j'ai refait la même manip que la première fois (je te confirme que c'est bien vérolé, encore...) :
log :
Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrateur at 2010-03-18 21:37:38
Microsoft Windows XP Professionnel Service Pack 1
System drive C: has 32 GB (90%) free of 35 GB
Total RAM: 3071 MB (81% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:37:39, on 18/03/2010
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\ssms.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\System32\explorer.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system\VMwareService.exe
C:\WINDOWS\system32\csrsc.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\WINDOWS\system32\imapi.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Administrateur\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Administrateur.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nTrayFw] C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [WSVCHO] C:\WINDOWS\system\svhost.exe
O4 - HKLM\..\Run: [Windows Explorer] C:\WINDOWS\System32\explorer.exe
O4 - HKLM\..\Run: [Windows Update] ssms.exe
O4 - HKLM\..\RunServices: [Windows Update] ssms.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: app_filter - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: VMwareService - Unknown owner - C:\WINDOWS\system\VMwareService.exe
O23 - Service: Windows Spool Services (WinSpoolSvc) - Unknown owner - C:\WINDOWS\system32\csrsc.exe
--
End of file - 5424 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E718888-423F-11D2-876E-00A0C9082467} - &Radio - C:\WINDOWS\System32\msdxm.ocx [2002-09-07 846364]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\System32\NvMcTray.dll [2006-03-09 86016]
"NvCplDaemon"=C:\WINDOWS\System32\NvCpl.dll [2006-03-09 7561216]
"nTrayFw"=C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe [2004-11-20 274432]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-11-15 86016]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 216321]
"Logitech Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2005-03-10 35328]
"WSVCHO"=C:\WINDOWS\system\svhost.exe [2010-03-18 67072]
"Windows Explorer"=C:\WINDOWS\System32\explorer.exe [2002-09-07 182272]
"Windows Update"=C:\WINDOWS\system32\ssms.exe [2010-03-18 155648]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2267648]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2002-08-20 1519645]
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SVCWINSPOOL]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SVCWINSPOOL]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewall policy\standardprofile\authorizedapplications\list]
"C:\WINDOWS\System32\explorer.exe"="C:\WINDOWS\System32\explorer.exe:*:Enabled:Windows Explorer"
"\??\C:\WINDOWS\system32\winlogon.exe"="\??\C:\WINDOWS\system32\winlogon.exe:*:enabled:@shell32.dll,-1"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewall policy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 1 months======
2010-03-18 21:31:57 ----AH---- C:\WINDOWS\System32\gk.exe
2010-03-18 21:31:20 ----AH---- C:\WINDOWS\System32\qm.exe
2010-03-18 21:11:46 ----A---- C:\WINDOWS\System32\x.exe
2010-03-18 20:36:26 ----N---- C:\WINDOWS\System32\csrsc.exe
2010-03-18 20:30:12 ----RSH---- C:\WINDOWS\System32\ssms.exe
2010-03-18 20:06:18 ----D---- C:\Program Files\a-squared Free
2010-03-18 19:53:38 ----A---- C:\WINDOWS\System32\mini.exe
2010-03-18 19:53:35 ----SD---- C:\Bibitte
2010-03-18 19:43:47 ----AH---- C:\WINDOWS\System32\tzwaw.exe
2010-03-15 19:14:07 ----D---- C:\WINDOWS\System32\NtmsData
2010-03-15 18:59:52 ----D---- C:\Documents and Settings\Administrateur\Application Data\Logitech
2010-03-15 18:57:40 ----D---- C:\WINDOWS\RegisteredPackages
2010-03-15 18:57:35 ----A---- C:\WINDOWS\System32\wmpui.dll
2010-03-15 18:57:35 ----A---- C:\WINDOWS\System32\wmpshell.dll
2010-03-15 18:57:35 ----A---- C:\WINDOWS\System32\wmploc.dll
2010-03-15 18:57:35 ----A---- C:\WINDOWS\System32\wmpdxm.dll
2010-03-15 18:57:35 ----A---- C:\WINDOWS\System32\wmpcore.dll
2010-03-15 18:57:35 ----A---- C:\WINDOWS\System32\wmpcd.dll
2010-03-15 18:57:35 ----A---- C:\WINDOWS\System32\wmpasf.dll
2010-03-15 18:57:35 ----A---- C:\WINDOWS\System32\wmp.dll
2010-03-15 18:57:35 ----A---- C:\WINDOWS\System32\wmerror.dll
2010-03-15 18:57:35 ----A---- C:\WINDOWS\System32\asferror.dll
2010-03-15 18:57:27 ----A---- C:\WINDOWS\System32\wmdmps.dll
2010-03-15 18:57:27 ----A---- C:\WINDOWS\System32\wmdmlog.dll
2010-03-15 18:57:27 ----A---- C:\WINDOWS\System32\mswmdm.dll
