ComboFix 08-08-19.02 - xxx 2008-08-20 14:47:50.3 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.657 [GMT 2:00]
Endroit: C:\Documents and Settings\xxx.XXXORDI\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration
[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
/b/color
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\WINXP\system32\dninosoh.ini
C:\WINXP\system32\kazaabackupfiles
C:\WINXP\system32\MSINET.oca
C:\WINXP\system32\wlbfkhtu.ini
.
((((((((((((((((((((((((((((( Fichiers créés 2008-07-20 to 2008-08-20 ))))))))))))))))))))))))))))))))))))
.
2008-08-20 11:47 . 2008-08-17 15:01 38,472 --a------ C:\WINXP\system32\drivers\mbamswissarmy.sys
2008-08-20 11:47 . 2008-08-17 15:01 17,144 --a------ C:\WINXP\system32\drivers\mbam.sys
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-08-19 16:19 --------- d-----w C:\Documents and Settings\All Users.WINXP\Application Data\Google Updater
2008-08-13 16:46 --------- d-----w C:\Documents and Settings\All Users.WINXP\Application Data\Zylom
2008-07-16 17:53 --------- d-----w C:\Documents and Settings\xxx.XXXORDI\Application Data\uTorrent
2008-07-11 10:39 --------- d-----w C:\Program Files\Sun
2008-07-11 10:38 --------- d-----w C:\Program Files\Java
2008-02-25 22:42 4,527,672 -c--a-w C:\Program Files\PandoSetup.exe
2008-01-11 17:42 302,080 -c--a-w C:\Program Files\zimeloader.msi
2008-01-09 18:02 67,196,968 -c--a-w C:\Program Files\directx_nov2007_redist.exe
2007-12-23 00:08 3,381,280 -c--a-w C:\Program Files\LimeWireWin.exe
2007-10-22 02:49 867,848 -c--a-w C:\Program Files\NOV2007_d3dx10_36_x64.cab
2007-10-22 02:49 807,132 -c--a-w C:\Program Files\NOV2007_d3dx10_36_x86.cab
2007-10-22 02:49 49,392 -c--a-w C:\Program Files\NOV2007_X3DAudio_x64.cab
2007-10-22 02:49 44,850 -c--a-w C:\Program Files\dxdllreg_x86.cab
2007-10-22 02:49 21,744 -c--a-w C:\Program Files\NOV2007_X3DAudio_x86.cab
2007-10-22 02:49 200,010 -c--a-w C:\Program Files\NOV2007_XACT_x64.cab
2007-10-22 02:49 151,512 -c--a-w C:\Program Files\NOV2007_XACT_x86.cab
2007-10-22 02:49 1,805,306 -c--a-w C:\Program Files\NOV2007_d3dx9_36_x64.cab
2007-10-22 02:49 1,712,608 -c--a-w C:\Program Files\NOV2007_d3dx9_36_x86.cab
2007-06-27 20:07 2,719,216 -c--a-w C:\Program Files\ccsetup140.exe
2007-02-13 07:39 6,653,000 -c--a-w C:\Program Files\winamp532_full_emusic-7plus.exe
2006-12-30 14:05 10,240 -csha-w C:\Program Files\Thumbs.db
2006-02-15 12:04 2,855,080 -c--a-w C:\Program Files\aawsepersonal.exe
2006-02-02 11:26 48,909,288 -c--a-w C:\Program Files\msprod2.exe
2006-02-02 11:21 2,855,552 -c--a-w C:\Program Files\PPView97.exe
2005-10-01 19:28 5,123,424 -c--a-w C:\Program Files\Firefox Setup 1.0.7.exe
2004-12-31 14:37 387,561 -c--a-w C:\Program Files\usbvsp_xp.exe
2004-12-12 15:56 164,665 -c--a-w C:\Program Files\SoundFontSynth.dmg.gz
2004-08-25 12:16 425,106 -c--a-w C:\Program Files\LyrixV1.100.exe
2004-08-08 22:14 2,372,760 -c--a-w C:\Program Files\winzip90.exe
2004-08-08 22:13 32,789 -c--a-w C:\Program Files\fmc.zip
2004-08-02 13:52 576,415 -c--a-w C:\Program Files\KS1x1_1010_web.exe radium 49.exe
2004-08-02 13:45 20,546 -c--a-w C:\Program Files\m audio radium.htm
2004-08-01 15:54 2,384,067 -c--a-w C:\Program Files\InstallMicroTonicVST10.exe
2004-03-20 16:37 696 -c--a-w C:\Program Files\WS_FTP Pro.lnk
2004-03-19 10:32 4,633,986 -c--a-w C:\Program Files\ftp pro.exe
.
((((((((((((((((((((((((((((( snapshot@2008-04-12_13.56.12.32 )))))))))))))))))))))))))))))))))))))))))
.
