Scan result of Farbar Recovery Scan Tool (FRST written by Farbar) Version: 20-07-2012 01 Ran by Administrateur at 23-07-2012 19:02:00 Running from E:\ Service Pack 3 (X86) OS Language: French Standard Attention: Could not load system hive. Error: Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus. ATTENTION:=====> THE TOOL IS NOT RUN FROM RECOVERY ENVIRONMENT AND WILL NOT FUNTION PROPERLY. ============ One Month Created Files and Folders ============== 2012-07-23 19:01 - 2012-07-23 19:02 - 00000000 ____D C:\FRST 2012-07-22 19:34 - 2012-07-22 20:26 - 00040776 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbamswissarmy.sys 2012-07-22 19:34 - 2012-07-22 19:34 - 00000000 ____D C:\Documents and Settings\Administrateur\Application Data\Malwarebytes 2012-07-22 19:06 - 2012-07-22 19:06 - 00000000 ____D C:\Documents and Settings\Sarl York Edward\Application Data\Malwarebytes 2012-07-22 18:33 - 2012-07-22 18:33 - 00000000 __SHD C:\found.000 2012-07-22 18:07 - 2012-07-23 18:52 - 00000062 __ASH C:\Documents and Settings\Administrateur\Local Settings\desktop.ini 2012-07-22 18:07 - 2012-07-22 21:19 - 00000184 ___SH C:\Documents and Settings\Administrateur\ntuser.ini 2012-07-22 18:07 - 2011-12-03 15:44 - 00000000 ____D C:\Documents and Settings\Administrateur\Application Data\Macromedia 2012-07-22 18:07 - 2011-04-27 20:12 - 00000000 ____D C:\Documents and Settings\Administrateur\Application Data\Trusteer 2012-07-22 18:07 - 2008-09-10 22:08 - 00000000 ____D C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft Help 2012-07-22 18:07 - 2007-07-21 12:12 - 00000062 __ASH C:\Documents and Settings\Administrateur\Application Data\desktop.ini 2012-07-22 18:07 - 2007-07-21 12:12 - 00000000 ___RD C:\Documents and Settings\Administrateur\Menu Démarrer 2012-07-22 18:07 - 2007-07-21 12:12 - 00000000 ___HD C:\Documents and Settings\Administrateur\Voisinage réseau 2012-07-22 18:07 - 2007-07-21 12:12 - 00000000 ___HD C:\Documents and Settings\Administrateur\Voisinage d'impression 2012-07-22 18:07 - 2007-07-21 12:12 - 00000000 ___HD C:\Documents and Settings\Administrateur\Local Settings\Historique 2012-07-22 18:07 - 2007-07-21 12:12 - 00000000 ____D C:\Documents and Settings\Administrateur\Favoris 2012-07-22 18:07 - 2007-07-21 12:12 - 00000000 ____D C:\Documents and Settings\Administrateur\Bureau 2012-07-22 18:07 - 2007-07-21 10:23 - 00000000 ___HD C:\Documents and Settings\Administrateur\Modèles 2012-07-22 12:41 - 2012-07-22 12:40 - 00110592 ____A C:\Windows\Minidump\Mini072212-02.dmp 2012-07-22 11:55 - 2012-07-22 11:58 - 00001632 ____A C:\Windows\IE9_main.log 2012-07-22 09:27 - 2012-07-22 09:27 - 00110592 ____A C:\Windows\Minidump\Mini072212-01.dmp 2012-07-22 08:26 - 2012-07-22 08:26 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware 2012-07-22 08:26 - 2012-07-22 08:26 - 00000000 ____D C:\Documents and Settings\Edward\Application Data\Malwarebytes 2012-07-22 08:26 - 2012-07-22 08:26 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Malwarebytes 2012-07-22 08:26 - 2012-07-03 13:46 - 00022344 