Virus A0011353.exe détecté

[alertevirus]

Virus A0011353.exe détecté

Bonjour !

voila j'ai choper ce virus, je ne sais pas trop comment !

pourriez vous m'aider svp ?

[anthony5151]

Bonjour,


C'est une archive de la restauration du système, ce n'est pas une infection active. On va vérifier s'il n'y a pas autre chose, puis je t'aiderai à supprimer les points de restauration infectés.


Peux-tu utiliser ce logiciel de diagnostic stp :

. Télécharge Random's System Information Tool (RSIT) de random/random, et enregistre le sur ton Bureau.
. Double clique sur RSIT.exe pour lancer l'outil.
. Clique sur ' continue ' à l'écran Disclaimer.
. Si l'outil HijackThis n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
. Une fois le scan terminé, deux rapports vont apparaître : poste les dans deux messages <gras>séparés</gras>

Tutoriel illustré pour t'aider : http://forum-aide-contre-virus.be/tutoriel_RSIT.html

[alertevirus]

je dois partir mais je fait ça dès que je rentre, merci pour ta réponse.

Ps: mon pc rame depuis 2 jours je me demander si ça peut venir de ça !

ex: internet explore met 40 s pour s'ouvrir


je suis sur xp édition familiale

[Del-crosseur]

Mozilla firefox mec 10 fois mieux que internet explorer

[alertevirus]

Del-crosseur

Mozilla firefox mec 10 fois mieux que internet explorer

Mozilla rame pareil !


Logfile of random's system information tool 1.06 (written by random/random)
Run by Propriétaire at 2009-06-11 11:55:02
Microsoft Windows XP Edition familiale Service Pack 3
System drive C: has 78 GB (52%) free of 149 GB
Total RAM: 511 MB (16% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:56:18, on 11/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:Program FilesJavajre6injusched.exe
C:windowssystemhpsysdrv.exe
C:WINDOWSSystem32hphmon05.exe
C:HPKBDKBD.EXE
C:Program FilesMultimedia Card Readershwicon2k.exe
C:WINDOWSsystem32 undll32.exe
C:WINDOWSALCXMNTR.EXE
C:Program FilesHPHP Software UpdateHPWuSchd2.exe
C:WINDOWSsystem32spooldriversw32x863hpztsb11.exe
C:Program FilesHPhpcoretechhpcmpmgr.exe
C:WINDOWSsystem32hphmon06.exe
C:Program FilesG DATAInternetSecurityFirewallGDFirewallTray.exe
C:Program FilesG DATAInternetSecurityAVKTrayAVKTray.exe
C:Program FilesWindows LiveMessengermsnmsgr.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesSkypePhoneSkype.exe
C:Program FilesHPDigital Imaginginhpqtra08.exe
C:Program FilesIncrediMailinIMApp.exe
C:Program FilesFichiers communsG DATAAVKProxyAVKProxy.exe
C:Program FilesG DATAInternetSecurityAVKAVKService.exe
C:Program FilesG DATAInternetSecurityAVKAVKWCtl.exe
C:Program FilesJavajre6injqs.exe
C:WINDOWSSystem32
vsvc32.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesTeamViewerVersion4TeamViewer_Service.exe
C:Program FilesTeamViewerVersion4TeamViewer.exe
C:WINDOWSsystem32HPZipm12.exe
C:Program FilesSkypePlugin ManagerskypePM.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesWindows LiveContactswlcomm.exe
C:Program FilesG DATAInternetSecurityFirewallGDFwSvc.exe
C:Program FilesG DATAInternetSecurityAVKAVK.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Documents and SettingsPropriétaireBureauRSIT.exe
C:Program Files rend microPropriétaire.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://fr10.hpwis.com/
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://srch-fr10.hpwis.com/
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://srch-fr10.hpwis.com/
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://srch-fr10.hpwis.com/
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.fr/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://srch-fr10.hpwis.com/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://fr10.hpwis.com/
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:Program FilesTechSmithSnagIt 7SnagItBHO.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesFichiers communsMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:Program FilesHPDigital Imaginginhpdtlk02.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:Program FilesTechSmithSnagIt 7SnagItIEAddin.dll
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre6injusched.exe"
O4 - HKLM..Run: [hpsysdrv] c:windowssystemhpsysdrv.exe
O4 - HKLM..Run: [HPHUPD05] c:Program FilesHP{45B6180B-DCAB-4093-8EE8-6164457517F0}hphupd05.exe
O4 - HKLM..Run: [HPHmon05] C:WINDOWSSystem32hphmon05.exe
O4 - HKLM..Run: [KBD] C:HPKBDKBD.EXE
O4 - HKLM..Run: [UpdateManager] "C:Program FilesFichiers communsSonicUpdate Managersgtray.exe" /r
O4 - HKLM..Run: [Recguard] C:WINDOWSSMINSTRECGUARD.EXE
O4 - HKLM..Run: [VTTimer] VTTimer.exe
O4 - HKLM..Run: [PS2] C:WINDOWSsystem32ps2.exe
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM..Run: [Sunkist2k] C:Program FilesMultimedia Card Readershwicon2k.exe
O4 - HKLM..Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [HP Software Update] "c:Program FilesHPHP Software UpdateHPWuSchd2.exe"
O4 - HKLM..Run: [HPDJ Taskbar Utility] C:WINDOWSsystem32spooldriversw32x863hpztsb11.exe
O4 - HKLM..Run: [HPHUPD06] c:Program FilesHP{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}hphupd06.exe
O4 - HKLM..Run: [HP Component Manager] "C:Program FilesHPhpcoretechhpcmpmgr.exe"
O4 - HKLM..Run: [HPHmon06] C:WINDOWSsystem32hphmon06.exe
O4 - HKLM..Run: [GDFirewallTray] C:Program FilesG DATAInternetSecurityFirewallGDFirewallTray.exe
O4 - HKLM..Run: [G DATA AntiVirus Trayapplication] C:Program FilesG DATAInternetSecurityAVKTrayAVKTray.exe
O4 - HKCU..Run: [IncrediMail] C:Program FilesIncrediMailinIncMail.exe /c
O4 - HKCU..Run: [msnmsgr] "C:Program FilesWindows LiveMessengermsnmsgr.exe" /background
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [Skype] "C:Program FilesSkypePhoneSkype.exe" /nosplash /minimized
O4 - HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSSystem32CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSSystem32CTFMON.EXE (User 'SERVICE RESEAU')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:Program FilesFichiers communsAdobeCalibrationAdobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:Program FilesHPDigital Imaginginhpqtra08.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 3266065671
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:PROGRA~1FICHIE~1SkypeSKYPE4~1.DLL
O23 - Service: Adobe LM Service - Unknown owner - C:Program FilesFichiers communsAdobe Systems SharedServiceAdobelmsvc.exe
O23 - Service: G DATA AntiVirus Proxy (AVKProxy) - G DATA Software AG - C:Program FilesFichiers communsG DATAAVKProxyAVKProxy.exe
O23 - Service: Planificateur G DATA (AVKService) - G DATA Software AG - C:Program FilesG DATAInternetSecurityAVKAVKService.exe
O23 - Service: Gardien d'AntiVirus (AVKWCtl) - G DATA Software AG - C:Program FilesG DATAInternetSecurityAVKAVKWCtl.exe
O23 - Service: Pare-feu personnel G DATA (GDFwSvc) - G DATA Software AG - C:Program FilesG DATAInternetSecurityFirewallGDFwSvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:Program FilesJavajre6injqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSSystem32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:WINDOWSsystem32HPZipm12.exe
O23 - Service: TeamViewer 4 (TeamViewer4) - TeamViewer GmbH - C:Program FilesTeamViewerVersion4TeamViewer_Service.exe

--
End of file - 8354 bytes

======Scheduled tasks folder======

C:WINDOWS asksConnexion Facile à Internet.job
C:WINDOWS asksHP Usg Daily FY04.job
C:WINDOWS asksUser_Feed_Synchronization-{0DBBAA02-F563-460B-B1E6-E460131B066F}.job

======Registry dump======

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{00C6482D-C502-44C8-8409-FCE54AD9C208}]
HelperObject Class - C:Program FilesTechSmithSnagIt 7SnagItBHO.dll [2004-10-01 49152]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:Program FilesFichiers communsMicrosoft SharedWindows LiveWindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll [2009-06-08 73728]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - Vue HP - c:Program FilesHPDigital Imaginginhpdtlk02.dll [2003-09-03 98304]