+ 2006-03-24 04:49:05 49,152 -c--a-w C:\WINXP\$hf_mig$\KB904942\SP2QFE\wdigest.dll
+ 2005-10-12 23:15:25 15,072 -c--a-w C:\WINXP\$hf_mig$\KB904942\spmsg.dll
+ 2005-10-12 23:15:26 216,800 -c--a-w C:\WINXP\$hf_mig$\KB904942\spuninst.exe
+ 2005-10-12 23:15:25 22,752 -c--a-w C:\WINXP\$hf_mig$\KB904942\update\spcustom.dll
+ 2005-10-12 23:15:28 727,776 -c--a-w C:\WINXP\$hf_mig$\KB904942\update\update.exe
+ 2005-10-12 23:15:45 394,976 -c--a-w C:\WINXP\$hf_mig$\KB904942\update\updspapi.dll
+ 2004-05-07 15:56:15 2,678 -c----w C:\WINXP\$NtServicePackUninstall$\31bbv3fh.dat
+ 2004-05-07 15:56:15 2,678 -c----w C:\WINXP\$NtServicePackUninstall$\5vnjfdjx.dat
+ 2002-08-30 12:00:00 1,740 -c----w C:\WINXP\$NtServicePackUninstall$\dcache.bin
+ 2002-08-29 00:32:34 2,816 -c----w C:\WINXP\$NtServicePackUninstall$\drmkaud.sys
+ 2004-05-07 15:56:16 2,678 -c----w C:\WINXP\$NtServicePackUninstall$\j7vpvpv9.dat
+ 2004-05-07 15:56:18 2,678 -c----w C:\WINXP\$NtServicePackUninstall$\pbz7tr7v.dat
+ 2004-05-07 15:56:15 2,678 -c----w C:\WINXP\$NtServicePackUninstall$\qwxrpjhz.dat
+ 2005-10-12 23:15:26 216,800 -c----w C:\WINXP\$NtUninstallKB904942$\spuninst\spuninst.exe
+ 2005-10-12 23:15:45 394,976 -c----w C:\WINXP\$NtUninstallKB904942$\spuninst\updspapi.dll
+ 2004-08-19 23:09:47 49,152 -c----w C:\WINXP\$NtUninstallKB904942$\wdigest.dll
+ 2008-05-19 14:38:53 236,392 -c--a-w C:\WINXP\assembly\GAC_MSIL\System.Data.SqlServerCe\9.0.242.0__89845dcd8080cc91\System.Data.SqlServerCe.dll
+ 2006-08-29 12:17:22 161,976 ----a-w C:\WINXP\Downloaded Program Files\zylomgamesplayer.dll
- 2000-08-31 06:00:00 73,728 ----a-w C:\WINXP\fdsv.exe
+ 2000-08-31 06:00:00 89,504 ----a-w C:\WINXP\fdsv.exe
+ 2004-08-19 23:09:19 61,440 -c----w C:\WINXP\ie7\admparse.dll
+ 2004-08-19 23:09:19 101,888 -c----w C:\WINXP\ie7\advpack.dll
+ 2006-09-14 08:39:59 1,023,488 -c----w C:\WINXP\ie7\browseui.dll
+ 2004-08-19 23:09:21 35,328 -c----w C:\WINXP\ie7\corpol.dll
+ 2006-06-02 19:32:20 33,792 -c----w C:\WINXP\ie7\custsat.dll
+ 2006-09-14 08:40:00 357,888 -c----w C:\WINXP\ie7\dxtmsft.dll
+ 2006-09-14 08:40:00 205,312 -c----w C:\WINXP\ie7\dxtrans.dll
+ 2006-09-14 08:40:00 55,808 -c----w C:\WINXP\ie7\extmgr.dll
+ 2004-08-19 23:09:27 38,912 -c----w C:\WINXP\ie7\hmmapi.dll
+ 2004-08-19 23:09:54 34,304 -c----w C:\WINXP\ie7\ie4uinit.exe
+ 2004-08-19 23:09:27 139,264 -c----w C:\WINXP\ie7\ieakeng.dll
+ 2004-08-19 23:09:27 221,696 -c----w C:\WINXP\ie7\ieaksie.dll
+ 2002-08-30 12:00:00 245,760 -c----w C:\WINXP\ie7\ieakui.dll
+ 2004-08-19 23:09:27 323,584 -c----w C:\WINXP\ie7\iedkcs32.dll
+ 2006-09-13 08:52:55 18,432 -c----w C:\WINXP\ie7\iedw.exe
+ 2004-08-19 23:09:27 81,920 -c----w C:\WINXP\ie7\ieencode.dll
+ 2006-09-14 08:40:00 251,392 -c----w C:\WINXP\ie7\iepeers.dll
+ 2004-08-19 23:09:27 49,152 -c----w C:\WINXP\ie7\iernonce.dll
+ 2004-08-19 23:09:27 63,488 -c----w C:\WINXP\ie7\iesetup.dll
+ 2004-08-19 23:09:54 93,184 -c----w C:\WINXP\ie7\iexplore.exe
+ 2004-08-19 23:09:28 35,840 -c----w C:\WINXP\ie7\imgutil.dll
+ 2006-09-14 08:40:01 96,768 -c----w C:\WINXP\ie7\inseng.dll
+ 2006-05-18 05:31:21 450,560 -c----w C:\WINXP\ie7\jscript.dll
+ 2006-09-14 08:40:01 16,384 -c----w C:\WINXP\ie7\jsproxy.dll
+ 2004-08-19 23:09:30 22,528 -c----w C:\WINXP\ie7\licmgr10.dll
+ 2004-08-19 23:09:58 29,184 -c----w C:\WINXP\ie7\mshta.exe
+ 2006-09-14 08:40:03 3,075,584 -c----w C:\WINXP\ie7\mshtml.dll
+ 2006-09-14 08:40:03 448,512 -c----w C:\WINXP\ie7\mshtmled.dll
+ 2004-08-19 23:08:26 57,344 -c----w C:\WINXP\ie7\mshtmler.dll
+ 2002-08-30 12:00:00 146,432 -c----w C:\WINXP\ie7\msls31.dll
+ 2006-09-14 08:40:03 146,432 -c----w C:\WINXP\ie7\msrating.dll
+ 2006-09-14 08:40:03 532,480 -c----w C:\WINXP\ie7\mstime.dll
+ 2004-08-19 23:09:36 97,280 -c----w C:\WINXP\ie7\occache.dll
+ 2006-09-14 08:40:03 39,424 -c----w C:\WINXP\ie7\pngfilt.dll
+ 2006-09-04 06:12:53 1,494,528 -c----w C:\WINXP\ie7\shdocvw.dll
+ 2006-09-14 08:40:04 474,624 -c----w C:\WINXP\ie7\shlwapi.dll
+ 2007-09-26 16:34:42 33,472 -c----w C:\WINXP\ie7\spuninst\iecustom.dll
+ 2007-09-26 16:32:30 66,048 -c--a-w C:\WINXP\ie7\spuninst\ieResetIcons.exe
+ 2006-09-06 15:43:28 216,800 -c----w C:\WINXP\ie7\spuninst\spuninst.exe
+ 2006-09-06 15:43:30 394,976 -c----w C:\WINXP\ie7\spuninst\updspapi.dll
+ 2004-08-19 23:09:46 37,888 -c----w C:\WINXP\ie7\url.dll
+ 2006-09-14 08:40:05 615,936 -c----w C:\WINXP\ie7\urlmon.dll
