:16 ----A---- C:\WINDOWS\system32\dssenh.dll
2006-11-21 15:04:15 ----A---- C:\WINDOWS\system32\dssec.dll
2006-11-21 15:04:15 ----A---- C:\WINDOWS\system32\dsquery.dll
2006-11-21 15:04:15 ----A---- C:\WINDOWS\system32\dsprpres.dll
2006-11-21 15:04:15 ----A---- C:\WINDOWS\system32\dsprop.dll
2006-11-21 15:04:15 ----A---- C:\WINDOWS\system32\dsound3d.dll
2006-11-21 15:04:15 ----A---- C:\WINDOWS\system32\dsound.dll
2006-11-21 15:04:15 ----A---- C:\WINDOWS\system32\dskquoui.dll
2006-11-21 15:04:15 ----A---- C:\WINDOWS\system32\dskquota.dll
2006-11-21 15:04:15 ----A---- C:\WINDOWS\system32\dsdmoprp.dll
2006-11-21 15:04:15 ----A---- C:\WINDOWS\system32\dsdmo.dll
2006-11-21 15:04:15 ----A---- C:\WINDOWS\system32\dsauth.dll
2006-11-21 15:04:15 ----A---- C:\WINDOWS\system32\ds32gt.dll
2006-11-21 15:04:15 ----A---- C:\WINDOWS\system32\ds16gt.dLL
2006-11-21 15:04:14 ----A---- C:\WINDOWS\system32\drwtsn32.exe
2006-11-21 15:04:14 ----A---- C:\WINDOWS\system32\drwatson.exe
2006-11-21 15:04:13 ----A---- C:\WINDOWS\system32\drprov.dll
2006-11-21 15:04:13 ----A---- C:\WINDOWS\system32\drmstor.dll
2006-11-21 15:04:13 ----A---- C:\WINDOWS\system32\drmclien.dll
2006-11-21 15:04:13 ----A---- C:\WINDOWS\system32\driverquery.exe
2006-11-21 15:03:23 ----A---- C:\WINDOWS\system32\dpwsockx.dll
2006-11-21 15:03:22 ----A---- C:\WINDOWS\system32\dpwsock.dll
2006-11-21 15:03:22 ----A---- C:\WINDOWS\system32\dpvvox.dll
2006-11-21 15:03:22 ----A---- C:\WINDOWS\system32\dpvsetup.exe
2006-11-21 15:03:22 ----A---- C:\WINDOWS\system32\dpvoice.dll
2006-11-21 15:03:22 ----A---- C:\WINDOWS\system32\dpvacm.dll
2006-11-21 15:03:22 ----A---- C:\WINDOWS\system32\dpserial.dll
2006-11-21 15:03:22 ----A---- C:\WINDOWS\system32\dpnwsock.dll
2006-11-21 15:03:22 ----A---- C:\WINDOWS\system32\dpnsvr.exe
2006-11-21 15:03:22 ----A---- C:\WINDOWS\system32\dpnmodem.dll
2006-11-21 15:03:22 ----A---- C:\WINDOWS\system32\dpnlobby.dll
2006-11-21 15:03:22 ----A---- C:\WINDOWS\system32\dpnhupnp.dll
2006-11-21 15:03:22 ----A---- C:\WINDOWS\system32\dpnhpast.dll
2006-11-21 15:03:22 ----A---- C:\WINDOWS\system32\dpnet.dll
2006-11-21 15:03:22 ----A---- C:\WINDOWS\system32\dpnaddr.dll
2006-11-21 15:03:22 ----A---- C:\WINDOWS\system32\dpmodemx.dll
2006-11-21 15:03:22 ----A---- C:\WINDOWS\system32\dplayx.dll
2006-11-21 15:03:22 ----A---- C:\WINDOWS\system32\dplaysvr.exe
2006-11-21 15:03:22 ----A---- C:\WINDOWS\system32\dplay.dll
2006-11-21 15:03:22 ----A---- C:\WINDOWS\system32\dpcdll.dll
2006-11-21 15:03:22 ----A---- C:\WINDOWS\system32\dosx.exe
2006-11-21 15:03:21 ----A---- C:\WINDOWS\system32\doskey.exe
2006-11-21 15:03:21 ----A---- C:\WINDOWS\system32\docprop2.dll
2006-11-21 15:03:21 ----A---- C:\WINDOWS\system32\docprop.dll
2006-11-21 15:03:21 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2006-11-21 15:03:21 ----A---- C:\WINDOWS\system32\dmusic.dll
2006-11-21 15:03:21 ----A---- C:\WINDOWS\system32\dmsynth.dll
2006-11-21 15:03:21 ----A---- C:\WINDOWS\system32\dmstyle.dll
2006-11-21 15:03:21 ----A---- C:\WINDOWS\system32\dmserver.dll
2006-11-21 15:03:21 ----A---- C:\WINDOWS\system32\dmscript.dll
2006-11-21 15:03:21 ----A---- C:\WINDOWS\system32\dmremote.exe
2006-11-21 15:03:21 ----A---- C:\WINDOWS\system32\dmocx.dll
2006-11-21 15:03:21 ----A---- C:\WINDOWS\system32\dmloader.dll
2006-11-21 15:03:21 ----A---- C:\WINDOWS\system32\dmintf.dll
2006-11-21 15:03:21 ----A---- C:\WINDOWS\system32\dmime.dll
2006-11-21 15:03:21 ----A---- C:\WINDOWS\system32\dmdskres.dll
2006-11-21 15:03:21 ----A---- C:\WINDOWS\system32\dmdskmgr.dll
2006-11-21 15:03:21 ----A---- C:\WINDOWS\system32\dmdlgs.dll
2006-11-21 15:03:20 ----A---- C:\WINDOWS\system32\dmconfig.dll
2006-11-21 15:03:20 ----A---- C:\WINDOWS\system32\dmcompos.dll
2006-11-21 15:03:20 ----A---- C:\WINDOWS\system32\dmband.dll
2006-11-21 15:03:20 ----A---- C:\WINDOWS\system32\dmadmin.exe
2006-11-21 15:03:20 ----A---- C:\WINDOWS\system32\dllhst3g.exe
2006-11-21 15:03:20 ----A---- C:\WINDOWS\system32\dllhost.exe
2006-11-21 15:03:18 ----A---- C:\WINDOWS\system32\dispex.dll
2006-11-21 15:03:18 ----A---- C:\WINDOWS\system32\diskperf.exe
2006-11-21 15:03:17 ----A---- C:\WINDOWS\system32\diskpart.exe
2006-11-21 15:03:17 ----A---- C:\WINDOWS\system32\diskmgmt.msc
2006-11-21 15:03:17 ----A---- C:\WINDOWS\system32\diskcopy.dll
2006-11-21 15:03:17 ----A---- C:\WINDOWS\system32\diskcopy.com
2006-11-21 15:03:17 ----A---- C:\WINDOWS\system32\diskcomp.com
2006-11-21 15:03:17 ----A---- C:\WINDOWS\system32\dinput8.dll
2006-11-21 15:03:17 ----A---- C:\WINDOWS\system32\dinput.dll
2006-11-21 15:03:16 ----A---- C:\WINDOWS\system32\dimap.dll
2006-11-21 15:03:16 ----A---- C:\WINDOWS\system32\digest.dll
2006-11-21 15:03:15 ----A---- C:\WINDOWS\system32\diantz.exe
2006-11-21 15:03:14 ----A---- C:\WINDOWS\system32\diactfrm.dll
2006-11-21 15:03:14 ----A---- C:\WINDOWS\system32\dhcpsapi.dll
2006-11-21 15:03:14 ----A---- C:\WINDOWS\system32\dhcpmon.dll
2006-11-21 15:03:14 ----A---- C:\WINDOWS\system32\dhcpcsvc.dll
2006-11-21 15:03:14 ----A---- C:\WINDOWS\system32\dgsetup.dll
2006-11-21 15:03:14 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2006-11-21 15:03:14 ----A---- C:\WINDOWS\system32\dgnet.dll
2006-11-21 15:03:14 ----A---- C:\WINDOWS\system32\dfsshlex.dll
2006-11-21 15:03:14 ----A---- C:\WINDOWS\system32\dfrgui.dll
2006-11-21 15:03:14 ----A---- C:\WINDOWS\system32\dfrgsnap.dll
2006-11-21 15:03:14 ----A---- C:\WINDOWS\system32\dfrgres.dll
2006-11-21 15:03:14 ----A---- C:\WINDOWS\system32\dfrgntfs.exe
2006-11-21 15:03:14 ----A---- C:\WINDOWS\system32\dfrgfat.exe
2006-11-21 15:03:14 ----A---- C:\WINDOWS\system32\dfrg.msc
2006-11-21 15:03:14 ----A---- C:\WINDOWS\system32\devmgr.dll
2006-11-21 15:03:14 ----A---- C:\WINDOWS\system32\devmgmt.msc
2006-11-21 15:03:14 ----A---- C:\WINDOWS\system32\devenum.dll
2006-11-21 15:03:14 ----A---- C:\WINDOWS\system32\deskperf.dll
2006-11-21 15:03:13 ----A---- C:\WINDOWS\system32\deskmon.dll
2006-11-21 15:03:13 ----A---- C:\WINDOWS\system32\deskadp.dll
2006-11-21 15:03:13 ----A---- C:\WINDOWS\system32\defrag.exe
2006-11-21 15:03:13 ----A---- C:\WINDOWS\system32\debug.exe
2006-11-21 15:03:13 ----A---- C:\WINDOWS\system32\ddrawex.dll
2006-11-21 15:03:13 ----A---- C:\WINDOWS\system32\ddraw.dll
2006-11-21 15:03:13 ----A---- C:\WINDOWS\system32\ddeshare.exe
2006-11-21 15:03:13 ----A---- C:\WINDOWS\system32\ddeml.dll
2006-11-21 15:03:13 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2006-11-21 15:03:13 ----A---- C:\WINDOWS\system32\dciman32.dll
2006-11-21 15:03:13 ----A---- C:\WINDOWS\system32\dbnmpntw.dll
2006-11-21 15:03:13 ----A---- C:\WINDOWS\system32\dbnetlib.dll
2006-11-21 15:03:13 ----A---- C:\WINDOWS\system32\dbmsrpcn.dll
2006-11-21 15:03:12 ----A---- C:\WINDOWS\system32\dbghelp.dll
2006-11-21 15:03:12 ----A---- C:\WINDOWS\system32\dbgeng.dll
2006-11-21 15:03:12 ----A---- C:\WINDOWS\system32\davclnt.dll
2006-11-21 15:03:12 ----A---- C:\WINDOWS\system32\datime.dll
2006-11-21 15:03:11 ----A---- C:\WINDOWS\system32\dataclen.dll
2006-11-21 15:03:11 ----A---- C:\WINDOWS\system32\d3dxof.dll
2006-11-21 15:03:11 ----A---- C:\WINDOWS\system32\d3drm.dll
2006-11-21 15:03:11 ----A---- C:\WINDOWS\system32\d3dramp.dll
2006-11-21 15:03:11 ----A---- C:\WINDOWS\system32\d3dpmesh.dll
2006-11-21 15:03:11 ----A---- C:\WINDOWS\system32\d3dim700.dll
2006-11-21 15:03:10 ----A---- C:\WINDOWS\system32\d3dim.dll
2006-11-21 15:03:10 ----A---- C:\WINDOWS\system32\d3d9.dll
2006-11-21 15:03:10 ----A---- C:\WINDOWS\system32\d3d8thk.dll
2006-11-21 15:03:10 ----A---- C:\WINDOWS\system32\d3d8.dll
2006-11-21 15:03:07 ----R---- C:\WINDOWS\system32\ctl3dv2.dll
2006-11-21 15:03:07 ----A---- C:\WINDOWS\system32\ctl3d32.dll
2006-11-21 15:03:07 ----A---- C:\WINDOWS\system32\ctfmon.exe
2006-11-21 15:03:07 ----A---- C:\WINDOWS\system32\csseqchk.dll
2006-11-21 15:03:07 ----A---- C:\WINDOWS\system32\csrss.exe
2006-11-21 15:03:07 ----A---- C:\WINDOWS\system32\csrsrv.dll
2006-11-21 15:03:07 ----A---- C:\WINDOWS\system32\cscui.dll
2006-11-21 15:03:07 ----A---- C:\WINDOWS\system32\cscript.exe
2006-11-21 15:03:07 ----A---- C:\WINDOWS\system32\cscdll.dll
2006-11-21 15:03:06 ----A---- C:\WINDOWS\system32\cryptui.dll
2006-11-21 15:03:06 ----A---- C:\WINDOWS\system32\cryptsvc.dll
2006-11-21 15:03:06 ----A---- C:\WINDOWS\system32\cryptnet.dll
2006-11-21 15:03:06 ----A---- C:\WINDOWS\system32\cryptext.dll
2006-11-21 15:03:06 ----A---- C:\WINDOWS\system32\cryptdll.dll
2006-11-21 15:03:06 ----A---- C:\WINDOWS\system32\cryptdlg.dll
2006-11-21 15:03:06 ----A---- C:\WINDOWS\system32\crypt32.dll
2006-11-21 15:03:06 ----A---- C:\WINDOWS\system32\crtdll.dll
2006-11-21 15:03:06 ----A---- C:\WINDOWS\system32\credui.dll
2006-11-21 15:03:04 ----A---- C:\WINDOWS\system32\corpol.dll
2006-11-21 15:03:04 ----A---- C:\WINDOWS\system32\convert.exe
2006-11-21 15:03:04 ----A---- C:\WINDOWS\system32\control.exe
2006-11-21 15:03:04 ----A---- C:\WINDOWS\system32\console.dll
2006-11-21 15:03:03 ----A---- C:\WINDOWS\system32\conime.exe
2006-11-21 15:03:03 ----A---- C:\WINDOWS\system32\confmsp.dll
2006-11-21 15:03:02 ----A---- C:\WINDOWS\system32\comsnap.dll
2006-11-21 15:03:02 ----A---- C:\WINDOWS\system32\comres.dll
2006-11-21 15:03:02 ----A---- C:\WINDOWS\system32\compstui.dll
2006-11-21 15:03:02 ----A---- C:\WINDOWS\system32\compobj.dll
2006-11-21 15:03:02 ----A---- C:\WINDOWS\system32\compmgmt.msc
2006-11-21 15:02:54 ----A---- C:\WINDOWS\system32\compatui.dll
2006-11-21 15:02:54 ----A---- C:\WINDOWS\system32\compact.exe
2006-11-21 15:02:54 ----A---- C:\WINDOWS\system32\comp.exe
2006-11-21 15:02:54 ----A---- C:\WINDOWS\system32\commdlg.dll
2006-11-21 15:02:54 ----A---- C:\WINDOWS\system32\command.com
2006-11-21 15:02:53 ----A---- C:\WINDOWS\system32\comdlg32.dll
2006-11-21 15:02:53 ----A---- C:\WINDOWS\system32\comctl32.dll
2006-11-21 15:02:53 ----A---- C:\WINDOWS\system32\comcat.dll
2006-11-21 15:02:53 ----A---- C:\WINDOWS\system32\comaddin.dll
2006-11-21 15:02:53 ----A---- C:\WINDOWS\system32\cnvfat.dll
2006-11-21 15:02:52 ----A---- C:\WINDOWS\system32\cnetcfg.dll
2006-11-21 15:02:52 ----A---- C:\WINDOWS\system32\cmutil.dll
2006-11-21 15:02:52 ----A---- C:\WINDOWS\system32\cmstp.exe
2006-11-21 15:02:52 ----A---- C:\WINDOWS\system32\cmsetacl.dll
2006-11-21 15:02:52 ----A---- C:\WINDOWS\system32\cmprops.dll
2006-11-21 15:02:52 ----A---- C:\WINDOWS\system32\cmpbk32.dll
2006-11-21 15:02:52 ----A---- C:\WINDOWS\system32\cmmon32.exe
2006-11-21 15:02:52 ----A---- C:\WINDOWS\system32\cmdl32.exe
2006-11-21 15:02:52 ----A---- C:\WINDOWS\system32\cmdial32.dll
2006-11-21 15:02:52 ----A---- C:\WINDOWS\system32\cmd.exe
2006-11-21 15:02:52 ----A---- C:\WINDOWS\system32\cmcfg32.dll
2006-11-21 15:02:52 ----A---- C:\WINDOWS\system32\clusapi.dll
2006-11-21 15:02:52 ----A---- C:\WINDOWS\system32\clipsrv.exe
2006-11-21 15:02:52 ----A---- C:\WINDOWS\system32\clipbrd.exe
2006-11-21 15:02:51 ----A---- C:\WINDOWS\system32\shellstyle.dll
2006-11-21 15:02:51 ----A---- C:\WINDOWS\system32\cliconfg.exe
2006-11-21 15:02:51 ----A---- C:\WINDOWS\system32\cliconfg.dll
2006-11-21 15:02:51 ----A---- C:\WINDOWS\system32\cleanmgr.exe
2006-11-21 15:02:51 ----A---- C:\WINDOWS\system32\clb.dll
2006-11-21 15:02:51 ----A---- C:\WINDOWS\system32\ckcnv.exe
2006-11-21 15:02:51 ----A---- C:\WINDOWS\system32\cisvc.exe
2006-11-21 15:02:51 ----A---- C:\WINDOWS\system32\cipher.exe
2006-11-21 15:02:51 ----A---- C:\WINDOWS\system32\ciodm.dll
2006-11-21 15:02:50 ----A---- C:\WINDOWS\system32\cidaemon.exe
2006-11-21 15:02:50 ----A---- C:\WINDOWS\system32\cic.dll
2006-11-21 15:02:50 ----A---- C:\WINDOWS\system32\ciadv.msc
2006-11-21 15:02:50 ----A---- C:\WINDOWS\system32\ciadmin.dll
2006-11-21 15:02:50 ----A---- C:\WINDOWS\system32\chkntfs.exe
2006-11-21 15:02:50 ----A---- C:\WINDOWS\system32\chkdsk.exe
2006-11-21 15:02:50 ----A---- C:\WINDOWS\system32\chcp.com
2006-11-21 15:02:49 ----A---- C:\WINDOWS\system32\charmap.exe
2006-11-21 15:02:49 ----A---- C:\WINDOWS\system32\cfgmgr32.dll
2006-11-21 15:02:49 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2006-11-21 15:02:49 ----A---- C:\WINDOWS\system32\certmgr.msc
2006-11-21 15:02:49 ----A---- C:\WINDOWS\system32\certmgr.dll
2006-11-21 15:02:49 ----A---- C:\WINDOWS\system32\certcli.dll
2006-11-21 15:02:48 ----A---- C:\WINDOWS\system32\cdmodem.dll
2006-11-21 15:02:48 ----A---- C:\WINDOWS\system32\cdm.dll
2006-11-21 15:02:48 ----A---- C:\WINDOWS\system32\ccfgnt.dll
2006-11-21 15:02:48 ----A---- C:\WINDOWS\system32\catsrvps.dll
2006-11-21 15:02:48 ----A---- C:\WINDOWS\system32\cards.dll
2006-11-21 15:02:47 ----A---- C:\WINDOWS\system32\capesnpn.dll
2006-11-21 15:02:47 ----A---- C:\WINDOWS\system32\camocx.dll
2006-11-21 15:02:47 ----A---- C:\WINDOWS\system32\calc.exe
2006-11-21 15:02:47 ----A---- C:\WINDOWS\system32\cacls.exe
2006-11-21 15:02:47 ----A---- C:\WINDOWS\system32\cabview.dll
2006-11-21 15:02:47 ----A---- C:\WINDOWS\system32\cabinet.dll
2006-11-21 15:02:47 ----A---- C:\WINDOWS\system32\btpanui.dll
2006-11-21 15:02:47 ----A---- C:\WINDOWS\system32\bthserv.dll
2006-11-21 15:02:46 ----A---- C:\WINDOWS\system32\bthci.dll
2006-11-21 15:02:46 ----A---- C:\WINDOWS\system32\browsewm.dll
2006-11-21 15:02:45 ----A---- C:\WINDOWS\system32\browser.dll
2006-11-21 15:02:45 ----A---- C:\WINDOWS\system32\browselc.dll
2006-11-21 15:02:44 ----A---- C:\WINDOWS\system32\bootvrfy.exe
2006-11-21 15:02:44 ----A---- C:\WINDOWS\system32\bootvid.dll
2006-11-21 15:02:44 ----A---- C:\WINDOWS\system32\bootok.exe
2006-11-21 15:02:44 ----A---- C:\WINDOWS\system32\bootcfg.exe
2006-11-21 15:02:44 ----A---- C:\WINDOWS\system32\blastcln.exe