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys 2012-07-22 08:10 - 2012-07-22 08:10 - 00000000 ____D C:\Program Files\VS Revo Group 2012-07-22 08:10 - 2012-07-22 08:10 - 00000000 ____D C:\Documents and Settings\Edward\Local Settings\Application Data\VS Revo Group 2012-07-22 08:10 - 2009-12-30 11:20 - 00027064 ____A (VS Revo Group) C:\Windows\System32\Drivers\revoflt.sys 2012-07-21 15:46 - 2012-07-21 15:46 - 00053368 ____A C:\Documents and Settings\Edward\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2012-07-21 15:46 - 2012-07-21 15:46 - 00000000 __SHD C:\Documents and Settings\Edward\PrivacIE 2012-07-21 15:45 - 2012-07-21 15:45 - 00000000 __SHD C:\Documents and Settings\Edward\IETldCache 2012-07-21 15:45 - 2012-07-21 15:45 - 00000000 ____D C:\Documents and Settings\Edward\Local Settings\Application Data\Scansoft 2012-07-21 15:45 - 2012-07-21 15:45 - 00000000 ____D C:\Documents and Settings\Edward\Local Settings\Application Data\Lexware 2012-07-21 15:45 - 2012-07-21 15:45 - 00000000 ____D C:\Documents and Settings\Edward\Local Settings\Application Data\Apple Computer 2012-07-21 15:45 - 2012-07-21 15:45 - 00000000 ____D C:\Documents and Settings\Edward\Application Data\Lexware 2012-07-21 15:45 - 2012-07-21 15:45 - 00000000 ____D C:\Documents and Settings\Edward\Application Data\Creative 2012-07-21 15:45 - 2012-07-21 15:45 - 00000000 ____D C:\Documents and Settings\Edward\Application Data\Apple Computer 2012-07-21 15:44 - 2012-07-22 19:46 - 00000062 __ASH C:\Documents and Settings\Edward\Local Settings\desktop.ini 2012-07-21 15:44 - 2012-07-22 08:08 - 00000000 ____D C:\Documents and Settings\Edward\Bureau 2012-07-21 15:44 - 2012-07-21 15:53 - 00000184 ___SH C:\Documents and Settings\Edward\ntuser.ini 2012-07-21 15:44 - 2012-07-21 15:45 - 00000000 ___RD C:\Documents and Settings\Edward\Favoris 2012-07-21 15:44 - 2011-12-03 15:44 - 00000000 ____D C:\Documents and Settings\Edward\Application Data\Macromedia 2012-07-21 15:44 - 2011-04-27 20:12 - 00000000 ____D C:\Documents and Settings\Edward\Application Data\Trusteer 2012-07-21 15:44 - 2008-09-10 22:08 - 00000000 ____D C:\Documents and Settings\Edward\Local Settings\Application Data\Microsoft Help 2012-07-21 15:44 - 2007-07-21 12:12 - 00000062 __ASH C:\Documents and Settings\Edward\Application Data\desktop.ini 2012-07-21 15:44 - 2007-07-21 12:12 - 00000000 __SHD C:\Documents and Settings\Edward\Local Settings\Historique 2012-07-21 15:44 - 2007-07-21 12:12 - 00000000 ___RD C:\Documents and Settings\Edward\Menu Démarrer 2012-07-21 15:44 - 2007-07-21 12:12 - 00000000 ___HD C:\Documents and Settings\Edward\Voisinage réseau 2012-07-21 15:44 - 2007-07-21 12:12 - 00000000 ___HD C:\Documents and Settings\Edward\Voisinage d'impression 2012-07-21 15:44 - 2007-07-21 10:23 - 00000000 ___HD C:\Documents and Settings\Edward\Modèles 2012-07-21 14:01 - 2012-07-22 08:15 - 00050238 ____A C:\Windows\ie8Uninst.log 2012-07-14 20:22 - 2012-07-14 20:22 - 00009010 ____A C:\Windows\KB2718523.log 2012-07-14 20:22 - 2012-07-14 20:22 - 00000000 __HDC C:\Windows\$NtUninstallKB2718523$ 