+ 2004-08-19 23:09:46 417,792 -c----w C:\WINXP\ie7\vbscript.dll
+ 2006-09-18 14:15:51 851,968 -c----w C:\WINXP\ie7\vgx.dll
+ 2004-08-19 23:09:47 281,600 -c----w C:\WINXP\ie7\webcheck.dll
+ 2006-09-14 08:40:05 663,040 -c----w C:\WINXP\ie7\wininet.dll
+ 2008-06-03 10:34:12 25,214 -c--a-r C:\WINXP\Installer\{11EED87A-E30F-4B09-890B-586E58A51036}\ARPPRODUCTICON.exe
+ 2008-05-19 14:39:28 125,472 -c--a-r C:\WINXP\Installer\{9D442283-88AD-4F49-8568-18CE6EAA15AF}\WLXPhotoGalleryIcon.exe
+ 2008-05-19 14:34:20 29,926 -c--a-r C:\WINXP\Installer\{BADF6744-3787-48F6-B8C9-4C4995401D65}\MsblIco.Exe
+ 2008-05-19 14:36:44 86,746 -c--a-r C:\WINXP\Installer\{C514C594-23AA-4F13-A070-DB8BDB27594F}\wlmail.exe
+ 2004-05-07 15:56:15 2,678 -c--a-w C:\WINXP\java\Packages\Data\31BBV3FH.DAT
+ 2004-05-07 15:56:15 2,678 -c--a-w C:\WINXP\java\Packages\Data\5VNJFDJX.DAT
+ 2004-05-07 15:56:16 2,678 -c--a-w C:\WINXP\java\Packages\Data\J7VPVPV9.DAT
+ 2004-05-07 15:56:18 2,678 -c--a-w C:\WINXP\java\Packages\Data\PBZ7TR7V.DAT
+ 2004-05-07 15:56:15 2,678 -c--a-w C:\WINXP\java\Packages\Data\QWXRPJHZ.DAT
+ 2006-10-30 01:34:02 2,560 -c--a-w C:\WINXP\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelEvents.dll
- 2000-08-31 06:00:00 28,160 ----a-w C:\WINXP\Nircmd.exe
+ 2000-08-31 06:00:00 28,672 ----a-w C:\WINXP\Nircmd.exe
+ 2004-10-03 08:44:47 2,990 ----a-w C:\WINXP\PCHealth\HelpCtr\PackageStore\SkuStore.bin
+ 2004-08-19 23:23:25 1,788 -c----w C:\WINXP\ServicePackFiles\i386\dcache.bin
+ 2004-08-04 06:07:57 2,944 -c----w C:\WINXP\ServicePackFiles\i386\drmkaud.sys
+ 2002-08-30 12:00:00 2,000 -c--a-w C:\WINXP\system\KEYBOARD.DRV
+ 2002-08-30 12:00:00 2,032 -c--a-w C:\WINXP\system\MOUSE.DRV
+ 2002-08-30 12:00:00 1,744 -c--a-w C:\WINXP\system\SOUND.DRV
+ 2002-08-30 12:00:00 2,176 -c--a-w C:\WINXP\system\VGA.DRV
- 2004-08-19 23:09:19 61,440 ----a-w C:\WINXP\system32\admparse.dll
+ 2007-08-13 16:39:20 71,680 ----a-w C:\WINXP\system32\admparse.dll
- 2004-08-19 23:09:19 101,888 ----a-w C:\WINXP\system32\advpack.dll
+ 2007-08-13 16:39:00 123,904 ----a-w C:\WINXP\system32\advpack.dll
- 2008-03-29 17:45:49 1,146,232 ----a-w C:\WINXP\system32\aswBoot.exe
+ 2008-07-19 14:43:08 1,163,960 ----a-w C:\WINXP\system32\aswBoot.exe
- 2008-03-29 17:23:22 95,608 ----a-w C:\WINXP\system32\AvastSS.scr
+ 2008-07-19 14:30:53 94,392 ----a-w C:\WINXP\system32\AvastSS.scr
- 2006-09-14 08:39:59 1,023,488 ----a-w C:\WINXP\system32\browseui.dll
+ 2006-09-23 11:12:56 1,022,976 ----a-w C:\WINXP\system32\browseui.dll
- 2005-05-26 02:16:24 75,544 -c--a-w C:\WINXP\system32\cdm.dll
+ 2007-07-30 17:19:20 92,504 ----a-w C:\WINXP\system32\cdm.dll
- 2004-08-19 23:09:21 35,328 ----a-w C:\WINXP\system32\corpol.dll
+ 2007-08-13 16:42:54 17,408 ----a-w C:\WINXP\system32\corpol.dll
+ 2006-11-29 11:06:18 3,426,072 ----a-w C:\WINXP\system32\d3dx9_32.dll
+ 2004-08-19 23:23:25 1,788 -c--a-w C:\WINXP\system32\dcache.bin
- 2004-08-19 23:09:19 61,440 -c--a-w C:\WINXP\system32\dllcache\admparse.dll
+ 2007-08-13 16:39:20 71,680 -c--a-w C:\WINXP\system32\dllcache\admparse.dll
+ 2007-08-13 16:39:00 123,904 -c----w C:\WINXP\system32\dllcache\advpack.dll
- 2006-09-14 08:39:59 1,023,488 -c--a-w C:\WINXP\system32\dllcache\browseui.dll
+ 2006-09-23 11:12:56 1,022,976 -c--a-w C:\WINXP\system32\dllcache\browseui.dll
- 2005-05-26 02:16:24 75,544 -c--a-w C:\WINXP\system32\dllcache\cdm.dll
+ 2007-07-30 17:19:20 92,504 -c--a-w C:\WINXP\system32\dllcache\cdm.dll
- 2004-08-19 23:09:21 35,328 -c--a-w C:\WINXP\system32\dllcache\corpol.dll
+ 2007-08-13 16:42:54 17,408 -c--a-w C:\WINXP\system32\dllcache\corpol.dll
- 2006-06-02 19:32:20 33,792 -c--a-w C:\WINXP\system32\dllcache\custsat.dll
+ 2007-08-13 16:54:10 33,792 -c--a-w C:\WINXP\system32\dllcache\custsat.dll
- 2006-09-14 08:40:00 357,888 -c--a-w C:\WINXP\system32\dllcache\dxtmsft.dll
+ 2007-08-13 16:35:46 346,624 -c--a-w C:\WINXP\system32\dllcache\dxtmsft.dll
- 2006-09-14 08:40:00 205,312 -c--a-w C:\WINXP\system32\dllcache\dxtrans.dll
+ 2007-08-13 16:35:38 214,528 -c--a-w C:\WINXP\system32\dllcache\dxtrans.dll
- 2006-09-14 08:40:00 55,808 -c--a-w C:\WINXP\system32\dllcache\extmgr.dll
+ 2007-08-13 16:54:10 131,584 -c--a-w C:\WINXP\system32\dllcache\extmgr.dll
- 2004-08-19 23:09:27 38,912 -c--a-w C:\WINXP\system32\dllcache\hmmapi.dll
+ 2007-08-13 16:18:02 60,416 -c--a-w C:\WINXP\system32\dllcache\hmmapi.dll
