Jvoulé savoire si mon pécé è infesté ou pô? é lé mise à joures é tous sa koi...
Mici. lol mdr ptdr
Jvou léce mon rapore, com sinptom, g un ralentisman, c grâve? :
Logfile of random's system information tool 1.06 (written by random/random)
Run by Ric025 at 2009-08-06 01:13:59
Microsoft Windows XP Professionnel
System drive C: has 18 GB (77%) free of 20 GB
Total RAM: 511 MB (69% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:17:19, on 06/08/2009
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Ric025\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\msiexec.exe
C:\Documents and Settings\Ric025\Bureau\RSIT.exe
C:\Program Files\Dealio Toolbar\SearchSettingsKit.exe
C:\WINDOWS\system32\MSIEXEC.EXE
C:\Program Files\trend micro\Ric025.exe
C:\WINDOWS\System32\MsiExec.exe
C:\Program Files\Mozilla Firefox\firefox.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://y.lo.st
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O4 - HKLM\..\Run: [NetPumper] "C:\Program Files\NetPumper\NetPumperIEProxy.exe"
O4 - HKLM\..\Run: [funkyemoticons] C:\Program Files\FunkyEmoticons\FunkyEmoticons.exe
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [SoftwareHelper] C:\Documents and Settings\Ric025\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Micro Application\Anti-Virus Personnel 2008\avp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [novwwg] "c:\documents and settings\ric025\local settings\application data\novwwg.exe" novwwg
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Download with NetPumper - C:\Program Files\NetPumper\AddUrl.htm
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Micro Application\Anti-Virus Personnel 2008\scieplugin.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O23 - Service: Anti-Virus Personnel 2008 (AVP) - Micro Application - C:\Program Files\Micro Application\Anti-Virus Personnel 2008\avp.exe
End of file - 3286 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}]
Dealio Toolbar - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll [2009-04-09 688128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}]
EoBHO Class - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll [2008-11-18 42792]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E718888-423F-11D2-876E-00A0C9082467} - &Radio - C:\WINDOWS\System32\msdxm.ocx [2002-06-28 847900]
{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - Dealio Toolbar - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll [2009-04-09 688128]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NetPumper"=C:\Program Files\NetPumper\NetPumperIEProxy.exe [2004-07-03 704000]
"funkyemoticons"=C:\Program Files\FunkyEmoticons\FunkyEmoticons.exe [2009-06-16 283360]
"EoEngine"=C:\Program Files\EoRezo\EoEngine.exe [2009-02-23 472872]
"EoSudoku"= []
"SoftwareHelper"=C:\Documents and Settings\Ric025\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe [2008-12-09 368224]
"AVP"=C:\Program Files\Micro Application\Anti-Virus Personnel 2008\avp.exe [2007-07-02 200768]
"SearchSettings"=C:\Program Files\Search Settings\SearchSettings.exe [2009-04-09 970240]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\System32\ctfmon.exe [2002-06-28 13312]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe /background []
"novwwg"=c:\documents and settings\ric025\local settings\application data\novwwg.exe [2009-08-05 249856]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\WINDOWS\System32\klogon.dll [2007-07-06 204800]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 1 months======
2009-08-06 01:20:26 ----D---- C:\Documents and Settings\Ric025\Application Data\Search Settings
2009-08-06 01:16:44 ----D---- C:\Documents and Settings\Ric025\Application Data\Dealio
2009-08-06 01:16:35 ----D---- C:\Program Files\Search Settings
2009-08-06 01:12:09 ----D---- C:\Program Files\Dealio Toolbar
2009-08-05 17:15:15 ----D---- C:\Program Files\trend micro
2009-08-05 17:14:41 ----D---- C:\rsit
2009-08-05 16:58:32 ----SD---- C:\WINDOWS\System32\Microsoft
2009-08-05 16:54:55 ----D---- C:\Documents and Settings\Ric025\Application Data\EoRezo
2009-08-05 16:54:27 ----D---- C:\Program Files\EoRezo
2009-08-05 16:53:08 ----D---- C:\Documents and Settings\Ric025\Application Data\FunkyEmoticons
2009-08-05 16:52:24 ----D---- C:\Program Files\FunkyEmoticons
2009-08-05 16:51:17 ----D---- C:\Documents and Settings\All Users\Application Data\Micro Application
2009-08-05 16:51:16 ----D---- C:\Program Files\Micro Application
2009-08-05 16:48:50 ----D---- C:\Documents and Settings\Ric025\Application Data\NetPumper
2009-08-05 16:47:32 ----D---- C:\Program Files\NetPumper
2009-08-05 15:57:25 ----D---- C:\Documents and Settings\Ric025\Application Data\Mozilla
2009-08-05 15:54:38 ----D---- C:\Program Files\Mozilla Firefox
2009-08-05 15:49:45 ----SHD---- C:\RECYCLER
2009-08-05 15:38:58 ----D---- C:\Documents and Settings\Ric025\Application Data\Macromedia
2009-08-05 15:38:58 ----D---- C:\Documents and Settings\Ric025\Application Data\Adobe
2009-08-05 15:06:40 ----A---- C:\WINDOWS\System32\wpa.bak
2009-08-05 09:41:14 ----SHD---- C:\WINDOWS\Installer
2009-08-05 09:40:44 ----D---- C:\Documents and Settings\Ric025\Application Data\Identities
2009-08-05 09:40:06 ----HD---- C:\Program Files\Uninstall Information
2009-08-05 09:38:51 ----A---- C:\WINDOWS\setdebug.exe
2009-08-05 09:38:50 ----A---- C:\WINDOWS\System32\jit.dll
2009-08-05 09:38:49 ----A---- C:\WINDOWS\System32\javaee.dll
2009-08-05 09:38:48 ----A---- C:\WINDOWS\System32\dx3j.dll
2009-08-05 09:38:30 ----A---- C:\WINDOWS\System32\wjview.exe
2009-08-05 09:38:29 ----A---- C:\WINDOWS\System32\vmhelper.dll
2009-08-05 09:38:29 ----A---- C:\WINDOWS\System32\msjdbc10.dll
2009-08-05 09:38:28 ----A---- C:\WINDOWS\System32\msjava.dll
2009-08-05 09:38:27 ----A---- C:\WINDOWS\System32\msawt.dll
2009-08-05 09:38:27 ----A---- C:\WINDOWS\System32\jview.exe
2009-08-05 09:38:27 ----A---- C:\WINDOWS\System32\jdbgmgr.exe
2009-08-05 09:38:26 ----A---- C:\WINDOWS\System32\javart.dll
2009-08-05 09:38:26 ----A---- C:\WINDOWS\System32\javaprxy.dll
2009-08-05 09:38:25 ----A---- C:\WINDOWS\System32\javacypt.dll
