Rapport RSIT pour freeze PC

matgap · Octobre 13, 2009, 7:53

Salut! Je post le rapport RSIT comme demandé ici par cricri58:

INFO.TXT
info.txt logfile of random’s system information tool 1.06 2009-10-13 19:47:16
======Uninstall list======

–>C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
–>MsiExec /X{1C4551A6-4743-4093-91E4-1477CD655043}
–>MsiExec.exe /I{9A346205-EA92-4406-B1AB-50379DA3F057}
–>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
3DMark06–>« C:\Program Files\InstallShield Installation Information{7F3AD00A-1819-4B15-BB7D-08B3586336D7}\setup.exe » -runfromtemp -l0x0009 -removeonly
3dsmax ancillary install–>MsiExec.exe /I{7C8B5E63-821A-4DFB-BDFA-19854D88EC5C}
Acrobat.com–>msiexec /qb /x {C86E7C99-E4AD-79C7-375B-1AEF9A91EC2B}
Acrobat.com–>MsiExec.exe /I{C86E7C99-E4AD-79C7-375B-1AEF9A91EC2B}
Adobe AIR–>C:\Program Files\Fichiers communs\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR–>MsiExec.exe /I{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}
Adobe Anchor Service CS4–>MsiExec.exe /I{1618734A-3957-4ADD-8199-F973763109A8}
Adobe Bridge CS4–>MsiExec.exe /I{83877DB1-8B77-45BC-AB43-2BAC22E093E0}
Adobe CMaps CS4–>MsiExec.exe /I{94D398EB-D2FD-4FD1-B8C4-592635E8A191}
Adobe Color - Photoshop Specific CS4–>MsiExec.exe /I{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}
Adobe Color EU Extra Settings CS4–>MsiExec.exe /I{5570C7F0-43D0-4916-8A9E-AEDD52FA86F4}
Adobe Color JA Extra Settings CS4–>MsiExec.exe /I{0D6013AB-A0C7-41DC-973C-E93129C9A29F}
Adobe Color NA Recommended Settings CS4–>MsiExec.exe /I{00ADFB20-AE75-46F4-AD2C-F48B15AC3100}
Adobe Color Video Profiles CS CS4–>MsiExec.exe /I{63C24A08-70F3-4C8E-B9FB-9F21A903801D}
Adobe Creative Suite 4 Design Premium–>C:\Program Files\Fichiers communs\Adobe\Installers\55230b0b70661df0f212e88f0b655f7\Setup.exe --uninstall=1
Adobe Creative Suite 4 Design Premium–>MsiExec.exe /I{A2881E09-38DB-4F79-9135-00FDA01768A7}
Adobe CSI CS4–>MsiExec.exe /I{0F723FC1-7606-4867-866C-CE80AD292DAF}
Adobe Default Language CS4–>MsiExec.exe /I{C52E3EC1-048C-45E1-8D53-10B0C6509683}
Adobe Dreamweaver CS4–>MsiExec.exe /I{30C8AA56-4088-426F-91D1-0EDFD3A25678}
Adobe Dynamiclink Support–>MsiExec.exe /I{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}
Adobe ExtendScript Toolkit CS4–>MsiExec.exe /I{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}
Adobe Extension Manager CS4–>MsiExec.exe /I{054EFA56-2AC1-48F4-A883-0AB89874B972}
Adobe Flash CS4 Extension - Flash Lite STI en–>MsiExec.exe /I{793D1D88-6141-43DE-BE58-59BCE31B4090}
Adobe Flash CS4 STI-en–>MsiExec.exe /I{2168245A-B5AD-40D8-A641-48E3E070B5B6}
Adobe Flash CS4–>MsiExec.exe /I{F6E99614-F042-4459-82B7-8B38B2601356}
Adobe Flash Player 10 ActiveX–>MsiExec.exe /X{3A6829EF-0791-4FDD-9382-C690DD0821B9}
Adobe Flash Player 10 Plugin–>C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Fonts All–>MsiExec.exe /I{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}
Adobe Linguistics CS4–>MsiExec.exe /I{931AB7EA-3656-4BB7-864D-022B09E3DD67}
Adobe Media Encoder CS4–>MsiExec.exe /I{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}
Adobe Media Player–>msiexec /qb /x {39F6E2B4-CFE8-C30A-66E8-489651F0F34C}
Adobe Media Player–>MsiExec.exe /I{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}
Adobe Output Module–>MsiExec.exe /I{BB4E33EC-8181-4685-96F7-8554293DEC6A}
Adobe PDF Library Files CS4–>MsiExec.exe /I{F93C84A6-0DC6-42AF-89FA-776F7C377353}
Adobe Photoshop CS4 Support–>MsiExec.exe /I{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}
Adobe Photoshop CS4–>MsiExec.exe /I{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}
Adobe Reader 9.1 - Français–>MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
Adobe Search for Help–>MsiExec.exe /I{F0E64E2E-3A60-40D8-A55D-92F6831875DA}
Adobe Service Manager Extension–>MsiExec.exe /I{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}
Adobe Setup–>MsiExec.exe /I{A128921B-D03F-4BFB-8141-C365AA48D660}
Adobe Type Support CS4–>MsiExec.exe /I{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}
Adobe Update Manager CS4–>MsiExec.exe /I{05308C4E-7285-4066-BAE3-6B50DA6ED755}
Adobe WinSoft Linguistics Plugin–>MsiExec.exe /I{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}
Adobe XMP Panels CS4–>MsiExec.exe /I{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}
AdobeColorCommonSetCMYK–>MsiExec.exe /I{68243FF8-83CA-466B-B2B8-9F99DA5479C4}
AdobeColorCommonSetRGB–>MsiExec.exe /I{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}
AIDA32 v3.93–>« C:\Program Files\AIDA32 - Personal System Information\unins000.exe »
Apple Application Support–>MsiExec.exe /I{0C34B801-6AEC-4667-B053-03A67E2D0415}
Apple Software Update–>MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Archiveur WinRAR–>D:\Winrar\uninstall.exe
Assistant de connexion Windows Live–>MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Autodesk 3ds Max 9 32-bit–>MsiExec.exe /I{E96D4088-AAC5-437F-9E39-EC0E387897B4}
Autodesk DWF Viewer 7–>MsiExec.exe /I{9A346205-EA92-4406-B1AB-50379DA3F057}
avast! Antivirus–>D:\Avast\aswRunDll.exe « D:\Avast\Setup\setiface.dll »,RunSetup
Backburner–>MsiExec.exe /I{3D347E6D-5A03-4342-B5BA-6A771885F379}
CDDRV_Installer–>MsiExec.exe /I{0C826C5B-B131-423A-A229-C71B3CACCD6A}
Choice Guard–>MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Connect–>MsiExec.exe /I{B29AD377-CC12-490A-A480-1452337C618D}
Correctif pour Windows XP (KB961118)–>« C:\WINDOWS$NtUninstallKB961118$\spuninst\spuninst.exe »
Correctif pour Windows XP (KB970653-v3)–>« C:\WINDOWS$NtUninstallKB970653-v3$\spuninst\spuninst.exe »
DAEMON Tools Toolbar–>C:\Program Files\DAEMON Tools Toolbar\uninst.exe
DeepBurner v1.9.0.228–>« D:\DeepBurner\Uninstall.exe » « D:\DeepBurner\install.log » -u
FBX Plugin 2006.08 for Max 9.0–>C:\Program Files\Autodesk\FBX\FbxPlugins\2006.08\Max90\Uninstall.exe
FileZilla Client 3.2.4.1–>D:\FileZilla FTP Client\uninstall.exe
Futuremark SystemInfo–>« C:\Program Files\InstallShield Installation Information{BEE64C14-BEF1-4610-8A68-A16EAA47B882}\setup.exe » -runfromtemp -l0x0009 -removeonly
HD Tune 2.55–>« D:\HD Tune\unins000.exe »
HijackThis 2.0.2–>« C:\Program Files\trend micro\HijackThis.exe » /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)–>C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=«  »
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)–>C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=«  »
HouseCall 6.6–>« C:\Documents and Settings\Administrateur\Application Data\HouseCall 6.6\uninstaller.exe »
Installation Windows Live–>C:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live–>MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
Java™ 6 Update 14–>MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216014FF}
KhalInstallWrapper–>MsiExec.exe /I{3101CB58-3482-4D21-AF1A-7057FC935355}
kuler–>MsiExec.exe /I{098727E1-775A-4450-B573-3F441F1CA243}
Logitech SetPoint–>« C:\Program Files\InstallShield Installation Information{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}\setup.exe » -runfromtemp -l0x040c -removeonly
Ma-Config.com–>MsiExec.exe /X{6C4D4FC0-467B-4BD7-8D11-50E49B2770D2}
Malwarebytes’ Anti-Malware–>« D:\Malwarebytes’ Anti-Malware\unins000.exe »
Microsoft .NET Framework 2.0 Service Pack 2–>MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2–>MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1–>C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1–>MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Visual C++ 2005 Redistributable–>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable–>MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Mise à jour de sécurité pour Lecteur Windows Media (KB968816)–>« C:\WINDOWS$NtUninstallKB968816_WM9$\spuninst\spuninst.exe »
Mise à jour de sécurité pour Lecteur Windows Media (KB973540)–>« C:\WINDOWS$NtUninstallKB973540_WM9$\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB969897)–>« C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)–>« C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB972260)–>« C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows XP (KB923561)–>« C:\WINDOWS$NtUninstallKB923561$\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows XP (KB923789)–>C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mise à jour de sécurité pour Windows XP (KB946648)–>« C:\WINDOWS$NtUninstallKB946648$\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows XP (KB954459)–>« C:\WINDOWS$NtUninstallKB954459$\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows XP (KB956744)–>« C:\WINDOWS$NtUninstallKB956744$\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows XP (KB956844)–>« C:\WINDOWS$NtUninstallKB956844$\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows XP (KB960859)–>« C:\WINDOWS$NtUninstallKB960859$\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows XP (KB961371)–>« C:\WINDOWS$NtUninstallKB961371$\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows XP (KB961501)–>« C:\WINDOWS$NtUninstallKB961501$\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows XP (KB968537)–>« C:\WINDOWS$NtUninstallKB968537$\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows XP (KB969897)–>« C:\WINDOWS$NtUninstallKB969897$\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows XP (KB969898)–>« C:\WINDOWS$NtUninstallKB969898$\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows XP (KB970238)–>« C:\WINDOWS$NtUninstallKB970238$\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows XP (KB971557)–>« C:\WINDOWS$NtUninstallKB971557$\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows XP (KB971633)–>« C:\WINDOWS$NtUninstallKB971633$\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows XP (KB971657)–>« C:\WINDOWS$NtUninstallKB971657$\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows XP (KB973346)–>« C:\WINDOWS$NtUninstallKB973346$\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows XP (KB973354)–>« C:\WINDOWS$NtUninstallKB973354$\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows XP (KB973507)–>« C:\WINDOWS$NtUninstallKB973507$\spuninst\spuninst.exe »
Mise à jour de sécurité pour Windows XP (KB973869)–>« C:\WINDOWS$NtUninstallKB973869$\spuninst\spuninst.exe »
Mise à jour pour Windows Internet Explorer 8 (KB971180)–>« C:\WINDOWS\ie8updates\KB971180-IE8\spuninst\spuninst.exe »
Mise à jour pour Windows Internet Explorer 8 (KB972636)–>« C:\WINDOWS\ie8updates\KB972636-IE8\spuninst\spuninst.exe »
Mise à jour pour Windows XP (KB951978)–>« C:\WINDOWS$NtUninstallKB951978$\spuninst\spuninst.exe »
Mise à jour pour Windows XP (KB968389)–>« C:\WINDOWS$NtUninstallKB968389$\spuninst\spuninst.exe »
Mise à jour pour Windows XP (KB973815)–>« C:\WINDOWS$NtUninstallKB973815$\spuninst\spuninst.exe »
Mozilla Firefox (3.0.14)–>D:\Firefox\uninstall\helper.exe
MSVCRT–>MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
NVIDIA Drivers–>C:\WINDOWS\system32\nvuninst.exe UninstallGUI
NVIDIA PhysX–>MsiExec.exe /X{1C4551A6-4743-4093-91E4-1477CD655043}
OpenAL–>« C:\Program Files\OpenAL\OpenALwEAX.exe » /U
Outil de téléchargement Windows Live–>MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
PDF Settings CS4–>MsiExec.exe /I{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}
Pen Tablet–>C:\Program Files\Tablet\Pen\Remove.exe /u
Photoshop Camera Raw–>MsiExec.exe /I{CC75AB5C-2110-4A7F-AF52-708680D22FE8}
Pixel Bender Toolkit–>MsiExec.exe /I{43509E18-076E-40FE-AF38-CA5ED400A5A9}
QuickTime–>MsiExec.exe /I{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}
REALTEK GbE & FE Ethernet PCI-E NIC Driver–>C:\Program Files\InstallShield Installation Information{C9BED750-1211-4480-B1A5-718A3BE15525}\setup.exe -runfromtemp -removeonly
Realtek High Definition Audio Driver–>RtlUpd.exe -r -m
Segoe UI–>MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Source Dedicated Server–>« D:\Steam\steam.exe » uninstall…
Source SDK Base - Orange Box–>« D:\Steam\steam.exe » uninstall…
Source SDK Base–>« D:\Steam\steam.exe » uninstall…
Source SDK–>« D:\Steam\steam.exe » uninstall…
SpeedFan (remove only)–>« C:\Program Files\SpeedFan\uninstall.exe »
Steam–>MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
Suite Shared Configuration CS4–>MsiExec.exe /I{842B4B72-9E8F-4962-B3C1-1C422A5C4434}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)–>C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=«  »
VLC media player 0.9.9–>D:\VLC\uninstall.exe
Windows Internet Explorer 8–>« C:\WINDOWS\ie8\spuninst\spuninst.exe »
Windows Live Call–>MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform–>MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Messenger–>MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows XP Service Pack 3–>« C:\WINDOWS$NtServicePackUninstall$\spuninst\spuninst.exe »

======Security center information======

AV: avast! antivirus 4.8.1351 [VPS 091012-0]

======System event log======

Computer Name: MATGAP
Event Code: 7036
Message: Le service Service COM de gravage de CD IMAPI est entré dans l’état : arrêté.