2006-11-21 15:02:43 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2006-11-21 15:02:43 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2006-11-21 15:02:43 ----A---- C:\WINDOWS\system32\bidispl.dll
2006-11-21 15:02:42 ----A---- C:\WINDOWS\system32\batt.dll
2006-11-21 15:02:42 ----A---- C:\WINDOWS\system32\batmeter.dll
2006-11-21 15:02:42 ----A---- C:\WINDOWS\system32\basesrv.dll
2006-11-21 15:02:42 ----A---- C:\WINDOWS\system32\avwav.dll
2006-11-21 15:02:42 ----A---- C:\WINDOWS\system32\avtapi.dll
2006-11-21 15:02:42 ----A---- C:\WINDOWS\system32\avmeter.dll
2006-11-21 15:02:42 ----A---- C:\WINDOWS\system32\avifile.dll
2006-11-21 15:02:42 ----A---- C:\WINDOWS\system32\avifil32.dll
2006-11-21 15:02:42 ----A---- C:\WINDOWS\system32\avicap32.dll
2006-11-21 15:02:42 ----A---- C:\WINDOWS\system32\avicap.dll
2006-11-21 15:02:41 ----A---- C:\WINDOWS\system32\autolfn.exe
2006-11-21 15:02:41 ----A---- C:\WINDOWS\system32\autofmt.exe
2006-11-21 15:02:41 ----A---- C:\WINDOWS\system32\autodisc.dll
2006-11-21 15:02:41 ----A---- C:\WINDOWS\system32\autoconv.exe
2006-11-21 15:02:40 ----A---- C:\WINDOWS\system32\autochk.exe
2006-11-21 15:02:40 ----A---- C:\WINDOWS\system32\auditusr.exe
2006-11-21 15:02:40 ----A---- C:\WINDOWS\system32\audiosrv.dll
2006-11-21 15:02:40 ----A---- C:\WINDOWS\system32\audiodev.dll
2006-11-21 15:02:40 ----A---- C:\WINDOWS\system32\attrib.exe
2006-11-21 15:02:40 ----A---- C:\WINDOWS\system32\atrace.dll
2006-11-21 15:02:40 ----A---- C:\WINDOWS\system32\atmpvcno.dll
2006-11-21 15:02:40 ----A---- C:\WINDOWS\system32\atmlib.dll
2006-11-21 15:02:40 ----A---- C:\WINDOWS\system32\atmfd.dll
2006-11-21 15:02:39 ----A---- C:\WINDOWS\system32\atmadm.exe
2006-11-21 15:02:39 ----A---- C:\WINDOWS\system32\atl.dll
2006-11-21 15:02:39 ----A---- C:\WINDOWS\system32\atkctrs.dll
2006-11-21 15:02:39 ----A---- C:\WINDOWS\system32\at.exe
2006-11-21 15:02:39 ----A---- C:\WINDOWS\system32\asycfilt.dll
2006-11-21 15:02:39 ----A---- C:\WINDOWS\system32\asr_pfu.exe
2006-11-21 15:02:39 ----A---- C:\WINDOWS\system32\asr_ldm.exe
2006-11-21 15:02:39 ----A---- C:\WINDOWS\system32\asr_fmt.exe
2006-11-21 15:02:28 ----A---- C:\WINDOWS\system32\asferror.dll
2006-11-21 15:02:25 ----A---- C:\WINDOWS\system32\arp.exe
2006-11-21 15:02:24 ----A---- C:\WINDOWS\system32\appmgr.dll
2006-11-21 15:02:24 ----A---- C:\WINDOWS\system32\appmgmts.dll
2006-11-21 15:02:24 ----A---- C:\WINDOWS\system32\apphelp.dll
2006-11-21 15:02:24 ----A---- C:\WINDOWS\system32\append.exe
2006-11-21 15:02:23 ----A---- C:\WINDOWS\system32\apcups.dll
2006-11-21 15:02:23 ----A---- C:\WINDOWS\system32\amstream.dll
2006-11-21 15:02:23 ----A---- C:\WINDOWS\system32\alrsvc.dll
2006-11-21 15:02:23 ----A---- C:\WINDOWS\system32\alg.exe
2006-11-21 15:02:23 ----A---- C:\WINDOWS\system32\ahui.exe
2006-11-21 15:02:21 ----A---- C:\WINDOWS\system32\advpack.dll
2006-11-21 15:02:21 ----A---- C:\WINDOWS\system32\advapi32.dll
2006-11-21 15:02:21 ----A---- C:\WINDOWS\system32\adsnw.dll
2006-11-21 15:02:21 ----A---- C:\WINDOWS\system32\adsnt.dll
2006-11-21 15:02:21 ----A---- C:\WINDOWS\system32\adsnds.dll
2006-11-21 15:02:21 ----A---- C:\WINDOWS\system32\adsmsext.dll
2006-11-21 15:02:21 ----A---- C:\WINDOWS\system32\adsldpc.dll
2006-11-21 15:02:21 ----A---- C:\WINDOWS\system32\adsldp.dll
2006-11-21 15:02:21 ----A---- C:\WINDOWS\system32\adptif.dll
2006-11-21 15:02:20 ----A---- C:\WINDOWS\system32\admparse.dll
2006-11-21 15:02:20 ----A---- C:\WINDOWS\system32\actxprxy.dll
2006-11-21 15:02:20 ----A---- C:\WINDOWS\system32\actmovie.exe
2006-11-21 15:02:20 ----A---- C:\WINDOWS\system32\activeds.dll
2006-11-21 15:02:20 ----A---- C:\WINDOWS\system32\aclui.dll
2006-11-21 15:02:19 ----A---- C:\WINDOWS\system32\acledit.dll
2006-11-21 15:02:19 ----A---- C:\WINDOWS\system32\accwiz.exe
2006-11-21 15:02:19 ----A---- C:\WINDOWS\system32\acctres.dll
2006-11-21 15:02:19 ----A---- C:\WINDOWS\system32\aaaamon.dll
2006-11-21 15:02:19 ----A---- C:\WINDOWS\system32\6to4svc.dll
2006-11-17 18:27:16 ----A---- C:\WINDOWS\system32\ieframe.dll.mui
2006-11-17 18:26:44 ----A---- C:\WINDOWS\system32\advpack.dll.mui
2006-11-15 23:22:23 ----D---- C:\Program Files\trend micro
2006-11-15 23:22:20 ----DC---- C:\rsit
2006-11-11 17:12:21 ----A---- C:\WINDOWS\smscfg.ini
2006-11-11 16:57:44 ----HDC---- C:\WINDOWS\$NtUninstallKB919803$
2006-11-11 16:57:27 ----HDC---- C:\WINDOWS\$NtUninstallKB917734_WMP10$
2006-11-11 16:57:07 ----HDC---- C:\WINDOWS\$NtUninstallKB914548$
2006-11-11 16:56:41 ----HDC---- C:\WINDOWS\$NtUninstallKB913800$
2006-11-11 16:56:32 ----N---- C:\WINDOWS\kb913800.exe
2006-11-11 16:56:11 ----HDC---- C:\WINDOWS\$NtUninstallKB912067$
2006-11-11 16:55:52 ----HDC---- C:\WINDOWS\$NtUninstallKB912024$
2006-11-11 16:55:36 ----HDC---- C:\WINDOWS\$NtUninstallKB911565$
2006-11-11 16:55:17 ----HDC---- C:\WINDOWS\$NtUninstallKB910393$
2006-11-11 16:54:58 ----HDC---- C:\WINDOWS\$NtUninstallKB908250$
2006-11-11 16:54:36 ----HDC---- C:\WINDOWS\$NtUninstallKB892627$
2006-11-11 16:54:17 ----D---- C:\Program Files\Goto Software
2006-11-11 16:54:17 ----D---- C:\Documents and Settings\All Users\Application Data\VadeRetro
2006-11-11 16:53:13 ----D---- C:\Program Files\Java
2006-11-11 16:53:12 ----D---- C:\Program Files\Fichiers communs\Java
2006-11-11 16:49:58 ----A---- C:\WINDOWS\WININIT.INI
2006-11-11 16:49:57 ----D---- C:\Documents and Settings\All Users\Application Data\InstallShield
2006-11-11 16:47:14 ----A---- C:\WINDOWS\HDReg.ini
2006-11-11 16:47:06 ----D---- C:\WINDOWS\SMINST
2006-11-11 16:47:06 ----D---- C:\WINDOWS\CREATOR
2006-11-11 16:47:06 ----A---- C:\WINDOWS\system32\ShellvRTF.dll
2006-11-11 16:47:05 ----A---- C:\WINDOWS\IsUninst.exe
2006-11-11 16:46:55 ----D---- C:\Program Files\CyberLink
2006-11-11 16:42:10 ----A---- C:\WINDOWS\system32\capicom.dll
2006-11-11 16:42:05 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2006-11-11 16:41:55 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
2006-11-11 16:41:20 ----RA---- C:\WINDOWS\system32\unzip32.dll
2006-11-11 16:41:20 ----D---- C:\Documents and Settings\All Users\Application Data\OD2
2006-11-11 16:41:19 ----DC---- C:\APPS
2006-11-11 16:38:28 ----D---- C:\WINDOWS\occache
2006-11-11 16:38:28 ----D---- C:\Program Files\Learn2.com
2006-11-11 16:38:27 ----D---- C:\Program Files\Viewpoint
2006-11-11 16:38:27 ----D---- C:\Documents and Settings\All Users\Application Data\Viewpoint
2006-11-11 16:38:25 ----A---- C:\WINDOWS\unvise32qt.exe
2006-11-11 16:38:25 ----A---- C:\WINDOWS\system32\shdocvw.bak
2006-11-11 16:38:21 ----D---- C:\WINDOWS\system32\QuickTime
2006-11-11 16:38:21 ----D---- C:\Program Files\QuickTime
2006-11-11 16:38:21 ----D---- C:\Documents and Settings\All Users\Application Data\QuickTime
2006-11-11 16:38:18 ----D---- C:\Program Files\Fichiers communs\Nullsoft
2006-11-11 16:38:11 ----D---- C:\Program Files\Fichiers communs\Real
2006-11-11 16:38:00 ----A---- C:\WINDOWS\system32\roboex32.dll
2006-11-11 16:38:00 ----A---- C:\WINDOWS\system32\MFC71.DLL
2006-11-11 16:38:00 ----A---- C:\WINDOWS\system32\Inetwh32.dll
2006-11-11 16:37:44 ----D---- C:\Documents and Settings\All Users\Application Data\AOL
2006-11-11 16:37:36 ----D---- C:\Program Files\Fichiers communs\AOL
2006-11-11 16:36:28 ----D---- C:\WINDOWS\system32\Lang
2006-11-11 16:33:37 ----D---- C:\WINDOWS\RegisteredPackages
2006-11-11 16:32:48 ----A---- C:\WINDOWS\system32\eula.txt
2006-11-11 16:32:29 ----HDC---- C:\WINDOWS\$NtUninstallKB902841$
2006-11-11 16:32:15 ----HDC---- C:\WINDOWS\$NtUninstallKB888795$
2006-11-11 16:32:02 ----HDC---- C:\WINDOWS\$NtUninstallKB899510$
2006-11-11 16:31:46 ----HDC---- C:\WINDOWS\$NtUninstallKB918899$
2006-11-11 16:31:34 ----HDC---- C:\WINDOWS\$NtUninstallKB899337$
2006-11-11 16:31:22 ----HDC---- C:\WINDOWS\$NtUninstallKB895961$
2006-11-11 16:31:10 ----HDC---- C:\WINDOWS\$NtUninstallKB904706$
2006-11-11 16:31:01 ----HDC---- C:\WINDOWS\$NtUninstallKB891593$
2006-11-11 16:30:43 ----HDC---- C:\WINDOWS\$NtUninstallKB903157$
2006-11-11 16:28:16 ----A---- C:\WINDOWS\system32\RtlCPAPI.dll
2006-11-11 16:28:16 ----A---- C:\WINDOWS\system32\ChCfg.exe
2006-11-11 16:28:02 ----D---- C:\WINDOWS\system32\ReinstallBackups
2006-11-11 16:27:47 ----D---- C:\WINDOWS\system32\RTCOM
2006-11-11 16:27:35 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$
2006-11-11 16:27:30 ----D---- C:\Program Files\Realtek
2006-11-11 16:27:28 ----A---- C:\WINDOWS\RtlExUpd.dll
2006-11-11 16:27:25 ----A---- C:\WINDOWS\SoundMan.exe
2006-11-11 16:27:25 ----A---- C:\WINDOWS\SkyTel.exe
2006-11-11 16:27:25 ----A---- C:\WINDOWS\RtlUpd.exe
2006-11-11 16:27:25 ----A---- C:\WINDOWS\RTLCPL.exe
2006-11-11 16:27:24 ----A---- C:\WINDOWS\RTHDCPL.exe
2006-11-11 16:27:24 ----A---- C:\WINDOWS\MicCal.exe
2006-11-11 16:27:24 ----A---- C:\WINDOWS\alcwzrd.exe
2006-11-11 16:27:24 ----A---- C:\WINDOWS\Alcmtr.exe
2006-11-11 16:26:59 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2006-11-11 16:21:34 ----D---- C:\Program Files\ATI Technologies
2006-11-11 16:21:32 ----HD---- C:\Program Files\InstallShield Installation Information
2006-11-11 16:21:09 ----D---- C:\Program Files\Fichiers communs\InstallShield
2006-11-11 16:21:08 ----A---- C:\WINDOWS\system32\Oemdspif.dll
2006-11-11 16:21:08 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2006-11-11 16:21:08 ----A---- C:\WINDOWS\system32\ativcoxx.dll
2006-11-11 16:21:08 ----A---- C:\WINDOWS\system32\atitvo32.dll
2006-11-11 16:21:08 ----A---- C:\WINDOWS\system32\atipdlxx.dll
2006-11-11 16:21:08 ----A---- C:\WINDOWS\system32\atioglxx.dll
2006-11-11 16:21:08 ----A---- C:\WINDOWS\system32\atioglx1.dll
2006-11-11 16:21:08 ----A---- C:\WINDOWS\system32\atikvmag.dll
2006-11-11 16:21:08 ----A---- C:\WINDOWS\system32\atiiiexx.dll
2006-11-11 16:21:08 ----A---- C:\WINDOWS\system32\ATIDEMGR.dll
2006-11-11 16:21:08 ----A---- C:\WINDOWS\system32\ATIDDC.DLL
2006-11-11 16:21:08 ----A---- C:\WINDOWS\system32\ati3duag.dll
2006-11-11 16:21:08 ----A---- C:\WINDOWS\system32\Ati2mdxx.exe
2006-11-11 16:21:08 ----A---- C:\WINDOWS\system32\ati2evxx.exe
2006-11-11 16:21:08 ----A---- C:\WINDOWS\system32\ati2evxx.dll
2006-11-11 16:21:08 ----A---- C:\WINDOWS\system32\ati2edxx.dll
2006-11-11 16:21:08 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2006-11-11 16:21:08 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2006-11-11 16:20:18 ----D---- C:\WINDOWS\system32\URTTemp
2006-11-11 16:15:12 ----D---- C:\WINDOWS\system32\FxsTmp
2006-11-11 16:14:10 ----D---- C:\WINDOWS\SoftwareDistribution
2006-11-11 16:13:43 ----SD---- C:\WINDOWS\system32\Microsoft
2006-11-11 16:13:43 ----A---- C:\WINDOWS\SchedLgU.Txt
2006-11-07 20:03:36 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2006-11-07 20:03:36 ----A---- C:\WINDOWS\system32\msfeeds.dll
2006-11-07 20:03:36 ----A---- C:\WINDOWS\system32\ieui.dll
2006-11-07 20:03:36 ----A---- C:\WINDOWS\system32\ieframe.dll
2006-11-07 02:26:32 ----A---- C:\WINDOWS\system32\ieudinit.exe
2006-11-03 09:03:34 ----A---- C:\WINDOWS\system32\SETB0.tmp
2006-11-03 09:03:34 ----A---- C:\WINDOWS\system32\SET32.tmp
2006-11-02 10:52:12 ----N---- C:\WINDOWS\system32\wpdshextres.dll
2006-10-26 13:42:36 ----A---- C:\WINDOWS\system32\FM20FRA.DLL
2006-10-26 13:10:08 ----A---- C:\WINDOWS\system32\FM20.DLL
2006-10-26 13:10:06 ----A---- C:\WINDOWS\system32\FM20ENU.DLL
2006-10-24 12:30:20 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2006-10-24 12:30:06 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2006-10-24 12:30:00 ----N---- C:\WINDOWS\system32\wmphoto.dll
2006-10-24 12:29:50 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\WPDShServiceObj.dll
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\WpdShext.dll
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\WMVXENCD.dll
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\WMVSENCD.dll
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\WMVSDECD.dll
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\WMVENCOD.dll
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\WMVDECOD.dll
2006-10-18 20:47:22 ----A---- C:\WINDOWS\system32\SETCE.tmp
2006-10-18 20:47:20 ----N---- C:\WINDOWS\system32\wmpps.dll
2006-10-18 20:47:20 ----N---- C:\WINDOWS\system32\wmpmde.dll
2006-10-18 20:47:20 ----N---- C:\WINDOWS\system32\wmpeffects.dll
2006-10-18 20:47:20 ----A---- C:\WINDOWS\system32\SETC7.tmp
2006-10-18 20:47:18 ----N---- C:\WINDOWS\system32\PortableDeviceWMDRM.dll
2006-10-18 20:47:18 ----N---- C:\WINDOWS\system32\PortableDeviceWiaCompat.dll
2006-10-18 20:47:18 ----N---- C:\WINDOWS\system32\PortableDeviceTypes.dll
2006-10-18 20:47:18 ----N---- C:\WINDOWS\system32\PortableDeviceClassExtension.dll
2006-10-18 20:47:18 ----N---- C:\WINDOWS\system32\PortableDeviceApi.dll
2006-10-18 20:47:18 ----A---- C:\WINDOWS\system32\SETD9.tmp
2006-10-18 20:47:18 ----A---- C:\WINDOWS\system32\SETC2.tmp
2006-10-18 20:47:18 ----A---- C:\WINDOWS\system32\SETC0.tmp
2006-10-18 20:47:16 ----A---- C:\WINDOWS\system32\SETDC.tmp
2006-10-18 20:47:16 ----A---- C:\WINDOWS\system32\SETD7.tmp
2006-10-18 20:47:14 ----N---- C:\WINDOWS\system32\MPG4DECD.dll
2006-10-18 20:47:14 ----N---- C:\WINDOWS\system32\MP4SDECD.dll
2006-10-18 20:47:14 ----N---- C:\WINDOWS\system32\MP43DECD.dll
2006-10-18 19:00:14 ----N---- C:\WINDOWS\system32\wpdshextautoplay.exe
2006-10-17 11:05:58 ----A---- C:\WINDOWS\system32\WinFXDocObj.exe
2006-10-17 10:58:32 ----A---- C:\WINDOWS\system32\msfeedssync.exe
2006-10-17 10:58:20 ----A---- C:\WINDOWS\system32\icardie.dll
2006-10-17 10:57:20 ----A---- C:\WINDOWS\system32\iertutil.dll
2006-10-17 10:27:56 ----A---- C:\WINDOWS\system32\ieapfltr.dll

