Virus Disk Recovery [Résolu] • page 2

[danakil]

Re,

Tu vas démarrer FF en mode sans échec comme ceci :

• Lance Firefox en mode sans échec par Démarrer/(Tous les) Programmes/Mozilla Firefox/Firefox (mode sans échec).




• Dans la fenêtre qui s'ouvre, clique sur le bouton Poursuivre en mode sans échec.



> Contrôle si tu arrives à te connecter!

[lupu]

Même en mode sans échec de Mozilla, je ne parviens pas à me connecter ...
Est-ce que si je réinstallais Mozilla, ça pourrais régler le problème ???

[danakil]

Oui!
Mais cela sera en dernier recours.

Recommence en mode sans échec et cette fois-ci coche la case : Désactiver tous les modules complémentaires

> Teste!
Si cela ne va pas redémarre ton PC.

Recommence > Décoche : Désactiver tous les modules complémentaires et coche : Réinitialiser les marques-pages par défaut de FireFox
> Teste!

[lupu]

Salut,

rien ne fonctionne. Je me suis rendu compte que je ne pouvais pas non plus me connecter à MSN. Je suis donc allée voir ma connection avec mon routeur (Linksys WRT310N). Quand je lui demande de réparer la connexion internet, il me dit que tout fonctionne correctement...

[danakil]

OK!

Ce que tu va faire :

Réinstaller FireFox avec récupération de ton profil :

◦ Télécharge la dernière version de Firefox sur ton Bureau et pas ailleurs.

◦ Désinstalle l'ancienne par Ajout/Suppression de programmes pour XP.
(Si redémarrage du PC demandé > Accepte).

◦ Installe la nouvelle version en double cliquant dessus et suis les instructions.

◦ Tu retrouveras tous tes paramètres personnels (marque-pages, extensions, Thèmes ...) au lancement normal de Firefox.

[lupu]

Bonsoir,

J'ai supprimé Mozilla de mon PC. J'ai téléchargé Mozilla sur une clé USB à partir d'un autre PC (vu que le mien n'a plus de connection internet). J'ai copié le fichier sur mon bureau. Mais quand j'essaie de l'ouvrir, on me dit que le fichier est corrompu, donc je ne peux pas insatller Mozilla Firefox.
Je sais que le fichier est correct, car sur le PC qui a internet, le fichier veut bien s'ouvrir et installer Mozilla ...
Comment faire pour copier directement sur son bureau un fichier trouvé sur internet quand on n'a pas de navigateur fonctionnel ???

[danakil]

Salut!

Il semblerait que les infections se soient regénérées ...

Voici ce que tu vas faire :
Sur le PC sain :
> Télécharge Combofix de sUBs sur ton Bureau et pas ailleurs.
> Renomme Combofix en lupu
> Via la clé USB, transfère lupu sur le Bureau du PC malade.

...

Sur le PC malade :
Important : Désactive ton Antivirus et antispyware avant le scan avec lupu :
http://forum.pcastuces.com/desactiver_l ... -f31s4.htm

> Ferme toutes les fenêtres actives avant de lancer le scan.

> Double clique sur lupu pour le lancer et valide par OUI
* Si l'installation de la Console est demandée > Valide!
* Le scan reprendra après son installation.
* Durant celui-ci, ne touche plus à ton PC tant que celui-ci ne sera pas terminé.
* Il peut y avoir un redémarrage du PC afin de finaliser les suppressions.

> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

Aide en images

[lupu]

Ca ne fonctionne pas, on me dit encore que le fichier combofix est invalide ...

[danakil]

Tu as ce message alors que le pc est en mode sans échec et que combofix et renommé en lupu?

[lupu]

Je ne savais pas que le pc devait être en mode sans échec ...
Je vais donc le lancer en mode sans échec et lancer le scan.

[lupu]

Alors combofix est renommé en Lupu (avec un L majuscule, je ne sais pas si ça change quelque chose), Avast est désactivé et le pc est en mode sans échec, mais le message est le même : "Some installation files are corrupt. Please download a fresh copy of Combofix.exe"

[danakil]

OK!

Tu vas télécharger un autre logiciel sur le PC malade et tu effectueras toute la procédure en mode normal.

• Télécharge RKill sur le Bureau du PC sain.
• Transfère le sur le PC malade.

... Sur le PC malade ...

• Double clics sur l'icône RKill présente sur le Bureau pour le lancer.
> Enregistre le rapport dans un document texte sur le Bureau.

Ne redémarre pas le PC.

• Lance Lupu ...

[lupu]

On va finir par se connaitre, à force ...
Donc j'ai lancé rkill en mode normal. Voici son rapport

This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.

Rkill was run on 09/02/2011 at 20:59:19.
Operating System: Microsoft Windows XP


Processes terminated by Rkill or while it was running:

C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32Info.exe
C:\WINDOWS\System32\rundll32.exe
C:\WINDOWS\System32\runonce.exe


Rkill completed on 09/02/2011 at 20:59:24.

Sans redémarrer le pc et toujours en mode normal, je lance Lupu, mais le message est le même qu'avant ...

Si tu en as marre de mes problèmes, n'hésites pas à me le dire. Tu as déjà été bien présent(e) pour moi ...

[danakil]

Si tu en as marre de mes problèmes, n'hésites pas à me le dire. Tu as déjà été bien présent(e) pour moi ...

T'inquiètes pas pour moi
Je ne te relâcherai que lorsque on aura résolu tous tes soucis.

Tu vas faire ceci :
Sur le PC malade tu as déjà OTL en place.
> Relance le et coche la case Rapport minimal.
> Colle cette citation dans la fenêtre Personnalisation :

netsvcs
%SYSTEMDRIVE%\*.*
%SYSTEMDRIVE%\*.exe
%PROGRAMFILES%\*.*
%PROGRAMFILES%\*.
/md5start
eventlog.dll
winlogon.exe
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
wininit.exe
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
explorer.exe
svchost.exe
userinit.exe
qmgr.dll
ws2_32.dll
proquota.exe
imm32.dll
kernel32.dll
ndis.sys
autochk.exe
spoolsv.exe
xmlprov.dll
ntmssvc.dll
mswsock.dll
Beep.SYS
ntfs.sys
termsrv.dll
sfcfiles.dll
st3shark.sys
winlogon.exe
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
c:\$recycle.bin\*.* /s

> En haut à gauche clique sur Analyse
... Tu n'obtiendras qu'un rapport OTL.txt
> Copie et colle ici en réponse son contenu. (Utilise la balise Code - bouton dispo en haut de la fenêtre de réponse).

Question :
Ton PC dispose d'un lecteur de disque?

[lupu]

Merci pour ton aide !!!

Voici le rapport OTL :

Code: Tout sélectionner

OTL logfile created on: 10/02/2011 18:56:39 - Run 3
OTL by OldTimer - Version 3.2.20.6     Folder = C:\Documents and Settings\Lupu\Bureau
Windows XP Media Center Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
 
1 014,00 Mb Total Physical Memory | 475,00 Mb Available Physical Memory | 47,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 81,00% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 46,57 Gb Total Space | 5,28 Gb Free Space | 11,34% Space Free | Partition Type: NTFS
Drive D: | 38,67 Gb Total Space | 5,95 Gb Free Space | 15,38% Space Free | Partition Type: NTFS
Drive H: | 980,11 Mb Total Space | 165,02 Mb Free Space | 16,84% Space Free | Partition Type: FAT
 