Record Number: 5756
Source Name: Service Control Manager
Time Written: 20090815120019.000000+120
Event Type: Informations
User:

Computer Name: MATGAP
Event Code: 7036
Message: Le service Explorateur d’ordinateur est entré dans l’état : arrêté.

Record Number: 5755
Source Name: Service Control Manager
Time Written: 20090815120017.000000+120
Event Type: Informations
User:

Computer Name: MATGAP
Event Code: 7036
Message: Le service Gestionnaire de connexions d’accès distant est entré dans l’état : en cours d’exécution.

Record Number: 5754
Source Name: Service Control Manager
Time Written: 20090815120017.000000+120
Event Type: Informations
User:

Computer Name: MATGAP
Event Code: 7036
Message: Le service Configuration automatique sans fil est entré dans l’état : en cours d’exécution.

Record Number: 5753
Source Name: Service Control Manager
Time Written: 20090815120016.000000+120
Event Type: Informations
User:

Computer Name: MATGAP
Event Code: 7036
Message: Le service Service de la passerelle de la couche Application est entré dans l’état : en cours d’exécution.

Record Number: 5752
Source Name: Service Control Manager
Time Written: 20090815120014.000000+120
Event Type: Informations
User:

=====Application event log=====

Computer Name: MATGAP
Event Code: 3
Message:
Record Number: 5
Source Name: RaySat_3dsmax9_32 Server
Time Written: 20091001202617.000000+120
Event Type: Informations
User:

Computer Name: MATGAP
Event Code: 3
Message:
Record Number: 4
Source Name: RaySat_3dsmax9_32 Server
Time Written: 20091001202617.000000+120
Event Type: Informations
User:

Computer Name: MATGAP
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 3
Source Name: SecurityCenter
Time Written: 20090930184642.000000+120
Event Type: Informations
User:

Computer Name: MATGAP
Event Code: 3
Message:
Record Number: 2
Source Name: RaySat_3dsmax9_32 Server
Time Written: 20090930184621.000000+120
Event Type: Informations
User:

Computer Name: MATGAP
Event Code: 3
Message:
Record Number: 1
Source Name: RaySat_3dsmax9_32 Server
Time Written: 20090930184621.000000+120
Event Type: Informations
User:

======Environment variables======

« ComSpec »=%SystemRoot%\system32\cmd.exe
« Path »=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\WBEM;D:\Autodesk\Backburner;C:\Program Files\Fichiers communs\Autodesk Shared;D:\QuickTime\QTSystem
« windir »=%SystemRoot%
« FP_NO_HOST_CHECK »=NO
« OS »=Windows_NT
« PROCESSOR_ARCHITECTURE »=x86
« PROCESSOR_LEVEL »=6
« PROCESSOR_IDENTIFIER »=x86 Family 6 Model 23 Stepping 10, GenuineIntel
« PROCESSOR_REVISION »=170a
« NUMBER_OF_PROCESSORS »=2
« PATHEXT »=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
« TEMP »=%SystemRoot%\TEMP
« TMP »=%SystemRoot%\TEMP
« CLASSPATH »=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
« QTJAVA »=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

-----------------EOF-----------------

LOG.TXT

Logfile of random’s system information tool 1.06 (written by random/random)
Run by Administrateur at 2009-10-13 19:47:09
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 3 GB (18%) free of 15 GB
Total RAM: 1023 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:47:15, on 13/10/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\Avast\aswUpdSv.exe
D:\Avast\ashServ.exe
C:\WINDOWS\Explorer.EXE
D:\Avast\ashDisp.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
D:\Adobe CS4\Acrobat 9.0\Acrobat\Acrotray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
D:\Steam\Steam.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Daemon tools\DAEMON Tools Lite\daemon.exe
D:\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
D:\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Pen_Tablet.exe
C:\WINDOWS\system32\WTablet\Pen_TabletUser.exe
C:\WINDOWS\system32\Pen_Tablet.exe
D:\Avast\ashMaiSv.exe
D:\Avast\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Java\jre6\bin\jucheck.exe
D:\Firefox\firefox.exe
C:\Documents and Settings\Administrateur\Bureau\RSIT.exe
C:\Program Files\trend micro\Administrateur.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.01net.com…
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = fr.ask.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = go.microsoft.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com…
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = go.microsoft.com…
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = www.01net.com… | www.telecharger.com…[/url] | [url=http://www.rmc.fr]www.rmc.fr…
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer fourni par IE 8 FOURNI PAR 01NET.COM
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d’aide de l’Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM..\Run: [avast!] D:\Avast\ashDisp.exe
O4 - HKLM..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM..\Run: [nwiz] nwiz.exe /install
O4 - HKLM..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] « C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe »
O4 - HKLM..\Run: [AdobeCS4ServiceManager] « C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe » -launchedbylogin
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] « D:\Adobe CS4\Acrobat 9.0\Acrobat\Acrobat_sl.exe »
O4 - HKLM..\Run: [Acrobat Assistant 8.0] « D:\Adobe CS4\Acrobat 9.0\Acrobat\Acrotray.exe »
O4 - HKLM..\Run: [SunJavaUpdateSched] « C:\Program Files\Java\jre6\bin\jusched.exe »
O4 - HKLM..\Run: [QuickTime Task] « D:\QuickTime\QTTask.exe » -atboottime
O4 - HKCU..\Run: [Steam] « D:\Steam\Steam.exe » -silent
O4 - HKCU..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU..\Run: [DAEMON Tools Lite] « D:\Daemon tools\DAEMON Tools Lite\daemon.exe » -autorun
O4 - HKCU..\RunOnce: [WiseStubReboot] MSIEXEC /quiet SKIP_PPU_DRIVER_INSTALL=1 /I « C:\Program Files\Fichiers communs\Wise Installation Wizard\WIS1C4551A64743409391E41477CD655043_9_09_0203.MSI » TRANSFORMS=« C:\Program Files\Fichiers communs\Wise Installation Wizard\WIS1C4551A64743409391E41477CD655043_9_09_0203.MST » WISE_SETUP_EXE_PATH=« c:\nvidia\winxp\185.85\is\PhysX_9.09.0408_SystemSoftware.exe »
O4 - Global Startup: Logitech SetPoint.lnk = D:\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Ajouter la cible du lien à un fichier PDF existant - C:\Program… Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Ajouter à un fichier PDF existant - C:\Program… Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir au format Adobe PDF - C:\Program… Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF - C:\Program… Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra ‹ Tools › menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra ‹ Tools › menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Avast\aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - D:\Avast\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Avast\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - D:\Avast\ashWebSv.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - D:\Ma-config.com\maconfservice.exe
O23 - Service: mental ray 3.5 Satellite (32-bit) (mi-raysat_3dsmax9_32) - Unknown owner - D:\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\WINDOWS\system32\Pen_Tablet.exe

–
End of file - 8027 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d’aide de l’Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java™ Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-08-15 41368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-08-15 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
« Kernel and Hardware Abstraction Layer »=C:\WINDOWS\KHALMNPR.EXE [2008-12-18 76304]
« avast! »=D:\Avast\ashDisp.exe [2009-08-17 81000]
« High Definition Audio Property Page Shortcut »=C:\WINDOWS\system32\HDAShCut.exe [2004-10-27 61952]
« RTHDCPL »=C:\WINDOWS\RTHDCPL.EXE [2008-02-13 16857600]
« Alcmtr »=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
« NvCplDaemon »=C:\WINDOWS\system32\NvCpl.dll [2009-05-01 13750272]
« nwiz »=nwiz.exe /install
« NvMediaCenter »=C:\WINDOWS\system32\NvMcTray.dll [2009-05-01 86016]
« Adobe Reader Speed Launcher »=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
« AdobeCS4ServiceManager »=C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
« Adobe Acrobat Speed Launcher »=D:\Adobe CS4\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232]
« »=
« Acrobat Assistant 8.0 »=D:\Adobe CS4\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376]
« SunJavaUpdateSched »=C:\Program Files\Java\jre6\bin\jusched.exe [2009-08-15 148888]
« QuickTime Task »=D:\QuickTime\QTTask.exe [2009-09-05 417792]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
« Steam »=D:\Steam\Steam.exe [2009-06-11 1217784]
« ctfmon.exe »=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
« DAEMON Tools Lite »=D:\Daemon tools\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
« WiseStubReboot »=MSIEXEC /quiet SKIP_PPU_DRIVER_INSTALL=1 /I C:\Program Files\Fichiers communs\Wise Installation Wizard\WIS1C4551A64743409391E41477CD655043_9_09_0203.MSI TRANSFORMS=C:\Program Files\Fichiers communs\Wise Installation Wizard\WIS1C4551A64743409391E41477CD655043_9_09_0203.MST WISE_SETUP_EXE_PATH=c:\nvidia\winxp\185.85\is\PhysX_9.09.0408_SystemSoftware.exe

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Logitech SetPoint.lnk - D:\Logitech\SetPoint\SetPoint.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\fichiers communs\logishrd\bluetooth\LBTWlgn.dll [2009-02-19 72208]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
« dontdisplaylastusername »=0
« legalnoticecaption »=
« legalnoticetext »=
« shutdownwithoutlogon »=1
« undockwithoutlogon »=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
« NoDriveTypeAutoRun »=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
« HonorAutoRunSetting »=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
« %windir%\system32\sessmgr.exe »=« %windir%\system32\sessmgr.exe::enabled:@xpsp2res.dll,-22019"
« C:\Program Files\Windows Live\Messenger\wlcsdk.exe »="C:\Program Files\Windows Live\Messenger\wlcsdk.exe::Enabled:Windows Live Call »
« D:\µTorrent\uTorrent.exe »=« D:\µTorrent\uTorrent.exe::Enabled:µTorrent"
« D:\Steam\Steam.exe »="D:\Steam\Steam.exe::Enabled:Steam »
« D:\Steam\steamapps\matgap\team fortress 2\hl2.exe »=« D:\Steam\steamapps\matgap\team fortress 2\hl2.exe::Enabled:hl2"
« D:\Autodesk\3ds Max 9\3dsmax.exe »="D:\Autodesk\3ds Max 9\3dsmax.exe::Enabled:Autodesk 3ds Max 9 32-bit »
« D:\Autodesk\Backburner\monitor.exe »=« D:\Autodesk\Backburner\monitor.exe::Enabled:backburner 2.3 monitor"
« D:\Autodesk\Backburner\manager.exe »="D:\Autodesk\Backburner\manager.exe::Enabled:backburner 2.3 manager »
« D:\Autodesk\Backburner\server.exe »=« D:\Autodesk\Backburner\server.exe::Enabled:backburner 2.3 server"
« %windir%\Network Diagnostic\xpnetdiag.exe »="%windir%\Network Diagnostic\xpnetdiag.exe::Enabled:@xpsp3res.dll,-20000 »
« C:\Program Files\Windows Live\Messenger\msnmsgr.exe »=« C:\Program Files\Windows Live\Messenger\msnmsgr.exe::Enabled:Windows Live Messenger"
« D:\Ma-config.com\maconfservice.exe »=« D:\Ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice »
« C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe »="C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe::Enabled:Adobe CSI CS4 »
« D:\Steam\steamapps\common\left 4 dead\left4dead.exe »=« D:\Steam\steamapps\common\left 4 dead\left4dead.exe:*:Enabled:Left 4 Dead »

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
« %windir%\system32\sessmgr.exe »=« %windir%\system32\sessmgr.exe::enabled:@xpsp2res.dll,-22019"
« C:\Program Files\Windows Live\Messenger\wlcsdk.exe »="C:\Program Files\Windows Live\Messenger\wlcsdk.exe::Enabled:Windows Live Call »
« %windir%\Network Diagnostic\xpnetdiag.exe »=« %windir%\Network Diagnostic\xpnetdiag.exe::Enabled:@xpsp3res.dll,-20000"
« C:\Program Files\Windows Live\Messenger\msnmsgr.exe »="C:\Program Files\Windows Live\Messenger\msnmsgr.exe::Enabled:Windows Live Messenger »