======List of files/folders modified in the last 1 months======

2009-10-03 13:46:12 ----D---- C:\WINDOWS\Help
2009-09-25 21:46:09 ----D---- C:\WINDOWS\WinSxS
2009-09-24 12:36:11 ----HD---- C:\WINDOWS\$hf_mig$
2009-09-10 21:38:18 ----D---- C:\WINDOWS\ehome
2009-08-18 15:58:55 ----D---- C:\Program Files\Fichiers communs
2009-08-17 22:00:36 ----D---- C:\WINDOWS\system32\CatRoot
2009-08-16 22:05:18 ----RSD---- C:\WINDOWS\Fonts
2009-08-16 22:04:54 ----D---- C:\WINDOWS\system32\spool
2009-08-15 08:37:12 ----D---- C:\Program Files\Outlook Express
2009-08-06 18:24:10 ----A---- C:\WINDOWS\system32\wups2.dll
2009-07-29 15:10:15 ----D---- C:\Program Files\Internet Explorer
2009-07-28 17:38:21 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-07-19 14:15:02 ----A---- C:\WINDOWS\system32\mshtml.dll
2009-07-13 22:43:24 ----A---- C:\WINDOWS\system32\wmp.dll
2009-07-03 17:57:51 ----A---- C:\WINDOWS\system32\wininet.dll
2009-07-03 17:57:50 ----A---- C:\WINDOWS\system32\urlmon.dll
2009-07-03 17:57:46 ----N---- C:\WINDOWS\system32\jsproxy.dll
2009-07-03 17:57:44 ----A---- C:\WINDOWS\system32\iepeers.dll
2009-07-02 21:53:48 ----D---- C:\WINDOWS\Media
2009-06-25 09:26:32 ----A---- C:\WINDOWS\system32\lsasrv.dll
2009-06-25 09:26:31 ----A---- C:\WINDOWS\system32\kerberos.dll
2009-06-22 07:47:13 ----A---- C:\WINDOWS\system32\jscript.dll
2009-06-16 15:40:01 ----A---- C:\WINDOWS\system32\t2embed.dll
2009-06-16 15:40:01 ----A---- C:\WINDOWS\system32\fontsub.dll
2009-06-15 11:44:50 ----A---- C:\WINDOWS\system32\telnet.exe
2009-06-03 20:10:33 ----A---- C:\WINDOWS\system32\quartz.dll
2009-05-20 03:56:52 ----A---- C:\WINDOWS\system32\WMVCore.dll
2009-04-29 05:45:35 ----A---- C:\WINDOWS\system32\extmgr.dll
2009-04-16 19:29:15 ----D---- C:\WINDOWS\system32\wbem
2009-04-16 19:29:14 ----D---- C:\WINDOWS\AppPatch
2009-03-21 15:07:58 ----A---- C:\WINDOWS\system32\kernel32.dll
2009-03-21 13:23:08 ----D---- C:\WINDOWS\Debug
2009-03-08 03:34:18 ----A---- C:\WINDOWS\system32\msrating.dll
2009-03-08 03:32:46 ----A---- C:\WINDOWS\system32\inseng.dll
2009-03-08 03:32:04 ----A---- C:\WINDOWS\system32\mstime.dll
2009-03-08 03:31:44 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2009-03-08 03:31:38 ----A---- C:\WINDOWS\system32\dxtrans.dll
2009-03-08 03:31:36 ----A---- C:\WINDOWS\system32\pngfilt.dll
2009-03-08 03:31:26 ----A---- C:\WINDOWS\system32\mshtmled.dll
2009-02-21 14:05:33 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-02-09 12:23:57 ----A---- C:\WINDOWS\system32\ntkrnlpa.exe
2009-02-09 12:23:51 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2009-02-09 11:53:55 ----A---- C:\WINDOWS\system32\rpcss.dll
2009-01-07 17:21:08 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-01-07 17:20:38 ----A---- C:\WINDOWS\system32\nlsdl.dll
2009-01-07 17:20:36 ----A---- C:\WINDOWS\system32\normaliz.dll
2009-01-07 17:20:36 ----A---- C:\WINDOWS\system32\idndl.dll
2008-12-10 19:49:26 ----D---- C:\WINDOWS\system32\inetsrv
2008-12-10 17:47:08 ----D---- C:\WINDOWS\system32\config
2008-10-23 13:36:51 ----A---- C:\WINDOWS\system32\gdi32.dll
2008-10-15 17:35:43 ----A---- C:\WINDOWS\system32\netapi32.dll
2008-09-20 14:19:40 ----D---- C:\WINDOWS\system32\Setup
2008-09-20 14:19:02 ----D---- C:\WINDOWS\security
2008-09-20 09:44:55 ----D---- C:\Program Files\Messenger
2008-09-20 09:38:26 ----D---- C:\WINDOWS\ime
2008-09-20 09:37:55 ----D---- C:\WINDOWS\system32\usmt
2008-09-20 09:37:52 ----D---- C:\WINDOWS\PeerNet
2008-09-20 09:37:52 ----D---- C:\Program Files\Movie Maker
2008-09-20 09:33:54 ----D---- C:\WINDOWS\system32\Restore
2008-09-20 09:33:54 ----D---- C:\WINDOWS\system32\npp
2008-09-20 09:33:53 ----D---- C:\WINDOWS\msagent
2008-09-20 09:33:51 ----D---- C:\WINDOWS\srchasst
2008-09-20 09:33:50 ----D---- C:\Program Files\NetMeeting
2008-09-20 09:33:48 ----D---- C:\WINDOWS\system32\Com
2008-09-20 09:33:45 ----D---- C:\Program Files\Windows NT
2008-09-20 09:33:41 ----D---- C:\Program Files\Fichiers communs\System
2008-09-20 09:33:24 ----D---- C:\WINDOWS\system32\oobe
2008-09-20 09:33:21 ----D---- C:\WINDOWS\system
2008-09-17 18:15:00 ----SD---- C:\WINDOWS\Downloaded Program Files
2008-08-16 14:34:47 ----D---- C:\Program Files\Windows Media Player
2008-07-07 21:28:20 ----A---- C:\WINDOWS\system32\es.dll
2008-07-02 17:26:04 ----A---- C:\WINDOWS\win.ini
2008-06-24 17:44:02 ----A---- C:\WINDOWS\system32\mscms.dll
2008-06-20 18:47:22 ----A---- C:\WINDOWS\system32\dnsapi.dll
2008-06-18 05:03:08 ----A---- C:\WINDOWS\system32\WMNetmgr.dll
2008-06-18 01:09:22 ----A---- C:\WINDOWS\system32\logagent.exe
2008-06-17 20:02:15 ----A---- C:\WINDOWS\system32\shell32.dll
2008-06-12 15:22:23 ----A---- C:\WINDOWS\system32\mtxoci.dll
2008-06-12 15:22:23 ----A---- C:\WINDOWS\system32\mtxclu.dll
2008-06-12 15:22:23 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2008-06-12 15:22:23 ----A---- C:\WINDOWS\system32\msdtctm.dll
2008-06-12 15:22:23 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2008-04-17 12:12:54 ----A---- C:\WINDOWS\system32\GEARAspi.dll
2008-04-14 03:34:26 ----N---- C:\WINDOWS\system32\verclsid.exe
2008-04-14 03:34:23 ----A---- C:\WINDOWS\system32\spoolsv.exe
2008-04-14 03:34:13 ----A---- C:\WINDOWS\system32\msiexec.exe
2008-04-14 03:34:06 ----A---- C:\WINDOWS\hh.exe
2008-04-14 03:33:52 ----A---- C:\WINDOWS\system32\xolehlp.dll
2008-04-14 03:33:52 ----A---- C:\WINDOWS\system32\wzcsvc.dll
2008-04-14 03:33:51 ----A---- C:\WINDOWS\system32\wzcsapi.dll
2008-04-14 03:33:51 ----A---- C:\WINDOWS\system32\wzcdlg.dll
2008-04-14 03:33:48 ----A---- C:\WINDOWS\system32\winsrv.dll
2008-04-14 03:33:48 ----A---- C:\WINDOWS\system32\webclnt.dll
2008-04-14 03:33:48 ----A---- C:\WINDOWS\system32\user32.dll
2008-04-14 03:33:47 ----A---- C:\WINDOWS\system32\umpnpmgr.dll
2008-04-14 03:33:47 ----A---- C:\WINDOWS\system32\txflog.dll
2008-04-14 03:33:46 ----A---- C:\WINDOWS\system32\termsrv.dll
2008-04-14 03:33:46 ----A---- C:\WINDOWS\system32\tapisrv.dll
2008-04-14 03:33:46 ----A---- C:\WINDOWS\system32\srvsvc.dll
2008-04-14 03:33:41 ----A---- C:\WINDOWS\system32\shlwapi.dll
2008-04-14 03:33:41 ----A---- C:\WINDOWS\system32\shdocvw.dll
2008-04-14 03:33:39 ----A---- C:\WINDOWS\system32\rasmans.dll
2008-04-14 03:33:39 ----A---- C:\WINDOWS\system32\rasadhlp.dll
2008-04-14 03:33:39 ----A---- C:\WINDOWS\system32\qdvd.dll
2008-04-14 03:33:38 ----A---- C:\WINDOWS\system32\olecnv32.dll
2008-04-14 03:33:38 ----A---- C:\WINDOWS\system32\olecli32.dll
2008-04-14 03:33:38 ----A---- C:\WINDOWS\system32\ole32.dll
2008-04-14 03:33:36 ----A---- C:\WINDOWS\system32\nwwks.dll
2008-04-14 03:33:35 ----A---- C:\WINDOWS\system32\netshell.dll
2008-04-14 03:33:34 ----A---- C:\WINDOWS\system32\netman.dll
2008-04-14 03:33:32 ----A---- C:\WINDOWS\system32\msisip.dll
2008-04-14 03:33:32 ----A---- C:\WINDOWS\system32\msihnd.dll
2008-04-14 03:33:32 ----A---- C:\WINDOWS\system32\msi.dll
2008-04-14 03:33:28 ----A---- C:\WINDOWS\system32\linkinfo.dll
2008-04-14 03:33:27 ----N---- C:\WINDOWS\system32\jgpl400.dll
2008-04-14 03:33:27 ----N---- C:\WINDOWS\system32\jgdw400.dll
2008-04-14 03:33:27 ----A---- C:\WINDOWS\system32\itss.dll
2008-04-14 03:33:27 ----A---- C:\WINDOWS\system32\itircl.dll
2008-04-14 03:33:26 ----A---- C:\WINDOWS\system32\icm32.dll
2008-04-14 03:33:26 ----A---- C:\WINDOWS\system32\hypertrm.dll
2008-04-14 03:33:26 ----A---- C:\WINDOWS\system32\hlink.dll
2008-04-14 03:33:26 ----A---- C:\WINDOWS\system32\hhsetup.dll
2008-04-14 03:33:24 ----A---- C:\WINDOWS\system32\esent.dll
2008-04-14 03:33:22 ----A---- C:\WINDOWS\system32\danim.dll
2008-04-14 03:33:21 ----A---- C:\WINDOWS\system32\comuid.dll
2008-04-14 03:33:21 ----A---- C:\WINDOWS\system32\comsvcs.dll
2008-04-14 03:33:21 ----A---- C:\WINDOWS\system32\comrepl.dll
2008-04-14 03:33:21 ----A---- C:\WINDOWS\system32\colbact.dll
2008-04-14 03:33:21 ----A---- C:\WINDOWS\system32\clbcatq.dll
2008-04-14 03:33:21 ----A---- C:\WINDOWS\system32\clbcatex.dll
2008-04-14 03:33:20 ----A---- C:\WINDOWS\system32\cdosys.dll
2008-04-14 03:33:20 ----A---- C:\WINDOWS\system32\cdfview.dll
2008-04-14 03:33:20 ----A---- C:\WINDOWS\system32\catsrvut.dll
2008-04-14 03:33:20 ----A---- C:\WINDOWS\system32\catsrv.dll
2008-04-14 03:33:20 ----A---- C:\WINDOWS\system32\browseui.dll
2008-04-14 03:33:19 ----A---- C:\WINDOWS\system32\authz.dll
2008-04-14 03:04:20 ----A---- C:\WINDOWS\system32\msxml6r.dll
2008-04-13 19:39:17 ----A---- C:\WINDOWS\system32\xpsp3res.dll
2008-04-13 19:31:28 ----A---- C:\WINDOWS\system32\HAL.DLL
2008-04-13 16:39:43 ----A---- C:\WINDOWS\system32\msimsg.dll
2008-04-11 20:05:22 ----A---- C:\WINDOWS\system32\inetcomm.dll
2007-10-25 08:28:30 ----A---- C:\WINDOWS\system32\wmasf.dll
2007-08-04 13:35:25 ----D---- C:\WINDOWS\twain_32
2007-05-23 07:24:14 ----D---- C:\WINDOWS\system32\Macromed
2007-03-31 12:26:20 ----D---- C:\Program Files\MSN
2007-03-29 19:50:42 ----D---- C:\Documents and Settings
2007-03-29 19:49:55 ----RASHC---- C:\boot.ini
2007-03-29 18:59:55 ----A---- C:\WINDOWS\system.ini
2007-03-29 18:46:50 ----D---- C:\WINDOWS\repair
2007-03-21 20:33:00 ----A---- C:\WINDOWS\system32\MSVCR71.DLL
2007-03-21 20:33:00 ----A---- C:\WINDOWS\system32\MSVCP71.DLL
2006-12-04 15:21:50 ----A---- C:\WINDOWS\system32\msscp.dll
2006-11-21 15:57:00 ----D---- C:\Program Files\Fichiers communs\Services
2006-11-21 15:55:35 ----D---- C:\WINDOWS\system32\ras
2006-11-21 15:55:21 ----D---- C:\WINDOWS\system32\icsxml
2006-11-21 15:55:20 ----D---- C:\WINDOWS\system32\ias
2006-11-21 15:53:38 ----D---- C:\WINDOWS\system32\1036
2006-11-21 15:53:38 ----D---- C:\WINDOWS\system32\1033
2006-11-21 15:53:28 ----RD---- C:\WINDOWS\Web
2006-11-21 15:53:28 ----D---- C:\WINDOWS\addins
2006-11-21 15:52:58 ----D---- C:\WINDOWS\Cursors
2006-11-21 15:52:57 ----HDC---- C:\WINDOWS\$NtUninstallKB921883$
2006-11-21 15:52:57 ----HDC---- C:\WINDOWS\$NtUninstallKB920683$
2006-11-21 15:52:57 ----HDC---- C:\WINDOWS\$NtUninstallKB918439$
2006-11-21 15:52:56 ----HDC---- C:\WINDOWS\$NtUninstallKB917422$
2006-11-21 15:52:56 ----HDC---- C:\WINDOWS\$NtUninstallKB917344$
2006-11-21 15:52:56 ----HDC---- C:\WINDOWS\$NtUninstallKB916281$
2006-11-21 15:52:56 ----HDC---- C:\WINDOWS\$NtUninstallKB911927$
2006-11-21 15:52:56 ----HDC---- C:\WINDOWS\$NtUninstallKB911567$
2006-11-21 15:52:56 ----HDC---- C:\WINDOWS\$NtUninstallKB911562$
2006-11-21 15:52:56 ----HDC---- C:\WINDOWS\$NtUninstallKB911280$
2006-11-21 15:52:56 ----HDC---- C:\WINDOWS\$NtUninstallKB910437$
2006-11-21 15:52:55 ----HDC---- C:\WINDOWS\$NtUninstallKB908519$
2006-11-21 15:52:55 ----HDC---- C:\WINDOWS\$NtUninstallKB905915$
2006-11-21 15:52:55 ----HDC---- C:\WINDOWS\$NtUninstallKB905749$
2006-11-21 15:52:55 ----HDC---- C:\WINDOWS\$NtUninstallKB905414$
2006-11-21 15:52:55 ----HDC---- C:\WINDOWS\$NtUninstallKB904706_0$
2006-11-21 15:52:54 ----HDC---- C:\WINDOWS\$NtUninstallKB902400$
2006-11-21 15:52:54 ----HDC---- C:\WINDOWS\$NtUninstallKB901214$
2006-11-21 15:52:53 ----HDC---- C:\WINDOWS\$NtUninstallKB901017$
2006-11-21 15:52:53 ----HDC---- C:\WINDOWS\$NtUninstallKB900930$
2006-11-21 15:52:53 ----HDC---- C:\WINDOWS\$NtUninstallKB900725$
2006-11-21 15:52:52 ----HDC---- C:\WINDOWS\$NtUninstallKB899591$
2006-11-21 15:52:52 ----HDC---- C:\WINDOWS\$NtUninstallKB899589$
2006-11-21 15:52:52 ----HDC---- C:\WINDOWS\$NtUninstallKB899587$
2006-11-21 15:52:52 ----HDC---- C:\WINDOWS\$NtUninstallKB896424$
2006-11-21 15:52:52 ----HDC---- C:\WINDOWS\$NtUninstallKB896423$
2006-11-21 15:52:52 ----HDC---- C:\WINDOWS\$NtUninstallKB896422$
2006-11-21 15:52:52 ----HDC---- C:\WINDOWS\$NtUninstallKB896358$
2006-11-21 15:52:51 ----HDC---- C:\WINDOWS\$NtUninstallKB893756$
2006-11-21 15:52:50 ----HDC---- C:\WINDOWS\$NtUninstallKB893086$
2006-11-21 15:52:50 ----HDC---- C:\WINDOWS\$NtUninstallKB893066$
2006-11-21 15:52:50 ----HDC---- C:\WINDOWS\$NtUninstallKB891781$
2006-11-21 15:52:50 ----HDC---- C:\WINDOWS\$NtUninstallKB890923$
2006-11-21 15:52:50 ----HDC---- C:\WINDOWS\$NtUninstallKB890859$
2006-11-21 15:52:49 ----HDC---- C:\WINDOWS\$NtUninstallKB890046$
2006-11-21 15:52:49 ----HDC---- C:\WINDOWS\$NtUninstallKB888302$
2006-11-21 15:52:49 ----HDC---- C:\WINDOWS\$NtUninstallKB888239$
2006-11-21 15:52:49 ----HDC---- C:\WINDOWS\$NtUninstallKB888113$
2006-11-21 15:52:49 ----HDC---- C:\WINDOWS\$NtUninstallKB887742$
2006-11-21 15:52:49 ----HDC---- C:\WINDOWS\$NtUninstallKB886185$
2006-11-21 15:52:49 ----HDC---- C:\WINDOWS\$NtUninstallKB885836$
2006-11-21 15:52:49 ----HDC---- C:\WINDOWS\$NtUninstallKB885835$
2006-11-21 15:52:49 ----HDC---- C:\WINDOWS\$NtUninstallKB885250$
2006-11-21 15:52:49 ----HDC---- C:\WINDOWS\$NtUninstallKB883939$
2006-11-21 15:52:48 ----HDC---- C:\WINDOWS\$NtUninstallKB873339$
2006-11-21 15:52:48 ----HDC---- C:\WINDOWS\$NtUninstallKB873333$
2006-11-21 15:52:48 ----HDC---- C:\WINDOWS\$NtUninstallKB867282$
2006-11-21 15:52:48 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2006-11-16 01:08:50 ----D---- C:\WINDOWS\system32
2006-11-16 01:08:50 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2006-11-16 01:02:15 ----SHD---- C:\WINDOWS\Installer
2006-11-16 01:01:18 ----D---- C:\WINDOWS\Microsoft.NET
2006-11-16 01:00:04 ----D---- C:\WINDOWS\system32\drivers
2006-11-16 00:58:02 ----D---- C:\WINDOWS\system32\DirectX
2006-11-15 23:22:31 ----D---- C:\WINDOWS\Temp
2006-11-15 23:15:56 ----D---- C:\WINDOWS
2006-11-15 23:15:14 ----HD---- C:\WINDOWS\inf
2006-11-15 23:15:05 ----D---- C:\WINDOWS\system32\CatRoot2
2006-11-15 23:15:04 ----D---- C:\WINDOWS\Registration
2006-11-15 23:14:47 ----SD---- C:\WINDOWS\Tasks
2006-11-13 17:30:51 ----D---- C:\Program Files\xerox
2006-11-13 17:30:50 ----D---- C:\Program Files\Windows Plus
2006-11-13 17:29:18 ----D---- C:\Program Files\Services en ligne
2006-11-13 17:28:58 ----D---- C:\Program Files\Online Services
2006-11-13 17:28:34 ----D---- C:\Program Files\MSN Gaming Zone
2006-11-13 17:28:32 ----D---- C:\Program Files\microsoft frontpage
2006-11-13 17:26:18 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2006-11-13 17:26:04 ----D---- C:\Program Files\Fichiers communs\MSSoap
2006-11-13 17:22:29 ----D---- C:\CMPNENTS
2006-11-13 17:15:29 ----D---- C:\WINDOWS\pchealth
2006-11-13 17:15:10 ----D---- C:\WINDOWS\mui
2006-11-13 17:15:10 ----D---- C:\WINDOWS\msapps
2006-11-13 17:12:09 ----D---- C:\WINDOWS\Resources
2006-11-13 17:11:47 ----D---- C:\WINDOWS\Provisioning
2006-11-13 17:09:41 ----D---- C:\WINDOWS\Driver Cache
2006-11-13 17:09:32 ----D---- C:\WINDOWS\Config
2006-11-13 17:09:30 ----D---- C:\WINDOWS\Connection Wizard
2006-11-13 17:07:38 ----HDC---- C:\WINDOWS\$NtUninstallKB918899_0$
2006-11-13 17:07:30 ----HDC---- C:\WINDOWS\$NtUninstallbasecsp$
2006-11-13 17:07:27 ----HDC---- C:\WINDOWS\$NtUninstallKB887998$
2006-11-13 17:07:26 ----HDC---- C:\WINDOWS\$NtUninstallKB912919$
2006-11-13 17:07:14 ----HDC---- C:\WINDOWS\$NtUninstallKB898458$
2006-11-13 17:07:13 ----HDC---- C:\WINDOWS\$NtUninstallKB896727$
2006-11-13 17:07:13 ----HDC---- C:\WINDOWS\$NtUninstallKB896428$
2006-11-13 17:07:11 ----HDC---- C:\WINDOWS\$NtUninstallKB914389$
2006-11-13 17:07:04 ----HDC---- C:\WINDOWS\$NtUninstallKB922616$
2006-11-13 17:07:02 ----HDC---- C:\WINDOWS\$NtUninstallKB896256$
2006-11-13 17:06:57 ----HDC---- C:\WINDOWS\$NtUninstallKB921398$
2006-11-13 17:06:48 ----HDC---- C:\WINDOWS\$NtUninstallKB900485$
2006-11-13 17:06:42 ----HDC---- C:\WINDOWS\$NtUninstallKB913446$
2006-11-13 17:06:32 ----HDC---- C:\WINDOWS\$NtUninstallKB917953$
2006-11-13 17:06:23 ----HDC---- C:\WINDOWS\$NtUninstallKB887472$
2006-11-13 17:06:21 ----HDC---- C:\WINDOWS\$NtUninstallKB912812$
2006-11-13 17:05:56 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2006-11-13 17:05:54 ----HDC---- C:\WINDOWS\$NtUninstallKB920214$
2006-11-13 17:05:53 ----HDC---- C:\WINDOWS\$NtUninstallKB903235$
2006-11-13 17:05:48 ----HDC---- C:\WINDOWS\$NtUninstallKB920670$
2006-11-13 17:05:48 ----HDC---- C:\WINDOWS\$NtUninstallKB908531$
2006-11-13 17:05:42 ----HDC---- C:\WINDOWS\$NtUninstallKB894391$
2006-11-13 17:05:40 ----HDC---- C:\WINDOWS\$NtUninstallKB913580$
2006-11-13 17:05:08 ----D---- C:\WINDOWS\system32\xircom
2006-11-13 17:05:08 ----D---- C:\WINDOWS\system32\wins
2006-11-13 17:04:55 ----D---- C:\WINDOWS\system32\mui
2006-11-13 17:04:55 ----D---- C:\WINDOWS\system32\export
2006-11-13 17:03:40 ----D---- C:\WINDOWS\system32\dhcp
2006-11-13 17:03:22 ----D---- C:\WINDOWS\system32\ShellExt
2006-11-13 17:03:06 ----D---- C:\WINDOWS\system32\PreInstall
2006-11-13 17:03:05 ----D---- C:\WINDOWS\system32\MsDtc
2006-11-13 17:02:58 ----D---- C:\WINDOWS\system32\IME
2006-11-13 17:02:53 ----D---- C:\WINDOWS\system32\3com_dmi
2006-11-13 17:02:53 ----D---- C:\WINDOWS\system32\3076
2006-11-13 17:02:53 ----D---- C:\WINDOWS\system32\2052
2006-11-13 17:02:53 ----D---- C:\WINDOWS\system32\1054
2006-11-13 17:02:53 ----D---- C:\WINDOWS\system32\1042
2006-11-13 17:02:53 ----D---- C:\WINDOWS\system32\1041
2006-11-13 17:02:53 ----D---- C:\WINDOWS\system32\1037
2006-11-13 17:02:53 ----D---- C:\WINDOWS\system32\1031
2006-11-13 17:02:53 ----D---- C:\WINDOWS\system32\1028
2006-11-13 17:02:53 ----D---- C:\WINDOWS\system32\1025
2006-11-13 17:01:16 ----D---- C:\WINDOWS\java
2006-11-03 09:03:34 ----A---- C:\WINDOWS\system32\wmploc.dll
2006-10-18 20:58:00 ----A---- C:\WINDOWS\system32\wdfmgr.exe
2006-10-18 20:58:00 ----A---- C:\WINDOWS\system32\uwdf.exe
2006-10-18 20:47:22 ----A---- C:\WINDOWS\system32\wpdsp.dll
2006-10-18 20:47:22 ----A---- C:\WINDOWS\system32\wpdmtpus.dll
2006-10-18 20:47:22 ----A---- C:\WINDOWS\system32\wpdmtp.dll
2006-10-18 20:47:22 ----A---- C:\WINDOWS\system32\wpdconns.dll
2006-10-18 20:47:22 ----A---- C:\WINDOWS\system32\wpd_ci.dll
2006-10-18 20:47:22 ----A---- C:\WINDOWS\system32\wmvdmoe2.dll
2006-10-18 20:47:22 ----A---- C:\WINDOWS\system32\wmvdmod.dll
2006-10-18 20:47:22 ----A---- C:\WINDOWS\system32\WMVADVE.DLL
2006-10-18 20:47:22 ----A---- C:\WINDOWS\system32\WMVADVD.dll
2006-10-18 20:47:22 ----A---- C:\WINDOWS\system32\WMSPDMOE.dll
2006-10-18 20:47:22 ----A---- C:\WINDOWS\system32\WMSPDMOD.dll
2006-10-18 20:47:22 ----A---- C:\WINDOWS\system32\wmsdmoe2.dll
2006-10-18 20:47:22 ----A---- C:\WINDOWS\system32\wmsdmod.dll
2006-10-18 20:47:20 ----A---- C:\WINDOWS\system32\wmidx.dll
2006-10-18 20:47:20 ----A---- C:\WINDOWS\system32\wmdrmsdk.dll
2006-10-18 20:47:20 ----A---- C:\WINDOWS\system32\wmdrmnet.dll
2006-10-18 20:47:18 ----A---- C:\WINDOWS\system32\wmdrmdev.dll
2006-10-18 20:47:18 ----A---- C:\WINDOWS\system32\wmdmps.dll
2006-10-18 20:47:18 ----A---- C:\WINDOWS\system32\wmdmlog.dll
2006-10-18 20:47:18 ----A---- C:\WINDOWS\system32\WMADMOE.dll
2006-10-18 20:47:18 ----A---- C:\WINDOWS\system32\WMADMOD.dll
2006-10-18 20:47:18 ----A---- C:\WINDOWS\system32\wdfapi.dll
2006-10-18 20:47:18 ----A---- C:\WINDOWS\system32\qasf.dll
2006-10-18 20:47:16 ----A---- C:\WINDOWS\system32\mswmdm.dll
2006-10-18 20:47:16 ----A---- C:\WINDOWS\system32\mspmsp.dll
2006-10-18 20:47:16 ----A---- C:\WINDOWS\system32\mspmsnsv.dll
2006-10-18 20:47:16 ----A---- C:\WINDOWS\system32\msnetobj.dll
2006-10-18 20:47:14 ----A---- C:\WINDOWS\system32\MFPLAT.dll
2006-10-18 20:47:14 ----A---- C:\WINDOWS\system32\LAPRXY.dll
2006-10-18 20:47:10 ----A---- C:\WINDOWS\system32\drmv2clt.dll
2006-10-18 20:47:10 ----A---- C:\WINDOWS\system32\cewmdm.dll
2006-10-18 20:47:10 ----A---- C:\WINDOWS\system32\blackbox.dll
2006-10-18 19:00:46 ----A---- C:\WINDOWS\system32\drmupgds.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys []
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCDrv.sys []
R1 SRTSPX;SRTSPX; C:\WINDOWS\System32\Drivers\SRTSPX.SYS [2007-11-30 43696]
R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2007-01-09 191544]
R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-08-05 54752]
R2 Machnm32;Machnm32 Driver; \??\C:\WINDOWS\System32\Machnm32.sys []
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-07-19 1675776]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys []
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-08-24 4374016]
R3 NAVENG;NAVENG; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20091008.003\NAVENG.SYS []
R3 NAVEX15;NAVEX15; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20091008.003\NAVEX15.SYS []
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-06-17 83968]
R3 SRTSP;SRTSP; C:\WINDOWS\System32\Drivers\SRTSP.SYS [2007-11-30 279088]
R3 SYMDNS;SYMDNS; C:\WINDOWS\System32\Drivers\SYMDNS.SYS [2007-01-09 12984]
R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS []
R3 SYMFW;SYMFW; C:\WINDOWS\System32\Drivers\SYMFW.SYS [2007-01-09 145976]
R3 SYMIDS;SYMIDS; C:\WINDOWS\System32\Drivers\SYMIDS.SYS [2007-01-09 40120]
R3 SYMIDSCO;SYMIDSCO; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\SymcData\idsdefs\20090923.001\SymIDSCo.sys []
R3 SYMNDIS;SYMNDIS; C:\WINDOWS\System32\Drivers\SYMNDIS.SYS [2007-01-09 35256]
R3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2007-01-09 27576]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 fbxusb;Carte réseau virtuelle FreeBox USB; C:\WINDOWS\system32\DRIVERS\fbxusb32.sys [2004-10-20 21344]
S3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-12 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-12 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-12 21568]
S3 klvcm;klvcm; \??\C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\klvcm.sys []
S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2004-10-08 22016]
S3 MHNDRV;Pilote MHN; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008]
S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 pmouclas;pmouclas; \??\C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\pmouclas.sys []
S3 QCMerced;Logitech QuickCam Communicate; C:\WINDOWS\system32\DRIVERS\LVCM.sys [2004-10-08 585824]
S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SRTSPL;SRTSPL; C:\WINDOWS\System32\Drivers\SRTSPL.SYS [2007-11-30 317616]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbbus;LGE Mobile Composite USB Device; C:\WINDOWS\system32\DRIVERS\lgusbbus.sys [2007-07-11 12416]
S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 UsbDiag;LGE Mobile USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys [2007-07-11 19840]
S3 USBModem;LGE Mobile USB Modem; C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys [2007-07-11 21632]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2007-06-28 108208]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-07-19 401408]
R2 ccEvtMgr;Symantec Event Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe [2007-01-09 108648]
R2 ccSetMgr;Symantec Settings Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe [2007-01-09 108648]
R2 CLTNetCnService;Symantec Lic NetConnect service; C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe [2007-01-09 108648]
R2 IconixService;Iconix Update Service; C:\Program Files\Fichiers communs\Iconix\IconixService.exe [2009-09-30 282968]
R2 LiveUpdate Notice Ex;LiveUpdate Notice Service Ex; C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe [2007-01-09 108648]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 spupdsvc;Windows Service Pack Installer update service; C:\WINDOWS\system32\spupdsvc.exe [2009-01-07 26144]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 ehSched;Service de planification Media Center; C:\WINDOWS\eHome\ehSched.exe [2004-08-10 103424]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-21 183280]
S2 LiveUpdate Notice Service;LiveUpdate Notice Service; C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe [2008-01-29 583048]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2006-03-03 69632]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 Boonty Games;Boonty Games; C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe [2007-10-24 69120]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 comHost;COM Host; C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe [2007-01-12 49248]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 fsssvc;Service Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 LiveUpdate;LiveUpdate; C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE [2007-09-26 2999664]
S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 Symantec Core LC;Symantec Core LC; C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe [2008-03-26 1251720]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------