{8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - SnagIt - C:Program FilesTechSmithSnagIt 7SnagItIEAddin.dll [2004-10-01 131072]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
"SunJavaUpdateSched"=C:Program FilesJavajre6injusched.exe [2009-06-08 148888]
"hpsysdrv"=c:windowssystemhpsysdrv.exe [1998-05-07 52736]
"HPHUPD05"=c:Program FilesHP{45B6180B-DCAB-4093-8EE8-6164457517F0}hphupd05.exe [2003-08-21 49152]
"HPHmon05"=C:WINDOWSSystem32hphmon05.exe [2003-08-21 483328]
"KBD"=C:HPKBDKBD.EXE [2003-02-11 61440]
"UpdateManager"=C:Program FilesFichiers communsSonicUpdate Managersgtray.exe [2003-08-19 110592]
"Recguard"=C:WINDOWSSMINSTRECGUARD.EXE [2003-11-03 221184]
"VTTimer"=VTTimer.exe []
"PS2"=C:WINDOWSsystem32ps2.exe [2002-10-16 81920]
"NvCplDaemon"=C:WINDOWSSystem32NvCpl.dll [2003-12-05 3022848]
"nwiz"=nwiz.exe /installquiet /keeploaded /nodetect []
"Sunkist2k"=C:Program FilesMultimedia Card Readershwicon2k.exe [2003-10-29 135168]
"AlcxMonitor"=C:WINDOWSALCXMNTR.EXE [2003-04-03 50176]
"NeroFilterCheck"=C:WINDOWSsystem32NeroCheck.exe [2001-07-09 155648]
"HP Software Update"=c:Program FilesHPHP Software UpdateHPWuSchd2.exe [2004-02-12 49152]
"HPDJ Taskbar Utility"=C:WINDOWSsystem32spooldriversw32x863hpztsb11.exe [2004-04-06 172032]
"HPHUPD06"=c:Program FilesHP{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}hphupd06.exe [2004-07-14 49152]
"HP Component Manager"=C:Program FilesHPhpcoretechhpcmpmgr.exe [2004-05-12 241664]
"HPHmon06"=C:WINDOWSsystem32hphmon06.exe [2004-07-14 659456]
"GDFirewallTray"=C:Program FilesG DATAInternetSecurityFirewallGDFirewallTray.exe [2008-09-09 1037992]
"G DATA AntiVirus Trayapplication"=C:Program FilesG DATAInternetSecurityAVKTrayAVKTray.exe [2008-09-10 996424]

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
"RecordNow!"= []
"IncrediMail"=C:Program FilesIncrediMailinIncMail.exe [2009-04-16 251264]
"msnmsgr"=C:Program FilesWindows LiveMessengermsnmsgr.exe [2009-02-06 3885408]
"ctfmon.exe"=C:WINDOWSsystem32ctfmon.exe [2008-04-14 15360]
"Skype"=C:Program FilesSkypePhoneSkype.exe [2008-11-07 21633320]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftshared toolsmsconfigstartupfolderC:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk]
C:PROGRA~1HPDIGITA~1inhpqtra08.exe [2004-05-28 241664]

C:Documents and SettingsAll UsersMenu DémarrerProgrammesDémarrage
Adobe Gamma Loader.lnk - C:Program FilesFichiers communsAdobeCalibrationAdobe Gamma Loader.exe
HP Digital Imaging Monitor.lnk - C:Program FilesHPDigital Imaginginhpqtra08.exe

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyigfxcui]
C:WINDOWSsystem32igfxsrvc.dll [2003-11-18 323584]

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBoot
etworkUploadMgr]

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
"%windir%system32sessmgr.exe"="%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:Program FilesIncrediMailinIncMail.exe"="C:Program FilesIncrediMailinIncMail.exe:*:Enabled:IncrediMail"
"C:Program FilesIncrediMailinImApp.exe"="C:Program FilesIncrediMailinImApp.exe:*:Enabled:IncrediMail"
"%windir%Network Diagnosticxpnetdiag.exe"="%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:Program FilesWindows LiveMessengerwlcsdk.exe"="C:Program FilesWindows LiveMessengerwlcsdk.exe:*:Enabled:Windows Live Call"
"C:Program FilesWindows LiveMessengermsnmsgr.exe"="C:Program FilesWindows LiveMessengermsnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:Program FilesSkypePhoneSkype.exe"="C:Program FilesSkypePhoneSkype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
"%windir%system32sessmgr.exe"="%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%Network Diagnosticxpnetdiag.exe"="%windir%Network Diagnosticxpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:Program FilesWindows LiveMessengerwlcsdk.exe"="C:Program FilesWindows LiveMessengerwlcsdk.exe:*:Enabled:Windows Live Call"
"C:Program FilesWindows LiveMessengermsnmsgr.exe"="C:Program FilesWindows LiveMessengermsnmsgr.exe:*:Enabled:Windows Live Messenger"