======List of files/folders created in the last 1 months======

2009-10-13 19:47:09 ----D---- C:\rsit
2009-10-13 19:47:09 ----D---- C:\Program Files\trend micro
2009-10-12 19:55:39 ----D---- C:\Documents and Settings\Administrateur\Application Data\HouseCall 6.6
2009-10-10 19:10:52 ----D---- C:\Program Files\SpeedFan
2009-10-10 12:47:00 ----D---- C:\Program Files\OpenAL
2009-10-10 12:47:00 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2009-10-10 12:47:00 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2009-10-10 12:45:57 ----D---- C:\WINDOWS\system32\Futuremark
2009-10-10 12:45:57 ----D---- C:\Program Files\Fichiers communs\Futuremark Shared
2009-10-10 12:44:41 ----D---- C:\WINDOWS\system32\appmgmt
2009-10-10 12:43:22 ----D---- C:\Program Files\Futuremark
2009-10-10 12:12:32 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2009-10-10 12:12:31 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2009-10-10 12:12:31 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2009-10-10 12:12:31 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2009-10-10 12:12:30 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2009-10-10 12:12:30 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2009-10-10 12:12:30 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2009-10-10 12:12:29 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2009-10-10 12:12:29 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2009-10-10 12:12:29 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2009-10-10 12:12:28 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2009-10-10 12:12:28 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2009-10-10 12:12:28 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2009-10-10 12:12:27 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2009-10-10 12:12:27 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2009-10-10 12:12:27 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2009-10-10 12:12:26 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2009-10-10 12:12:26 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2009-10-10 12:12:26 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2009-10-10 12:12:26 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2009-10-10 12:12:25 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2009-10-10 12:12:25 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2009-10-10 12:12:25 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2009-10-10 12:12:24 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2009-10-10 12:12:24 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2009-10-10 12:12:24 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2009-10-10 12:12:24 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2009-10-10 12:12:23 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2009-10-10 12:12:23 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2009-10-10 12:12:23 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2009-10-10 12:12:23 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2009-10-10 12:12:22 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2009-10-10 12:12:22 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2009-10-10 12:12:22 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2009-10-10 12:12:21 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2009-10-10 12:12:21 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2009-10-10 12:12:21 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2009-10-10 12:12:20 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2009-10-10 12:12:20 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2009-10-10 12:12:20 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2009-10-10 12:12:19 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2009-10-10 12:12:19 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2009-10-10 12:12:19 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2009-10-10 12:12:18 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2009-10-10 12:12:18 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2009-10-10 12:12:17 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2009-10-10 12:12:17 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2009-10-10 12:12:17 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2009-10-10 12:12:16 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2009-10-10 12:12:16 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2009-10-10 12:12:16 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2009-10-10 12:12:16 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2009-10-10 12:12:15 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2009-10-10 12:12:15 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2009-10-10 12:12:14 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2009-10-10 12:12:14 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2009-10-10 12:12:13 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2009-10-10 12:12:13 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2009-10-10 12:12:12 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2009-10-10 12:12:12 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2009-10-10 12:12:12 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2009-10-10 12:12:11 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2009-10-10 12:12:11 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2009-10-10 12:12:11 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2009-10-10 12:12:11 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2009-10-10 12:12:11 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2009-10-10 12:12:10 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2009-10-10 12:12:10 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2009-10-10 12:12:10 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2009-10-10 12:12:07 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2009-10-10 12:12:07 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2009-10-10 12:12:07 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2009-10-10 12:12:06 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2009-10-10 12:12:06 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2009-10-10 12:12:06 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2009-10-10 12:12:05 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2009-10-10 12:12:05 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2009-10-10 12:12:05 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2009-10-10 12:10:55 ----D---- C:\WINDOWS\Logs
2009-10-06 19:48:29 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer
2009-10-06 19:48:15 ----D---- C:\Program Files\Fichiers communs\Apple
2009-10-06 19:48:07 ----D---- C:\Program Files\Apple Software Update
2009-10-06 19:48:07 ----D---- C:\Documents and Settings\All Users\Application Data\Apple
2009-09-24 21:06:17 ----D---- C:\WINDOWS\pss
2009-09-24 21:03:41 ----D---- C:\Documents and Settings\Administrateur\Application Data\DeepBurner
2009-09-16 20:25:31 ----HDC---- C:\WINDOWS$NtUninstallKB968816_WM9$
2009-09-16 20:25:28 ----HDC---- C:\WINDOWS$NtUninstallKB956844$

======List of files/folders modified in the last 1 months======

2009-10-13 19:47:09 ----RD---- C:\Program Files
2009-10-13 18:50:23 ----D---- C:\WINDOWS\Temp
2009-10-13 18:50:12 ----D---- C:\WINDOWS\system32\CatRoot2
2009-10-13 18:50:10 ----D---- C:\Documents and Settings\Administrateur\Application Data\WTablet
2009-10-12 23:09:15 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-10-12 22:22:10 ----D---- C:\WINDOWS\Prefetch
2009-10-12 20:11:40 ----SHD---- C:\WINDOWS\Installer
2009-10-12 20:01:07 ----D---- C:\WINDOWS\system32\drivers
2009-10-12 18:34:58 ----D---- C:\WINDOWS
2009-10-11 15:07:18 ----D---- C:\Documents and Settings\Administrateur\Application Data\dvdcss
2009-10-11 14:37:26 ----D---- C:\Documents and Settings\Administrateur\Application Data\Adobe
2009-10-11 13:56:23 ----D---- C:\WINDOWS\system32
2009-10-11 13:45:16 ----D---- C:\Documents and Settings\Administrateur\Application Data\uTorrent
2009-10-10 18:44:05 ----HD---- C:\WINDOWS\inf
2009-10-10 12:45:57 ----D---- C:\Program Files\Fichiers communs
2009-10-10 12:45:56 ----HD---- C:\Program Files\InstallShield Installation Information
2009-10-10 12:44:39 ----SD---- C:\WINDOWS\Tasks
2009-10-10 12:12:35 ----D---- C:\WINDOWS\system32\DirectX
2009-10-10 12:12:10 ----RSD---- C:\WINDOWS\assembly
2009-10-10 12:12:02 ----D---- C:\WINDOWS\Microsoft.NET
2009-09-22 19:41:46 ----SD---- C:\Documents and Settings\Administrateur\Application Data\Microsoft
2009-09-16 20:25:33 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-09-16 20:25:30 ----A---- C:\WINDOWS\imsins.BAK
2009-09-16 20:25:28 ----HD---- C:\WINDOWS$hf_mig$
2009-09-16 20:25:21 ----D---- C:\WINDOWS\ie8updates
2009-09-16 20:25:01 ----D---- C:\WINDOWS\system32\CatRoot

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-08-17 26944]
R1 AsIO;AsIO; C:\WINDOWS\system32\drivers\AsIO.sys [2004-10-14 4962]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-08-17 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-08-17 51376]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-08-17 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-08-17 94160]
R2 LBeepKE;LBeepKE; C:\WINDOWS\System32\Drivers\LBeepKE.sys [2008-12-18 10384]
R2 tmcomm;tmcomm; ??\C:\WINDOWS\system32\drivers\tmcomm.sys
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-08-17 23152]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-02-14 4676096]
R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys [2008-12-18 20240]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2008-12-18 35472]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2008-12-18 37392]
R3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\WINDOWS\System32\Drivers\LUsbFilt.Sys [2008-12-18 28816]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-04-30 8055584]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-04-23 141568]
R3 usbehci;Pilote miniport de contrôleur d’hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 wacommousefilter;Wacom Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\wacommousefilter.sys [2007-02-16 11312]
R3 wacomvhid;Wacom Virtual Hid Driver; C:\WINDOWS\system32\DRIVERS\wacomvhid.sys [2008-01-15 13480]
R3 WacomVKHid;Virtual Keyboard Driver; C:\WINDOWS\system32\DRIVERS\WacomVKHid.sys [2007-02-16 11440]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 aarj0ys1;aarj0ys1; C:\WINDOWS\system32\drivers\aarj0ys1.sys
S3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys
S3 AEAudioService;AEAudio Service; C:\WINDOWS\system32\drivers\AEAudio.sys
S3 cpuz130;cpuz130; ??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys
S3 driverhardwarev2;driverhardwarev2; ??\D:\Ma-config.com\Drivers\driverhardwarev2.sys
S3 ENTECH;ENTECH; ??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys
S3 GMSIPCI;GMSIPCI; ??\G:\INSTALL\GMSIPCI.SYS
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\HdAudio.sys [2004-10-27 145920]
S3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
S3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 W8335XP;802.11g Wireless PC Card/PCI Adapter; C:\WINDOWS\system32\DRIVERS\MRV8335XP.sys
S3 wacmoumonitor;Wacom Mode Helper; C:\WINDOWS\system32\DRIVERS\wacmoumonitor.sys [2008-03-17 15144]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; D:\Avast\aswUpdSv.exe [2009-08-17 18752]
R2 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe [2009-06-09 72704]
R2 avast! Antivirus;avast! Antivirus; D:\Avast\ashServ.exe [2009-08-17 138680]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-08-15 152984]
R2 mi-raysat_3dsmax9_32;mental ray 3.5 Satellite (32-bit); D:\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe [2006-09-29 65536]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-05-01 168004]
R2 TabletServicePen;TabletServicePen; C:\WINDOWS\system32\Pen_Tablet.exe [2008-05-02 3032360]
R3 avast! Mail Scanner;avast! Mail Scanner; D:\Avast\ashMaiSv.exe [2009-08-17 254040]
R3 avast! Web Scanner;avast! Web Scanner; D:\Avast\ashWebSv.exe [2009-08-17 352920]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-08-08 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Fichiers communs\Logishrd\Bluetooth\LBTServ.exe [2009-02-19 121360]
S3 maconfservice;Ma-Config Service; D:\Ma-config.com\maconfservice.exe [2009-05-29 234864]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

cricri58 · Octobre 13, 2009, 9:44

Re

télécharges → Malwarebytes’ (mbam)

Malwarebytes’ (mbam)

installes + mise a jour
et
Redémarre en « Mode sans échec »

tapote sur la touche F8 jusqu’à l’affichage du menu des options avancées de Windows, et sélectionne « Mode sans échec ».
Choisis ta session habituelle

Lances–> Malwarebytes (MBAM)
==> Puis vas dans l’onglet « Recherche », coche « Exécuter un examen complet » puis « Rechercher »
==> Sélectionnes tes disques durs" puis clique sur « Lancer lexamen »
==> A la fin du scan, clique sur Afficher les résultats puis sur Enregistrer le rapport
==> Suppression des éléments détectés → cliques sur Supprimer la sélection==>Important à faire
=> S’il t’ es demandé de redémarrer, clique sur "oui "

aprés la suppression(s) de ou des infections trouvées → poste le rapport ici

ensuite

télécharge GenProc sur ton bureau
==> GenProc

dézippe le dossier, double-clique sur GenProc.bat

réponds " oui" à la fenêtre qui apparait

poste le contenu du rapport qui s’ouvre

@+ cricri58

matgap · Octobre 14, 2009, 8:57

Hello! Déjà merci pour ton aide! Je viens de finir toutes les analyses. GenProc me proposait de télécharger Ccleaner et ToolBarSD.exe. Voici les différents rapports:

Malwarebytes.txt

Ccleaner.txt

ToolBarSD.txt

Petite précision…je viens de retester et ca freeze toujours. Et je remarque qu’en fait mon PC « freezote » puis freeze vraiment au début de mes parties de jeu vidéo.
Peut-être est-ce un indice…Quel matériel est soumis à rude épreuve au lancement d’un jeu?
Edité le 14/10/2009 à 21:21

cricri58 · Octobre 14, 2009, 10:48

Salut

Poste un nouveau log RSIT

matgap · Octobre 15, 2009, 8:12

Le voici…

Rapport RSIT

cricri58 · Octobre 15, 2009, 5:37

salut

1)Télécharge JavaRa (de Paul McLain et Fred de Vries)

JavaRa (de Paul McLain et Fred de Vries)

 Décompresse le fichier sur ton Bureau (clic droit > Extraire tout)
 Double-clique sur le répertoire JavaRa obtenu.
 Puis double-clique sur le fichier JavaRa.exe (le .exe peut ne pas s'afficher)
 Clique sur Effacer les anciennes versions
 Clique sur Oui pour confirmer. L'outil va travailler, clique ensuite sur Ok, puis une deuxième fois sur Ok
 Ferme l'application.
 Poste le contenu de C:\JavaRa.log

aprés

2)télécharge GenProc sur ton bureau

==>[GenProc[/url]]www.alt-shift-return.org…]( [url=http://www.alt-shift-return.org/Info/Fichiers/GenProc.zip)

dézippe le dossier, double-clique sur GenProc.bat

réponds " oui" à la fenêtre qui apparait

poste le contenu du rapport qui s’ouvre

ensuite pour terminer

Télécharge DllCompare

==>DllCompare

Ouvres DllCompare, vérifie que *.DLL ==> sélectionner en haut à droite.

Appuye sur [Run Locate] et ensuite [Compare] pour:

C:\WINDOWS\system32 et C:\WINDOWS

et refais cela en changeant *.DLL pour *.EXE =>en haut à droite

que le scan est fini, clique sur le bouton « Make a Log of what was found »

et réponds " oui"

==> Copie les rapports obtenus

@+ cricri58

matgap · Octobre 15, 2009, 7:51

Hello! Voici les rapports…

JavaRa.log

GenProc.txt

DllCompare.txt

cricri58 · Octobre 15, 2009, 8:16

Re

1)Télécharge Winsockxpfix

sur ton bureau sans l executer au cas tu en aurai besoin aprés

==>Winsockxpfix

ensuite

Désactives ton antivirus et antispyware

Télécharge Combofix

==>ComboFix

==>sur ton Bureau(et pas ailleurs) et renomme le avant qu’il vienne sur ton bureau.
pour ce faire fait un clic droit sur Combofix.exe ,choisis « enregistrer la cible du lien sous… » et renomme le en==>matgap.com
==> et pour l’emplacement choisis ton bureau et cliques sur « enregistrer »
Fermez toutes les fenêtres ouvertes

Double clique==> matgap.com ==>(Fichier renommé)
Tapes sur la touche1 pour démarrer le scan et suis les instructions indiquées par combofix.
Lorsque le scan sera terminé, un rapport apparaîtra. Copie/colle ce rapport ici même.
==>Le rapport se trouve également ici : C:\Combofix.txt
==> tu ne devras pas cliquer dans la fenêtre de Combofix pendant l’analyse ; ceci provoquerait le blocage du programme.