2009-08-05 09:38:22 ----A---- C:\WINDOWS\System32\clspack.exe
2009-08-05 09:38:20 ----D---- C:\WINDOWS\LastGood
2009-08-05 09:37:30 ----ASH---- C:\Documents and Settings\Ric025\Application Data\desktop.ini
2009-08-05 09:37:26 ----SD---- C:\Documents and Settings\Ric025\Application Data\Microsoft
2009-08-05 09:34:34 ----SHD---- C:\System Volume Information
2009-08-05 09:34:23 ----D---- C:\WINDOWS\Prefetch
2009-08-05 09:34:22 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-08-05 06:29:59 ----D---- C:\WINDOWS\System32\xircom
2009-08-05 06:29:59 ----D---- C:\Program Files\xerox
2009-08-05 06:29:58 ----D---- C:\Program Files\microsoft frontpage
2009-08-05 06:27:49 ----A---- C:\WINDOWS\System32\IE60~1.EXE
2009-08-05 06:27:47 ----A---- C:\WINDOWS\System32\MSJAVX86.EXE
2009-08-05 06:27:44 ----D---- C:\DELL
2009-08-05 06:17:20 ----SH---- C:\boot.ini
2009-08-05 06:14:15 ----N---- C:\WINDOWS\System32\spmsg.dll
2009-08-05 06:13:41 ----D---- C:\WINDOWS\LastGood.Tmp
2009-08-05 06:12:40 ----A---- C:\WINDOWS\control.ini
2009-08-05 06:12:40 ----A---- C:\AUTOEXEC.BAT
2009-08-05 06:11:27 ----RSHDC---- C:\WINDOWS\System32\dllcache
2009-08-05 06:11:27 ----RSD---- C:\WINDOWS\Fonts
2009-08-05 06:11:27 ----RD---- C:\WINDOWS\Web
2009-08-05 06:11:27 ----HD---- C:\WINDOWS\inf
2009-08-05 06:11:27 ----D---- C:\WINDOWS\WinSxS
2009-08-05 06:11:27 ----D---- C:\WINDOWS\twain_32
2009-08-05 06:11:27 ----D---- C:\WINDOWS\Temp
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\wins
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\wbem
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\usmt
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\spool
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\ShellExt
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\Setup
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\ras
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\oobe
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\npp
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\mui
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\inetsrv
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\IME
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\icsxml
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\ias
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\export
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\drivers
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\dhcp
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\config
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\3com_dmi
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\3076
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\2052
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\1054
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\1042
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\1041
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\1037
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\1036
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\1033
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\1031
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\1028
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\1025
2009-08-05 06:11:27 ----D---- C:\WINDOWS\system32
2009-08-05 06:11:27 ----D---- C:\WINDOWS\system
2009-08-05 06:11:27 ----D---- C:\WINDOWS\security
2009-08-05 06:11:27 ----D---- C:\WINDOWS\Resources
2009-08-05 06:11:27 ----D---- C:\WINDOWS\repair
2009-08-05 06:11:27 ----D---- C:\WINDOWS\mui
2009-08-05 06:11:27 ----D---- C:\WINDOWS\msapps
2009-08-05 06:11:27 ----D---- C:\WINDOWS\msagent
2009-08-05 06:11:27 ----D---- C:\WINDOWS\Media
2009-08-05 06:11:27 ----D---- C:\WINDOWS\java
2009-08-05 06:11:27 ----D---- C:\WINDOWS\ime
2009-08-05 06:11:27 ----D---- C:\WINDOWS\Help
2009-08-05 06:11:27 ----D---- C:\WINDOWS\Driver Cache
2009-08-05 06:11:27 ----D---- C:\WINDOWS\Debug
2009-08-05 06:11:27 ----D---- C:\WINDOWS\Cursors
2009-08-05 06:11:27 ----D---- C:\WINDOWS\Connection Wizard
2009-08-05 06:11:27 ----D---- C:\WINDOWS\Config
2009-08-05 06:11:27 ----D---- C:\WINDOWS\AppPatch
2009-08-05 06:11:27 ----D---- C:\WINDOWS\addins
2009-08-05 06:11:27 ----D---- C:\WINDOWS
2009-08-05 06:06:18 ----A---- C:\WINDOWS\OEWABLog.txt
2009-08-05 06:04:58 ----A---- C:\WINDOWS\System32\mapi32.dll
2009-08-05 05:44:50 ----A---- C:\WINDOWS\System32\h323log.txt
2009-08-05 05:40:59 ----RD---- C:\WINDOWS\Offline Web Pages
2009-08-05 05:40:55 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-08-05 05:40:53 ----RAH---- C:\WINDOWS\System32\logonui.exe.manifest
2009-08-05 05:37:35 ----RAH---- C:\WINDOWS\System32\cdplayer.exe.manifest
2009-08-05 05:31:59 ----D---- C:\WINDOWS\srchasst
2009-08-05 05:30:11 ----D---- C:\WINDOWS\System32\DirectX
2009-08-05 05:30:10 ----D---- C:\WINDOWS\System32\Macromed
2009-08-05 05:29:21 ----A---- C:\WINDOWS\System32\ksuser.dll
2009-08-05 05:28:49 ----A---- C:\WINDOWS\System32\qmgrprxy.dll
2009-08-05 05:28:49 ----A---- C:\WINDOWS\System32\qmgr.dll
2009-08-05 05:28:44 ----D---- C:\Program Files\Movie Maker
2009-08-05 05:26:17 ----A---- C:\WINDOWS\System32\safrslv.dll
2009-08-05 05:26:17 ----A---- C:\WINDOWS\System32\safrdm.dll
2009-08-05 05:26:16 ----A---- C:\WINDOWS\System32\safrcdlg.dll
2009-08-05 05:26:16 ----A---- C:\WINDOWS\System32\racpldlg.dll
2009-08-05 05:26:15 ----A---- C:\WINDOWS\System32\atrace.dll
2009-08-05 05:25:48 ----A---- C:\WINDOWS\System32\desktop.ini
2009-08-05 05:25:48 ----A---- C:\WINDOWS\desktop.ini
2009-08-05 05:25:07 ----D---- C:\WINDOWS\System32\Restore
2009-08-05 05:24:51 ----A---- C:\WINDOWS\System32\srsvc.dll
2009-08-05 05:24:51 ----A---- C:\WINDOWS\System32\srrstr.dll
2009-08-05 05:24:50 ----A---- C:\WINDOWS\System32\srclient.dll
2009-08-05 05:24:47 ----D---- C:\Program Files\Windows Media Player
2009-08-05 05:24:44 ----A---- C:\WINDOWS\System32\ils.dll
2009-08-05 05:24:43 ----A---- C:\WINDOWS\System32\nmevtmsg.dll
2009-08-05 05:24:43 ----A---- C:\WINDOWS\System32\isrdbg32.dll
2009-08-05 05:24:42 ----A---- C:\WINDOWS\System32\mnmdd.dll
2009-08-05 05:24:41 ----A---- C:\WINDOWS\System32\nmmkcert.dll