======List of files/folders created in the last 1 months======

2009-06-11 11:55:15 ----D---- C:Program Files rend micro
2009-06-11 11:55:02 ----D---- C: sit
2009-06-10 12:17:40 ----HDC---- C:WINDOWS$NtUninstallKB961501$
2009-06-10 12:17:25 ----HDC---- C:WINDOWS$NtUninstallKB969898$
2009-06-10 12:14:02 ----HDC---- C:WINDOWS$NtUninstallKB970238$
2009-06-10 12:13:35 ----HDC---- C:WINDOWS$NtUninstallKB968537$
2009-06-08 08:55:48 ----A---- C:WINDOWSsystem32javaws.exe
2009-06-08 08:55:48 ----A---- C:WINDOWSsystem32deploytk.dll
2009-06-08 08:55:47 ----A---- C:WINDOWSsystem32javaw.exe
2009-06-08 08:55:47 ----A---- C:WINDOWSsystem32java.exe
2009-06-04 22:07:11 ----D---- C:Documents and SettingsPropriétaireApplication DataskypePM
2009-06-04 22:02:57 ----D---- C:Documents and SettingsPropriétaireApplication DataSkype
2009-06-04 22:01:29 ----D---- C:Program FilesSkype
2009-06-04 22:01:28 ----D---- C:Program FilesFichiers communsSkype
2009-06-04 22:01:02 ----D---- C:Documents and SettingsAll UsersApplication DataSkype
2009-06-04 20:43:09 ----D---- C:Program FilesFichiers communsG DATA
2009-06-04 20:40:39 ----D---- C:Documents and SettingsPropriétaireApplication DataArcSoft
2009-06-04 20:38:16 ----D---- C:Program FilesFichiers communsArcSoft
2009-06-04 20:38:14 ----A---- C:WINDOWSsystem32unicows.dll
2009-06-04 20:38:13 ----D---- C:Program FilesHercules
2009-06-04 20:38:13 ----A---- C:WINDOWSPCDLIB32.DLL
2009-06-04 20:37:02 ----A---- C:WINDOWSsystem32vfwwdm32.dll
2009-06-04 20:35:31 ----N---- C:WINDOWSsystem32ov530usd.dll
2009-06-04 20:35:31 ----N---- C:WINDOWSsystem32ov530ext.dll
2009-06-04 20:35:31 ----N---- C:WINDOWSov530dib.dll
2009-06-04 20:35:31 ----D---- C:WINDOWSOvtCam
2009-06-04 20:07:03 ----D---- C:Program FilesG DATA
2009-06-04 20:07:03 ----D---- C:Documents and SettingsAll UsersApplication DataG DATA
2009-06-01 22:30:05 ----HD---- C:Config.Msi
2009-05-28 16:39:00 ----D---- C:Documents and SettingsPropriétaireApplication DataMalwarebytes
2009-05-28 16:38:55 ----D---- C:Program FilesMalwarebytes' Anti-Malware
2009-05-28 16:38:55 ----D---- C:Documents and SettingsAll UsersApplication DataMalwarebytes
2009-05-28 16:33:16 ----D---- C:Program FilesWindows Live Safety Center
2009-05-28 08:45:32 ----HDC---- C:WINDOWS$NtUninstallKB961503$
2009-05-28 08:37:17 ----A---- C:WINDOWSsystem32muweb.dll
2009-05-28 08:37:17 ----A---- C:WINDOWSsystem32mucltui.dll.mui
2009-05-28 08:37:17 ----A---- C:WINDOWSsystem32mucltui.dll
2009-05-25 23:25:07 ----D---- C:WINDOWSI386
2009-05-25 23:20:35 ----RD---- C:Program Files
2009-05-25 23:20:23 ----RSD---- C:WINDOWSassembly
2009-05-25 23:20:15 ----RD---- C:WINDOWSOffline Web Pages
2009-05-25 23:19:47 ----RSHDC---- C:WINDOWSsystem32dllcache
2009-05-25 21:06:17 ----A---- C:WINDOWSNeroDigital.ini
2009-05-25 20:34:54 ----D---- C:WINDOWSSun
2009-05-25 20:06:45 ----D---- C:Program FilesMicrosoft
2009-05-25 20:06:29 ----D---- C:Program FilesWindows Live SkyDrive
2009-05-25 20:06:07 ----D---- C:Program FilesWindows Live
2009-05-25 20:01:53 ----D---- C:Program FilesFichiers communsWindows Live
2009-05-25 19:55:06 ----D---- C:WINDOWSie8updates
2009-05-25 19:54:50 ----D---- C:WINDOWSWBEM
2009-05-25 19:53:46 ----HDC---- C:WINDOWSie8
2009-05-25 19:52:14 ----D---- C:Program FilesMSXML 4.0
2009-05-25 19:51:58 ----HDC---- C:WINDOWS$NtUninstallKB963027$
2009-05-25 19:51:52 ----HDC---- C:WINDOWS$NtUninstallKB959426$
2009-05-25 19:51:47 ----HDC---- C:WINDOWS$NtUninstallKB960803$
2009-05-25 19:51:41 ----HDC---- C:WINDOWS$NtUninstallKB952004$
2009-05-25 19:51:30 ----HDC---- C:WINDOWS$NtUninstallKB956572$
2009-05-25 19:51:24 ----HDC---- C:WINDOWS$NtUninstallKB961373$
2009-05-25 19:51:18 ----HDC---- C:WINDOWS$NtUninstallKB923561$
2009-05-25 19:51:11 ----HDC---- C:WINDOWS$NtUninstallKB967715$
2009-05-25 19:51:06 ----HDC---- C:WINDOWS$NtUninstallKB958690$
2009-05-25 19:51:02 ----HDC---- C:WINDOWS$NtUninstallKB938464-v2$
2009-05-25 19:50:57 ----HDC---- C:WINDOWS$NtUninstallKB960225$
2009-05-25 19:50:52 ----HDC---- C:WINDOWS$NtUninstallKB960715$
2009-05-25 19:50:48 ----HDC---- C:WINDOWS$NtUninstallKB958687$
2009-05-25 19:50:43 ----HDC---- C:WINDOWS$NtUninstallKB956803$
2009-05-25 19:50:38 ----HDC---- C:WINDOWS$NtUninstallKB952069_WM9$
2009-05-25 19:50:34 ----HDC---- C:WINDOWS$NtUninstallKB955839$
2009-05-25 19:50:29 ----HDC---- C:WINDOWS$NtUninstallKB956802$
2009-05-25 19:50:24 ----HDC---- C:WINDOWS$NtUninstallKB954600$
2009-05-25 19:50:20 ----HDC---- C:WINDOWS$NtUninstallKB923723$
2009-05-25 19:50:09 ----HDC---- C:WINDOWS$NtUninstallKB957097$
2009-05-25 19:50:04 ----HDC---- C:WINDOWS$NtUninstallKB954459$
2009-05-25 19:49:59 ----HDC---- C:WINDOWS$NtUninstallKB955069$
2009-05-25 19:49:54 ----HDC---- C:WINDOWS$NtUninstallKB958644$
2009-05-25 19:49:49 ----HDC---- C:WINDOWS$NtUninstallKB952287$
2009-05-25 19:49:44 ----HDC---- C:WINDOWS$NtUninstallKB950974$
2009-05-25 19:49:40 ----HDC---- C:WINDOWS$NtUninstallKB952954$
2009-05-25 19:49:35 ----HDC---- C:WINDOWS$NtUninstallKB946648$
2009-05-25 19:49:30 ----HDC---- C:WINDOWS$NtUninstallKB951066$
2009-05-25 19:49:25 ----HDC---- C:WINDOWS$NtUninstallKB951748$
2009-05-25 19:49:19 ----HDC---- C:WINDOWS$NtUninstallKB951978$
2009-05-25 19:49:14 ----HDC---- C:WINDOWS$NtUninstallKB951376-v2$
2009-05-25 19:49:09 ----HDC---- C:WINDOWS$NtUninstallKB923689$
2009-05-25 19:48:55 ----HDC---- C:WINDOWS$NtUninstallKB950762$
2009-05-25 19:48:51 ----HDC---- C:WINDOWS$NtUninstallKB950760$
2009-05-25 19:48:37 ----HDC---- C:WINDOWS$NtUninstallKB941569$
2009-05-25 19:39:12 ----D---- C:WINDOWSPrefetch
2009-05-25 19:34:43 ----D---- C:WINDOWSsystem32fr-fr
2009-05-25 19:34:41 ----D---- C:WINDOWSsystem32fr
2009-05-25 19:34:41 ----D---- C:WINDOWSl2schemas
2009-05-25 19:30:55 ----D---- C:WINDOWS
etwork diagnostic
2009-05-25 19:16:51 ----A---- C:WINDOWSsystem32xmllite.dll
2009-05-25 19:16:49 ----N---- C:WINDOWSsystem32wmphoto.dll
2009-05-25 19:16:48 ----N---- C:WINDOWSsystem32wlanapi.dll
2009-05-25 19:16:47 ----N---- C:WINDOWSsystem32windowscodecsext.dll
2009-05-25 19:16:47 ----N---- C:WINDOWSsystem32windowscodecs.dll
2009-05-25 19:16:43 ----N---- C:WINDOWSsystem32 zchange.exe
2009-05-25 19:16:43 ----N---- C:WINDOWSsystem32 spkg.dll
2009-05-25 19:16:42 ----N---- C:WINDOWSsystem32 sgqec.dll
2009-05-25 19:16:37 ----N---- C:WINDOWSsystem32setupn.exe
2009-05-25 19:16:36 ----N---- C:WINDOWSsystem32 httpaa.dll
2009-05-25 19:16:35 ----N---- C:WINDOWSsystem32 asqec.dll
2009-05-25 19:16:34 ----N---- C:WINDOWSsystem32qutil.dll
2009-05-25 19:16:34 ----N---- C:WINDOWSsystem32qcliprov.dll
2009-05-25 19:16:34 ----N---- C:WINDOWSsystem32qagentrt.dll
2009-05-25 19:16:34 ----N---- C:WINDOWSsystem32qagent.dll
2009-05-25 19:16:33 ----N---- C:WINDOWSsystem32photometadatahandler.dll
2009-05-25 19:16:32 ----N---- C:WINDOWSsystem32onex.dll
2009-05-25 19:16:27 ----N---- C:WINDOWSsystem32
apstat.exe
2009-05-25 19:16:27 ----N---- C:WINDOWSsystem32
apmontr.dll
2009-05-25 19:16:26 ----N---- C:WINDOWSsystem32
apipsec.dll