Computer Name: SOPHIE | User Name: Lupu | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - C:\Documents and Settings\Lupu\Bureau\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files\Google\Update\1.2.183.39\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
PRC - C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe (CANON INC.)
PRC - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corp.)
PRC - C:\WINDOWS\system32\java.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files\Linksys\Linksys EasyLink Advisor\Linksys EasyLink Advisor.exe (Linksys LLC - A Division of Cisco Systems)
PRC - C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe ()
PRC - C:\Program Files\Fichiers communs\Pure Networks Shared\Platform\nmsrvc.exe (Pure Networks, Inc.)
PRC - C:\Program Files\Fichiers communs\Pure Networks Shared\Platform\nmctxth.exe (Pure Networks, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe (Sony Corporation)
PRC - C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe (Nuance Communications, Inc.)
PRC - C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe (Sony Corporation)
PRC - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
PRC - C:\Program Files\Sony\VAIO Power Management\SPMgr.exe (Sony Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe (Intel Corporation )
PRC - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe (Intel Corporation)
PRC - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe (Sony Corporation)
PRC - C:\WINDOWS\system32\DLA\DLACTRLW.EXE (Sonic Solutions)
PRC - C:\Program Files\Sony\SonicStage\SSAAD.exe ()
PRC - C:\WINDOWS\system32\igfxext.exe (Intel Corporation)
PRC - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe (Sony Corporation)
PRC - C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe (Sony Corporation)
PRC - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe (Sony Corporation)
PRC - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe (Sony Corporation)
PRC - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe ()
PRC - C:\Program Files\Multimedia Card Reader\shwicon2k.exe (Alcor Micro, Corp.)
PRC - C:\Program Files\Apoint\Apoint.exe (Alps Electric Co., Ltd.)
PRC - C:\WINDOWS\system32\LVCOMSX.EXE (Logitech Inc.)
PRC - C:\Program Files\Apoint\ApntEx.exe (Alps Electric Co., Ltd.)
PRC - C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)
PRC - C:\WINDOWS\system32\ico.exe (Primax Electronics Ltd.)
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - C:\Documents and Settings\Lupu\Bureau\OTL.exe (OldTimer Tools)
MOD - C:\Program Files\Alwil Software\Avast5\snxhk.dll (AVAST Software)
MOD - C:\Program Files\ScanSoft\OmniPageSE4\OpHookSE4.dll (Nuance Communications, Inc.)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll (Microsoft Corporation)
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (GoogleDesktopManager-051210-111108) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
SRV - (fsssvc) -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation)
SRV - (SeaPort) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corp.)
SRV - (Apple Mobile Device) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (LinksysUpdater) -- C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe ()
SRV - (nmservice) -- C:\Program Files\Fichiers communs\Pure Networks Shared\Platform\nmsrvc.exe (Pure Networks, Inc.)
SRV - (odserv) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (ose) -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (LightScribeService) -- C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
SRV - (Symantec Core LC) -- C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe (Symantec Corporation)
SRV - (EvtEng) Intel(R) -- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe (Intel Corporation)
SRV - (S24EventMonitor) Intel(R) -- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe (Intel Corporation )
SRV - (RegSrvc) Intel(R) -- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe (Intel Corporation)
SRV - (VAIO Event Service) -- C:\Program Files\Sony\VAIO Event Service\VESMgr.exe (Sony Corporation)
SRV - (VAIOMediaPlatform-IntegratedServer-AppServer) -- C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe (Sony Corporation)
SRV - (VAIOMediaPlatform-Mobile-Gateway) -- C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe (Sony Corporation)
SRV - (VAIOMediaPlatform-IntegratedServer-UPnP) VAIO Media Integrated Server (UPnP) -- C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe (Sony Corporation)
SRV - (VAIOMediaPlatform-IntegratedServer-HTTP) VAIO Media Integrated Server (HTTP) -- C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe (Sony Corporation)
SRV - (SSScsiSV) -- C:\Program Files\Fichiers communs\Sony Shared\Avlib\SSScsiSV.exe (Sony Corporation)
SRV - (MSCSPTISRV) -- C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe (Sony Corporation)
SRV - (PACSPTISVR) -- C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe (Sony Corporation)
SRV - (SPTISRV) -- C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe (Sony Corporation)
SRV - (Vcsw) -- C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe (Sony Corporation)
SRV - (VzFw) -- C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe (Sony Corporation)
SRV - (VzCdbSvc) -- C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe (Sony Corporation)
SRV - (VAIO Entertainment TV Device Arbitration Service) -- C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe (Sony Corporation)
SRV - (IDriverT) -- C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (AdobeActiveFileMonitor4.0) -- C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe ()
SRV - (Image Converter video recording monitor for VAIO Entertainment) -- C:\Program Files\Sony\Image Converter 2\IcVzMon.exe (Sony Corporation)
SRV - (VCI) -- C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_svc.exe (Sony Corporation)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - (aswSP) -- C:\WINDOWS\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswTdi) -- C:\WINDOWS\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswMon2) -- C:\WINDOWS\System32\drivers\aswmon2.sys (AVAST Software)
DRV - (aswRdr) -- C:\WINDOWS\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (Aavmker4) -- C:\WINDOWS\System32\drivers\aavmker4.sys (AVAST Software)
DRV - (aswFsBlk) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (fssfltr) -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys (Microsoft Corporation)
DRV - (pnarp) -- C:\WINDOWS\system32\drivers\pnarp.sys (Pure Networks, Inc.)
DRV - (purendis) -- C:\WINDOWS\system32\drivers\purendis.sys (Pure Networks, Inc.)
DRV - (symlcbrd) -- C:\WINDOWS\system32\drivers\symlcbrd.sys (Symantec Corporation)
DRV - (nv) -- C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (HSF_DPV) -- C:\WINDOWS\system32\drivers\HSF_DPV.sys (Conexant Systems, Inc.)
DRV - (winachsf) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (HSFHWAZL) -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys (Conexant Systems, Inc.)
DRV - (LEX_AS_NIC_SERVICE_YNOS) -- C:\WINDOWS\system32\drivers\ExpasAG.sys (Atheros Communications, Inc.)
DRV - (s24trans) -- C:\WINDOWS\system32\drivers\s24trans.sys (Intel Corporation)
DRV - (NETw3x32) Pilote de carte réseau Intel(R) -- C:\WINDOWS\system32\drivers\NETw3x32.sys (Intel® Corporation)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys (Realtek Semiconductor Corp.)
DRV - (DLAUDFAM) -- C:\WINDOWS\system32\DLA\DLAUDFAM.SYS (Sonic Solutions)
DRV - (DLAUDF_M) -- C:\WINDOWS\system32\DLA\DLAUDF_M.SYS (Sonic Solutions)
DRV - (DLAIFS_M) -- C:\WINDOWS\system32\DLA\DLAIFS_M.SYS (Sonic Solutions)
DRV - (DLABOIOM) -- C:\WINDOWS\system32\DLA\DLABOIOM.SYS (Sonic Solutions)
DRV - (DLAOPIOM) -- C:\WINDOWS\system32\DLA\DLAOPIOM.SYS (Sonic Solutions)
DRV - (DLAPoolM) -- C:\WINDOWS\system32\DLA\DLAPoolM.SYS (Sonic Solutions)
DRV - (DLADResN) -- C:\WINDOWS\system32\DLA\DLADResN.SYS (Sonic Solutions)
DRV - (DRVMCDB) -- C:\WINDOWS\System32\Drivers\DRVMCDB.SYS (Sonic Solutions)
DRV - (yukonwxp) -- C:\WINDOWS\system32\drivers\yk51x86.sys (Marvell)
DRV - (Tosrfbd) -- C:\WINDOWS\system32\drivers\tosrfbd.sys (TOSHIBA CORPORATION)
DRV - (DLACDBHM) -- C:\WINDOWS\system32\drivers\DLACDBHM.SYS (Sonic Solutions)
DRV - (DLARTL_N) -- C:\WINDOWS\system32\drivers\DLARTL_N.SYS (Sonic Solutions)
DRV - (DRVNDDM) -- C:\WINDOWS\system32\drivers\DRVNDDM.SYS (Sonic Solutions)
DRV - (Tosrfbnp) -- C:\WINDOWS\system32\drivers\tosrfbnp.sys (TOSHIBA Corporation)
DRV - (TosRfSnd) Bluetooth Audio Device (WDM) -- C:\WINDOWS\system32\drivers\tosrfsnd.sys (TOSHIBA Corporation)
DRV - (Tosrfusb) -- C:\WINDOWS\system32\drivers\tosrfusb.sys (TOSHIBA CORPORATION)
DRV - (ti21sony) -- C:\WINDOWS\system32\drivers\ti21sony.sys (Texas Instruments)
DRV - (tosporte) -- C:\WINDOWS\system32\drivers\tosporte.sys (TOSHIBA Corporation)
DRV - (Tosrfhid) -- C:\WINDOWS\system32\drivers\tosrfhid.sys (TOSHIBA Corporation.)
DRV - (Tosrfcom) -- C:\WINDOWS\system32\drivers\tosrfcom.sys (TOSHIBA Corporation)
DRV - (toshidpt) -- C:\WINDOWS\system32\drivers\toshidpt.sys (TOSHIBA Corporation.)
DRV - (tosrfnds) -- C:\WINDOWS\system32\drivers\tosrfnds.sys (TOSHIBA Corporation.)
DRV - (SunkFilt) -- C:\WINDOWS\system32\drivers\Sunkfilt.sys (Alcor Micro Corp.)
DRV - (ApfiltrService) -- C:\WINDOWS\system32\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV - (CamDrL) Logitech QuickCam Pro 3000(CamDrl) -- C:\WINDOWS\system32\drivers\Camdrl.sys (Logitech Inc.)
DRV - (LVUSBSta) -- C:\WINDOWS\system32\drivers\LVUSBSta.sys (Logitech Inc.)
DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\Hdaudbus.sys (Windows (R) Server 2003 DDK provider)
DRV - (NwlnkIpx) -- C:\WINDOWS\system32\drivers\nwlnkipx.sys (Microsoft Corporation)
DRV - (NwlnkNb) -- C:\WINDOWS\system32\drivers\nwlnknb.sys (Microsoft Corporation)
DRV - (NwlnkSpx) -- C:\WINDOWS\system32\drivers\nwlnkspx.sys (Microsoft Corporation)
DRV - (usbaudio) Pilote USB audio (WDM) -- C:\WINDOWS\system32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (DMICall) -- C:\WINDOWS\system32\drivers\DMICall.sys (Sony Corporation)
DRV - (SNC) -- C:\WINDOWS\system32\drivers\SonyNC.sys (Sony Corporation)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.club-vaio.com/fr/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.club-vaio.com/fr/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5555
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.selectedEngine: ""
FF - prefs.js..browser.startup.homepage: "http://www.yahoo.fr/"
 
