Infection et rapport hijackthis

bobbyno · Septembre 28, 2009, 12:49

Bonjour j’ai de gros pb sur mon pc qui doit être infecté: je ne peux plus redemarrer en mode sans echec, et pas mal de programmes notamment d’antivirus ne fonctionnent pas, merci de m’aider.

voici le rapport hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:21:28, on 2009-09-25
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\PROGRA~1\AVG\AVG8\avgam.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\PROGRA~1\SYMANT~2\VPTray.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\AVG\AVG8\avgui.exe
C:\Program Files\AVG\AVG8\avgscanx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\system32\taskmgr.exe
\srvparis\MYDOc\benoit.cuny\Téléchargements\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = proxy-wonder.tls.123multimedia.com…
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {ba603215-23f2-42ad-f4e4-00aac39caa53} - C:\WINDOWS\system32\nzfiu3h78di.dll (file missing)
O4 - HKLM…\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM…\Run: [AdaptecDirectCD] C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
O4 - HKLM…\Run: [pdfw] C:\Program Files\Amic Utilities\PDF Writer Pro\pdfwload.exe
O4 - HKLM…\Run: [ccApp] “C:\Program Files\Common Files\Symantec Shared\ccApp.exe”
O4 - HKLM…\Run: [vptray] C:\PROGRA~1\SYMANT~2\VPTray.exe
O4 - HKLM…\Run: [Adobe Photo Downloader] “C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe”
O4 - HKLM…\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM…\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM…\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM…\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,BluetoothAuthenticationAgent
O4 - HKLM…\Run: [Adobe Reader Speed Launcher] “C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe”
O4 - HKLM…\Run: [SunJavaUpdateSched] “C:\Program Files\Java\jre6\bin\jusched.exe”
O4 - HKLM…\Run: [QuickTime Task] “C:\Program Files\QuickTime\qttask.exe” -atboottime
O4 - HKLM…\Run: [iTunesHelper] “C:\Program Files\iTunes\iTunesHelper.exe”
O4 - HKLM…\Run: [TkBellExe] “C:\Program Files\Common Files\Real\Update_OB\realsched.exe” -osboot
O4 - HKLM…\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM…\Run: [calc] rundll32.exe C:\WINDOWS\system32\calc.dll,_IWMPEvents@0
O4 - HKLM…\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM…\Run: [zdwtmvfnh] c:\windows\system32\zdwtmvfnh.exe zdwtmvfnh
O4 - HKLM…\Run: [vwjjkj] c:\windows\system32\vwjjkj.exe vwjjkj
O4 - HKCU…\Run: [MsnMsgr] “C:\Program Files\Windows Live\Messenger\msnmsgr.exe” /background
O4 - HKCU…\Run: [Exetender] C:\Program Files\Player Metaboli\GPlayer.exe /schedule 300000
O4 - HKCU…\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU…\Run: [DriverUpdaterPro] C:\Program Files\iXi Tools\Driver Updater Pro\DriverUpdaterPro.exe -t
O4 - HKUS\S-1-5-21-2585863069-191951369-856499580-5896…\Run: [MsnMsgr] “C:\Program Files\Windows Live\Messenger\msnmsgr.exe” /background (User ‘?’)
O4 - HKUS\S-1-5-21-2585863069-191951369-856499580-5896…\Run: [Exetender] C:\Program Files\Player Metaboli\GPlayer.exe /schedule 300000 (User ‘?’)
O4 - HKUS\S-1-5-21-2585863069-191951369-856499580-5896…\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User ‘?’)
O4 - HKUS\S-1-5-21-2585863069-191951369-856499580-5896…\Run: [DriverUpdaterPro] C:\Program Files\iXi Tools\Driver Updater Pro\DriverUpdaterPro.exe -t (User ‘?’)
O4 - HKUS\S-1-5-18…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘?’)
O4 - HKUS.DEFAULT…\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User ‘Default user’)
O4 - S-1-5-21-2585863069-191951369-856499580-5896 Startup: scandisk.lnk = ? (User ‘?’)
O4 - Startup: scandisk.lnk = ?
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &Search - edits.mywebsearch.com…
O8 - Extra context menu item: Download All Files by HiDownload - C:\PROGRA~1\HIDOWN~1\HDGetAll.htm
O8 - Extra context menu item: Download by HiDownload - C:\PROGRA~1\HIDOWN~1\HDGet.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE…
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra ‘Tools’ menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: HiDownload - {F4FBA929-A891-492C-A0F6-5C79CC4F1742} - C:\PROGRA~1\HIDOWN~1\hidownload.exe (file missing)
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra ‘Tools’ menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - m6video.m6.fr…
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - […](file:///C:/Program%20Files/CLUE%20Accusations%20and%20Alibis/Images/stg_drm.ocx)
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - messenger.zone.msn.com…
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - go.microsoft.com…
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {493ACF15-5CD9-4474-82A6-91670C3DD66E} (LinkedIn ContactFinderControl) - www.linkedin.com…
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - a1540.g.akamai.net…
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - update.microsoft.com…
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - […](file:///C:/Program%20Files/Alice’s%20Magical%20Mahjong/Images/armhelper.ocx)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - fpdownload2.macromedia.com…
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = tls.123multimedia.com
O17 - HKLM\Software…\Telephony: DomainName = tls.123multimedia.com
O17 - HKLM\System\CCS\Services\Tcpip…{1896D1DE-7DE8-4E42-95A5-DB1CD6AA207D}: Domain = tls.123multimedia.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = tls.123multimedia.com
O17 - HKLM\System\CS1\Services\Tcpip…{1896D1DE-7DE8-4E42-95A5-DB1CD6AA207D}: Domain = tls.123multimedia.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = tls.123multimedia.com
O17 - HKLM\System\CS2\Services\Tcpip…{1896D1DE-7DE8-4E42-95A5-DB1CD6AA207D}: Domain = tls.123multimedia.com
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = tls.123multimedia.com
O17 - HKLM\System\CS3\Services\Tcpip…{1896D1DE-7DE8-4E42-95A5-DB1CD6AA207D}: Domain = tls.123multimedia.com
O17 - HKLM\System\CS4\Services\Tcpip\Parameters: Domain = tls.123multimedia.com
O17 - HKLM\System\CS4\Services\Tcpip…{1896D1DE-7DE8-4E42-95A5-DB1CD6AA207D}: Domain = tls.123multimedia.com
O17 - HKLM\System\CS5\Services\Tcpip\Parameters: Domain = tls.123multimedia.com
O17 - HKLM\System\CS5\Services\Tcpip…{1896D1DE-7DE8-4E42-95A5-DB1CD6AA207D}: Domain = tls.123multimedia.com
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O22 - SharedTaskScheduler: ksfe98wjkodsngiwiojndg873hundggdd - {BA603215-23F2-42AD-F4E4-00AAC39CAA53} - C:\WINDOWS\system32\nzfiu3h78di.dll (file missing)
O23 - Service: Ad-Aware 2007 Service aawservice LM Service (aawservice lm service) - Unknown owner - C:\WINDOWS\TEMP\toivcrpphx.exe (file missing)
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Background Intelligent Transfer Service (BITS) - Unknown owner - C:\WINDOWS
O23 - Service: Mises à jour automatiques (wuauserv) - Unknown owner - C:\WINDOWS\

–
End of file - 9742 bytes

Senosen · Septembre 28, 2009, 2:07

:hello:

Télécharge GenProc sur le bureau

Décompresse le sur le bureau
Ouvre le dossier créé et lance GenProc.bat
Enregistre le rapport sur le bureau et poste le ici s’il te plait

Une aide à l’utilisation ici

bobbyno · Septembre 28, 2009, 2:12

ben genproc ne marche pas il se stoppe au bout de 10 secondes, voici le rapport que j’ai et le fichier debug
en plus je ne peux plus redemarrer en mode sans echec

~~ Arguments de la procédure ~~

Détections [1] GenProc 2.633 2009-09-28 à 13:41:27

Wuauserv: le 2009-09-28 à 13:42:12 FystemRoot
Navipromo:le 2009-09-28 à 13:42:37 “C:\WINDOWS\System32*_nav??.dat”
Toolbar:le 2009-09-28 à 13:42:37 “C:\Documents and Settings\benoit.cuny\Application Data\FunWebProducts”
USBFix:le 2009-09-28 à 13:42:52 “C:\WINDOWS\Temp\nsrbgxod.bak”
TDSS:le 2009-09-28 à 13:42:54 “C:\WINDOWS\System32\gasfky*.???”

LE FICHIER DEBUG.TXT

Initialisation GenProc 2.633 [2009-09-28] à [14:08:48]

*** Variables initiales SET et temporaires ***

ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\benoit.cuny\Application Data
Arguments=C:\GenProc\Arguments
Canned=C:\GenProc\Canned
ChangeLog=C:\GenProc\ChangeLog
CheminBatch=C:\GenProc
CLASSPATH=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Common Files
ComptBagle=0
ComptFixWebHancer=0
ComptFxNdotN=0
ComptHaxFix=0
ComptLook2Me=0
ComptLop=0
ComptMBR=0
ComptMSNfix=0
ComptNavipromo=0
ComptPurity=0
ComptRemGAIN=0
ComptRustock=0
ComptSDfix=0
ComptSmitfraud=0
ComptTDSS=0
ComptToolbarSD=0
ComptUSBFix=0
ComptVundo=0
ComptWareOut=0
ComptWinSoftware=0
ComptWuauserv=0
ComptYoog=0
COMPUTERNAME=PC-WP-CUNY
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
GenProcVersion=2.633
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\benoit.cuny
LOGONSERVER=\SRVPARIS
NUMBER_OF_PROCESSORS=2
OS=Windows_NT
outil=C:\GenProc\outil
Page=C:\GenProc\Page
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\wbem;C:\Program Files\Common Files\Adaptec Shared\System;C:\Program Files\Windows Imaging;C:\Program Files\iTunes\Plug-Ins\Qloud;C:\Program Files\QuickTime\QTSystem
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 4 Stepping 1, GenuineIntel
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=0401
ProgramFiles=C:\Program Files
PROMPT=$P$G
QTJAVA=C:\Program Files\Java\jre6\lib\ext\QTJava.zip
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\BENOIT~1.CUN\LOCALS~1\Temp
TMP=C:\DOCUME~1\BENOIT~1.CUN\LOCALS~1\Temp
UATDATA=C:\WINDOWS\system32\CCM\UATData\D9F8C395-CAB8-491d-B8AC-179A1FE1BE77
USERDNSDOMAIN=TLS.123MULTIMEDIA.COM
USERDOMAIN=TLS
USERNAME=benoit.cuny
USERPROFILE=C:\Documents and Settings\benoit.cuny
windir=C:\WINDOWS

*** Liste des composants GenProc ***

C:\GenProc\Arguments
C:\GenProc\Canned
C:\GenProc\ChangeLog
C:\GenProc\GenProc.exe
C:\GenProc\outil
C:\GenProc\Page
C:\GenProc\Arguments\Argument.html
C:\GenProc\Arguments\Argument.txt
C:\GenProc\Arguments\Debug.txt
C:\GenProc\Arguments\design.css
C:\GenProc\Arguments\GenProc[1].txt
C:\GenProc\Arguments\Uninstall.html
C:\GenProc\Arguments\Uninstall.txt
C:\GenProc\Canned\ASquared.txt
C:\GenProc\Canned\Bagle2_Dl.txt
C:\GenProc\Canned\bfu_Dl.txt
C:\GenProc\Canned\CCleaner_48H.txt
C:\GenProc\Canned\CCleaner_Dl.txt
C:\GenProc\Canned\CCleaner_Exec.txt
C:\GenProc\Canned\FixWebHancer_Dl.txt
C:\GenProc\Canned\FixWebHancer_Exec.txt
C:\GenProc\Canned\FxNdotN_Dl.txt
C:\GenProc\Canned\FxNdotN_Exec.txt
C:\GenProc\Canned\HaxFix_Dl.txt
C:\GenProc\Canned\HaxFix_Exec.txt
C:\GenProc\Canned\Look2me_Dl.txt
C:\GenProc\Canned\Look2me_Exec.txt
C:\GenProc\Canned\Lop_Dl.txt
C:\GenProc\Canned\Lop_Exec.txt
C:\GenProc\Canned\MBR_Dl.txt
C:\GenProc\Canned\MBR_Exec.txt
C:\GenProc\Canned\MSE.txt
C:\GenProc\Canned\MSNfix_Dl.txt
C:\GenProc\Canned\MSNfix_Exec.txt
C:\GenProc\Canned\Navilog1_Dl.txt
C:\GenProc\Canned\Navilog1_Exec.txt
C:\GenProc\Canned\Purity_Dl.txt
C:\GenProc\Canned\Purity_Exec.txt
C:\GenProc\Canned\RemGAIN_Dl.txt
C:\GenProc\Canned\RemGAIN_Exec.txt
C:\GenProc\Canned\Rustock_Dl.txt
C:\GenProc\Canned\ScanAntivirusNod32.txt
C:\GenProc\Canned\ScanAntivirusPanda.txt
C:\GenProc\Canned\SDfix_Dl.txt
C:\GenProc\Canned\SDfix_Exec.txt
C:\GenProc\Canned\SmitfraudFix_Dl.txt
C:\GenProc\Canned\SmitfraudFix_Exec.txt
C:\GenProc\Canned\SpywareTerminator.txt
C:\GenProc\Canned\TeaTimer.txt
C:\GenProc\Canned\ToolbarSD_Dl.txt
C:\GenProc\Canned\ToolbarSD_Exec.txt
C:\GenProc\Canned\ToolCleaner.txt
C:\GenProc\Canned\USBFix_Dl.txt
C:\GenProc\Canned\USBFix_Exec.txt
C:\GenProc\Canned\Vundo_Dl.txt
C:\GenProc\Canned\Vundo_Exec.txt
C:\GenProc\Canned\Vundo_Recovery_Dl.txt
C:\GenProc\Canned\Winsoftware_bfu_Dl.txt
C:\GenProc\Canned\Winsoftware_bfu_Exec.txt
C:\GenProc\Canned\WORT_Dl.txt
C:\GenProc\Canned\WORT_Exec.txt
C:\GenProc\Canned\Wuauserv_Dl.txt
C:\GenProc\Canned\Wuauserv_Exec.txt
C:\GenProc\Canned\Yoog_Dl.txt
C:\GenProc\Canned\Yoog_Exec.txt
C:\GenProc\ChangeLog\BagleLog.txt
C:\GenProc\ChangeLog\FixWebHancerLog.txt
C:\GenProc\ChangeLog\FxNdotNLog.txt
C:\GenProc\ChangeLog\HaxfixLog.txt
C:\GenProc\ChangeLog\Look2MeLog.txt
C:\GenProc\ChangeLog\LopLog.txt
C:\GenProc\ChangeLog\MSNFixLog.txt
C:\GenProc\ChangeLog\NaviLog.txt
C:\GenProc\ChangeLog\PathFF.txt
C:\GenProc\ChangeLog\Profils_FF.txt
C:\GenProc\ChangeLog\PurityLog.txt
C:\GenProc\ChangeLog\RemGainLog.txt
C:\GenProc\ChangeLog\RustockLog.txt
C:\GenProc\ChangeLog\SDfixLog.txt
C:\GenProc\ChangeLog\SmitLog.txt
C:\GenProc\ChangeLog\TDSSLog.txt
C:\GenProc\ChangeLog\ToolbarSDLog.txt
C:\GenProc\ChangeLog\USBFixLog.txt
C:\GenProc\ChangeLog\VundoLog.txt
C:\GenProc\ChangeLog\WareOutLog.txt
C:\GenProc\ChangeLog\WinSoftware.txt
C:\GenProc\ChangeLog\YoogLog.txt
C:\GenProc\ChangeLog\YoogLog1.txt
C:\GenProc\ChangeLog\YoogLogFF.txt
C:\GenProc\outil\1.txt
C:\GenProc\outil\Affichages.bat
C:\GenProc\outil\Arborescence.txt
C:\GenProc\outil\Avertissement.txt
C:\GenProc\outil\CCleanerOK.txt
C:\GenProc\outil\Cherche_Navig.bat
C:\GenProc\outil\commandes.sed
C:\GenProc\outil\CompareDate.bat
C:\GenProc\outil\Complement_Infection.bat
C:\GenProc\outil\curl.exe
C:\GenProc\outil\DateInst.txt
C:\GenProc\outil\Debug.bat
C:\GenProc\outil\EnableWSH.bat
C:\GenProc\outil\EpurOS.bat
C:\GenProc\outil\Exclusions.sed
C:\GenProc\outil\GenVbs.bat
C:\GenProc\outil\GetVersion.exe
C:\GenProc\outil\grep.exe
C:\GenProc\outil\HTTP_Request.bat
C:\GenProc\outil\icon_genproc.ico
C:\GenProc\outil\inf.txt
C:\GenProc\outil\Infection.bat
C:\GenProc\outil\Init_Debug.bat
C:\GenProc\outil\lab.bat
C:\GenProc\outil\Lancements.bat
C:\GenProc\outil\libiconv2.dll
C:\GenProc\outil\libintl3.dll
C:\GenProc\outil\Licence
C:\GenProc\outil\mbr.exe
C:\GenProc\outil\message.vbs
C:\GenProc\outil\OSVers.bat
C:\GenProc\outil\Parameters.txt
C:\GenProc\outil\pcre3.dll
C:\GenProc\outil\regex2.dll
C:\GenProc\outil\Resident.bat
C:\GenProc\outil\sed.exe
C:\GenProc\outil\Son.vbs
C:\GenProc\outil\Supprime.bat
C:\GenProc\outil\swreg.exe
C:\GenProc\outil\Termine.wav
C:\GenProc\outil\Uninstall.bat
C:\GenProc\outil\uniq.exe
C:\GenProc\outil\Var.bat
C:\GenProc\outil\Web.bat
C:\GenProc\outil[1].txt
C:\GenProc\outil\Licence\copying.txt
C:\GenProc\outil\Licence\license.txt
C:\GenProc\Page\GenProcPage
C:\GenProc\Page\GenProc[1].html
C:\GenProc\Page\GenProcPage\1.gif
C:\GenProc\Page\GenProcPage\2.gif
C:\GenProc\Page\GenProcPage\4.gif
C:\GenProc\Page\GenProcPage\aide.gif
C:\GenProc\Page\GenProcPage\design.css
C:\GenProc\Page\GenProcPage\important.gif