info.txt logfile of random's system information tool 1.06 2006-11-15 23:23:48

======Uninstall list======

-->C:\PROGRA~1\GOTOSO~1\VADERE~1\UNWISE.EXE C:\PROGRA~1\GOTOSO~1\VADERE~1\INSTALL.LOG
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
AbiWord 2.6.5-->C:\Program Files\AbiSuite2\UninstallAbiWord2.exe
Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)-->MsiExec.exe /X{6846389C-BAC0-4374-808E-B120F86AF5D7}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 8.1.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81200000003}
AppCore-->MsiExec.exe /I{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Catalyst Control Center-->MsiExec.exe /I{673AB3CA-22D3-477C-8F09-8BB9923C0160}
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:D ISPLAY -cle

Bonjour,

  • Désinstalle Favorit.

  • Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
  • Double-clique sur le fichier téléchargé pour lancer le processus d'installation.
  • Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.
  • Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
  • Sélectionne Exécuter un examen rapide.
  • Clique sur Rechercher. L'analyse démarre.
  • A la fin de l'analyse, un message s'affiche :
    Citation :
    L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.

  • Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
  • Ferme tes navigateurs.
  • Si des malwares ont été détectés, clique sur Afficher les résultats.
  • Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.
  • MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.

    merci pour ta reponse voila le rapport

    Malwarebytes' Anti-Malware 1.41
    Version de la base de données: 2935
    Windows 5.1.2600 Service Pack 3

    10/10/2009 12:20:58
    mbam-log-2009-10-10 (12-20-58).txt

    Type de recherche: Examen complet (C:\|)
    Eléments examinés: 222612
    Temps écoulé: 1 hour(s), 10 minute(s), 56 second(s)

    Processus mémoire infecté(s): 1
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 12
    Valeur(s) du Registre infectée(s): 3
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 1
    Fichier(s) infecté(s): 12

    Processus mémoire infecté(s):
    C:\documents and settings\falher bernard\local settings\application data\beibi.exe (Adware.Navipromo.H) -> Unloaded process successfully.

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{1962c5bc-e475-465b-823b-133e711bceb9} (Adware.Starware) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{c24d7016-d00f-41ef-9781-984b6b5ff38f} (Rogue.Ascentive) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{ec88fcd0-2ed5-4d65-9b4c-71d146b43a2e} (Rogue.Ascentive) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{e532cfb1-5edd-4663-8c22-bcd67b5e5bd4} (Rogue.Ascentive) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{497dddb6-6eee-4561-9621-b77dc82c1f84} (Rogue.Ascentive) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{4e980492-027b-47f1-a7ab-ab086dacbb9e} (Rogue.Ascentive) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{5ead8321-fcbb-4c3f-888c-ac373d366c3f} (Rogue.Ascentive) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{31f3cf6e-a71a-4daa-852b-39ac230940b4} (Rogue.Ascentive) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\QUAD Registry Cleaner v2 (Adware.QUADRegClean) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\fcn (Rogue.Residue) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo (Rogue.Eorezo) -> Quarantined and deleted successfully.

    Valeur(s) du Registre infectée(s):
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\beibi (Adware.Navipromo.H) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\system32\ConTest.dll (Rogue.Ascentive) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\system32\SysRestore.dll (Rogue.Ascentive) -> Quarantined and deleted successfully.

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    C:\Program Files\BitDownload (Trojan.Swizzor) -> Quarantined and deleted successfully.

    Fichier(s) infecté(s):
    C:\Documents and Settings\falher bernard\Local Settings\Application Data\beibi_navps.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
    C:\Documents and Settings\falher bernard\Local Settings\Application Data\beibi_nav.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
    C:\Documents and Settings\falher bernard\Local Settings\Application Data\beibi.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
    C:\Documents and Settings\falher bernard\Local Settings\Application Data\beibi.exe (Adware.Navipromo.H) -> Quarantined and deleted successfully.
    C:\Documents and Settings\falher bernard\Local Settings\Application Data\ucqembqemc_navps.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
    C:\Documents and Settings\falher bernard\Local Settings\Application Data\ucqembqemc_nav.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
    C:\Documents and Settings\falher bernard\Local Settings\Application Data\ucqembqemc.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
    C:\RECYCLER\S-1-5-21-2504356142-1927724891-2842835218-1005\Dc59.exe (Adware.NaviPromo) -> Quarantined and deleted successfully.
    C:\RECYCLER\S-1-5-21-2504356142-1927724891-2842835218-1005\Dc60.exe (Adware.NaviPromo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\ConTest.dll (Rogue.Ascentive) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\SysRestore.dll (Rogue.Ascentive) -> Quarantined and deleted successfully.
    C:\WINDOWS\DSC01497.zip (Backdoor.Sdbot) -> Quarantined and deleted successfully.

  • Relance MBAM, va dans Quarantaine et supprime tout.

  • Télécharge Ad-Remover (de Cyrildu17 / C_XX) sur ton Bureau.

    /!\ Déconnecte-toi et ferme toutes applications en cours /!\

  • Double-clique sur AD-R situé sur ton Bureau pour le lancer.
    (Sous Vista, il faut cliquer droit sur AD-R et choisir Exécuter en tant qu'administrateur)
  • Choisis la langue F pour français.
  • Au menu principal, choisis l'option L.

    /!\ Laisse travailler l'outil /!\

  • Poste le rapport qui apparaît à la fin (C:\Ad-Report-CLEAN.log).

    "Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Dr.Web, Kaspersky, etc.) comme étant un RiskTool.

    voila le rapport

    .
    ======= RAPPORT D'AD-REMOVER 1.1.4.5_Y | UNIQUEMENT XP/VISTA/7 =======
    .
    Mit à jour par C_XX le 10.10.2009 à 12:21
    Contact: AdRemover.contact@gmail.com
    Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
    .
    Lancé à: 12:30:48, 10/10/2009 | Mode Normal | Option: CLEAN
    Exécuté de: C:\Program Files\Ad-Remover\
    Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
    Nom du PC: NOM-6F0826D884F | Utilisateur actuel: falher bernard
    .
    ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
    .