Réactives ton antivirus et antispyware

poste le rapport

PS
si ta connexion internet n’est plus active après le redémarrage

Windows XP ==>Fais un double clic sur le fichier de WinsockXPFix
clique sur « Fix » au cas faudra faire une réparation manuelle image ci dessous

http://i34.tinypic.com/ml17cj.jpg

cricri58

matgap · Octobre 15, 2009, 8:43

ComboFix 09-10-15.01 - Administrateur 15/10/2009 20:37.1.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.1023.633 [GMT 2:00]
Lancé depuis: c:\documents and settings\Administrateur\Bureau\matgap.com
AV: avast! antivirus 4.8.1351 [VPS 091014-0] On-access scanning disabled (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32_000006_.tmp.dll
c:\windows\system32_000007_.tmp.dll
c:\windows\system32_000008_.tmp.dll
c:\windows\system32_000009_.tmp.dll
c:\windows\system32_000010_.tmp.dll

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-09-15 au 2009-10-15 ))))))))))))))))))))))))))))))))))))
.

2009-10-14 21:12 . 2009-10-14 21:16 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Vidalia
2009-10-14 20:50 . 2009-10-14 21:16 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Tor
2009-10-14 20:50 . 2009-10-14 21:08 -------- d-----w- c:\program files\Vidalia Bundle
2009-10-14 18:40 . 2009-10-14 18:42 -------- d-----w- C:\ToolBar SD
2009-10-14 16:49 . 2009-10-14 16:49 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Malwarebytes
2009-10-13 17:47 . 2009-10-15 06:10 -------- d-----w- c:\program files\trend micro
2009-10-13 17:47 . 2009-10-13 17:47 -------- d-----w- C:\rsit
2009-10-12 18:01 . 2007-12-24 15:37 138384 ----a-w- c:\windows\system32\drivers\tmcomm.sys
2009-10-10 17:10 . 2009-10-14 21:56 -------- d-----w- c:\program files\SpeedFan
2009-10-10 11:59 . 2009-10-10 11:59 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Apple
2009-10-10 10:45 . 2009-10-10 10:45 -------- d-----w- c:\windows\system32\Futuremark
2009-10-10 10:45 . 2009-10-10 10:45 -------- d-----w- c:\program files\Fichiers communs\Futuremark Shared
2009-10-10 10:45 . 2008-09-17 12:14 27672 ----a-r- c:\windows\system32\drivers\Entech.sys
2009-10-10 10:43 . 2009-10-10 10:43 -------- d-----w- c:\program files\Futuremark
2009-10-10 10:10 . 2009-10-10 10:10 -------- d-----w- c:\windows\Logs
2009-10-06 17:48 . 2009-10-06 17:48 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2009-10-06 17:48 . 2009-10-06 17:48 -------- d-----w- c:\program files\Fichiers communs\Apple
2009-10-06 17:48 . 2009-10-06 17:48 -------- d-----w- c:\documents and settings\Administrateur\Local Settings\Application Data\Apple
2009-10-06 17:48 . 2009-10-06 17:48 -------- d-----w- c:\program files\Apple Software Update
2009-10-06 17:48 . 2009-10-06 17:48 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple
2009-10-06 17:47 . 2009-10-06 17:47 -------- d-----w- c:\documents and settings\Administrateur\Local Settings\Application Data\Apple Computer
2009-09-24 19:03 . 2009-09-24 19:06 -------- d-----w- c:\documents and settings\Administrateur\Application Data\DeepBurner
2009-09-16 18:12 . 2009-09-16 18:12 -------- d-----w- c:\documents and settings\Mat\Application Data\WTablet
2009-09-16 18:12 . 2009-09-16 18:12 -------- d-sh–w- c:\documents and settings\Mat\IETldCache
2009-09-16 16:59 . 2009-06-21 21:47 153088 -c----w- c:\windows\system32\dllcache\triedit.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-15 18:35 . 2009-08-01 11:17 -------- d-----w- c:\documents and settings\Administrateur\Application Data\FileZilla
2009-10-15 16:45 . 2009-08-01 11:48 -------- d-----w- c:\documents and settings\Administrateur\Application Data\WTablet
2009-10-14 18:32 . 2001-08-28 12:00 80748 ----a-w- c:\windows\system32\perfc00C.dat
2009-10-14 18:32 . 2001-08-28 12:00 500900 ----a-w- c:\windows\system32\perfh00C.dat
2009-10-11 13:07 . 2009-08-08 16:25 -------- d-----w- c:\documents and settings\Administrateur\Application Data\dvdcss
2009-10-11 11:45 . 2009-05-16 11:53 -------- d-----w- c:\documents and settings\Administrateur\Application Data\uTorrent
2009-10-10 10:45 . 2009-05-16 09:43 -------- d–h–w- c:\program files\InstallShield Installation Information
2009-09-10 12:54 . 2009-05-28 12:17 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-10 12:53 . 2009-05-28 12:17 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-04 15:44 . 2009-10-10 10:12 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
2009-09-04 15:44 . 2009-10-10 10:12 238936 ----a-w- c:\windows\system32\xactengine3_5.dll
2009-09-04 15:44 . 2009-10-10 10:12 69464 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2009-09-04 15:29 . 2009-10-10 10:12 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2009-09-04 15:29 . 2009-10-10 10:12 235344 ----a-w- c:\windows\system32\d3dx11_42.dll
2009-09-04 15:29 . 2009-10-10 10:12 5501792 ----a-w- c:\windows\system32\d3dcsx_42.dll
2009-09-04 15:29 . 2009-10-10 10:12 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll
2009-09-04 15:29 . 2009-10-10 10:12 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2009-08-17 16:10 . 2009-05-16 09:55 1279456 ----a-w- c:\windows\system32\aswBoot.exe
2009-08-17 16:06 . 2009-05-16 09:55 93392 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-08-17 16:06 . 2009-05-16 09:55 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-08-17 16:05 . 2009-05-16 09:55 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-08-17 16:05 . 2009-05-16 09:55 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-08-17 16:04 . 2009-05-16 09:55 51376 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-08-17 16:04 . 2009-05-16 09:55 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-08-17 16:03 . 2009-05-16 09:55 26944 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-08-17 16:02 . 2009-05-16 09:55 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-08-15 17:51 . 2009-05-16 10:39 17144 ----a-w- c:\documents and settings\Administrateur\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-08-15 17:23 . 2009-08-15 17:23 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-08-08 10:40 . 2009-08-08 10:40 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-08-05 09:00 . 2004-08-19 14:09 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-07-17 19:03 . 2004-08-19 14:09 58880 ----a-w- c:\windows\system32\atl.dll
.

------- Sigcheck -------

[-] 2008-04-14 . 06B54A7B1EF7CB16BFD0E208D343FA71 . 77824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\browser.dll
[-] 2008-04-14 . 06B54A7B1EF7CB16BFD0E208D343FA71 . 77824 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\browser.dll
[-] 2008-04-14 . 06B54A7B1EF7CB16BFD0E208D343FA71 . 77824 . . [5.1.2600.5512] . . c:\windows\system32\browser.dll
[-] 2004-08-19 . 75AC49029966BFFEA09F96C1C194F684 . 77312 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\browser.dll

[-] 2008-04-14 . B4AA331468315B6A174C3F0D5B3BC135 . 617472 . . [5.82] . . c:\windows\ServicePackFiles\i386\comctl32.dll
[-] 2008-04-14 . B4AA331468315B6A174C3F0D5B3BC135 . 617472 . . [5.82] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\comctl32.dll
[-] 2008-04-14 . B4AA331468315B6A174C3F0D5B3BC135 . 617472 . . [5.82] . . c:\windows\system32\comctl32.dll
[-] 2008-04-14 . F92E6BEA9349D49341383F8403B4DFE5 . 1054208 . . [6.0] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\asms\60\msft\windows\common\controls\comctl32.dll
[-] 2008-04-14 . F92E6BEA9349D49341383F8403B4DFE5 . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
[-] 2006-08-25 . 9724ECD4529AF317DD5BD6194EB6428C . 925184 . . [6.0] . . c:\windows\SoftwareDistribution\Download\3b9bbc7d361970b826a6eb88174757a3\sp1qfe\asms\60\msft\windows\common\controls\comctl32.dll
[-] 2006-08-25 . 5BBCD65CFD7610F36BCA96B72BBAED4B . 617472 . . [5.82] . . c:\windows\SoftwareDistribution\Download\3b9bbc7d361970b826a6eb88174757a3\sp2qfe\comctl32.dll
[-] 2006-08-25 . 47ABF878B9AEC81B23BA5F89DE597B3A . 1054208 . . [6.0] . . c:\windows\SoftwareDistribution\Download\3b9bbc7d361970b826a6eb88174757a3\sp2qfe\asms\60\msft\windows\common\controls\comctl32.dll
[-] 2006-08-25 . 47ABF878B9AEC81B23BA5F89DE597B3A . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
[-] 2006-03-17 . 83F339913E0DC8CC16566D48C8310B13 . 925184 . . [6.0] . . c:\windows\SoftwareDistribution\Download\a124f301bc107cfa919de4d98c0ac25b\sp1qfe\asms\60\msft\windows\common\controls\comctl32.dll
[-] 2005-08-31 . 7BCD276EEE605DF05B160DBD265DEB05 . 925184 . . [6.0] . . c:\windows\SoftwareDistribution\Download\a20dc986c94132560aec16a0ce3c192a\sp1qfe\asms\60\msft\windows\common\controls\comctl32.dll
[-] 2004-08-19 . 7D3AA1F0E765054CB5F30114F2DB6888 . 611328 . . [5.82] . . c:\windows$NtServicePackUninstall$\comctl32.dll
[-] 2004-08-19 . 7B5D86AF13CEF261180CC0F3BF094366 . 1050624 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
[-] 2001-08-28 . AEF3D788DBF40C7C4D204EA45EB0C505 . 921088 . . [6.0] . . c:\windows\WinSxS\InstallTemp\72133\comctl32.dll
[-] 2001-08-28 . AEF3D788DBF40C7C4D204EA45EB0C505 . 921088 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll

[-] 2008-04-14 . 7A6D0B71035E123FDDA2156A25578AD3 . 62464 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\cryptsvc.dll
[-] 2008-04-14 . 7A6D0B71035E123FDDA2156A25578AD3 . 62464 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\cryptsvc.dll
[-] 2008-04-14 . 7A6D0B71035E123FDDA2156A25578AD3 . 62464 . . [5.1.2600.5512] . . c:\windows\system32\cryptsvc.dll
[-] 2004-08-19 . CD73133EB24C572019944001FAD1B8D9 . 60416 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\cryptsvc.dll

[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\asyncmac.sys
[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\asyncmac.sys
[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\system32\drivers\asyncmac.sys
[-] 2004-08-03 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\asyncmac.sys

[-] 2001-08-28 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\dllcache\beep.sys
[-] 2001-08-28 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\drivers\beep.sys

[-] 2008-04-14 . 16813155807C6881F4BFBF6657424659 . 25216 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kbdclass.sys
[-] 2008-04-14 . 16813155807C6881F4BFBF6657424659 . 25216 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\kbdclass.sys
[-] 2008-04-14 . 16813155807C6881F4BFBF6657424659 . 25216 . . [5.1.2600.5512] . . c:\windows\system32\drivers\kbdclass.sys
[-] 2004-08-19 . E798705E8DC7FAB596EF6BFDF167E007 . 25216 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\kbdclass.sys

[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ndis.sys
[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\ndis.sys
[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ndis.sys
[-] 2004-08-03 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\ndis.sys

[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntfs.sys
[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\ntfs.sys
[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ntfs.sys
[-] 2007-02-09 . 05AB81909514BFD69CBB1F2C147CF6B9 . 574976 . . [5.1.2600.3081] . . c:\windows$hf_mig$\KB930916\SP2QFE\ntfs.sys
[-] 2007-02-09 . 05AB81909514BFD69CBB1F2C147CF6B9 . 574976 . . [5.1.2600.3081] . . c:\windows\SoftwareDistribution\Download\e3bd9b90b867ba67afdd4c29dc49177c\sp2qfe\ntfs.sys
[-] 2007-02-09 . 19A811EF5F1ED5C926A028CE107FF1AF . 574464 . . [5.1.2600.3081] . . c:\windows\SoftwareDistribution\Download\e3bd9b90b867ba67afdd4c29dc49177c\sp2gdr\ntfs.sys
[-] 2004-08-03 . B78BE402C3F63DD55521F73876951CDD . 574592 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\ntfs.sys

[-] 2001-08-28 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\dllcache\null.sys
[-] 2001-08-28 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\drivers\null.sys

[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows$hf_mig$\KB951748\SP3GDR\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[-] 2008-06-20 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394] . . c:\windows$NtServicePackUninstall$\tcpip.sys
[-] 2008-06-20 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394] . . c:\windows$hf_mig$\KB951748\SP2QFE\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\tcpip.sys