*** Liste des étapes franchies avec succès ***

EnableWSH
OSVers
ManqueFichiers
AVNorton
EpurOS.bat
Var.bat

Senosen · Septembre 28, 2009, 2:25

Re,

relance hijackthis puis clique sur http://images.imagehotel.net/z8uattg6yg.jpg

recherche et coche les lignes suivantes:

O2 - BHO: (no name) - {ba603215-23f2-42ad-f4e4-00aac39caa53} - C:\WINDOWS\system32\nzfiu3h78di.dll (file missing)
O4 - HKLM\..\Run: [pdfw] C:\Program Files\Amic Utilities\PDF Writer Pro\pdfwload.exe
O4 - HKLM\..\Run: [calc] rundll32.exe C:\WINDOWS\system32\calc.dll,_IWMPEven
O4 - HKLM\..\Run: [zdwtmvfnh] c:\windows\system32\zdwtmvfnh.exe zdwtmvfnh
O4 - HKLM…\Run: [vwjjkj] c:\windows\system32\vwjjkj.exe vwjjkj
O4 - HKCU…\Run: [Exetender] C:\Program Files\Player Metaboli\GPlayer.exe /schedule 300000
O4 - HKCU…\Run: [DriverUpdaterPro] C:\Program Files\iXi Tools\Driver Updater Pro\DriverUpdaterPro.exe -t
O4 - HKUS\S-1-5-21-2585863069-191951369-856499580-5896…\Run: [Exetender] C:\Program Files\Player Metaboli\GPlayer.exe /schedule 300000 (User ‘?’)
O4 - HKUS\S-1-5-21-2585863069-191951369-856499580-5896…\Run: [DriverUpdaterPro] C:\Program Files\iXi Tools\Driver Updater Pro\DriverUpdaterPro.exe -t (User ‘?’)
O4 - S-1-5-21-2585863069-191951369-856499580-5896 Startup: scandisk.lnk = ? (User ‘?’)
O8 - Extra context menu item: &Search - edits.mywebsearch.com…
O9 - Extra button: HiDownload - {F4FBA929-A891-492C-A0F6-5C79CC4F1742} - C:\PROGRA~1\HIDOWN~1\hidownload.exe (file missing)
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - m6video.m6.fr…
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - …
O16 - DPF: {493ACF15-5CD9-4474-82A6-91670C3DD66E} (LinkedIn ContactFinderControl) - www.linkedin.com…
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - a1540.g.akamai.net…
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - …
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = tls.123multimedia.com
O17 - HKLM\Software…\Telephony: DomainName = tls.123multimedia.com
O17 - HKLM\System\CCS\Services\Tcpip…{1896D1DE-7DE8-4E42-95A5-DB1CD6AA207D}: Domain = tls.123multimedia.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = tls.123multimedia.co
O17 - HKLM\System\CS1\Services\Tcpip…{1896D1DE-7DE8-4E42-95A5-DB1CD6AA207D}: Domain = tls.123multimedia.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = tls.123multimedia.com
O17 - HKLM\System\CS2\Services\Tcpip…{1896D1DE-7DE8-4E42-95A5-DB1CD6AA207D}: Domain = tls.123multimedia.com
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = tls.123multimedia.com
O17 - HKLM\System\CS3\Services\Tcpip…{1896D1DE-7DE8-4E42-95A5-DB1CD6AA207D}: Domain = tls.123multimedia.com
O17 - HKLM\System\CS4\Services\Tcpip\Parameters: Domain = tls.123multimedia.com
O17 - HKLM\System\CS4\Services\Tcpip…{1896D1DE-7DE8-4E42-95A5-DB1CD6AA207D}: Domain = tls.123multimedia.com
O17 - HKLM\System\CS5\Services\Tcpip\Parameters: Domain = tls.123multimedia.com
O17 - HKLM\System\CS5\Services\Tcpip…{1896D1DE-7DE8-4E42-95A5-DB1CD6AA207D}: Domain = tls.123multimedia.com

puis clique sur http://images.imagehotel.net/sw6zjk8ugk.jpg

Désinstaller les programmes suivants par ajout/supp des programmes du panneau de configuration:

C:\Program Files\Player Metaboli
C:\Program Files\iXi Tools

 [b]Télécharge [Navilog1](http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe) (de [i]Il Mafioso[/i]) sur le bureau.[/b]

/!\ Désactive tes protections résidentes : antivirus, antispyware, [UAC](http://www.inforumatique.fr/desactiver-l-uac-dans-windows-vista-t3112.html) sous Vista ... /!\

Double clique sur [b]Navilog1.exe[/b] pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le Bureau).

Laisse-toi guider. Au menu principal, choisis [b]1[/b] et valide.
[b](Ne fais pas le choix 2,3 ou 4 sans notre avis/accord)[/b]

Poste moi le rapport dans ta prochaine réponse s'il te plait. Le rapport se trouve ici C:\fixnavi.txt
/!\ N'oublie pas de réactiver tes protections résidentes /!\

bobbyno · Septembre 28, 2009, 3:20

Voilà : j’ai supprimé les clés dans Hijackthis, par contre j’ai du supprimer les 2 programmes à la main car ajout/suppr de programmes ne les trouvait pas.

J’ai lancé Navilog qui a supprimé plusieurs trucs: voici le rapport à la fin: par contre j’ai pas trouvé le rapport fixnavi.txt

Fix Navipromo version 4.0.2 commencé le 2009-09-28 14:53:03,41

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 27.08.2009 à 11h00 par IL-MAFIOSO

Recherche executée en mode normal

Nettoyage exécuté au redémarrage de l’ordinateur

c:\docume~1\alluse~1\applic~1\Games-Attack supprimé !
c:\docume~1\benoit~1.cun\startm~1\programs\WebMediaPlayer supprimé !
C:\WINDOWS\prefetch\GAMEINSTLR.EXE-013D3708.pf supprimé !
C:\WINDOWS\system32\zdwtmvfnh_nav.dat supprimé !

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\benoit.cuny\locals~1\Temp effectué !

*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok

Certificat Egroup supprimé !

*** Scan terminé 2009-09-28 15:12:11,98 ***

et le rapport de scan:

Senosen · Septembre 28, 2009, 3:30

Ok,

donc tu as fais l’option 2 sans nous avertir … tu as de la chance que tout ce soit bien passé

Pense à lire les procédures

Télécharge, mets à jour Malwarebytes Anti-Malware que tu trouveras ici (pour les intimes il se nomme MBAM)

Passe en mode sans échec:
www.inforumatique.fr…

Si tu ne peux toujours pas passer en mode sans échec … fais en mode normal mais disle nous

En préférant la méthode F8

Scanne ton ordi avec MBAM (mode complet), supprime tout ce qui est trouvé, enregistre le rapport sur le bureau, poste le dans ton prochain message

cricri58 · Septembre 28, 2009, 3:36

Salut bobbyno

Salut Senosen :hello:

Navilog1 ==> pplus d option2 seulement==>Mode 1(recherche/Désinfection)

cricri58 :hello:

bobbyno · Septembre 28, 2009, 3:37

ok mais j’ai appuyé sur 1 à chaque fois…

pour MBAM la dernière fois il ne voulait pas marcher il y avait un pb avec un fichier OCX…je vais rééssayer.

cricri58 · Septembre 28, 2009, 3:38

et pour GenProc

Essayes soit==>désactive tes protections et recommence

ou

Essayes ==>démarrer->exécuter==> tapes ==> C:\GenProc\outil\Debug.bat

Je ne m incruste pas ce message amical pour l ami Senosen

:hello:

Senosen · Septembre 28, 2009, 3:41

:hello: Cricri

mais de rien tu sais que tu peux toujours intervenir sur mes topics … il n’y a pô de soucis l’ami

bobbyno · Septembre 28, 2009, 3:44

bon alors Malaware il marche pas: à l’installation j’ai un message d’erreur
Erreur d’execution 372

impossible de charger le contrôle ‘vbalGrid’ à partir de vbalsgrid6.ocx. votre version de vbalsgrid6.ocx est peut être obsolète. Vérifiez que vous utilisez la version du contrôle fournie avec votre application.

du coup j’ai même pas essayé de passer en mode sans echec.

…

pour genproc, vous voulez que j’essaie?

Senosen · Septembre 28, 2009, 3:51

yes

bobbyno · Septembre 28, 2009, 4:10

ben ca marche toujours pas, il s’arrete au bout de 2 secondes et aucun rapport généré il met au debut : fichier introuvable: listefichiers.txt

et puis plus rien voici le dernier rapport de debug:

Initialisation GenProc 2.633 [2009-09-28] à [16:08:54]

*** Variables initiales SET et temporaires ***

ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\benoit.cuny\Application Data
Arguments=C:\GenProc\Arguments
Canned=C:\GenProc\Canned
ChangeLog=C:\GenProc\ChangeLog
CheminBatch=C:\GenProc
CLASSPATH=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Common Files
ComptBagle=0
ComptFixWebHancer=0
ComptFxNdotN=0
ComptHaxFix=0
ComptLook2Me=0
ComptLop=0
ComptMBR=0
ComptMSNfix=0
ComptNavipromo=0
ComptPurity=0
ComptRemGAIN=0
ComptRustock=0
ComptSDfix=0
ComptSmitfraud=0
ComptTDSS=0
ComptToolbarSD=0
ComptUSBFix=0
ComptVundo=0
ComptWareOut=0
ComptWinSoftware=0
ComptWuauserv=0
ComptYoog=0
COMPUTERNAME=PC-WP-CUNY
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
GenProcVersion=2.633
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\benoit.cuny
LOGONSERVER=\SRVPARIS
NUMBER_OF_PROCESSORS=2
OS=Windows_NT
outil=C:\GenProc\outil
Page=C:\GenProc\Page
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\wbem;C:\Program Files\Common Files\Adaptec Shared\System;C:\Program Files\Windows Imaging;C:\Program Files\iTunes\Plug-Ins\Qloud;C:\Program Files\QuickTime\QTSystem
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 4 Stepping 1, GenuineIntel
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=0401
ProgramFiles=C:\Program Files
PROMPT=$P$G
QTJAVA=C:\Program Files\Java\jre6\lib\ext\QTJava.zip
SESSIONNAME=Console
sfxcmd=“C:\GenProc\GenProc.exe”
sfxname=C:\GenProc\GenProc.exe
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\BENOIT~1.CUN\LOCALS~1\Temp
TMP=C:\DOCUME~1\BENOIT~1.CUN\LOCALS~1\Temp
UATDATA=C:\WINDOWS\system32\CCM\UATData\D9F8C395-CAB8-491d-B8AC-179A1FE1BE77
USERDNSDOMAIN=TLS.123MULTIMEDIA.COM
USERDOMAIN=TLS
USERNAME=benoit.cuny
USERPROFILE=C:\Documents and Settings\benoit.cuny
windir=C:\WINDOWS