    HKCU\Software\EoRezo
    HKCU\Software\ItsLabel
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
    HKLM\Software\Classes\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}
    HKLM\Software\Classes\EoRezoBHO.EoBho
    HKLM\Software\Classes\EoRezoBHO.EoBho.1
    HKLM\Software\Classes\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
    HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook
    HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1
    HKLM\Software\ItsLabel
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
    HKCU\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
    .
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\cmhost.cyp
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\ConfMedia.cyp
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\db
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoClock.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoClockVal.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoClockVal_2AAB2F6.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoComputer.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\eoDesktop
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoNet.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\eoStats
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoTraduction
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoTraduction.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWiki
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWiki.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\host.cyp
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\user.cyp
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\db\cat.cyp
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\eoDesktop\config.xml
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\eoDesktop\eoDesktop.html
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\eoDesktop\userConfig.xml
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\eophoto_default.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\eophoto_loading.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_bleu
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_gris
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu\aide.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu\aidePressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu\back.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu\background3_2.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu\backPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu\cadre_int.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu\ecran.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu\ecranpressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu\eophoto_fond_default.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu\fermer.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu\fermerPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu\minimise.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu\minimisepressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu\next.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu\nextPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu\pause.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu\pausepressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu\play.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu\playPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_big_bleu\Thumbs.db
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic\back.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic\backPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic\fermerPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic\next.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic\nextPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic\pause.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic\pausepressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic\play.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic\playPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic\Thumbs.db
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_bleu\aide.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_bleu\aidePressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_bleu\back.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_bleu\backPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_bleu\cadre_int.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_bleu\ecran.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_bleu\ecranpressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_bleu\eophoto_fond_default.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_bleu\fermer.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_bleu\fermerPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_bleu\minimise.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_bleu\minimisepressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_bleu\next.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_bleu\nextPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_bleu\pause.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_bleu\pausepressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_bleu\play.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_bleu\playPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_bleu\Thumbs.db
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_gris\aide.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_gris\aidePressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_gris\back.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_gris\background3.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_gris\backPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_gris\ecran.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_gris\ecranPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_gris\eophoto_fond_default.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_gris\fermer.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_gris\fermerPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_gris\minimise.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_gris\minimisepressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_gris\next.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_gris\nextPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_gris\pause.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_gris\pausepressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_gris\play.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_gris\playPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoPhoto\images_classic_gris\Thumbs.db
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRssServer.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_01net_actualite.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_01net_actualite.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_1201.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_abcbourse_analyse.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_abcbourse_news.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_advisto.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_advisto.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_agenda_musical.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_agenda_musical.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_aninmint.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_aninmint.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_annonce_paris.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_bbc.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_bbc.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_bd_livres_krinein.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_besancon.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_besancon.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_cahier_foot.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_cahier_foot.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_cinema_krinein.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_cine_horaire.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_companynewsgroup.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_companynewsgroup.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_courrier_int.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_courrier_int.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_dvd_bonus.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_echo_une.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_echo_une.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_EoRezo_Horoscope.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_equipe_foot.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_equipe_foot.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_Europe_1.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_Europe_1.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_eurotop_foot.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_eurotop_foot.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_fcb_foot.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_football365_foot.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_france2_tv.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_france3_tv.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_fr_uefa_com.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_ft.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_ft.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_humour_blague.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_iht.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_iht.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_info_football_foot.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_jeux_france.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_jeux_france.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_jeux_video.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_jeux_video.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_latribune_investissement.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_latribune_investissement.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_La_croix_une.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_La_croix_une.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_lefigaro_une.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_lefigaro_une.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_lelombrik.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_lemonde_livres.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_lemonde_livres.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_lesechos_conso.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_lesechos_conso.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_lesechos_finance.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_lesechos_finance.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_lesechos_patrimoine.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_lesechos_patrimoine.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_le_figaro_entreprise.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_le_figaro_entreprise.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_le_monde_entreprise.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_le_monde_entreprise.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_liberation_actualite.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_liberation_actualite.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_l_equipe_rugby.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_l_equipe_rugby.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_madame_figaro_cuisine.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_mangaanime.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_msn_insolites.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_narutochaos.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_nord_cinema_box_office.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_nord_cinema_box_office.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_nord_cinema_critique.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_nosamieslesstars.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_nostalgie.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_nouvelobs_cinema.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_nouvelobs_cinema.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_nouvelobs_permanent.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_nouvelobs_permanent.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_om_live.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_parisetudiant.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_parisetudiant_job.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_people_actustar.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_people_france2.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_people_madamefigaro.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_people_nouvelobs.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_people_nouvelobs.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_people_tf1.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_people_tf1.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_planet_psg.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_politique_nouvelobs.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_politique_nouvelobs.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_politique_premier_ministre.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_politique_premier_ministre.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_politique_tv5.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_politique_tv5.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_ptdr.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_recette_dessert_cuisine.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_repimmo_immobilier.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_rtl_foot.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_rtl_foot.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_rtl_une.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_rtl_une.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_tf1_actualite.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_tf1_actualite.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_tf1_cinema.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_tf1_cinema.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_tf1_economie.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_tf1_economie.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_tf1_insolites.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_tf1_insolites.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_tv5_une.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_tv5_une.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_umoor.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_yahoo_cuisine.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_yatahonga.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoRss\EoRss_yatahonga.gif
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\eoStats\eoStats.txt
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\aide.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\aidePressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\autoverifno.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\autoverifyes.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\back.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\background3.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\backPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\blank21_19.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\blank25.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\correct21_19.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\correct25.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\ecran.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\ecranReflet.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\fermer.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\fermerPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\grey25.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\iluminated21_19.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\iluminated25.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\iluminateno.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\iluminateyes.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\incorrect25.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\keypad.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\keypadreflet.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\masquer.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\masquerPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\minimise.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\minimisepressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\new.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\newPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\next.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\nextPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\print.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\save.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\savepressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\Thumbs.db
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\verificationcell.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\verificationcellPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\aide.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\aidePressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\autoverifno.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\autoverifyes.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\back.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\background3.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\backPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\blank21_19.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\blank25.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\correct21_19.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\correct25.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\ecran.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\ecranReflet.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\fermer.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\fermerPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\grey25.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\iluminated21_19.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\iluminated25.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\iluminateno.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\iluminateyes.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\incorrect25.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\keypad.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\keypadreflet.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\masquer.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\masquerPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\minimise.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\minimisepressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\new.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\newPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\next.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\nextPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\print.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\save.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\savepressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\Thumbs.db
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\verificationcell.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\verificationcellPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\aide.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\aidePressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\autoverifno.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\autoverifyes.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\back.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\background3.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\backPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\blank21_19.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\blank25.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\correct21_19.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\correct25.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\ecran.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\ecranReflet.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\fermer.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\fermerPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\grey25.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\iluminated21_19.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\iluminated25.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\iluminateno.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\iluminateyes.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\incorrect25.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\keypad.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\keypadreflet.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\masquer.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\masquerPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\minimise.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\minimisepressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\new.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\newPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\next.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\nextPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\print.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\save.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\savepressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\Thumbs.db
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\verificationcell.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\verificationcellPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\aide.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\aidePressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\autoverifno.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\autoverifyes.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\back.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\background3.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\backgroundreflet.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\backPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\blank21_19.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\blank25.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\correct21_19.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\correct25.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\ecran.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\ecranReflet.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\fermer.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\fermerPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\grey25.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\iluminated21_19.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\iluminated25.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\iluminateno.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\iluminateyes.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\incorrect25.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\keypad.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\keypadreflet.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\masquer.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\masquerPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\minimise.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\minimisepressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\new.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\newPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\next.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\nextPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\save.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\savepressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\Thumbs.db
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\verificationcell.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\verificationcellPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoTraduction\conf_site.xml
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoTraduction\EoTraduction.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoTraduction\EoTraductionSkin
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoTraduction\EoTraductionSkin\aide.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoTraduction\EoTraductionSkin\eoTraduction.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoTraduction\EoTraductionSkin\fermer.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoTraduction\EoTraductionSkin\minimiser.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoTraduction\EoTraductionSkin\traduire.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\EoWeatherVal_02EC282.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\67_day.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\67_night.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\69_day.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\69_night.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\70_day.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\70_night.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\78_day.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\78_night.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\82_day.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\82_night.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\83_day.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\83_night.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\84_day.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\84_night.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\85_day.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\85_night.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\89_day.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\89_night.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\back.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\background.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\background_1.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\background_1days.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\background_2days.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\background_7days.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\backPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\band.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\band_small.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\close.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\closePressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\dayPrevisionBackground.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\dayPrevisionClose.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\earth.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\fonds_‚cran.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\help.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\helpPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\minimise.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\minimisePressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\next.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\nextPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\option.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\optionPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\reflet_ecran.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\small_background.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_classic\Thumbs.db
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\67_day.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\67_night.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\69_day.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\69_night.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\70_day.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\70_night.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\78_day.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\78_night.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\82_day.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\82_night.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\83_day.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\83_night.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\84_day.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\84_night.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\85_day.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\85_night.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\89_day.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\89_night.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\about.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\back.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\background.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\background_1.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\background_1days.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\background_2days.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\background_7days.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\backPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\close.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\closePressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\dayPrevisionBackground.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\dayPrevisionClose.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\earth.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\fonds_‚cran.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\help.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\helpPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\minimise.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\minimisePressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\next.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\nextPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\option.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\optionPressed.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\reflet_ecran.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\Thumbs.db
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\txt_14x13.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWiki\EoWiki.cfg
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWiki\EoWikiSkin
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWiki\EoWikiSkin\aide.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWiki\EoWikiSkin\consulter.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWiki\EoWikiSkin\eowiki.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWiki\EoWikiSkin\fermer.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWiki\EoWikiSkin\minimise.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo\EoWiki\EoWikiSkin\rechercher.png
    C:\DOCUME~1\FALHER~1\APPLIC~1\EoRezo
    C:\Program Files\EoRezo\EoAdv
    C:\Program Files\EoRezo\EoAdv\eoAdv.url
    C:\Program Files\EoRezo\EoAdv\EoRezoBho.old
    C:\Program Files\EoRezo\EoAdv\tmp
    C:\Program Files\EoRezo
    C:\Program Files\IEToolbar
    C:\Program Files\ItsLabel\ItsMedia.url
    C:\Program Files\ItsLabel
    C:\DOCUME~1\FALHER~1\Cookies\falher_bernard@ask[1].txt
    C:\DOCUME~1\FALHER~1\Cookies\falher_bernard@kiwee[2].txt
    C:\DOCUME~1\FALHER~1\Cookies\falher_bernard@kiwee[3].txt
    C:\DOCUME~1\FALHER~1\Cookies\falher_bernard@search.conduit[1].txt
    C:\DOCUME~1\FALHER~1\Cookies\falher_bernard@search.conduit[2].txt
    C:\DOCUME~1\FALHER~1\Cookies\falher_bernard@search.conduit[4].txt
    C:\DOCUME~1\FALHER~1\Cookies\falher_bernard@www1.kiwee[2].txt
    C:\DOCUME~1\FALHER~1\Cookies\falher_bernard@www1.kiwee[3].txt

    (!) -- Fichiers temporaires supprimés.

    .
    ============== Scan additionnel ==============
    .
    .
    * Mozilla FireFox Version 3.5.3 [fr] *
    .
    Nom du profil: nvtimmpr.default (falher bernard)
    .
    (Prefs.js) user_pref("browser.search.defaultenginename", "Google");
    (Prefs.js) user_pref("browser.search.selectedEngine", "Live Search");
    (Prefs.js) user_pref("browser.search.defaulturl", "hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=");
    (Prefs.js) user_pref("browser.startup.homepage", "hxxp://fr.msn.com/");
    (Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.1.3");
    .
    .
    * Internet Explorer Version 8.0.6001.18702 *
    .
    [HKEY_CURRENT_USER\..\Internet Explorer\Main]
    .
    Search Page:
    Search Bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    SearchAssistant:
    Start Page: hxxp://fr.msn.com/
    Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnh...
    .
    [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
    .
    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnh...
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Start Page: hxxp://fr.msn.com/
    Search Bar: hxxp://search.msn.com/spbasic.htm
    .
    [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
    .
    Tabs: res://ieframe.dll/tabswelcome.htm
    .
    ============== Suspect (Cracks, Serials ... ) ==============
    .
    C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\1187189794jtun_patchwa_fr.zip.full.zip
    C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\1209776195jtun_hbpatch07.x00.full.zip
    C:\Documents and Settings\falher bernard\Bureau\jeux nitendo ds\0443 - Miss Spiders Sunny Patch Friends - Harvest Time Hop and Fly (U)(Trashman)(French English S.zip
    .
    ===================================
    .
    41011 Octet(s) - C:\Ad-Report-CLEAN[1].log
    .
    22 Fichier(s) - C:\DOCUME~1\FALHER~1\LOCALS~1\Temp
    6 Fichier(s) - C:\WINDOWS\Temp
    .
    17 Fichier(s) - C:\Program Files\Ad-Remover\BACKUP
    159 Fichier(s) - C:\Program Files\Ad-Remover\QUARANTINE
    .
    Fin à: 12:43:02 | 10/10/2009 - CLEAN[1]
    .
    ============== E.O.F ==============
    .

    voila

    Logfile of random's system information tool 1.06 (written by random/random)
    Run by falher bernard at 2009-10-10 20:11:18
    Microsoft Windows XP Professionnel Service Pack 3
    System drive C: has 128 GB (55%) free of 233 GB
    Total RAM: 767 MB (19% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 20:11:34, on 10/10/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
    C:\Program Files\Iconix\OEAddOn\OEdmn_5.exe
    C:\Program Files\Nosibay\VPbubble\launcher.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Microsoft ActiveSync\wcescomm.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Fichiers communs\Iconix\IconixService.exe
    C:\Documents and Settings\falher bernard\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
    C:\PROGRA~1\MI3AA1~1\rapimgr.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\system32\spupdsvc.exe
    C:\WINDOWS\ehome\medctrro.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Nosibay\VPbubble\VPbubble.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Windows Live\Toolbar\wltuser.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\falher bernard\Mes documents\Téléchargements\RSIT.exe
    C:\Documents and Settings\falher bernard\Mes documents\Téléchargements\falher bernard.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\NppBho.dll
    O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
    O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
    O2 - BHO: IconixBHOClass Class - {761233B6-F228-49E4-8F6B-668499D4E55A} - C:\Program Files\Iconix\IEAddOn\IconixBHO_41.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O3 - Toolbar: Afficher Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
    O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
    O4 - HKLM\..\Run: [IconixOEAddOn] "C:\Program Files\Iconix\OEAddOn\OEdmn_5.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
    O4 - HKCU\..\Run: [VPbubble] "C:\Program Files\Nosibay\VPbubble\launcher.exe"
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - S-1-5-18 Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\falher bernard\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe (User 'SYSTEM')
    O4 - .DEFAULT Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\falher bernard\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe (User 'Default user')
    O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\falher bernard\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?f6df26822b9c445081a8377140789db6
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?f6df26822b9c445081a8377140789db6
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
    O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
    O9 - Extra button: (no name) - {400A6CFA-E326-4d61-A90C-9AD75358DC5F} - C:\Program Files\Iconix\IEAddOn\IconixBHO_41.dll
    O9 - Extra 'Tools' menuitem: Email ID Préférences - {400A6CFA-E326-4d61-A90C-9AD75358DC5F} - C:\Program Files\Iconix\IEAddOn\IconixBHO_41.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {BC3F6B6D-2E49-4603-B028-7411655713F3} - C:\Program Files\Iconix\IEAddOn\IconixBHO_41.dll
    O9 - Extra 'Tools' menuitem: À propos de Email ID - {BC3F6B6D-2E49-4603-B028-7411655713F3} - C:\Program Files\Iconix\IEAddOn\IconixBHO_41.dll
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld...
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
    O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
    O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://famillyfalher.spaces.live.com/PhotoUpload/MsnPUp...
    O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.extrafilm.fr/ImageUploader4.cab
    O16 - DPF: {D27CDB6E-AF6D-11CF-96B8-444553540000} - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
    O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://www.leaderphoto.com/uploaders/aurigma_4_7_16/Ima...
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
    O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
    O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Iconix Update Service (IconixService) - Unknown owner - C:\Program Files\Fichiers communs\Iconix\IconixService.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
    O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

    --
    End of file - 11554 bytes

    ======Scheduled tasks folder======

    C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
    C:\WINDOWS\tasks\User_Feed_Synchronization-{4B4625A3-1EEC-4D3D-99D6-0FDB0C33F5CD}.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
    Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1E8A6170-7264-4D0F-BEAE-D42A53123C75}]
    C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\NppBho.dll [2007-02-19 97960]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2F85D76C-0569-466F-A488-493E6BD0E955}]
    dsWebAllowBHO Class - C:\Program Files\Windows Desktop Search\dsWebAllow.dll [2006-03-26 265432]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}]
    Windows Live Family Safety Browser Helper Class - C:\Program Files\Windows Live\Family Safety\fssbho.dll [2009-08-05 113512]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
    Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761233B6-F228-49E4-8F6B-668499D4E55A}]
    IconixBHOClass Class - C:\Program Files\Iconix\IEAddOn\IconixBHO_41.dll [2009-05-22 717584]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
    SSVHelper Class - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll [2007-07-12 501136]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
    Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
    Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {90222687-F593-4738-B738-FBEE9C7B26DF} - Afficher Norton Toolbar - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\UIBHO.dll [2007-02-19 609424]
    {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "ccApp"=C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe [2007-01-09 115816]
    "Symantec PIF AlertEng"=C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe [2008-01-29 583048]
    "fssui"=C:\Program Files\Windows Live\Family Safety\fsui.exe [2009-08-05 647520]
    "IconixOEAddOn"=C:\Program Files\Iconix\OEAddOn\OEdmn_5.exe [2009-03-11 335632]
    "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2006-11-11 98304]
    "Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-09-10 1312080]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "VPbubble"=C:\Program Files\Nosibay\VPbubble\launcher.exe [2008-06-20 239120]
    "msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]
    "H/PC Connection Agent"=C:\Program Files\Microsoft ActiveSync\wcescomm.exe [2006-06-26 1211176]
    "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
    HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

    C:\Documents and Settings\falher bernard\Menu Démarrer\Programmes\Démarrage
    Notification de cadeaux MSN.lnk - C:\Documents and Settings\falher bernard\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
    C:\WINDOWS\system32\Ati2evxx.dll [2006-07-19 86016]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
    C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    "{88485281-8b4b-4f8d-9ede-82e29a064277}"=C:\PROGRA~1\MarkAny\CONTEN~1\MACSMA~1.DLL [2004-11-23 192512]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "dontdisplaylastusername"=0
    "legalnoticecaption"=
    "legalnoticetext"=
    "shutdownwithoutlogon"=1
    "undockwithoutlogon"=1
    "InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
    "InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "HonorAutoRunSetting"=

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
    "C:\Documents and Settings\falher bernard\Mes documents\eMule\eMule.exe"="C:\Documents and Settings\falher bernard\Mes documents\eMule\eMule.exe:*:Enabled:eMule"
    "C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\Répertoire temporaire 1 pour DSC01497(1).zip\img091307-www.photoshop.com"="C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\Répertoire temporaire 1 pour DSC01497(1).zip\img091307-www.photoshop.com:*:Enabled:Windows Sharing"
    "C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\Répertoire temporaire 1 pour DSC01497.zip\img091307-www.photoshop.com"="C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\Répertoire temporaire 1 pour DSC01497.zip\img091307-www.photoshop.com:*:Enabled:Windows Sharing"
    "C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\Répertoire temporaire 2 pour DSC01497.zip\img091307-www.photoshop.com"="C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\Répertoire temporaire 2 pour DSC01497.zip\img091307-www.photoshop.com:*:Enabled:Windows Sharing"
    "C:\WINDOWS\system32\muzapp.exe"="C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player"
    "C:\Program Files\Microsoft ActiveSync\rapimgr.exe"="C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
    "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
    "C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"
    "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe:*:Enabled:AOL"
    "C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe:*:Enabled:AOL"
    "C:\Program Files\AOL 9.0\waol.exe"="C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0"
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\Program Files\Microsoft ActiveSync\rapimgr.exe"="C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
    "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
    "C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\I]
    shell\AutoRun\command - I:\LaunchU3.exe -a

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{15528940-8370-11de-b8f7-001921ab74e3}]
    shell\AutoRun\command - I:\LaunchU3.exe -a

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9507ed80-e6bd-11db-b5bc-00038a000015}]
    shell\AutoRun\command - I:\ReadMe.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9507ed82-e6bd-11db-b5bc-00038a000015}]
    shell\AutoRun\command - I:\ReadMe.exe