[-] 2008-07-07 20:31 . A5B1B7C76134329AA7547F6E6DA35410 . 253952 . . [2001.12.4414.320] . . c:\windows$NtServicePackUninstall$\es.dll
[-] 2008-07-07 20:28 . EC16AE9B37EACF871629227A3F3913FD . 253952 . . [2001.12.4414.706] . . c:\windows$hf_mig$\KB950974\SP3GDR\es.dll
[-] 2008-07-07 20:28 . EC16AE9B37EACF871629227A3F3913FD . 253952 . . [2001.12.4414.706] . . c:\windows\system32\es.dll
[-] 2008-07-07 20:28 . EC16AE9B37EACF871629227A3F3913FD . 253952 . . [2001.12.4414.706] . . c:\windows\system32\dllcache\es.dll
[-] 2008-07-07 20:24 . 157F9C595FD0D10502497DC4C1348D17 . 253952 . . [2001.12.4414.706] . . c:\windows$hf_mig$\KB950974\SP3QFE\es.dll
[-] 2008-07-07 20:18 . 74ECF4DDC685BD3249CAB323405FCC49 . 253952 . . [2001.12.4414.320] . . c:\windows$hf_mig$\KB950974\SP2QFE\es.dll
[-] 2008-04-14 02:33 . 9FD4A0615BF3E9388A46EDF8774C7294 . 246272 . . [2001.12.4414.701] . . c:\windows\ServicePackFiles\i386\es.dll
[-] 2008-04-14 02:33 . 9FD4A0615BF3E9388A46EDF8774C7294 . 246272 . . [2001.12.4414.701] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\es.dll
[-] 2005-07-26 04:29 . B56B69129181FF63BAED5EDE65DCC9B1 . 243200 . . [2001.12.4414.308] . . c:\windows$hf_mig$\KB902400\SP2QFE\es.dll
[-] 2005-07-26 04:29 . B56B69129181FF63BAED5EDE65DCC9B1 . 243200 . . [2001.12.4414.308] . . c:\windows\SoftwareDistribution\Download\520cbe0ea5d1df1dc8d5c0c4548a90f7\sp2qfe\es.dll

[-] 2008-04-14 . 0469B73DB32E5520F342C5E163AA3CCA . 110080 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\imm32.dll
[-] 2008-04-14 . 0469B73DB32E5520F342C5E163AA3CCA . 110080 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\imm32.dll
[-] 2008-04-14 . 0469B73DB32E5520F342C5E163AA3CCA . 110080 . . [5.1.2600.5512] . . c:\windows\system32\imm32.dll
[-] 2004-08-19 . E55DAFA1A354BD5CB69151563DC9748A . 110080 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\imm32.dll

[-] 2009-03-21 . 534040750B9E70B156A98F5D0E8F6D2A . 1051136 . . [5.1.2600.3541] . . c:\windows$NtServicePackUninstall$\kernel32.dll
[-] 2009-03-21 . 98F08549604D090B6B2514AF845F329F . 1054720 . . [5.1.2600.5781] . . c:\windows$hf_mig$\KB959426\SP3GDR\kernel32.dll
[-] 2009-03-21 . 98F08549604D090B6B2514AF845F329F . 1054720 . . [5.1.2600.5781] . . c:\windows\system32\kernel32.dll
[-] 2009-03-21 . 98F08549604D090B6B2514AF845F329F . 1054720 . . [5.1.2600.5781] . . c:\windows\system32\dllcache\kernel32.dll
[-] 2009-03-21 . C3AF0EEE26B59484E674673E3016AAB7 . 1056768 . . [5.1.2600.5781] . . c:\windows$hf_mig$\KB959426\SP3QFE\kernel32.dll
[-] 2009-03-21 . 2087E2764822A8D93A4CA7FA0FED35E8 . 1054208 . . [5.1.2600.3541] . . c:\windows$hf_mig$\KB959426\SP2QFE\kernel32.dll
[-] 2008-04-14 . 3AC8886DFA5AB641417DF4D3B7F5512E . 1054720 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kernel32.dll
[-] 2008-04-14 . 3AC8886DFA5AB641417DF4D3B7F5512E . 1054720 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\kernel32.dll

[-] 2008-04-14 . 5C64008E661307C4A3C3C25D9086CDE7 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\linkinfo.dll
[-] 2008-04-14 . 5C64008E661307C4A3C3C25D9086CDE7 . 19968 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\linkinfo.dll
[-] 2008-04-14 . 5C64008E661307C4A3C3C25D9086CDE7 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\linkinfo.dll
[-] 2005-09-01 . D9BD4CCA0533401B6609E47FF74F40DC . 19968 . . [5.1.2600.2751] . . c:\windows$hf_mig$\KB900725\SP2QFE\linkinfo.dll
[-] 2005-09-01 . D9BD4CCA0533401B6609E47FF74F40DC . 19968 . . [5.1.2600.2751] . . c:\windows\SoftwareDistribution\Download\a20dc986c94132560aec16a0ce3c192a\sp2qfe\linkinfo.dll
[-] 2005-09-01 . 8D9A075C065DFE1228688D10155D6624 . 19968 . . [5.1.2600.2751] . . c:\windows\SoftwareDistribution\Download\a20dc986c94132560aec16a0ce3c192a\sp2gdr\linkinfo.dll
[-] 2004-08-19 . 6C411ABBEEF0CA1D991F8A8F449D2B5F . 18944 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\linkinfo.dll

[-] 2008-04-14 . 982B2C204337C3B12211E1E1D9BA8C9C . 22016 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lpk.dll
[-] 2008-04-14 . 982B2C204337C3B12211E1E1D9BA8C9C . 22016 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\lpk.dll
[-] 2008-04-14 . 982B2C204337C3B12211E1E1D9BA8C9C . 22016 . . [5.1.2600.5512] . . c:\windows\system32\lpk.dll
[-] 2004-08-19 . 3236A6A1650E6C055FD5E87D7C4A05AD . 22016 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\lpk.dll

[-] 2008-04-14 . 91E6024D6D4DCDECDB36C43ECF9BBECB . 13312 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lsass.exe
[-] 2008-04-14 . 91E6024D6D4DCDECDB36C43ECF9BBECB . 13312 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\lsass.exe
[-] 2008-04-14 . 91E6024D6D4DCDECDB36C43ECF9BBECB . 13312 . . [5.1.2600.5512] . . c:\windows\system32\lsass.exe
[-] 2004-08-19 . 259AF82A0932EEA4F316F92DB94707B6 . 13312 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\lsass.exe

[-] 2008-06-20 . 58AF8498C62E1E1DAB5AE59C6E08C180 . 247808 . . [5.1.2600.5625] . . c:\windows$hf_mig$\KB951748\SP3GDR\mswsock.dll
[-] 2008-06-20 . 58AF8498C62E1E1DAB5AE59C6E08C180 . 247808 . . [5.1.2600.5625] . . c:\windows\system32\mswsock.dll
[-] 2008-06-20 . 58AF8498C62E1E1DAB5AE59C6E08C180 . 247808 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\mswsock.dll
[-] 2008-06-20 . C759B3790D3BA760C52E218EF4886DAC . 247808 . . [5.1.2600.5625] . . c:\windows$hf_mig$\KB951748\SP3QFE\mswsock.dll
[-] 2008-06-20 . 8A52DE10680A40ECD04FA2C0FBC34190 . 247808 . . [5.1.2600.3394] . . c:\windows$NtServicePackUninstall$\mswsock.dll
[-] 2008-06-20 . 4138FBDEDBC6FEAD215BB4C4B102F7DE . 247808 . . [5.1.2600.3394] . . c:\windows$hf_mig$\KB951748\SP2QFE\mswsock.dll
[-] 2008-04-14 . 196CCC3FDD21665DCAA9F83FFC03B41A . 247808 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\mswsock.dll
[-] 2008-04-14 . 196CCC3FDD21665DCAA9F83FFC03B41A . 247808 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\mswsock.dll

[-] 2008-04-14 . 04821179C3171554C1BD1F9888A113E2 . 407040 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netlogon.dll
[-] 2008-04-14 . 04821179C3171554C1BD1F9888A113E2 . 407040 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\netlogon.dll
[-] 2008-04-14 . 04821179C3171554C1BD1F9888A113E2 . 407040 . . [5.1.2600.5512] . . c:\windows\system32\netlogon.dll
[-] 2004-08-19 . D4CFAC76926C24E32B7F25A35C31BC6E . 407040 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\netlogon.dll

[-] 2008-04-14 . BE0CB143FA427D93440DED18DB8C918B . 198144 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netman.dll
[-] 2008-04-14 . BE0CB143FA427D93440DED18DB8C918B . 198144 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\netman.dll
[-] 2008-04-14 . BE0CB143FA427D93440DED18DB8C918B . 198144 . . [5.1.2600.5512] . . c:\windows\system32\netman.dll
[-] 2005-08-22 . 0D55724D88488BBFC53BC2EA219240F3 . 197632 . . [5.1.2600.2743] . . c:\windows\SoftwareDistribution\Download\8e09a65615c8797f1ad03293be9a380b\sp2gdr\netman.dll
[-] 2005-08-22 . 31748843AD5811351B115CC52CEA8D77 . 197632 . . [5.1.2600.2743] . . c:\windows$hf_mig$\KB905414\SP2QFE\netman.dll
[-] 2005-08-22 . 31748843AD5811351B115CC52CEA8D77 . 197632 . . [5.1.2600.2743] . . c:\windows\SoftwareDistribution\Download\8e09a65615c8797f1ad03293be9a380b\sp2qfe\netman.dll
[-] 2004-08-19 . 237F77C91B70469E3AF9F7FD0A524954 . 198144 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\netman.dll

[-] 2009-02-10 . BEF458B8424553279E95E250D1E0CE7E . 2191232 . . [5.1.2600.5755] . . c:\windows$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
[-] 2009-02-09 . 8D57501F4865CFAC25034939E0FF6F8D . 2138112 . . [5.1.2600.3520] . . c:\windows$NtServicePackUninstall$\ntoskrnl.exe
[-] 2009-02-09 . B55AA66BC9269BC5257B915FFDAA790B . 2188160 . . [5.1.2600.3520] . . c:\windows$hf_mig$\KB956572\SP2QFE\ntoskrnl.exe
[-] 2009-02-09 . AB896577F35CF5FED7A9F87D3C3205ED . 2191104 . . [5.1.2600.5755] . . c:\windows$hf_mig$\KB956572\SP3GDR\ntoskrnl.exe
[-] 2009-02-09 . AB896577F35CF5FED7A9F87D3C3205ED . 2191104 . . [5.1.2600.5755] . . c:\windows\Driver Cache\i386\ntoskrnl.exe
[-] 2009-02-09 . AB896577F35CF5FED7A9F87D3C3205ED . 2191104 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\ntoskrnl.exe
[-] 2009-02-09 . 907C6FCD8D5FB812D74C204060911EA6 . 2147328 . . [5.1.2600.5755] . . c:\windows\system32\ntoskrnl.exe
[-] 2008-04-14 . 099D639DA1EF6968D4E41795BB507E6B . 2191104 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntoskrnl.exe
[-] 2008-04-14 . 099D639DA1EF6968D4E41795BB507E6B . 2191104 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\ntoskrnl.exe
[-] 2005-03-02 . 3E2A0A4A0C0B19FC113618A9562A3B2A . 2181632 . . [5.1.2600.2622] . . c:\windows$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
[-] 2005-03-02 . 3E2A0A4A0C0B19FC113618A9562A3B2A . 2181632 . . [5.1.2600.2622] . . c:\windows\SoftwareDistribution\Download\46faa4cd5c82200be099d1b1e8a12eed\sp2qfe\ntoskrnl.exe

[-] 2008-04-14 . 9F2C862E39BF8E8FC51C3F6A6BCEB415 . 17408 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\powrprof.dll
[-] 2008-04-14 . 9F2C862E39BF8E8FC51C3F6A6BCEB415 . 17408 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\powrprof.dll
[-] 2008-04-14 . 9F2C862E39BF8E8FC51C3F6A6BCEB415 . 17408 . . [6.00.2900.5512] . . c:\windows\system32\powrprof.dll
[-] 2004-08-19 . 29D5E58FB089C41898A81BD4C8970F22 . 17408 . . [6.00.2900.2180] . . c:\windows$NtServicePackUninstall$\powrprof.dll

[-] 2008-04-14 . BAA0B6E647C1AD593E9BAE5CC31BCFFB . 409088 . . [6.7.2600.5512] . . c:\windows\ServicePackFiles\i386\qmgr.dll
[-] 2008-04-14 . BAA0B6E647C1AD593E9BAE5CC31BCFFB . 409088 . . [6.7.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\qmgr.dll
[-] 2008-04-14 . BAA0B6E647C1AD593E9BAE5CC31BCFFB . 409088 . . [6.7.2600.5512] . . c:\windows\system32\qmgr.dll
[-] 2008-04-14 . BAA0B6E647C1AD593E9BAE5CC31BCFFB . 409088 . . [6.7.2600.5512] . . c:\windows\system32\bits\qmgr.dll
[-] 2004-08-19 . 659F7B6C502051BFA37910614B225548 . 382464 . . [6.6.2600.2180] . . c:\windows$NtServicePackUninstall$\qmgr.dll