2012-07-14 20:22 - 2012-07-14 20:22 - 00000000 __HDC C:\Windows\$NtUninstallKB2691442$ 2012-07-14 20:22 - 2012-07-14 20:22 - 00000000 __HDC C:\Windows\$NtUninstallKB2655992$ 2012-07-14 20:21 - 2012-07-14 20:21 - 00000000 __HDC C:\Windows\$NtUninstallKB2719985$ 2012-07-14 20:19 - 2012-07-14 20:19 - 00000000 __HDC C:\Windows\$NtUninstallKB2698365$ 2012-07-14 20:18 - 2012-07-14 20:19 - 00008901 ____A C:\Windows\KB2698365.log 2012-07-14 10:22 - 2012-07-14 10:22 - 09822920 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerInstaller.exe 2012-07-14 09:28 - 2012-07-14 20:22 - 00014005 ____A C:\Windows\KB2691442.log 2012-07-14 09:28 - 2012-07-14 20:22 - 00013082 ____A C:\Windows\KB2655992.log 2012-07-14 09:27 - 2012-07-14 20:21 - 00012819 ____A C:\Windows\KB2719985.log 2012-07-01 09:43 - 2012-07-21 12:34 - 00000000 ____D C:\Documents and Settings\Sarl York Edward\Application Data\Toolbar4 2012-07-01 09:43 - 2012-07-21 12:33 - 00000830 ____A C:\Windows\System32\InstallUtil.InstallLog 2012-07-01 09:26 - 2012-07-01 09:26 - 00000000 ____D C:\Documents and Settings\Sarl York Edward\Application Data\dvdcss ============ 3 Months Modified Files ======================== 2012-07-23 18:52 - 2012-07-22 18:07 - 00000062 __ASH C:\Documents and Settings\Administrateur\Local Settings\desktop.ini 2012-07-23 18:52 - 2007-07-21 10:28 - 00000062 __ASH C:\Documents and Settings\NetworkService\Local Settings\desktop.ini 2012-07-22 21:19 - 2012-07-22 18:07 - 00000184 ___SH C:\Documents and Settings\Administrateur\ntuser.ini 2012-07-22 21:19 - 2007-07-21 10:25 - 02078049 ____A C:\Windows\WindowsUpdate.log 2012-07-22 20:26 - 2012-07-22 19:34 - 00040776 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbamswissarmy.sys 2012-07-22 20:19 - 2007-07-21 10:47 - 00000062 __ASH C:\Documents and Settings\LocalService\Local Settings\desktop.ini 2012-07-22 20:10 - 2007-07-21 12:14 - 00000159 ____A C:\Windows\wiadebug.log 2012-07-22 20:10 - 2007-07-21 12:14 - 00000050 ____A C:\Windows\wiaservc.log 2012-07-22 20:09 - 2009-09-27 18:19 - 00250701 ____A C:\Windows\System32\NvApps.xml 2012-07-22 20:08 - 2007-07-21 10:47 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2012-07-22 19:48 - 2007-12-07 11:55 - 00000062 __ASH C:\Documents and Settings\Sarl York Edward\Local Settings\desktop.ini 2012-07-22 19:46 - 2012-07-21 15:44 - 00000062 __ASH C:\Documents and Settings\Edward\Local Settings\desktop.ini 2012-07-22 19:22 - 2012-03-31 08:38 - 00001002 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job 2012-07-22 18:45 - 2007-12-17 12:32 - 00000875 ____A C:\Windows\BRWMARK.INI 2012-07-22 12:40 - 2012-07-22 12:41 - 00110592 ____A C:\Windows\Minidump\Mini072212-02.dmp 2012-07-22 11:58 - 2012-07-22 11:55 - 00001632 ____A C:\Windows\IE9_main.log 2012-07-22 09:27 - 2012-07-22 09:27 - 00110592 ____A C:\Windows\Minidump\Mini072212-01.dmp 2012-07-22 08:15 - 2012-07-21 14:01 - 00050238 ____A C:\Windows\ie8Uninst.log 2012-07-22 08:15 - 2007-07-21 12:12 - 00758621 ____A C:\Windows\tsoc.log 2012-07-22 08:15 - 2007-07-21 12:12 - 00647740 ____A