    ======List of files/folders created in the last 1 months======

    2009-10-10 16:18:53 ----A---- C:\WINDOWS\system32\OGACheckControl.dll
    2009-10-10 16:15:37 ----D---- C:\Program Files\Microsoft Works
    2009-10-10 16:14:32 ----D---- C:\Program Files\Microsoft Visual Studio
    2009-10-10 16:14:31 ----D---- C:\Program Files\Fichiers communs\DESIGNER
    2009-10-10 16:13:25 ----D---- C:\Program Files\Fichiers communs\ODBC
    2009-10-10 16:13:24 ----D---- C:\Program Files\Microsoft.NET
    2009-10-10 16:10:32 ----D---- C:\Program Files\Microsoft Visual Studio 8
    2009-10-10 16:09:51 ----D---- C:\WINDOWS\SHELLNEW
    2009-10-10 16:08:35 ----RHDC---- C:\MSOCache
    2009-10-10 12:30:45 ----D---- C:\Program Files\Ad-Remover
    2009-10-10 11:04:47 ----D---- C:\Documents and Settings\falher bernard\Application Data\Malwarebytes
    2009-10-10 11:04:37 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
    2009-10-10 11:04:36 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
    2009-09-24 19:10:54 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
    2009-09-21 19:17:02 ----D---- C:\Documents and Settings\All Users\Application Data\McAfee
    2009-09-21 19:16:32 ----D---- C:\Documents and Settings\All Users\Application Data\McAfee Security Scan
    2009-09-19 16:10:47 ----D---- C:\Program Files\QUAD Utilities
    2009-09-14 18:53:21 ----HD---- C:\LG3G

    ======List of files/folders modified in the last 1 months======

    2009-10-10 20:09:26 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
    2009-10-10 19:41:50 ----D---- C:\Program Files\Mozilla Firefox
    2009-10-10 19:19:11 ----D---- C:\WINDOWS\occache
    2009-10-10 19:18:21 ----D---- C:\WINDOWS\Temp
    2009-10-10 19:12:55 ----D---- C:\WINDOWS
    2009-10-10 19:11:50 ----D---- C:\Program Files\Multi_Media_France
    2009-10-10 19:11:49 ----RD---- C:\Program Files
    2009-10-10 19:11:05 ----A---- C:\WINDOWS\SchedLgU.Txt
    2009-10-10 19:11:04 ----D---- C:\WINDOWS\system32\CatRoot2
    2009-10-10 19:05:05 ----SD---- C:\WINDOWS\Tasks
    2009-10-10 19:04:57 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
    2009-10-10 19:04:54 ----D---- C:\WINDOWS\Prefetch
    2009-10-10 19:04:03 ----D---- C:\Program Files\MSN
    2009-10-10 16:44:21 ----D---- C:\WINDOWS\Registration
    2009-10-10 16:43:56 ----HD---- C:\Config.Msi
    2009-10-10 16:39:41 ----SHD---- C:\WINDOWS\Installer
    2009-10-10 16:39:40 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
    2009-10-10 16:37:39 ----RSD---- C:\WINDOWS\assembly
    2009-10-10 16:35:50 ----RSD---- C:\WINDOWS\Fonts
    2009-10-10 16:35:37 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
    2009-10-10 16:35:27 ----D---- C:\WINDOWS\system32
    2009-10-10 16:32:05 ----A---- C:\WINDOWS\win.ini
    2009-10-10 16:15:19 ----D---- C:\WINDOWS\WinSxS
    2009-10-10 16:15:11 ----D---- C:\Program Files\MSBuild
    2009-10-10 16:14:43 ----D---- C:\Program Files\Microsoft Office
    2009-10-10 16:14:31 ----D---- C:\Program Files\Fichiers communs
    2009-10-10 16:13:24 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
    2009-10-10 16:09:13 ----HD---- C:\WINDOWS\inf
    2009-10-10 12:31:07 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
    2009-10-10 11:04:39 ----D---- C:\WINDOWS\system32\drivers
    2009-10-06 20:21:39 ----D---- C:\Program Files\eMule
    2009-10-04 18:36:44 ----RSHDC---- C:\WINDOWS\system32\dllcache
    2009-10-03 14:46:12 ----D---- C:\WINDOWS\Help
    2009-09-30 18:07:41 ----D---- C:\Program Files\Windows Live Safety Center
    2009-09-30 17:46:05 ----D---- C:\Program Files\Fichiers communs\Iconix
    2009-09-25 22:47:52 ----D---- C:\Documents and Settings\falher bernard\Application Data\Google
    2009-09-25 22:46:49 ----D---- C:\Documents and Settings\All Users\Application Data\Google
    2009-09-25 22:45:48 ----D---- C:\Program Files\Google
    2009-09-24 13:36:11 ----HD---- C:\WINDOWS\$hf_mig$
    2009-09-21 20:35:15 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
    2009-09-19 15:13:51 ----A---- C:\WINDOWS\ModemLog_LGE Mobile USB Modem.txt
    2009-09-11 21:13:28 ----A---- C:\WINDOWS\FISHUI.INI
    2009-09-11 13:21:45 ----D---- C:\Program Files\Microsoft Silverlight

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys []
    R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
    R1 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCDrv.sys []
    R1 SRTSPX;SRTSPX; C:\WINDOWS\System32\Drivers\SRTSPX.SYS [2007-12-01 43696]
    R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2007-01-10 191544]
    R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-08-05 54752]
    R2 Machnm32;Machnm32 Driver; \??\C:\WINDOWS\System32\Machnm32.sys []
    R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-07-19 1675776]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys []
    R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
    R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
    R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-08-24 4374016]
    R3 NAVENG;NAVENG; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20091009.008\NAVENG.SYS []
    R3 NAVEX15;NAVEX15; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20091009.008\NAVEX15.SYS []
    R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-06-17 83968]
    R3 SRTSP;SRTSP; C:\WINDOWS\System32\Drivers\SRTSP.SYS [2007-12-01 279088]
    R3 SYMDNS;SYMDNS; C:\WINDOWS\System32\Drivers\SYMDNS.SYS [2007-01-10 12984]
    R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS []
    R3 SYMFW;SYMFW; C:\WINDOWS\System32\Drivers\SYMFW.SYS [2007-01-10 145976]
    R3 SYMIDS;SYMIDS; C:\WINDOWS\System32\Drivers\SYMIDS.SYS [2007-01-10 40120]
    R3 SYMIDSCO;SYMIDSCO; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\SymcData\idsdefs\20090923.001\SymIDSCo.sys []
    R3 SYMNDIS;SYMNDIS; C:\WINDOWS\System32\Drivers\SYMNDIS.SYS [2007-01-10 35256]
    R3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2007-01-10 27576]
    R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
    R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
    R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
    R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
    S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
    S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
    S3 fbxusb;Carte réseau virtuelle FreeBox USB; C:\WINDOWS\system32\DRIVERS\fbxusb32.sys [2004-10-20 21344]
    S3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
    S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-12 49664]
    S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-12 16496]
    S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-12 21568]
    S3 klvcm;klvcm; \??\C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\klvcm.sys []
    S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2004-10-08 22016]
    S3 MHNDRV;Pilote MHN; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008]
    S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
    S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
    S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
    S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
    S3 pmouclas;pmouclas; \??\C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\pmouclas.sys []
    S3 QCMerced;Logitech QuickCam Communicate; C:\WINDOWS\system32\DRIVERS\LVCM.sys [2004-10-08 585824]
    S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
    S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
    S3 SRTSPL;SRTSPL; C:\WINDOWS\System32\Drivers\SRTSPL.SYS [2007-12-01 317616]
    S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
    S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
    S3 usbbus;LGE Mobile Composite USB Device; C:\WINDOWS\system32\DRIVERS\lgusbbus.sys [2007-07-11 12416]
    S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
    S3 UsbDiag;LGE Mobile USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys [2007-07-11 19840]
    S3 USBModem;LGE Mobile USB Modem; C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys [2007-07-11 21632]
    S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
    S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
    S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
    S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2007-06-28 108208]
    S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
    S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
    S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-07-19 401408]
    R2 ccEvtMgr;Symantec Event Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe [2007-01-09 108648]
    R2 ccSetMgr;Symantec Settings Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe [2007-01-09 108648]
    R2 CLTNetCnService;Symantec Lic NetConnect service; C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe [2007-01-09 108648]
    R2 IconixService;Iconix Update Service; C:\Program Files\Fichiers communs\Iconix\IconixService.exe [2009-09-30 282968]
    R2 LiveUpdate Notice Ex;LiveUpdate Notice Service Ex; C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe [2007-01-09 108648]
    R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
    R2 spupdsvc;Windows Service Pack Installer update service; C:\WINDOWS\system32\spupdsvc.exe [2009-01-07 26144]
    R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
    S2 ehSched;Service de planification Media Center; C:\WINDOWS\eHome\ehSched.exe [2004-08-10 103424]
    S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
    S2 LiveUpdate Notice Service;LiveUpdate Notice Service; C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe [2008-01-29 583048]
    S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2006-03-03 69632]
    S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
    S3 Boonty Games;Boonty Games; C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe [2007-10-24 69120]
    S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
    S3 comHost;COM Host; C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe [2007-01-12 49248]
    S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
    S3 fsssvc;Service Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864]
    S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-21 183280]
    S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
    S3 LiveUpdate;LiveUpdate; C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE [2007-09-26 2999664]
    S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
    S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
    S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
    S3 Symantec Core LC;Symantec Core LC; C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe [2008-03-26 1251720]
    S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
    S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

    -----------------EOF-----------------

    1/

  • Lance ce fichier : C:\Documents and Settings\falher bernard\Mes documents\Téléchargements\falher bernard.exe
  • Choisis Do a system scan only.
  • Coche les cases qui sont devant les lignes suivantes :

    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

    O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe

  • Clique en bas sur Fix checked. Mets oui si HijackThis te demande quelque chose.
  • Ferme HijackThis.


    2/

  • Télécharge OTM (OldTimer) sur ton Bureau.
  • Double-clique sur OTM.exe afin de le lancer.
  • Copie (Ctrl+C) le texte suivant ci-dessous :

    :processes
    explorer.exe

    :services
    Boonty Games

    :files
    C:\Program Files\QUAD Utilities

    :reg
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\Répertoire temporaire 1 pour DSC01497(1).zip\img091307-www.photoshop.com"=-
    "C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\Répertoire temporaire 1 pour DSC01497.zip\img091307-www.photoshop.com"=-
    "C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\Répertoire temporaire 2 pour DSC01497.zip\img091307-www.photoshop.com"=-
    [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9507ed80-e6bd-11db-b5bc-00038a000015}]
    [-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9507ed82-e6bd-11db-b5bc-00038a000015}]

    :commands
    [purity]
    [emptytemp]
    [reboot]

  • Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.
  • Clique maintenant sur le bouton MoveIt! puis ferme OTM.

    ---> Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
    Accepte en cliquant sur YES.

  • Poste le rapport situé dans ce dossier : C:\_OTM\MovedFiles\
    ---> Le nom du rapport correspond au moment de sa création : date_heure.log

    c est la

    All processes killed
    ========== PROCESSES ==========
    No active process named explorer.exe was found!
    ========== SERVICES/DRIVERS ==========

    Service\Driver Boonty Games deleted successfully.
    ========== FILES ==========
    C:\Program Files\QUAD Utilities\QUAD RegistryCleaner moved successfully.
    C:\Program Files\QUAD Utilities moved successfully.
    ========== REGISTRY ==========
    Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\Répertoire temporaire 1 pour DSC01497(1).zip\img091307-www.photoshop.com deleted successfully.
    Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\Répertoire temporaire 1 pour DSC01497.zip\img091307-www.photoshop.com deleted successfully.
    Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\Répertoire temporaire 2 pour DSC01497.zip\img091307-www.photoshop.com deleted successfully.
    Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9507ed80-e6bd-11db-b5bc-00038a000015}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9507ed80-e6bd-11db-b5bc-00038a000015}\ not found.
    Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9507ed82-e6bd-11db-b5bc-00038a000015}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9507ed82-e6bd-11db-b5bc-00038a000015}\ not found.
    ========== COMMANDS ==========

    [EMPTYTEMP]

    User: Administrateur
    ->Temporary Internet Files folder emptied: 0 bytes

    User: All Users

    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 32969 bytes

    User: falher bernard
    ->Temp folder emptied: 1148404 bytes
    ->Temporary Internet Files folder emptied: 10223158 bytes
    ->Java cache emptied: 13791952 bytes
    ->FireFox cache emptied: 73265195 bytes

    User: LocalService
    File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
    ->Temp folder emptied: 115616 bytes
    ->Temporary Internet Files folder emptied: 338236 bytes

    User: NetworkService
    ->Temp folder emptied: 0 bytes
    File delete failed. C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
    ->Temporary Internet Files folder emptied: 33170 bytes

    %systemdrive% .tmp files removed: 0 bytes
    C:\WINDOWS\msdownld.tmp folder deleted successfully.
    %systemroot% .tmp files removed: 19569 bytes
    %systemroot%\System32 .tmp files removed: 23452160 bytes
    File delete failed. C:\WINDOWS\temp\JET516E.tmp scheduled to be deleted on reboot.
    File delete failed. C:\WINDOWS\temp\JET5381.tmp scheduled to be deleted on reboot.
    Windows Temp folder emptied: 1112 bytes
    RecycleBin emptied: 0 bytes

    Total Files Cleaned = 116,75 mb


    OTM by OldTimer - Version 3.0.0.6 log created on 10102009_203142

    Files moved on Reboot...
    File C:\WINDOWS\temp\JET516E.tmp not found!
    File C:\WINDOWS\temp\JET5381.tmp not found!

    Registry entries deleted on Reboot...

    bizn sur

    info.txt logfile of random's system information tool 1.06 2006-11-15 23:23:48

    ======Uninstall list======

    -->C:\PROGRA~1\GOTOSO~1\VADERE~1\UNWISE.EXE C:\PROGRA~1\GOTOSO~1\VADERE~1\INSTALL.LOG
    -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
    AbiWord 2.6.5-->C:\Program Files\AbiSuite2\UninstallAbiWord2.exe
    Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)-->MsiExec.exe /X{6846389C-BAC0-4374-808E-B120F86AF5D7}
    Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
    Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
    Adobe Reader 8.1.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81200000003}
    AppCore-->MsiExec.exe /I{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}
    Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
    Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
    ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
    ATI Catalyst Control Center-->MsiExec.exe /I{673AB3CA-22D3-477C-8F09-8BB9923C0160}
    ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:D ISPLAY -clean
    AV-->MsiExec.exe /I{F4DB525F-A986-4249-B98B-42A8066251CA}
    Barre d'outils Outlook de Windows Live (Windows Live Toolbar)-->MsiExec.exe /X{6E15BEDF-7EB5-4010-998E-B430DB4EFE45}
    Bloqueur de fenêtres pop-up (Windows Live Toolbar)-->MsiExec.exe /X{A425C250-A0E1-4D78-B1C1-A5CBC7385E7C}
    ccCommon-->MsiExec.exe /I{3CCAD2EF-CFF2-4637-82AA-AABF370282D3}
    Come2PlayK2P Toolbar-->C:\PROGRA~1\COME2P~1\UNWISE.EXE C:\PROGRA~1\COME2P~1\INSTALL.LOG
    Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
    Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
    Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
    Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
    Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
    Détecteur de flux Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{EFFCB0F1-CFEC-48D4-B793-EBFCAE852976}
    EmoDio-->MsiExec.exe /X{C20CE592-B0F8-4D20-BF31-0151CA6331A6}
    eMule-->"C:\Program Files\eMule\Uninstall.exe"
    Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{0CA6047C-D28B-4295-834A-07C52BA20C2D}
    Favorit-->"c:\documents and settings\falher bernard\local settings\application data\beibi.exe" -uninstall
    Fichiers de prise en charge de l'installation de Microsoft SQL Server (Français)-->MsiExec.exe /X{3380F354-C5F7-4E71-8F51-EEE6C3F06C62}
    Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
    GearDrvs-->MsiExec.exe /I{228F6876-A313-40A3-91C0-C3CBE6997D09}
    GearDrvs-->MsiExec.exe /I{CB84F0F2-927B-458D-9DC5-87832E3DC653}
    Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}
    Google SketchUp 7-->MsiExec.exe /I{E80B8E43-EC59-4ECF-B15B-194A6B86DE46}
    High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
    HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
    HomePlayer 1.5.4-->C:\Program Files\HomePlayer1.5.4\uninst.exe
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
    Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
    Hotfix for Windows Media Player 10 (KB903157)-->"C:\WINDOWS\$NtUninstallKB903157$\spuninst\spuninst.exe"
    HP Customer Participation Program 7.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
    HP Imaging Device Functions 7.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
    HP Photosmart Essential-->MsiExec.exe /X{EB21A812-671B-4D08-B974-2A347F0D8F70}
    HP Photosmart, Officejet and Deskjet 7.0.A-->C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzscr01.exe -datfile hposcr11.dat
    HP Software Update-->MsiExec.exe /X{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}
    HP Solution Center 7.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
    Iconix® eMail ID-->"C:\Program Files\Iconix\Uninstaller.exe"
    IKEA Home Planner-->MsiExec.exe /I{AFA9D219-A7FD-4240-8793-E5C7C9D715F4}
    Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
    Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
    J2SE Runtime Environment 5.0 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150040}
    Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
    Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
    Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
    K-Lite Codec Pack 3.01 Full-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
    Lame ACM MP3 Codec-->"C:\WINDOWS\IFinst26.exe" -UC:\Program Files\Lame MP3 Codec\IFUB4.inf
    Learn2 Player (Uninstall Only)-->C:\Program Files\Learn2.com\StRunner\stuninst.exe
    Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
    LG PC Suite-->C:\Program Files\InstallShield Installation Information\{993960EE-CA4D-443F-8F88-E24260DD5FD2}\setup.exe -runfromtemp -l0x040c -removeonly
    LG USB Modem driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\setup.exe" -l0x40c LG -removeonly
    LiveUpdate 3.2 (Symantec Corporation)-->"C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U
    LiveUpdate Notice (Symantec Corporation)-->MsiExec.exe /X{DBA4DB9D-EE51-4944-A419-98AB1F1249C8}
    Macromedia Flash Player 8-->MsiExec.exe /X{5E8A1B08-0FBD-4543-9646-F2C2D0D05750}
    Macromedia Shockwave Player-->MsiExec.exe /X{7D1D6A24-65D4-454C-8815-4F08A5FFF12C}
    McDonald's Fairies-->C:\Program Files\McDonaldsFairies\uninstall.exe
    Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
    Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
    Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
    Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
    Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
    Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
    Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
    Microsoft ActiveSync 4.0-->MsiExec.exe /I{B208806F-A231-4FA0-AB3F-5C1B8979223E}
    Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
    Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
    Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
    Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
    Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
    Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
    Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
    Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
    Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
    Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
    Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
    Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 8 (KB969897)-->"C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
    Mise à jour pour Lecteur Windows Media 10 (KB910393)-->"C:\WINDOWS\$NtUninstallKB910393$\spuninst\spuninst.exe"
    Mise à jour pour Lecteur Windows Media 10 (KB913800)-->"C:\WINDOWS\$NtUninstallKB913800$\spuninst\spuninst.exe"
    Mise à jour pour Lecteur Windows Media 10 (KB926251)-->"C:\WINDOWS\$NtUninstallKB926251$\spuninst\spuninst.exe"
    Mise à jour pour Windows Internet Explorer 8 (KB971930)-->"C:\WINDOWS\ie8updates\KB971930-IE8\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
    Mozilla Firefox (3.5.3)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
    MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
    MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
    MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
    MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
    MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
    MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{1787603C-E6E3-42D4-8034-55F358486F1D}
    Multi Media France Toolbar-->C:\PROGRA~1\MULTI_~1\UNWISE.EXE C:\PROGRA~1\MULTI_~1\INSTALL.LOG
    Multi_Media_France Toolbar-->C:\PROGRA~1\MULTI_~1\UNWISE.EXE C:\PROGRA~1\MULTI_~1\INSTALL.LOG
    MultiMedia France Toolbar-->C:\PROGRA~1\MULTIM~1\UNWISE.EXE C:\PROGRA~1\MULTIM~1\INSTALL.LOG
    Music Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AFA4872-16B2-419E-ADCA-8E96E739115D}\setup.exe" -l0x40c
    Navigation par onglets (Windows Live Toolbar)-->MsiExec.exe /X{E916E61F-DE9D-4EAF-91E1-CEB50016326A}
    Norton 360 (Symantec Corporation)-->"C:\Program Files\Fichiers communs\Symantec Shared\SymSetup\{2D617065-1C52-4240-B5BC-C0AE12157777}_1_0_0_184\{2D617065-1C52-4240-B5BC-C0AE12157777}.exe" /X
    Norton 360 Help-->MsiExec.exe /I{1CA941F1-5006-487E-9FD4-09F812A7D6B8}
    Norton 360-->MsiExec.exe /I{21829177-4DED-4209-AD08-490B3AC9C01A}
    Norton 360-->MsiExec.exe /I{2D617065-1C52-4240-B5BC-C0AE12157777}
    Norton 360-->MsiExec.exe /I{40DA9A54-48CA-4A2C-AEAF-F67715BB046E}
    Norton 360-->MsiExec.exe /I{63A6E9A9-A190-46D4-9430-2DB28654AFD8}
    Norton Confidential Browser Component-->MsiExec.exe /I{4843B611-8FCB-4428-8C23-31D0A5EAE164}
    Norton Confidential Web Authentification Component-->MsiExec.exe /I{3074EB89-1BCA-4AEF-AFF4-EFB4634C1923}
    Norton Confidential Web Protection Component-->MsiExec.exe /I{D353CC51-430D-4C6F-9B7E-52003DA1E05A}
    OneCare Advisor (Windows Live Toolbar)-->MsiExec.exe /X{F242B06B-517F-4D62-B654-16B11564A912}
    Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
    Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
    Package de base Microsoft de service de chiffrement pour cartes à puce-->"C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.exe"
    Picasa 3-->"C:\Program Files\Google\Picasa3\Uninstall.exe"
    PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
    QuickTime-->C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log
    Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c -removeonly
    Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
    SPBBC 32bit-->MsiExec.exe /I{77772678-817F-4401-9301-ED1D01A8DA56}
    SuppSoft-->MsiExec.exe /I{022DA2C3-81C7-4003-A6BC-1BB147B20097}
    Symantec Technical Support Controls-->MsiExec.exe /I{92B1B3CC-EC78-45B8-96D0-8B3F11495864}
    SymNet-->MsiExec.exe /I{2DA85B02-13C0-4E6D-9A76-22E6B3DD0CB2}
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
    VideoLAN VLC media player 0.8.6c-->C:\Program Files\VideoLAN\VLC\uninstall.exe
    Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
    Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27}
    Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\WINDOWS\system32\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT=""
    VPbubble (remove only)-->C:\Program Files\Nosibay\VPbubble\Uninstall VPbubble.exe
    Windows Desktop Search -->"C:\WINDOWS\$NtUninstallKB911993-V2$\spuninst\spuninst.exe"
    Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
    Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
    Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
    Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
    Windows Live Contrôle parental-->MsiExec.exe /X{D5D81435-B8DE-4CAF-867F-7998F2B92CFC}
    Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
    Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
    Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
    Windows Live OneCare safety scanner-->RunDll32.exe "C:\Program Files\Windows Live Safety Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT
    Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
    Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}
    Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
    Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
    Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
    Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
    Windows XP Media Center Edition 2005 KB919803-->"C:\WINDOWS\$NtUninstallKB919803$\spuninst\spuninst.exe"
    Windows XP Media Center Edition 2005 KB973768-->"C:\WINDOWS\$NtUninstallKB973768$\spuninst\spuninst.exe"
    Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
    XviD MPEG-4 Video Codec-->"C:\Program Files\XviD\unins000.exe"