[-] 2009-02-09 . F83B964469D230F445613C44DF9FE25D . 401408 . . [5.1.2600.5755] . . c:\windows$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2009-02-09 . 0203B1AAD358F206CB0A3C1F93CCE17A . 401408 . . [5.1.2600.5755] . . c:\windows$hf_mig$\KB956572\SP3GDR\rpcss.dll
[-] 2009-02-09 . 0203B1AAD358F206CB0A3C1F93CCE17A . 401408 . . [5.1.2600.5755] . . c:\windows\system32\rpcss.dll
[-] 2009-02-09 . 0203B1AAD358F206CB0A3C1F93CCE17A . 401408 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\rpcss.dll
[-] 2009-02-09 . 5620353B93DD08016674E4FEE280190B . 399360 . . [5.1.2600.3520] . . c:\windows$NtServicePackUninstall$\rpcss.dll
[-] 2009-02-09 . BA1EF616F55210820F6462D033088497 . 401408 . . [5.1.2600.3520] . . c:\windows$hf_mig$\KB956572\SP2QFE\rpcss.dll
[-] 2008-04-14 . 3D65EB82E1FA6DB15A33E024C9E03CAB . 399360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rpcss.dll
[-] 2008-04-14 . 3D65EB82E1FA6DB15A33E024C9E03CAB . 399360 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\rpcss.dll
[-] 2005-07-26 . B38D431ACE730452CD1FEE4FB7ECD6E2 . 398336 . . [5.1.2600.2726] . . c:\windows$hf_mig$\KB902400\SP2QFE\rpcss.dll
[-] 2005-07-26 . B38D431ACE730452CD1FEE4FB7ECD6E2 . 398336 . . [5.1.2600.2726] . . c:\windows\SoftwareDistribution\Download\520cbe0ea5d1df1dc8d5c0c4548a90f7\sp2qfe\rpcss.dll
[-] 2005-04-28 . FD292BFE003558F4C39AA3D44F420AC7 . 396288 . . [5.1.2600.2665] . . c:\windows$hf_mig$\KB894391\SP2QFE\rpcss.dll
[-] 2005-04-28 . FD292BFE003558F4C39AA3D44F420AC7 . 396288 . . [5.1.2600.2665] . . c:\windows\SoftwareDistribution\Download\7c43cf31471ac5c8600409a70e40c22f\sp2qfe\rpcss.dll

[-] 2008-04-14 . 973B36634C544948C663E8269AA1B3A3 . 187392 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\scecli.dll
[-] 2008-04-14 . 973B36634C544948C663E8269AA1B3A3 . 187392 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\scecli.dll
[-] 2008-04-14 . 973B36634C544948C663E8269AA1B3A3 . 187392 . . [5.1.2600.5512] . . c:\windows\system32\scecli.dll
[-] 2004-08-19 . 58D439F6EF73A2D9288B204E819F4BBD . 186368 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\scecli.dll

[-] 2009-02-09 . C3FB1D70CB88722267949694BA51759E . 111104 . . [5.1.2600.5755] . . c:\windows$hf_mig$\KB956572\SP3GDR\services.exe
[-] 2009-02-09 . C3FB1D70CB88722267949694BA51759E . 111104 . . [5.1.2600.5755] . . c:\windows\system32\services.exe
[-] 2009-02-09 . C3FB1D70CB88722267949694BA51759E . 111104 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\services.exe
[-] 2009-02-09 . 62789101F9C2401ED598AA2CDE7450C0 . 111104 . . [5.1.2600.5755] . . c:\windows$hf_mig$\KB956572\SP3QFE\services.exe
[-] 2009-02-09 . 9D6BF82FE50D55F20F8E10E0F6653886 . 111104 . . [5.1.2600.3520] . . c:\windows$NtServicePackUninstall$\services.exe
[-] 2009-02-09 . 51A24094F076961A7FF73E5F7E991D68 . 111104 . . [5.1.2600.3520] . . c:\windows$hf_mig$\KB956572\SP2QFE\services.exe
[-] 2008-04-14 . 54CB50058851D95E56EC70D09F70857F . 109056 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\services.exe
[-] 2008-04-14 . 54CB50058851D95E56EC70D09F70857F . 109056 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\services.exe

[-] 2008-04-14 . 9A4E7ECBB5B7FB86F3B926AB039F4FEC . 5120 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfc.dll
[-] 2008-04-14 . 9A4E7ECBB5B7FB86F3B926AB039F4FEC . 5120 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\sfc.dll
[-] 2008-04-14 . 9A4E7ECBB5B7FB86F3B926AB039F4FEC . 5120 . . [5.1.2600.5512] . . c:\windows\system32\sfc.dll
[-] 2004-08-19 . BB695F18354B38CFF693E67EE7A30C22 . 5120 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\sfc.dll

[-] 2008-04-14 . 460E4CE148BD07218DA0B6A3D31885A9 . 57856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\spoolsv.exe
[-] 2008-04-14 . 460E4CE148BD07218DA0B6A3D31885A9 . 57856 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\spoolsv.exe
[-] 2008-04-14 . 460E4CE148BD07218DA0B6A3D31885A9 . 57856 . . [5.1.2600.5512] . . c:\windows\system32\spoolsv.exe
[-] 2005-06-11 . AD3D9D191AEA7B5445FE1D82FFBB4788 . 57856 . . [5.1.2600.2696] . . c:\windows$hf_mig$\KB896423\SP2QFE\spoolsv.exe
[-] 2005-06-11 . AD3D9D191AEA7B5445FE1D82FFBB4788 . 57856 . . [5.1.2600.2696] . . c:\windows\SoftwareDistribution\Download\4088a68d0a8934555c37417459b6507e\sp2qfe\spoolsv.exe
[-] 2005-06-10 . DA81EC57ACD4CDC3D4C51CF3D409AF9F . 57856 . . [5.1.2600.2696] . . c:\windows\SoftwareDistribution\Download\4088a68d0a8934555c37417459b6507e\sp2gdr\spoolsv.exe
[-] 2004-08-19 . DF9FC62AD51CB082B0AE371919A232CB . 57856 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\spoolsv.exe

[-] 2008-04-14 . E4BDF223CD75478BF44567B4D5C2634D . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\svchost.exe
[-] 2008-04-14 . E4BDF223CD75478BF44567B4D5C2634D . 14336 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\svchost.exe
[-] 2008-04-14 . E4BDF223CD75478BF44567B4D5C2634D . 14336 . . [5.1.2600.5512] . . c:\windows\system32\svchost.exe
[-] 2004-08-19 . 2979B03D5382A602623C0535B16AB9C0 . 14336 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\svchost.exe

[-] 2008-04-14 . 8E5231171AD6595FF002E848CC54FCD7 . 249856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tapisrv.dll
[-] 2008-04-14 . 8E5231171AD6595FF002E848CC54FCD7 . 249856 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\tapisrv.dll
[-] 2008-04-14 . 8E5231171AD6595FF002E848CC54FCD7 . 249856 . . [5.1.2600.5512] . . c:\windows\system32\tapisrv.dll
[-] 2005-07-08 . C9FA05D271A0066764FE75BE38E24D69 . 249344 . . [5.1.2600.2716] . . c:\windows$hf_mig$\KB893756\SP2QFE\tapisrv.dll
[-] 2005-07-08 . C9FA05D271A0066764FE75BE38E24D69 . 249344 . . [5.1.2600.2716] . . c:\windows\SoftwareDistribution\Download\271387204fbbe61209bf992bb92b3a5f\sp2qfe\tapisrv.dll
[-] 2005-07-08 . 720DA0C9DB8996AD9B7F5164B2242DAA . 249344 . . [5.1.2600.2716] . . c:\windows\SoftwareDistribution\Download\271387204fbbe61209bf992bb92b3a5f\sp2gdr\tapisrv.dll
[-] 2004-08-19 . 5CC2A233DAC03CAF99D20B87598675CD . 246272 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\tapisrv.dll

[-] 2008-04-14 . E853F84D3CE2FAA2A802E33CF89AC023 . 579584 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\user32.dll
[-] 2008-04-14 . E853F84D3CE2FAA2A802E33CF89AC023 . 579584 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\user32.dll
[-] 2008-04-14 . E853F84D3CE2FAA2A802E33CF89AC023 . 579584 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll
[-] 2007-03-08 . 4D88AAF39ADABFE45958EA1384E2C4FF . 579072 . . [5.1.2600.3099] . . c:\windows$hf_mig$\KB925902\SP2QFE\user32.dll
[-] 2007-03-08 . 4D88AAF39ADABFE45958EA1384E2C4FF . 579072 . . [5.1.2600.3099] . . c:\windows\SoftwareDistribution\Download\807aa275a612b3508a3d1d613bbf6226\sp2qfe\user32.dll
[-] 2007-03-08 . 753354F594809A9B96F73999B435A533 . 578560 . . [5.1.2600.3099] . . c:\windows\SoftwareDistribution\Download\807aa275a612b3508a3d1d613bbf6226\sp2gdr\user32.dll
[-] 2005-03-02 . C34920EB988CE98910BD6B0417F334EB . 578048 . . [5.1.2600.2622] . . c:\windows$hf_mig$\KB890859\SP2QFE\user32.dll
[-] 2005-03-02 . C34920EB988CE98910BD6B0417F334EB . 578048 . . [5.1.2600.2622] . . c:\windows\SoftwareDistribution\Download\46faa4cd5c82200be099d1b1e8a12eed\sp2qfe\user32.dll
[-] 2005-03-02 . 0DF75FB73F705B011630159A43D7C354 . 578048 . . [5.1.2600.2622] . . c:\windows\SoftwareDistribution\Download\46faa4cd5c82200be099d1b1e8a12eed\sp2gdr\user32.dll
[-] 2004-08-19 . 61C8C283AD063BB697AE61A155C64A5A . 578048 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\user32.dll

[-] 2008-04-14 . E74DDB12188C2FF57A78624DBF7332FC . 26624 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\userinit.exe
[-] 2008-04-14 . E74DDB12188C2FF57A78624DBF7332FC . 26624 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\userinit.exe
[-] 2008-04-14 . E74DDB12188C2FF57A78624DBF7332FC . 26624 . . [5.1.2600.5512] . . c:\windows\system32\userinit.exe
[-] 2004-08-19 . 84717891F0734C611721F56C60B5FBC3 . 25088 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\userinit.exe

[-] 2009-07-04 . 8D71F28DEB37CC9C2E344095D8BFE1EE . 512000 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe
[-] 2009-05-22 . 3EFD602A3FD0F9EE82C297636679FEC9 . 506368 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\winlogon.exe
[-] 2008-04-14 . DD73D6B9F6B4CB630CF35B438B540174 . 512000 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\winlogon.exe
[-] 2008-04-14 . DD73D6B9F6B4CB630CF35B438B540174 . 512000 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\winlogon.exe

[-] 2008-04-14 . FB836F9E62D82904C983AD21296A5D9C . 82432 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2_32.dll
[-] 2008-04-14 . FB836F9E62D82904C983AD21296A5D9C . 82432 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\ws2_32.dll
[-] 2008-04-14 . FB836F9E62D82904C983AD21296A5D9C . 82432 . . [5.1.2600.5512] . . c:\windows\system32\ws2_32.dll
[-] 2004-08-19 . EED74B969B2CA1ACC558FF60FB420E28 . 82944 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\ws2_32.dll

[-] 2008-04-14 . F2317622D29F9FF0F88AEECD5F60F0DD . 1037824 . . [6.00.2900.5512] . . c:\windows\explorer.exe
[-] 2008-04-14 . F2317622D29F9FF0F88AEECD5F60F0DD . 1037824 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\explorer.exe
[-] 2008-04-14 . F2317622D29F9FF0F88AEECD5F60F0DD . 1037824 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\explorer.exe
[-] 2007-06-13 . D0288319660EDCFED07C7E74C4EA38A5 . 1037312 . . [6.00.2900.3156] . . c:\windows\SoftwareDistribution\Download\aa7b28efbf5e224a2f6b995008501967\sp2gdr\explorer.exe
[-] 2007-06-13 . B795475444D6D57A572C14B9E1A29839 . 1037312 . . [6.00.2900.3156] . . c:\windows$hf_mig$\KB938828\SP2QFE\explorer.exe
[-] 2007-06-13 . B795475444D6D57A572C14B9E1A29839 . 1037312 . . [6.00.2900.3156] . . c:\windows\SoftwareDistribution\Download\aa7b28efbf5e224a2f6b995008501967\sp2qfe\explorer.exe
[-] 2004-08-19 . 2A7BD330924252A2FD80344FC949BB72 . 1036288 . . [6.00.2900.2180] . . c:\windows$NtServicePackUninstall$\explorer.exe

[-] 2008-04-14 . 3891413139EAABFEFE9B0CA49B5CD395 . 343040 . . [7.0.2600.5512] . . c:\windows\ServicePackFiles\i386\msvcrt.dll
[-] 2008-04-14 . 3891413139EAABFEFE9B0CA49B5CD395 . 343040 . . [7.0.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\msvcrt.dll
[-] 2008-04-14 . 3891413139EAABFEFE9B0CA49B5CD395 . 343040 . . [7.0.2600.5512] . . c:\windows\system32\msvcrt.dll
[-] 2008-04-14 . D33CD21D476C3A07DD88F83850A17432 . 343040 . . [7.0.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\asms\70\msft\windows\mswincrt\msvcrt.dll
[-] 2008-04-14 . D33CD21D476C3A07DD88F83850A17432 . 343040 . . [7.0.2600.5512] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
[-] 2004-08-19 . B89F48FDFD6C3312B92D5D633C23F075 . 343040 . . [7.0.2600.2180] . . c:\windows$NtServicePackUninstall$\msvcrt.dll
[-] 2004-08-19 . 75ECEFC8AB4DD9AEC9BC082D003BD90D . 343040 . . [7.0.2600.2180] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll
[-] 2001-08-28 . 4200BE3808F6406DBE45A7B88DAE5035 . 322560 . . [7.0.2600.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll

[-] 2008-04-14 . 6ED29124A1C83BD0CF6B26BD01CA6F6F . 171520 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
[-] 2008-04-14 . 6ED29124A1C83BD0CF6B26BD01CA6F6F . 171520 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\srsvc.dll
[-] 2008-04-14 . 6ED29124A1C83BD0CF6B26BD01CA6F6F . 171520 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll
[-] 2004-08-19 . CE978404558CE2D82896AC2032F06DBF . 171008 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\srsvc.dll