2009-08-05 05:24:40 ----A---- C:\WINDOWS\System32\mnmsrvc.exe
2009-08-05 05:24:39 ----A---- C:\WINDOWS\System32\msconf.dll
2009-08-05 05:24:14 ----D---- C:\Program Files\NetMeeting
2009-08-05 05:24:12 ----D---- C:\WINDOWS\PCHEALTH
2009-08-05 05:24:12 ----A---- C:\WINDOWS\System32\msoert2.dll
2009-08-05 05:24:11 ----A---- C:\WINDOWS\System32\acctres.dll
2009-08-05 05:24:10 ----A---- C:\WINDOWS\System32\msoeacct.dll
2009-08-05 05:24:09 ----D---- C:\Program Files\Fichiers communs\Services
2009-08-05 05:24:02 ----A---- C:\WINDOWS\System32\inetres.dll
2009-08-05 05:24:01 ----A---- C:\WINDOWS\System32\inetcomm.dll
2009-08-05 05:23:23 ----D---- C:\Program Files\Outlook Express
2009-08-05 05:23:22 ----SD---- C:\WINDOWS\Tasks
2009-08-05 05:23:22 ----A---- C:\WINDOWS\System32\schedsvc.dll
2009-08-05 05:23:21 ----A---- C:\WINDOWS\System32\mstinit.exe
2009-08-05 05:23:21 ----A---- C:\WINDOWS\System32\mstask.dll
2009-08-05 05:23:18 ----A---- C:\WINDOWS\System32\icwphbk.dll
2009-08-05 05:23:18 ----A---- C:\WINDOWS\System32\icwdial.dll
2009-08-05 05:23:17 ----A---- C:\WINDOWS\System32\isign32.dll
2009-08-05 05:23:16 ----A---- C:\WINDOWS\System32\inetcfg.dll
2009-08-05 05:23:15 ----A---- C:\WINDOWS\System32\icfgnt5.dll
2009-08-05 05:22:52 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-08-05 05:22:10 ----D---- C:\Program Files\Fichiers communs\System
2009-08-05 05:22:01 ----D---- C:\Program Files\Internet Explorer
2009-08-05 05:21:18 ----A---- C:\WINDOWS\System32\PerfStringBackup.INI
2009-08-05 05:21:15 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-08-05 05:21:13 ----A---- C:\WINDOWS\ODBCINST.INI
2009-08-05 05:21:02 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2009-08-05 05:21:01 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-08-05 05:21:00 ----RD---- C:\Program Files
2009-08-05 05:21:00 ----D---- C:\Program Files\Fichiers communs
2009-08-05 05:20:48 ----RA---- C:\WINDOWS\System32\kbdazel.dll
2009-08-05 05:20:47 ----RA---- C:\WINDOWS\System32\kbdtuq.dll
2009-08-05 05:20:47 ----RA---- C:\WINDOWS\System32\kbdtuf.dll
2009-08-05 05:20:41 ----RA---- C:\WINDOWS\System32\kbduzb.dll
2009-08-05 05:20:41 ----RA---- C:\WINDOWS\System32\kbdtat.dll
2009-08-05 05:20:41 ----RA---- C:\WINDOWS\System32\kbdmon.dll
2009-08-05 05:20:41 ----RA---- C:\WINDOWS\System32\kbdkyr.dll
2009-08-05 05:20:41 ----RA---- C:\WINDOWS\System32\kbdkaz.dll
2009-08-05 05:20:41 ----RA---- C:\WINDOWS\System32\kbdaze.dll
2009-08-05 05:20:40 ----RA---- C:\WINDOWS\System32\kbdycc.dll
2009-08-05 05:20:40 ----RA---- C:\WINDOWS\System32\kbdur.dll
2009-08-05 05:20:40 ----RA---- C:\WINDOWS\System32\kbdru1.dll
2009-08-05 05:20:40 ----RA---- C:\WINDOWS\System32\kbdru.dll
2009-08-05 05:20:40 ----RA---- C:\WINDOWS\System32\kbdbu.dll
2009-08-05 05:20:40 ----RA---- C:\WINDOWS\System32\kbdblr.dll
2009-08-05 05:20:34 ----RA---- C:\WINDOWS\System32\kbdhept.dll
2009-08-05 05:20:33 ----RA---- C:\WINDOWS\System32\kbdhela3.dll
2009-08-05 05:20:33 ----RA---- C:\WINDOWS\System32\kbdhela2.dll
2009-08-05 05:20:33 ----RA---- C:\WINDOWS\System32\kbdhe319.dll
2009-08-05 05:20:33 ----RA---- C:\WINDOWS\System32\kbdhe220.dll
2009-08-05 05:20:33 ----RA---- C:\WINDOWS\System32\kbdhe.dll
2009-08-05 05:20:33 ----RA---- C:\WINDOWS\System32\kbdgkl.dll
2009-08-05 05:20:28 ----RA---- C:\WINDOWS\System32\kbdlt1.dll
2009-08-05 05:20:27 ----RA---- C:\WINDOWS\System32\kbdlv1.dll
2009-08-05 05:20:27 ----RA---- C:\WINDOWS\System32\kbdlv.dll
2009-08-05 05:20:27 ----RA---- C:\WINDOWS\System32\kbdlt.dll
2009-08-05 05:20:27 ----RA---- C:\WINDOWS\System32\kbdest.dll
2009-08-05 05:20:21 ----RA---- C:\WINDOWS\System32\kbdsl1.dll
2009-08-05 05:20:20 ----RA---- C:\WINDOWS\System32\kbdsl.dll
2009-08-05 05:20:20 ----RA---- C:\WINDOWS\System32\kbdro.dll
2009-08-05 05:20:20 ----RA---- C:\WINDOWS\System32\kbdpl1.dll
2009-08-05 05:20:20 ----RA---- C:\WINDOWS\System32\kbdpl.dll
2009-08-05 05:20:20 ----RA---- C:\WINDOWS\System32\kbdhu1.dll
2009-08-05 05:20:20 ----RA---- C:\WINDOWS\System32\kbdhu.dll
2009-08-05 05:20:19 ----RA---- C:\WINDOWS\System32\kbdcz2.dll
2009-08-05 05:20:19 ----RA---- C:\WINDOWS\System32\kbdcz1.dll
2009-08-05 05:20:19 ----RA---- C:\WINDOWS\System32\kbdcz.dll
2009-08-05 05:20:19 ----RA---- C:\WINDOWS\System32\kbdcr.dll
2009-08-05 05:20:18 ----RA---- C:\WINDOWS\System32\kbdycl.dll
2009-08-05 05:20:18 ----RA---- C:\WINDOWS\System32\KBDAL.DLL
2009-08-05 05:20:08 ----A---- C:\WINDOWS\System32\irclass.dll
2009-08-05 05:20:07 ----A---- C:\WINDOWS\System32\spxcoins.dll
2009-08-05 05:20:07 ----A---- C:\WINDOWS\System32\dgsetup.dll
2009-08-05 05:20:07 ----A---- C:\WINDOWS\System32\dgrpsetu.dll
2009-08-05 05:20:06 ----A---- C:\WINDOWS\System32\EqnClass.Dll
2009-08-05 05:20:06 ----A---- C:\WINDOWS\System32\batt.dll
2009-08-05 05:19:59 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-08-05 05:19:59 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-08-05 05:19:58 ----N---- C:\WINDOWS\System32\CONFIG.TMP
2009-08-05 05:19:56 ----A---- C:\WINDOWS\System32\storprop.dll
2009-08-05 05:19:29 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2009-08-05 05:19:26 ----RA---- C:\WINDOWS\SET1B.tmp
2009-08-05 05:19:18 ----RA---- C:\WINDOWS\SETD.tmp
2009-08-05 05:19:15 ----RA---- C:\WINDOWS\SET7.tmp
2009-08-05 05:19:10 ----RA---- C:\WINDOWS\SET3.tmp
2009-08-05 05:18:54 ----D---- C:\WINDOWS\System32\CatRoot2
2009-08-05 05:18:54 ----D---- C:\WINDOWS\System32\CatRoot
2009-08-05 05:18:43 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-08-05 05:18:25 ----A---- C:\WINDOWS\setuplog.txt
2009-08-05 05:18:09 ----D---- C:\Documents and Settings
2009-08-05 05:07:25 ----D---- C:\Program Files\ComPlus Applications
2009-08-05 05:07:14 ----A---- C:\WINDOWS\vbaddin.ini
2009-08-05 05:07:14 ----A---- C:\WINDOWS\vb.ini
2009-08-05 05:06:34 ----D---- C:\WINDOWS\Registration
2009-08-05 05:05:19 ----HD---- C:\Program Files\WindowsUpdate
2009-08-05 05:05:16 ----D---- C:\Program Files\Services en ligne
2009-08-05 05:02:23 ----D---- C:\Program Files\MSN
2009-08-05 05:01:49 ----D---- C:\Program Files\MSN Gaming Zone
2009-08-05 05:01:48 ----A---- C:\WINDOWS\System32\write.exe
2009-08-05 04:59:56 ----A---- C:\WINDOWS\System32\accwiz.exe