 
[2008/10/11 14:15:44 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Lupu\Application Data\Mozilla\Extensions
[2011/02/06 15:08:32 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Lupu\Application Data\Mozilla\Firefox\Profiles\rhecisia.default\extensions
[2009/06/08 20:11:47 | 000,000,000 | ---D | M] (Veoh Video Compass) -- C:\Documents and Settings\Lupu\Application Data\Mozilla\Firefox\Profiles\rhecisia.default\extensions\searchrecs@veoh.com
[2011/02/08 20:56:19 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
 
O1 HOSTS File: ([2011/02/05 12:23:28 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1       localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll (Microsoft Corp.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll (Google Inc.)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Veoh Web Player Video Finder) - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll (Veoh Networks Inc)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Veoh Browser Plug-in) - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll (Veoh Networks Inc)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe (Alps Electric Co., Ltd.)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [DLA] C:\WINDOWS\system32\DLA\DLACTRLW.EXE (Sonic Solutions)
O4 - HKLM..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
O4 - HKLM..\Run: [IJNetworkScanUtility] C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe (CANON INC.)
O4 - HKLM..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)
O4 - HKLM..\Run: [LELA] C:\Program Files\Linksys\Linksys EasyLink Advisor\Linksys EasyLink Advisor.exe (Linksys LLC - A Division of Cisco Systems)
O4 - HKLM..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE (Logitech Inc.)
O4 - HKLM..\Run: [Mouse Suite 98 Daemon] C:\WINDOWS\System32\ico.exe (Primax Electronics Ltd.)
O4 - HKLM..\Run: [nmctxth] C:\Program Files\Fichiers communs\Pure Networks Shared\Platform\nmctxth.exe (Pure Networks, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NWEReboot]  File not found
O4 - HKLM..\Run: [OpwareSE4] C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [SearchSettings]  File not found
O4 - HKLM..\Run: [SkyTel] C:\WINDOWS\SkyTel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SonyPowerCfg] C:\Program Files\Sony\VAIO Power Management\SPMgr.exe (Sony Corporation)
O4 - HKLM..\Run: [SSBkgdUpdate] C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe (Alcor Micro, Corp.)
O4 - HKLM..\Run: [Switcher.exe] C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe (Sony Corporation)
O4 - HKLM..\Run: [VAIO Update 3] C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe (Sony Corporation)
O4 - HKCU..\Run: []  File not found
O4 - HKCU..\Run: [SsAAD.exe] C:\Program Files\Sony\SonicStage\SSAAD.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk =  File not found
O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe (Logitech)
O4 - Startup: C:\Documents and Settings\Lupu\Menu Démarrer\Programmes\Démarrage\Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe (Sony Corporation)
O4 - Startup: C:\Documents and Settings\Lupu\Menu Démarrer\Programmes\Démarrage\Yahoo! Widget Engine.lnk =  File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 3
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Ajouter un site de support RSS à VAIO Information FLOW - C:\Program Files\Sony\VAIO Information FLOW\aiesc.html ()
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.)
O8 - Extra context menu item: Transfert par Image Converter 2 Plus - C:\Program Files\Sony\Image Converter 2\menu.htm ()
O9 - Extra Button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKCU\..Trusted Domains: localhost ([]http in Intranet local)
O15 - HKCU\..Trusted Domains: sony-europe.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: sonystyle-europe.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: vaio-link.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Ranges: GD ([http] in Intranet local)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Java Plug-in 1.5.0_06)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C}  (Reg Error: Value error.)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\pure-go {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files\Fichiers communs\Pure Networks Shared\Platform\puresp3.dll (Pure Networks, Inc.)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\VESWinlogon: DllName - VESWinlogon.dll - C:\WINDOWS\System32\VESWinlogon.dll (Sony Corporation)
O24 - Desktop Components:0 (Ma page d'accueil) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Lupu\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Lupu\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O30 - LSA: Authentication Packages - (nwprovau) - C:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation)
O32 - Unable to read "AutoRun" value or value not present!
O32 - AutoRun File - [2006/09/04 06:09:10 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2011/02/05 17:46:18 | 000,000,000 | RHSD | M] - C:\Autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2011/02/05 17:46:21 | 000,000,000 | RHSD | M] - D:\Autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2011/02/05 17:46:26 | 000,000,000 | RHSD | M] - H:\Autorun.inf -- [ FAT ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
NetSvcs: 6to4 -  File not found
NetSvcs: Ias -  File not found
NetSvcs: Iprip -  File not found
NetSvcs: Irmon -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: WmdmPmSp -  File not found
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011/02/09 21:03:33 | 000,000,000 | R--D | C] -- C:\32788R22FWJFW
[2011/02/08 22:11:23 | 008,641,472 | ---- | C] (Mozilla) -- C:\Documents and Settings\Lupu\Bureau\Firefox Setup 3.6.13.exe
[2011/02/05 17:46:18 | 000,000,000 | RHSD | C] -- C:\Autorun.inf
[2011/02/05 13:07:20 | 000,000,000 | ---D | C] -- C:\UsbFix
[2011/02/05 13:06:26 | 001,219,268 | ---- | C] (El Desaparecido & C_XX) -- C:\Documents and Settings\Lupu\Bureau\UsbFix.exe
[2011/02/05 12:06:29 | 000,446,464 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Lupu\Bureau\TFC.exe
[2011/02/04 17:51:10 | 000,000,000 | ---D | C] -- C:\_OTL
[2011/02/04 17:14:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lupu\Menu Démarrer\Programmes\Disk Recovery
[2011/02/04 17:11:56 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Lupu\Bureau\OTL.exe
[2011/01/20 10:51:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lupu\Mes documents\Texte traduction
[2008/12/04 17:04:22 | 001,089,912 | ---- | C] (Microsoft Corporation) -- C:\Program Files\emoticones1_5.exe
[2008/11/26 14:35:15 | 000,797,000 | ---- | C] (Pelmorex Media Inc.) -- C:\Program Files\WeatherEyeInstaller.exe
[2006/12/27 16:04:05 | 036,808,256 | ---- | C] (Apple Computer, Inc.) -- C:\Program Files\iTunesSetup.exe
[2006/12/23 21:52:36 | 014,803,298 | ---- | C] (Rene-Gilles Deberdt                                         ) -- C:\Program Files\kyodai-mahjongg_kyodai_mahjongg_2006_francais_10557.exe
[2002/03/11 04:06:30 | 001,822,520 | ---- | C] (Microsoft Corporation) -- C:\Program Files\instmsiw.exe
[2002/03/11 03:45:04 | 001,708,856 | ---- | C] (Microsoft Corporation) -- C:\Program Files\instmsia.exe
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011/02/10 18:43:00 | 000,001,000 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
[2011/02/10 18:42:48 | 000,001,046 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/02/10 18:42:29 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/02/10 17:22:35 | 000,503,717 | ---- | M] () -- C:\Documents and Settings\Lupu\Mes documents\Traduction TP2.docx