    ======Security center information======

    AV: Norton 360
    FW: Norton 360

    ======System event log======

    Computer Name: NOM-6F0826D884F
    Event Code: 7036
    Message: Le service Pml Driver HPZ12 est entré dans l'état : en cours d'exécution.

    Record Number: 9298
    Source Name: Service Control Manager
    Time Written: 20090831165147.000000+120
    Event Type: Informations
    User:

    Computer Name: NOM-6F0826D884F
    Event Code: 7035
    Message: Un contrôle Démarrer a correctement été envoyé au service Pml Driver HPZ12.

    Record Number: 9297
    Source Name: Service Control Manager
    Time Written: 20090831165147.000000+120
    Event Type: Informations
    User: NOM-6F0826D884F\falher bernard

    Computer Name: NOM-6F0826D884F
    Event Code: 7011
    Message: Délai (30000 millisecondes) d'attente pour une réponse du service Symantec Core LC à une transaction.

    Record Number: 9296
    Source Name: Service Control Manager
    Time Written: 20090831165143.000000+120
    Event Type: erreur
    User:

    Computer Name: NOM-6F0826D884F
    Event Code: 8033
    Message: L'explorateur a forcé une élection sur le réseau \Device\NetBT_Tcpip_{70CFC59E-EE19-4F8F-8942-8909DEC9BC08} car un maître explorateur a été arrêté.

    Record Number: 9295
    Source Name: BROWSER
    Time Written: 20090831165117.000000+120
    Event Type: Informations
    User:

    Computer Name: NOM-6F0826D884F
    Event Code: 4201
    Message: Le système a détecté que la carte réseau \DEVICE\TCPIP_{70CFC59E-EE19-4F8F-8942-8909DEC9BC08} était connectée au réseau,
    et a lancé une opération normale sur la carte réseau.

    Record Number: 9294
    Source Name: Tcpip
    Time Written: 20090831165117.000000+120
    Event Type: Informations
    User:

    =====Application event log=====

    Computer Name: NOM-6F0826D884F
    Event Code: 35
    Message: Le service 'LiveUpdate Notice Ex' a démarré.

    Record Number: 26224
    Source Name: ccSvcHst
    Time Written: 20090709082704.000000+120
    Event Type: Informations
    User: AUTORITE NT\SYSTEM

    Computer Name: NOM-6F0826D884F
    Event Code: 0
    Message:
    Record Number: 26223
    Source Name: LiveUpdate Notice Service
    Time Written: 20090709082703.000000+120
    Event Type: Informations
    User:

    Computer Name: NOM-6F0826D884F
    Event Code: 0
    Message:
    Record Number: 26222
    Source Name: LiveUpdate Notice Service
    Time Written: 20090709082703.000000+120
    Event Type: Informations
    User:

    Computer Name: NOM-6F0826D884F
    Event Code: 34
    Message: Le service 'LiveUpdate Notice Ex' démarre.

    Record Number: 26221
    Source Name: ccSvcHst
    Time Written: 20090709082703.000000+120
    Event Type: Informations
    User: AUTORITE NT\SYSTEM

    Computer Name: NOM-6F0826D884F
    Event Code: 35
    Message: Le service 'ccEvtMgr' a démarré.

    Record Number: 26220
    Source Name: ccSvcHst
    Time Written: 20090709082703.000000+120
    Event Type: Informations
    User: AUTORITE NT\SYSTEM

    ======Environment variables======

    "ComSpec"=%SystemRoot%\system32\cmd.exe
    "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\;C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727
    "windir"=%SystemRoot%
    "FP_NO_HOST_CHECK"=NO
    "OS"=Windows_NT
    "PROCESSOR_ARCHITECTURE"=x86
    "PROCESSOR_LEVEL"=15
    "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 6 Stepping 4, GenuineIntel
    "PROCESSOR_REVISION"=0604
    "NUMBER_OF_PROCESSORS"=2
    "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
    "TEMP"=%SystemRoot%\TEMP
    "TMP"=%SystemRoot%\TEMP

    -----------------EOF-----------------

    et d un

    Logfile of random's system information tool 1.06 (written by random/random)
    Run by falher bernard at 2009-10-10 22:05:40
    Microsoft Windows XP Professionnel Service Pack 3
    System drive C: has 128 GB (55%) free of 233 GB
    Total RAM: 767 MB (33% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 22:07:48, on 10/10/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
    C:\Program Files\Iconix\OEAddOn\OEdmn_5.exe
    C:\Program Files\Nosibay\VPbubble\launcher.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Microsoft ActiveSync\wcescomm.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Documents and Settings\falher bernard\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
    C:\PROGRA~1\MI3AA1~1\rapimgr.exe
    C:\Program Files\Fichiers communs\Iconix\IconixService.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\Nosibay\VPbubble\VPbubble.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\system32\spupdsvc.exe
    C:\WINDOWS\ehome\medctrro.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\msiexec.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Documents and Settings\falher bernard\Mes documents\Téléchargements\RSIT.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\Documents and Settings\falher bernard\Mes documents\Téléchargements\falher bernard.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\NOS\bin\getPlusPlus_Adobe.exe
    C:\WINDOWS\system32\DllHost.exe
    C:\WINDOWS\System32\svchost.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\NppBho.dll
    O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
    O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
    O2 - BHO: IconixBHOClass Class - {761233B6-F228-49E4-8F6B-668499D4E55A} - C:\Program Files\Iconix\IEAddOn\IconixBHO_41.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: Afficher Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
    O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
    O4 - HKLM\..\Run: [IconixOEAddOn] "C:\Program Files\Iconix\OEAddOn\OEdmn_5.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKCU\..\Run: [VPbubble] "C:\Program Files\Nosibay\VPbubble\launcher.exe"
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - S-1-5-18 Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\falher bernard\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe (User 'SYSTEM')
    O4 - .DEFAULT Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\falher bernard\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe (User 'Default user')
    O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\falher bernard\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?f6df26822b9c445081a8377140789db6
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?f6df26822b9c445081a8377140789db6
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
    O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
    O9 - Extra button: (no name) - {400A6CFA-E326-4d61-A90C-9AD75358DC5F} - C:\Program Files\Iconix\IEAddOn\IconixBHO_41.dll
    O9 - Extra 'Tools' menuitem: Email ID Préférences - {400A6CFA-E326-4d61-A90C-9AD75358DC5F} - C:\Program Files\Iconix\IEAddOn\IconixBHO_41.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {BC3F6B6D-2E49-4603-B028-7411655713F3} - C:\Program Files\Iconix\IEAddOn\IconixBHO_41.dll
    O9 - Extra 'Tools' menuitem: À propos de Email ID - {BC3F6B6D-2E49-4603-B028-7411655713F3} - C:\Program Files\Iconix\IEAddOn\IconixBHO_41.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld...
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
    O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
    O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://famillyfalher.spaces.live.com/PhotoUpload/MsnPUp...
    O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.extrafilm.fr/ImageUploader4.cab
    O16 - DPF: {D27CDB6E-AF6D-11CF-96B8-444553540000} - http://fpdownload2.macromedia.com/get/shockwave/cabs/fl...
    O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://www.leaderphoto.com/uploaders/aurigma_4_7_16/Ima...
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
    O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
    O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Iconix Update Service (IconixService) - Unknown owner - C:\Program Files\Fichiers communs\Iconix\IconixService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
    O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

    --
    End of file - 11415 bytes

    ======Scheduled tasks folder======

    C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
    C:\WINDOWS\tasks\User_Feed_Synchronization-{4B4625A3-1EEC-4D3D-99D6-0FDB0C33F5CD}.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
    Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1E8A6170-7264-4D0F-BEAE-D42A53123C75}]
    C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\NppBho.dll [2007-02-19 97960]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2F85D76C-0569-466F-A488-493E6BD0E955}]
    dsWebAllowBHO Class - C:\Program Files\Windows Desktop Search\dsWebAllow.dll [2006-03-26 265432]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}]
    Windows Live Family Safety Browser Helper Class - C:\Program Files\Windows Live\Family Safety\fssbho.dll [2009-08-05 113512]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
    Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761233B6-F228-49E4-8F6B-668499D4E55A}]
    IconixBHOClass Class - C:\Program Files\Iconix\IEAddOn\IconixBHO_41.dll [2009-05-22 717584]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
    Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
    Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-10 41760]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
    Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
    JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-10 73728]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {90222687-F593-4738-B738-FBEE9C7B26DF} - Afficher Norton Toolbar - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\UIBHO.dll [2007-02-19 609424]
    {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "ccApp"=C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe [2007-01-09 115816]
    "Symantec PIF AlertEng"=C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe [2008-01-29 583048]
    "fssui"=C:\Program Files\Windows Live\Family Safety\fsui.exe [2009-08-05 647520]
    "IconixOEAddOn"=C:\Program Files\Iconix\OEAddOn\OEdmn_5.exe [2009-03-11 335632]
    "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2006-11-11 98304]
    "Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-09-10 1312080]
    "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-10 149280]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "VPbubble"=C:\Program Files\Nosibay\VPbubble\launcher.exe [2008-06-20 239120]
    "msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]
    "H/PC Connection Agent"=C:\Program Files\Microsoft ActiveSync\wcescomm.exe [2006-06-26 1211176]
    "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
    HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

    C:\Documents and Settings\falher bernard\Menu Démarrer\Programmes\Démarrage
    Notification de cadeaux MSN.lnk - C:\Documents and Settings\falher bernard\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
    C:\WINDOWS\system32\Ati2evxx.dll [2006-07-19 86016]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
    C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    "{88485281-8b4b-4f8d-9ede-82e29a064277}"=C:\PROGRA~1\MarkAny\CONTEN~1\MACSMA~1.DLL [2004-11-23 192512]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "dontdisplaylastusername"=0
    "legalnoticecaption"=
    "legalnoticetext"=
    "shutdownwithoutlogon"=1
    "undockwithoutlogon"=1
    "InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
    "InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "HonorAutoRunSetting"=

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
    "C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
    "C:\Documents and Settings\falher bernard\Mes documents\eMule\eMule.exe"="C:\Documents and Settings\falher bernard\Mes documents\eMule\eMule.exe:*:Enabled:eMule"
    "C:\WINDOWS\system32\muzapp.exe"="C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player"
    "C:\Program Files\Microsoft ActiveSync\rapimgr.exe"="C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
    "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
    "C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"
    "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe:*:Enabled:AOL"
    "C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe:*:Enabled:AOL"
    "C:\Program Files\AOL 9.0\waol.exe"="C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0"
    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\Program Files\Microsoft ActiveSync\rapimgr.exe"="C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
    "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
    "C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\I]
    shell\AutoRun\command - I:\LaunchU3.exe -a

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{15528940-8370-11de-b8f7-001921ab74e3}]
    shell\AutoRun\command - I:\LaunchU3.exe -a


    ======List of files/folders created in the last 1 months======

    2009-10-10 22:06:53 ----D---- C:\Program Files\NOS
    2009-10-10 22:06:53 ----D---- C:\Documents and Settings\All Users\Application Data\NOS
    2009-10-10 22:04:11 ----A---- C:\WINDOWS\system32\javaws.exe
    2009-10-10 22:04:11 ----A---- C:\WINDOWS\system32\deploytk.dll
    2009-10-10 22:04:10 ----A---- C:\WINDOWS\system32\javaw.exe
    2009-10-10 22:04:10 ----A---- C:\WINDOWS\system32\java.exe
    2009-10-10 20:31:42 ----DC---- C:\_OTM
    2009-10-10 16:18:53 ----A---- C:\WINDOWS\system32\OGACheckControl.dll
    2009-10-10 16:15:37 ----D---- C:\Program Files\Microsoft Works
    2009-10-10 16:14:32 ----D---- C:\Program Files\Microsoft Visual Studio
    2009-10-10 16:14:31 ----D---- C:\Program Files\Fichiers communs\DESIGNER
    2009-10-10 16:13:25 ----D---- C:\Program Files\Fichiers communs\ODBC
    2009-10-10 16:13:24 ----D---- C:\Program Files\Microsoft.NET
    2009-10-10 16:10:32 ----D---- C:\Program Files\Microsoft Visual Studio 8
    2009-10-10 16:09:51 ----D---- C:\WINDOWS\SHELLNEW
    2009-10-10 16:08:35 ----RHDC---- C:\MSOCache
    2009-10-10 12:30:45 ----D---- C:\Program Files\Ad-Remover
    2009-10-10 11:04:47 ----D---- C:\Documents and Settings\falher bernard\Application Data\Malwarebytes
    2009-10-10 11:04:37 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
    2009-10-10 11:04:36 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
    2009-09-24 19:10:54 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
    2009-09-21 19:17:02 ----D---- C:\Documents and Settings\All Users\Application Data\McAfee
    2009-09-21 19:16:32 ----D---- C:\Documents and Settings\All Users\Application Data\McAfee Security Scan
    2009-09-14 18:53:21 ----HD---- C:\LG3G

    ======List of files/folders modified in the last 1 months======

    2009-10-10 22:06:53 ----RD---- C:\Program Files
    2009-10-10 22:06:29 ----D---- C:\Program Files\Mozilla Firefox
    2009-10-10 22:05:15 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
    2009-10-10 22:04:33 ----SHD---- C:\WINDOWS\Installer
    2009-10-10 22:04:33 ----HD---- C:\Config.Msi
    2009-10-10 22:04:12 ----D---- C:\WINDOWS\system32
    2009-10-10 22:03:36 ----D---- C:\Program Files\Java
    2009-10-10 20:59:26 ----D---- C:\WINDOWS\system32\CatRoot2
    2009-10-10 20:58:03 ----D---- C:\WINDOWS\Temp
    2009-10-10 20:49:15 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
    2009-10-10 20:34:52 ----D---- C:\WINDOWS
    2009-10-10 20:34:14 ----D---- C:\WINDOWS\Registration
    2009-10-10 20:32:49 ----A---- C:\WINDOWS\SchedLgU.Txt
    2009-10-10 19:19:11 ----D---- C:\WINDOWS\occache
    2009-10-10 19:11:50 ----D---- C:\Program Files\Multi_Media_France
    2009-10-10 19:05:05 ----SD---- C:\WINDOWS\Tasks
    2009-10-10 19:04:54 ----D---- C:\WINDOWS\Prefetch
    2009-10-10 19:04:03 ----D---- C:\Program Files\MSN
    2009-10-10 16:39:40 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
    2009-10-10 16:37:39 ----RSD---- C:\WINDOWS\assembly
    2009-10-10 16:35:50 ----RSD---- C:\WINDOWS\Fonts
    2009-10-10 16:35:37 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
    2009-10-10 16:32:05 ----A---- C:\WINDOWS\win.ini
    2009-10-10 16:15:19 ----D---- C:\WINDOWS\WinSxS
    2009-10-10 16:15:11 ----D---- C:\Program Files\MSBuild
    2009-10-10 16:14:43 ----D---- C:\Program Files\Microsoft Office
    2009-10-10 16:14:31 ----D---- C:\Program Files\Fichiers communs
    2009-10-10 16:13:24 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
    2009-10-10 16:09:13 ----HD---- C:\WINDOWS\inf
    2009-10-10 12:31:07 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
    2009-10-10 11:04:39 ----D---- C:\WINDOWS\system32\drivers
    2009-10-06 20:21:39 ----D---- C:\Program Files\eMule
    2009-10-04 18:36:44 ----RSHDC---- C:\WINDOWS\system32\dllcache
    2009-10-03 14:46:12 ----D---- C:\WINDOWS\Help
    2009-09-30 18:07:41 ----D---- C:\Program Files\Windows Live Safety Center
    2009-09-30 17:46:05 ----D---- C:\Program Files\Fichiers communs\Iconix
    2009-09-25 22:47:52 ----D---- C:\Documents and Settings\falher bernard\Application Data\Google
    2009-09-25 22:46:49 ----D---- C:\Documents and Settings\All Users\Application Data\Google
    2009-09-25 22:45:48 ----D---- C:\Program Files\Google
    2009-09-24 13:36:11 ----HD---- C:\WINDOWS\$hf_mig$
    2009-09-21 20:35:15 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
    2009-09-19 15:13:51 ----A---- C:\WINDOWS\ModemLog_LGE Mobile USB Modem.txt
    2009-09-11 21:13:28 ----A---- C:\WINDOWS\FISHUI.INI
    2009-09-11 13:21:45 ----D---- C:\Program Files\Microsoft Silverlight