2009-05-25 19:16:26 ----N---- C:WINDOWSsystem32msxml6r.dll
2009-05-25 19:16:26 ----A---- C:WINDOWSsystem32msxml6.dll
2009-05-25 19:16:25 ----N---- C:WINDOWSsystem32msshavmsg.dll
2009-05-25 19:16:25 ----N---- C:WINDOWSsystem32mssha.dll
2009-05-25 19:16:17 ----N---- C:WINDOWSsystem32mmcperf.exe
2009-05-25 19:16:17 ----N---- C:WINDOWSsystem32mmcfxcommon.dll
2009-05-25 19:16:17 ----N---- C:WINDOWSsystem32mmcex.dll
2009-05-25 19:16:16 ----N---- C:WINDOWSsystem32microsoft.managementconsole.dll
2009-05-25 19:16:11 ----N---- C:WINDOWSsystem32l2gpstore.dll
2009-05-25 19:16:11 ----N---- C:WINDOWSsystem32kmsvc.dll
2009-05-25 19:16:10 ----N---- C:WINDOWSsystem32kbdpash.dll
2009-05-25 19:16:10 ----N---- C:WINDOWSsystem32kbdnepr.dll
2009-05-25 19:16:10 ----N---- C:WINDOWSsystem32kbdiultn.dll
2009-05-25 19:16:10 ----N---- C:WINDOWSsystem32kbdbhc.dll
2009-05-25 19:16:04 ----A---- C:WINDOWS05184_.tmp
2009-05-25 19:16:03 ----N---- C:WINDOWSsystem32eapsvc.dll
2009-05-25 19:16:03 ----N---- C:WINDOWSsystem32eapqec.dll
2009-05-25 19:16:03 ----N---- C:WINDOWSsystem32eappprxy.dll
2009-05-25 19:16:03 ----N---- C:WINDOWSsystem32eapphost.dll
2009-05-25 19:16:03 ----N---- C:WINDOWSsystem32eappgnui.dll
2009-05-25 19:16:03 ----N---- C:WINDOWSsystem32eappcfg.dll
2009-05-25 19:16:03 ----N---- C:WINDOWSsystem32eapp3hst.dll
2009-05-25 19:16:03 ----N---- C:WINDOWSsystem32eapolqec.dll
2009-05-25 19:16:01 ----N---- C:WINDOWSsystem32dot3ui.dll
2009-05-25 19:16:01 ----N---- C:WINDOWSsystem32dot3svc.dll
2009-05-25 19:16:01 ----N---- C:WINDOWSsystem32dot3msm.dll
2009-05-25 19:16:01 ----N---- C:WINDOWSsystem32dot3gpclnt.dll
2009-05-25 19:16:01 ----N---- C:WINDOWSsystem32dot3dlg.dll
2009-05-25 19:16:01 ----N---- C:WINDOWSsystem32dot3cfg.dll
2009-05-25 19:16:01 ----N---- C:WINDOWSsystem32dot3api.dll
2009-05-25 19:16:01 ----N---- C:WINDOWSsystem32dimsroam.dll
2009-05-25 19:16:01 ----N---- C:WINDOWSsystem32dimsntfy.dll
2009-05-25 19:16:00 ----N---- C:WINDOWSsystem32dhcpqec.dll
2009-05-25 19:15:59 ----N---- C:WINDOWSsystem32credssp.dll
2009-05-25 19:15:57 ----N---- C:WINDOWSsystem32itsprx4.dll
2009-05-25 19:15:57 ----N---- C:WINDOWSsystem32azroles.dll
2009-05-25 19:15:52 ----N---- C:WINDOWSsystem32aaclient.dll
2009-05-25 18:59:53 ----HDC---- C:WINDOWS$NtUninstallKB899587$
2009-05-25 18:59:48 ----HDC---- C:WINDOWS$NtUninstallKB924191$
2009-05-25 18:59:43 ----HDC---- C:WINDOWS$NtUninstallKB922819$
2009-05-25 18:59:37 ----HDC---- C:WINDOWS$NtUninstallKB885835$
2009-05-25 18:59:33 ----HDC---- C:WINDOWS$NtUninstallKB885836$
2009-05-25 18:59:28 ----HDC---- C:WINDOWS$NtUninstallKB923414$
2009-05-25 18:59:23 ----HDC---- C:WINDOWS$NtUninstallKB921883$
2009-05-25 18:59:14 ----HDC---- C:WINDOWS$NtUninstallKB917734_WMP9$
2009-05-25 18:58:55 ----HDC---- C:WINDOWS$NtUninstallKB911927$
2009-05-25 18:58:49 ----HDC---- C:WINDOWS$NtUninstallKB922616$
2009-05-25 18:58:21 ----HDC---- C:WINDOWS$NtUninstallKB901017$
2009-05-25 18:57:00 ----HDC---- C:WINDOWS$NtUninstallKB899591$
2009-05-25 18:55:27 ----HDC---- C:WINDOWS$NtUninstallKB920685$
2009-05-25 18:54:05 ----HDC---- C:WINDOWS$NtUninstallKB896424$
2009-05-25 18:52:35 ----HDC---- C:WINDOWS$NtUninstallKB893756$
2009-05-25 18:50:58 ----HDC---- C:WINDOWS$NtUninstallKB911280$
2009-05-25 18:49:32 ----HDC---- C:WINDOWS$NtUninstallKB911562$
2009-05-25 18:48:11 ----HDC---- C:WINDOWS$NtUninstallKB896423$
2009-05-25 18:46:47 ----HDC---- C:WINDOWS$NtUninstallKB873339$
2009-05-25 18:45:32 ----HDC---- C:WINDOWS$NtUninstallKB924496$
2009-05-25 18:43:47 ----HDC---- C:WINDOWS$NtUninstallKB921398$
2009-05-25 18:42:12 ----HDC---- C:WINDOWS$NtUninstallKB896358$
2009-05-25 18:40:39 ----HDC---- C:WINDOWS$NtUninstallKB910437$
2009-05-25 18:39:29 ----HDC---- C:WINDOWS$NtUninstallKB898458$
2009-05-25 18:37:46 ----HDC---- C:WINDOWS$NtUninstallKB911564$
2009-05-25 18:36:02 ----HDC---- C:WINDOWS$NtUninstallKB920670$
2009-05-25 18:34:42 ----HDC---- C:WINDOWS$NtUninstallKB891781$
2009-05-25 18:31:24 ----HDC---- C:WINDOWS$NtUninstallKB890046$
2009-05-25 18:29:10 ----HDC---- C:WINDOWS$NtUninstallKB919007$
2009-05-25 18:27:53 ----HDC---- C:WINDOWS$NtUninstallKB914388$
2009-05-25 18:27:01 ----HDC---- C:WINDOWS$NtUninstallKB917344$
2009-05-25 18:26:14 ----HDC---- C:WINDOWS$NtUninstallKB905414$
2009-05-25 18:25:36 ----HDC---- C:WINDOWS$NtUninstallKB917953$
2009-05-25 18:25:02 ----HDC---- C:WINDOWS$NtUninstallKB901214$
2009-05-25 18:24:36 ----HDC---- C:WINDOWS$NtUninstallKB923191$
2009-05-25 18:24:17 ----HDC---- C:WINDOWS$NtUninstallKB917422$
2009-05-25 18:24:01 ----HDC---- C:WINDOWS$NtUninstallKB888302$
2009-05-25 18:23:42 ----HDC---- C:WINDOWS$NtUninstallKB900725$
2009-05-25 18:23:19 ----HDC---- C:WINDOWS$NtUninstallKB912919$
2009-05-25 18:20:25 ----A---- C:WINDOWSsystem32MRT.exe
2009-05-25 18:19:32 ----HDC---- C:WINDOWS$NtUninstallKB908531$
2009-05-25 18:18:51 ----HDC---- C:WINDOWS$NtUninstallKB905749$
2009-05-25 18:18:26 ----HDC---- C:WINDOWS$NtUninstallKB913580$
2009-05-25 18:18:20 ----HDC---- C:WINDOWS$NtUninstallKB896428$
2009-05-25 18:18:15 ----HDC---- C:WINDOWS$NtUninstallKB908519$
2009-05-25 18:18:06 ----HDC---- C:WINDOWS$NtUninstallKB920683$
2009-05-25 18:17:59 ----HDC---- C:WINDOWS$NtUninstallKB914389$
2009-05-25 18:17:42 ----HDC---- C:WINDOWS$NtUninstallKB890859$
2009-05-25 18:11:42 ----A---- C:WINDOWSsystem32wmpns.dll
2009-05-25 18:10:49 ----D---- C:WINDOWSpeernet
2009-05-25 18:10:48 ----D---- C:WINDOWSprovisioning
2009-05-25 18:09:15 ----D---- C:WINDOWSServicePackFiles
2009-05-25 18:02:11 ----HDC---- C:WINDOWS$NtServicePackUninstall$
2009-05-25 18:02:08 ----D---- C:WINDOWSEHome
2009-05-25 17:56:57 ----N---- C:WINDOWSsystem32spnpinst.exe
2009-05-25 17:47:37 ----D---- C:Documents and SettingsAll UsersApplication DataWindows Genuine Advantage
2009-05-25 17:44:37 ----D---- C:WINDOWSsystem32PreInstall
2009-05-25 17:44:35 ----A---- C:WINDOWSsystem32spupdsvc.exe
2009-05-25 17:44:34 ----HDC---- C:WINDOWS$NtUninstallKB898461$
2009-05-25 17:44:34 ----HD---- C:WINDOWS$hf_mig$
2009-05-25 17:44:08 ----HDC---- C:WINDOWS$MSI31Uninstall_KB893803v2$
2009-05-25 17:43:48 ----D---- C:WINDOWSsystem32its
2009-05-25 17:43:40 ----HDC---- C:WINDOWS$NtUninstallKB842773$
2009-05-25 17:43:22 ----N---- C:WINDOWSsystem32itsprx3.dll
2009-05-25 17:43:22 ----N---- C:WINDOWSsystem32itsprx2.dll
2009-05-25 17:43:22 ----A---- C:WINDOWSsystem32winhttp.dll
2009-05-25 17:43:22 ----A---- C:WINDOWSsystem32qmgrprxy.dll
2009-05-25 17:41:42 ----A---- C:WINDOWSsystem32wups2.dll
2009-05-25 17:41:42 ----A---- C:WINDOWSsystem32wups.dll
2009-05-25 17:41:42 ----A---- C:WINDOWSsystem32wucltui.dll.mui
2009-05-25 17:41:42 ----A---- C:WINDOWSsystem32wucltui.dll
2009-05-25 17:41:41 ----A---- C:WINDOWSsystem32wuaueng.dll.mui
2009-05-25 17:41:41 ----A---- C:WINDOWSsystem32wuapi.dll.mui
2009-05-25 17:41:41 ----A---- C:WINDOWSsystem32wuapi.dll
2009-05-25 17:41:15 ----D---- C:WINDOWSSoftwareDistribution
2009-05-25 17:24:21 ----D---- C:Documents and SettingsAll UsersApplication DataIM
2009-05-25 17:23:30 ----D---- C:Program FilesIncrediMail