*** Liste des composants GenProc ***

C:\GenProc\Arguments
C:\GenProc\Canned
C:\GenProc\ChangeLog
C:\GenProc\GenProc.exe
C:\GenProc\outil
C:\GenProc\Page
C:\GenProc\Arguments\Debug.txt
C:\GenProc\Arguments\Debug1.txt
C:\GenProc\Arguments\design.css
C:\GenProc\Arguments\Uninstall.html
C:\GenProc\Arguments\Uninstall.txt
C:\GenProc\Canned\ASquared.txt
C:\GenProc\Canned\Bagle2_Dl.txt
C:\GenProc\Canned\bfu_Dl.txt
C:\GenProc\Canned\CCleaner_48H.txt
C:\GenProc\Canned\CCleaner_Dl.txt
C:\GenProc\Canned\CCleaner_Exec.txt
C:\GenProc\Canned\FixWebHancer_Dl.txt
C:\GenProc\Canned\FixWebHancer_Exec.txt
C:\GenProc\Canned\FxNdotN_Dl.txt
C:\GenProc\Canned\FxNdotN_Exec.txt
C:\GenProc\Canned\HaxFix_Dl.txt
C:\GenProc\Canned\HaxFix_Exec.txt
C:\GenProc\Canned\Look2me_Dl.txt
C:\GenProc\Canned\Look2me_Exec.txt
C:\GenProc\Canned\Lop_Dl.txt
C:\GenProc\Canned\Lop_Exec.txt
C:\GenProc\Canned\MBR_Dl.txt
C:\GenProc\Canned\MBR_Exec.txt
C:\GenProc\Canned\MSE.txt
C:\GenProc\Canned\MSNfix_Dl.txt
C:\GenProc\Canned\MSNfix_Exec.txt
C:\GenProc\Canned\Navilog1_Dl.txt
C:\GenProc\Canned\Navilog1_Exec.txt
C:\GenProc\Canned\Purity_Dl.txt
C:\GenProc\Canned\Purity_Exec.txt
C:\GenProc\Canned\RemGAIN_Dl.txt
C:\GenProc\Canned\RemGAIN_Exec.txt
C:\GenProc\Canned\Rustock_Dl.txt
C:\GenProc\Canned\ScanAntivirusNod32.txt
C:\GenProc\Canned\ScanAntivirusPanda.txt
C:\GenProc\Canned\SDfix_Dl.txt
C:\GenProc\Canned\SDfix_Exec.txt
C:\GenProc\Canned\SmitfraudFix_Dl.txt
C:\GenProc\Canned\SmitfraudFix_Exec.txt
C:\GenProc\Canned\SpywareTerminator.txt
C:\GenProc\Canned\TeaTimer.txt
C:\GenProc\Canned\ToolbarSD_Dl.txt
C:\GenProc\Canned\ToolbarSD_Exec.txt
C:\GenProc\Canned\ToolCleaner.txt
C:\GenProc\Canned\USBFix_Dl.txt
C:\GenProc\Canned\USBFix_Exec.txt
C:\GenProc\Canned\Vundo_Dl.txt
C:\GenProc\Canned\Vundo_Exec.txt
C:\GenProc\Canned\Vundo_Recovery_Dl.txt
C:\GenProc\Canned\Winsoftware_bfu_Dl.txt
C:\GenProc\Canned\Winsoftware_bfu_Exec.txt
C:\GenProc\Canned\WORT_Dl.txt
C:\GenProc\Canned\WORT_Exec.txt
C:\GenProc\Canned\Wuauserv_Dl.txt
C:\GenProc\Canned\Wuauserv_Exec.txt
C:\GenProc\Canned\Yoog_Dl.txt
C:\GenProc\Canned\Yoog_Exec.txt
C:\GenProc\ChangeLog\BagleLog.txt
C:\GenProc\ChangeLog\FixWebHancerLog.txt
C:\GenProc\ChangeLog\FxNdotNLog.txt
C:\GenProc\ChangeLog\HaxfixLog.txt
C:\GenProc\ChangeLog\Look2MeLog.txt
C:\GenProc\ChangeLog\LopLog.txt
C:\GenProc\ChangeLog\MSNFixLog.txt
C:\GenProc\ChangeLog\NaviLog.txt
C:\GenProc\ChangeLog\PurityLog.txt
C:\GenProc\ChangeLog\RemGainLog.txt
C:\GenProc\ChangeLog\RustockLog.txt
C:\GenProc\ChangeLog\SDfixLog.txt
C:\GenProc\ChangeLog\SmitLog.txt
C:\GenProc\ChangeLog\TDSSLog.txt
C:\GenProc\ChangeLog\ToolbarSDLog.txt
C:\GenProc\ChangeLog\USBFixLog.txt
C:\GenProc\ChangeLog\VundoLog.txt
C:\GenProc\ChangeLog\WareOutLog.txt
C:\GenProc\ChangeLog\WinSoftware.txt
C:\GenProc\ChangeLog\YoogLog.txt
C:\GenProc\ChangeLog\YoogLogFF.txt
C:\GenProc\outil\1.txt
C:\GenProc\outil\Affichages.bat
C:\GenProc\outil\Arborescence.txt
C:\GenProc\outil\CCleanerOK.txt
C:\GenProc\outil\Cherche_Navig.bat
C:\GenProc\outil\commandes.sed
C:\GenProc\outil\CompareDate.bat
C:\GenProc\outil\Complement_Infection.bat
C:\GenProc\outil\curl.exe
C:\GenProc\outil\DateInst.txt
C:\GenProc\outil\Debug.bat
C:\GenProc\outil\EnableWSH.bat
C:\GenProc\outil\EnableWSH.txt
C:\GenProc\outil\EnableWSH1.txt
C:\GenProc\outil\EpurOS.bat
C:\GenProc\outil\Exclusions.sed
C:\GenProc\outil\GenVbs.bat
C:\GenProc\outil\GetVersion.exe
C:\GenProc\outil\grep.exe
C:\GenProc\outil\heure.txt
C:\GenProc\outil\HTTP_Request.bat
C:\GenProc\outil\icon_genproc.ico
C:\GenProc\outil\inf.txt
C:\GenProc\outil\Infection.bat
C:\GenProc\outil\Init_Debug.bat
C:\GenProc\outil\jour.vbs
C:\GenProc\outil\lab.bat
C:\GenProc\outil\Lancements.bat
C:\GenProc\outil\libiconv2.dll
C:\GenProc\outil\libintl3.dll
C:\GenProc\outil\Licence
C:\GenProc\outil\message.vbs
C:\GenProc\outil\mois.vbs
C:\GenProc\outil\OSVers.bat
C:\GenProc\outil\Parameters.txt
C:\GenProc\outil\Path.txt
C:\GenProc\outil\pcre3.dll
C:\GenProc\outil\regex2.dll
C:\GenProc\outil\Resident.bat
C:\GenProc\outil\Resident.vbs
C:\GenProc\outil\sed.exe
C:\GenProc\outil\ShellFolders.bat
C:\GenProc\outil\ShellFolders.txt
C:\GenProc\outil\Supprime.bat
C:\GenProc\outil\swreg.exe
C:\GenProc\outil\Termine.wav
C:\GenProc\outil\Uninstall.bat
C:\GenProc\outil\uniq.exe
C:\GenProc\outil\Var.bat
C:\GenProc\outil\Web.bat
C:\GenProc\outil\Year.vbs
C:\GenProc\outil[1].txt
C:\GenProc\outil\Licence\copying.txt
C:\GenProc\outil\Licence\license.txt
C:\GenProc\Page\GenProcPage
C:\GenProc\Page\GenProc[1].html
C:\GenProc\Page\GenProcPage\1.gif
C:\GenProc\Page\GenProcPage\2.gif
C:\GenProc\Page\GenProcPage\4.gif
C:\GenProc\Page\GenProcPage\aide.gif
C:\GenProc\Page\GenProcPage\design.css
C:\GenProc\Page\GenProcPage\important.gif

*** Liste des étapes franchies avec succès ***

EnableWSH
OSVers
ManqueFichiers
AVNorton
EpurOS.bat
Var.bat

Senosen · Septembre 28, 2009, 4:38

Re,

tu as testé la commande de Cricri …

bobbyno · Septembre 28, 2009, 5:30

ben oui mais rien n’y fait ça marche toujours pas, d’autre part je viens de m’apercevoir que du coup ma carte son ne marche pas non plus, ca me dit aucun périphérique audio activé alors que les drivers sont à jour. Le virus a du tt désactiver surtout que quand je reboote j’ai plein de message d’erreur windows me disant que telle ou telle dll n’est pas une image windows valide…

merci pour ton aide

ps: je suis à 2 doigts d’aller m’acheter un mac…

Senosen · Septembre 28, 2009, 5:36

Re,

bon on va faire par étape … as-tu sur ce PC des documents et dossiers importants … si oui fais ceci:

www.inforumatique.fr…

ensuite as-tu le CD de XP ???

cricri58 · Septembre 28, 2009, 5:39

Re

Avant essayes ceci

Télécharge FindyKill

==>http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe

Fais un clic droit sur le lien, enregistrer sous …sur le bureau

==>FindyKill de Chiquitine29

Dézippe le sur le bureau

Entre dans le dossier FindyKill

double clique sur FindyKill.exe

choisis l’option 1 recherche

un rapport va s’ouvrir, poste le ici

Note : le rapport FindyKill.txt est sauvegardé a la racine du disque

et aprés

Télécharge Winsockxpfix

sur ton bureau sans l executer au cas tu en aurai besoin aprés

==>Winsockxpfix

ensuite
Désactives ton antivirus et antispyware

Télécharge Combofix

vista, tu dois donc aussi désactiver l’UAC avant d’utiliser

==>Combofix

==>sur ton Bureau(et pas ailleurs) et renomme le avant qu’il vienne sur ton bureau.
pour ce faire fait un clic droit sur Combofix.exe ,choisis “enregistrer la cible du lien sous…” et renomme le en==>bobbyno.com
==> et pour l’emplacement choisis ton bureau et cliques sur “enregistrer”
Fermez toutes les fenêtres ouvertes

Double clique==> bobbyno.com ==>(Fichier renommé)
Tapes sur la touche1 pour démarrer le scan et suis les instructions indiquées par combofix.
Lorsque le scan sera terminé, un rapport apparaîtra. Copie/colle ce rapport ici même.
==>Le rapport se trouve également ici : C:\Combofix.txt
==> tu ne devras pas cliquer dans la fenêtre de Combofix pendant l’analyse ; ceci provoquerait le blocage du programme.

Réactives ton antivirus et antispyware
vista, tu dois donc aussi réactiver l’UAC
PS
si ta connexion internet n’est plus active après le redémarrage

Windows XP ==>Fais un double clic sur le fichier de WinsockXPFix
clique sur “Fix” au cas faudra faire une réparation manuelle

et Senosen va reprendre la main quand il revient

cricri58

Oups t avais pas vu "Senosen ":neutre:

bobbyno · Septembre 28, 2009, 5:48

ben mes documents sont tous sur un serveur, par contre j’ai tous mes mails sur outlook faut il que j’exporte d’abord le fichier .pst pour les retrouver ensuite.

merci

voilà le log findykill

############################## | FindyKill V5.012 |

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\PROGRA~1\AVG\AVG8\avgam.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\PROGRA~1\SYMANT~2\VPTray.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe

################## | C: |

Présent ! D:\autorun.inf

################## | C:\WINDOWS |

Présent ! C:\WINDOWS\Prefetch\219.EXE-3AF9836B.pf
Présent ! C:\WINDOWS\Prefetch\394.EXE-24D8C19B.pf

################## | C:\WINDOWS\system32 |

################## | C:\WINDOWS\system32\drivers |

################## | C:\Documents and Settings\benoit.cuny\Application Data |

################## | Temporary Internet Files |

################## | Registre / Clés infectieuses |

Présent ! [HKLM\software\microsoft\security center] “AntiVirusDisableNotify”
Présent ! [HKLM\software\microsoft\security center] “AntiVirusOverride”
Présent ! [HKLM\software\microsoft\security center] “FirewallDisableNotify”
Présent ! [HKLM\software\microsoft\security center] “FirewallOverride”
Présent ! [HKLM\software\microsoft\security center] “UpdatesDisableNotify”
Présent ! [HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System] “DisableRegistryTools”

################## | Etat / Services / Informations |

Affichage des fichiers cachés : OK

Mode sans echec : OK

Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )

Ip6Fw -> Start = 3 ( Good = 2 | Bad = 4 )

SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )

wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )

wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )

################## | Cracks / Keygens / Serials |

et le log combofix

ComboFix 09-09-27.05 - benoit.cuny 2009-09-28 17:41.1.2 - NTFSx86
Running from: c:\documents and settings\benoit.cuny\Desktop\bobbyno.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat
c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat
c:\documents and settings\benoit.cuny\Application Data.#
c:\documents and settings\benoit.cuny\Application Data.#\MBX@500@B241A0.###
c:\documents and settings\benoit.cuny\Application Data.#\MBX@500@B241D0.###
c:\documents and settings\benoit.cuny\Application Data.#\MBX@500@B24200.###
c:\documents and settings\benoit.cuny\Application Data.#\MBX@5E4@B241A0.###
c:\documents and settings\benoit.cuny\Application Data.#\MBX@5E4@B241D0.###
c:\documents and settings\benoit.cuny\Application Data.#\MBX@5E4@B24200.###
c:\documents and settings\benoit.cuny\Application Data\FunWebProducts
c:\documents and settings\benoit.cuny\Application Data\FunWebProducts\Data\benoit.cuny\avatar.dat
c:\documents and settings\benoit.cuny\Application Data\FunWebProducts\Data\benoit.cuny\zbucks.dat
c:\documents and settings\benoit.cuny\protect.dll
C:\Documents
c:\program files\MyWebSearch
c:\program files\MyWebSearch\bar\History\search2
c:\program files\MyWebSearch\bar\Settings\s_pid.dat
c:\program files\MyWebSearch\bar\Settings\setting2.htm
c:\program files\MyWebSearch\bar\Settings\settings.dat
c:\recycler\S-1-5-21-0243936033-3052116371-381863308-1811
c:\recycler\S-1-5-21-1106520001-1653462319-1608279117-500
c:\recycler\S-1-5-21-1715567821-1637723038-839522115-500
c:\recycler\S-1-5-21-2247778763-1043198755-3057704224-500
c:\recycler\S-1-5-21-2409960447-72185382-2018322775-500
c:\recycler\S-1-5-21-2552189465-2163411867-2876842818-500
c:\recycler\S-1-5-21-2959008633-1318987518-222395546-500
c:\recycler\S-1-5-21-2983108203-9307723950-325222199-6392
c:\recycler\S-1-5-21-3277439761-1037202297-1567011825-500
c:\recycler\S-1-5-21-3563514748-16376637-895301664-500
c:\recycler\S-1-5-21-3646181656-48506347-572454927-500
c:\recycler\S-1-5-21-3779935395-3725260815-359561344-500
c:\recycler\S-1-5-21-3813086739-3308722516-1316817595-500
c:\recycler\S-1-5-21-670770235-3894602836-3136207814-500
c:\recycler\S-1-5-21-7734760407-3737550764-064196598-4284
c:\recycler\S-1-5-21-869365757-3402799377-1653462319-500
c:\windows\Installer\1c0017.msp
c:\windows\Installer\1c009d.msp
c:\windows\Installer\45a92ee.msp
c:\windows\Installer\45a9303.msp
c:\windows\Installer\45a9318.msp
c:\windows\Installer\b586c4e.msi
c:\windows\Installer\edf02e.msp
c:\windows\Installer\edf043.msp
c:\windows\system32\404Fix.exe
c:\windows\system32\Agent.OMZ.Fix.exe
c:\windows\system32\config\systemprofile\Application Data\seres.exe
c:\windows\system32\config\systemprofile\Application Data\svcst.exe
c:\windows\system32\config\systemprofile\Desktop\AntivirusPro_2010.lnk
c:\windows\system32\config\systemprofile\Start Menu\Programs\AntivirusPro_2010
c:\windows\system32\config\systemprofile\Start Menu\Programs\AntivirusPro_2010\AntivirusPro_2010.lnk
c:\windows\system32\config\systemprofile\Start Menu\Programs\AntivirusPro_2010\Uninstall.lnk
c:\windows\system32\drivers\str.sys
c:\windows\system32\dumphive.exe
c:\windows\system32\gasfkyentspuyu.dll
c:\windows\system32\gasfkyfjolnxvm.dat
c:\windows\system32\gasfkyhpduyqtm.dat
c:\windows\system32\gasfkyidvinihi.dll
c:\windows\system32\gasfkylog.dat
c:\windows\system32\gasfkypfucfqrw.dll
c:\windows\system32\gasfkyqoyirwlx.dat
c:\windows\system32\gasfkyvbvxyect.dll
c:\windows\system32\gasfkywqcqqmcr.dat
c:\windows\system32\IEDFix.C.exe
c:\windows\system32\IEDFix.exe
c:\windows\system32\o4Patch.exe
c:\windows\system32\SrchSTS.exe
c:\windows\system32\tmp.reg
c:\windows\system32\VACFix.exe
c:\windows\system32\VCCLSID.exe
c:\windows\system32\WS2Fix.exe

----- BITS: Possible infected sites -----

appparissrv…
SMSSERVER.TLS.123MULTIMEDIA.COM:80…
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_BOONTY_GAMES
-------\Legacy_icf
-------\Service_Boonty Games
-------\Service_icf

((((((((((((((((((((((((( Files Created from 2009-08-28 to 2009-09-28 )))))))))))))))))))))))))))))))
.