- 2004-08-19 23:09:54 34,304 -c--a-w C:\WINXP\system32\dllcache\ie4uinit.exe
+ 2007-08-13 16:39:06 54,784 -c--a-w C:\WINXP\system32\dllcache\ie4uinit.exe
- 2004-08-19 23:09:27 139,264 -c--a-w C:\WINXP\system32\dllcache\ieakeng.dll
+ 2007-08-13 16:39:26 152,064 -c--a-w C:\WINXP\system32\dllcache\ieakeng.dll
- 2004-08-19 23:09:27 221,696 -c--a-w C:\WINXP\system32\dllcache\ieaksie.dll
+ 2007-08-13 16:39:54 229,376 -c--a-w C:\WINXP\system32\dllcache\ieaksie.dll
- 2002-08-30 12:00:00 245,760 -c--a-w C:\WINXP\system32\dllcache\ieakui.dll
+ 2007-08-13 15:56:54 161,792 -c--a-w C:\WINXP\system32\dllcache\ieakui.dll
- 2004-08-19 23:09:27 323,584 -c--a-w C:\WINXP\system32\dllcache\iedkcs32.dll
+ 2007-08-13 16:39:50 382,976 -c--a-w C:\WINXP\system32\dllcache\iedkcs32.dll
- 2006-09-13 08:52:55 18,432 -c--a-w C:\WINXP\system32\dllcache\iedw.exe
+ 2007-08-13 16:44:02 69,120 -c--a-w C:\WINXP\system32\dllcache\iedw.exe
+ 2007-08-13 16:45:18 78,336 -c----w C:\WINXP\system32\dllcache\ieencode.dll
- 2006-09-14 08:40:00 251,392 -c--a-w C:\WINXP\system32\dllcache\iepeers.dll
+ 2007-08-13 16:54:10 191,488 -c--a-w C:\WINXP\system32\dllcache\iepeers.dll
- 2004-08-19 23:09:27 49,152 -c--a-w C:\WINXP\system32\dllcache\iernonce.dll
+ 2007-08-13 16:39:10 43,008 -c--a-w C:\WINXP\system32\dllcache\iernonce.dll
- 2004-08-19 23:09:27 63,488 -c--a-w C:\WINXP\system32\dllcache\iesetup.dll
+ 2007-08-13 16:39:12 55,296 -c--a-w C:\WINXP\system32\dllcache\iesetup.dll
+ 2007-08-13 16:43:56 622,080 -c----w C:\WINXP\system32\dllcache\iexplore.exe
+ 2007-08-13 16:36:06 36,352 -c----w C:\WINXP\system32\dllcache\imgutil.dll
- 2006-09-14 08:40:01 96,768 -c--a-w C:\WINXP\system32\dllcache\inseng.dll
+ 2007-08-13 16:39:02 92,672 -c--a-w C:\WINXP\system32\dllcache\inseng.dll
- 2006-05-18 05:31:21 450,560 -c--a-w C:\WINXP\system32\dllcache\jscript.dll
+ 2007-08-13 16:38:04 491,520 -c--a-w C:\WINXP\system32\dllcache\jscript.dll
- 2006-09-14 08:40:01 16,384 -c--a-w C:\WINXP\system32\dllcache\jsproxy.dll
+ 2007-08-13 16:54:10 27,136 -c--a-w C:\WINXP\system32\dllcache\jsproxy.dll
+ 2002-08-30 12:00:00 2,000 -c--a-w C:\WINXP\system32\dllcache\keyboard.drv
- 2004-08-19 23:09:30 22,528 -c--a-w C:\WINXP\system32\dllcache\licmgr10.dll
+ 2007-08-13 16:44:18 40,960 -c--a-w C:\WINXP\system32\dllcache\licmgr10.dll
+ 2002-08-30 12:00:00 2,560 -c--a-w C:\WINXP\system32\dllcache\lz32.dll
+ 2002-08-30 12:00:00 2,032 -c--a-w C:\WINXP\system32\dllcache\mouse.drv
- 2004-08-19 23:09:58 29,184 -c--a-w C:\WINXP\system32\dllcache\mshta.exe
+ 2007-08-13 16:32:30 45,568 -c--a-w C:\WINXP\system32\dllcache\mshta.exe
- 2006-09-14 08:40:03 3,075,584 -c--a-w C:\WINXP\system32\dllcache\mshtml.dll
+ 2007-08-13 16:54:12 3,578,368 -c--a-w C:\WINXP\system32\dllcache\mshtml.dll
- 2006-09-14 08:40:03 448,512 -c--a-w C:\WINXP\system32\dllcache\mshtmled.dll
+ 2007-08-13 16:54:10 475,648 -c--a-w C:\WINXP\system32\dllcache\mshtmled.dll
+ 2007-08-13 16:01:12 48,128 -c----w C:\WINXP\system32\dllcache\mshtmler.dll
- 2002-08-30 12:00:00 146,432 -c--a-w C:\WINXP\system32\dllcache\msls31.dll
+ 2007-08-13 16:54:10 156,160 -c--a-w C:\WINXP\system32\dllcache\msls31.dll
+ 2001-08-17 21:00:04 2,944 -c--a-w C:\WINXP\system32\dllcache\msmpu401.sys
- 2006-09-14 08:40:03 146,432 -c--a-w C:\WINXP\system32\dllcache\msrating.dll
+ 2007-08-13 16:44:26 192,000 -c--a-w C:\WINXP\system32\dllcache\msrating.dll
- 2006-09-14 08:40:03 532,480 -c--a-w C:\WINXP\system32\dllcache\mstime.dll
+ 2007-08-13 16:54:10 670,720 -c--a-w C:\WINXP\system32\dllcache\mstime.dll
+ 2002-08-30 12:00:00 2,944 -c--a-w C:\WINXP\system32\dllcache\null.sys
+ 2007-08-13 16:44:06 101,376 -c----w C:\WINXP\system32\dllcache\occache.dll
- 2006-09-14 08:40:03 39,424 -c--a-w C:\WINXP\system32\dllcache\pngfilt.dll
+ 2007-08-13 16:36:12 44,544 -c--a-w C:\WINXP\system32\dllcache\pngfilt.dll
- 2006-09-04 06:12:53 1,494,528 -c--a-w C:\WINXP\system32\dllcache\shdocvw.dll
+ 2006-09-23 11:12:56 1,497,088 -c--a-w C:\WINXP\system32\dllcache\shdocvw.dll
- 2006-09-14 08:40:04 474,624 -c--a-w C:\WINXP\system32\dllcache\shlwapi.dll
+ 2006-09-23 11:12:56 474,624 -c--a-w C:\WINXP\system32\dllcache\shlwapi.dll
+ 2002-08-30 12:00:00 1,744 -c--a-w C:\WINXP\system32\dllcache\sound.drv
+ 2007-08-13 16:44:30 105,984 -c----w C:\WINXP\system32\dllcache\url.dll
- 2006-09-14 08:40:05 615,936 -c--a-w C:\WINXP\system32\dllcache\urlmon.dll