2009-08-05 04:59:54 ----A---- C:\WINDOWS\System32\sndvol32.exe
2009-08-05 04:59:53 ----A---- C:\WINDOWS\System32\sndrec32.exe
2009-08-05 04:59:53 ----A---- C:\WINDOWS\System32\mplay32.exe
2009-08-05 04:59:52 ----A---- C:\WINDOWS\System32\hypertrm.dll
2009-08-05 04:59:51 ----A---- C:\WINDOWS\System32\hticons.dll
2009-08-05 04:59:39 ----A---- C:\WINDOWS\System32\avwav.dll
2009-08-05 04:59:38 ----A---- C:\WINDOWS\System32\avtapi.dll
2009-08-05 04:59:38 ----A---- C:\WINDOWS\System32\avmeter.dll
2009-08-05 04:59:36 ----D---- C:\Program Files\Windows NT
2009-08-05 04:59:34 ----A---- C:\WINDOWS\System32\winchat.exe
2009-08-05 04:59:27 ----A---- C:\WINDOWS\System32\mspaint.exe
2009-08-05 04:58:42 ----A---- C:\WINDOWS\System32\clipbrd.exe
2009-08-05 04:58:27 ----A---- C:\WINDOWS\System32\getuname.dll
2009-08-05 04:58:25 ----A---- C:\WINDOWS\System32\charmap.exe
2009-08-05 04:58:23 ----A---- C:\WINDOWS\System32\calc.exe
2009-08-05 04:58:22 ----A---- C:\WINDOWS\System32\spider.exe
2009-08-05 04:58:20 ----A---- C:\WINDOWS\System32\sol.exe
2009-08-05 04:58:19 ----A---- C:\WINDOWS\System32\winmine.exe
2009-08-05 04:58:18 ----A---- C:\WINDOWS\System32\mshearts.exe
2009-08-05 04:58:17 ----A---- C:\WINDOWS\System32\freecell.exe
2009-08-05 04:58:16 ----A---- C:\WINDOWS\System32\wuauclt.exe
2009-08-05 04:58:15 ----A---- C:\WINDOWS\System32\wuauserv.dll
2009-08-05 04:58:15 ----A---- C:\WINDOWS\System32\wuaueng.dll
2009-08-05 04:58:12 ----A---- C:\WINDOWS\System32\tscfgwmi.dll
2009-08-05 04:58:11 ----A---- C:\WINDOWS\System32\mstscax.dll
2009-08-05 04:58:10 ----A---- C:\WINDOWS\System32\reset.exe
2009-08-05 04:58:10 ----A---- C:\WINDOWS\System32\mstsc.exe
2009-08-05 04:58:09 ----A---- C:\WINDOWS\System32\remotepg.dll
2009-08-05 04:58:09 ----A---- C:\WINDOWS\System32\rdsaddin.exe
2009-08-05 04:58:08 ----A---- C:\WINDOWS\System32\sessmgr.exe
2009-08-05 04:58:08 ----A---- C:\WINDOWS\System32\rdshost.exe
2009-08-05 04:58:07 ----A---- C:\WINDOWS\System32\tscupgrd.exe
2009-08-05 04:58:07 ----A---- C:\WINDOWS\System32\rdchost.dll
2009-08-05 04:58:06 ----A---- C:\WINDOWS\System32\usrlogon.cmd
2009-08-05 04:58:06 ----A---- C:\WINDOWS\System32\tskill.exe
2009-08-05 04:57:51 ----A---- C:\WINDOWS\System32\tsshutdn.exe
2009-08-05 04:57:50 ----A---- C:\WINDOWS\System32\tslabels.ini
2009-08-05 04:57:49 ----A---- C:\WINDOWS\System32\tsdiscon.exe
2009-08-05 04:57:49 ----A---- C:\WINDOWS\System32\tscon.exe
2009-08-05 04:57:48 ----RA---- C:\WINDOWS\System32\termsrv.dll
2009-08-05 04:57:48 ----A---- C:\WINDOWS\System32\shadow.exe
2009-08-05 04:57:47 ----A---- C:\WINDOWS\System32\rwinsta.exe
2009-08-05 04:57:47 ----A---- C:\WINDOWS\System32\regini.exe
2009-08-05 04:57:46 ----A---- C:\WINDOWS\System32\rdpwsx.dll
2009-08-05 04:57:46 ----A---- C:\WINDOWS\System32\rdpsnd.dll
2009-08-05 04:57:45 ----A---- C:\WINDOWS\System32\rdpclip.exe
2009-08-05 04:57:45 ----A---- C:\WINDOWS\System32\rdpcfgex.dll
2009-08-05 04:57:44 ----A---- C:\WINDOWS\System32\qwinsta.exe
2009-08-05 04:57:43 ----A---- C:\WINDOWS\System32\qprocess.exe
2009-08-05 04:57:43 ----A---- C:\WINDOWS\System32\qappsrv.exe
2009-08-05 04:57:43 ----A---- C:\WINDOWS\System32\msg.exe
2009-08-05 04:57:42 ----A---- C:\WINDOWS\System32\logoff.exe
2009-08-05 04:57:42 ----A---- C:\WINDOWS\System32\icaapi.dll
2009-08-05 04:57:41 ----A---- C:\WINDOWS\System32\cfgbkend.dll
2009-08-05 04:57:40 ----A---- C:\WINDOWS\System32\cdmodem.dll
2009-08-05 04:57:39 ----D---- C:\WINDOWS\System32\MsDtc
2009-08-05 04:57:39 ----A---- C:\WINDOWS\System32\msdtcuiu.dll
2009-08-05 04:57:38 ----A---- C:\WINDOWS\System32\mtxoci.dll
2009-08-05 04:57:38 ----A---- C:\WINDOWS\System32\msdtcprx.dll
2009-08-05 04:57:36 ----A---- C:\WINDOWS\System32\xolehlp.dll
2009-08-05 04:57:36 ----A---- C:\WINDOWS\System32\msdtctm.dll
2009-08-05 04:57:35 ----A---- C:\WINDOWS\System32\msdtcprf.ini
2009-08-05 04:57:35 ----A---- C:\WINDOWS\System32\msdtclog.dll
2009-08-05 04:57:34 ----A---- C:\WINDOWS\System32\msdtc.exe
2009-08-05 04:57:12 ----A---- C:\WINDOWS\System32\mtxlegih.dll
2009-08-05 04:57:12 ----A---- C:\WINDOWS\System32\mtxex.dll
2009-08-05 04:57:12 ----A---- C:\WINDOWS\System32\dcomcnfg.exe
2009-08-05 04:57:11 ----A---- C:\WINDOWS\System32\mtxdm.dll
2009-08-05 04:57:10 ----D---- C:\WINDOWS\System32\Com
2009-08-05 04:57:10 ----A---- C:\WINDOWS\System32\colbact.dll
2009-08-05 04:57:09 ----A---- C:\WINDOWS\System32\comrepl.dll
2009-08-05 04:57:09 ----A---- C:\WINDOWS\System32\comaddin.dll
2009-08-05 04:57:08 ----A---- C:\WINDOWS\System32\stclient.dll
2009-08-05 04:57:08 ----A---- C:\WINDOWS\System32\catsrvps.dll
2009-08-05 04:57:07 ----A---- C:\WINDOWS\System32\clbcatex.dll
2009-08-05 04:57:06 ----A---- C:\WINDOWS\System32\catsrvut.dll
2009-08-05 04:57:05 ----A---- C:\WINDOWS\System32\catsrv.dll
2009-08-05 04:57:04 ----A---- C:\WINDOWS\System32\comsvcs.dll
2009-08-05 04:57:03 ----A---- C:\WINDOWS\System32\comuid.dll
2009-08-05 04:57:02 ----A---- C:\WINDOWS\System32\comsnap.dll
2009-08-05 04:57:01 ----A---- C:\WINDOWS\System32\clbcatq.dll
2009-08-05 04:55:02 ----A---- C:\WINDOWS\System32\wmimgmt.msc
2009-08-05 04:55:02 ----A---- C:\WINDOWS\System32\servdeps.dll
2009-08-05 04:55:01 ----A---- C:\WINDOWS\System32\mmfutil.dll
2009-08-05 04:55:01 ----A---- C:\WINDOWS\System32\licwmi.dll
2009-08-05 04:55:00 ----A---- C:\WINDOWS\System32\cmprops.dll
======List of files/folders modified in the last 1 months======
2009-08-05 06:12:21 ----A---- C:\WINDOWS\win.ini
2009-08-05 05:20:58 ----A---- C:\WINDOWS\system.ini
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 klif;Klif; \??\C:\WINDOWS\System32\drivers\klif.sys []
R3 ac97intc;Service d'installation du pilote audio Intel(r) 82801 (WDM); C:\WINDOWS\system32\drivers\ac97intc.sys [2001-08-17 96256]
R3 CmBatt;Pilote d'adaptateur secteur Microsoft; C:\WINDOWS\System32\DRIVERS\CmBatt.sys [2001-08-17 13056]
R3 PCnet;Pilote de carte compatible AMD PCNET; C:\WINDOWS\System32\DRIVERS\pcntpci5.sys [2001-08-17 35328]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
S2 AVP;Anti-Virus Personnel 2008; C:\Program Files\Micro Application\Anti-Virus Personnel 2008\avp.exe [2007-07-02 200768]