2009-09-28 12:42 . 2009-09-28 13:31 -------- d-----w- c:\program files\Navilog1
2009-09-28 11:40 . 2009-09-28 14:08 -------- d-----w- C:\GenProc
2009-09-28 08:36 . 2009-09-28 08:36 -------- d-----w- c:\program files\Sophos
2009-09-28 07:28 . 2009-09-28 07:35 -------- d-----w- C:\rsit
2009-09-25 16:17 . 2009-09-25 16:17 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-09-25 14:21 . 2009-09-25 14:21 -------- d-----w- c:\program files\Alwil Software
2009-09-25 08:16 . 2009-09-25 08:16 -------- d-----w- C:\PROGS
2009-09-24 17:32 . 2009-09-24 17:44 -------- d-----w- c:\documents and settings\benoit.cuny\DoctorWeb
2009-09-24 17:09 . 2009-09-28 08:46 -------- d-----w- C:$AVG8.VAULT$
2009-09-24 17:03 . 2009-09-24 17:03 11952 ----a-w- c:\windows\system32\avgrsstx.dll
2009-09-24 17:03 . 2009-09-24 17:03 12552 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2009-09-24 17:03 . 2009-09-24 17:03 108552 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2009-09-24 17:03 . 2009-09-24 17:03 335240 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2009-09-24 17:02 . 2009-09-24 17:02 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-09-24 17:00 . 2009-09-28 06:46 -------- d-----w- c:\windows\system32\drivers\Avg
2009-09-24 16:59 . 2009-09-24 16:59 -------- d-----w- c:\program files\AVG
2009-09-24 16:59 . 2009-09-28 13:54 -------- d-----w- c:\documents and settings\All Users\Application Data\avg8
2009-09-24 16:50 . 2009-09-24 16:50 -------- d-----w- c:\documents and settings\benoit.cuny\Application Data\AVG8
2009-09-17 09:51 . 2009-09-17 09:51 -------- d-----w- c:\program files\Common Files\xing shared
2009-09-17 09:50 . 2009-09-17 09:50 -------- d-----w- c:\program files\Real
2009-09-15 15:37 . 2009-09-24 10:09 -------- d-----w- c:\program files\Alawar
2009-09-15 10:24 . 2009-09-15 10:24 -------- d-----w- c:\documents and settings\benoit.cuny\Application Data\IronCode
2009-09-14 10:20 . 2009-09-14 10:20 -------- d-----w- c:\windows\system32\drivers\NSS
2009-09-14 10:20 . 2009-09-14 10:21 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton
2009-09-14 10:20 . 2009-09-14 10:20 -------- d-----w- c:\documents and settings\All Users\Application Data\NortonInstaller
2009-09-14 10:09 . 2009-09-14 10:09 -------- d-----w- c:\documents and settings\benoit.cuny\Application Data\Enlightenus
2009-09-14 08:52 . 2009-09-24 08:53 -------- d-----w- c:\documents and settings\All Users\Application Data\FarmFrenzy3
2009-09-14 08:38 . 2009-09-14 08:39 -------- d-----w- c:\program files\Farm Frenzy 3
2009-09-14 07:16 . 2009-09-14 07:16 -------- d-----w- c:\windows\system32\Adobe
2009-09-11 08:47 . 2009-09-11 08:47 -------- d-----w- c:\documents and settings\benoit.cuny\Application Data\Big Fish Games
2009-09-11 08:31 . 2009-09-11 08:31 -------- d-----w- c:\program files\bfgclient
2009-09-08 10:26 . 2009-09-08 10:27 -------- d-----w- c:\program files\Vuze
2009-09-08 07:30 . 2009-09-08 07:30 -------- d-----w- c:\windows\Logs
2009-09-07 07:55 . 2009-09-07 07:55 -------- d-----w- c:\windows\City Style
2009-09-04 10:08 . 2009-09-04 10:08 -------- d-----w- c:\documents and settings\benoit.cuny\Application Data\Desktop Apps

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-28 09:32 . 2007-05-10 12:32 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-09-25 12:40 . 2003-10-06 14:55 90112 ----a-w- c:\windows\DUMP589f.tmp
2009-09-25 09:26 . 2008-10-28 13:20 -------- d-----w- c:\program files\Safari
2009-09-25 08:06 . 2008-09-01 13:24 -------- d-----w- c:\program files\Torrent
2009-09-24 15:43 . 2008-10-28 13:54 78416 —ha-w- c:\windows\system32\mlfcache.dat
2009-09-24 15:43 . 2008-01-16 14:27 1324 ----a-w- c:\windows\system32\d3d9caps.dat
2009-09-24 13:43 . 2005-10-05 10:51 -------- d-----w- c:\program files\Symantec AntiVirus
2009-09-24 10:02 . 2007-09-23 12:00 -------- d-----w- c:\program files\Zylom Games
2009-09-24 09:33 . 2001-08-23 12:00 14336 ----a-w- c:\windows\system32\svchost.exe
2009-09-22 09:14 . 2008-09-16 10:29 5120 --sha-w- c:\program files\Thumbs.db
2009-09-17 09:51 . 2004-06-29 17:31 -------- d-----w- c:\program files\Common Files\Real
2009-09-15 15:53 . 2007-05-25 16:38 -------- d-----w- c:\documents and settings\benoit.cuny\Application Data\Azureus
2009-09-15 15:44 . 2007-08-24 08:21 -------- d—a-w- c:\documents and settings\All Users\Application Data\TEMP
2009-09-15 15:38 . 2009-06-29 08:13 -------- d-----w- c:\documents and settings\All Users\Application Data\AlawarWrapper
2009-09-14 10:20 . 2003-10-07 15:48 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec
2009-09-14 08:08 . 2009-04-27 06:37 -------- d-----w- c:\documents and settings\All Users\Application Data\BigFishGamesCache
2009-09-09 15:11 . 2007-09-23 12:02 -------- d-----w- c:\documents and settings\benoit.cuny\Application Data\Zylom
2009-09-09 08:12 . 2007-10-30 13:54 -------- d-----w- c:\documents and settings\benoit.cuny\Application Data\PlayFirst
2009-09-09 08:12 . 2007-10-30 13:54 -------- d-----w- c:\documents and settings\All Users\Application Data\PlayFirst
2009-09-04 07:14 . 2009-06-18 08:33 -------- d-----w- c:\documents and settings\benoit.cuny\Application Data\FileZilla
2009-08-28 15:17 . 2006-08-07 08:38 102576 ----a-w- c:\documents and settings\benoit.cuny\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-08-26 12:06 . 2009-08-26 12:06 -------- d-----w- c:\documents and settings\benoit.cuny\Application Data\SulusGames
2009-08-26 12:06 . 2009-08-26 12:06 -------- d-----w- c:\documents and settings\All Users\Application Data\SulusGames
2009-08-25 14:07 . 2009-06-26 09:25 -------- d-----w- c:\program files\My Worst Day WW2
2009-08-25 14:06 . 2005-10-05 13:25 -------- d-----w- c:\program files\FileZilla
2009-08-25 13:25 . 2008-09-01 13:23 2780 ----a-w- c:\program files\Default.jcd
2009-08-25 13:23 . 2009-03-17 11:47 -------- d-----w- c:\program files\Microsoft Silverlight
2009-08-25 13:11 . 2009-08-25 13:11 -------- d-----w- c:\program files\MSBuild
2009-08-25 13:11 . 2009-08-25 13:11 -------- d-----w- c:\program files\Reference Assemblies
2009-08-25 13:05 . 2009-08-25 13:05 -------- d-----w- c:\program files\Microsoft CAPICOM 2.1.0.2
2009-08-25 12:37 . 2007-06-12 10:47 -------- d-----w- c:\program files\MSECache
2009-08-25 09:46 . 2009-08-25 09:46 -------- d-----w- c:\documents and settings\benoit.cuny\Application Data\Namco
2009-08-25 09:46 . 2009-08-25 09:46 -------- d-----w- c:\documents and settings\All Users\Application Data\Namco
2009-08-20 09:04 . 2009-06-30 11:44 -------- d-----w- c:\documents and settings\benoit.cuny\Application Data\Canon
2009-08-19 14:46 . 2008-09-01 13:24 2780 ----a-w- c:\program files\Default.jcd.bak
2009-08-17 13:32 . 2008-09-01 13:24 2780 ----a-w- c:\program files\Default.bk1
2009-08-17 11:41 . 2009-08-17 11:41 -------- d-----w- c:\documents and settings\benoit.cuny\Application Data\GraveyardShift
2009-08-17 07:28 . 2008-12-17 11:05 -------- d-----w- c:\documents and settings\benoit.cuny\Application Data\World-LooM
2009-08-05 09:11 . 2003-10-08 10:25 204800 ----a-w- c:\windows\system32\mswebdvd.dll
2009-07-31 16:08 . 2009-07-29 09:25 -------- d-----w- c:\documents and settings\benoit.cuny\Application Data\MegaplexMadnessSummerBlockbuster
2009-07-28 07:07 . 2008-09-04 09:38 2780 ----a-w- c:\program files\Default.bk2
2009-07-21 13:33 . 2009-07-21 13:33 253952 ----a-w- c:\documents and settings\benoit.cuny\Local Settings\Application Data\ceokwsm.exe
2009-07-17 18:55 . 2003-10-07 16:02 58880 ----a-w- c:\windows\system32\atl.dll
2009-06-12 09:32 . 2008-09-26 12:48 2780 ----a-w- c:\program files\Default.bk3
2009-01-23 15:41 . 2008-09-01 13:23 275 ----a-w- c:\program files\FGUpdate3.ini
2009-01-23 15:41 . 2008-09-01 13:23 20 ----a-w- c:\program files\FGUpdate1.ini
2008-10-16 16:47 . 2008-09-01 13:23 20 ----a-w- c:\program files\FGUpdate2.ini
2008-09-01 13:23 . 2008-09-01 13:23 1098 ----a-w- c:\program files\fgbhocfg.ini
2008-08-11 18:09 . 2008-09-01 13:24 673 ----a-w- c:\program files\fgres1.ini
2008-08-08 12:38 . 2008-09-01 13:24 8961 ----a-w- c:\program files\FlashGet_LOGO.gif
2005-05-13 15:12 . 2005-05-13 15:12 217073 --sha-r- c:\windows\meta4.exe
2005-07-14 10:31 . 2005-07-14 10:31 27648 --sha-r- c:\windows\system32\AVSredirect.dll
2005-06-26 13:32 . 2005-06-26 13:32 616448 --sha-r- c:\windows\system32\cygwin1.dll
2005-06-21 20:37 . 2005-06-21 20:37 45568 --sha-r- c:\windows\system32\cygz.dll
2006-05-03 09:06 . 2007-10-01 15:48 163328 --sh–r- c:\windows\system32\flvDX.dll
2004-01-24 22:00 . 2004-01-24 22:00 70656 --sha-r- c:\windows\system32\i420vfw.dll
2007-02-21 10:47 . 2007-10-01 15:48 31232 --sh–r- c:\windows\system32\msfDX.dll
2005-02-28 11:16 . 2005-02-28 11:16 240128 --sha-r- c:\windows\system32\x.264.exe
2004-01-24 22:00 . 2004-01-24 22:00 70656 --sha-r- c:\windows\system32\yv12vfw.dll
.