+ 2007-08-13 16:54:10 1,162,240 -c--a-w C:\WINXP\system32\dllcache\urlmon.dll
+ 2007-08-13 16:54:10 413,696 -c----w C:\WINXP\system32\dllcache\vbscript.dll
+ 2002-08-30 12:00:00 2,176 -c--a-w C:\WINXP\system32\dllcache\vga.drv
- 2006-09-18 14:15:51 851,968 -c--a-w C:\WINXP\system32\dllcache\vgx.dll
+ 2007-08-13 16:54:10 765,952 -c--a-w C:\WINXP\system32\dllcache\vgx.dll
+ 2007-08-13 16:54:10 231,424 -c----w C:\WINXP\system32\dllcache\webcheck.dll
- 2006-09-14 08:40:05 663,040 -c--a-w C:\WINXP\system32\dllcache\wininet.dll
+ 2007-08-13 16:54:10 818,688 -c--a-w C:\WINXP\system32\dllcache\wininet.dll
+ 2002-08-30 12:00:00 2,864 -c--a-w C:\WINXP\system32\dllcache\winsock.dll
+ 2002-08-30 12:00:00 2,112 -c--a-w C:\WINXP\system32\dllcache\winspool.exe
+ 2002-08-30 12:00:00 2,736 -c--a-w C:\WINXP\system32\dllcache\wowdeb.exe
- 2005-05-26 02:16:30 467,224 -c--a-w C:\WINXP\system32\dllcache\wuapi.dll
+ 2007-07-30 17:19:36 549,720 -c--a-w C:\WINXP\system32\dllcache\wuapi.dll
- 2005-05-26 02:16:30 125,720 -c--a-w C:\WINXP\system32\dllcache\wuauclt.exe
+ 2007-07-30 17:19:16 53,080 -c--a-w C:\WINXP\system32\dllcache\wuauclt.exe
- 2005-05-26 02:16:30 1,343,768 -c--a-w C:\WINXP\system32\dllcache\wuaueng.dll
+ 2007-07-30 17:19:42 1,712,984 -c--a-w C:\WINXP\system32\dllcache\wuaueng.dll
- 2005-05-26 02:16:32 128,792 -c--a-w C:\WINXP\system32\dllcache\wucltui.dll
+ 2007-07-30 17:19:32 325,976 -c--a-w C:\WINXP\system32\dllcache\wucltui.dll
- 2005-05-26 02:16:30 41,240 -c--a-w C:\WINXP\system32\dllcache\wups.dll
+ 2007-07-30 17:18:40 33,624 -c--a-w C:\WINXP\system32\dllcache\wups.dll
- 2005-05-26 02:16:30 173,536 -c--a-w C:\WINXP\system32\dllcache\wuweb.dll
+ 2007-07-30 17:19:46 203,096 -c--a-w C:\WINXP\system32\dllcache\wuweb.dll
- 2008-03-29 17:26:52 26,944 ----a-w C:\WINXP\system32\drivers\aavmker4.sys
+ 2008-07-19 14:32:15 26,944 ----a-w C:\WINXP\system32\drivers\aavmker4.sys
- 2008-03-29 17:35:49 20,560 ----a-w C:\WINXP\system32\drivers\aswFsBlk.sys
+ 2008-07-19 14:37:42 20,560 ----a-w C:\WINXP\system32\drivers\aswFsBlk.sys
- 2008-03-29 17:35:21 94,544 ----a-w C:\WINXP\system32\drivers\aswmon2.sys
+ 2008-07-19 14:37:21 94,416 ----a-w C:\WINXP\system32\drivers\aswmon2.sys
- 2008-03-29 17:29:08 23,152 ----a-w C:\WINXP\system32\drivers\aswRdr.sys
+ 2008-07-19 14:33:42 23,152 ----a-w C:\WINXP\system32\drivers\aswRdr.sys
- 2008-03-29 17:31:34 75,856 ----a-w C:\WINXP\system32\drivers\aswSP.sys
+ 2008-07-19 14:35:18 78,416 ----a-w C:\WINXP\system32\drivers\aswSP.sys
- 2008-03-29 17:27:33 42,912 ----a-w C:\WINXP\system32\drivers\aswTdi.sys
+ 2008-07-19 14:32:36 42,912 ----a-w C:\WINXP\system32\drivers\aswTdi.sys
+ 2004-08-04 06:07:57 2,944 ----a-w C:\WINXP\system32\drivers\drmkaud.sys
+ 2001-08-17 21:00:04 2,944 -c--a-w C:\WINXP\system32\drivers\msmpu401.sys
+ 2002-08-30 12:00:00 2,944 ----a-w C:\WINXP\system32\drivers\null.sys
- 2006-09-14 08:40:00 357,888 ----a-w C:\WINXP\system32\dxtmsft.dll
+ 2007-08-13 16:35:46 346,624 ----a-w C:\WINXP\system32\dxtmsft.dll
- 2006-09-14 08:40:00 205,312 ----a-w C:\WINXP\system32\dxtrans.dll
+ 2007-08-13 16:35:38 214,528 ----a-w C:\WINXP\system32\dxtrans.dll
- 2006-09-14 08:40:00 55,808 ----a-w C:\WINXP\system32\extmgr.dll
+ 2007-08-13 16:54:10 131,584 ----a-w C:\WINXP\system32\extmgr.dll
+ 2007-08-13 16:36:26 61,952 ------w C:\WINXP\system32\icardie.dll
- 2004-08-19 23:09:54 34,304 ----a-w C:\WINXP\system32\ie4uinit.exe
+ 2007-08-13 16:39:06 54,784 ----a-w C:\WINXP\system32\ie4uinit.exe
- 2004-08-19 23:09:27 139,264 ----a-w C:\WINXP\system32\ieakeng.dll
+ 2007-08-13 16:39:26 152,064 ----a-w C:\WINXP\system32\ieakeng.dll
- 2004-08-19 23:09:27 221,696 ----a-w C:\WINXP\system32\ieaksie.dll
+ 2007-08-13 16:39:54 229,376 ----a-w C:\WINXP\system32\ieaksie.dll
- 2002-08-30 12:00:00 245,760 ----a-w C:\WINXP\system32\ieakui.dll
+ 2007-08-13 15:56:54 161,792 ----a-w C:\WINXP\system32\ieakui.dll
+ 2007-02-12 14:10:12 2,451,312 ------w C:\WINXP\system32\ieapfltr.dat
+ 2007-07-11 10:27:48 383,488 ------w C:\WINXP\system32\ieapfltr.dll
- 2004-08-19 23:09:27 323,584 ----a-w C:\WINXP\system32\iedkcs32.dll
+ 2007-08-13 16:39:50 382,976 ----a-w C:\WINXP\system32\iedkcs32.dll
- 2004-08-19 23:09:27 81,920 ----a-w C:\WINXP\system32\ieencode.dll
+ 2007-08-13 16:45:18 78,336 ----a-w C:\WINXP\system32\ieencode.dll
+ 2007-08-13 16:54:10 6,049,280 ------w C:\WINXP\system32\ieframe.dll