[2011/02/10 16:41:19 | 000,001,050 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/02/09 19:36:22 | 000,721,199 | ---- | M] () -- C:\Documents and Settings\Lupu\Bureau\rkill.com
[2011/02/08 22:38:32 | 004,265,447 | ---- | M] () -- C:\Documents and Settings\Lupu\Bureau\Lupu.exe
[2011/02/08 21:04:04 | 008,641,472 | ---- | M] (Mozilla) -- C:\Documents and Settings\Lupu\Bureau\Firefox Setup 3.6.13.exe
[2011/02/08 10:50:43 | 000,004,876 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011/02/08 10:46:00 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/02/06 20:12:20 | 000,131,584 | ---- | M] () -- C:\Documents and Settings\Lupu\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/02/05 18:09:03 | 000,000,788 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Malwarebytes' Anti-Malware.lnk
[2011/02/05 17:40:08 | 000,010,339 | ---- | M] () -- C:\UsbFix_Upload_Me_SOPHIE.zip
[2011/02/05 17:33:19 | 000,013,885 | ---- | M] () -- C:\Documents and Settings\Lupu\Mes documents\TP6 Català.docx
[2011/02/05 15:46:54 | 007,734,216 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Documents and Settings\Lupu\Bureau\mbam-setup.exe
[2011/02/05 13:05:07 | 001,219,268 | ---- | M] (El Desaparecido & C_XX) -- C:\Documents and Settings\Lupu\Bureau\UsbFix.exe
[2011/02/05 12:23:28 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.msn
[2011/02/05 12:23:28 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\Hosts
[2011/02/05 12:22:41 | 000,421,376 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\uwBXXtFlEQE.dll
[2011/02/05 12:01:20 | 000,446,464 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Lupu\Bureau\TFC.exe
[2011/02/04 16:38:06 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Lupu\Bureau\OTL.exe
[2011/02/04 16:04:24 | 000,000,528 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\L6v2QFxcMn32sRD
[2011/02/01 23:56:58 | 000,013,144 | ---- | M] () -- C:\Documents and Settings\Lupu\Mes documents\TP5 Català.docx
[2011/01/27 16:14:56 | 000,012,240 | ---- | M] () -- C:\Documents and Settings\Lupu\Mes documents\TP4 Català.docx
[2011/01/21 07:38:41 | 000,444,709 | ---- | M] () -- C:\Documents and Settings\Lupu\Mes documents\TP1 Traduccion.docx
[2011/01/18 06:13:32 | 000,003,121 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2011/01/13 03:47:35 | 000,038,848 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2011/01/13 03:47:32 | 000,188,216 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2011/01/13 03:41:16 | 000,294,608 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2011/01/13 03:40:16 | 000,047,440 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2011/01/13 03:40:04 | 000,100,176 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2011/01/13 03:39:50 | 000,094,544 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2011/01/13 03:37:30 | 000,023,632 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2011/01/13 03:37:11 | 000,029,392 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2011/01/13 03:37:09 | 000,017,744 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011/02/09 20:58:20 | 000,721,199 | ---- | C] () -- C:\Documents and Settings\Lupu\Bureau\rkill.com
[2011/02/09 13:02:01 | 000,503,717 | ---- | C] () -- C:\Documents and Settings\Lupu\Mes documents\Traduction TP2.docx
[2011/02/08 22:41:06 | 004,265,447 | ---- | C] () -- C:\Documents and Settings\Lupu\Bureau\Lupu.exe
[2011/02/05 18:09:03 | 000,000,788 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Malwarebytes' Anti-Malware.lnk
[2011/02/05 17:40:08 | 000,010,339 | ---- | C] () -- C:\UsbFix_Upload_Me_SOPHIE.zip
[2011/02/05 15:23:53 | 000,013,885 | ---- | C] () -- C:\Documents and Settings\Lupu\Mes documents\TP6 Català.docx
[2011/02/04 15:49:45 | 000,000,528 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\L6v2QFxcMn32sRD
[2011/02/04 15:23:45 | 000,421,376 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\uwBXXtFlEQE.dll
[2011/02/01 23:13:43 | 000,013,144 | ---- | C] () -- C:\Documents and Settings\Lupu\Mes documents\TP5 Català.docx
[2011/01/30 17:02:20 | 000,740,776 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2011/01/27 12:18:30 | 000,012,240 | ---- | C] () -- C:\Documents and Settings\Lupu\Mes documents\TP4 Català.docx
[2011/01/20 10:55:22 | 000,444,709 | ---- | C] () -- C:\Documents and Settings\Lupu\Mes documents\TP1 Traduccion.docx
[2009/06/29 22:32:08 | 003,342,809 | ---- | C] () -- C:\Program Files\eMule0.49c-Installer.exe
[2009/03/06 22:58:19 | 000,646,379 | ---- | C] () -- C:\Program Files\othello300.zip
[2009/01/17 13:02:39 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2008/12/16 23:03:34 | 000,000,400 | ---- | C] () -- C:\WINDOWS\RPCD.ini
[2008/10/22 21:09:35 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iplayer.INI
[2008/10/05 17:00:43 | 000,000,168 | ---- | C] () -- C:\WINDOWS\mb.ini
[2008/09/17 22:28:29 | 000,011,776 | ---- | C] () -- C:\WINDOWS\System32\pmsbfn32.dll
[2008/09/17 22:26:09 | 000,000,412 | ---- | C] () -- C:\WINDOWS\MAXLINK.INI
[2008/09/17 22:11:09 | 000,003,584 | ---- | C] () -- C:\WINDOWS\System32\CNCFLdNL.DLL
[2008/08/19 12:47:00 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2008/08/19 12:38:11 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008/01/17 09:10:21 | 000,003,654 | ---- | C] () -- C:\WINDOWS\System32\drivers\Sonyhcp.dll
[2007/04/13 17:36:13 | 000,000,112 | ---- | C] () -- C:\WINDOWS\ActiveSkin.INI
[2006/12/29 22:03:14 | 000,006,812 | R--- | C] () -- C:\WINDOWS\System32\lvcoinst.ini
[2006/12/23 20:53:14 | 000,131,584 | ---- | C] () -- C:\Documents and Settings\Lupu\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006/12/23 18:01:27 | 012,220,440 | ---- | C] () -- C:\Program Files\setupfre.exe
[2006/12/23 16:50:50 | 000,000,127 | ---- | C] () -- C:\Documents and Settings\Lupu\Local Settings\Application Data\fusioncache.dat
[2006/11/30 10:17:53 | 000,000,217 | ---- | C] () -- C:\Program Files\setup.ini
[2006/10/04 09:40:14 | 000,000,385 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006/10/04 09:34:29 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\Cpuinf32.dll
[2006/10/04 09:33:26 | 000,520,192 | ---- | C] () -- C:\WINDOWS\System32\CddbPlaylist2Sony.dll
[2006/10/04 09:29:59 | 000,000,218 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2006/09/05 03:53:22 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2006/09/04 11:12:05 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll
[2006/09/04 11:12:05 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll
[2006/09/04 11:12:05 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll
[2006/09/04 11:12:05 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll
[2006/09/04 11:12:05 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll
[2006/09/04 11:12:05 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll
[2006/09/04 11:05:58 | 000,000,000 | ---- | C] () -- C:\WINDOWS\VAIOUpdt.INI
[2006/09/04 08:00:05 | 000,004,205 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2006/09/04 07:59:28 | 000,163,840 | ---- | C] () -- C:\WINDOWS\System32\WLANDLL.DLL
[2006/09/04 07:43:21 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2006/09/03 22:53:13 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll
[2006/09/03 22:53:00 | 000,004,082 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2006/09/03 22:51:55 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll
[2006/07/04 20:07:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2005/08/05 08:38:54 | 000,235,008 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[1999/01/27 07:39:06 | 000,065,024 | ---- | C] () -- C:\WINDOWS\System32\indounin.dll
[1997/06/13 01:56:08 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\Iyvu9_32.dll
 
[color=#E56717]========== Custom Scans ==========[/color]
 