------- Sigcheck -------

[-] 2008-04-14 . A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\browser.dll
[-] 2004-08-03 . E3CFCCDDA4EDD1D0DC9168B2E18F27B8 . 77312 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\browser.dll
[-] 2004-08-03 . E3CFCCDDA4EDD1D0DC9168B2E18F27B8 . 77312 . . [5.1.2600.2180] . . c:\windows\system32\browser.dll
[-] 2002-08-29 . 3671D928554E124A8AC326A1769F2FFB . 49152 . . [5.1.2600.1106] . . c:\windows$NtServicePackUninstall$\browser.dll

[-] 2008-04-14 . BD38D1EBE24A46BD3EDA059560AFBA12 . 1054208 . . [6.0] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\asms\60\msft\windows\common\controls\comctl32.dll
[-] 2008-04-14 . 06F247492BC786CE5C24A23E178C711A . 617472 . . [5.82] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\comctl32.dll
[-] 2006-08-25 . B0124CB21D28B1C9F678B566B6B57D92 . 617472 . . [5.82] . . c:\windows\system32\comctl32.dll
[-] 2006-08-25 . B0124CB21D28B1C9F678B566B6B57D92 . 617472 . . [5.82] . . c:\windows\system32\dllcache\comctl32.dll
[-] 2006-08-25 . C4E80875C1CF1222FC5EFD0314AE5C01 . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
[-] 2004-08-03 . 5AF68A5E44734A082442668E9C787743 . 1050624 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
[-] 2004-08-03 . A77DFB85FAEE49D66C74DA6024EBC69B . 611328 . . [5.82] . . c:\windows$NtUninstallKB923191$\comctl32.dll
[-] 2004-08-03 . A77DFB85FAEE49D66C74DA6024EBC69B . 611328 . . [5.82] . . c:\windows\ServicePackFiles\i386\comctl32.dll
[-] 2004-04-16 . A7B3F3FB365B8B3B29C7C7322392C765 . 921600 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.1515_x-ww_7bb98b8a\comctl32.dll
[-] 2004-02-21 . 8A9C54692387060AAD0AB02D75896A59 . 921600 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.1331_x-ww_7abf6d02\comctl32.dll
[-] 2002-08-29 . 76B90BD220F1B1CC9E183C6B1AE9FBB4 . 921600 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805\comctl32.dll
[-] 2002-08-29 . 0B5D337119929505EE72D4E4A41ED1FD . 557056 . . [5.82] . . c:\windows$NtServicePackUninstall$\comctl32.dll
[-] 2001-08-23 . AEF3D788DBF40C7C4D204EA45EB0C505 . 921088 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll

[-] 2008-04-14 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\cryptsvc.dll
[-] 2004-08-03 . 10654F9DDCEA9C46CFB77554231BE73B . 60416 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\cryptsvc.dll
[-] 2004-08-03 . 10654F9DDCEA9C46CFB77554231BE73B . 60416 . . [5.1.2600.2180] . . c:\windows\system32\cryptsvc.dll
[-] 2003-03-25 . 8B6DA0009AB7B3B8A5E9E28015A32EA7 . 53760 . . [5.1.2600.1190] . . c:\windows$NtServicePackUninstall$\cryptsvc.dll
[-] 2002-08-29 . 41C70161BFCB17E7E12ED89BADD2AEF4 . 53248 . . [5.1.2600.1106] . . c:\windows$NtUninstallQ817287$\cryptsvc.dll

[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\asyncmac.sys
[-] 2004-08-03 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\asyncmac.sys
[-] 2004-08-03 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\system32\drivers\asyncmac.sys
[-] 2001-08-23 . 03F403B07A884FC2AA54A0916C410931 . 13568 . . [5.1.2600.0] . . c:\windows$NtServicePackUninstall$\asyncmac.sys

[-] 2001-08-23 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\dllcache\beep.sys
[-] 2001-08-23 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\drivers\beep.sys

[-] 2008-04-13 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\kbdclass.sys
[-] 2004-08-03 . EBDEE8A2EE5393890A1ACEE971C4C246 . 24576 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\kbdclass.sys
[-] 2004-08-03 . EBDEE8A2EE5393890A1ACEE971C4C246 . 24576 . . [5.1.2600.2180] . . c:\windows\system32\drivers\kbdclass.sys
[-] 2002-08-28 . 1E7F78C2FC393356CD884C6FDE7966F9 . 23424 . . [5.1.2600.1106] . . c:\windows$NtServicePackUninstall$\kbdclass.sys

[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ndis.sys
[-] 2004-08-03 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\ndis.sys
[-] 2004-08-03 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\system32\drivers\ndis.sys
[-] 2003-10-04 . D999CE17681D7D074D534FC5BC662E0A . 168192 . . [5.1.2600.1254] . . c:\windows$NtServicePackUninstall$\ndis.sys
[-] 2002-08-29 00:09 . !HASH: COULD NOT OPEN FILE !!! . 167552 . . [------] . . c:\windows$NtUninstallKB826942$\ndis.sys

[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ntfs.sys
[-] 2007-02-09 . 05AB81909514BFD69CBB1F2C147CF6B9 . 574976 . . [5.1.2600.3081] . . c:\windows$hf_mig$\KB930916\SP2QFE\ntfs.sys
[-] 2007-02-09 . 19A811EF5F1ED5C926A028CE107FF1AF . 574464 . . [5.1.2600.3081] . . c:\windows\system32\dllcache\ntfs.sys
[-] 2007-02-09 . 19A811EF5F1ED5C926A028CE107FF1AF . 574464 . . [5.1.2600.3081] . . c:\windows\system32\drivers\ntfs.sys
[-] 2004-08-03 . B78BE402C3F63DD55521F73876951CDD . 574592 . . [5.1.2600.2180] . . c:\windows$NtUninstallKB930916$\ntfs.sys
[-] 2004-08-03 . B78BE402C3F63DD55521F73876951CDD . 574592 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\ntfs.sys
[-] 2002-08-29 . E3AE9C79498210A5F39FE5A9AD62BC55 . 561920 . . [5.1.2600.1106] . . c:\windows$NtServicePackUninstall$\ntfs.sys

[-] 2001-08-23 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\dllcache\null.sys
[-] 2001-08-23 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\drivers\null.sys

[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows$hf_mig$\KB951748\SP3GDR\tcpip.sys
[-] 2008-06-20 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . 0B788EE2A876D7B31DF840C13F08CD2B . 360320 . . [5.1.2600.3394] . . c:\windows\system32\drivers\tcpip.sys
[-] 2008-06-20 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394] . . c:\windows$hf_mig$\KB951748\SP2QFE\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\tcpip.sys
[-] 2007-10-30 . 90CAFF4B094573449A0872A0F919B178 . 360064 . . [5.1.2600.3244] . . c:\windows$NtUninstallKB951748$\tcpip.sys
[-] 2007-10-30 . 64798ECFA43D78C7178375FCDD16D8C8 . 360832 . . [5.1.2600.3244] . . c:\windows$hf_mig$\KB941644\SP2QFE\tcpip.sys
[-] 2006-04-20 . B2220C618B42A2212A59D91EBD6FC4B4 . 360576 . . [5.1.2600.2892] . . c:\windows$hf_mig$\KB917953\SP2QFE\tcpip.sys
[-] 2006-04-20 . 1DBF125862891817F374F407626967F4 . 359808 . . [5.1.2600.2892] . . c:\windows$NtUninstallKB941644$\tcpip.sys
[-] 2004-08-03 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows$NtUninstallKB917953$\tcpip.sys
[-] 2004-08-03 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2002-08-28 . 244A2F9816BC9B593957281EF577D976 . 332928 . . [5.1.2600.1106] . . c:\windows$NtServicePackUninstall$\tcpip.sys

[-] 2008-07-07 20:32 . 60D1A6342238378BFB7545C81EE3606C . 253952 . . [2001.12.4414.320] . . c:\windows\system32\es.dll
[-] 2008-07-07 20:32 . 60D1A6342238378BFB7545C81EE3606C . 253952 . . [2001.12.4414.320] . . c:\windows\system32\dllcache\es.dll
[-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows$hf_mig$\KB950974\SP3GDR\es.dll
[-] 2008-07-07 20:23 . F17F6226BDC0CD5F0BEF0DAF84D29BEC . 253952 . . [2001.12.4414.706] . . c:\windows$hf_mig$\KB950974\SP3QFE\es.dll
[-] 2008-07-07 20:06 . A4AB3DCA4A383F0DF4988ABDEB84F9A4 . 253952 . . [2001.12.4414.320] . . c:\windows$hf_mig$\KB950974\SP2QFE\es.dll
[-] 2008-04-14 00:11 . 19A799805B24990867B00C120D300C3A . 246272 . . [2001.12.4414.701] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\es.dll
[-] 2005-07-26 04:39 . 34BBD9ACC1538818F2C878898C64E793 . 243200 . . [2001.12.4414.308] . . c:\windows$NtUninstallKB950974$\es.dll
[-] 2005-07-26 04:20 . 95F5FEA4C6DE2C3F28784D0DCC8F0DD3 . 243200 . . [2001.12.4414.308] . . c:\windows$hf_mig$\KB902400\SP2QFE\es.dll
[-] 2004-08-03 23:56 . ACD36A2DD7D1E9D8A060AA651DC07E63 . 243200 . . [2001.12.4414.258] . . c:\windows$NtUninstallKB902400$\es.dll
[-] 2004-08-03 23:56 . ACD36A2DD7D1E9D8A060AA651DC07E63 . 243200 . . [2001.12.4414.258] . . c:\windows\ServicePackFiles\i386\es.dll
[-] 2004-03-06 02:16 . B748D0ABBACD362052D4D61DCD562289 . 226816 . . [2001.12.4414.53] . . c:\windows$NtServicePackUninstall$\es.dll
[-] 2002-08-29 01:40 . !HASH: COULD NOT OPEN FILE !!! . 225280 . . [------] . . c:\windows$NtUninstallKB828741$\es.dll

[-] 2008-04-14 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\imm32.dll
[-] 2004-08-03 . 87CA7CE6469577F059297B9D6556D66D . 110080 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\imm32.dll
[-] 2004-08-03 . 87CA7CE6469577F059297B9D6556D66D . 110080 . . [5.1.2600.2180] . . c:\windows\system32\imm32.dll
[-] 2002-08-29 . C9F9E3E6B59C6D6CBCE7F14494A4518A . 103936 . . [5.1.2600.1106] . . c:\windows$NtServicePackUninstall$\imm32.dll

[-] 2009-03-21 . DA11D9D6ECBDF0F93436A4B7C13F7BEC . 991744 . . [5.1.2600.5781] . . c:\windows$hf_mig$\KB959426\SP3QFE\kernel32.dll
[-] 2009-03-21 . B6ACAED7588295129791E0E6A2B0FADE . 986112 . . [5.1.2600.3541] . . c:\windows\system32\kernel32.dll
[-] 2009-03-21 . B6ACAED7588295129791E0E6A2B0FADE . 986112 . . [5.1.2600.3541] . . c:\windows\system32\dllcache\kernel32.dll
[-] 2009-03-21 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781] . . c:\windows$hf_mig$\KB959426\SP3GDR\kernel32.dll
[-] 2009-03-21 . 80202858D245FF07DAA1739C57A3E19B . 989184 . . [5.1.2600.3541] . . c:\windows$hf_mig$\KB959426\SP2QFE\kernel32.dll
[-] 2008-04-14 . C24B983D211C34DA8FCC1AC38477971D . 989696 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\kernel32.dll
[-] 2007-04-16 . 09F7CB3687F86EDAA4CA081F7AB66C03 . 986112 . . [5.1.2600.3119] . . c:\windows$hf_mig$\KB935839\SP2QFE\kernel32.dll
[-] 2007-04-16 . A01F9CA902A88F7CED06884174D6419D . 984576 . . [5.1.2600.3119] . . c:\windows$NtUninstallKB959426$\kernel32.dll
[-] 2006-07-05 . 0FDD84928A5DDE2510761B7EC76CCEC9 . 985088 . . [5.1.2600.2945] . . c:\windows$hf_mig$\KB917422\SP2QFE\kernel32.dll
[-] 2006-07-05 . D8DB5397DE07577C1CB50BA6D23B3AD4 . 984064 . . [5.1.2600.2945] . . c:\windows$NtUninstallKB935839$\kernel32.dll
[-] 2004-08-03 . 888190E31455FAD793312F8D087146EB . 983552 . . [5.1.2600.2180] . . c:\windows$NtUninstallKB917422$\kernel32.dll
[-] 2004-08-03 . 888190E31455FAD793312F8D087146EB . 983552 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\kernel32.dll
[-] 2002-08-29 . 8F162DC91D67D87C1A481BF602A9DAC8 . 930304 . . [5.1.2600.1106] . . c:\windows$NtServicePackUninstall$\kernel32.dll

[-] 2008-04-14 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\linkinfo.dll
[-] 2005-09-01 . 648BF0B4DDE4F7A1156DAE7174D36EFA . 19968 . . [5.1.2600.2751] . . c:\windows$hf_mig$\KB900725\SP2QFE\linkinfo.dll
[-] 2005-09-01 . A1A688EE56CF3BBD24EDEB815D48E9BA . 19968 . . [5.1.2600.2751] . . c:\windows\system32\linkinfo.dll
[-] 2004-08-03 . C2BBD044C741EA4292016C36F718D2E4 . 18944 . . [5.1.2600.2180] . . c:\windows$NtUninstallKB900725$\linkinfo.dll
[-] 2004-08-03 . C2BBD044C741EA4292016C36F718D2E4 . 18944 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\linkinfo.dll
[-] 2001-08-23 . 7D8C58C0CBB7331E9296A7357827CA8E . 15360 . . [5.1.2600.0] . . c:\windows$NtServicePackUninstall$\linkinfo.dll

[-] 2008-04-14 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\lpk.dll
[-] 2004-08-03 . 74D66B3DE265E8789153414E75175F26 . 22016 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\lpk.dll
[-] 2004-08-03 . 74D66B3DE265E8789153414E75175F26 . 22016 . . [5.1.2600.2180] . . c:\windows\system32\lpk.dll
[-] 2001-08-23 . 55990CA08692E2739A8DDCE0B04352AC . 18944 . . [5.1.2600.0] . . c:\windows$NtServicePackUninstall$\lpk.dll

[-] 2008-04-14 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\lsass.exe
[-] 2004-08-03 . 84885F9B82F4D55C6146EBF6065D75D2 . 13312 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\lsass.exe
[-] 2004-08-03 . 84885F9B82F4D55C6146EBF6065D75D2 . 13312 . . [5.1.2600.2180] . . c:\windows\system32\lsass.exe
[-] 2002-08-29 . B2B6BA905D0E3F8A32A0EB3B4051807B . 11776 . . [5.1.2600.1106] . . c:\windows$NtServicePackUninstall$\lsass.exe