- 2006-09-14 08:40:00 251,392 ----a-w C:\WINXP\system32\iepeers.dll
+ 2007-08-13 16:54:10 191,488 ----a-w C:\WINXP\system32\iepeers.dll
- 2004-08-19 23:09:27 49,152 ----a-w C:\WINXP\system32\iernonce.dll
+ 2007-08-13 16:39:10 43,008 ----a-w C:\WINXP\system32\iernonce.dll
+ 2007-08-13 16:34:04 266,752 ------w C:\WINXP\system32\iertutil.dll
- 2004-08-19 23:09:27 63,488 ----a-w C:\WINXP\system32\iesetup.dll
+ 2007-08-13 16:39:12 55,296 ----a-w C:\WINXP\system32\iesetup.dll
- 2007-01-08 17:08:10 13,824 ----a-w C:\WINXP\system32\ieudinit.exe
+ 2007-08-13 16:39:10 13,312 ----a-w C:\WINXP\system32\ieudinit.exe
+ 2007-08-13 16:54:10 180,736 ------w C:\WINXP\system32\ieui.dll
+ 2004-07-26 15:16:10 1,568,768 ----a-w C:\WINXP\system32\imagX7.dll
+ 2004-07-26 15:16:10 476,320 ----a-w C:\WINXP\system32\imagXpr7.dll
+ 2004-07-26 15:16:10 262,144 ----a-w C:\WINXP\system32\imagXR7.dll
+ 2004-07-26 15:16:10 471,040 ----a-w C:\WINXP\system32\imagXRA7.dll
- 2004-08-19 23:09:28 35,840 ----a-w C:\WINXP\system32\imgutil.dll
+ 2007-08-13 16:36:06 36,352 ----a-w C:\WINXP\system32\imgutil.dll
- 2006-09-14 08:40:01 96,768 ----a-w C:\WINXP\system32\inseng.dll
+ 2007-08-13 16:39:02 92,672 ----a-w C:\WINXP\system32\inseng.dll
- 2008-02-22 00:23:35 135,168 ----a-w C:\WINXP\system32\java.exe
+ 2008-06-09 23:21:01 135,168 ----a-w C:\WINXP\system32\java.exe
- 2008-02-22 00:23:39 135,168 ----a-w C:\WINXP\system32\javaw.exe
+ 2008-06-09 23:21:04 135,168 ----a-w C:\WINXP\system32\javaw.exe
- 2008-02-22 01:33:32 139,264 ----a-w C:\WINXP\system32\javaws.exe
+ 2008-06-10 00:32:34 139,264 ----a-w C:\WINXP\system32\javaws.exe
- 2006-05-18 05:31:21 450,560 ----a-w C:\WINXP\system32\jscript.dll
+ 2007-08-13 16:38:04 491,520 ----a-w C:\WINXP\system32\jscript.dll
- 2006-09-14 08:40:01 16,384 ----a-w C:\WINXP\system32\jsproxy.dll
+ 2007-08-13 16:54:10 27,136 ----a-w C:\WINXP\system32\jsproxy.dll
+ 2002-08-30 12:00:00 2,000 -c--a-w C:\WINXP\system32\keyboard.drv
- 2004-08-19 23:09:30 22,528 ----a-w C:\WINXP\system32\licmgr10.dll
+ 2007-08-13 16:44:18 40,960 ----a-w C:\WINXP\system32\licmgr10.dll
+ 2002-08-30 12:00:00 2,560 ----a-w C:\WINXP\system32\lz32.dll
+ 2002-08-30 12:00:00 2,032 -c--a-w C:\WINXP\system32\mouse.drv
- 2007-04-03 20:48:52 13,511,640 ----a-w C:\WINXP\system32\MRT.exe
+ 2008-05-09 12:35:06 16,863,864 ----a-w C:\WINXP\system32\MRT.exe
+ 2007-08-13 16:54:10 458,752 ------w C:\WINXP\system32\msfeeds.dll
+ 2007-08-13 16:54:10 50,688 ------w C:\WINXP\system32\msfeedsbs.dll
+ 2007-08-13 16:36:40 12,288 ------w C:\WINXP\system32\msfeedssync.exe
- 2004-08-19 23:09:58 29,184 ----a-w C:\WINXP\system32\mshta.exe
+ 2007-08-13 16:32:30 45,568 ----a-w C:\WINXP\system32\mshta.exe
- 2006-09-14 08:40:03 3,075,584 ----a-w C:\WINXP\system32\mshtml.dll
+ 2007-08-13 16:54:12 3,578,368 ----a-w C:\WINXP\system32\mshtml.dll
- 2006-09-14 08:40:03 448,512 ----a-w C:\WINXP\system32\mshtmled.dll
+ 2007-08-13 16:54:10 475,648 ----a-w C:\WINXP\system32\mshtmled.dll
- 2004-08-19 23:08:26 57,344 ----a-w C:\WINXP\system32\mshtmler.dll
+ 2007-08-13 16:01:12 48,128 ----a-w C:\WINXP\system32\mshtmler.dll
- 2002-08-30 12:00:00 146,432 ----a-w C:\WINXP\system32\msls31.dll
+ 2007-08-13 16:54:10 156,160 ----a-w C:\WINXP\system32\msls31.dll
- 2006-09-14 08:40:03 146,432 ----a-w C:\WINXP\system32\msrating.dll
+ 2007-08-13 16:44:26 192,000 ----a-w C:\WINXP\system32\msrating.dll
- 2006-09-14 08:40:03 532,480 ----a-w C:\WINXP\system32\mstime.dll
+ 2007-08-13 16:54:10 670,720 ----a-w C:\WINXP\system32\mstime.dll
+ 2005-02-16 13:18:04 90,184 ----a-w C:\WINXP\system32\NeroCo.dll
+ 2002-08-30 12:00:00 2,656 -c--a-w C:\WINXP\system32\netware.drv
- 2004-08-19 23:09:36 97,280 ----a-w C:\WINXP\system32\occache.dll
+ 2007-08-13 16:44:06 101,376 ----a-w C:\WINXP\system32\occache.dll
- 2006-09-14 08:40:03 39,424 ----a-w C:\WINXP\system32\pngfilt.dll
+ 2007-08-13 16:36:12 44,544 ----a-w C:\WINXP\system32\pngfilt.dll
- 2006-09-04 06:12:53 1,494,528 ----a-w C:\WINXP\system32\shdocvw.dll
+ 2006-09-23 11:12:56 1,497,088 ----a-w C:\WINXP\system32\shdocvw.dll
- 2006-09-14 08:40:04 474,624 ----a-w C:\WINXP\system32\shlwapi.dll
+ 2006-09-23 11:12:56 474,624 ----a-w C:\WINXP\system32\shlwapi.dll
+ 2007-10-18 09:31:46 51,224 ----a-w C:\WINXP\system32\sirenacm.dll
+ 2007-07-30 17:19:36 549,720 -c--a-w C:\WINXP\system32\SoftwareDistribution\Setup\ServiceStartup\wuapi.dll\7.0.6000.381\wuapi.dll