 
[color=#A23BEC]< %SYSTEMDRIVE%\*.*  >[/color]
[2006/12/23 20:38:55 | 000,000,000 | ---- | M] () -- C:\AdobeDebug.txt
[2006/09/04 06:09:10 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2006/12/23 16:49:37 | 000,000,209 | ---- | M] () -- C:\boot.ini
[2004/08/10 07:00:00 | 000,004,952 | ---- | M] () -- C:\Bootfont.bin
[2006/09/04 06:09:10 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2008/10/26 17:54:13 | 000,000,076 | ---- | M] () -- C:\DVDPATH.TXT
[2008/08/31 19:35:26 | 000,002,293 | ---- | M] () -- C:\INSTALL.LOG
[2006/09/04 06:09:10 | 000,000,000 | ---- | M] () -- C:\IO.SYS
[2006/12/29 21:55:32 | 000,000,183 | ---- | M] () -- C:\LogiSetup.log
[2006/09/04 06:09:10 | 000,000,000 | ---- | M] () -- C:\MSDOS.SYS
[2010/02/16 12:56:02 | 000,000,241 | ---- | M] () -- C:\MyHosts.txt
[2004/08/10 07:00:00 | 000,047,564 | ---- | M] () -- C:\NTDETECT.COM
[2004/08/10 07:00:00 | 000,251,712 | ---- | M] () -- C:\ntldr
[2011/02/10 18:42:23 | 1598,029,824 | -HS- | M] () -- C:\pagefile.sys
[2011/02/09 21:03:16 | 000,000,426 | ---- | M] () -- C:\rkill rapport 2.txt
[2011/02/09 21:02:17 | 000,000,426 | ---- | M] () -- C:\rkill.log
[2007/01/08 08:54:05 | 000,000,268 | ---- | M] () -- C:\sqmdata00.sqm
[2007/01/09 09:56:31 | 000,000,268 | ---- | M] () -- C:\sqmdata01.sqm
[2007/01/09 17:14:45 | 000,000,268 | ---- | M] () -- C:\sqmdata02.sqm
[2007/01/11 07:46:45 | 000,000,268 | ---- | M] () -- C:\sqmdata03.sqm
[2007/01/12 00:27:26 | 000,000,268 | ---- | M] () -- C:\sqmdata04.sqm
[2007/01/12 08:43:52 | 000,000,268 | ---- | M] () -- C:\sqmdata05.sqm
[2007/01/15 19:47:12 | 000,000,268 | ---- | M] () -- C:\sqmdata06.sqm
[2007/01/20 17:13:08 | 000,000,268 | ---- | M] () -- C:\sqmdata07.sqm
[2006/12/27 16:14:31 | 000,000,268 | ---- | M] () -- C:\sqmdata08.sqm
[2006/12/27 17:39:45 | 000,000,268 | ---- | M] () -- C:\sqmdata09.sqm
[2006/12/28 20:01:19 | 000,000,268 | ---- | M] () -- C:\sqmdata10.sqm
[2006/12/29 21:59:57 | 000,000,268 | ---- | M] () -- C:\sqmdata11.sqm
[2006/12/29 22:06:02 | 000,000,268 | ---- | M] () -- C:\sqmdata12.sqm
[2006/12/30 21:31:39 | 000,000,268 | ---- | M] () -- C:\sqmdata13.sqm
[2007/01/02 20:47:53 | 000,000,268 | ---- | M] () -- C:\sqmdata14.sqm
[2007/01/02 21:22:10 | 000,000,268 | ---- | M] () -- C:\sqmdata15.sqm
[2007/01/03 12:59:30 | 000,000,268 | ---- | M] () -- C:\sqmdata16.sqm
[2007/01/03 18:18:23 | 000,000,268 | ---- | M] () -- C:\sqmdata17.sqm
[2007/01/04 16:26:50 | 000,000,268 | ---- | M] () -- C:\sqmdata18.sqm
[2007/01/04 16:31:09 | 000,000,268 | ---- | M] () -- C:\sqmdata19.sqm
[2007/01/08 08:54:05 | 000,000,244 | ---- | M] () -- C:\sqmnoopt00.sqm
[2007/01/09 09:56:31 | 000,000,244 | ---- | M] () -- C:\sqmnoopt01.sqm
[2007/01/09 17:14:45 | 000,000,244 | ---- | M] () -- C:\sqmnoopt02.sqm
[2007/01/11 07:46:45 | 000,000,244 | ---- | M] () -- C:\sqmnoopt03.sqm
[2007/01/12 00:27:26 | 000,000,244 | ---- | M] () -- C:\sqmnoopt04.sqm
[2007/01/12 08:43:51 | 000,000,244 | ---- | M] () -- C:\sqmnoopt05.sqm
[2007/01/15 19:47:11 | 000,000,244 | ---- | M] () -- C:\sqmnoopt06.sqm
[2007/01/20 17:13:08 | 000,000,244 | ---- | M] () -- C:\sqmnoopt07.sqm
[2006/12/27 16:14:31 | 000,000,244 | ---- | M] () -- C:\sqmnoopt08.sqm
[2006/12/27 17:39:45 | 000,000,244 | ---- | M] () -- C:\sqmnoopt09.sqm
[2006/12/28 20:01:19 | 000,000,244 | ---- | M] () -- C:\sqmnoopt10.sqm
[2006/12/29 21:59:57 | 000,000,244 | ---- | M] () -- C:\sqmnoopt11.sqm
[2006/12/29 22:06:02 | 000,000,244 | ---- | M] () -- C:\sqmnoopt12.sqm
[2006/12/30 21:31:39 | 000,000,244 | ---- | M] () -- C:\sqmnoopt13.sqm
[2007/01/02 20:47:53 | 000,000,244 | ---- | M] () -- C:\sqmnoopt14.sqm
[2007/01/02 21:22:10 | 000,000,244 | ---- | M] () -- C:\sqmnoopt15.sqm
[2007/01/03 12:59:30 | 000,000,244 | ---- | M] () -- C:\sqmnoopt16.sqm
[2007/01/03 18:18:23 | 000,000,244 | ---- | M] () -- C:\sqmnoopt17.sqm
[2007/01/04 16:26:50 | 000,000,244 | ---- | M] () -- C:\sqmnoopt18.sqm
[2007/01/04 16:31:09 | 000,000,244 | ---- | M] () -- C:\sqmnoopt19.sqm
[2001/05/24 05:59:30 | 000,162,304 | ---- | M] () -- C:\UNWISE.EXE
[2011/02/05 17:46:27 | 000,000,000 | ---- | M] () -- C:\UsbFix.txt
[2011/02/05 17:40:08 | 000,010,339 | ---- | M] () -- C:\UsbFix_Upload_Me_SOPHIE.zip
 
[color=#A23BEC]< %SYSTEMDRIVE%\*.exe  >[/color]
[2001/05/24 05:59:30 | 000,162,304 | ---- | M] () -- C:\UNWISE.EXE
 
[color=#A23BEC]< %PROGRAMFILES%\*.*  >[/color]
[2008/12/04 17:04:28 | 001,089,912 | ---- | M] (Microsoft Corporation) -- C:\Program Files\emoticones1_5.exe
[2009/06/29 22:32:15 | 003,342,809 | ---- | M] () -- C:\Program Files\eMule0.49c-Installer.exe
[2002/03/11 03:45:04 | 001,708,856 | ---- | M] (Microsoft Corporation) -- C:\Program Files\instmsia.exe
[2002/03/11 04:06:30 | 001,822,520 | ---- | M] (Microsoft Corporation) -- C:\Program Files\instmsiw.exe
[2006/12/27 16:04:14 | 036,808,256 | ---- | M] (Apple Computer, Inc.) -- C:\Program Files\iTunesSetup.exe
[2006/12/23 21:52:52 | 014,803,298 | ---- | M] (Rene-Gilles Deberdt                                         ) -- C:\Program Files\kyodai-mahjongg_kyodai_mahjongg_2006_francais_10557.exe
[2009/03/06 22:58:22 | 000,646,379 | ---- | M] () -- C:\Program Files\othello300.zip
[2006/11/30 10:17:53 | 000,000,217 | ---- | M] () -- C:\Program Files\setup.ini
[2006/12/23 18:01:38 | 012,220,440 | ---- | M] () -- C:\Program Files\setupfre.exe
[2008/11/26 14:35:19 | 000,797,000 | ---- | M] (Pelmorex Media Inc.) -- C:\Program Files\WeatherEyeInstaller.exe
 