[-] 2009-07-19 . 758C8BEDAB7CE5F9070C85E2E57CBD80 . 3597824 . . [7.00.6000.16890] . . c:\windows\system32\mshtml.dll
[-] 2009-07-19 . 758C8BEDAB7CE5F9070C85E2E57CBD80 . 3597824 . . [7.00.6000.16890] . . c:\windows\system32\dllcache\mshtml.dll
[-] 2009-07-19 . F6098CC1B1C3858D53F20F3CB5774F3B . 3600384 . . [7.00.6000.21089] . . c:\windows$hf_mig$\KB972260-IE7\SP3QFE\mshtml.dll
[-] 2009-02-21 . 1BB754AB47B327DE8DBF2FA18C36357C . 3596800 . . [7.00.6000.21015] . . c:\windows$hf_mig$\KB963027-IE7\SP3QFE\mshtml.dll
[-] 2009-02-20 . C7C3E41CC2F6EB4A629FE2184136C098 . 3595264 . . [7.00.6000.16825] . . c:\windows\ie7updates\KB972260-IE7\mshtml.dll
[-] 2009-01-16 . 3B413267DA8AE71C20E5EF3E54F74728 . 3594752 . . [7.00.6000.16809] . . c:\windows\ie7updates\KB963027-IE7\mshtml.dll
[-] 2009-01-16 . CC9D001B7370B292C35B366CA05B12B4 . 3596288 . . [7.00.6000.20996] . . c:\windows$hf_mig$\KB961260-IE7\SP2QFE\mshtml.dll
[-] 2008-12-13 . 121EC39A64D64205A88C2C45B034B455 . 3593216 . . [7.00.6000.16788] . . c:\windows\ie7updates\KB961260-IE7\mshtml.dll
[-] 2008-12-13 . C79FAD61CD4A26ED5AA8C16D991C6FBD . 3594752 . . [7.00.6000.20973] . . c:\windows$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll
[-] 2008-10-17 . EACAEDEF6FA2A969DE5B36190D45396F . 3593216 . . [7.00.6000.16762] . . c:\windows\ie7updates\KB960714-IE7\mshtml.dll
[-] 2008-10-16 . B74F31A4BD83797D7A083F922169287D . 3595264 . . [7.00.6000.20935] . . c:\windows$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll
[-] 2008-08-27 . 1AD035E04A7068EC2820B055A3131ED8 . 3593216 . . [7.00.6000.16735] . . c:\windows\ie7updates\KB958215-IE7\mshtml.dll
[-] 2008-08-26 . 25CC085720EE3617FD1F8AB9E2F7CAB2 . 3594752 . . [7.00.6000.20900] . . c:\windows$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
[-] 2008-06-24 . EC936148284F557F19C333178768109B . 3592192 . . [7.00.6000.16705] . . c:\windows\ie7updates\KB956390-IE7\mshtml.dll
[-] 2008-06-23 . 28B8231CA8D55FC85E027A57C90F5C88 . 3594240 . . [7.00.6000.20861] . . c:\windows$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
[-] 2008-04-23 . 8976CAB317105F7431B08EA32AB73C65 . 3591680 . . [7.00.6000.16674] . . c:\windows\ie7updates\KB953838-IE7\mshtml.dll
[-] 2008-04-23 . 4D612FF5D3B7EEF200595AE6F95D5E68 . 3593728 . . [7.00.6000.20815] . . c:\windows$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll
[-] 2008-04-14 . A706E122B398FE1AB85CB9B75D044223 . 3066880 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mshtml.dll
[-] 2008-03-01 . AB2C88167D78D71D93558ACECB24CC7A . 3591680 . . [7.00.6000.16640] . . c:\windows\ie7updates\KB950759-IE7\mshtml.dll
[-] 2008-03-01 . 4EE273E2B09317C1217EF0DB91F93534 . 3593216 . . [7.00.6000.20772] . . c:\windows$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll
[-] 2007-12-08 . A097C36412455F0C7E42377FAF8809B7 . 3592192 . . [7.00.6000.16608] . . c:\windows\ie7updates\KB947864-IE7\mshtml.dll
[-] 2007-12-07 . 976C46ED4A75FC66D9C596778898CE1E . 3593216 . . [7.00.6000.20733] . . c:\windows$hf_mig$\KB944533-IE7\SP2QFE\mshtml.dll
[-] 2007-10-31 . 8AB7ECF59D6EBBE986277B65ED4A40A1 . 3590656 . . [7.00.6000.16587] . . c:\windows\ie7updates\KB944533-IE7\mshtml.dll
[-] 2007-10-30 . 54D8B404F17AA74C666F7F3AEF2AE459 . 3593216 . . [7.00.6000.20710] . . c:\windows$hf_mig$\KB942615-IE7\SP2QFE\mshtml.dll
[-] 2007-08-20 . E267EE248CDA7667C19001C069DE867B . 3584512 . . [7.00.6000.16544] . . c:\windows\ie7updates\KB942615-IE7\mshtml.dll
[-] 2007-08-20 . AA8A4BD78D24FCDB96DDAEE3756AA372 . 3592192 . . [7.00.6000.20661] . . c:\windows$hf_mig$\KB939653-IE7\SP2QFE\mshtml.dll
[-] 2007-07-18 . BD609A26B683332A0E0E1445C5724851 . 3583488 . . [7.00.6000.16525] . . c:\windows\ie7updates\KB939653-IE7\mshtml.dll
[-] 2007-07-18 . 7CE243CFD47AD0DC431586CB8C542A11 . 3584000 . . [7.00.6000.20641] . . c:\windows$hf_mig$\KB937143-IE7\SP2QFE\mshtml.dll
[-] 2007-05-08 . 5D90A7200F72DACE663EE78DE234FCC7 . 3583488 . . [7.00.6000.16481] . . c:\windows\ie7updates\KB937143-IE7\mshtml.dll
[-] 2007-05-08 . 1D4E3B86C601A2497C99790CC4D7DF26 . 3584000 . . [7.00.6000.20591] . . c:\windows$hf_mig$\KB933566-IE7\SP2QFE\mshtml.dll
[-] 2007-03-07 . 190E1AE9B973049B12A67BAD478C770C . 3581952 . . [7.00.6000.16441] . . c:\windows\ie7updates\KB933566-IE7\mshtml.dll
[-] 2007-03-07 . DA297A862E5F093A07D37C05F608C686 . 3582976 . . [7.00.6000.20544] . . c:\windows$hf_mig$\KB931768-IE7\SP2QFE\mshtml.dll
[-] 2007-01-12 . 5D45318804A30CE9D6EA83066E84B4A7 . 3580416 . . [7.00.6000.16414] . . c:\windows\ie7updates\KB931768-IE7\mshtml.dll
[-] 2006-11-07 . CBF04597F9CF7739E572276A2698FDD3 . 3577856 . . [7.00.5730.11] . . c:\windows\ie7updates\KB928090-IE7\mshtml.dll
[-] 2006-09-14 . BE45460D1453B7342E01EAE79BFBC681 . 3054592 . . [6.00.2900.2995] . . c:\windows\ie7\mshtml.dll
[-] 2006-09-14 . CEFEA1C301139A817931BE132F0359FE . 3058688 . . [6.00.2900.2995] . . c:\windows$hf_mig$\KB922760\SP2QFE\mshtml.dll
[-] 2006-07-28 . D251679BD9EF0250201FB899EC40FD32 . 3058176 . . [6.00.2900.2963] . . c:\windows$hf_mig$\KB918899\SP2QFE\mshtml.dll
[-] 2006-07-28 . C7074DA3D8F8C0F6C03874BA0B05069C . 3054080 . . [6.00.2900.2963] . . c:\windows$NtUninstallKB922760$\mshtml.dll
[-] 2005-01-27 . FAE3CA9B2459581C45B3A8845BE3077C . 3006976 . . [6.00.2900.2604] . . c:\windows$NtUninstallKB918899$\mshtml.dll
[-] 2005-01-27 . 91C5ADE25BC4E3322577854FA2E7B58B . 3008000 . . [6.00.2900.2604] . . c:\windows$hf_mig$\KB867282\SP2QFE\mshtml.dll
[-] 2004-08-03 . 376E0843B2356CA91CEC8D9837A56FF7 . 3003392 . . [6.00.2900.2180] . . c:\windows$NtUninstallKB867282$\mshtml.dll
[-] 2004-08-03 . 376E0843B2356CA91CEC8D9837A56FF7 . 3003392 . . [6.00.2900.2180] . . c:\windows\ServicePackFiles\i386\mshtml.dll
[-] 2004-07-07 16:37 . FAC3F71082946FF9BE7EE51B1A34E64B . 2803712 . . [6.00.2800.1458] . . c:\windows$NtServicePackUninstall$\mshtml.dll

[-] 2008-06-20 . 832E4DD8964AB7ACC880B2837CB1ED20 . 245248 . . [5.1.2600.5625] . . c:\windows$hf_mig$\KB951748\SP3GDR\mswsock.dll
[-] 2008-06-20 . FCEE5FCB99F7C724593365C706D28388 . 245248 . . [5.1.2600.5625] . . c:\windows$hf_mig$\KB951748\SP3QFE\mswsock.dll
[-] 2008-06-20 . 097722F235A1FB698BF9234E01B52637 . 245248 . . [5.1.2600.3394] . . c:\windows\system32\mswsock.dll
[-] 2008-06-20 . 097722F235A1FB698BF9234E01B52637 . 245248 . . [5.1.2600.3394] . . c:\windows\system32\dllcache\mswsock.dll
[-] 2008-06-20 . 1DFCA7713EA5A70D5D93B436AEA0317A . 245248 . . [5.1.2600.3394] . . c:\windows$hf_mig$\KB951748\SP2QFE\mswsock.dll
[-] 2008-04-14 . B4138E99236F0F57D4CF49BAE98A0746 . 245248 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mswsock.dll
[-] 2004-08-03 . 4E74AF063C3271FBEA20DD940CFD1184 . 245248 . . [5.1.2600.2180] . . c:\windows$NtUninstallKB951748$\mswsock.dll
[-] 2004-08-03 . 4E74AF063C3271FBEA20DD940CFD1184 . 245248 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\mswsock.dll
[-] 2001-08-23 . 18A8BE5A66B93F9C9615F7D4C148EDE2 . 228352 . . [5.1.2600.0] . . c:\windows$NtServicePackUninstall$\mswsock.dll

[-] 2009-02-06 . 6C476D33D82F1054849790181E8F7772 . 408064 . . [5.1.2600.3520] . . c:\windows\SoftwareDistribution\Download\555558d2c7916b118ad5baef62b18136\sp2qfe\netlogon.dll
[-] 2008-04-14 . 1B7F071C51B77C272875C3A23E1E4550 . 407040 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\netlogon.dll
[-] 2004-08-03 . 96353FCECBA774BB8DA74A1C6507015A . 407040 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\netlogon.dll
[-] 2004-08-03 . 96353FCECBA774BB8DA74A1C6507015A . 407040 . . [5.1.2600.2180] . . c:\windows\system32\netlogon.dll
[-] 2002-08-29 . 3ADD563ED7A1C66E6F5E0F7A661AA96D . 399360 . . [5.1.2600.1106] . . c:\windows$NtServicePackUninstall$\netlogon.dll

[-] 2008-04-14 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\netman.dll
[-] 2005-08-22 . 36739B39267914BA69AD0610A0299732 . 197632 . . [5.1.2600.2743] . . c:\windows\system32\netman.dll
[-] 2005-08-22 . 3516D8A18B36784B1005B950B84232E1 . 197632 . . [5.1.2600.2743] . . c:\windows$hf_mig$\KB905414\SP2QFE\netman.dll
[-] 2004-08-03 . DAB9E6C7105D2EF49876FE92C524F565 . 198144 . . [5.1.2600.2180] . . c:\windows$NtUninstallKB905414$\netman.dll
[-] 2004-08-03 . DAB9E6C7105D2EF49876FE92C524F565 . 198144 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\netman.dll
[-] 2002-08-29 . E7FF9267BBEB1386975278A27378526F . 154112 . . [5.1.2600.1106] . . c:\windows$NtServicePackUninstall$\netman.dll

[-] 2009-02-07 . EFE8EACE83EAAD5849A7A548FB75B584 . 2189184 . . [5.1.2600.5755] . . c:\windows$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
[-] 2009-02-06 . FACEBB0CA3154F77009CDFEE78A00BBB . 2180480 . . [5.1.2600.3520] . . c:\windows\Driver Cache\i386\ntoskrnl.exe
[-] 2009-02-06 . FACEBB0CA3154F77009CDFEE78A00BBB . 2180480 . . [5.1.2600.3520] . . c:\windows\system32\dllcache\ntoskrnl.exe
[-] 2009-02-06 . 16B5EBE97F243441264A8F8694C2F2AA . 2136064 . . [5.1.2600.3520] . . c:\windows\system32\ntoskrnl.exe
[-] 2009-02-06 . 7A95B10A73737EBF24139AAA63F5212B . 2189056 . . [5.1.2600.5755] . . c:\windows$hf_mig$\KB956572\SP3GDR\ntoskrnl.exe
[-] 2009-02-06 . 6A936E9D7BADAF3CAAEED1E1966EC1B0 . 2186112 . . [5.1.2600.3520] . . c:\windows$hf_mig$\KB956572\SP2QFE\ntoskrnl.exe
[-] 2008-08-14 . 31914172342BFF330063F343AC6958FE . 2189184 . . [5.1.2600.5657] . . c:\windows$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
[-] 2008-08-14 . EEAF32F8E15A24F62BECB1BD403BB5C5 . 2189184 . . [5.1.2600.5657] . . c:\windows$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe
[-] 2008-08-14 . DD31AB4B91C2605601A3C108AF57A0C9 . 2136064 . . [5.1.2600.3427] . . c:\windows$NtUninstallKB956572$\ntoskrnl.exe
[-] 2008-08-14 . CE69DBD54221F2D40E49FF6DB77C6507 . 2185984 . . [5.1.2600.3427] . . c:\windows$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe
[-] 2008-04-13 . 0C89243C7C3EE199B96FCC16990E0679 . 2188928 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ntoskrnl.exe
[-] 2007-02-28 . 5A5C8DB4AA962C714C8371FBDF189FC9 . 2182144 . . [5.1.2600.3093] . . c:\windows$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe
[-] 2007-02-28 . 1220FAF071DEA8653EE21DE7DCDA8BFD . 2136064 . . [5.1.2600.3093] . . c:\windows$NtUninstallKB956841$\ntoskrnl.exe
[-] 2006-12-19 . CEF243F6DEFD20BE4ADDE26C7ECACB54 . 2182016 . . [5.1.2600.3051] . . c:\windows$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe
[-] 2006-12-19 . 8318ED54797F3E513FD5817A1D4BBD18 . 2136064 . . [5.1.2600.3051] . . c:\windows$NtUninstallKB931784$\ntoskrnl.exe
[-] 2005-03-02 . 28187802B7C368C0D3AEF7D4C382AABB . 2179456 . . [5.1.2600.2622] . . c:\windows$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
[-] 2005-03-02 . 48B3E89AF7074CEE0314A3E0C7FAFFDB . 2135552 . . [5.1.2600.2622] . . c:\windows$NtUninstallKB929338$\ntoskrnl.exe
[-] 2004-08-03 . CE218BC7088681FAA06633E218596CA7 . 2180992 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\ntoskrnl.exe
[-] 2004-08-03 . 626309040459C3915997EF98EC1C8D40 . 2148352 . . [5.1.2600.2180] . . c:\windows$NtUninstallKB890859$\ntoskrnl.exe
[-] 2003-04-24 . 97EC4AB4650DA6FC521CF16F8A6DDCB0 . 1925760 . . [5.1.2600.1151] . . c:\windows$NtServicePackUninstall$\ntoskrnl.exe
[-] 2002-08-29 . B9080D97DBD631AADF9128F7316958D2 . 2042240 . . [5.1.2600.1106] . . c:\windows$NtUninstallQ811493$\ntoskrnl.exe

[-] 2008-04-14 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\powrprof.dll
[-] 2004-08-03 . 1B5F6923ABB450692E9FE0672C897AED . 17408 . . [6.00.2900.2180] . . c:\windows\ServicePackFiles\i386\powrprof.dll
[-] 2004-08-03 . 1B5F6923ABB450692E9FE0672C897AED . 17408 . . [6.00.2900.2180] . . c:\windows\system32\powrprof.dll
[-] 2001-08-23 . 865AD7CCB20856727D5BD994B094DC5E . 14848 . . [6.00.2600.0000] . . c:\windows$NtServicePackUninstall$\powrprof.dll