[-] 2008-04-14 . 02DA31AB433A6C1110A736C85701DECA . 13824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wscntfy.exe
[-] 2008-04-14 . 02DA31AB433A6C1110A736C85701DECA . 13824 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\wscntfy.exe
[-] 2008-04-14 . 02DA31AB433A6C1110A736C85701DECA . 13824 . . [5.1.2600.5512] . . c:\windows\system32\wscntfy.exe
[-] 2004-08-19 . 8558905BA81F6EFAAF9667139BB117DD . 13824 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\wscntfy.exe

[-] 2008-04-14 . F92A87FDDA0C11C8604FBC2B864FA726 . 129024 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\xmlprov.dll
[-] 2008-04-14 . F92A87FDDA0C11C8604FBC2B864FA726 . 129024 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\xmlprov.dll
[-] 2008-04-14 . F92A87FDDA0C11C8604FBC2B864FA726 . 129024 . . [5.1.2600.5512] . . c:\windows\system32\xmlprov.dll
[-] 2004-08-19 . 912591E2055E26566D1CB54092A7E8B0 . 129536 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\xmlprov.dll

[-] 2008-04-14 . 4EC800BDF80521B0207BD2301DFC7D14 . 56320 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\eventlog.dll
[-] 2008-04-14 . 4EC800BDF80521B0207BD2301DFC7D14 . 56320 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\eventlog.dll
[-] 2008-04-14 . 4EC800BDF80521B0207BD2301DFC7D14 . 56320 . . [5.1.2600.5512] . . c:\windows\system32\eventlog.dll
[-] 2004-08-19 . 49B1376885340BF9EA0D99F71557B59A . 55808 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\eventlog.dll

[-] 2008-04-14 . E17C85D5B5CF477638433B851A98499E . 1571840 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfcfiles.dll
[-] 2008-04-14 . E17C85D5B5CF477638433B851A98499E . 1571840 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\sfcfiles.dll
[-] 2008-04-14 . E17C85D5B5CF477638433B851A98499E . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
[-] 2004-08-19 . 6D8F3AC555E3F8A569AA9B2A817698C1 . 1548288 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\sfcfiles.dll

[-] 2008-04-14 . 59DC5BB82E4C8E0B3EADCFDBC44BA6E4 . 15360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ctfmon.exe
[-] 2008-04-14 . 59DC5BB82E4C8E0B3EADCFDBC44BA6E4 . 15360 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\ctfmon.exe
[-] 2008-04-14 . 59DC5BB82E4C8E0B3EADCFDBC44BA6E4 . 15360 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe
[-] 2004-08-19 . 64E41E8FEE655B03E3F19DED21BA5118 . 15360 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\ctfmon.exe

[-] 2008-04-14 . E598D81197E2E0EC42A0C55772BB00E8 . 59904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regsvc.dll
[-] 2008-04-14 . E598D81197E2E0EC42A0C55772BB00E8 . 59904 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\regsvc.dll
[-] 2008-04-14 . E598D81197E2E0EC42A0C55772BB00E8 . 59904 . . [5.1.2600.5512] . . c:\windows\system32\regsvc.dll
[-] 2004-08-19 . B6F76CE10953A141545A0D01F1776885 . 59904 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\regsvc.dll

[-] 2008-04-14 . 55F5C5C1BE1A78E285033E432BA01597 . 194560 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\schedsvc.dll
[-] 2008-04-14 . 55F5C5C1BE1A78E285033E432BA01597 . 194560 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\schedsvc.dll
[-] 2008-04-14 . 55F5C5C1BE1A78E285033E432BA01597 . 194560 . . [5.1.2600.5512] . . c:\windows\system32\schedsvc.dll
[-] 2004-08-19 . A65E74CC5831CED5762AA16033ED20EE . 193024 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\schedsvc.dll

[-] 2008-04-14 . B9F20D71E5B6CE89A7A94B38351FDBDC . 135680 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\shsvcs.dll
[-] 2008-04-14 . B9F20D71E5B6CE89A7A94B38351FDBDC . 135680 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\shsvcs.dll
[-] 2008-04-14 . B9F20D71E5B6CE89A7A94B38351FDBDC . 135680 . . [6.00.2900.5512] . . c:\windows\system32\shsvcs.dll
[-] 2006-12-19 . D7DFBD1EFA149EC158363B974DAE0C6B . 135168 . . [6.00.2900.3051] . . c:\windows\SoftwareDistribution\Download\749a2072c695f57087c10474c2640179\sp2gdr\shsvcs.dll
[-] 2006-12-19 . 1839CDF416A5AA8BF2EFE377F57452CC . 135680 . . [6.00.2900.3051] . . c:\windows$hf_mig$\KB928255\SP2QFE\shsvcs.dll
[-] 2006-12-19 . 1839CDF416A5AA8BF2EFE377F57452CC . 135680 . . [6.00.2900.3051] . . c:\windows\SoftwareDistribution\Download\749a2072c695f57087c10474c2640179\sp2qfe\shsvcs.dll
[-] 2004-08-19 . ABA25E49F6589FD73F1143FDC39A6B46 . 135168 . . [6.00.2900.2180] . . c:\windows$NtServicePackUninstall$\shsvcs.dll

[-] 2008-04-14 . EA9E0DB8684CEF2FD3BADD671DF5A112 . 71680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ssdpsrv.dll
[-] 2008-04-14 . EA9E0DB8684CEF2FD3BADD671DF5A112 . 71680 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\ssdpsrv.dll
[-] 2008-04-14 . EA9E0DB8684CEF2FD3BADD671DF5A112 . 71680 . . [5.1.2600.5512] . . c:\windows\system32\ssdpsrv.dll
[-] 2004-08-19 . DCB185C829538971E47AFFE77BA138C3 . 71680 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\ssdpsrv.dll

[-] 2008-04-14 . 710BC85A8C22626EE094439E3EA0D38C . 297984 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\termsrv.dll
[-] 2008-04-14 . 710BC85A8C22626EE094439E3EA0D38C . 297984 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\termsrv.dll
[-] 2008-04-14 . 710BC85A8C22626EE094439E3EA0D38C . 297984 . . [5.1.2600.5512] . . c:\windows\system32\termsrv.dll
[-] 2004-08-19 . 78F90C3E230AD122BCB116ABAD5FEFE9 . 297984 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\termsrv.dll

[-] 2008-04-14 . F36C9F78FC902C8DCE4D3B576BB0435A . 176640 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\appmgmts.dll
[-] 2008-04-14 . F36C9F78FC902C8DCE4D3B576BB0435A . 176640 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\appmgmts.dll
[-] 2008-04-14 . F36C9F78FC902C8DCE4D3B576BB0435A . 176640 . . [5.1.2600.5512] . . c:\windows\system32\appmgmts.dll
[-] 2004-08-19 . 7E9D138DC991BCCE6E6026CD74E69CC4 . 176640 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\appmgmts.dll

[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\agp440.sys
[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\agp440.sys
[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\system32\drivers\agp440.sys
[-] 2004-08-19 . 2C428FA0C3E3A01ED93C9B2A27D8D4BB . 42368 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\agp440.sys

[-] 2001-08-28 . E4ABC1212B70BB03D35E60681C447210 . 12032 . . [5.1.2600.0] . . c:\windows\system32\drivers\acpiec.sys

[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\ServicePackFiles\i386\aec.sys
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\aec.sys
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\system32\drivers\aec.sys
[-] 2006-02-15 00:30 . 1EE7B434BA961EF845DE136224C30FEC . 142464 . . [5.1.2601.2180] . . c:\windows$hf_mig$\KB900485\SP2QFE\aec.sys
[-] 2006-02-15 00:30 . 1EE7B434BA961EF845DE136224C30FEC . 142464 . . [5.1.2601.2180] . . c:\windows\SoftwareDistribution\Download\1f2d6e11684c39b8ad289195c621c498\sp2qfe\aec.sys
[-] 2006-02-15 00:22 . 1EE7B434BA961EF845DE136224C30FEC . 142464 . . [5.1.2601.2180] . . c:\windows\SoftwareDistribution\Download\1f2d6e11684c39b8ad289195c621c498\sp2gdr\aec.sys
[-] 2004-08-19 14:20 . 841F385C6CFAF66B58FBD898722BB4F0 . 142464 . . [5.1.2601.2078] . . c:\windows$NtServicePackUninstall$\aec.sys

[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ip6fw.sys
[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\ip6fw.sys
[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ip6fw.sys
[-] 2004-08-03 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\ip6fw.sys

[-] 2008-04-14 02:33 . CE21FE79AD3B913A79E0C742BED6BF85 . 927504 . . [4.1.0.61] . . c:\windows\ServicePackFiles\i386\mfc40u.dll
[-] 2008-04-14 02:33 . CE21FE79AD3B913A79E0C742BED6BF85 . 927504 . . [4.1.0.61] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\mfc40u.dll
[-] 2008-04-14 02:33 . CE21FE79AD3B913A79E0C742BED6BF85 . 927504 . . [4.1.0.61] . . c:\windows\system32\mfc40u.dll
[-] 2006-11-01 19:18 . FCD58951B3B2392007E0EE34D2CF944F . 927504 . . [4.1.0.61] . . c:\windows\SoftwareDistribution\Download\514c80746ae952e9ebadfb936253a166\sp2qfe\mfc40u.dll
[-] 2001-08-28 12:00 . E1A34560BF6CE7C703BB67EC4FA70F43 . 924432 . . [4.1.6140] . . c:\windows$NtServicePackUninstall$\mfc40u.dll

[-] 2008-04-14 . E67A66A3781C1A483F0F8992664CBE0D . 33792 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\msgsvc.dll
[-] 2008-04-14 . E67A66A3781C1A483F0F8992664CBE0D . 33792 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\msgsvc.dll
[-] 2008-04-14 . E67A66A3781C1A483F0F8992664CBE0D . 33792 . . [5.1.2600.5512] . . c:\windows\system32\msgsvc.dll
[-] 2004-08-19 . DE71362123E81D268088E78543752576 . 33792 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\msgsvc.dll

[-] 2008-04-14 02:33 . AA370F0D5B900E13D40E9CB834B5DA10 . 52736 . . [9.0.1.56] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\mspmsnsv.dll
[-] 2008-04-14 02:33 . AA370F0D5B900E13D40E9CB834B5DA10 . 52736 . . [9.0.1.56] . . c:\windows\system32\mspmsnsv.dll
[-] 2008-04-14 02:33 . AA370F0D5B900E13D40E9CB834B5DA10 . 52736 . . [9.0.1.56] . . c:\windows\system32\dllcache\mspmsnsv.dll
[-] 2004-08-19 14:09 . 535D54D2AF721A3497F058CAA2C63447 . 52736 . . [9.0.1.56] . . c:\windows$NtServicePackUninstall$\mspmsnsv.dll

[-] 2009-02-10 . F751E041E682F53EAF34F7FAEA78994D . 2068096 . . [5.1.2600.5755] . . c:\windows$hf_mig$\KB956572\SP3GDR\ntkrnlpa.exe
[-] 2009-02-10 . F751E041E682F53EAF34F7FAEA78994D . 2068096 . . [5.1.2600.5755] . . c:\windows\Driver Cache\i386\ntkrnlpa.exe
[-] 2009-02-10 . F751E041E682F53EAF34F7FAEA78994D . 2068096 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\ntkrnlpa.exe
[-] 2009-02-09 . 0CEAF5FB401082156BE8EBAC8B923995 . 2017792 . . [5.1.2600.3520] . . c:\windows$NtServicePackUninstall$\ntkrnlpa.exe
[-] 2009-02-09 . 0150FE5C1E07F8AE422FEC6C8E8A0C98 . 2065024 . . [5.1.2600.3520] . . c:\windows$hf_mig$\KB956572\SP2QFE\ntkrnlpa.exe
[-] 2009-02-09 . C9E530E1258352CC8689173AEFD3A3CF . 2025984 . . [5.1.2600.5755] . . c:\windows\system32\ntkrnlpa.exe
[-] 2009-02-09 . ED5E20AE4AC5A63A4FF43FFE704A5153 . 2068224 . . [5.1.2600.5755] . . c:\windows$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe
[-] 2008-04-14 . B71A8F101CEFAF82FC5EC16130A54A3F . 2067968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
[-] 2008-04-14 . B71A8F101CEFAF82FC5EC16130A54A3F . 2067968 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\ntkrnlpa.exe
[-] 2005-03-02 . 5311776074B6C13F983DC75BAEAC9C0C . 2059008 . . [5.1.2600.2622] . . c:\windows$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
[-] 2005-03-02 . 5311776074B6C13F983DC75BAEAC9C0C . 2059008 . . [5.1.2600.2622] . . c:\windows\SoftwareDistribution\Download\46faa4cd5c82200be099d1b1e8a12eed\sp2qfe\ntkrnlpa.exe

[-] 2008-04-14 02:33 . 037D92B3A7853A183FCAB77FB1D13D6C . 438272 . . [5.1.2400.5512] . . c:\windows\ServicePackFiles\i386\ntmssvc.dll
[-] 2008-04-14 02:33 . 037D92B3A7853A183FCAB77FB1D13D6C . 438272 . . [5.1.2400.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\ntmssvc.dll
[-] 2008-04-14 02:33 . 037D92B3A7853A183FCAB77FB1D13D6C . 438272 . . [5.1.2400.5512] . . c:\windows\system32\ntmssvc.dll
[-] 2004-08-19 14:09 . 951543FFB84012D13F4CB09DA2EACE96 . 438272 . . [5.1.2400.2180] . . c:\windows$NtServicePackUninstall$\ntmssvc.dll