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys []
    R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
    R1 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCDrv.sys []
    R1 SRTSPX;SRTSPX; C:\WINDOWS\System32\Drivers\SRTSPX.SYS [2007-12-01 43696]
    R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2007-01-10 191544]
    R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-08-05 54752]
    R2 Machnm32;Machnm32 Driver; \??\C:\WINDOWS\System32\Machnm32.sys []
    R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-07-19 1675776]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys []
    R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
    R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
    R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-08-24 4374016]
    R3 NAVENG;NAVENG; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20091010.003\NAVENG.SYS []
    R3 NAVEX15;NAVEX15; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20091010.003\NAVEX15.SYS []
    R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-06-17 83968]
    R3 SRTSP;SRTSP; C:\WINDOWS\System32\Drivers\SRTSP.SYS [2007-12-01 279088]
    R3 SYMDNS;SYMDNS; C:\WINDOWS\System32\Drivers\SYMDNS.SYS [2007-01-10 12984]
    R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS []
    R3 SYMFW;SYMFW; C:\WINDOWS\System32\Drivers\SYMFW.SYS [2007-01-10 145976]
    R3 SYMIDS;SYMIDS; C:\WINDOWS\System32\Drivers\SYMIDS.SYS [2007-01-10 40120]
    R3 SYMIDSCO;SYMIDSCO; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\SymcData\idsdefs\20090923.001\SymIDSCo.sys []
    R3 SYMNDIS;SYMNDIS; C:\WINDOWS\System32\Drivers\SYMNDIS.SYS [2007-01-10 35256]
    R3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2007-01-10 27576]
    R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
    R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
    R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
    R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
    S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
    S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
    S3 fbxusb;Carte réseau virtuelle FreeBox USB; C:\WINDOWS\system32\DRIVERS\fbxusb32.sys [2004-10-20 21344]
    S3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
    S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-12 49664]
    S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-12 16496]
    S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-12 21568]
    S3 klvcm;klvcm; \??\C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\klvcm.sys []
    S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2004-10-08 22016]
    S3 MHNDRV;Pilote MHN; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008]
    S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
    S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
    S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
    S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
    S3 pmouclas;pmouclas; \??\C:\DOCUME~1\FALHER~1\LOCALS~1\Temp\pmouclas.sys []
    S3 QCMerced;Logitech QuickCam Communicate; C:\WINDOWS\system32\DRIVERS\LVCM.sys [2004-10-08 585824]
    S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
    S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
    S3 SRTSPL;SRTSPL; C:\WINDOWS\System32\Drivers\SRTSPL.SYS [2007-12-01 317616]
    S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
    S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
    S3 usbbus;LGE Mobile Composite USB Device; C:\WINDOWS\system32\DRIVERS\lgusbbus.sys [2007-07-11 12416]
    S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
    S3 UsbDiag;LGE Mobile USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys [2007-07-11 19840]
    S3 USBModem;LGE Mobile USB Modem; C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys [2007-07-11 21632]
    S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
    S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
    S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
    S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2007-06-28 108208]
    S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
    S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
    S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-07-19 401408]
    R2 ccEvtMgr;Symantec Event Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe [2007-01-09 108648]
    R2 ccSetMgr;Symantec Settings Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe [2007-01-09 108648]
    R2 CLTNetCnService;Symantec Lic NetConnect service; C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe [2007-01-09 108648]
    R2 IconixService;Iconix Update Service; C:\Program Files\Fichiers communs\Iconix\IconixService.exe [2009-09-30 282968]
    R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-10 153376]
    R2 LiveUpdate Notice Ex;LiveUpdate Notice Service Ex; C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe [2007-01-09 108648]
    R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
    R2 spupdsvc;Windows Service Pack Installer update service; C:\WINDOWS\system32\spupdsvc.exe [2009-01-07 26144]
    R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
    R3 getPlusHelper;getPlus(R) Helper; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
    S2 ehSched;Service de planification Media Center; C:\WINDOWS\eHome\ehSched.exe [2004-08-10 103424]
    S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
    S2 LiveUpdate Notice Service;LiveUpdate Notice Service; C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe [2008-01-29 583048]
    S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2006-03-03 69632]
    S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
    S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
    S3 comHost;COM Host; C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe [2007-01-12 49248]
    S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
    S3 fsssvc;Service Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864]
    S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-21 183280]
    S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
    S3 LiveUpdate;LiveUpdate; C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE [2007-09-26 2999664]
    S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
    S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
    S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
    S3 Symantec Core LC;Symantec Core LC; C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe [2008-03-26 1251720]
    S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
    S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

    -----------------EOF-----------------
    et deux

    info.txt logfile of random's system information tool 1.06 2006-11-15 23:23:48

    ======Uninstall list======

    -->C:\PROGRA~1\GOTOSO~1\VADERE~1\UNWISE.EXE C:\PROGRA~1\GOTOSO~1\VADERE~1\INSTALL.LOG
    -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
    AbiWord 2.6.5-->C:\Program Files\AbiSuite2\UninstallAbiWord2.exe
    Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)-->MsiExec.exe /X{6846389C-BAC0-4374-808E-B120F86AF5D7}
    Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
    Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
    Adobe Reader 8.1.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81200000003}
    AppCore-->MsiExec.exe /I{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}
    Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
    Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
    ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
    ATI Catalyst Control Center-->MsiExec.exe /I{673AB3CA-22D3-477C-8F09-8BB9923C0160}
    ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:D ISPLAY -clean
    AV-->MsiExec.exe /I{F4DB525F-A986-4249-B98B-42A8066251CA}
    Barre d'outils Outlook de Windows Live (Windows Live Toolbar)-->MsiExec.exe /X{6E15BEDF-7EB5-4010-998E-B430DB4EFE45}
    Bloqueur de fenêtres pop-up (Windows Live Toolbar)-->MsiExec.exe /X{A425C250-A0E1-4D78-B1C1-A5CBC7385E7C}
    ccCommon-->MsiExec.exe /I{3CCAD2EF-CFF2-4637-82AA-AABF370282D3}
    Come2PlayK2P Toolbar-->C:\PROGRA~1\COME2P~1\UNWISE.EXE C:\PROGRA~1\COME2P~1\INSTALL.LOG
    Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
    Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
    Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
    Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
    Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
    Détecteur de flux Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{EFFCB0F1-CFEC-48D4-B793-EBFCAE852976}
    EmoDio-->MsiExec.exe /X{C20CE592-B0F8-4D20-BF31-0151CA6331A6}
    eMule-->"C:\Program Files\eMule\Uninstall.exe"
    Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{0CA6047C-D28B-4295-834A-07C52BA20C2D}
    Favorit-->"c:\documents and settings\falher bernard\local settings\application data\beibi.exe" -uninstall
    Fichiers de prise en charge de l'installation de Microsoft SQL Server (Français)-->MsiExec.exe /X{3380F354-C5F7-4E71-8F51-EEE6C3F06C62}
    Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
    GearDrvs-->MsiExec.exe /I{228F6876-A313-40A3-91C0-C3CBE6997D09}
    GearDrvs-->MsiExec.exe /I{CB84F0F2-927B-458D-9DC5-87832E3DC653}
    Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}
    Google SketchUp 7-->MsiExec.exe /I{E80B8E43-EC59-4ECF-B15B-194A6B86DE46}
    High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
    HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
    HomePlayer 1.5.4-->C:\Program Files\HomePlayer1.5.4\uninst.exe
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
    Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
    Hotfix for Windows Media Player 10 (KB903157)-->"C:\WINDOWS\$NtUninstallKB903157$\spuninst\spuninst.exe"
    HP Customer Participation Program 7.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
    HP Imaging Device Functions 7.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
    HP Photosmart Essential-->MsiExec.exe /X{EB21A812-671B-4D08-B974-2A347F0D8F70}
    HP Photosmart, Officejet and Deskjet 7.0.A-->C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzscr01.exe -datfile hposcr11.dat
    HP Software Update-->MsiExec.exe /X{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}
    HP Solution Center 7.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
    Iconix® eMail ID-->"C:\Program Files\Iconix\Uninstaller.exe"
    IKEA Home Planner-->MsiExec.exe /I{AFA9D219-A7FD-4240-8793-E5C7C9D715F4}
    Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
    Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
    J2SE Runtime Environment 5.0 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150040}
    Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
    Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
    Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
    K-Lite Codec Pack 3.01 Full-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
    Lame ACM MP3 Codec-->"C:\WINDOWS\IFinst26.exe" -UC:\Program Files\Lame MP3 Codec\IFUB4.inf
    Learn2 Player (Uninstall Only)-->C:\Program Files\Learn2.com\StRunner\stuninst.exe
    Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
    LG PC Suite-->C:\Program Files\InstallShield Installation Information\{993960EE-CA4D-443F-8F88-E24260DD5FD2}\setup.exe -runfromtemp -l0x040c -removeonly
    LG USB Modem driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\setup.exe" -l0x40c LG -removeonly
    LiveUpdate 3.2 (Symantec Corporation)-->"C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U
    LiveUpdate Notice (Symantec Corporation)-->MsiExec.exe /X{DBA4DB9D-EE51-4944-A419-98AB1F1249C8}
    Macromedia Flash Player 8-->MsiExec.exe /X{5E8A1B08-0FBD-4543-9646-F2C2D0D05750}
    Macromedia Shockwave Player-->MsiExec.exe /X{7D1D6A24-65D4-454C-8815-4F08A5FFF12C}
    McDonald's Fairies-->C:\Program Files\McDonaldsFairies\uninstall.exe
    Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
    Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
    Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
    Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
    Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
    Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
    Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
    Microsoft ActiveSync 4.0-->MsiExec.exe /I{B208806F-A231-4FA0-AB3F-5C1B8979223E}
    Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
    Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
    Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
    Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
    Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
    Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
    Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
    Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
    Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
    Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
    Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
    Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 8 (KB969897)-->"C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
    Mise à jour pour Lecteur Windows Media 10 (KB910393)-->"C:\WINDOWS\$NtUninstallKB910393$\spuninst\spuninst.exe"
    Mise à jour pour Lecteur Windows Media 10 (KB913800)-->"C:\WINDOWS\$NtUninstallKB913800$\spuninst\spuninst.exe"
    Mise à jour pour Lecteur Windows Media 10 (KB926251)-->"C:\WINDOWS\$NtUninstallKB926251$\spuninst\spuninst.exe"
    Mise à jour pour Windows Internet Explorer 8 (KB971930)-->"C:\WINDOWS\ie8updates\KB971930-IE8\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
    Mozilla Firefox (3.5.3)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
    MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
    MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
    MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
    MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
    MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
    MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{1787603C-E6E3-42D4-8034-55F358486F1D}
    Multi Media France Toolbar-->C:\PROGRA~1\MULTI_~1\UNWISE.EXE C:\PROGRA~1\MULTI_~1\INSTALL.LOG
    Multi_Media_France Toolbar-->C:\PROGRA~1\MULTI_~1\UNWISE.EXE C:\PROGRA~1\MULTI_~1\INSTALL.LOG
    MultiMedia France Toolbar-->C:\PROGRA~1\MULTIM~1\UNWISE.EXE C:\PROGRA~1\MULTIM~1\INSTALL.LOG
    Music Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AFA4872-16B2-419E-ADCA-8E96E739115D}\setup.exe" -l0x40c
    Navigation par onglets (Windows Live Toolbar)-->MsiExec.exe /X{E916E61F-DE9D-4EAF-91E1-CEB50016326A}
    Norton 360 (Symantec Corporation)-->"C:\Program Files\Fichiers communs\Symantec Shared\SymSetup\{2D617065-1C52-4240-B5BC-C0AE12157777}_1_0_0_184\{2D617065-1C52-4240-B5BC-C0AE12157777}.exe" /X
    Norton 360 Help-->MsiExec.exe /I{1CA941F1-5006-487E-9FD4-09F812A7D6B8}
    Norton 360-->MsiExec.exe /I{21829177-4DED-4209-AD08-490B3AC9C01A}
    Norton 360-->MsiExec.exe /I{2D617065-1C52-4240-B5BC-C0AE12157777}
    Norton 360-->MsiExec.exe /I{40DA9A54-48CA-4A2C-AEAF-F67715BB046E}
    Norton 360-->MsiExec.exe /I{63A6E9A9-A190-46D4-9430-2DB28654AFD8}
    Norton Confidential Browser Component-->MsiExec.exe /I{4843B611-8FCB-4428-8C23-31D0A5EAE164}
    Norton Confidential Web Authentification Component-->MsiExec.exe /I{3074EB89-1BCA-4AEF-AFF4-EFB4634C1923}
    Norton Confidential Web Protection Component-->MsiExec.exe /I{D353CC51-430D-4C6F-9B7E-52003DA1E05A}
    OneCare Advisor (Windows Live Toolbar)-->MsiExec.exe /X{F242B06B-517F-4D62-B654-16B11564A912}
    Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
    Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
    Package de base Microsoft de service de chiffrement pour cartes à puce-->"C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.exe"
    Picasa 3-->"C:\Program Files\Google\Picasa3\Uninstall.exe"
    PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
    QuickTime-->C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log
    Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c -removeonly
    Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
    SPBBC 32bit-->MsiExec.exe /I{77772678-817F-4401-9301-ED1D01A8DA56}
    SuppSoft-->MsiExec.exe /I{022DA2C3-81C7-4003-A6BC-1BB147B20097}
    Symantec Technical Support Controls-->MsiExec.exe /I{92B1B3CC-EC78-45B8-96D0-8B3F11495864}
    SymNet-->MsiExec.exe /I{2DA85B02-13C0-4E6D-9A76-22E6B3DD0CB2}
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
    VideoLAN VLC media player 0.8.6c-->C:\Program Files\VideoLAN\VLC\uninstall.exe
    Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
    Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27}
    Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\WINDOWS\system32\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT=""
    VPbubble (remove only)-->C:\Program Files\Nosibay\VPbubble\Uninstall VPbubble.exe
    Windows Desktop Search -->"C:\WINDOWS\$NtUninstallKB911993-V2$\spuninst\spuninst.exe"
    Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
    Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
    Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
    Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
    Windows Live Contrôle parental-->MsiExec.exe /X{D5D81435-B8DE-4CAF-867F-7998F2B92CFC}
    Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
    Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
    Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
    Windows Live OneCare safety scanner-->RunDll32.exe "C:\Program Files\Windows Live Safety Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT
    Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
    Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}
    Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
    Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
    Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
    Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
    Windows XP Media Center Edition 2005 KB919803-->"C:\WINDOWS\$NtUninstallKB919803$\spuninst\spuninst.exe"
    Windows XP Media Center Edition 2005 KB973768-->"C:\WINDOWS\$NtUninstallKB973768$\spuninst\spuninst.exe"
    Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
    XviD MPEG-4 Video Codec-->"C:\Program Files\XviD\unins000.exe"

    ======Security center information======

    AV: Norton 360
    FW: Norton 360

    ======System event log======

    Computer Name: NOM-6F0826D884F
    Event Code: 7036
    Message: Le service Pml Driver HPZ12 est entré dans l'état : en cours d'exécution.

    Record Number: 9298
    Source Name: Service Control Manager
    Time Written: 20090831165147.000000+120
    Event Type: Informations
    User:

    Computer Name: NOM-6F0826D884F
    Event Code: 7035
    Message: Un contrôle Démarrer a correctement été envoyé au service Pml Driver HPZ12.

    Record Number: 9297
    Source Name: Service Control Manager
    Time Written: 20090831165147.000000+120
    Event Type: Informations
    User: NOM-6F0826D884F\falher bernard

    Computer Name: NOM-6F0826D884F
    Event Code: 7011
    Message: Délai (30000 millisecondes) d'attente pour une réponse du service Symantec Core LC à une transaction.

    Record Number: 9296
    Source Name: Service Control Manager
    Time Written: 20090831165143.000000+120
    Event Type: erreur
    User:

    Computer Name: NOM-6F0826D884F
    Event Code: 8033
    Message: L'explorateur a forcé une élection sur le réseau \Device\NetBT_Tcpip_{70CFC59E-EE19-4F8F-8942-8909DEC9BC08} car un maître explorateur a été arrêté.

    Record Number: 9295
    Source Name: BROWSER
    Time Written: 20090831165117.000000+120
    Event Type: Informations
    User:

    Computer Name: NOM-6F0826D884F
    Event Code: 4201
    Message: Le système a détecté que la carte réseau \DEVICE\TCPIP_{70CFC59E-EE19-4F8F-8942-8909DEC9BC08} était connectée au réseau,
    et a lancé une opération normale sur la carte réseau.

    Record Number: 9294
    Source Name: Tcpip
    Time Written: 20090831165117.000000+120
    Event Type: Informations
    User:

    =====Application event log=====

    Computer Name: NOM-6F0826D884F
    Event Code: 35
    Message: Le service 'LiveUpdate Notice Ex' a démarré.

    Record Number: 26224
    Source Name: ccSvcHst
    Time Written: 20090709082704.000000+120
    Event Type: Informations
    User: AUTORITE NT\SYSTEM

    Computer Name: NOM-6F0826D884F
    Event Code: 0
    Message:
    Record Number: 26223
    Source Name: LiveUpdate Notice Service
    Time Written: 20090709082703.000000+120
    Event Type: Informations
    User:

    Computer Name: NOM-6F0826D884F
    Event Code: 0
    Message:
    Record Number: 26222
    Source Name: LiveUpdate Notice Service
    Time Written: 20090709082703.000000+120
    Event Type: Informations
    User:

    Computer Name: NOM-6F0826D884F
    Event Code: 34
    Message: Le service 'LiveUpdate Notice Ex' démarre.

    Record Number: 26221
    Source Name: ccSvcHst
    Time Written: 20090709082703.000000+120
    Event Type: Informations
    User: AUTORITE NT\SYSTEM

    Computer Name: NOM-6F0826D884F
    Event Code: 35
    Message: Le service 'ccEvtMgr' a démarré.

    Record Number: 26220
    Source Name: ccSvcHst
    Time Written: 20090709082703.000000+120
    Event Type: Informations
    User: AUTORITE NT\SYSTEM

    ======Environment variables======

    "ComSpec"=%SystemRoot%\system32\cmd.exe
    "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\;C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727
    "windir"=%SystemRoot%
    "FP_NO_HOST_CHECK"=NO
    "OS"=Windows_NT
    "PROCESSOR_ARCHITECTURE"=x86
    "PROCESSOR_LEVEL"=15
    "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 6 Stepping 4, GenuineIntel
    "PROCESSOR_REVISION"=0604
    "NUMBER_OF_PROCESSORS"=2
    "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
    "TEMP"=%SystemRoot%\TEMP
    "TMP"=%SystemRoot%\TEMP

    -----------------EOF-----------

    Peut-être.


    1/

  • Désinstalle HijackThis.

  • Télécharge ToolsCleaner2 sur ton Bureau.
  • Double-clique sur ToolsCleaner2.exe pour le lancer.
  • Clique sur Recherche et laisse le scan agir.
  • Clique sur Suppression pour finaliser.
  • Tu peux, si tu le souhaites, te servir des Options Facultatives.
  • Clique sur Quitter pour obtenir le rapport.
  • Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).


    2/

  • Télécharge et installe CCleaner Slim.
  • Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
  • Va dans Nettoyeur, choisis Analyser. Une fois terminé, lance le nettoyage.


    3/

  • Il est nécessaire de désactiver puis réactiver la restauration système pour la purger.


    ==Prévention==

    Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.

    Vérifie que les mises à jour automatiques sont bien activées (Menu Démarrer, clique droit sur Poste de travail, Propriétés, onglet Mises à jour automatiques).

    Par rapport au P2P : Lien

    Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) : Lien


    ==Problème résolu ?==

    --> Si tu estimes que ton problème est résolu, ajoute [Résolu] au titre. Pour cela :
  • Clique, dans ton premier message, sur le bouton Editer .
  • Ajoute la mention [Résolu] devant le titre.
  • Clique ensuite sur Valider votre message.


    Sois plus vigilant(e) sur Internet ;) 
    Lassé par la pub ? Créez un compte

    Répondre Créer un nouveau sujet

    Tom's guide dans le monde