2010-03-15 18:57:27 ----A---- C:\WINDOWS\System32\msscp.dll
2010-03-15 18:57:27 ----A---- C:\WINDOWS\System32\mspmsp.dll
2010-03-15 18:57:27 ----A---- C:\WINDOWS\System32\mspmsnsv.dll
2010-03-15 18:57:27 ----A---- C:\WINDOWS\System32\CEWMDM.dll
2010-03-15 18:57:26 ----A---- C:\WINDOWS\System32\mpg4dmod.dll
2010-03-15 18:57:26 ----A---- C:\WINDOWS\System32\mp4sdmod.dll
2010-03-15 18:57:26 ----A---- C:\WINDOWS\System32\mp43dmod.dll
2010-03-15 18:57:25 ----A---- C:\WINDOWS\System32\wmvdmoe2.dll
2010-03-15 18:57:25 ----A---- C:\WINDOWS\System32\wmvdmod.dll
2010-03-15 18:57:25 ----A---- C:\WINDOWS\System32\wmvcore.dll
2010-03-15 18:57:25 ----A---- C:\WINDOWS\System32\wmspdmoe.dll
2010-03-15 18:57:25 ----A---- C:\WINDOWS\System32\wmspdmod.dll
2010-03-15 18:57:25 ----A---- C:\WINDOWS\System32\wmsdmoe2.dll
2010-03-15 18:57:25 ----A---- C:\WINDOWS\System32\wmsdmod.dll
2010-03-15 18:57:25 ----A---- C:\WINDOWS\System32\wmnetmgr.dll
2010-03-15 18:57:25 ----A---- C:\WINDOWS\System32\wmidx.dll
2010-03-15 18:57:25 ----A---- C:\WINDOWS\System32\wmadmoe.dll
2010-03-15 18:57:25 ----A---- C:\WINDOWS\System32\wmadmod.dll
2010-03-15 18:57:25 ----A---- C:\WINDOWS\System32\qasf.dll
2010-03-15 18:57:25 ----A---- C:\WINDOWS\System32\logagent.exe
2010-03-15 18:57:25 ----A---- C:\WINDOWS\System32\laprxy.dll
2010-03-15 18:57:24 ----A---- C:\WINDOWS\System32\wmasf.dll
2010-03-15 18:57:24 ----A---- C:\WINDOWS\System32\msnetobj.dll
2010-03-15 18:57:24 ----A---- C:\WINDOWS\System32\drmv2clt.dll
2010-03-15 18:57:24 ----A---- C:\WINDOWS\System32\drmstor.dll
2010-03-15 18:57:24 ----A---- C:\WINDOWS\System32\drmclien.dll
2010-03-15 18:57:24 ----A---- C:\WINDOWS\System32\blackbox.dll
2010-03-15 18:56:56 ----A---- C:\WINDOWS\System32\unicows.dll
2010-03-15 18:56:56 ----A---- C:\WINDOWS\System32\msvcr71.dll
2010-03-15 18:56:56 ----A---- C:\WINDOWS\System32\msvcp71.dll
2010-03-15 18:56:55 ----D---- C:\Program Files\Fichiers communs\Logitech
2010-03-15 18:56:55 ----A---- C:\WINDOWS\System32\MFC71u.dll
2010-03-15 18:56:55 ----A---- C:\WINDOWS\System32\MFC71.dll
2010-03-15 18:56:55 ----A---- C:\WINDOWS\System32\atl71.dll
2010-03-15 18:56:48 ----D---- C:\Program Files\Logitech
2010-03-15 18:56:48 ----A---- C:\WINDOWS\KHALMNPR.Exe
2010-03-14 17:45:55 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-03-14 17:45:55 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2010-03-14 16:47:31 ----D---- C:\Program Files\Recuva
2010-03-14 11:15:33 ----D---- C:\WINDOWS\Minidump
2010-03-14 11:14:37 ----D---- C:\Program Files\Avira
2010-03-14 11:14:37 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2010-03-14 10:30:54 ----D---- C:\Documents and Settings\Administrateur\Application Data\QuickScan
2010-03-14 08:10:03 ----D---- C:\Documents and Settings\Administrateur\Application Data\Help
2010-03-13 16:27:39 ----D---- C:\Documents and Settings\Administrateur\Application Data\Adobe
2010-03-13 16:06:16 ----D---- C:\Documents and Settings\Administrateur\Application Data\dvdcss
2010-03-13 15:57:04 ----A---- C:\WINDOWS\System32\ksuser.dll
2010-03-13 15:57:02 ----D---- C:\Program Files\Realtek Sound Manager
2010-03-13 15:56:59 ----N---- C:\WINDOWS\avrack.ini
2010-03-13 15:56:59 ----D---- C:\Program Files\AvRack
2010-03-13 15:56:59 ----A---- C:\WINDOWS\System32\RTLCPL.EXE
2010-03-13 15:56:59 ----A---- C:\WINDOWS\System32\RTLCPAPI.dll
2010-03-13 15:56:59 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2010-03-13 15:56:56 ----N---- C:\WINDOWS\System32\ChCfg.exe
2010-03-13 15:56:48 ----N---- C:\WINDOWS\alcupd.exe
2010-03-13 15:56:48 ----N---- C:\WINDOWS\alcrmv.exe
2010-03-13 15:53:47 ----D---- C:\Documents and Settings\Administrateur\Application Data\vlc
2010-03-13 15:53:22 ----D---- C:\Program Files\VideoLAN
2010-03-13 10:04:33 ----D---- C:\Documents and Settings\Administrateur\Application Data\Mozilla
2010-03-13 10:04:28 ----D---- C:\Program Files\Mozilla Firefox
2010-03-12 19:53:09 ----SHD---- C:\RECYCLER
2010-03-12 19:25:14 ----D---- C:\WINDOWS\temp
2010-03-12 19:25:12 ----A---- C:\ComboFix.txt
2010-03-11 21:41:19 ----A---- C:\SAFEBOOT_REPAIR.TXT
2010-03-11 18:56:43 ----D---- C:\Program Files\CCleaner
2010-03-11 07:03:57 ----A---- C:\Boot.bak
2010-03-11 07:03:56 ----RASHD---- C:\cmdcons
2010-03-11 07:02:30 ----A---- C:\WINDOWS\zip.exe
2010-03-11 07:02:30 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-03-11 07:02:30 ----A---- C:\WINDOWS\SWSC.exe
2010-03-11 07:02:30 ----A---- C:\WINDOWS\SWREG.exe