C:\Windows\comsetup.log 2012-07-22 08:15 - 2007-07-21 12:12 - 00389820 ____A C:\Windows\ntdtcsetup.log 2012-07-22 08:15 - 2007-07-21 12:12 - 00314806 ____A C:\Windows\iis6.log 2012-07-22 08:15 - 2007-07-21 12:12 - 00105483 ____A C:\Windows\ocmsn.log 2012-07-22 08:15 - 2007-07-21 12:12 - 00001374 ____A C:\Windows\imsins.log 2012-07-22 08:15 - 2007-07-21 10:47 - 00032500 ____A C:\Windows\SchedLgU.Txt 2012-07-22 08:14 - 2007-07-21 12:12 - 00406908 ____A C:\Windows\updspapi.log 2012-07-22 08:13 - 2011-10-12 21:52 - 00979699 ____A C:\Windows\setupapi.log 2012-07-22 08:13 - 2007-07-21 12:12 - 01972175 ____A C:\Windows\FaxSetup.log 2012-07-22 08:13 - 2007-07-21 12:12 - 00948979 ____A C:\Windows\ocgen.log 2012-07-22 08:13 - 2007-07-21 12:12 - 00098838 ____A C:\Windows\msgsocm.log 2012-07-21 15:53 - 2012-07-21 15:44 - 00000184 ___SH C:\Documents and Settings\Edward\ntuser.ini 2012-07-21 15:46 - 2012-07-21 15:46 - 00053368 ____A C:\Documents and Settings\Edward\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2012-07-21 15:45 - 2007-07-21 10:23 - 00151572 ____A C:\Windows\wmsetup.log 2012-07-21 14:03 - 2007-07-21 12:12 - 00001374 ____A C:\Windows\imsins.BAK 2012-07-21 12:33 - 2012-07-01 09:43 - 00000830 ____A C:\Windows\System32\InstallUtil.InstallLog 2012-07-20 19:59 - 2012-05-11 22:18 - 00313120 ____A C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat 2012-07-20 19:59 - 2012-04-14 17:21 - 00185150 ____A C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat 2012-07-20 18:55 - 2004-08-05 14:00 - 00012598 ____A C:\Windows\System32\wpa.dbl 2012-07-15 11:05 - 2008-02-05 14:44 - 00000069 ____A C:\Windows\NeroDigital.ini 2012-07-15 09:11 - 2007-07-21 12:11 - 00212880 ____A C:\Windows\System32\FNTCACHE.DAT 2012-07-14 20:22 - 2012-07-14 20:22 - 00009010 ____A C:\Windows\KB2718523.log 2012-07-14 20:22 - 2012-07-14 09:28 - 00014005 ____A C:\Windows\KB2691442.log 2012-07-14 20:22 - 2012-07-14 09:28 - 00013082 ____A C:\Windows\KB2655992.log 2012-07-14 20:21 - 2012-07-14 09:27 - 00012819 ____A C:\Windows\KB2719985.log 2012-07-14 20:19 - 2012-07-14 20:18 - 00008901 ____A C:\Windows\KB2698365.log 2012-07-14 20:19 - 2007-07-21 12:16 - 57442464 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe 2012-07-14 10:22 - 2012-07-14 10:22 - 09822920 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerInstaller.exe 2012-07-14 10:22 - 2012-03-31 08:38 - 00426184 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe 2012-07-14 10:22 - 2011-05-17 13:56 - 00070344 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl 2012-07-08 16:30 - 2012-04-14 17:21 - 00868387 ____A C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-3763518644-895795467-4165139698-1006-0.dat 2012-07-08 08:27 - 2007-12-19 13:17 - 00089088 ___AC C:\Documents and Settings\Sarl York Edward\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2012-07-08 07:09 - 2007-07-21 12:11 - 00172162 ____A C:\Windows\setupact.log 2012-07-08 03:00 - 2008-09-17 09:12 - 00000536 ____A C:\Windows\Tasks\NatSpeak Periodic Language Model Optimization.job 2012-07-06 07:26 - 