+ 2007-07-30 17:18:40 33,624 -c--a-w C:\WINXP\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.0.6000.381\wups.dll
+ 2007-07-30 17:19:12 43,352 -c--a-w C:\WINXP\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.0.6000.381\wups2.dll
+ 2002-08-30 12:00:00 1,744 -c--a-w C:\WINXP\system32\sound.drv
+ 2004-07-09 07:43:56 364,544 ----a-w C:\WINXP\system32\TwnLib4.dll
- 2004-08-19 23:09:46 37,888 ----a-w C:\WINXP\system32\url.dll
+ 2007-08-13 16:44:30 105,984 ----a-w C:\WINXP\system32\url.dll
- 2006-09-14 08:40:05 615,936 ----a-w C:\WINXP\system32\urlmon.dll
+ 2007-08-13 16:54:10 1,162,240 ----a-w C:\WINXP\system32\urlmon.dll
- 2004-08-19 23:09:46 417,792 ----a-w C:\WINXP\system32\vbscript.dll
+ 2007-08-13 16:54:10 413,696 ----a-w C:\WINXP\system32\vbscript.dll
+ 2002-08-30 12:00:00 2,176 -c--a-w C:\WINXP\system32\vga.drv
- 2004-08-19 23:09:47 49,152 ----a-w C:\WINXP\system32\wdigest.dll
+ 2006-03-24 04:37:52 49,152 ----a-w C:\WINXP\system32\wdigest.dll
- 2004-08-19 23:09:47 281,600 ----a-w C:\WINXP\system32\webcheck.dll
+ 2007-08-13 16:54:10 231,424 ----a-w C:\WINXP\system32\webcheck.dll
+ 2007-08-13 16:45:16 206,336 ------w C:\WINXP\system32\WinFXDocObj.exe
- 2006-09-14 08:40:05 663,040 ----a-w C:\WINXP\system32\wininet.dll
+ 2007-08-13 16:54:10 818,688 ----a-w C:\WINXP\system32\wininet.dll
+ 2002-08-30 12:00:00 2,864 -c--a-w C:\WINXP\system32\winsock.dll
+ 2002-08-30 12:00:00 2,112 -c--a-w C:\WINXP\system32\winspool.exe
+ 2002-08-30 12:00:00 2,736 -c--a-w C:\WINXP\system32\wowdeb.exe
- 2005-05-26 02:16:30 467,224 ----a-w C:\WINXP\system32\wuapi.dll
+ 2007-07-30 17:19:36 549,720 ----a-w C:\WINXP\system32\wuapi.dll
- 2005-05-26 02:16:30 125,720 ----a-w C:\WINXP\system32\wuauclt.exe
+ 2007-07-30 17:19:16 53,080 ----a-w C:\WINXP\system32\wuauclt.exe
- 2005-05-26 02:16:30 1,343,768 ----a-w C:\WINXP\system32\wuaueng.dll
+ 2007-07-30 17:19:42 1,712,984 ----a-w C:\WINXP\system32\wuaueng.dll
- 2005-05-26 02:16:32 128,792 ----a-w C:\WINXP\system32\wucltui.dll
+ 2007-07-30 17:19:32 325,976 ----a-w C:\WINXP\system32\wucltui.dll
- 2005-05-26 02:16:30 41,240 ----a-w C:\WINXP\system32\wups.dll
+ 2007-07-30 17:18:40 33,624 ----a-w C:\WINXP\system32\wups.dll
- 2005-05-26 02:16:30 18,200 ----a-w C:\WINXP\system32\wups2.dll
+ 2007-07-30 17:19:12 43,352 ----a-w C:\WINXP\system32\wups2.dll
- 2005-05-26 02:16:30 173,536 -c--a-w C:\WINXP\system32\wuweb.dll
+ 2007-07-30 17:19:46 203,096 ----a-w C:\WINXP\system32\wuweb.dll
+ 2008-08-20 11:48:59 16,384 ----atw C:\WINXP\Temp\Perflib_Perfdata_5e0.dat
+ 2005-09-12 14:13:46 233,472 -c--a-w C:\WINXP\UNNeroShowTime.exe
+ 2005-09-12 14:13:46 233,472 -c--a-w C:\WINXP\UNNeroVision.exe
+ 2006-06-05 12:14:28 479,232 -c--a-w C:\WINXP\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcm80.dll
+ 2006-06-05 12:14:28 548,864 ----a-w C:\WINXP\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcp80.dll
+ 2006-06-05 12:14:28 626,688 ----a-w C:\WINXP\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcr80.dll
+ 2007-10-23 15:49:46 586,752 -c--a-w C:\WINXP\WLXPGSS.SCR
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINXP\system32\ctfmon.exe" [2004-08-20 01:09 15360]
"E-MU USB Audio Control Panel"="C:\Program Files\Creative Professional\E-MU USB Audio\E-MU USB Audio\EmuUsbAudioCP.exe" [2006-08-10 09:28 303104]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34 5724184]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvMediaCenter"="C:\WINXP\system32\NvMcTray.dll" [2005-07-20 21:07 86016]
"NvCplDaemon"="C:\WINXP\system32\NvCpl.dll" [2005-07-20 21:07 7110656]
"LWBMOUSE"="C:\Program Files\Trust\250S Series\lwbwheel.exe" [2001-04-20 13:42 429568]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-12-23 20:35 185896]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2006-11-21 19:38 35328]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 23:12 49152]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784]
"NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 16:40 155648]
"nwiz"="nwiz.exe" [2005-07-20 21:07 1519616 C:\WINXP\system32\nwiz.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINXP\System32\CTFMON.EXE" [2004-08-20 01:09 15360]
[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\[u]0
/u]
Source= C:\Program Files\Windows NT\rterteprok.html
FriendlyName=