2010-03-11 07:02:30 ----A---- C:\WINDOWS\sed.exe
2010-03-11 07:02:30 ----A---- C:\WINDOWS\PEV.exe
2010-03-11 07:02:30 ----A---- C:\WINDOWS\NIRCMD.exe
2010-03-11 07:02:30 ----A---- C:\WINDOWS\MBR.exe
2010-03-11 07:02:30 ----A---- C:\WINDOWS\grep.exe
2010-03-11 07:02:27 ----D---- C:\WINDOWS\ERDNT
2010-03-11 07:02:21 ----D---- C:\Qoobox
2010-03-09 18:47:24 ----D---- C:\WINDOWS\pss
2010-03-09 18:26:09 ----D---- C:\Documents and Settings\Administrateur\Application Data\Malwarebytes
2010-03-09 18:26:05 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-03-09 18:26:05 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2010-03-09 18:21:59 ----A---- C:\WINDOWS\System32\iuengine.dll
2010-03-08 20:04:08 ----D---- C:\rsit
2010-03-08 07:22:33 ----D---- C:\Program Files\Trend Micro
2010-03-07 21:01:21 ----D---- C:\Program Files\Western Digital Technologies
2010-03-07 20:59:50 ----D---- C:\Program Files\ASUSTeK
2010-03-07 20:59:24 ----D---- C:\WINDOWS\LastGood
2010-03-07 20:58:51 ----RASH---- C:\boot.ini
2010-03-07 20:56:36 ----SD---- C:\WINDOWS\System32\Microsoft
2010-03-07 20:55:54 ----RSHDC---- C:\WINDOWS\System32\dllcache
2010-03-07 20:55:54 ----RSD---- C:\WINDOWS\Fonts
2010-03-07 20:55:54 ----RD---- C:\WINDOWS\Web
2010-03-07 20:55:54 ----HD---- C:\WINDOWS\inf
2010-03-07 20:55:54 ----D---- C:\WINDOWS\WinSxS
2010-03-07 20:55:54 ----D---- C:\WINDOWS\twain_32
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\wins
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\wbem
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\usmt
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\spool
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\ShellExt
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\Setup
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\ras
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\oobe
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\npp
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\mui
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\inetsrv
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\IME
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\icsxml
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\ias
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\export
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\drivers
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\dhcp
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\config
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\3com_dmi
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\3076
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\2052
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\1054
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\1042
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\1041
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\1037
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\1036
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\1033
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\1031
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\1028
2010-03-07 20:55:54 ----D---- C:\WINDOWS\System32\1025
2010-03-07 20:55:54 ----D---- C:\WINDOWS\system32
2010-03-07 20:55:54 ----D---- C:\WINDOWS\system
2010-03-07 20:55:54 ----D---- C:\WINDOWS\security
2010-03-07 20:55:54 ----D---- C:\WINDOWS\Resources
2010-03-07 20:55:54 ----D---- C:\WINDOWS\repair
2010-03-07 20:55:54 ----D---- C:\WINDOWS\mui
2010-03-07 20:55:54 ----D---- C:\WINDOWS\msapps
2010-03-07 20:55:54 ----D---- C:\WINDOWS\msagent
2010-03-07 20:55:54 ----D---- C:\WINDOWS\Media
2010-03-07 20:55:54 ----D---- C:\WINDOWS\java
2010-03-07 20:55:54 ----D---- C:\WINDOWS\ime
2010-03-07 20:55:54 ----D---- C:\WINDOWS\Help
2010-03-07 20:55:54 ----D---- C:\WINDOWS\Driver Cache
2010-03-07 20:55:54 ----D---- C:\WINDOWS\Debug
2010-03-07 20:55:54 ----D---- C:\WINDOWS\Cursors
2010-03-07 20:55:54 ----D---- C:\WINDOWS\Connection Wizard
2010-03-07 20:55:54 ----D---- C:\WINDOWS\Config
2010-03-07 20:55:54 ----D---- C:\WINDOWS\AppPatch
2010-03-07 20:55:54 ----D---- C:\WINDOWS\addins
2010-03-07 20:55:54 ----D---- C:\WINDOWS
2010-03-07 20:54:26 ----RA---- C:\WINDOWS\System32\fdco1ins.dll
2010-03-07 20:54:26 ----RA---- C:\WINDOWS\System32\fdco1.dll
2010-03-07 20:54:02 ----A---- C:\WINDOWS\System32\CapabilityTable.exe
2010-03-07 20:53:56 ----RA---- C:\WINDOWS\System32\idecoi.dll
2010-03-07 20:53:56 ----A---- C:\WINDOWS\System32\nvuide.exe