2009-05-25 17:23:30 ----D---- C:Documents and SettingsAll UsersApplication DataIncrediMail
2009-05-25 17:20:55 ----D---- C:Documents and SettingsPropriétaireApplication DataTeamViewer
2009-05-25 17:20:43 ----D---- C:Program FilesTeamViewer
2009-05-25 17:03:45 ----D---- C:Documents and SettingsPropriétaireApplication DataMedia Player Classic
2009-05-25 17:03:43 ----D---- C:Program FilesMedia Player Classic
2009-05-25 16:59:33 ----D---- C:Program FilesFree Audio Pack
2009-05-25 16:59:33 ----A---- C:WINDOWSsystem32MSVCRTD.DLL
2009-05-25 16:59:33 ----A---- C:WINDOWSsystem32MSVCP60D.DLL
2009-05-25 16:58:49 ----D---- C:Program FilesDVDFab HD Decrypter 4
2009-05-25 16:55:17 ----D---- C:Program FilesTechSmith
2009-05-25 16:48:06 ----D---- C:Documents and SettingsAll UsersApplication DataAdobe
2009-05-25 16:46:48 ----D---- C:Documents and SettingsAll UsersApplication DataMacrovision
2009-05-25 16:46:42 ----D---- C:Program FilesFichiers communsAdobe Systems Shared
2009-05-25 16:45:48 ----D---- C:Program FilesFichiers communsAdobe
2009-05-25 16:45:21 ----D---- C:Program FilesAdobe
2009-05-25 16:37:52 ----D---- C:Documents and SettingsPropriétaireApplication DataMozilla
2009-05-25 16:37:30 ----D---- C:Program FilesK-Meleon
2009-05-25 16:35:49 ----D---- C:Program FilesMozilla Firefox
2009-05-25 16:30:56 ----D---- C:Program FilesWinAce
2009-05-25 16:29:22 ----D---- C:Program FilesToniArts
2009-05-25 16:27:08 ----D---- C:Documents and SettingsAll UsersApplication DataSpybot - Search & Destroy
2009-05-25 16:24:50 ----D---- C:Documents and SettingsPropriétaireApplication DataMacromedia
2009-05-25 16:24:50 ----D---- C:Documents and SettingsPropriétaireApplication DataAdobe
2009-05-25 16:22:57 ----N---- C:WINDOWSsystem32pxsfs.dll
2009-05-25 16:22:57 ----N---- C:WINDOWSsystem32pxinsi64.exe
2009-05-25 16:22:57 ----N---- C:WINDOWSsystem32pxinsa64.exe
2009-05-25 16:22:57 ----N---- C:WINDOWSsystem32pxhpinst.exe
2009-05-25 16:22:57 ----N---- C:WINDOWSsystem32pxcpya64.exe
2009-05-25 16:22:57 ----N---- C:WINDOWSsystem32pxafs.dll
2009-05-25 16:22:12 ----D---- C:Program FilesWinamp
2009-05-25 16:20:47 ----RA---- C:WINDOWSsystem32MSXML4a.dll
2009-05-25 16:20:47 ----RA---- C:WINDOWSsystem32hpvcr70.dll
2009-05-25 16:20:47 ----RA---- C:WINDOWSsystem32hpvcp70.dll
2009-05-25 16:20:47 ----RA---- C:WINDOWSsystem32hpvaut32.dll
2009-05-25 16:17:08 ----D---- C:Program FilesDVD Shrink
2009-05-25 16:17:08 ----D---- C:Documents and SettingsAll UsersApplication DataDVD Shrink
2009-05-25 16:14:29 ----A---- C:WINDOWSsystem32TwnLib20.dll
2009-05-25 16:14:28 ----N---- C:WINDOWSsystem32ImagXRA7.dll
2009-05-25 16:14:28 ----N---- C:WINDOWSsystem32ImagXR7.dll
2009-05-25 16:14:28 ----N---- C:WINDOWSsystem32ImagXpr7.dll
2009-05-25 16:14:28 ----N---- C:WINDOWSsystem32ImagX7.dll
2009-05-25 16:14:28 ----D---- C:Program FilesFichiers communsAhead
2009-05-25 16:14:28 ----A---- C:WINDOWSsystem32NeroCheck.exe
2009-05-25 16:14:27 ----D---- C:Program FilesAhead
2009-05-25 16:11:31 ----D---- C:Documents and SettingsPropriétaireApplication DataFastStone
2009-05-25 16:11:25 ----D---- C:Program FilesFastStone Image Viewer
2009-05-25 16:10:09 ----D---- C:DOOMDATA
2009-05-25 16:10:04 ----D---- C:Dos
2009-05-25 15:52:22 ----D---- C: emp
2009-05-25 15:48:31 ----D---- C:WINDOWSpss
2009-05-25 15:48:03 ----RASH---- C:BOOT.BAK
2009-05-25 15:47:59 ----RSHD---- C:cmdcons
2009-05-25 15:47:59 ----A---- C:WINDOWSUPGRADE.TXT
2009-05-25 15:47:58 ----D---- C:WINDOWSsetup.pss
2009-05-25 15:47:38 ----D---- C:WINDOWSsetupupd
2009-05-25 15:43:02 ----D---- C:Program FilesVS Revo Group
2009-05-25 15:42:30 ----SHD---- C:RECYCLER
2009-05-25 15:38:23 ----HDC---- C:WINDOWS$NtUninstallKB828028$
2009-05-25 15:38:01 ----HDC---- C:WINDOWS$NtUninstallKB821431$
2009-05-25 15:37:35 ----A---- C:WINDOWSsystem32IVIresizeW7.dll
2009-05-25 15:37:35 ----A---- C:WINDOWSsystem32IVIresizePX.dll
2009-05-25 15:37:35 ----A---- C:WINDOWSsystem32IVIresizeP6.dll
2009-05-25 15:37:35 ----A---- C:WINDOWSsystem32IVIresizeM6.dll
2009-05-25 15:37:35 ----A---- C:WINDOWSsystem32IVIresizeA6.dll
2009-05-25 15:37:35 ----A---- C:WINDOWSsystem32IVIresize.dll
2009-05-25 15:36:45 ----HDC---- C:WINDOWS$NtUninstallQ331958$
2009-05-25 15:36:02 ----D---- C:Program FilesMultimedia Card Reader
2009-05-25 15:35:57 ----D---- C:WINDOWSDownloaded Installations
2009-05-25 15:35:48 ----A---- C:WINDOWSsystem32
vwrszht.dll
2009-05-25 15:35:48 ----A---- C:WINDOWSsystem32
vwrszhc.dll
2009-05-25 15:35:48 ----A---- C:WINDOWSsystem32
vwrstr.dll
2009-05-25 15:35:48 ----A---- C:WINDOWSsystem32
vwrssv.dll
2009-05-25 15:35:48 ----A---- C:WINDOWSsystem32
vwrsptb.dll
2009-05-25 15:35:48 ----A---- C:WINDOWSsystem32
vwrspt.dll
2009-05-25 15:35:48 ----A---- C:WINDOWSsystem32
vwrsno.dll
2009-05-25 15:35:48 ----A---- C:WINDOWSsystem32
vwrsnl.dll
2009-05-25 15:35:48 ----A---- C:WINDOWSsystem32
vwrsko.dll
2009-05-25 15:35:48 ----A---- C:WINDOWSsystem32
vrszht.dll
2009-05-25 15:35:48 ----A---- C:WINDOWSsystem32
vrszhc.dll
2009-05-25 15:35:48 ----A---- C:WINDOWSsystem32
vrstr.dll
2009-05-25 15:35:48 ----A---- C:WINDOWSsystem32
vrssv.dll
2009-05-25 15:35:48 ----A---- C:WINDOWSsystem32
vrsptb.dll
2009-05-25 15:35:48 ----A---- C:WINDOWSsystem32
vrspt.dll
2009-05-25 15:35:48 ----A---- C:WINDOWSsystem32
vrsno.dll
2009-05-25 15:35:48 ----A---- C:WINDOWSsystem32
vrsnl.dll
2009-05-25 15:35:48 ----A---- C:WINDOWSsystem32
vrsko.dll
2009-05-25 15:35:47 ----D---- C:WINDOWS
view
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
wiz.exe
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vwrsja.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vwrsit.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vwrsfr.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vwrsfi.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vwrses.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vwrseng.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vwrsde.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vwrsda.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vwrsar.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vudisp.exe
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vshell.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vrsja.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vrsit.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vrsfr.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vrsfi.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vrses.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vrseng.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vrsde.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vrsda.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vrsar.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
viewimg.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
view.dll
2009-05-25 15:35:47 ----A---- C:WINDOWSsystem32
vappbar.exe
2009-05-25 15:34:33 ----SHD---- C:System Volume Information