[color=#A23BEC]< %PROGRAMFILES%\*.  >[/color]
[2007/01/23 04:14:10 | 000,000,000 | ---D | M] -- C:\Program Files\7-Zip
[2008/09/04 22:04:01 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe
[2010/11/27 14:50:36 | 000,000,000 | ---D | M] -- C:\Program Files\Alwil Software
[2006/09/04 08:01:53 | 000,000,000 | ---D | M] -- C:\Program Files\Apoint
[2008/09/19 22:31:21 | 000,000,000 | ---D | M] -- C:\Program Files\Apple Software Update
[2008/09/19 22:34:07 | 000,000,000 | ---D | M] -- C:\Program Files\Bonjour
[2009/11/23 22:26:18 | 000,000,000 | ---D | M] -- C:\Program Files\Canon
[2009/11/23 21:54:53 | 000,000,000 | -H-D | M] -- C:\Program Files\CanonBJ
[2010/08/31 12:01:41 | 000,000,000 | ---D | M] -- C:\Program Files\CCleaner
[2006/09/04 06:05:19 | 000,000,000 | ---D | M] -- C:\Program Files\ComPlus Applications
[2006/09/04 07:34:15 | 000,000,000 | ---D | M] -- C:\Program Files\CONEXANT
[2010/01/31 16:34:55 | 000,000,000 | ---D | M] -- C:\Program Files\DivX
[2009/11/26 13:14:54 | 000,000,000 | ---D | M] -- C:\Program Files\EA GAMES
[2009/11/23 22:33:16 | 000,000,000 | ---D | M] -- C:\Program Files\eMule
[2008/12/04 10:28:32 | 000,000,000 | ---D | M] -- C:\Program Files\english4today
[2009/05/25 20:12:06 | 000,000,000 | ---D | M] -- C:\Program Files\Fichiers communs
[2009/01/17 13:02:50 | 000,000,000 | ---D | M] -- C:\Program Files\Free Audio Pack
[2011/02/08 20:54:33 | 000,000,000 | ---D | M] -- C:\Program Files\Google
[2006/09/04 11:12:27 | 000,000,000 | ---D | M] -- C:\Program Files\Google BAE
[2010/07/15 20:39:58 | 000,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2006/09/04 07:58:18 | 000,000,000 | ---D | M] -- C:\Program Files\Intel
[2008/10/22 19:14:42 | 000,000,000 | ---D | M] -- C:\Program Files\InterActual
[2010/08/31 12:20:36 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2006/09/04 11:12:01 | 000,000,000 | ---D | M] -- C:\Program Files\InterVideo
[2006/12/27 16:05:30 | 000,000,000 | ---D | M] -- C:\Program Files\iPod
[2006/10/04 09:28:55 | 000,000,000 | ---D | M] -- C:\Program Files\ISP
[2006/12/27 16:05:36 | 000,000,000 | ---D | M] -- C:\Program Files\iTunes
[2009/01/09 19:55:20 | 000,000,000 | ---D | M] -- C:\Program Files\Java
[2006/12/23 22:03:12 | 000,000,000 | ---D | M] -- C:\Program Files\Kyodai Mahjongg 2006
[2006/09/04 07:59:27 | 000,000,000 | ---D | M] -- C:\Program Files\LanExpress
[2010/08/31 12:13:12 | 000,000,000 | ---D | M] -- C:\Program Files\LG Electronics
[2007/02/14 22:38:06 | 000,000,000 | ---D | M] -- C:\Program Files\licenses
[2008/09/04 21:37:51 | 000,000,000 | ---D | M] -- C:\Program Files\Linksys
[2006/12/29 21:59:28 | 000,000,000 | ---D | M] -- C:\Program Files\Logitech
[2011/02/05 19:00:30 | 000,000,000 | ---D | M] -- C:\Program Files\Malwarebytes' Anti-Malware
[2008/09/16 21:50:25 | 000,000,000 | ---D | M] -- C:\Program Files\Messenger
[2009/02/20 13:10:35 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft
[2006/09/04 06:09:36 | 000,000,000 | ---D | M] -- C:\Program Files\microsoft frontpage
[2008/05/26 18:01:08 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office
[2009/10/06 09:20:05 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office Outlook Connector
[2009/10/07 08:21:54 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Silverlight
[2009/02/20 13:07:45 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2009/02/20 13:09:10 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Sync Framework
[2008/05/26 18:01:04 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Visual Studio
[2008/05/26 17:55:58 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Visual Studio 8
[2008/05/26 18:01:33 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Works
[2008/05/26 18:00:06 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET
[2006/09/04 06:06:48 | 000,000,000 | ---D | M] -- C:\Program Files\Movie Maker
[2011/02/08 20:56:20 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
[2008/09/04 21:46:53 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2008/12/24 12:13:10 | 000,000,000 | ---D | M] -- C:\Program Files\MSN
[2006/09/04 06:04:11 | 000,000,000 | ---D | M] -- C:\Program Files\MSN Gaming Zone
[2006/12/23 20:44:49 | 000,000,000 | ---D | M] -- C:\Program Files\MSXML 4.0
[2008/01/16 16:47:38 | 000,000,000 | ---D | M] -- C:\Program Files\Multimedia Card Reader
[2008/11/26 14:35:23 | 000,000,000 | ---D | M] -- C:\Program Files\MétéoMédia
[2008/07/24 08:14:59 | 000,000,000 | ---D | M] -- C:\Program Files\Nero
[2006/09/04 06:06:55 | 000,000,000 | ---D | M] -- C:\Program Files\NetMeeting
[2008/01/27 19:19:02 | 000,000,000 | ---D | M] -- C:\Program Files\NewBlue
[2008/11/19 21:15:56 | 000,000,000 | ---D | M] -- C:\Program Files\Norton Ghost
[2006/09/04 06:05:03 | 000,000,000 | ---D | M] -- C:\Program Files\Online Services
[2009/03/06 22:58:49 | 000,000,000 | ---D | M] -- C:\Program Files\othello300
[2008/01/22 20:39:41 | 000,000,000 | ---D | M] -- C:\Program Files\Outlook Express
[2009/03/13 14:50:41 | 000,000,000 | ---D | M] -- C:\Program Files\PC Drivers HeadQuarters
[2008/09/15 20:34:15 | 000,000,000 | ---D | M] -- C:\Program Files\Photo Viewer V209
[2009/11/26 13:16:55 | 000,000,000 | ---D | M] -- C:\Program Files\Project64 1.6
[2008/09/19 22:33:43 | 000,000,000 | ---D | M] -- C:\Program Files\QuickTime
[2006/12/23 16:49:29 | 000,000,000 | ---D | M] -- C:\Program Files\Raccourcis de programmes
[2007/02/14 22:38:06 | 000,000,000 | ---D | M] -- C:\Program Files\readmes
[2006/09/04 07:42:37 | 000,000,000 | ---D | M] -- C:\Program Files\Realtek
[2008/09/04 21:42:58 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2006/10/04 09:29:24 | 000,000,000 | ---D | M] -- C:\Program Files\Roxio
[2008/09/17 22:25:04 | 000,000,000 | ---D | M] -- C:\Program Files\ScanSoft
[2011/02/05 12:22:46 | 000,000,000 | ---D | M] -- C:\Program Files\Search Settings
[2006/09/04 06:07:13 | 000,000,000 | ---D | M] -- C:\Program Files\Services en ligne
[2006/10/04 09:31:25 | 000,000,000 | ---D | M] -- C:\Program Files\Skype
[2008/01/17 09:12:25 | 000,000,000 | ---D | M] -- C:\Program Files\Sonic
[2008/10/25 18:35:41 | 000,000,000 | ---D | M] -- C:\Program Files\Sony
[2008/10/25 18:32:23 | 000,000,000 | ---D | M] -- C:\Program Files\Sony Setup
[2008/12/13 16:17:24 | 000,000,000 | ---D | M] -- C:\Program Files\Symantec
[2008/10/26 13:48:34 | 000,000,000 | ---D | M] -- C:\Program Files\Time Date
[2008/01/31 21:34:09 | 000,000,000 | ---D | M] -- C:\Program Files\UBISOFT
[2006/09/04 06:12:59 | 000,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
[2008/11/02 18:24:00 | 000,000,000 | ---D | M] -- C:\Program Files\Veoh Networks
[2008/01/27 19:50:41 | 000,000,000 | ---D | M] -- C:\Program Files\Vstplugins
[2009/11/26 13:18:01 | 000,000,000 | ---D | M] -- C:\Program Files\Vuze
[2008/09/04 21:48:17 | 000,000,000 | ---D | M] -- C:\Program Files\WebEx
[2007/02/03 07:08:20 | 000,000,000 | ---D | M] -- C:\Program Files\Webteh
[2007/01/27 05:12:30 | 000,000,000 | ---D | M] -- C:\Program Files\Winamp
[2010/08/06 21:05:58 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live
[2008/12/23 14:09:25 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live SkyDrive
[2007/01/20 00:42:45 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Connect 2
[2007/01/20 00:42:44 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2006/09/04 06:04:08 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2006/09/04 06:04:43 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Plus
[2006/09/04 06:07:18 | 000,000,000 | -H-D | M] -- C:\Program Files\WindowsUpdate
[2006/09/04 06:09:36 | 000,000,000 | ---D | M] -- C:\Program Files\xerox
[2008/11/26 14:38:48 | 000,000,000 | ---D | M] -- C:\Program Files\Yahoo!
 