2010-03-07 20:52:40 ----A---- C:\WINDOWS\System32\nvunrm.exe
2010-03-07 20:52:39 ----RA---- C:\WINDOWS\System32\nvconrm.dll
2010-03-07 20:52:39 ----RA---- C:\WINDOWS\System32\bdco1ins.dll
2010-03-07 20:52:39 ----RA---- C:\WINDOWS\System32\bdco1.dll
2010-03-07 20:52:38 ----A---- C:\WINDOWS\System32\nvusmb.exe
2010-03-07 20:52:38 ----A---- C:\WINDOWS\System32\NVUNINST.EXE
2010-03-07 20:52:36 ----D---- C:\WINDOWS\nview
2010-03-07 20:52:36 ----A---- C:\WINDOWS\System32\nvudisp.exe
2010-03-07 20:52:31 ----D---- C:\WINDOWS\System32\ReinstallBackups
2010-03-07 20:52:14 ----D---- C:\Program Files\Fichiers communs\InstallShield
2010-03-07 20:52:13 ----RA---- C:\WINDOWS\System32\raidmgmt.ini
2010-03-07 20:51:54 ----D---- C:\WINDOWS\LastGood.Tmp
2010-03-07 20:51:54 ----A---- C:\WINDOWS\Ascd_tmp.ini
2010-03-07 20:50:52 ----HD---- C:\Program Files\InstallShield Installation Information
2010-03-07 20:50:24 ----D---- C:\Program Files\NVIDIA Corporation
2010-03-07 20:50:10 ----D---- C:\WINDOWS\Downloaded Installations
2010-03-07 20:31:13 ----D---- C:\Program Files\Free
2010-03-07 20:31:13 ----D---- C:\Documents and Settings\Administrateur\Application Data\Macromedia
2010-03-07 20:31:12 ----SHD---- C:\WINDOWS\ftpcache
2010-03-07 20:21:31 ----SHD---- C:\WINDOWS\Installer
2010-03-07 20:21:30 ----D---- C:\Documents and Settings\Administrateur\Application Data\Identities
2010-03-07 20:21:27 ----HD---- C:\Program Files\Uninstall Information
2010-03-07 20:21:13 ----SD---- C:\Documents and Settings\Administrateur\Application Data\Microsoft
2010-03-07 20:21:13 ----ASH---- C:\Documents and Settings\Administrateur\Application Data\desktop.ini
2010-03-07 20:14:43 ----SHD---- C:\System Volume Information
2010-03-07 20:14:43 ----D---- C:\WINDOWS\Prefetch
2010-03-07 20:14:43 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-03-07 20:11:32 ----D---- C:\WINDOWS\System32\xircom
2010-03-07 20:11:32 ----D---- C:\Program Files\xerox
2010-03-07 20:11:32 ----D---- C:\Program Files\microsoft frontpage
2010-03-07 20:11:15 ----A---- C:\WINDOWS\control.ini
2010-03-07 20:11:15 ----A---- C:\AUTOEXEC.BAT
2010-03-07 20:11:06 ----A---- C:\WINDOWS\System32\mapi32.dll
2010-03-07 20:10:35 ----RD---- C:\WINDOWS\Offline Web Pages
2010-03-07 20:10:34 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-03-07 20:10:34 ----RAH---- C:\WINDOWS\System32\logonui.exe.manifest
2010-03-07 20:10:31 ----RAH---- C:\WINDOWS\System32\cdplayer.exe.manifest
2010-03-07 20:10:14 ----D---- C:\WINDOWS\System32\DirectX
2010-03-07 20:09:50 ----A---- C:\WINDOWS\System32\safrslv.dll
2010-03-07 20:09:50 ----A---- C:\WINDOWS\System32\safrdm.dll
2010-03-07 20:09:50 ----A---- C:\WINDOWS\System32\safrcdlg.dll
2010-03-07 20:09:50 ----A---- C:\WINDOWS\System32\racpldlg.dll
2010-03-07 20:09:50 ----A---- C:\WINDOWS\System32\atrace.dll
2010-03-07 20:09:48 ----A---- C:\WINDOWS\System32\desktop.ini
2010-03-07 20:09:48 ----A---- C:\WINDOWS\desktop.ini
2010-03-07 20:09:41 ----A---- C:\WINDOWS\System32\nmevtmsg.dll
2010-03-07 20:09:41 ----A---- C:\WINDOWS\System32\mnmsrvc.exe
2010-03-07 20:09:41 ----A---- C:\WINDOWS\System32\isrdbg32.dll
2010-03-07 20:09:39 ----D---- C:\Program Files\Fichiers communs\Services
2010-03-07 20:09:39 ----A---- C:\WINDOWS\System32\acctres.dll
2010-03-07 20:09:38 ----A---- C:\WINDOWS\System32\inetres.dll
2010-03-07 20:09:35 ----SD---- C:\WINDOWS\Tasks
2010-03-07 20:09:35 ----A---- C:\WINDOWS\System32\icwphbk.dll
2010-03-07 20:09:34 ----A---- C:\WINDOWS\System32\isign32.dll
2010-03-07 20:09:34 ----A---- C:\WINDOWS\System32\inetcfg.dll
2010-03-07 20:09:34 ----A---- C:\WINDOWS\System32\icwdial.dll
2010-03-07 20:09:34 ----A---- C:\WINDOWS\System32\icfgnt5.dll
2010-03-07 20:09:32 ----D---- C:\Program Files\Fichiers communs\MSSoap
2010-03-07 20:09:28 ----D---- C:\WINDOWS\System32\Macromed
2010-03-07 20:09:28 ----D---- C:\WINDOWS\srchasst
2010-03-07 20:09:27 ----N---- C:\WINDOWS\System32\qmgr.dll
2010-03-07 20:09:27 ----A---- C:\WINDOWS\System32\qmgrprxy.dll
2010-03-07 20:09:27 ----A---- C:\WINDOWS\System32\qmgr.dll.old
2010-03-07 20:09:26 ----D---- C:\Program Files\Movie Maker
2010-03-07 20:09:23 ----D---- C:\WINDOWS\PCHealth
2010-03-07 20:09:22 ----N---- C:\WINDOWS\System32\srsvc.dll
2010-03-07 20:09:22 ----D---- C:\WINDOWS\System32\Restore
2010-03-07 20:09:22 ----A---- C:\WINDOWS\System32\srrstr.dll
2010-03-07 20:09:22 ----A---- C:\WINDOWS\System32\srclient.dll
2010-03-07 20:09:22 ----A---- C:\WINDOWS\System32\mnmdd.dll
2010-03-07 20:09:22 ----A---- C:\WINDOWS\System32\ils.dll