[-] 2008-04-14 . BD8166A495B02308F364B36249475F22 . 186368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\upnphost.dll
[-] 2008-04-14 . BD8166A495B02308F364B36249475F22 . 186368 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\51f93922a72f4cba24d116598e161b49\upnphost.dll
[-] 2008-04-14 . BD8166A495B02308F364B36249475F22 . 186368 . . [5.1.2600.5512] . . c:\windows\system32\upnphost.dll
[-] 2007-02-05 . 385DB2591BF11955F26E0A97728B1B31 . 185344 . . [5.1.2600.3077] . . c:\windows$hf_mig$\KB931261\SP2QFE\upnphost.dll
[-] 2007-02-05 . 385DB2591BF11955F26E0A97728B1B31 . 185344 . . [5.1.2600.3077] . . c:\windows\SoftwareDistribution\Download\c14099cb3cd0d3c3eb07f3570fc9d034\sp2qfe\upnphost.dll
[-] 2007-02-05 . 96B3C690ED82E36E04C130F916E3AE91 . 185344 . . [5.1.2600.3077] . . c:\windows\SoftwareDistribution\Download\c14099cb3cd0d3c3eb07f3570fc9d034\sp2gdr\upnphost.dll
[-] 2004-08-19 . 0B6A726C2DE9BBB80A48459F0C318F44 . 185344 . . [5.1.2600.2180] . . c:\windows$NtServicePackUninstall$\upnphost.dll
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
Note les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
« Steam »=« d:\steam\Steam.exe » [2009-10-14 1217784]
« DAEMON Tools Lite »=« d:\daemon tools\DAEMON Tools Lite\daemon.exe » [2009-04-23 691656]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
« WiseStubReboot »=« MSIEXEC »

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
« avast! »=« d:\avast\ashDisp.exe » [2009-08-17 81000]
« NvCplDaemon »=« c:\windows\system32\NvCpl.dll » [2009-04-30 13750272]
« NvMediaCenter »=« c:\windows\system32\NvMcTray.dll » [2009-04-30 86016]
« Adobe Reader Speed Launcher »=« c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe » [2009-02-27 35696]
« AdobeCS4ServiceManager »=« c:\program files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe » [2008-08-14 611712]
« Adobe Acrobat Speed Launcher »=« d:\adobe cs4\Acrobat 9.0\Acrobat\Acrobat_sl.exe » [2008-06-12 37232]
« Acrobat Assistant 8.0 »=« d:\adobe cs4\Acrobat 9.0\Acrobat\Acrotray.exe » [2008-06-11 640376]
« SunJavaUpdateSched »=« c:\program files\Java\jre6\bin\jusched.exe » [2009-08-15 148888]
« QuickTime Task »=« d:\quicktime\QTTask.exe » [2009-09-04 417792]
« Malwarebytes Anti-Malware (reboot) »=« d:\malwarebytes’ anti-malware\mbam.exe » [2009-09-10 1312080]
« Kernel and Hardware Abstraction Layer »=« KHALMNPR.EXE » - c:\windows\KHALMNPR.Exe [2008-12-18 76304]
« High Definition Audio Property Page Shortcut »=« HDAShCut.exe » - c:\windows\system32\HdAShCut.exe [2004-10-27 61952]
« RTHDCPL »=« RTHDCPL.EXE » - c:\windows\RTHDCPL.exe [2008-02-13 16857600]
« nwiz »=« nwiz.exe » - c:\windows\system32\nwiz.exe [2009-04-30 1657376]

c:\documents and settings\All Users\Menu D?marrer\Programmes\D?marrage
Logitech SetPoint.lnk - d:\logitech\SetPoint\SetPoint.exe [2009-5-10 809488]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2009-02-18 22:30 72208 ----a-w- c:\program files\Fichiers communs\Logishrd\Bluetooth\LBTWLgn.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=« »

[HKLM~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
« %windir%\system32\sessmgr.exe »=
« c:\Program Files\Windows Live\Messenger\wlcsdk.exe »=
« d:\µTorrent\uTorrent.exe »=
« d:\Steam\Steam.exe »=
« d:\Steam\steamapps\matgap\team fortress 2\hl2.exe »=
« d:\Autodesk\3ds Max 9\3dsmax.exe »=
« d:\Autodesk\Backburner\monitor.exe »=
« d:\Autodesk\Backburner\manager.exe »=
« d:\Autodesk\Backburner\server.exe »=
« %windir%\Network Diagnostic\xpnetdiag.exe »=
« c:\Program Files\Windows Live\Messenger\msnmsgr.exe »=
« c:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe »=
« d:\Steam\steamapps\common\left 4 dead\left4dead.exe »=

[HKLM~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
« 5353:TCP »= 5353:TCP:Adobe CSI CS4

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [16/05/2009 11:55 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [16/05/2009 11:55 20560]
R2 LBeepKE;LBeepKE;c:\windows\system32\drivers\LBeepKE.sys [16/05/2009 11:44 10384]
R2 TabletServicePen;TabletServicePen;c:\windows\system32\Pen_Tablet.exe [01/08/2009 13:48 3032360]
S3 cpuz130;cpuz130;??\c:\docume~1\ADMINI~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys → c:\docume~1\ADMINI~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys [?]
S3 maconfservice;Ma-Config Service;d:\ma-config.com\maconfservice.exe [29/05/2009 17:13 234864]
S3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\drivers\wacmoumonitor.sys [01/08/2009 13:48 15144]
.
Contenu du dossier ‹ Tâches planifiées ›

2009-10-10 c:\windows\Tasks\AppleSoftwareUpdate.job

c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
.
------- Examen supplémentaire -------
.
uStart Page = fr.ask.com…
mWindow Title =
IE: Ajouter la cible du lien à un fichier PDF existant - c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Ajouter à un fichier PDF existant - c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convertir au format Adobe PDF - c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Convertir la cible du lien au format Adobe PDF - c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
FF - ProfilePath - c:\documents and settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\4s52vzxi.default
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - www.google.fr…
FF - prefs.js: keyword.URL -
FF - component: d:\firefox\extensions{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll
FF - plugin: c:\documents and settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\4s52vzxi.default\extensions{bb628310-0ab7-11db-9cd8-0800200c9a66}\plugins\nphardwaredetection.dll
FF - plugin: d:\ma-config.com\nphardwaredetection.dll
FF - plugin: d:\quicktime\Plugins\npqtplugin.dll
FF - plugin: d:\quicktime\Plugins\npqtplugin2.dll
FF - plugin: d:\quicktime\Plugins\npqtplugin3.dll
FF - plugin: d:\quicktime\Plugins\npqtplugin4.dll
FF - plugin: d:\quicktime\Plugins\npqtplugin5.dll
FF - plugin: d:\quicktime\Plugins\npqtplugin6.dll
FF - plugin: d:\quicktime\Plugins\npqtplugin7.dll
FF - plugin: d:\vlc\npvlc.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, www.gmer.net…
Rootkit scan 2009-10-15 20:40
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés …

Recherche d’éléments en démarrage automatique cachés …

Recherche de fichiers cachés …

Scan terminé avec succès
Fichiers cachés: 0

.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-515967899-616249376-725345543-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
« 88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977 »=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,5d,97,d6,55,7c,84,f6,4b,89,0a,3c,
« 2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81 »=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,f4,f0,bb,20,2b,a0,b9,43,9b,7b,86,
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - ‹ winlogon.exe ›(764)
        c:\program files\fichiers communs\logishrd\bluetooth\LBTWlgn.dll
        c:\program files\fichiers communs\logishrd\bluetooth\LBTServ.dll
        .
        Heure de fin: 2009-10-15 20:41
        ComboFix-quarantined-files.txt 2009-10-15 18:41

Avant-CF: 2 998 784 000 octets libres
Après-CF: 3 209 654 272 octets libres

WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT=« Microsoft Windows Recovery Console » /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS=« Microsoft Windows XP Professionnel » /noexecute=optin /fastdetect

512 — E O F — 2009-09-16 18:26

cricri58 · Octobre 15, 2009, 9:04

Ok!!!

Fais ceci et lis bien

1)désactives la Restauration de ton système :

==> sert à supprimer les infections qui se trouvent dans la restauration du système.

en pressant les touches Windows + Pause

ou

==>Cliques sur démarrer.
==>Clic droit sur « Poste de travail » puis choisir « Propriétés ».
==>Sélectionnes l’onglet « Restauration du système ».

et fais ceci
==>Coches « Désactiver la Restauration du système sur tous les lecteurs » ou « Désactiver la Restauration du système » puis appliquer.
==>OK==>Redémarres ton PC

ensuite

Puis retournes sur « Poste de travail » , « Propriétés » décoches cette fois « Désactiver la Restauration du système »==>appliquer ==> puis ok.

aprés

Création du point de restauration:

==>vas dans le Menu Démarrer puis dans Programmes,
==> Accessoires et enfin dans Outils système,
==>Choisis Restauration du système,
=>Sélectionnes==> Créer un point de restauration,
==>Cliques sur Suivant,
==>Entres un nom pour le point de restauration : ce nom assez simple pour que tu le retrouves
=> Cliques ==>Créer et le point de restauration se créé automatiquement

tu me confirmes ces trois étapes

aprés

4)télécharges cet Utlitaire ==>FileHippo

==>FileHippo

installes et aprés analyse il te dira lesquels de tes logiciels qui ne ont pas à jour et le chemin pour le faire

installes mise à part les versions « Beta »

Passe un coup de Ccleaner Nettoyeur puis registre

==> Redémarres ton PC

Poste un dernier Log RSIT

@+ cricri58

matgap · Octobre 15, 2009, 9:33

Logfile of random’s system information tool 1.06 (written by random/random)
Run by Administrateur at 2009-10-15 21:39:19
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 4 GB (23%) free of 15 GB
Total RAM: 1023 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:39:22, on 15/10/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\Avast\aswUpdSv.exe
D:\Avast\ashServ.exe
C:\WINDOWS\Explorer.EXE
D:\Avast\ashDisp.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
D:\Adobe CS4\Acrobat 9.0\Acrobat\Acrobat_sl.exe
D:\Adobe CS4\Acrobat 9.0\Acrobat\Acrotray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
D:\Daemon tools\DAEMON Tools Lite\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\FileHippo.com\UpdateChecker.exe
D:\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
D:\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Pen_Tablet.exe
C:\WINDOWS\system32\WTablet\Pen_TabletUser.exe
C:\WINDOWS\system32\Pen_Tablet.exe
D:\Avast\ashMaiSv.exe
D:\Avast\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Administrateur\Bureau\RSIT.exe
C:\Program Files\trend micro\Administrateur.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = fr.ask.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = go.microsoft.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com…
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com…
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = [www.01net.com…[/url] | www.telecharger.com… | [url=http://www.rmc.fr]www.rmc.fr…](http://www.01net.com)
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d’aide de l’Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM..\Run: [avast!] D:\Avast\ashDisp.exe
O4 - HKLM..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] « C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe »
O4 - HKLM..\Run: [AdobeCS4ServiceManager] « C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe » -launchedbylogin
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] « D:\Adobe CS4\Acrobat 9.0\Acrobat\Acrobat_sl.exe »
O4 - HKLM..\Run: [Acrobat Assistant 8.0] « D:\Adobe CS4\Acrobat 9.0\Acrobat\Acrotray.exe »
O4 - HKLM..\Run: [SunJavaUpdateSched] « C:\Program Files\Java\jre6\bin\jusched.exe »
O4 - HKLM..\Run: [QuickTime Task] « D:\QuickTime\QTTask.exe » -atboottime
O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] « D:\Malwarebytes’ Anti-Malware\mbam.exe » /runcleanupscript
O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU..\Run: [Steam] « D:\Steam\Steam.exe » -silent
O4 - HKCU..\Run: [DAEMON Tools Lite] « D:\Daemon tools\DAEMON Tools Lite\daemon.exe » -autorun
O4 - HKCU..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU..\Run: [FileHippo.com] « C:\Program Files\FileHippo.com\UpdateChecker.exe » /background
O4 - HKCU..\RunOnce: [WiseStubReboot] MSIEXEC /quiet SKIP_PPU_DRIVER_INSTALL=1 /I « C:\Program Files\Fichiers communs\Wise Installation Wizard\WIS1C4551A64743409391E41477CD655043_9_09_0203.MSI » TRANSFORMS=« C:\Program Files\Fichiers communs\Wise Installation Wizard\WIS1C4551A64743409391E41477CD655043_9_09_0203.MST » WISE_SETUP_EXE_PATH=« c:\nvidia\winxp\185.85\is\PhysX_9.09.0408_SystemSoftware.exe »
O4 - Global Startup: Logitech SetPoint.lnk = D:\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Ajouter la cible du lien à un fichier PDF existant - C:\Program… Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Ajouter à un fichier PDF existant - C:\Program… Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir au format Adobe PDF - C:\Program… Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF - C:\Program… Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra ‹ Tools › menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra ‹ Tools › menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Avast\aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - D:\Avast\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Avast\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - D:\Avast\ashWebSv.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - D:\Ma-config.com\maconfservice.exe
O23 - Service: mental ray 3.5 Satellite (32-bit) (mi-raysat_3dsmax9_32) - Unknown owner - D:\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\WINDOWS\system32\Pen_Tablet.exe

–
End of file - 7922 bytes