 
[color=#A23BEC]< MD5 for: AGP440.SYS  >[/color]
[2004/08/10 07:00:00 | 017,013,719 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2004/08/10 07:00:00 | 017,013,719 | R--- | M] () .cab file -- C:\WINDOWS\I386\sp2.cab:AGP440.sys
[2004/08/03 16:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\SoftwareDistribution\Download\44b6174a4a693136d02d4a7ecd7cbd54\backup\agp440.sys
 
[color=#A23BEC]< MD5 for: ATAPI.SYS  >[/color]
[2004/08/10 07:00:00 | 017,013,719 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2004/08/10 07:00:00 | 017,013,719 | R--- | M] () .cab file -- C:\WINDOWS\I386\sp2.cab:atapi.sys
[2004/08/03 15:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\SoftwareDistribution\Download\44b6174a4a693136d02d4a7ecd7cbd54\backup\atapi.sys
[2004/08/03 15:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004/08/10 07:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\i386\atapi.sys
[2004/08/03 15:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0009\DriverFiles\i386\atapi.sys
 
[color=#A23BEC]< MD5 for: AUTOCHK.EXE  >[/color]
[2004/08/10 07:00:00 | 000,625,152 | R--- | M] (Microsoft Corporation) MD5=D22586E6D84FD19D02410C17060666AF -- C:\WINDOWS\I386\AUTOCHK.EXE
[2004/08/10 07:00:00 | 000,625,152 | ---- | M] (Microsoft Corporation) MD5=D22586E6D84FD19D02410C17060666AF -- C:\WINDOWS\SoftwareDistribution\Download\44b6174a4a693136d02d4a7ecd7cbd54\backup\autochk.exe
[2004/08/10 07:00:00 | 000,625,152 | ---- | M] (Microsoft Corporation) MD5=D22586E6D84FD19D02410C17060666AF -- C:\WINDOWS\system32\autochk.exe
 
[color=#A23BEC]< MD5 for: BEEP.SYS  >[/color]
[2004/08/10 07:00:00 | 000,004,224 | ---- | M] (Microsoft Corporation) MD5=DA1F27D85E0D1525F6621372E7B685E9 -- C:\WINDOWS\system32\drivers\beep.sys
 
[color=#A23BEC]< MD5 for: EVENTLOG.DLL  >[/color]
[2004/08/10 07:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=21E83876A6287F15538EF187D286FE11 -- C:\WINDOWS\system32\eventlog.dll
 
[color=#A23BEC]< MD5 for: EXPLORER.EXE  >[/color]
[2004/08/10 07:00:00 | 001,036,288 | ---- | M] (Microsoft Corporation) MD5=4C33E5B9A6197B6ED215F6CFBA0A2DAA -- C:\WINDOWS\$NtUninstallKB938828$\explorer.exe
[2004/08/10 07:00:00 | 001,036,288 | ---- | M] (Microsoft Corporation) MD5=4C33E5B9A6197B6ED215F6CFBA0A2DAA -- C:\WINDOWS\SoftwareDistribution\Download\44b6174a4a693136d02d4a7ecd7cbd54\backup\explorer.exe
[2007/06/13 08:10:53 | 001,037,312 | ---- | M] (Microsoft Corporation) MD5=B795475444D6D57A572C14B9E1A29839 -- C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
[2007/06/13 08:22:28 | 001,037,312 | ---- | M] (Microsoft Corporation) MD5=D0288319660EDCFED07C7E74C4EA38A5 -- C:\WINDOWS\explorer.exe
[2007/06/13 08:22:28 | 001,037,312 | ---- | M] (Microsoft Corporation) MD5=D0288319660EDCFED07C7E74C4EA38A5 -- C:\WINDOWS\system32\dllcache\explorer.exe
 
[color=#A23BEC]< MD5 for: IMM32.DLL  >[/color]
[2004/08/10 07:00:00 | 000,110,080 | ---- | M] (Microsoft Corporation) MD5=39EE5FAF56260EBB8D77A08F525EBBB4 -- C:\WINDOWS\system32\imm32.dll
 
[color=#A23BEC]< MD5 for: KERNEL32.DLL  >[/color]
[2007/04/16 11:11:08 | 001,051,136 | ---- | M] (Microsoft Corporation) MD5=62E3F0E9ABFCBCEE62C51546F622C455 -- C:\WINDOWS\$hf_mig$\KB935839\SP2QFE\kernel32.dll
[2007/04/16 10:53:11 | 001,049,600 | ---- | M] (Microsoft Corporation) MD5=6F1FE2AE7B22EB9CED1BFF533C9455EA -- C:\WINDOWS\system32\dllcache\kernel32.dll
[2007/04/16 10:53:11 | 001,049,600 | ---- | M] (Microsoft Corporation) MD5=6F1FE2AE7B22EB9CED1BFF533C9455EA -- C:\WINDOWS\system32\kernel32.dll
[2004/08/10 07:00:00 | 001,048,576 | ---- | M] (Microsoft Corporation) MD5=7830E20C74611281B1BDAE5888CD50F5 -- C:\WINDOWS\$NtUninstallKB917422$\kernel32.dll
[2006/07/05 05:56:38 | 001,049,088 | ---- | M] (Microsoft Corporation) MD5=CE4AF1FA47A29ADF97CB107775CE395C -- C:\WINDOWS\$NtUninstallKB935839$\kernel32.dll
[2006/07/05 05:56:38 | 001,049,088 | ---- | M] (Microsoft Corporation) MD5=CE4AF1FA47A29ADF97CB107775CE395C -- C:\WINDOWS\SoftwareDistribution\Download\44b6174a4a693136d02d4a7ecd7cbd54\backup\kernel32.dll
[2006/07/05 05:58:13 | 001,050,112 | ---- | M] (Microsoft Corporation) MD5=FB85EF2A6713E3A58A497E093626B93C -- C:\WINDOWS\$hf_mig$\KB917422\SP2QFE\kernel32.dll
 
[color=#A23BEC]< MD5 for: MSWSOCK.DLL  >[/color]
[2004/08/10 07:00:00 | 000,247,808 | ---- | M] (Microsoft Corporation) MD5=CCDD3433F3C3BD0D8502B38FD155B2F0 -- C:\WINDOWS\system32\mswsock.dll
 
[color=#A23BEC]< MD5 for: NDIS.SYS  >[/color]
[2004/08/10 07:00:00 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\SoftwareDistribution\Download\44b6174a4a693136d02d4a7ecd7cbd54\backup\ndis.sys
[2004/08/10 07:00:00 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\system32\dllcache\ndis.sys
[2004/08/10 07:00:00 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\system32\drivers\ndis.sys
 
[color=#A23BEC]< MD5 for: NETLOGON.DLL  >[/color]
[2004/08/10 07:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=FAF07FDCDE76000621A28D19F8E2E8EB -- C:\WINDOWS\system32\netlogon.dll
 
[color=#A23BEC]< MD5 for: NTFS.SYS  >[/color]
[2007/02/09 06:23:36 | 000,574,976 | ---- | M] (Microsoft Corporation) MD5=05AB81909514BFD69CBB1F2C147CF6B9 -- C:\WINDOWS\$hf_mig$\KB930916\SP2QFE\ntfs.sys
[2007/02/09 06:10:35 | 000,574,464 | ---- | M] (Microsoft Corporation) MD5=19A811EF5F1ED5C926A028CE107FF1AF -- C:\WINDOWS\system32\dllcache\ntfs.sys
[2007/02/09 06:10:35 | 000,574,464 | ---- | M] (Microsoft Corporation) MD5=19A811EF5F1ED5C926A028CE107FF1AF -- C:\WINDOWS\system32\drivers\ntfs.sys
[2004/08/10 07:00:00 | 000,574,592 | ---- | M] (Microsoft Corporation) MD5=B78BE402C3F63DD55521F73876951CDD -- C:\WINDOWS\$NtUninstallKB930916$\ntfs.sys
[2004/08/10 07:00:00 | 000,574,592 | R--- | M] (Microsoft Corporation) MD5=B78BE402C3F63DD55521F73876951CDD -- C:\WINDOWS\I386\NTFS.SYS
[2004/08/10 07:00:00 | 000,574,592 | ---- | M] (Microsoft Corporation) MD5=B78BE402C3F63DD55521F73876951CDD -- C:\WINDOWS\SoftwareDistribution\Download\44b6174a4a693136d02d4a7ecd7cbd54\backup\ntfs.sys
 