======List of files/folders modified in the last 1 months======

2009-06-11 11:55:41 ----D---- C:WINDOWSTemp
2009-06-10 14:22:23 ----A---- C:WINDOWSSchedLgU.Txt
2009-06-10 12:21:21 ----D---- C:WINDOWS
2009-06-10 12:20:53 ----D---- C:WINDOWSsystem32
2009-06-10 12:18:07 ----HD---- C:WINDOWSinf
2009-06-10 12:18:01 ----D---- C:Program FilesInternet Explorer
2009-06-10 12:17:46 ----D---- C:WINDOWSsystem32CatRoot2
2009-06-10 12:17:43 ----A---- C:WINDOWSimsins.BAK
2009-06-09 11:54:01 ----D---- C:WINDOWSsystem32drivers
2009-06-08 09:00:14 ----SHD---- C:WINDOWSInstaller
2009-06-08 08:54:26 ----D---- C:Program FilesJava
2009-06-04 22:01:28 ----D---- C:Program FilesFichiers communs
2009-06-04 20:38:12 ----HD---- C:Program FilesInstallShield Installation Information
2009-06-04 20:35:31 ----D---- C:WINDOWS wain_32
2009-06-04 19:58:13 ----D---- C:Documents and Settings
2009-06-01 22:34:17 ----SD---- C:WINDOWSTasks
2009-06-01 22:10:54 ----D---- C:WINDOWSsystem32FxsTmp
2009-06-01 22:10:03 ----SD---- C:Documents and SettingsPropriétaireApplication DataMicrosoft
2009-05-31 20:34:18 ----SD---- C:Documents and SettingsAll UsersApplication DataMicrosoft
2009-05-25 23:26:09 ----HD---- C:hp
2009-05-25 23:25:10 ----D---- C:WINDOWSSMINST
2009-05-25 23:24:58 ----D---- C:Program FilesFichiers communsServices
2009-05-25 23:24:49 ----D---- C:WINDOWSsystem32 as
2009-05-25 23:24:40 ----D---- C:WINDOWSsystem32icsxml
2009-05-25 23:24:40 ----D---- C:WINDOWSsystem32ias
2009-05-25 23:23:55 ----D---- C:WINDOWSaddins
2009-05-25 23:23:48 ----D---- C:WINDOWSCursors
2009-05-25 23:23:46 ----HDC---- C:WINDOWS$NtUninstallQ815485$
2009-05-25 23:23:46 ----HDC---- C:WINDOWS$NtUninstallQ814995$
2009-05-25 23:23:46 ----HDC---- C:WINDOWS$NtUninstallq329623$
2009-05-25 23:23:46 ----HDC---- C:WINDOWS$NtUninstallQ329112$
2009-05-25 23:23:46 ----HDC---- C:WINDOWS$NtUninstallKB823182$
2009-05-25 20:06:56 ----D---- C:WINDOWSWinSxS
2009-05-25 20:06:34 ----D---- C:Program FilesFichiers communsMicrosoft Shared
2009-05-25 20:06:12 ----RSD---- C:WINDOWSFonts
2009-05-25 20:05:54 ----D---- C:WINDOWSPCHealth
2009-05-25 20:02:17 ----A---- C:WINDOWSsystem32PerfStringBackup.INI
2009-05-25 19:57:51 ----D---- C:WINDOWSsystem32wbem
2009-05-25 19:57:51 ----D---- C:WINDOWSHelp
2009-05-25 19:57:51 ----D---- C:WINDOWSAppPatch
2009-05-25 19:56:24 ----D---- C:WINDOWSRegistration
2009-05-25 19:54:54 ----D---- C:WINDOWSsystem32config
2009-05-25 19:54:43 ----D---- C:WINDOWSMedia
2009-05-25 19:49:37 ----D---- C:Program FilesMessenger
2009-05-25 19:40:01 ----A---- C:WINDOWSOEWABLog.txt
2009-05-25 19:39:16 ----A---- C:WINDOWSsetuplog.txt
2009-05-25 19:38:46 ----D---- C:WINDOWSsystem32Setup
2009-05-25 19:38:13 ----D---- C:WINDOWSsecurity
2009-05-25 19:37:20 ----D---- C:WINDOWSsystem32CatRoot
2009-05-25 19:35:01 ----D---- C:Program FilesWindows Media Player
2009-05-25 19:34:54 ----D---- C:WINDOWSime
2009-05-25 19:34:43 ----D---- C:WINDOWSsystem32usmt
2009-05-25 19:34:41 ----D---- C:Program FilesMovie Maker
2009-05-25 19:32:29 ----D---- C:WINDOWSsystem32Restore
2009-05-25 19:32:29 ----D---- C:WINDOWSsystem32
pp
2009-05-25 19:32:28 ----D---- C:WINDOWSmsagent
2009-05-25 19:32:27 ----D---- C:WINDOWSsrchasst
2009-05-25 19:32:26 ----D---- C:Program FilesNetMeeting
2009-05-25 19:32:25 ----D---- C:WINDOWSsystem32Com
2009-05-25 19:32:23 ----D---- C:Program FilesWindows NT
2009-05-25 19:32:23 ----D---- C:Program FilesOutlook Express
2009-05-25 19:32:20 ----D---- C:Program FilesFichiers communsSystem
2009-05-25 19:32:08 ----D---- C:WINDOWSsystem32oobe
2009-05-25 19:32:07 ----D---- C:WINDOWSsystem
2009-05-25 19:30:05 ----D---- C:WINDOWSsystem32ReinstallBackups
2009-05-25 19:04:57 ----D---- C:WINDOWSDebug
2009-05-25 18:11:43 ----RASH---- C:oot.ini
2009-05-25 18:11:05 ----D---- C:WINDOWSsystem32mui
2009-05-25 18:07:22 ----RD---- C:WINDOWSWeb
2009-05-25 18:07:11 ----RASH---- C:NTDETECT.COM
2009-05-25 17:41:15 ----SD---- C:WINDOWSDownloaded Program Files
2009-05-25 16:29:13 ----D---- C:Program FilesFichiers communsInstallShield
2009-05-25 16:22:52 ----D---- C:WINDOWSRegisteredPackages
2009-05-25 16:20:45 ----D---- C:Program FilesHP
2009-05-25 15:49:17 ----A---- C:WINDOWSwin.ini
2009-05-25 15:49:17 ----A---- C:WINDOWSsystem.ini
2009-05-25 15:44:36 ----D---- C:Documents and SettingsAll UsersApplication DataSymantec
2009-05-25 15:41:28 ----D---- C:Program FilesEasy Internet signup
2009-05-25 15:38:41 ----D---- C:sysprep
2009-05-25 15:38:26 ----D---- C:WINDOWSCREATOR
2009-05-25 15:37:12 ----D---- C:Program FilesInterVideo
2009-05-25 15:37:05 ----D---- C:Program FilesFichiers communsInterVideo
2009-05-13 07:04:17 ----A---- C:WINDOWSsystem32wininet.dll
2009-05-13 07:04:17 ----A---- C:WINDOWSsystem32mshtml.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AFS2K;AFS2k; C:WINDOWSsystem32driversAFS2K.sys [2004-01-02 43488]
R1 GRD;G DATA Rootkit Detector Driver; ??C:WINDOWSsystem32driversGRD.sys []
R1 intelppm;Pilote de processeur Intel; C:WINDOWSSystem32DRIVERSintelppm.sys [2008-04-14 40576]
R1 SiSkp;SiSkp; C:WINDOWSSystem32DRIVERSsrvkp.sys [2003-12-05 11392]
R2 GDTdiInterceptor;GDTdiInterceptor; ??C:WINDOWSsystem32driversGDTdiIcpt.sys []
R2 mdmxsdk;mdmxsdk; C:WINDOWSSystem32DRIVERSmdmxsdk.sys [2003-04-09 11043]
R3 Afc;PPdus ASPI Shell; C:WINDOWSsystem32driversAfc.sys [2005-02-23 11776]
R3 ALCXSENS;Service for WDM 3D Audio Driver; C:WINDOWSsystem32driversALCXSENS.SYS [2003-12-12 391424]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:WINDOWSsystem32driversALCXWDM.SYS [2003-12-12 538236]
R3 Arp1394;Protocole client ARP 1394; C:WINDOWSSystem32DRIVERSarp1394.sys [2008-04-13 60800]
R3 GDMnIcpt;GDMnIcpt; ??C:WINDOWSsystem32driversMiniIcpt.sys []
R3 GearAspiWDM;GEARAspiWDM; C:WINDOWSSystem32driversGEARAspiWDM.sys [2008-02-22 16168]
R3 HidUsb;Pilote de classe HID Microsoft; C:WINDOWSSystem32DRIVERShidusb.sys [2008-04-13 10368]
R3 HookCentre;HookCentre; ??C:WINDOWSsystem32driversHookCentre.sys []
R3 HPZid412;IEEE-1284.4 Driver HPZid412; C:WINDOWSsystem32DRIVERSHPZid412.sys [2004-03-18 51088]
R3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:WINDOWSsystem32DRIVERSHPZipr12.sys [2004-03-18 16496]
R3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:WINDOWSsystem32DRIVERSHPZius12.sys [2004-03-18 21744]
R3 HSF_DP;HSF_DP; C:WINDOWSSystem32DRIVERSHSF_DP.sys [2003-11-14 1042816]
R3 HSFHWBS2;HSFHWBS2; C:WINDOWSSystem32DRIVERSHSFHWBS2.sys [2003-11-14 210304]
R3 mouhid;Pilote HID de souris; C:WINDOWSSystem32DRIVERSmouhid.sys [2001-08-23 12288]
R3 NIC1394;Pilote réseau 1394; C:WINDOWSSystem32DRIVERS
ic1394.sys [2008-04-13 61824]
R3 nv;nv; C:WINDOWSSystem32DRIVERS
v4_mini.sys [2003-12-05 1619243]
R3 ovt530;Webcam Deluxe; C:WINDOWSSystem32Driversov530vid.sys [2005-03-15 161792]
R3 Pfc;Padus ASPI Shell; C:WINDOWSsystem32driverspfc.sys [2003-09-19 10368]
R3 Ps2;PS2; C:WINDOWSSystem32DRIVERSPS2.sys [2001-06-04 14112]
R3 rtl8139;Realtek RTL8139/810x Family Fast Ethernet NIC NT Driver; C:WINDOWSSystem32DRIVERSR8139n51.SYS [2002-10-04 46976]
R3 SunkFilt;Alcor Micro Corp - 9360; ??C:WINDOWSSystem32Driverssunkfilt.sys []
R3 teamviewervpn;TeamViewer VPN Adapter; C:WINDOWSSystem32DRIVERS eamviewervpn.sys [2008-01-25 25088]
R3 usbaudio;Pilote USB audio (WDM); C:WINDOWSsystem32driversusbaudio.sys [2008-04-13 60032]
R3 usbccgp;Pilote parent générique USB Microsoft; C:WINDOWSSystem32DRIVERSusbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:WINDOWSSystem32DRIVERSusbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:WINDOWSSystem32DRIVERSusbhub.sys [2008-04-13 59520]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:WINDOWSSystem32DRIVERSusbprint.sys [2008-04-13 25856]
R3 USBSTOR;Pilote de stockage de masse USB; C:WINDOWSSystem32DRIVERSUSBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:WINDOWSSystem32DRIVERSusbuhci.sys [2008-04-13 20608]
R3 winachsf;winachsf; C:WINDOWSSystem32DRIVERSHSF_CNXT.sys [2003-11-14 679808]
S3 {6080A529-897E-4629-A488-ABA0C29B635E};Intel(R) Graphics Platform (SoftBIOS) Driver; C:WINDOWSsystem32driversialmsbw.sys [2003-11-20 122110]
S3 {D31A0762-0CEB-444e-ACFF-B049A1F6FE91};Intel(R) Graphics Chipset (KCH) Driver; C:WINDOWSsystem32driversialmkchw.sys [2003-11-20 99002]
S3 CCDECODE;Décodeur sous-titre fermé; C:WINDOWSSystem32DRIVERSCCDECODE.sys [2008-04-13 17024]
S3 EL90XBC;Pilote de la carte EtherLink XL 90XB/C 3Com; C:WINDOWSSystem32DRIVERSel90xbc5.sys [2001-08-18 66591]
S3 ialm;ialm; C:WINDOWSSystem32DRIVERSialmnt5.sys [2003-11-20 95579]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:WINDOWSsystem32driversMSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:WINDOWSsystem32DRIVERSNABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:WINDOWSsystem32DRIVERSNdisIP.sys [2008-04-13 10880]
S3 SiS315;SiS315; C:WINDOWSSystem32DRIVERSsisgrp.sys [2003-12-06 429440]
S3 SLIP;Détrameur décalage BDA; C:WINDOWSsystem32DRIVERSSLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:WINDOWSsystem32DRIVERSStreamIP.sys [2008-04-13 15232]
S3 Sunkfiltp;HP && Alcor Micro Corp for Phison; ??C:WINDOWSSystem32Driverssunkfiltp.sys []
S3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:WINDOWSSystem32DRIVERSusbohci.sys [2008-04-13 17152]
S3 viagfx;viagfx; C:WINDOWSSystem32DRIVERSvtmini.sys [2003-10-16 117760]
S3 WSTCODEC;Codec Teletext standard; C:WINDOWSsystem32DRIVERSWSTCODEC.SYS [2008-04-13 19200]
S4 IntelIde;IntelIde; C:WINDOWSSystem32DRIVERSintelide.sys [2008-04-14 5504]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AVKProxy;G DATA AntiVirus Proxy; C:Program FilesFichiers communsG DATAAVKProxyAVKProxy.exe [2008-09-08 651848]
R2 AVKService;Planificateur G DATA; C:Program FilesG DATAInternetSecurityAVKAVKService.exe [2008-09-08 386120]
R2 AVKWCtl;Gardien d'AntiVirus; C:Program FilesG DATAInternetSecurityAVKAVKWCtl.exe [2008-08-14 1185496]
R2 JavaQuickStarterService;Java Quick Starter; C:Program FilesJavajre6injqs.exe [2009-06-08 152984]
R2 NVSvc;NVIDIA Display Driver Service; C:WINDOWSSystem32
vsvc32.exe [2003-12-05 77824]
R2 TeamViewer4;TeamViewer 4; C:Program FilesTeamViewerVersion4TeamViewer_Service.exe [2009-05-06 185640]
R2 UMWdf;Windows User Mode Driver Framework; C:WINDOWSSystem32wdfmgr.exe [2005-01-28 38912]
R3 GDFwSvc;Pare-feu personnel G DATA; C:Program FilesG DATAInternetSecurityFirewallGDFwSvc.exe [2008-08-15 1395616]
R3 Pml Driver HPZ12;Pml Driver HPZ12; C:WINDOWSsystem32HPZipm12.exe [2004-03-18 65536]
S3 Adobe LM Service;Adobe LM Service; C:Program FilesFichiers communsAdobe Systems SharedServiceAdobelmsvc.exe [2009-05-25 68096]
S3 aspnet_state;Service d'état ASP.NET; C:WINDOWSMicrosoft.NETFrameworkv1.1.4322aspnet_state.exe [2004-07-15 32768]
S3 Fax;Fax; C:WINDOWSsystem32fxssvc.exe [2008-04-14 268800]