-----------------EOF-----------------
Run by Ric025 at 2009-08-06 01:13:59
Microsoft Windows XP Professionnel
System drive C: has 18 GB (77%) free of 20 GB
Total RAM: 511 MB (69% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:17:19, on 06/08/2009
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Ric025\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\msiexec.exe
C:\Documents and Settings\Ric025\Bureau\RSIT.exe
C:\Program Files\Dealio Toolbar\SearchSettingsKit.exe
C:\WINDOWS\system32\MSIEXEC.EXE
C:\Program Files\trend micro\Ric025.exe
C:\WINDOWS\System32\MsiExec.exe
C:\Program Files\Mozilla Firefox\firefox.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://y.lo.st
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O4 - HKLM\..\Run: [NetPumper] "C:\Program Files\NetPumper\NetPumperIEProxy.exe"
O4 - HKLM\..\Run: [funkyemoticons] C:\Program Files\FunkyEmoticons\FunkyEmoticons.exe
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [SoftwareHelper] C:\Documents and Settings\Ric025\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Micro Application\Anti-Virus Personnel 2008\avp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [novwwg] "c:\documents and settings\ric025\local settings\application data\novwwg.exe" novwwg
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Download with NetPumper - C:\Program Files\NetPumper\AddUrl.htm
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Micro Application\Anti-Virus Personnel 2008\scieplugin.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O23 - Service: Anti-Virus Personnel 2008 (AVP) - Micro Application - C:\Program Files\Micro Application\Anti-Virus Personnel 2008\avp.exe
End of file - 3286 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}]
Dealio Toolbar - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll [2009-04-09 688128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}]
EoBHO Class - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll [2008-11-18 42792]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E718888-423F-11D2-876E-00A0C9082467} - &Radio - C:\WINDOWS\System32\msdxm.ocx [2002-06-28 847900]
{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - Dealio Toolbar - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll [2009-04-09 688128]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NetPumper"=C:\Program Files\NetPumper\NetPumperIEProxy.exe [2004-07-03 704000]
"funkyemoticons"=C:\Program Files\FunkyEmoticons\FunkyEmoticons.exe [2009-06-16 283360]
"EoEngine"=C:\Program Files\EoRezo\EoEngine.exe [2009-02-23 472872]
"EoSudoku"= []
"SoftwareHelper"=C:\Documents and Settings\Ric025\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe [2008-12-09 368224]
"AVP"=C:\Program Files\Micro Application\Anti-Virus Personnel 2008\avp.exe [2007-07-02 200768]
"SearchSettings"=C:\Program Files\Search Settings\SearchSettings.exe [2009-04-09 970240]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\System32\ctfmon.exe [2002-06-28 13312]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe /background []
"novwwg"=c:\documents and settings\ric025\local settings\application data\novwwg.exe [2009-08-05 249856]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\WINDOWS\System32\klogon.dll [2007-07-06 204800]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 1 months======
2009-08-06 01:20:26 ----D---- C:\Documents and Settings\Ric025\Application Data\Search Settings
2009-08-06 01:16:44 ----D---- C:\Documents and Settings\Ric025\Application Data\Dealio
2009-08-06 01:16:35 ----D---- C:\Program Files\Search Settings
2009-08-06 01:12:09 ----D---- C:\Program Files\Dealio Toolbar
2009-08-05 17:15:15 ----D---- C:\Program Files\trend micro
2009-08-05 17:14:41 ----D---- C:\rsit
2009-08-05 16:58:32 ----SD---- C:\WINDOWS\System32\Microsoft
2009-08-05 16:54:55 ----D---- C:\Documents and Settings\Ric025\Application Data\EoRezo
2009-08-05 16:54:27 ----D---- C:\Program Files\EoRezo
2009-08-05 16:53:08 ----D---- C:\Documents and Settings\Ric025\Application Data\FunkyEmoticons
2009-08-05 16:52:24 ----D---- C:\Program Files\FunkyEmoticons
2009-08-05 16:51:17 ----D---- C:\Documents and Settings\All Users\Application Data\Micro Application
2009-08-05 16:51:16 ----D---- C:\Program Files\Micro Application
2009-08-05 16:48:50 ----D---- C:\Documents and Settings\Ric025\Application Data\NetPumper
2009-08-05 16:47:32 ----D---- C:\Program Files\NetPumper
2009-08-05 15:57:25 ----D---- C:\Documents and Settings\Ric025\Application Data\Mozilla
2009-08-05 15:54:38 ----D---- C:\Program Files\Mozilla Firefox
2009-08-05 15:49:45 ----SHD---- C:\RECYCLER
2009-08-05 15:38:58 ----D---- C:\Documents and Settings\Ric025\Application Data\Macromedia
2009-08-05 15:38:58 ----D---- C:\Documents and Settings\Ric025\Application Data\Adobe
2009-08-05 15:06:40 ----A---- C:\WINDOWS\System32\wpa.bak
2009-08-05 09:41:14 ----SHD---- C:\WINDOWS\Installer
2009-08-05 09:40:44 ----D---- C:\Documents and Settings\Ric025\Application Data\Identities
2009-08-05 09:40:06 ----HD---- C:\Program Files\Uninstall Information
2009-08-05 09:38:51 ----A---- C:\WINDOWS\setdebug.exe
2009-08-05 09:38:50 ----A---- C:\WINDOWS\System32\jit.dll
2009-08-05 09:38:49 ----A---- C:\WINDOWS\System32\javaee.dll
2009-08-05 09:38:48 ----A---- C:\WINDOWS\System32\dx3j.dll
2009-08-05 09:38:30 ----A---- C:\WINDOWS\System32\wjview.exe
2009-08-05 09:38:29 ----A---- C:\WINDOWS\System32\vmhelper.dll
2009-08-05 09:38:29 ----A---- C:\WINDOWS\System32\msjdbc10.dll
2009-08-05 09:38:28 ----A---- C:\WINDOWS\System32\msjava.dll
2009-08-05 09:38:27 ----A---- C:\WINDOWS\System32\msawt.dll
2009-08-05 09:38:27 ----A---- C:\WINDOWS\System32\jview.exe
2009-08-05 09:38:27 ----A---- C:\WINDOWS\System32\jdbgmgr.exe
2009-08-05 09:38:26 ----A---- C:\WINDOWS\System32\javart.dll
2009-08-05 09:38:26 ----A---- C:\WINDOWS\System32\javaprxy.dll
2009-08-05 09:38:25 ----A---- C:\WINDOWS\System32\javacypt.dll
2009-08-05 09:38:22 ----A---- C:\WINDOWS\System32\clspack.exe
2009-08-05 09:38:20 ----D---- C:\WINDOWS\LastGood
2009-08-05 09:37:30 ----ASH---- C:\Documents and Settings\Ric025\Application Data\desktop.ini