2010-03-07 20:09:21 ----A---- C:\WINDOWS\System32\nmmkcert.dll
2010-03-07 20:09:21 ----A---- C:\WINDOWS\System32\msconf.dll
2010-03-07 20:09:19 ----D---- C:\Program Files\NetMeeting
2010-03-07 20:09:19 ----A---- C:\WINDOWS\System32\msoert2.dll
2010-03-07 20:09:19 ----A---- C:\WINDOWS\System32\msoeacct.dll
2010-03-07 20:09:18 ----N---- C:\WINDOWS\System32\schedsvc.dll
2010-03-07 20:09:18 ----D---- C:\Program Files\Outlook Express
2010-03-07 20:09:18 ----A---- C:\WINDOWS\System32\mstinit.exe
2010-03-07 20:09:18 ----A---- C:\WINDOWS\System32\mstask.dll
2010-03-07 20:09:18 ----A---- C:\WINDOWS\System32\inetcomm.dll
2010-03-07 20:09:12 ----D---- C:\Program Files\Fichiers communs\System
2010-03-07 20:09:11 ----D---- C:\Program Files\Internet Explorer
2010-03-07 20:08:50 ----D---- C:\Program Files\ComPlus Applications
2010-03-07 20:08:49 ----A---- C:\WINDOWS\vbaddin.ini
2010-03-07 20:08:49 ----A---- C:\WINDOWS\vb.ini
2010-03-07 20:08:46 ----D---- C:\WINDOWS\Registration
2010-03-07 20:08:42 ----HD---- C:\Program Files\WindowsUpdate
2010-03-07 20:08:42 ----D---- C:\Program Files\Services en ligne
2010-03-07 20:08:41 ----D---- C:\Program Files\Windows Media Player
2010-03-07 20:08:37 ----D---- C:\Program Files\Messenger
2010-03-07 20:08:32 ----D---- C:\Program Files\MSN Gaming Zone
2010-03-07 20:08:32 ----A---- C:\WINDOWS\System32\write.exe
2010-03-07 20:08:23 ----A---- C:\WINDOWS\System32\sndvol32.exe
2010-03-07 20:08:23 ----A---- C:\WINDOWS\System32\sndrec32.exe
2010-03-07 20:08:23 ----A---- C:\WINDOWS\System32\hypertrm.dll
2010-03-07 20:08:23 ----A---- C:\WINDOWS\System32\hticons.dll
2010-03-07 20:08:23 ----A---- C:\WINDOWS\System32\accwiz.exe
2010-03-07 20:08:22 ----A---- C:\WINDOWS\System32\winchat.exe
2010-03-07 20:08:22 ----A---- C:\WINDOWS\System32\avwav.dll
2010-03-07 20:08:22 ----A---- C:\WINDOWS\System32\avtapi.dll
2010-03-07 20:08:22 ----A---- C:\WINDOWS\System32\avmeter.dll
2010-03-07 20:08:15 ----A---- C:\WINDOWS\System32\getuname.dll
2010-03-07 20:08:15 ----A---- C:\WINDOWS\System32\charmap.exe
2010-03-07 20:08:15 ----A---- C:\WINDOWS\System32\calc.exe
2010-03-07 20:08:14 ----A---- C:\WINDOWS\System32\winmine.exe
2010-03-07 20:08:14 ----A---- C:\WINDOWS\System32\sol.exe
2010-03-07 20:08:14 ----A---- C:\WINDOWS\System32\mshearts.exe
2010-03-07 20:08:14 ----A---- C:\WINDOWS\System32\freecell.exe
2010-03-07 20:08:13 ----A---- C:\WINDOWS\System32\usrlogon.cmd
2010-03-07 20:08:13 ----A---- C:\WINDOWS\System32\tsshutdn.exe
2010-03-07 20:08:13 ----A---- C:\WINDOWS\System32\tslabels.ini
2010-03-07 20:08:13 ----A---- C:\WINDOWS\System32\tskill.exe
2010-03-07 20:08:13 ----A---- C:\WINDOWS\System32\tsdiscon.exe
2010-03-07 20:08:13 ----A---- C:\WINDOWS\System32\tscon.exe
2010-03-07 20:08:13 ----A---- C:\WINDOWS\System32\shadow.exe
2010-03-07 20:08:13 ----A---- C:\WINDOWS\System32\rwinsta.exe
2010-03-07 20:08:13 ----A---- C:\WINDOWS\System32\reset.exe
2010-03-07 20:08:13 ----A---- C:\WINDOWS\System32\regini.exe
2010-03-07 20:08:13 ----A---- C:\WINDOWS\System32\rdshost.exe
2010-03-07 20:08:13 ----A---- C:\WINDOWS\System32\rdpcfgex.dll
2010-03-07 20:08:13 ----A---- C:\WINDOWS\System32\qwinsta.exe
2010-03-07 20:08:13 ----A---- C:\WINDOWS\System32\qprocess.exe
2010-03-07 20:08:12 ----A---- C:\WINDOWS\System32\xolehlp.dll
2010-03-07 20:08:12 ----A---- C:\WINDOWS\System32\qappsrv.exe
2010-03-07 20:08:12 ----A---- C:\WINDOWS\System32\mtxoci.dll
2010-03-07 20:08:12 ----A---- C:\WINDOWS\System32\msg.exe
2010-03-07 20:08:12 ----A---- C:\WINDOWS\System32\msdtcuiu.dll
2010-03-07 20:08:12 ----A---- C:\WINDOWS\System32\msdtctm.dll
2010-03-07 20:08:12 ----A---- C:\WINDOWS\System32\logoff.exe
2010-03-07 20:08:12 ----A---- C:\WINDOWS\System32\cdmodem.dll
2010-03-07 20:08:11 ----A---- C:\WINDOWS\System32\msdtcprf.ini
2010-03-07 20:08:11 ----A---- C:\WINDOWS\System32\msdtclog.dll
2010-03-07 20:08:11 ----A---- C:\WINDOWS\System32\msdtc.exe
2010-03-07 20:08:10 ----A---- C:\WINDOWS\System32\stclient.dll
2010-03-07 20:08:10 ----A---- C:\WINDOWS\System32\mtxlegih.dll
2010-03-07 20:08:10 ----A---- C:\WINDOWS\System32\mtxex.dll
2010-03-07 20:08:10 ----A---- C:\WINDOWS\System32\mtxdm.dll
2010-03-07 20:08:10 ----A---- C:\WINDOWS\System32\dcomcnfg.exe
2010-03-07 20:08:10 ----A---- C:\WINDOWS\System32\comrepl.dll
2010-03-07 20:08:10 ----A---- C:\WINDOWS\System32\comaddin.dll
2010-03-07 20:08:10 ----A---- C:\WINDOWS\System32\colbact.dll
2010-03-07 20:08:10 ----A---- C:\WINDOWS\System32\catsrvps.dll