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=wbazvb.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.SP54"= SP5X_32.DLL
"VIDC.SP55"= SP5X_32.DLL
"VIDC.SP56"= SP5X_32.DLL
"VIDC.SP57"= SP5X_32.DLL
"VIDC.SP58"= SP5X_32.DLL
"midi1"= usbkt1x1.dll
"VIDC.XFR1"= xfcodec.dll
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dllschannel.dlldigest.dllmsnsspc.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YaplockTray.exe]
--a--c--- 2005-07-08 12:59 94208 C:\PROGRA~1\Yaplock\YaplockTray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe"=
R1 aswSP;avast! Self Protection;C:\WINXP\system32\drivers\aswSP.sys [2008-07-19 16:35]
R2 aswFsBlk;aswFsBlk;C:\WINXP\system32\DRIVERS\aswFsBlk.sys [2008-07-19 16:37]
R2 emaudsv;E-MU Audio Service;C:\WINXP\system32\emaudsv.exe [2006-08-10 02:08]
R3 emusba10;E-MU USB-Audio 1.0 Driver;C:\WINXP\system32\DRIVERS\emusba10.sys [2006-08-10 02:08]
S3 Boonty Games;Boonty Games;C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe [2006-07-18 23:01]
S3 CA500AI;SPCA500A Still Image Capture, Sunplus Version 1.00;C:\WINXP\system32\Drivers\BULKUSB.sys []
S3 CA500AV;TRUST FAMILYC@M 310 AV(Video);C:\WINXP\system32\DRIVERS\CA500AV.SYS []
S3 hercspud;Hercules (R) WDM Audio Driver;C:\WINXP\system32\drivers\hercspud.sys [2003-01-10 09:21]
S3 hercwdm;Hercules (R) WDM Interface Driver;C:\WINXP\system32\drivers\hercwdm.sys [2003-01-10 09:21]
S3 MBAMCatchMe;MBAMCatchMe;C:\Documents and Settings\xxx.XXXORDI\Bureau\Pour Nettoyer l'ordi\Malwarebytes' Anti-Malware\catchme.sys []
S3 sbusb;Sound Blaster USB Audio Driver;C:\WINXP\system32\DRIVERS\sbusb.sys []
S3 UKS11LDR;Midiman USB Keystation Loader;C:\WINXP\system32\drivers\uks11ldr.sys [2002-09-25 19:02]
S3 USBKS1X1;Midiman USB Keystation USB Driver;C:\WINXP\system32\drivers\usbks1x1.sys [2002-09-25 19:02]
S3 USBKT1X1;M-Audio USB Keystation;C:\WINXP\system32\drivers\usbkt1x1.sys []
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{709acbca-bdc0-11db-a6a1-000d886309d8}]
\Shell\AutoRun\command - F:\LaunchU3.exe -a
.
- - - - ORPHANS REMOVED - - - -
HKCU-Run-Vadh - C:\WINXP\system32\NLOOKU~1.EXE
HKCU-Run-LemmingsRevolutionSetup.exe - C:\DOCUME~1\XXX~1.XXX\Bureau\LEMMIN~1.EXE
HKCU-Run-Atei - C:\WINXP\CROSOF~1\winspool.exe
HKCU-Run-Windows Locator - C:\WINXP\system32\wsass.exe
HKCU-Run-RemoteControl - (no file)
HKLM-Run-NI.UWFX5V - C:\Documents and Settings\xxx.XXXORDI\Local Settings\Temporary Internet Files\Content.IE5\GLMJG1A7\WinFixer2005ScannerInstallFRA[1].exe
HKLM-Run-svpr - C:\WINXP\System32\svpr.exe
HKLM-Run-ML1HelperStartUp - C:\PROGRA~1\MIDNIG~1\ML1HEL~1.EXE
HKLM-Run-BI1HelperStartUp - C:\PROGRA~1\BEACHI~1\BI1HEL~1.EXE
HKLM-Run-AQ3HelperStartUp - C:\PROGRA~1\AQUATI~1\AQ3HEL~1.EXE
HKLM-Run-mehewomef - C:\Program Files\Common Files\mehewomef77798.exe
HKLM-Run-RemoteCenter - (no file)
HKLM-Run-WinServ 32 - windserv.exe
HKLM-Run-NWEReboot - (no file)
HKLM-Run-Windows Messenger Plus! - (no file)
HKLM-Run-1A1319181B1A1C1F1 - 160F15141716181.exe
HKU-Default-RunOnce-Windows System Maintain - BUILDERS.EXE
HKCU-Explorer_Run-{74927296-09EB-2060-1114-021022020020} - C:\Program Files\Fichiers communs\{74927296-09EB-2060-1114-021022020020}\Update.exe
HKU-Default-Explorer_Run-{74927296-09EC-2060-1114-021022020020} - C:\Program Files\Fichiers communs\{74927296-09EC-2060-1114-021022020020}\Update.exe
Notify-awtsp - C:\WINXP\system32\awtsp.dll
MSConfigStartUp-BitTorrent - C:\Program Files\BitTorrent\bittorrent.exe
MSConfigStartUp-MSMSGS - C:\Program Files\Messenger\msmsgs.exe
.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\xxx.XXXORDI\Application Data\Mozilla\Firefox\Profiles\l7qqceek.moi\
FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://fr.search.yahoo.com/search?ei=UTF-8&fr=ytff-cclean&p=
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.be
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2008-08-20 14:52:10
Windows 5.1.2600 Service Pack 2 NTFS
Balayage processus cachés ...
Balayage caché autostart entries ...
Balayage des fichiers cachés ...
C:\DOCUME~1\XXX~1.XXX\LOCALS~1\Temp\RGI30.tmp
**************************************************************************
.
Temps d'accomplissement: 2008-08-20 14:56:45
ComboFix-quarantined-files.txt 2008-08-20 12:55:42
ComboFix2.txt 2008-04-17 11:46:31
ComboFix3.txt 2008-04-12 11:56:35
Pre-Run: 4,533,407,744 octets libres
Post-Run: 4,744,536,064 octets libres
517