[color=#A23BEC]< MD5 for: NTMSSVC.DLL  >[/color]
[2004/08/10 07:00:00 | 000,438,272 | ---- | M] (Microsoft Corporation) MD5=3F82A4226289510DF300813B9B87F0E5 -- C:\WINDOWS\system32\dllcache\ntmssvc.dll
[2004/08/10 07:00:00 | 000,438,272 | ---- | M] (Microsoft Corporation) MD5=3F82A4226289510DF300813B9B87F0E5 -- C:\WINDOWS\system32\ntmssvc.dll
 
[color=#A23BEC]< MD5 for: PROQUOTA.EXE  >[/color]
[2004/08/10 07:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=B016A243838BF7DA762807D88470D046 -- C:\WINDOWS\SoftwareDistribution\Download\44b6174a4a693136d02d4a7ecd7cbd54\backup\proquota.exe
[2004/08/10 07:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=B016A243838BF7DA762807D88470D046 -- C:\WINDOWS\system32\dllcache\proquota.exe
[2004/08/10 07:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=B016A243838BF7DA762807D88470D046 -- C:\WINDOWS\system32\proquota.exe
 
[color=#A23BEC]< MD5 for: QMGR.DLL  >[/color]
[2004/08/10 07:00:00 | 000,382,464 | ---- | M] (Microsoft Corporation) MD5=87424817F82CF6A7F55DAC01A20111A3 -- C:\WINDOWS\system32\qmgr.dll
 
[color=#A23BEC]< MD5 for: SCECLI.DLL  >[/color]
[2004/08/10 07:00:00 | 000,186,368 | ---- | M] (Microsoft Corporation) MD5=DEC0397F35D027874804EC72979D03CC -- C:\WINDOWS\system32\scecli.dll
 
[color=#A23BEC]< MD5 for: SFCFILES.DLL  >[/color]
[2004/08/10 07:00:00 | 001,548,288 | ---- | M] (Microsoft Corporation) MD5=ACF04FB3448D2C2CD3A851C138EC8AB6 -- C:\WINDOWS\SoftwareDistribution\Download\44b6174a4a693136d02d4a7ecd7cbd54\backup\sfcfiles.dll
[2004/08/10 07:00:00 | 001,548,288 | ---- | M] (Microsoft Corporation) MD5=ACF04FB3448D2C2CD3A851C138EC8AB6 -- C:\WINDOWS\system32\sfcfiles.dll
 
[color=#A23BEC]< MD5 for: SPOOLSV.EXE  >[/color]
[2005/06/10 19:17:13 | 000,057,856 | ---- | M] (Microsoft Corporation) MD5=AD3D9D191AEA7B5445FE1D82FFBB4788 -- C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
[2004/08/10 07:00:00 | 000,057,856 | ---- | M] (Microsoft Corporation) MD5=B4EF928E4FAD79364A80ACBA6D999934 -- C:\WINDOWS\$NtUninstallKB896423$\spoolsv.exe
[2005/06/10 18:53:32 | 000,057,856 | ---- | M] (Microsoft Corporation) MD5=DA81EC57ACD4CDC3D4C51CF3D409AF9F -- C:\WINDOWS\SoftwareDistribution\Download\44b6174a4a693136d02d4a7ecd7cbd54\backup\spoolsv.exe
[2005/06/10 18:53:32 | 000,057,856 | ---- | M] (Microsoft Corporation) MD5=DA81EC57ACD4CDC3D4C51CF3D409AF9F -- C:\WINDOWS\system32\spoolsv.exe
 
[color=#A23BEC]< MD5 for: SVCHOST.EXE  >[/color]
[2004/08/10 07:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=1BD6C2F707A275CB7C16FD99FE0F31CA -- C:\WINDOWS\SoftwareDistribution\Download\44b6174a4a693136d02d4a7ecd7cbd54\backup\svchost.exe
[2004/08/10 07:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=1BD6C2F707A275CB7C16FD99FE0F31CA -- C:\WINDOWS\system32\svchost.exe
 
[color=#A23BEC]< MD5 for: TERMSRV.DLL  >[/color]
[2005/03/10 02:50:38 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=70921DE4C83652DC301A05F0CC46C985 -- C:\WINDOWS\system32\termsrv.dll
[2004/08/10 07:00:00 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=7D521B8CF926459E270D18C559323815 -- C:\WINDOWS\$NtUninstallKB895961$\termsrv.dll
 
[color=#A23BEC]< MD5 for: USERINIT.EXE  >[/color]
[2004/08/10 07:00:00 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=D6D65EA32B190401B57EDB6706F29669 -- C:\WINDOWS\SoftwareDistribution\Download\44b6174a4a693136d02d4a7ecd7cbd54\backup\userinit.exe
[2004/08/10 07:00:00 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=D6D65EA32B190401B57EDB6706F29669 -- C:\WINDOWS\system32\userinit.exe
 
[color=#A23BEC]< MD5 for: WINLOGON.EXE  >[/color]
[2004/08/13 18:07:56 | 000,506,880 | ---- | M] (Microsoft Corporation) MD5=1D5B0B4D441F8543B0E899ADADB83356 -- C:\WINDOWS\system32\winlogon.exe
[2004/08/13 18:07:56 | 000,506,880 | ---- | M] (Microsoft Corporation) MD5=1D5B0B4D441F8543B0E899ADADB83356 -- C:\WINDOWS\system32\winlogon.exe
[2004/08/10 07:00:00 | 000,506,368 | ---- | M] (Microsoft Corporation) MD5=D2DE785AEAB0BB8CA4C14A8A199DBE4E -- C:\WINDOWS\$NtUninstallKB307154$\winlogon.exe
[2004/08/10 07:00:00 | 000,506,368 | ---- | M] (Microsoft Corporation) MD5=D2DE785AEAB0BB8CA4C14A8A199DBE4E -- C:\WINDOWS\$NtUninstallKB307154$\winlogon.exe
[2004/08/10 07:00:00 | 000,506,368 | ---- | M] (Microsoft Corporation) MD5=D2DE785AEAB0BB8CA4C14A8A199DBE4E -- C:\WINDOWS\SoftwareDistribution\Download\44b6174a4a693136d02d4a7ecd7cbd54\backup\winlogon.exe
[2004/08/10 07:00:00 | 000,506,368 | ---- | M] (Microsoft Corporation) MD5=D2DE785AEAB0BB8CA4C14A8A199DBE4E -- C:\WINDOWS\SoftwareDistribution\Download\44b6174a4a693136d02d4a7ecd7cbd54\backup\winlogon.exe
 
[color=#A23BEC]< MD5 for: WS2_32.DLL  >[/color]
[2004/08/10 07:00:00 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=BC41F51A39D3B255805FDB759B7814AE -- C:\WINDOWS\system32\ws2_32.dll
 
[color=#A23BEC]< MD5 for: XMLPROV.DLL  >[/color]
[2004/08/10 07:00:00 | 000,129,536 | ---- | M] (Microsoft Corporation) MD5=21056AEF44322C3E2DD5391B6AEFA75A -- C:\WINDOWS\system32\dllcache\xmlprov.dll
[2004/08/10 07:00:00 | 000,129,536 | ---- | M] (Microsoft Corporation) MD5=21056AEF44322C3E2DD5391B6AEFA75A -- C:\WINDOWS\system32\xmlprov.dll
 
[color=#A23BEC]< %systemroot%\*. /mp /s  >[/color]
 
[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles  >[/color]
[2005/07/25 23:39:57 | 001,267,200 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\WINDOWS\system32\comsvcs.dll
[2004/08/10 07:00:00 | 000,380,957 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\WINDOWS\system32\expsrv.dll
 
[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles  >[/color]
 
[color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles  >[/color]
 
[color=#A23BEC]< %systemroot%\System32\config\*.sav  >[/color]
[2006/09/04 07:58:49 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2006/09/04 07:58:49 | 000,663,552 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2006/09/04 07:58:49 | 000,442,368 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav
 
[color=#A23BEC]< c:\$recycle.bin\*.* /s >[/color]

< End of report >


En ce qui concerne le lecteur, c'est encore une chose qui ne fonctionne plus ... Mais ça c'est dû à l'âge du PC !!! Sûrement la lentille. Donc non, je n'ai pas de lecteur sur mon pc malade.