2009-08-05 09:37:26 ----SD---- C:\Documents and Settings\Ric025\Application Data\Microsoft
2009-08-05 09:34:34 ----SHD---- C:\System Volume Information
2009-08-05 09:34:23 ----D---- C:\WINDOWS\Prefetch
2009-08-05 09:34:22 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-08-05 06:29:59 ----D---- C:\WINDOWS\System32\xircom
2009-08-05 06:29:59 ----D---- C:\Program Files\xerox
2009-08-05 06:29:58 ----D---- C:\Program Files\microsoft frontpage
2009-08-05 06:27:49 ----A---- C:\WINDOWS\System32\IE60~1.EXE
2009-08-05 06:27:47 ----A---- C:\WINDOWS\System32\MSJAVX86.EXE
2009-08-05 06:27:44 ----D---- C:\DELL
2009-08-05 06:17:20 ----SH---- C:\boot.ini
2009-08-05 06:14:15 ----N---- C:\WINDOWS\System32\spmsg.dll
2009-08-05 06:13:41 ----D---- C:\WINDOWS\LastGood.Tmp
2009-08-05 06:12:40 ----A---- C:\WINDOWS\control.ini
2009-08-05 06:12:40 ----A---- C:\AUTOEXEC.BAT
2009-08-05 06:11:27 ----RSHDC---- C:\WINDOWS\System32\dllcache
2009-08-05 06:11:27 ----RSD---- C:\WINDOWS\Fonts
2009-08-05 06:11:27 ----RD---- C:\WINDOWS\Web
2009-08-05 06:11:27 ----HD---- C:\WINDOWS\inf
2009-08-05 06:11:27 ----D---- C:\WINDOWS\WinSxS
2009-08-05 06:11:27 ----D---- C:\WINDOWS\twain_32
2009-08-05 06:11:27 ----D---- C:\WINDOWS\Temp
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\wins
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\wbem
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\usmt
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\spool
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\ShellExt
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\Setup
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\ras
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\oobe
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\npp
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\mui
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\inetsrv
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\IME
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\icsxml
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\ias
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\export
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\drivers
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\dhcp
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\config
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\3com_dmi
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\3076
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\2052
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\1054
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\1042
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\1041
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\1037
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\1036
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\1033
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\1031
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\1028
2009-08-05 06:11:27 ----D---- C:\WINDOWS\System32\1025
2009-08-05 06:11:27 ----D---- C:\WINDOWS\system32
2009-08-05 06:11:27 ----D---- C:\WINDOWS\system
2009-08-05 06:11:27 ----D---- C:\WINDOWS\security
2009-08-05 06:11:27 ----D---- C:\WINDOWS\Resources
2009-08-05 06:11:27 ----D---- C:\WINDOWS\repair
2009-08-05 06:11:27 ----D---- C:\WINDOWS\mui
2009-08-05 06:11:27 ----D---- C:\WINDOWS\msapps
2009-08-05 06:11:27 ----D---- C:\WINDOWS\msagent
2009-08-05 06:11:27 ----D---- C:\WINDOWS\Media
2009-08-05 06:11:27 ----D---- C:\WINDOWS\java
2009-08-05 06:11:27 ----D---- C:\WINDOWS\ime
2009-08-05 06:11:27 ----D---- C:\WINDOWS\Help
2009-08-05 06:11:27 ----D---- C:\WINDOWS\Driver Cache
2009-08-05 06:11:27 ----D---- C:\WINDOWS\Debug
2009-08-05 06:11:27 ----D---- C:\WINDOWS\Cursors
2009-08-05 06:11:27 ----D---- C:\WINDOWS\Connection Wizard
2009-08-05 06:11:27 ----D---- C:\WINDOWS\Config
2009-08-05 06:11:27 ----D---- C:\WINDOWS\AppPatch
2009-08-05 06:11:27 ----D---- C:\WINDOWS\addins
2009-08-05 06:11:27 ----D---- C:\WINDOWS
2009-08-05 06:06:18 ----A---- C:\WINDOWS\OEWABLog.txt
2009-08-05 06:04:58 ----A---- C:\WINDOWS\System32\mapi32.dll
2009-08-05 05:44:50 ----A---- C:\WINDOWS\System32\h323log.txt
2009-08-05 05:40:59 ----RD---- C:\WINDOWS\Offline Web Pages
2009-08-05 05:40:55 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-08-05 05:40:53 ----RAH---- C:\WINDOWS\System32\logonui.exe.manifest
2009-08-05 05:37:35 ----RAH---- C:\WINDOWS\System32\cdplayer.exe.manifest
2009-08-05 05:31:59 ----D---- C:\WINDOWS\srchasst
2009-08-05 05:30:11 ----D---- C:\WINDOWS\System32\DirectX
2009-08-05 05:30:10 ----D---- C:\WINDOWS\System32\Macromed
2009-08-05 05:29:21 ----A---- C:\WINDOWS\System32\ksuser.dll
2009-08-05 05:28:49 ----A---- C:\WINDOWS\System32\qmgrprxy.dll
2009-08-05 05:28:49 ----A---- C:\WINDOWS\System32\qmgr.dll
2009-08-05 05:28:44 ----D---- C:\Program Files\Movie Maker
2009-08-05 05:26:17 ----A---- C:\WINDOWS\System32\safrslv.dll
2009-08-05 05:26:17 ----A---- C:\WINDOWS\System32\safrdm.dll
2009-08-05 05:26:16 ----A---- C:\WINDOWS\System32\safrcdlg.dll
2009-08-05 05:26:16 ----A---- C:\WINDOWS\System32\racpldlg.dll
2009-08-05 05:26:15 ----A---- C:\WINDOWS\System32\atrace.dll
2009-08-05 05:25:48 ----A---- C:\WINDOWS\System32\desktop.ini
2009-08-05 05:25:48 ----A---- C:\WINDOWS\desktop.ini
2009-08-05 05:25:07 ----D---- C:\WINDOWS\System32\Restore
2009-08-05 05:24:51 ----A---- C:\WINDOWS\System32\srsvc.dll
2009-08-05 05:24:51 ----A---- C:\WINDOWS\System32\srrstr.dll
2009-08-05 05:24:50 ----A---- C:\WINDOWS\System32\srclient.dll
2009-08-05 05:24:47 ----D---- C:\Program Files\Windows Media Player
2009-08-05 05:24:44 ----A---- C:\WINDOWS\System32\ils.dll
2009-08-05 05:24:43 ----A---- C:\WINDOWS\System32\nmevtmsg.dll
2009-08-05 05:24:43 ----A---- C:\WINDOWS\System32\isrdbg32.dll
2009-08-05 05:24:42 ----A---- C:\WINDOWS\System32\mnmdd.dll
2009-08-05 05:24:41 ----A---- C:\WINDOWS\System32\nmmkcert.dll
2009-08-05 05:24:40 ----A---- C:\WINDOWS\System32\mnmsrvc.exe
2009-08-05 05:24:39 ----A---- C:\WINDOWS\System32\msconf.dll
2009-08-05 05:24:14 ----D---- C:\Program Files\NetMeeting