2010-03-07 20:08:09 ----A---- C:\WINDOWS\System32\comuid.dll
2010-03-07 20:08:09 ----A---- C:\WINDOWS\System32\comsnap.dll
2010-03-07 20:08:09 ----A---- C:\WINDOWS\System32\clbcatq.dll
2010-03-07 20:08:09 ----A---- C:\WINDOWS\System32\clbcatex.dll
2010-03-07 20:08:09 ----A---- C:\WINDOWS\System32\catsrv.dll
2010-03-07 20:08:02 ----A---- C:\WINDOWS\System32\wmimgmt.msc
2010-03-07 20:08:02 ----A---- C:\WINDOWS\System32\servdeps.dll
2010-03-07 20:08:02 ----A---- C:\WINDOWS\System32\mmfutil.dll
2010-03-07 20:08:01 ----A---- C:\WINDOWS\System32\cmprops.dll
2010-03-07 20:07:58 ----D---- C:\Program Files\MSN
2010-03-07 20:07:57 ----N---- C:\WINDOWS\System32\wuauclt.exe
2010-03-07 20:07:57 ----D---- C:\Program Files\Windows NT
2010-03-07 20:07:57 ----A---- C:\WINDOWS\System32\wuauserv.dll
2010-03-07 20:07:57 ----A---- C:\WINDOWS\System32\wuaueng.dll
2010-03-07 20:07:57 ----A---- C:\WINDOWS\System32\spider.exe
2010-03-07 20:07:57 ----A---- C:\WINDOWS\System32\mspaint.exe
2010-03-07 20:07:57 ----A---- C:\WINDOWS\System32\mplay32.exe
2010-03-07 20:07:57 ----A---- C:\WINDOWS\System32\clipbrd.exe
2010-03-07 20:07:56 ----A---- C:\WINDOWS\System32\tscfgwmi.dll
2010-03-07 20:07:56 ----A---- C:\WINDOWS\System32\sessmgr.exe
2010-03-07 20:07:56 ----A---- C:\WINDOWS\System32\remotepg.dll
2010-03-07 20:07:56 ----A---- C:\WINDOWS\System32\rdsaddin.exe
2010-03-07 20:07:56 ----A---- C:\WINDOWS\System32\mstscax.dll
2010-03-07 20:07:56 ----A---- C:\WINDOWS\System32\mstsc.exe
2010-03-07 20:07:55 ----N---- C:\WINDOWS\System32\termsrv.dll
2010-03-07 20:07:55 ----D---- C:\WINDOWS\System32\MsDtc
2010-03-07 20:07:55 ----A---- C:\WINDOWS\System32\tscupgrd.exe
2010-03-07 20:07:55 ----A---- C:\WINDOWS\System32\rdpwsx.dll
2010-03-07 20:07:55 ----A---- C:\WINDOWS\System32\rdpsnd.dll
2010-03-07 20:07:55 ----A---- C:\WINDOWS\System32\rdpclip.exe
2010-03-07 20:07:55 ----A---- C:\WINDOWS\System32\rdchost.dll
2010-03-07 20:07:55 ----A---- C:\WINDOWS\System32\icaapi.dll
2010-03-07 20:07:55 ----A---- C:\WINDOWS\System32\cfgbkend.dll
2010-03-07 20:07:54 ----D---- C:\WINDOWS\System32\Com
2010-03-07 20:07:54 ----A---- C:\WINDOWS\System32\msdtcprx.dll
2010-03-07 20:07:54 ----A---- C:\WINDOWS\System32\catsrvut.dll
2010-03-07 20:07:53 ----A---- C:\WINDOWS\System32\comsvcs.dll
2010-03-07 20:07:50 ----A---- C:\WINDOWS\System32\licwmi.dll
2010-03-07 20:07:04 ----A---- C:\WINDOWS\System32\h323log.txt
2010-03-07 20:03:09 ----A---- C:\WINDOWS\System32\hidserv.dll
2010-03-07 20:02:11 ----A---- C:\WINDOWS\System32\usbui.dll
2010-03-07 20:01:23 ----D---- C:\Program Files\Fichiers communs\ODBC
2010-03-07 20:01:23 ----A---- C:\WINDOWS\System32\PerfStringBackup.INI
2010-03-07 20:01:23 ----A---- C:\WINDOWS\ODBCINST.INI
2010-03-07 20:01:21 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2010-03-07 20:01:21 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2010-03-07 20:01:20 ----RD---- C:\Program Files
2010-03-07 20:01:20 ----D---- C:\Program Files\Fichiers communs
2010-03-07 20:01:18 ----RA---- C:\WINDOWS\System32\kbdtuq.dll
2010-03-07 20:01:18 ----RA---- C:\WINDOWS\System32\kbdtuf.dll
2010-03-07 20:01:18 ----RA---- C:\WINDOWS\System32\kbdazel.dll
2010-03-07 20:01:16 ----RA---- C:\WINDOWS\System32\kbdycc.dll
2010-03-07 20:01:16 ----RA---- C:\WINDOWS\System32\kbduzb.dll
2010-03-07 20:01:16 ----RA---- C:\WINDOWS\System32\kbdur.dll
2010-03-07 20:01:16 ----RA---- C:\WINDOWS\System32\kbdtat.dll
2010-03-07 20:01:16 ----RA---- C:\WINDOWS\System32\kbdru1.dll
2010-03-07 20:01:16 ----RA---- C:\WINDOWS\System32\kbdru.dll
2010-03-07 20:01:16 ----RA---- C:\WINDOWS\System32\kbdmon.dll
2010-03-07 20:01:16 ----RA---- C:\WINDOWS\System32\kbdkyr.dll
2010-03-07 20:01:16 ----RA---- C:\WINDOWS\System32\kbdkaz.dll
2010-03-07 20:01:16 ----RA---- C:\WINDOWS\System32\kbdbu.dll
2010-03-07 20:01:16 ----RA---- C:\WINDOWS\System32\kbdblr.dll
2010-03-07 20:01:16 ----RA---- C:\WINDOWS\System32\kbdaze.dll
2010-03-07 20:01:14 ----RA---- C:\WINDOWS\System32\kbdhept.dll
2010-03-07 20:01:14 ----RA---- C:\WINDOWS\System32\kbdhela3.dll
2010-03-07 20:01:14 ----RA---- C:\WINDOWS\System32\kbdhela2.dll
2010-03-07 20:01:14 ----RA---- C:\WINDOWS\System32\kbdhe319.dll
2010-03-07 20:01:14 ----RA---- C:\WINDOWS\System32\kbdhe220.dll
2010-03-07 20:01:14 ----RA---- C:\WINDOWS\System32\kbdhe.dll
2010-03-07 20:01:14 ----RA---- C:\WINDOWS\System32\kbdgkl.dll
2010-03-07 20:01:12 ----RA---- C:\WINDOWS\System32\kbdlv1.dll
2010-03-07 20:01:12 ----RA---- C:\WINDOWS\System32\kbdlv.dll