-----------------EOF-----------------

[alertevirus]

info.txt logfile of random's system information tool 1.06 2009-06-11 11:56:27

======Uninstall list======

-->C:WINDOWSIsUn040c.exe -fC:WINDOWSorun32.isu
-->C:WINDOWSSystem32\MSIEXEC.EXE /I {09DA4F91-2A09-4232-AB8C-6BC740096DE3} REMOVE=UpdateMgrFeature
-->c:WINDOWSSystem32\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
-->RUNDLL32.EXE C:WINDOWSSystem32ialmrem.dll,UninstallW2KIGfx PCIVEN_8086&DEV_2562
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:WINDOWSINFPCHealth.inf
Adobe Flash Player 10 ActiveX-->C:WINDOWSSystem32MacromedFlashuninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:WINDOWSSystem32MacromedFlashuninstall_plugin.exe
Adobe Photoshop CS-->RunDll32 C:PROGRA~1FICHIE~1INSTAL~1PROFES~1RunTime701Intel32Ctor.dll,LaunchSetup "C:Program FilesInstallShield Installation Information{EFB21DE7-8C19-4A88-BB28-A766E16493BC}setup.exe" -l0x40c
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Connexion Facile à Internet-->C:PROGRA~1FICHIE~1INSTAL~1Driver7INTEL3~1IDriver.exe /M{0613467F-A45E-4CB1-9ECE-1F3DD79FB927} /l1036
Correctif pour Windows XP (KB952287)-->"C:WINDOWS$NtUninstallKB952287$spuninstspuninst.exe"
DVD Shrink 3.2-->"C:Program FilesDVD Shrinkunins000.exe"
DVDFab HD Decrypter 4.1.0.0-->"C:Program FilesDVDFab HD Decrypter 4unins000.exe"
EasyCleaner-->RunDll32 C:PROGRA~1FICHIE~1INSTAL~1PROFES~1RunTime91Intel32Ctor.dll,LaunchSetup "C:Program FilesInstallShield Installation Information{F5346614-B7C4-4E94-826A-E2363155233D}setup.exe" -l0x9
FastStone Image Viewer 3.8-->C:Program FilesFastStone Image Vieweruninst.exe
Free CD Ripper V 1.4-->"C:Program FilesFree Audio PackFree CD Ripperunins000.exe"
G DATA InternetSecurity-->MsiExec.exe /I{E8C1767C-611C-45A5-A539-17D9CAA88497}
Hercules WebCam Station-->RunDll32 C:PROGRA~1FICHIE~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup "C:Program FilesInstallShield Installation Information{D208F4A7-6B73-4C2A-8B1E-8756FCBA831E}Setup.exe" -l0x40c
Hercules Webcam-->RunDll32 C:PROGRA~1FICHIE~1INSTAL~1engine6INTEL3~1Ctor.dll,LaunchSetup "C:Program FilesInstallShield Installation Information{A250D351-A07F-4D5D-AB6C-693C69B9BFAF}Setup.exe" -l0x40c
HijackThis 2.0.2-->"C:Documents and SettingsPropriétaireBureauhijackthisHijackThis.exe" /uninstall
HP Deskjet Preloaded Printer Drivers-->MsiExec.exe /X{F419D20A-7719-4639-8E30-C073A040D878}
HP Image Zone 4.0-->C:Program FilesHPDigital Imaginguninstallhpzscr01.exe -datfile hpqscr01.dat
HP Image Zone Plus 3.5-->C:Program FilesHPDigital Imaging{C6C44651-7C66-4b11-92E8-17565D3D22DD}setuphpzscr01.exe -datfile hpdscr01.dat
HP PSC & OfficeJet 3.0-->"C:Program FilesHPDigital Imaging{F38FA38A-7E5A-4209-88ED-4DE21CD20EEF}setuphpzscr01.exe" -datfile hposcr03.dat
HP Software Update-->MsiExec.exe /X{457791C5-D702-4143-A7B2-2744BE9573F2}
HPIZ350-->MsiExec.exe /X{F247869D-3643-4A9F-821B-3534145928E3}
IncrediMail-->C:Program FilesIncrediMailinImSetup.exe /remove /addon:IncrediMail /log:IncMail.log
Installation Windows Live-->C:Program FilesWindows LiveInstallerwlarp.exe
Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
InterVideo WinDVD Creator 2-->"C:Program FilesInstallShield Installation Information{2FCE4FC5-6930-40E7-A4F1-F862207424EF}setup.exe" REMOVEALL
InterVideo WinDVD Player-->"C:Program FilesInstallShield Installation Information{98E8A2EF-4EAE-43B8-A172-74842B764777}setup.exe" REMOVEALL
Java 2 Runtime Environment, SE v1.4.2_03-->MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142030}
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
KBD-->C:HPKBDKBD.EXE uninstalled
K-Meleon0.9 Fr1 (effacement uniquement)-->C:Program FilesK-Meleonuninstall.exe
Malwarebytes' Anti-Malware-->"C:Program FilesMalwarebytes' Anti-Malwareunins000.exe"
Media Player Classic fr-->"C:Program FilesMedia Player Classicuninstall.exe"
Memories Disc Creator 2.0-->MsiExec.exe /X{2E132061-C78A-48D4-A899-1D13B9D189FA}
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:WINDOWSMicrosoft.NETFrameworkv1.1.4322Updateshotfix.exe" "C:WINDOWSMicrosoft.NETFrameworkv1.1.4322UpdatesM928366M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:WINDOWS$NtUninstallKB952069_WM9$spuninstspuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 9 (KB917734)-->"C:WINDOWS$NtUninstallKB917734_WMP9$spuninstspuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:WINDOWS$NtUninstallKB898458$spuninstspuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:WINDOWS$NtUninstallKB923723$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB969897)-->"C:WINDOWSie8updatesKB969897-IE8spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:WINDOWS$NtUninstallKB923561$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923689)-->"C:WINDOWS$NtUninstallKB923689$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:WINDOWS$NtUninstallKB938464-v2$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:WINDOWS$NtUninstallKB941569$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:WINDOWS$NtUninstallKB946648$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:WINDOWS$NtUninstallKB950760$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:WINDOWS$NtUninstallKB950762$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:WINDOWS$NtUninstallKB950974$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:WINDOWS$NtUninstallKB951066$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:WINDOWS$NtUninstallKB951376-v2$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:WINDOWS$NtUninstallKB951748$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:WINDOWS$NtUninstallKB952004$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:WINDOWS$NtUninstallKB952954$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:WINDOWS$NtUninstallKB954459$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:WINDOWS$NtUninstallKB954600$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:WINDOWS$NtUninstallKB955069$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:WINDOWS$NtUninstallKB956572$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:WINDOWS$NtUninstallKB956802$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:WINDOWS$NtUninstallKB956803$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:WINDOWS$NtUninstallKB957097$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:WINDOWS$NtUninstallKB958644$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:WINDOWS$NtUninstallKB958687$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:WINDOWS$NtUninstallKB958690$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:WINDOWS$NtUninstallKB959426$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:WINDOWS$NtUninstallKB960225$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:WINDOWS$NtUninstallKB960715$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:WINDOWS$NtUninstallKB960803$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:WINDOWS$NtUninstallKB961373$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:WINDOWS$NtUninstallKB961501$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB963027)-->"C:WINDOWS$NtUninstallKB963027$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:WINDOWS$NtUninstallKB968537$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:WINDOWS$NtUninstallKB969898$spuninstspuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:WINDOWS$NtUninstallKB970238$spuninstspuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB969497)-->"C:WINDOWSie8updatesKB969497-IE8spuninstspuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:WINDOWS$NtUninstallKB951978$spuninstspuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:WINDOWS$NtUninstallKB955839$spuninstspuninst.exe"
Mise à jour pour Windows XP (KB961503)-->"C:WINDOWS$NtUninstallKB961503$spuninstspuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:WINDOWS$NtUninstallKB967715$spuninstspuninst.exe"
Mozilla Firefox (3.0.10)-->C:Program FilesMozilla Firefoxuninstallhelper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Multimedia Card Reader-->C:Program FilesFichiers communsInstallShieldDriver8Intel 32IDriver.exe /M{EF9967D8-1999-4260-ACC2-86901AA36650}
Nero 6 Ultra Edition-->C:Program FilesAhead
erouninstallUNNERO.exe /UNINSTALL
NVIDIA Display Driver-->C:WINDOWSSystem32
vudisp.exe Uninstall C:WINDOWSSystem32
vdisp.nvu,NVIDIA Display Driver
NVIDIA GART Driver-->C:WINDOWSSystem32
vugart.exe Uninstall C:WINDOWSSystem32Nvgart.nvu,NVIDIA GART Driver
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Photo et imagerie HP 3.5 - HP Devices-->C:Program FilesHPDigital Imaging{15B9DC72-73F9-4d99-9E28-848D66DA8D99}setuphpzscr01.exe -datfile hpiscr01.dat
Photosmart 140,240,7200,7600,7700,7900 Series-->C:Program FilesHP{45B6180B-DCAB-4093-8EE8-6164457517F0}setuphpzscr01.exe -datfile hphscr01.dat
Photosmart 320,370,7400,8100,8400 Series (fra)-->C:Program FilesHP{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}setuphpzscr01.exe -datfile hphscr01.dat
PS2-->C:WINDOWSsystem32ps2.exe uninstall
Python 2.2 combined Win32 extensions-->C:Python22LibSITE-P~1UNWISE~1.EXE C:Python22LibSITE-P~1w32inst.log
Python 2.2.1-->C:Python22UNWISE.EXE C:Python22INSTALL.LOG
RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
Revo Uninstaller 1.83-->C:Program FilesVS Revo GroupRevo Uninstalleruninst.exe
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
SnagIt 7-->C:Program FilesTechSmithSnagIt 7SIUNINST.EXE
Sonic Update Manager-->MsiExec.exe /I{09DA4F91-2A09-4232-AB8C-6BC740096DE3}
TeamViewer 4-->C:Program FilesTeamViewerVersion4uninstall.exe
WinAce Archiver-->C:Program FilesWinAceSXUNINST.EXE C:Program FilesWinAceSXUNINST.INI
Winamp (remove only)-->"C:Program FilesWinampUninstWA.exe"
Windows Internet Explorer 8-->"C:WINDOWSie8spuninstspuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Live OneCare safety scanner-->RunDll32.exe "C:Program FilesWindows Live Safety CenterwlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT
Windows Media Format Runtime-->"C:Program FilesWindows Media Playerwmsetsdk.exe" /UninstallAll
Windows XP Service Pack 3-->"C:WINDOWS$NtServicePackUninstall$spuninstspuninst.exe"