2011-12-04 10:28 - 00000664 ____A C:\Windows\System32\d3d9caps.dat 2012-07-06 01:00 - 2008-09-17 09:12 - 00000428 ____A C:\Windows\Tasks\NatSpeak Periodic Data Collection.job 2012-07-03 13:46 - 2012-07-22 08:26 - 00022344 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys 2012-06-14 21:30 - 2012-06-14 19:55 - 00019717 ____A C:\Windows\KB2707511.log 2012-06-14 21:29 - 2007-07-21 12:12 - 01159948 ____A C:\Windows\System32\PerfStringBackup.INI 2012-06-14 21:16 - 2012-06-14 21:15 - 00016222 ____A C:\Windows\KB2699988-IE8.log 2012-06-14 21:15 - 2012-06-14 21:15 - 00007723 ____A C:\Windows\KB2685939.log 2012-06-14 21:12 - 2012-06-14 19:54 - 00013770 ____A C:\Windows\KB2709162.log 2012-06-13 15:55 - 2008-10-23 09:32 - 01866240 ____C (Microsoft Corporation) C:\Windows\System32\dllcache\win32k.sys 2012-06-13 15:55 - 2004-08-05 14:00 - 01866240 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys 2012-06-08 16:25 - 2011-01-21 16:44 - 08519168 ____C (Microsoft Corporation) C:\Windows\System32\dllcache\shell32.dll 2012-06-08 16:25 - 2004-08-05 14:00 - 08519168 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll 2012-06-05 17:50 - 2008-11-12 08:09 - 01172480 ____C (Microsoft Corporation) C:\Windows\System32\dllcache\msxml3.dll 2012-06-05 17:50 - 2008-04-14 04:33 - 01372672 ____C (Microsoft Corporation) C:\Windows\System32\dllcache\msxml6.dll 2012-06-05 17:50 - 2008-04-14 04:33 - 01372672 ____A (Microsoft Corporation) C:\Windows\System32\msxml6.dll 2012-06-05 17:50 - 2004-08-05 14:00 - 01172480 ____A (Microsoft Corporation) C:\Windows\System32\msxml3.dll 2012-06-04 11:30 - 2012-06-04 09:24 - 00012038 ____A C:\Windows\KB2718704.log 2012-06-04 06:32 - 2009-06-25 10:26 - 00152576 ____C (Microsoft Corporation) C:\Windows\System32\dllcache\schannel.dll 2012-06-04 06:32 - 2004-08-05 14:00 - 00152576 ____A (Microsoft Corporation) C:\Windows\System32\schannel.dll 2012-06-02 15:19 - 2011-09-21 12:09 - 00016408 ____A (Microsoft Corporation) C:\Windows\System32\wuapi.dll.mui 2012-06-02 15:19 - 2007-07-21 10:24 - 01933848 ___AC (Microsoft Corporation) C:\Windows\System32\dllcache\wuaueng.dll 2012-06-02 15:19 - 2007-07-21 10:24 - 01933848 ____A (Microsoft Corporation) C:\Windows\System32\wuaueng.dll 2012-06-02 15:19 - 2007-07-21 10:24 - 00577048 ___AC (Microsoft Corporation) C:\Windows\System32\dllcache\wuapi.dll 2012-06-02 15:19 - 2007-07-21 10:24 - 00577048 ____A (Microsoft Corporation) C:\Windows\System32\wuapi.dll 2012-06-02 15:19 - 2007-07-21 10:24 - 00329240 ___AC (Microsoft Corporation) C:\Windows\System32\dllcache\wucltui.dll 2012-06-02 15:19 - 2007-07-21 10:24 - 00329240 ____A (Microsoft Corporation) C:\Windows\System32\wucltui.dll 2012-06-02 15:19 - 2007-07-21 10:24 - 00219160 ___AC (Microsoft Corporation) C:\Windows\System32\dllcache\wuaucpl.cpl 2012-06-02 15:19 - 2007-07-21 10:24 - 00219160 ____A (Microsoft Corporation) C:\Windows\System32\wuaucpl.cpl 2012-06-02 15:19 - 2007-07-21 10:24 - 00210968 ___AC (Microsoft Corporation) C:\Windows\System32\dllcache\wuweb.dll 2012-06-02 15:19 - 2007-07-21 10:24 - 00210968 ____A (Microsoft Corporation) C:\Windows\System32\wuweb.dll 2012-06-02 15:19 - 2007-07-21 10:24 - 00053784 ___AC (Microsoft Corporation) C:\Windows\System32\dllcache\wuauclt.exe 2012-06-02 15:19 - 2007-07-21 10:24 - 00053784 ____A (Microsoft Corporation) C:\Windows\System32\wuauclt.exe 2012-06-02 15:19 - 2007-07-21 10:24 - 00035864 ___AC (Microsoft Corporation) C:\Windows\System32\dllcache\wups.dll 2012-06-02 15:19 - 2007-07-21 10:24 - 00035864 ____A (Microsoft Corporation) C:\Windows\System32\wups.dll 2012-06-02 15:19 - 2007-04-16 22:47 - 00016408 ____A (Microsoft Corporation) C:\Windows\System32\wuaucpl.cpl.mui 2012-06-02 15:19 - 2007-04-16 22:45 - 00045080 ____A (Microsoft Corporation) C:\Windows\System32\wups2.dll 2012-06-02 15:19 - 2007-04-16 22:45 - 00025112 ____A (Microsoft Corporation) C:\Windows\System32\wucltui.dll.mui 2012-06-02 15:19 - 2007-04-16 22:45 - 00019480 ____A (Microsoft Corporation) C:\Windows\System32\wuaueng.dll.mui 2012-06-02 15:19 - 2004-08-05 14:00 - 00097304 ___AC (Microsoft Corporation) C:\Windows\System32\dllcache\cdm.dll 2012-06-02 15:19 - 2004-08-05 14:00 - 00097304 ____A (Microsoft Corporation) C:\Windows\System32\cdm.dll 2012-06-02 15:18 - 2007-12-07 13:15 - 00275696 ____A (Microsoft Corporation) C:\Windows\System32\mucltui.dll 2012-06-02 15:18 - 2007-12-07 13:15 - 00214256 ____A (Microsoft Corporation) C:\Windows\System32\muweb.dll 2012-06-02 15:18 - 2007-12-07 13:15 - 00018672 ____A (Microsoft Corporation) C:\Windows\System32\mucltui.dll.mui 2012-05-31 15:22 - 2011-09-09 11:12 - 00606208 ____C (Microsoft Corporation) C:\Windows\System32\dllcache\crypt32.dll 2012-05-31 15:22 - 2004-08-05 14:00 - 00606208 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll 2012-05-28 20:17 - 2010-11-09 16:52 - 00536576 ____C (Microsoft Corporation) C:\Windows\System32\dllcache\msado15.dll 2012-05-21 09:40 - 2012-05-21 09:40 - 00110592 ____A C:\Windows\Minidump\Mini052112-01.dmp 2012-05-11 22:18 - 2012-05-11 22:18 - 00119192 ____A C:\Windows\KB2659262.log 2012-05-11 22:07 - 2012-05-11 22:07 - 00122300 ____A C:\Windows\KB2686509.log 2012-05-11 22:06 - 2012-05-11 22:06 - 00120672 ____A C:\Windows\KB2695962.log 2012-05-11 21:59 - 2012-05-11 18:47 - 00129639 ____A C:\Windows\KB2676562.log 2012-05-11 16:40 - 2012-06-14 19:55 - 00521728 ____C (Microsoft Corporation) C:\Windows\System32\dllcache\jsdbgui.dll 2012-05-11 16:40 - 2011-09-21 19:36 - 00743424 ____C (Microsoft Corporation) C:\Windows\System32\dllcache\iedvtool.dll 2012-05-11 16:40 - 2011-09-21 19:36 - 00247808 ____C (Microsoft Corporation) C:\Windows\System32\dllcache\ieproxy.dll 2012-05-11 16:40 - 2011-09-21 19:36 - 00012800 ____C (Microsoft Corporation) C:\Windows\System32\dllcache\xpshims.dll 2012-05-05 05:15 - 2008-10-23 09:32 - 02150400 ____C (Microsoft Corporation) C:\Windows\System32\dllcache\ntkrnlmp.exe 2012-05-05 05:15 - 2008-10-23 09:31 - 02194688 ____C (Microsoft Corporation) C:\Windows\System32\dllcache\ntoskrnl.exe 2012-05-05 05:15 - 2008-10-23 09:31 - 02071168 ____C (Microsoft