[-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\qmgr.dll
[-] 2007-05-24 . 4855420F2BE8236DF0581E8512920E82 . 408064 . . [6.7.2600.3143] . . c:\windows\system32\qmgr.dll
[-] 2007-05-24 . 4855420F2BE8236DF0581E8512920E82 . 408064 . . [6.7.2600.3143] . . c:\windows\system32\bits\qmgr.dll
[-] 2007-05-24 . 4855420F2BE8236DF0581E8512920E82 . 408064 . . [6.7.2600.3143] . . c:\windows\system32\dllcache\qmgr.dll
[-] 2007-05-24 . 17A0D43C80DB5348759C649835A78CFC . 408064 . . [6.7.2600.3143] . . c:\windows$hf_mig$\KB923845\SP2QFE\qmgr.dll
[-] 2004-08-03 . 2C69EC7E5A311334D10DD95F338FCCEA . 382464 . . [6.6.2600.2180] . . c:\windows$NtUninstallKB923845$\qmgr.dll
[-] 2004-08-03 . 2C69EC7E5A311334D10DD95F338FCCEA . 382464 . . [6.6.2600.2180] . . c:\windows\ServicePackFiles\i386\qmgr.dll
[-] 2002-08-29 . 6A1CF14D0E7D0B2241F552223769C8A7 . 221696 . . [6.2.2600.1106] . . c:\windows$NtServicePackUninstall$\qmgr.dll
[-] 2002-08-29 . 6A1CF14D0E7D0B2241F552223769C8A7 . 221696 . . [6.2.2600.1106] . . c:\windows$NtUninstallKB842773$\qmgr.dll

[-] 2009-02-09 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755] . . c:\windows$hf_mig$\KB956572\SP3GDR\rpcss.dll
[-] 2009-02-09 . 9222562D44021B988B9F9F62207FB6F2 . 401408 . . [5.1.2600.5755] . . c:\windows$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2009-02-09 . 01095FEBF33BEEA00C2A0730B9B3EC28 . 399360 . . [5.1.2600.3520] . . c:\windows\system32\rpcss.dll
[-] 2009-02-09 . 01095FEBF33BEEA00C2A0730B9B3EC28 . 399360 . . [5.1.2600.3520] . . c:\windows\system32\dllcache\rpcss.dll
[-] 2009-02-09 . 24B5D53B9ACCC1E2EDCF0A878D6659D4 . 401408 . . [5.1.2600.3520] . . c:\windows$hf_mig$\KB956572\SP2QFE\rpcss.dll
[-] 2008-04-14 . 2589FE6015A316C0F5D5112B4DA7B509 . 399360 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\rpcss.dll
[-] 2005-07-26 . CE94A2BD25E3E9F4D46A7373FF455C6D . 397824 . . [5.1.2600.2726] . . c:\windows$NtUninstallKB956572$\rpcss.dll
[-] 2005-07-26 . C369DF215D352B6F3A0B8C3469AA34F8 . 398336 . . [5.1.2600.2726] . . c:\windows$hf_mig$\KB902400\SP2QFE\rpcss.dll
[-] 2005-04-28 . DA383FB39A6F1C445F3AFC94B3EB1248 . 396288 . . [5.1.2600.2665] . . c:\windows$hf_mig$\KB894391\SP2QFE\rpcss.dll
[-] 2005-04-28 . C8061F289E000703E7672916B7FE1571 . 395776 . . [5.1.2600.2665] . . c:\windows$NtUninstallKB902400$\rpcss.dll
[-] 2005-01-14 . 419899803CA479B73B02390318C787C0 . 395776 . . [5.1.2600.2595] . . c:\windows$NtUninstallKB894391$\rpcss.dll
[-] 2005-01-14 . 94456045BEB4545B5EBE1DCC85951AFA . 395776 . . [5.1.2600.2595] . . c:\windows$hf_mig$\KB873333\SP2QFE\rpcss.dll
[-] 2004-08-03 . 5C83A4408604F737717AB96371201680 . 395776 . . [5.1.2600.2180] . . c:\windows$NtUninstallKB873333$\rpcss.dll
[-] 2004-08-03 . 5C83A4408604F737717AB96371201680 . 395776 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\rpcss.dll
[-] 2004-03-06 . 4EA08A8BBDF8DDEE0F173BB999C153C3 . 263680 . . [5.1.2600.1361] . . c:\windows$NtServicePackUninstall$\rpcss.dll
[-] 2003-08-25 18:53 . !HASH: COULD NOT OPEN FILE !!! . 260608 . . [------] . . c:\windows$NtUninstallKB828741$\rpcss.dll
[-] 2002-08-29 . 493FCBED180DCACF0B5D4C8C29949CA9 . 260608 . . [5.1.2600.1106] . . c:\windows$NtUninstallKB824146$\rpcss.dll

[-] 2008-04-14 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\scecli.dll
[-] 2004-08-03 . 0F78E27F563F2AAF74B91A49E2ABF19A . 180224 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\scecli.dll
[-] 2004-08-03 . 0F78E27F563F2AAF74B91A49E2ABF19A . 180224 . . [5.1.2600.2180] . . c:\windows\system32\scecli.dll
[-] 2002-08-29 . 97418A5C642A5C748A28BD7CF6860B57 . 174592 . . [5.1.2600.1106] . . c:\windows$NtServicePackUninstall$\scecli.dll

[-] 2009-02-06 . 37561F8D4160D62DA86D24AE41FAE8DE . 110592 . . [5.1.2600.3520] . . c:\windows\system32\services.exe
[-] 2009-02-06 . 37561F8D4160D62DA86D24AE41FAE8DE . 110592 . . [5.1.2600.3520] . . c:\windows\system32\dllcache\services.exe
[-] 2009-02-06 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755] . . c:\windows$hf_mig$\KB956572\SP3GDR\services.exe
[-] 2009-02-06 . 020CEAAEDC8EB655B6506B8C70D53BB6 . 110592 . . [5.1.2600.5755] . . c:\windows$hf_mig$\KB956572\SP3QFE\services.exe
[-] 2009-02-06 . 4712531AB7A01B7EE059853CA17D39BD . 110592 . . [5.1.2600.3520] . . c:\windows$hf_mig$\KB956572\SP2QFE\services.exe
[-] 2008-04-14 . 0E776ED5F7CC9F94299E70461B7B8185 . 108544 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\services.exe
[-] 2004-08-03 . C6CE6EEC82F187615D1002BB3BB50ED4 . 108032 . . [5.1.2600.2180] . . c:\windows$NtUninstallKB956572$\services.exe
[-] 2004-08-03 . C6CE6EEC82F187615D1002BB3BB50ED4 . 108032 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\services.exe
[-] 2001-08-23 . E3DF4A0252D287C44606EE55355E1623 . 101376 . . [5.1.2600.0] . . c:\windows$NtServicePackUninstall$\services.exe

[-] 2008-04-14 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\sfc.dll
[-] 2004-08-03 . E8A12A12EA9088B4327D49EDCA3ADD3E . 5120 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\sfc.dll
[-] 2004-08-03 . E8A12A12EA9088B4327D49EDCA3ADD3E . 5120 . . [5.1.2600.2180] . . c:\windows\system32\sfc.dll
[-] 2001-08-23 . 52BB2A508CB3EB8AAA5F6F142F5B73D6 . 4096 . . [5.1.2600.0] . . c:\windows$NtServicePackUninstall$\sfc.dll

[-] 2008-04-14 . D8E14A61ACC1D4A6CD0D38AEBAC7FA3B . 57856 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\spoolsv.exe
[-] 2005-06-11 . AD3D9D191AEA7B5445FE1D82FFBB4788 . 57856 . . [5.1.2600.2696] . . c:\windows$hf_mig$\KB896423\SP2QFE\spoolsv.exe
[-] 2005-06-10 . DA81EC57ACD4CDC3D4C51CF3D409AF9F . 57856 . . [5.1.2600.2696] . . c:\windows\system32\spoolsv.exe
[-] 2004-08-03 . 7435B108B935E42EA92CA94F59C8E717 . 57856 . . [5.1.2600.2180] . . c:\windows$NtUninstallKB896423$\spoolsv.exe
[-] 2004-08-03 . 7435B108B935E42EA92CA94F59C8E717 . 57856 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\spoolsv.exe
[-] 2001-08-23 . 9B4155BA58192D4073082B8FC5D42612 . 51200 . . [5.1.2600.0] . . c:\windows$NtServicePackUninstall$\spoolsv.exe

[-] 2009-09-24 . 8F078AE4ED187AAABC0A305146DE6716 . 14336 . . [5.1.2600.2180] . . c:\windows\system32\svchost.exe
[-] 2009-09-24 . 8F078AE4ED187AAABC0A305146DE6716 . 14336 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\svchost.exe
[-] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\svchost.exe
[-] 2004-08-03 . 8F078AE4ED187AAABC0A305146DE6716 . 14336 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\svchost.exe
[-] 2001-08-23 . 0F7D9C87B0CE1FA520473119752C6F79 . 12800 . . [5.1.2600.0] . . c:\windows$NtServicePackUninstall$\svchost.exe

[-] 2008-04-14 . 3CB78C17BB664637787C9A1C98F79C38 . 249856 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\tapisrv.dll
[-] 2005-07-08 . 1418A3A6E76E5A2E3F5E43866E793A8B . 249344 . . [5.1.2600.2716] . . c:\windows$hf_mig$\KB893756\SP2QFE\tapisrv.dll
[-] 2005-07-08 . FB78839B36025AA286A51289ED28B73E . 249344 . . [5.1.2600.2716] . . c:\windows\system32\tapisrv.dll
[-] 2004-08-03 . EB4A4187D74A8EFDCBEA3EA2CB1BDFBD . 246272 . . [5.1.2600.2180] . . c:\windows$NtUninstallKB893756$\tapisrv.dll
[-] 2004-08-03 . EB4A4187D74A8EFDCBEA3EA2CB1BDFBD . 246272 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\tapisrv.dll
[-] 2002-08-29 . 9B3A213B6591A79EBABBFB4E4EA0A23E . 233984 . . [5.1.2600.1106] . . c:\windows$NtServicePackUninstall$\tapisrv.dll

[-] 2008-04-14 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\user32.dll
[-] 2007-03-08 . 7AA4F6C00405DFC4B70ED4214E7D687B . 578048 . . [5.1.2600.3099] . . c:\windows$hf_mig$\KB925902\SP2QFE\user32.dll
[-] 2007-03-08 . B409909F6E2E8A7067076ED748ABF1E7 . 577536 . . [5.1.2600.3099] . . c:\windows\system32\user32.dll
[-] 2007-03-08 . B409909F6E2E8A7067076ED748ABF1E7 . 577536 . . [5.1.2600.3099] . . c:\windows\system32\dllcache\user32.dll
[-] 2005-03-02 . 1800F293BCCC8EDE8A70E12B88D80036 . 577024 . . [5.1.2600.2622] . . c:\windows$hf_mig$\KB890859\SP2QFE\user32.dll
[-] 2005-03-02 . DE2DB164BBB35DB061AF0997E4499054 . 577024 . . [5.1.2600.2622] . . c:\windows$NtUninstallKB925902$\user32.dll
[-] 2004-08-03 . C72661F8552ACE7C5C85E16A3CF505C4 . 577024 . . [5.1.2600.2180] . . c:\windows$NtUninstallKB890859$\user32.dll
[-] 2004-08-03 . C72661F8552ACE7C5C85E16A3CF505C4 . 577024 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\user32.dll
[-] 2003-09-25 . 32173306185F603E75C477E117F3BB8D . 560128 . . [5.1.2600.1255] . . c:\windows$NtServicePackUninstall$\user32.dll
[-] 2002-11-01 13:26 . !HASH: COULD NOT OPEN FILE !!! . 528896 . . [------] . . c:\windows$NtUninstallKB824141$\user32.dll
[-] 2002-08-29 . DD9269230C21EE8FB7FD3FCCC3B1CFCB . 560128 . . [5.1.2600.1106] . . c:\windows$NtUninstallQ328310$\user32.dll

[-] 2008-04-14 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\userinit.exe
[-] 2004-08-03 . 39B1FFB03C2296323832ACBAE50D2AFF . 24576 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\userinit.exe
[-] 2004-08-03 . 39B1FFB03C2296323832ACBAE50D2AFF . 24576 . . [5.1.2600.2180] . . c:\windows\system32\userinit.exe
[-] 2002-08-29 . E931E0A2B8BF0019DB902E98D03662CB . 22016 . . [5.1.2600.1106] . . c:\windows$NtServicePackUninstall$\userinit.exe