======Hosts File======

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com

======Security center information======

AV: G DATA InternetSecurity 2009
FW: Pare-feu personnel G DATA

======System event log======

Computer Name: PARENT
Event Code: 59
Message: Resolve Partial Assembly a échoué pour Microsoft.VC80.MFCLOC.
Message d'erreur de référence : L'assemblage référencé n'est pas installé sur votre système.
.

Record Number: 10628
Source Name: SideBySide
Time Written: 20090608090216.000000+120
Event Type: erreur
User:

Computer Name: PARENT
Event Code: 32
Message: L'assemblage dépendant Microsoft.VC80.MFCLOC ne peut pas être trouvé. La dernière erreur était L'assemblage référencé n'est pas installé sur votre système.


Record Number: 10627
Source Name: SideBySide
Time Written: 20090608090216.000000+120
Event Type: erreur
User:

Computer Name: PARENT
Event Code: 59
Message: Generate Activation Context a échoué pour C:Program FilesIncrediMailinMFC80U.DLL.
Message d'erreur de référence : Opération réussie.
.

Record Number: 10626
Source Name: SideBySide
Time Written: 20090608090214.000000+120
Event Type: erreur
User:

Computer Name: PARENT
Event Code: 59
Message: Resolve Partial Assembly a échoué pour Microsoft.VC80.MFCLOC.
Message d'erreur de référence : L'assemblage référencé n'est pas installé sur votre système.
.

Record Number: 10625
Source Name: SideBySide
Time Written: 20090608090214.000000+120
Event Type: erreur
User:

Computer Name: PARENT
Event Code: 32
Message: L'assemblage dépendant Microsoft.VC80.MFCLOC ne peut pas être trouvé. La dernière erreur était L'assemblage référencé n'est pas installé sur votre système.


Record Number: 10624
Source Name: SideBySide
Time Written: 20090608090214.000000+120
Event Type: erreur
User:

=====Application event log=====

Computer Name: PARENT
Event Code: 1001
Message: Les compteurs de performances pour le service WmiApRpl (WmiApRpl) ont été supprimés.
Les données d'enregistrement contiennent les nouvelles valeurs du dernier compteur système
et les dernières entrées du registre d'aide.

Record Number: 5
Source Name: LoadPerf
Time Written: 20090525154340.000000+120
Event Type: Informations
User:

Computer Name: PARENT
Event Code: 1
Message:
Record Number: 4
Source Name: ccEvtMgr
Time Written: 20090525153926.000000+120
Event Type: Informations
User: AUTORITE NTSYSTEM

Computer Name: PARENT
Event Code: 26
Message:
Record Number: 3
Source Name: ccEvtMgr
Time Written: 20090525153925.000000+120
Event Type: Informations
User: AUTORITE NTSYSTEM

Computer Name: PARENT
Event Code: 1
Message:
Record Number: 2
Source Name: ccSetMgr
Time Written: 20090525153924.000000+120
Event Type: Informations
User: AUTORITE NTSYSTEM

Computer Name: PARENT
Event Code: 26
Message:
Record Number: 1
Source Name: ccSetMgr
Time Written: 20090525153923.000000+120
Event Type: Informations
User: AUTORITE NTSYSTEM

======Environment variables======

"ComSpec"=%SystemRoot%system32cmd.exe
"Path"=%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;c:Python22
"windir"=%SystemRoot%
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 2 Stepping 9, GenuineIntel
"PROCESSOR_REVISION"=0209
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%TEMP
"TMP"=%SystemRoot%TEMP
"FP_NO_HOST_CHECK"=NO

-----------------EOF-----------------

[anthony5151]

Aucune infection sur ce rapport

Fais ce scan généraliste pour vérifier stp :

. Télécharge et installe Malwarebytes' Anti-Malware
. A la fin de l'installation, veille à ce que l'option « mettre a jour Malwarebyte's Anti-Malware » soit cochée
. Lance MBAM et laisse les Mises à jour se télécharger (sinon fais les manuellement au lancement du programme)
. Puis va dans l'onglet "Recherche", coche "Exécuter un examen rapide" puis "Rechercher" et "Lancer l'examen".
. A la fin du scan, clique sur Afficher les résultats
. Coche tous les éléments détectés puis clique sur Supprimer la sélection
. Enregistre le rapport
. S'il t'est demandé de redémarrer, clique sur Yes
. Poste dans ta prochaine réponse le rapport apparaissant après la suppression stp

[alertevirus]

je m'occupe du scan demain, par contre je te joins le résultat de gdata antivirus effectuer début de soirée :



on dirait que le virus ce repend... c'est bizarre

[r@in | b0w]

Bonjour.

En général, les antivirus sont un peu désemparés face à des trojans (backdoors).

De plus, tu n'as pour l'instant pas fait de ménage puisque les utilitaires utilisés jusqu'à présents ne sont que des outils de diagnostic.

Mbam est, à l'inverse, un utilitaire de désinfection.

Rien d'inquiétant donc quant à sa présence actuelle, l'infection n'est pas encore traitée.

Après le premier passage de Mbam, tu y verras plus clair.

N'oublie pas de faire parvenir le rapport d'analyse.