2009-08-05 05:24:12 ----D---- C:\WINDOWS\PCHEALTH
2009-08-05 05:24:12 ----A---- C:\WINDOWS\System32\msoert2.dll
2009-08-05 05:24:11 ----A---- C:\WINDOWS\System32\acctres.dll
2009-08-05 05:24:10 ----A---- C:\WINDOWS\System32\msoeacct.dll
2009-08-05 05:24:09 ----D---- C:\Program Files\Fichiers communs\Services
2009-08-05 05:24:02 ----A---- C:\WINDOWS\System32\inetres.dll
2009-08-05 05:24:01 ----A---- C:\WINDOWS\System32\inetcomm.dll
2009-08-05 05:23:23 ----D---- C:\Program Files\Outlook Express
2009-08-05 05:23:22 ----SD---- C:\WINDOWS\Tasks
2009-08-05 05:23:22 ----A---- C:\WINDOWS\System32\schedsvc.dll
2009-08-05 05:23:21 ----A---- C:\WINDOWS\System32\mstinit.exe
2009-08-05 05:23:21 ----A---- C:\WINDOWS\System32\mstask.dll
2009-08-05 05:23:18 ----A---- C:\WINDOWS\System32\icwphbk.dll
2009-08-05 05:23:18 ----A---- C:\WINDOWS\System32\icwdial.dll
2009-08-05 05:23:17 ----A---- C:\WINDOWS\System32\isign32.dll
2009-08-05 05:23:16 ----A---- C:\WINDOWS\System32\inetcfg.dll
2009-08-05 05:23:15 ----A---- C:\WINDOWS\System32\icfgnt5.dll
2009-08-05 05:22:52 ----D---- C:\Program Files\Fichiers communs\MSSoap
2009-08-05 05:22:10 ----D---- C:\Program Files\Fichiers communs\System
2009-08-05 05:22:01 ----D---- C:\Program Files\Internet Explorer
2009-08-05 05:21:18 ----A---- C:\WINDOWS\System32\PerfStringBackup.INI
2009-08-05 05:21:15 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-08-05 05:21:13 ----A---- C:\WINDOWS\ODBCINST.INI
2009-08-05 05:21:02 ----D---- C:\Program Files\Fichiers communs\SpeechEngines
2009-08-05 05:21:01 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
2009-08-05 05:21:00 ----RD---- C:\Program Files
2009-08-05 05:21:00 ----D---- C:\Program Files\Fichiers communs
2009-08-05 05:20:48 ----RA---- C:\WINDOWS\System32\kbdazel.dll
2009-08-05 05:20:47 ----RA---- C:\WINDOWS\System32\kbdtuq.dll
2009-08-05 05:20:47 ----RA---- C:\WINDOWS\System32\kbdtuf.dll
2009-08-05 05:20:41 ----RA---- C:\WINDOWS\System32\kbduzb.dll
2009-08-05 05:20:41 ----RA---- C:\WINDOWS\System32\kbdtat.dll
2009-08-05 05:20:41 ----RA---- C:\WINDOWS\System32\kbdmon.dll
2009-08-05 05:20:41 ----RA---- C:\WINDOWS\System32\kbdkyr.dll
2009-08-05 05:20:41 ----RA---- C:\WINDOWS\System32\kbdkaz.dll
2009-08-05 05:20:41 ----RA---- C:\WINDOWS\System32\kbdaze.dll
2009-08-05 05:20:40 ----RA---- C:\WINDOWS\System32\kbdycc.dll
2009-08-05 05:20:40 ----RA---- C:\WINDOWS\System32\kbdur.dll
2009-08-05 05:20:40 ----RA---- C:\WINDOWS\System32\kbdru1.dll
2009-08-05 05:20:40 ----RA---- C:\WINDOWS\System32\kbdru.dll
2009-08-05 05:20:40 ----RA---- C:\WINDOWS\System32\kbdbu.dll
2009-08-05 05:20:40 ----RA---- C:\WINDOWS\System32\kbdblr.dll
2009-08-05 05:20:34 ----RA---- C:\WINDOWS\System32\kbdhept.dll
2009-08-05 05:20:33 ----RA---- C:\WINDOWS\System32\kbdhela3.dll
2009-08-05 05:20:33 ----RA---- C:\WINDOWS\System32\kbdhela2.dll
2009-08-05 05:20:33 ----RA---- C:\WINDOWS\System32\kbdhe319.dll
2009-08-05 05:20:33 ----RA---- C:\WINDOWS\System32\kbdhe220.dll
2009-08-05 05:20:33 ----RA---- C:\WINDOWS\System32\kbdhe.dll
2009-08-05 05:20:33 ----RA---- C:\WINDOWS\System32\kbdgkl.dll
2009-08-05 05:20:28 ----RA---- C:\WINDOWS\System32\kbdlt1.dll
2009-08-05 05:20:27 ----RA---- C:\WINDOWS\System32\kbdlv1.dll
2009-08-05 05:20:27 ----RA---- C:\WINDOWS\System32\kbdlv.dll
2009-08-05 05:20:27 ----RA---- C:\WINDOWS\System32\kbdlt.dll
2009-08-05 05:20:27 ----RA---- C:\WINDOWS\System32\kbdest.dll
2009-08-05 05:20:21 ----RA---- C:\WINDOWS\System32\kbdsl1.dll
2009-08-05 05:20:20 ----RA---- C:\WINDOWS\System32\kbdsl.dll
2009-08-05 05:20:20 ----RA---- C:\WINDOWS\System32\kbdro.dll
2009-08-05 05:20:20 ----RA---- C:\WINDOWS\System32\kbdpl1.dll
2009-08-05 05:20:20 ----RA---- C:\WINDOWS\System32\kbdpl.dll
2009-08-05 05:20:20 ----RA---- C:\WINDOWS\System32\kbdhu1.dll
2009-08-05 05:20:20 ----RA---- C:\WINDOWS\System32\kbdhu.dll
2009-08-05 05:20:19 ----RA---- C:\WINDOWS\System32\kbdcz2.dll
2009-08-05 05:20:19 ----RA---- C:\WINDOWS\System32\kbdcz1.dll
2009-08-05 05:20:19 ----RA---- C:\WINDOWS\System32\kbdcz.dll
2009-08-05 05:20:19 ----RA---- C:\WINDOWS\System32\kbdcr.dll
2009-08-05 05:20:18 ----RA---- C:\WINDOWS\System32\kbdycl.dll
2009-08-05 05:20:18 ----RA---- C:\WINDOWS\System32\KBDAL.DLL
2009-08-05 05:20:08 ----A---- C:\WINDOWS\System32\irclass.dll
2009-08-05 05:20:07 ----A---- C:\WINDOWS\System32\spxcoins.dll
2009-08-05 05:20:07 ----A---- C:\WINDOWS\System32\dgsetup.dll
2009-08-05 05:20:07 ----A---- C:\WINDOWS\System32\dgrpsetu.dll
2009-08-05 05:20:06 ----A---- C:\WINDOWS\System32\EqnClass.Dll
2009-08-05 05:20:06 ----A---- C:\WINDOWS\System32\batt.dll
2009-08-05 05:19:59 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-08-05 05:19:59 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-08-05 05:19:58 ----N---- C:\WINDOWS\System32\CONFIG.TMP
2009-08-05 05:19:56 ----A---- C:\WINDOWS\System32\storprop.dll
2009-08-05 05:19:29 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2009-08-05 05:19:26 ----RA---- C:\WINDOWS\SET1B.tmp
2009-08-05 05:19:18 ----RA---- C:\WINDOWS\SETD.tmp
2009-08-05 05:19:15 ----RA---- C:\WINDOWS\SET7.tmp
2009-08-05 05:19:10 ----RA---- C:\WINDOWS\SET3.tmp
2009-08-05 05:18:54 ----D---- C:\WINDOWS\System32\CatRoot2
2009-08-05 05:18:54 ----D---- C:\WINDOWS\System32\CatRoot
2009-08-05 05:18:43 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-08-05 05:18:25 ----A---- C:\WINDOWS\setuplog.txt
2009-08-05 05:18:09 ----D---- C:\Documents and Settings
2009-08-05 05:07:25 ----D---- C:\Program Files\ComPlus Applications
2009-08-05 05:07:14 ----A---- C:\WINDOWS\vbaddin.ini
2009-08-05 05:07:14 ----A---- C:\WINDOWS\vb.ini
2009-08-05 05:06:34 ----D---- C:\WINDOWS\Registration
2009-08-05 05:05:19 ----HD---- C:\Program Files\WindowsUpdate
2009-08-05 05:05:16 ----D---- C:\Program Files\Services en ligne
2009-08-05 05:02:23 ----D---- C:\Program Files\MSN
2009-08-05 05:01:49 ----D---- C:\Program Files\MSN Gaming Zone
2009-08-05 05:01:48 ----A---- C:\WINDOWS\System32\write.exe
2009-08-05 04:59:56 ----A---- C:\WINDOWS\System32\accwiz.exe
2009-08-05 04:59:54 ----A---- C:\WINDOWS\System32\sndvol32.exe
2009-08-05 04:59:53 ----A---- C:\WINDOWS\System32\sndrec32.exe