[-] 2009-06-29 . 4C6B4138165A4C53FE8A5B1D809526C3 . 828928 . . [7.00.6000.21073] . . c:\windows$hf_mig$\KB972260-IE7\SP3QFE\wininet.dll
[-] 2009-06-29 . A39B7BA7AB9B1CC2A0009F59772DB83C . 827392 . . [7.00.6000.16876] . . c:\windows\system32\wininet.dll
[-] 2009-06-29 . A39B7BA7AB9B1CC2A0009F59772DB83C . 827392 . . [7.00.6000.16876] . . c:\windows\system32\dllcache\wininet.dll
[-] 2009-03-03 . 28775945CCD53DEE280EF58DEA1A94C4 . 826368 . . [7.00.6000.16827] . . c:\windows\ie7updates\KB972260-IE7\wininet.dll
[-] 2009-03-03 . C8667854873938CA13C986F16B0CD183 . 828416 . . [7.00.6000.21020] . . c:\windows$hf_mig$\KB963027-IE7\SP3QFE\wininet.dll
[-] 2008-12-20 . 044E0A4E9FE97C0FB9AFE9C89E2A82E6 . 827904 . . [7.00.6000.20978] . . c:\windows$hf_mig$\KB961260-IE7\SP2QFE\wininet.dll
[-] 2008-12-20 . A82935D32D0672E8FF4E91AE398E901C . 826368 . . [7.00.6000.16791] . . c:\windows\ie7updates\KB963027-IE7\wininet.dll
[-] 2008-10-16 . 6741EAF7B7F110E803A6E38F6E5FA6B0 . 826368 . . [7.00.6000.16762] . . c:\windows\ie7updates\KB961260-IE7\wininet.dll
[-] 2008-10-16 . 0D5B75171FF51775B630A431B6C667E8 . 827904 . . [7.00.6000.20935] . . c:\windows$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll
[-] 2008-08-26 . 77C192FE56A70D7FA0247BA0A6201C32 . 827904 . . [7.00.6000.20900] . . c:\windows$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
[-] 2008-08-26 . EF8EBA98145BFA44E80D17A3B3453300 . 826368 . . [7.00.6000.16735] . . c:\windows\ie7updates\KB958215-IE7\wininet.dll
[-] 2008-06-23 . 8C13D4A7479FA0A026EDA8ABCE82C0ED . 826368 . . [7.00.6000.16705] . . c:\windows\ie7updates\KB956390-IE7\wininet.dll
[-] 2008-06-23 . C66402A06B83B036C195242C0C8CF83C . 827904 . . [7.00.6000.20861] . . c:\windows$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
[-] 2008-04-23 . F6589BE784647CFDBC22EA51CCB1A57A . 826368 . . [7.00.6000.16674] . . c:\windows\ie7updates\KB953838-IE7\wininet.dll
[-] 2008-04-23 . 41546B396A526918DA7995A02EA04E51 . 827392 . . [7.00.6000.20815] . . c:\windows$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll
[-] 2008-04-14 . 7A4F775ABB2F1C97DEF3E73AFA2FAEDD . 666112 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wininet.dll
[-] 2008-03-01 . AD21461AEF8244EDEC2EF18E55E1DCF3 . 826368 . . [7.00.6000.16640] . . c:\windows\ie7updates\KB950759-IE7\wininet.dll
[-] 2008-03-01 . 6316C2F0C61271C8ABDFF7429174879E . 827392 . . [7.00.6000.20772] . . c:\windows$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll
[-] 2007-12-07 . 806D274C9A6C3AAEA5EAE8E4AF841E04 . 824832 . . [7.00.6000.16608] . . c:\windows\ie7updates\KB947864-IE7\wininet.dll
[-] 2007-12-07 . B5B411BB229AE6EAD7652A32ED47BFB9 . 825344 . . [7.00.6000.20733] . . c:\windows$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll
[-] 2007-10-10 . 30C1E0F34AD2972C72A01DB5C74AB065 . 824832 . . [7.00.6000.16574] . . c:\windows\ie7updates\KB944533-IE7\wininet.dll
[-] 2007-10-10 . 0E5D918F87EFA7D2424D66B499C7EB04 . 825344 . . [7.00.6000.20696] . . c:\windows$hf_mig$\KB942615-IE7\SP2QFE\wininet.dll
[-] 2007-08-20 . 774435E499D8E9643EC961A6103C361F . 824832 . . [7.00.6000.16544] . . c:\windows\ie7updates\KB942615-IE7\wininet.dll
[-] 2007-08-20 . 357D54BF94FE9D6D8505A96B5C2A3BCA . 825344 . . [7.00.6000.20661] . . c:\windows$hf_mig$\KB939653-IE7\SP2QFE\wininet.dll
[-] 2007-06-27 . D6ED5E042C5207553E7F5E842918137F . 824320 . . [7.00.6000.20627] . . c:\windows$hf_mig$\KB937143-IE7\SP2QFE\wininet.dll
[-] 2007-06-27 . 8068CBB58FE60CC95AEB2CFF70178208 . 823808 . . [7.00.6000.16512] . . c:\windows\ie7updates\KB939653-IE7\wininet.dll
[-] 2007-04-25 . 431DEFBB4A3D7B0DC062C1B064623A2F . 823808 . . [7.00.6000.20583] . . c:\windows$hf_mig$\KB933566-IE7\SP2QFE\wininet.dll
[-] 2007-04-25 . 0586A7F0B2FDB94D624F399D4728E7C8 . 822784 . . [7.00.6000.16473] . . c:\windows\ie7updates\KB937143-IE7\wininet.dll
[-] 2007-03-07 . 5B35DAE6E4886F64D1DA58C4E3E01EB9 . 822784 . . [7.00.6000.16441] . . c:\windows\ie7updates\KB933566-IE7\wininet.dll
[-] 2007-03-07 . B8F4DB39CA7353752F245379D285C80E . 823296 . . [7.00.6000.20544] . . c:\windows$hf_mig$\KB931768-IE7\SP2QFE\wininet.dll
[-] 2007-01-12 . BE43D00D802C92F01C8CC952C6F483F8 . 822784 . . [7.00.6000.16414] . . c:\windows\ie7updates\KB931768-IE7\wininet.dll
[-] 2006-11-07 . 92995334F993E6E49C25C6D02EC04401 . 818688 . . [7.00.5730.11] . . c:\windows\ie7updates\KB928090-IE7\wininet.dll
[-] 2006-09-14 . 621AF3F6174A3F60677F5230E28BCC07 . 658944 . . [6.00.2900.2995] . . c:\windows\ie7\wininet.dll
[-] 2006-09-14 . D207370287CF769AEBEBF03837784963 . 664576 . . [6.00.2900.2995] . . c:\windows$hf_mig$\KB922760\SP2QFE\wininet.dll
[-] 2006-06-23 . 64CE26DB72810B30F7855EA51E1DF836 . 664576 . . [6.00.2900.2937] . . c:\windows$hf_mig$\KB918899\SP2QFE\wininet.dll
[-] 2006-06-23 . 2B4DB890936430C71419037039502752 . 658944 . . [6.00.2900.2937] . . c:\windows$NtUninstallKB922760$\wininet.dll
[-] 2005-01-27 . B5E043E440B210014E021B24CF0A72E3 . 656896 . . [6.00.2900.2577] . . c:\windows$NtUninstallKB918899$\wininet.dll
[-] 2005-01-27 . A8EAC5330876548E9966A7D13025D196 . 657920 . . [6.00.2900.2598] . . c:\windows$hf_mig$\KB867282\SP2QFE\wininet.dll
[-] 2004-08-03 . C0823FC5469663BA63E7DB88F9919D70 . 656384 . . [6.00.2900.2180] . . c:\windows$NtUninstallKB867282$\wininet.dll
[-] 2004-08-03 . C0823FC5469663BA63E7DB88F9919D70 . 656384 . . [6.00.2900.2180] . . c:\windows\ServicePackFiles\i386\wininet.dll
[-] 2004-02-06 16:05 . 4F64D1DF989E3AA2FAD91A2F1167B9C7 . 588288 . . [6.00.2800.1405] . . c:\windows$NtServicePackUninstall$\wininet.dll

[-] 2008-04-14 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\winlogon.exe
[-] 2004-08-03 . 01C3346C241652F43AED8E2149881BFE . 502272 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\winlogon.exe
[-] 2004-08-03 . 01C3346C241652F43AED8E2149881BFE . 502272 . . [5.1.2600.2180] . . c:\windows\system32\winlogon.exe
[-] 2002-08-29 . 2246D8D8F4714A2CEDB21AB9B1849ABB . 516608 . . [5.1.2600.1106] . . c:\windows$NtServicePackUninstall$\winlogon.exe

[-] 2008-04-14 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ws2_32.dll
[-] 2004-08-03 . 2ED0B7F12A60F90092081C50FA0EC2B2 . 82944 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\ws2_32.dll
[-] 2004-08-03 . 2ED0B7F12A60F90092081C50FA0EC2B2 . 82944 . . [5.1.2600.2180] . . c:\windows\system32\ws2_32.dll
[-] 2003-07-10 . 06BF1D3C21274F92DDD0E09317C80B35 . 70656 . . [5.1.2600.1240] . . c:\windows$NtServicePackUninstall$\ws2_32.dll
[-] 2001-08-23 . 8529C295DF59B564D37A73B5629162B1 . 75264 . . [5.1.2600.0] . . c:\windows$NtUninstallKB817778$\ws2_32.dll

[-] 2008-04-14 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\explorer.exe
[-] 2007-06-13 . 7712DF0CDDE3A5AC89843E61CD5B3658 . 1033216 . . [6.00.2900.3156] . . c:\windows$hf_mig$\KB938828\SP2QFE\explorer.exe
[-] 2007-06-13 . 97BD6515465659FF8F3B7BE375B2EA87 . 1033216 . . [6.00.2900.3156] . . c:\windows\explorer.exe
[-] 2007-06-13 . 97BD6515465659FF8F3B7BE375B2EA87 . 1033216 . . [6.00.2900.3156] . . c:\windows\system32\dllcache\explorer.exe
[-] 2004-08-03 . A0732187050030AE399B241436565E64 . 1032192 . . [6.00.2900.2180] . . c:\windows$NtUninstallKB938828$\explorer.exe
[-] 2004-08-03 . A0732187050030AE399B241436565E64 . 1032192 . . [6.00.2900.2180] . . c:\windows\ServicePackFiles\i386\explorer.exe
[-] 2003-05-11 . A73BC66A95CF4F7B597FC8975778A889 . 996352 . . [6.00.2800.1221] . . c:\windows$NtServicePackUninstall$\explorer.exe
[-] 2002-08-29 . A82B28BFC2E4455FE43022A498C0EF0A . 1004032 . . [6.00.2800.1106] . . c:\windows$NtUninstallKB820291$\explorer.exe

[-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\srsvc.dll
[-] 2004-08-03 . 92BDF74F12D6CBEC43C94D4B7F804838 . 170496 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\srsvc.dll
[-] 2004-08-03 . 92BDF74F12D6CBEC43C94D4B7F804838 . 170496 . . [5.1.2600.2180] . . c:\windows\system32\srsvc.dll
[-] 2002-08-29 . 38E9CFAC7881435764051FD7B1F010FB . 158720 . . [5.1.2600.1106] . . c:\windows$NtServicePackUninstall$\srsvc.dll

[-] 2008-04-14 . F92E1076C42FCD6DB3D72D8CFE9816D5 . 13824 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wscntfy.exe
[-] 2004-08-03 . 49911DD39E023BB6C45E4E436CFBD297 . 13824 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\wscntfy.exe
[-] 2004-08-03 . 49911DD39E023BB6C45E4E436CFBD297 . 13824 . . [5.1.2600.2180] . . c:\windows\system32\wscntfy.exe

[-] 2008-04-14 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\xmlprov.dll
[-] 2004-08-03 . EEF46DAB68229A14DA3D8E73C99E2959 . 129536 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\xmlprov.dll
[-] 2004-08-03 . EEF46DAB68229A14DA3D8E73C99E2959 . 129536 . . [5.1.2600.2180] . . c:\windows\system32\xmlprov.dll

[-] 2008-04-14 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\eventlog.dll
[-] 2004-08-03 . 82B24CB70E5944E6E34662205A2A5B78 . 55808 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\eventlog.dll
[-] 2004-08-03 . 82B24CB70E5944E6E34662205A2A5B78 . 55808 . . [5.1.2600.2180] . . c:\windows\system32\eventlog.dll
[-] 2002-08-29 . BF3C8CF53C77B48206B39910B6D6CBCC . 49152 . . [5.1.2600.1106] . . c:\windows$NtServicePackUninstall$\eventlog.dll

[-] 2008-04-14 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\sfcfiles.dll
[-] 2004-08-03 . 30A609E00BD1D4FFC49D6B5A432BE7F2 . 1580544 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\sfcfiles.dll
[-] 2004-08-03 . 30A609E00BD1D4FFC49D6B5A432BE7F2 . 1580544 . . [5.1.2600.2180] . . c:\windows\system32\sfcfiles.dll
[-] 2002-08-29 . 2564949DBE5F643F50913BBE45D346E2 . 1157632 . . [5.1.2600.1106] . . c:\windows$NtServicePackUninstall$\sfcfiles.dll

[-] 2008-04-14 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ctfmon.exe
[-] 2004-08-03 . 24232996A38C0B0CF151C2140AE29FC8 . 15360 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\ctfmon.exe
[-] 2004-08-03 . 24232996A38C0B0CF151C2140AE29FC8 . 15360 . . [5.1.2600.2180] . . c:\windows\system32\ctfmon.exe
[-] 2002-08-29 . 414DE7CF9D3F19C3EA902F1BB38EC116 . 13312 . . [5.1.2600.1106] . . c:\windows$NtServicePackUninstall$\ctfmon.exe

[-] 2008-04-14 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\regsvc.dll
[-] 2004-08-03 . 3151427DB7D87107D1C5BE58FAC53960 . 59904 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\regsvc.dll
[-] 2004-08-03 . 3151427DB7D87107D1C5BE58FAC53960 . 59904 . . [5.1.2600.2180] . . c:\windows\system32\regsvc.dll
[-] 2001-08-23 . 9DF4527D53613601D3F79946EAA1DCB1 . 51712 . . [5.1.2600.0] . . c:\windows$NtServicePackUninstall$\regsvc.dll

[-] 2008-04-14 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\schedsvc.dll
[-] 2004-08-03 . 92360854316611F6CC471612213C3D92 . 190976 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\schedsvc.dll
[-] 2004-08-03 . 92360854316611F6CC471612213C3D92 . 190976 . . [5.1.2600.2180] . . c:\windows\system32\schedsvc.dll
[-] 2004-06-08 . 08D72F6490CD85AA1C12EF3B56299936 . 172544 . . [5.1.2600.1564] . . c:\windows$NtServicePackUninstall$\schedsvc.dll
[-] 2002-08-29 . 719B05113003A1934EA25EA1FED68C85 . 159232 . . [5.1.2600.1106] . . c:\windows$NtUninstallKB841873$\schedsvc.dll

[-] 2008-04-14 . 1926899BF9FFE2602B63074971700412 . 135168 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\shsvcs.dll
[-] 2006-12-19 . 6815DEF9B810AEFAC107EEAF72DA6F82 . 134656 . . [6.00.2900.3051] . . c:\windows\system32\shsvcs.dll
[-] 2006-12-19 . 6815DEF9B810AEFAC107EEAF72DA6F82 . 134656 . . [6.00.2900.3051] . . c:\windows\system32\dllcache\shsvcs.dll
[-] 2006-12-19 . 53D9184A21C5CBF600D918E51EF3A7E5 . 135168 . . [6.00.2900.3051] . . c:\windows$hf_mig$\KB928255\SP2QFE\shsvcs.dll
[-] 2004-08-03 . E7518DC542D3EBDCB80EDD98462C7821 . 134656 . . [6.00.2900.2180] . . c:\windows$NtUninstallKB928255$\shsvcs.dll
[-] 2004-08-03 . E7518DC542D3EBDCB80EDD98462C7821 . 134656 . . [6.00.2900.2180] . . c:\windows\ServicePackFiles\i386\shsvcs.dll
[-] 2002-08-29 . 61684089A54936E40F65DA02D47A28AE . 116224 . . [6.00.2800.1106] . . c:\windows$NtServicePackUninstall$\shsvcs.dll

[-] 2008-04-14 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ssdpsrv.dll
[-] 2004-08-03 . 4B8D61792F7175BED48859CC18CE4E38 . 71680 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\ssdpsrv.dll
[-] 2004-08-03 . 4B8D61792F7175BED48859CC18CE4E38 . 71680 . . [5.1.2600.2180] . . c:\windows\system32\ssdpsrv.dll
[-] 2002-08-29 . 75B5821307B2F4491F9ED06732366872 . 43008 . . [5.1.2600.1106] . . c:\windows$NtServicePackUninstall$\ssdpsrv.dll

[-] 2008-04-14 . FF3477C03BE7201C294C35F684B3479F . 295424 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\termsrv.dll
[-] 2004-08-03 . B60C877D16D9C880B952FDA04ADF16E6 . 295424 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\termsrv.dll
[-] 2004-08-03 . B60C877D16D9C880B952FDA04ADF16E6 . 295424 . . [5.1.2600.2180] . . c:\windows\system32\termsrv.dll
[-] 2002-08-29 . FE84E045A09A4ABC4DEEF7270448B64E . 200192 . . [5.1.2600.1106] . . c:\windows$NtServicePackUninstall$\termsrv.dll

[-] 2008-04-14 . D8849F77C0B66226335A59D26CB4EDC6 . 167936 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\appmgmts.dll
[-] 2004-08-03 . 9C3C12975C97119412802B181FBEEFFE . 167936 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\appmgmt

bobbyno · Septembre 28, 2009, 6:37

bon, à votre avis? je formate?

bobbyno · Septembre 29, 2009, 9:51

Salut, petit état des lieux du pc ce matin, tjrs lent au demarrage, pas de son, pas possible de faire des copiers coller, pas possible de faire un glisser deposer et la protection symantec désactivée. Je desèspère…