2010-03-07 20:01:12 ----RA---- C:\WINDOWS\System32\kbdlt1.dll
2010-03-07 20:01:12 ----RA---- C:\WINDOWS\System32\kbdlt.dll
2010-03-07 20:01:12 ----RA---- C:\WINDOWS\System32\kbdest.dll
2010-03-07 20:01:10 ----RA---- C:\WINDOWS\System32\kbdycl.dll
2010-03-07 20:01:10 ----RA---- C:\WINDOWS\System32\kbdsl1.dll
2010-03-07 20:01:10 ----RA---- C:\WINDOWS\System32\kbdsl.dll
2010-03-07 20:01:10 ----RA---- C:\WINDOWS\System32\kbdro.dll
2010-03-07 20:01:10 ----RA---- C:\WINDOWS\System32\kbdpl1.dll
2010-03-07 20:01:10 ----RA---- C:\WINDOWS\System32\kbdpl.dll
2010-03-07 20:01:10 ----RA---- C:\WINDOWS\System32\kbdhu1.dll
2010-03-07 20:01:10 ----RA---- C:\WINDOWS\System32\kbdhu.dll
2010-03-07 20:01:10 ----RA---- C:\WINDOWS\System32\kbdcz2.dll
2010-03-07 20:01:10 ----RA---- C:\WINDOWS\System32\kbdcz1.dll
2010-03-07 20:01:10 ----RA---- C:\WINDOWS\System32\kbdcz.dll
2010-03-07 20:01:10 ----RA---- C:\WINDOWS\System32\kbdcr.dll
2010-03-07 20:01:10 ----RA---- C:\WINDOWS\System32\KBDAL.DLL
2010-03-07 20:01:08 ----A---- C:\WINDOWS\System32\spxcoins.dll
2010-03-07 20:01:08 ----A---- C:\WINDOWS\System32\irclass.dll
2010-03-07 20:01:08 ----A---- C:\WINDOWS\System32\dgsetup.dll
2010-03-07 20:01:08 ----A---- C:\WINDOWS\System32\dgrpsetu.dll
2010-03-07 20:01:07 ----A---- C:\WINDOWS\System32\EqnClass.Dll
2010-03-07 20:01:05 ----N---- C:\WINDOWS\System32\CONFIG.TMP
2010-03-07 20:01:05 ----A---- C:\WINDOWS\TASKMAN.EXE
2010-03-07 20:01:05 ----A---- C:\WINDOWS\NOTEPAD.EXE
2010-03-07 20:01:04 ----A---- C:\WINDOWS\System32\storprop.dll
2010-03-07 20:01:04 ----A---- C:\WINDOWS\System32\batt.dll
2010-03-07 20:00:59 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2010-03-07 20:00:27 ----RA---- C:\WINDOWS\SETA.tmp
2010-03-07 20:00:25 ----RA---- C:\WINDOWS\SET3.tmp
2010-03-07 20:00:20 ----D---- C:\WINDOWS\System32\CatRoot2
2010-03-07 20:00:20 ----D---- C:\WINDOWS\System32\CatRoot
2010-03-07 20:00:14 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2010-03-07 20:00:00 ----D---- C:\Documents and Settings
======List of files/folders modified in the last 1 months======
2010-03-15 18:57:37 ----A---- C:\WINDOWS\win.ini
2010-03-12 19:24:25 ----A---- C:\WINDOWS\system.ini
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 avgntdd;avgntdd; C:\WINDOWS\SYSTEM32\DRIVERS\avgntdd.sys [2009-02-13 45416]
R1 avipbb;avipbb; C:\WINDOWS\System32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2001-08-23 14080]
R1 NVTCP;NVIDIA TCP/IP Protocol Driver; C:\WINDOWS\System32\DRIVERS\NVTcp.sys [2004-11-11 94976]
R1 ssmdrv;ssmdrv; C:\WINDOWS\System32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R2 hidusb;Microsoft HID Class Driver; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-11-17 2297664]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2002-09-07 57344]
R3 LHidKe;Logitech SetPoint HID Mouse Filter Driver; C:\WINDOWS\System32\DRIVERS\LHidKE.Sys [2005-03-10 24704]
R3 LHidUsbK;Logitech SetPoint USB Receiver device driver; C:\WINDOWS\System32\Drivers\LHidUsbK.Sys [2005-03-10 36480]
R3 LMouKE;Logitech SetPoint Mouse Filter Driver; C:\WINDOWS\System32\DRIVERS\LMouKE.Sys [2005-03-10 69504]
R3 LUsbKbd;Logitech SetPoint USB Filter Driver; C:\WINDOWS\system32\drivers\LUsbKbd.sys [2005-03-10 14592]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 ms_mpu401;Pilote UART MIDI MPU-401 Microsoft; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\System32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2002-09-07 57984]
R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2006-03-09 3650368]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [2004-11-11 33408]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [2004-11-11 12928]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2002-09-07 28160]
R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2002-09-07 19328]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2002-09-07 51968]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2002-09-07 15744]
R3 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2002-09-07 12032]
S3 catchme;catchme; \??\C:\Bibitte\catchme.sys []
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\System32\drivers\mbamswissarmy.sys []
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbprint.sys [2002-08-29 24960]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2002-08-29 21760]
S4 IntelIde;IntelIde; C:\WINDOWS\System32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 a2free;a-squared Free Service; C:\Program Files\a-squared Free\a2service.exe [2010-03-18 1858144]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 115457]