2009-08-05 04:59:53 ----A---- C:\WINDOWS\System32\mplay32.exe
2009-08-05 04:59:52 ----A---- C:\WINDOWS\System32\hypertrm.dll
2009-08-05 04:59:51 ----A---- C:\WINDOWS\System32\hticons.dll
2009-08-05 04:59:39 ----A---- C:\WINDOWS\System32\avwav.dll
2009-08-05 04:59:38 ----A---- C:\WINDOWS\System32\avtapi.dll
2009-08-05 04:59:38 ----A---- C:\WINDOWS\System32\avmeter.dll
2009-08-05 04:59:36 ----D---- C:\Program Files\Windows NT
2009-08-05 04:59:34 ----A---- C:\WINDOWS\System32\winchat.exe
2009-08-05 04:59:27 ----A---- C:\WINDOWS\System32\mspaint.exe
2009-08-05 04:58:42 ----A---- C:\WINDOWS\System32\clipbrd.exe
2009-08-05 04:58:27 ----A---- C:\WINDOWS\System32\getuname.dll
2009-08-05 04:58:25 ----A---- C:\WINDOWS\System32\charmap.exe
2009-08-05 04:58:23 ----A---- C:\WINDOWS\System32\calc.exe
2009-08-05 04:58:22 ----A---- C:\WINDOWS\System32\spider.exe
2009-08-05 04:58:20 ----A---- C:\WINDOWS\System32\sol.exe
2009-08-05 04:58:19 ----A---- C:\WINDOWS\System32\winmine.exe
2009-08-05 04:58:18 ----A---- C:\WINDOWS\System32\mshearts.exe
2009-08-05 04:58:17 ----A---- C:\WINDOWS\System32\freecell.exe
2009-08-05 04:58:16 ----A---- C:\WINDOWS\System32\wuauclt.exe
2009-08-05 04:58:15 ----A---- C:\WINDOWS\System32\wuauserv.dll
2009-08-05 04:58:15 ----A---- C:\WINDOWS\System32\wuaueng.dll
2009-08-05 04:58:12 ----A---- C:\WINDOWS\System32\tscfgwmi.dll
2009-08-05 04:58:11 ----A---- C:\WINDOWS\System32\mstscax.dll
2009-08-05 04:58:10 ----A---- C:\WINDOWS\System32\reset.exe
2009-08-05 04:58:10 ----A---- C:\WINDOWS\System32\mstsc.exe
2009-08-05 04:58:09 ----A---- C:\WINDOWS\System32\remotepg.dll
2009-08-05 04:58:09 ----A---- C:\WINDOWS\System32\rdsaddin.exe
2009-08-05 04:58:08 ----A---- C:\WINDOWS\System32\sessmgr.exe
2009-08-05 04:58:08 ----A---- C:\WINDOWS\System32\rdshost.exe
2009-08-05 04:58:07 ----A---- C:\WINDOWS\System32\tscupgrd.exe
2009-08-05 04:58:07 ----A---- C:\WINDOWS\System32\rdchost.dll
2009-08-05 04:58:06 ----A---- C:\WINDOWS\System32\usrlogon.cmd
2009-08-05 04:58:06 ----A---- C:\WINDOWS\System32\tskill.exe
2009-08-05 04:57:51 ----A---- C:\WINDOWS\System32\tsshutdn.exe
2009-08-05 04:57:50 ----A---- C:\WINDOWS\System32\tslabels.ini
2009-08-05 04:57:49 ----A---- C:\WINDOWS\System32\tsdiscon.exe
2009-08-05 04:57:49 ----A---- C:\WINDOWS\System32\tscon.exe
2009-08-05 04:57:48 ----RA---- C:\WINDOWS\System32\termsrv.dll
2009-08-05 04:57:48 ----A---- C:\WINDOWS\System32\shadow.exe
2009-08-05 04:57:47 ----A---- C:\WINDOWS\System32\rwinsta.exe
2009-08-05 04:57:47 ----A---- C:\WINDOWS\System32\regini.exe
2009-08-05 04:57:46 ----A---- C:\WINDOWS\System32\rdpwsx.dll
2009-08-05 04:57:46 ----A---- C:\WINDOWS\System32\rdpsnd.dll
2009-08-05 04:57:45 ----A---- C:\WINDOWS\System32\rdpclip.exe
2009-08-05 04:57:45 ----A---- C:\WINDOWS\System32\rdpcfgex.dll
2009-08-05 04:57:44 ----A---- C:\WINDOWS\System32\qwinsta.exe
2009-08-05 04:57:43 ----A---- C:\WINDOWS\System32\qprocess.exe
2009-08-05 04:57:43 ----A---- C:\WINDOWS\System32\qappsrv.exe
2009-08-05 04:57:43 ----A---- C:\WINDOWS\System32\msg.exe
2009-08-05 04:57:42 ----A---- C:\WINDOWS\System32\logoff.exe
2009-08-05 04:57:42 ----A---- C:\WINDOWS\System32\icaapi.dll
2009-08-05 04:57:41 ----A---- C:\WINDOWS\System32\cfgbkend.dll
2009-08-05 04:57:40 ----A---- C:\WINDOWS\System32\cdmodem.dll
2009-08-05 04:57:39 ----D---- C:\WINDOWS\System32\MsDtc
2009-08-05 04:57:39 ----A---- C:\WINDOWS\System32\msdtcuiu.dll
2009-08-05 04:57:38 ----A---- C:\WINDOWS\System32\mtxoci.dll
2009-08-05 04:57:38 ----A---- C:\WINDOWS\System32\msdtcprx.dll
2009-08-05 04:57:36 ----A---- C:\WINDOWS\System32\xolehlp.dll
2009-08-05 04:57:36 ----A---- C:\WINDOWS\System32\msdtctm.dll
2009-08-05 04:57:35 ----A---- C:\WINDOWS\System32\msdtcprf.ini
2009-08-05 04:57:35 ----A---- C:\WINDOWS\System32\msdtclog.dll
2009-08-05 04:57:34 ----A---- C:\WINDOWS\System32\msdtc.exe
2009-08-05 04:57:12 ----A---- C:\WINDOWS\System32\mtxlegih.dll
2009-08-05 04:57:12 ----A---- C:\WINDOWS\System32\mtxex.dll
2009-08-05 04:57:12 ----A---- C:\WINDOWS\System32\dcomcnfg.exe
2009-08-05 04:57:11 ----A---- C:\WINDOWS\System32\mtxdm.dll
2009-08-05 04:57:10 ----D---- C:\WINDOWS\System32\Com
2009-08-05 04:57:10 ----A---- C:\WINDOWS\System32\colbact.dll
2009-08-05 04:57:09 ----A---- C:\WINDOWS\System32\comrepl.dll
2009-08-05 04:57:09 ----A---- C:\WINDOWS\System32\comaddin.dll
2009-08-05 04:57:08 ----A---- C:\WINDOWS\System32\stclient.dll
2009-08-05 04:57:08 ----A---- C:\WINDOWS\System32\catsrvps.dll
2009-08-05 04:57:07 ----A---- C:\WINDOWS\System32\clbcatex.dll
2009-08-05 04:57:06 ----A---- C:\WINDOWS\System32\catsrvut.dll
2009-08-05 04:57:05 ----A---- C:\WINDOWS\System32\catsrv.dll
2009-08-05 04:57:04 ----A---- C:\WINDOWS\System32\comsvcs.dll
2009-08-05 04:57:03 ----A---- C:\WINDOWS\System32\comuid.dll
2009-08-05 04:57:02 ----A---- C:\WINDOWS\System32\comsnap.dll
2009-08-05 04:57:01 ----A---- C:\WINDOWS\System32\clbcatq.dll
2009-08-05 04:55:02 ----A---- C:\WINDOWS\System32\wmimgmt.msc
2009-08-05 04:55:02 ----A---- C:\WINDOWS\System32\servdeps.dll
2009-08-05 04:55:01 ----A---- C:\WINDOWS\System32\mmfutil.dll
2009-08-05 04:55:01 ----A---- C:\WINDOWS\System32\licwmi.dll
2009-08-05 04:55:00 ----A---- C:\WINDOWS\System32\cmprops.dll
======List of files/folders modified in the last 1 months======
2009-08-05 06:12:21 ----A---- C:\WINDOWS\win.ini
2009-08-05 05:20:58 ----A---- C:\WINDOWS\system.ini
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 klif;Klif; \??\C:\WINDOWS\System32\drivers\klif.sys []
R3 ac97intc;Service d'installation du pilote audio Intel(r) 82801 (WDM); C:\WINDOWS\system32\drivers\ac97intc.sys [2001-08-17 96256]
R3 CmBatt;Pilote d'adaptateur secteur Microsoft; C:\WINDOWS\System32\DRIVERS\CmBatt.sys [2001-08-17 13056]
R3 PCnet;Pilote de carte compatible AMD PCNET; C:\WINDOWS\System32\DRIVERS\pcntpci5.sys [2001-08-17 35328]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
S2 AVP;Anti-Virus Personnel 2008; C:\Program Files\Micro Application\Anti-Virus Personnel 2008\avp.exe [2007-07-02 200768]
-----------------EOF-----------------






















Si ca se passe ainsi en maison de retraite,ca doit se bousculer au portillon non ?