Corporation) C:\Windows\System32\dllcache\ntkrnlpa.exe 2012-05-05 05:15 - 2004-08-05 14:00 - 02150400 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe 2012-05-05 05:14 - 2008-10-23 09:31 - 02028544 ____C (Microsoft Corporation) C:\Windows\System32\dllcache\ntkrpamp.exe 2012-05-05 05:14 - 2004-08-04 02:49 - 02028544 ____A (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe 2012-05-02 15:47 - 2011-09-21 19:12 - 00139656 ____C (Microsoft Corporation) C:\Windows\System32\dllcache\rdpwd.sys 2012-05-02 15:47 - 2007-07-21 10:22 - 00139656 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys ========================= Bamital & volsnap Check ============ C:\Windows\explorer.exe [2004-08-05 14:00] - [2008-04-14 04:34] - 1037824 ____A (Microsoft Corporation) f2317622d29f9ff0f88aeecd5f60f0dd C:\Windows\System32\winlogon.exe [2004-08-05 14:00] - [2008-04-14 04:34] - 0512000 ____A (Microsoft Corporation) dd73d6b9f6b4cb630cf35b438b540174 C:\Windows\System32\svchost.exe [2004-08-05 14:00] - [2008-04-14 04:34] - 0014336 ____A (Microsoft Corporation) e4bdf223cd75478bf44567b4d5c2634d C:\Windows\System32\services.exe [2004-08-05 14:00] - [2009-02-09 13:23] - 0111104 ____A (Microsoft Corporation) c3fb1d70cb88722267949694ba51759e C:\Windows\System32\User32.dll [2004-08-05 14:00] - [2008-04-14 04:33] - 0579584 ____A (Microsoft Corporation) e853f84d3ce2faa2a802e33cf89ac023 C:\Windows\System32\userinit.exe [2004-08-05 14:00] - [2008-04-14 04:34] - 0026624 ____A (Microsoft Corporation) e74ddb12188c2ff57a78624dbf7332fc C:\Windows\System32\Drivers\volsnap.sys [2004-08-05 14:00] - [2008-04-14 03:56] - 0053376 ____A (Microsoft Corporation) 46de1126684369bace4849e4fc8c43ca ==================== Restore Points (XP) ===================== ========================= Memory info ====================== Percentage of memory in use: 11% Total physical RAM: 2047.29 MB Available physical RAM: 1805.13 MB Total Pagefile: 3942.84 MB Available Pagefile: 3891.46 MB Total Virtual: 2047.88 MB Available Virtual: 1999.52 MB ======================= Partitions ========================= 1 Drive c: () (Fixed) (Total:149.05 GB) (Free:94.05 GB) NTFS ==>[Drive with boot components (Windows XP)] 3 Drive e: (USB DISK) (Removable) (Total:14.54 GB) (Free:1.18 GB) FAT32 Sur l'ordinateur : SARL_YORK_ED Disque ### Statut Taille Libre Dyn Gpt -------- --------- ----------- -------- --- --- Disque 0 Connect‚ 149 GB 0 B Partitions of Disk 0: =============== Sur l'ordinateur : SARL_YORK_ED Partition ### Type Taille D‚calage ------------- ---------------- ------- ----------- Partition 1 Principale 149 GB 32 KB ================================================================================== Disk: 0 Sur l'ordinateur : SARL_YORK_ED Partition 1 Type : 07 Masqu‚ : Non Active : Oui Volume ### Ltr Nom Fs Type Taille Statut Info ---------- --- ------- ------ ---------- ---------- --------- -------- * Volume 1 C NTFS Partition 149 GB Sain SystŠme ================================================================================== ======================= End Of Log ==========================