R2 app_filter;app_filter; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe [2004-11-20 147456]
R2 ForcewareWebInterface;Forceware Web Interface; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe [2004-10-30 28735]
R2 nSvcIp;ForceWare IP service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe [2004-11-20 118845]
R2 nSvcLog;ForceWare user log service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe [2004-11-20 61505]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\System32\nvsvc32.exe [2006-03-09 151628]
R2 VMwareService;VMwareService; C:\WINDOWS\system\VMwareService.exe [2010-03-18 1286144]
R2 WinSpoolSvc;Windows Spool Services; C:\WINDOWS\system32\csrsc.exe [2010-03-18 43008]
S2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 192257]
-----------------EOF-----------------
info :
info.txt logfile of random's system information tool 1.06 2010-03-08 20:04:09
======Uninstall list======
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
ASUS nVIDIA Driver-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{3C3B2C97-0DAB-482F-9C95-6610827210E3} /l1036
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
NVIDIA Drivers-->C:\WINDOWS\System32\nvudisp.exe UninstallGUI
NVIDIA ForceWare Network Access Manager-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{1F6423DE-7959-4178-80E0-023C7EAA5347} /l1036
WD Diagnostics-->MsiExec.exe /X{0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B}
======System event log======
Computer Name: DARKVADOR
Event Code: 3260
Message: Cet ordinateur a correctement été joint au workgroup 'WORKGROUP'.
Record Number: 5
Source Name: Workstation
Time Written: 20100307200745.000000+060
Event Type: Informations
User:
Computer Name: DARKVADOR
Event Code: 6011
Message: Le nom NetBIOS et le nom de l'hôte DNS de cet ordinateur ont été modifiés de MACHINENAME vers DARKVADOR.
Record Number: 4
Source Name: EventLog
Time Written: 20100307200708.000000+060
Event Type: Informations
User:
Computer Name: MACHINENAME
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.
Record Number: 3
Source Name: EventLog
Time Written: 20100307200003.000000+060
Event Type: Informations
User:
Computer Name: MACHINENAME
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 1 Uniprocessor Free.
Record Number: 2
Source Name: EventLog
Time Written: 20100307200003.000000+060
Event Type: Informations
User:
Computer Name: MACHINENAME
Event Code: 2
Message: Pendant la validation de \Device\Serial0 en tant que port série, une FIFO a été détectée. La FIFO sera utilisée.
Record Number: 1
Source Name: Serial
Time Written: 20100307200027.000000+060
Event Type: Informations
User:
=====Application event log=====
Computer Name: DARKVADOR
Event Code: 1000
Message: Les compteurs de performances pour le service MSDTC (MSDTC) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.
Record Number: 5
Source Name: LoadPerf
Time Written: 20100307200844.000000+060
Event Type: Informations
User:
Computer Name: DARKVADOR
Event Code: 1000
Message: Les compteurs de performances pour le service TermService (Services Terminal Server) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.
Record Number: 4
Source Name: LoadPerf
Time Written: 20100307200841.000000+060
Event Type: Informations
User:
Computer Name: DARKVADOR
Event Code: 1000
Message: Les compteurs de performances pour le service RemoteAccess (Routage et accès distant) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.
Record Number: 3
Source Name: LoadPerf
Time Written: 20100307200732.000000+060
Event Type: Informations
User:
Computer Name: DARKVADOR
Event Code: 1000
Message: Les compteurs de performances pour le service PSched (PSched) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.
Record Number: 2
Source Name: LoadPerf
Time Written: 20100307200715.000000+060
Event Type: Informations
User:
Computer Name: DARKVADOR
Event Code: 1000
Message: Les compteurs de performances pour le service RSVP (QoS RSVP) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.
Record Number: 1
Source Name: LoadPerf
Time Written: 20100307200714.000000+060
Event Type: Informations
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
"windir"=%SystemRoot%
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 47 Stepping 0, AuthenticAMD
"PROCESSOR_REVISION"=2f00
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
-----------------EOF-----------------