Ha ok, reçu par mail (l'antispam l'a jeté à la poubelle), je le mets là moi-même alors.
DiagHelp version v1.4 -
http://www.malekal.com
excute le 18.11.2007 à 17:39:48.51
Liste des derniers fichies modifies/crees dans windir\system32 et prefetch
C:\WINDOWS\prefetch\WUAUCLT.EXE-1360D60A.pf -->18.11.2007 17:39:44
C:\WINDOWS\prefetch\NOTEPAD.EXE-2F2D61E1.pf -->18.11.2007 17:35:05
C:\WINDOWS\prefetch\CHCP.COM-17EDBDC9.pf -->18.11.2007 17:34:33
C:\WINDOWS\prefetch\CMD.EXE-034B0549.pf -->18.11.2007 17:34:21
C:\WINDOWS\prefetch\WINZIP32.EXE-2F3C90C9.pf -->18.11.2007 17:32:41
C:\WINDOWS\prefetch\EXPLORER.EXE-02121B1A.pf -->18.11.2007 17:31:55
C:\WINDOWS\prefetch\RUNDLL32.EXE-6E8D4657.pf -->18.11.2007 16:41:34
C:\WINDOWS\prefetch\ELIBAGLA.EXE-31D1DB4D.pf -->18.11.2007 16:23:14
C:\WINDOWS\prefetch\FIREFOX.EXE-06188867.pf -->18.11.2007 16:19:53
C:\WINDOWS\prefetch\DROPMYRIGHTS.EXE-32A949B5.pf -->18.11.2007 16:19:53
C:\WINDOWS\System32\drivers\avipbb.sys -->12.11.2007 17:21:47
C:\WINDOWS\System32\drivers\avgntdd.sys -->09.08.2007 13:04:11
C:\WINDOWS\System32\drivers\avgntmgr.sys -->18.07.2007 14:22:19
C:\WINDOWS\System32\drivers\update.sys -->23.04.2007 11:32:54
C:\WINDOWS\System32\drivers\sdbus.sys -->16.04.2007 11:34:04
C:\WINDOWS\System32\drivers\sffp_sd.sys -->16.04.2007 11:14:00
C:\WINDOWS\System32\drivers\sffp_mmc.sys -->16.04.2007 11:14:00
C:\WINDOWS\System32\wpa.dbl -->17.11.2007 20:06:09
C:\WINDOWS\System32\nvapps.xml -->17.11.2007 20:05:59
C:\WINDOWS\System32\PerfStringBackup.INI -->14.11.2007 19:12:37
C:\WINDOWS\System32\perfh009.dat -->14.11.2007 19:12:37
C:\WINDOWS\System32\perfc009.dat -->14.11.2007 19:12:37
C:\WINDOWS\System32\CONFIG.NT -->12.11.2007 12:54:58
C:\WINDOWS\System32\MRT.exe -->02.11.2007 08:12:57
C:\WINDOWS\System32\Uninstall.ico -->31.10.2007 19:20:25
C:\WINDOWS\System32\Help.ico -->31.10.2007 19:20:25
C:\WINDOWS\System32\xpsp3res.dll -->29.10.2007 11:04:03
C:\WINDOWS\System32\shell32.dll -->26.10.2007 04:34:01
C:\WINDOWS\System32\BitCometRes.dll -->03.10.2007 18:16:37
C:\WINDOWS\System32\lame_acm.xml -->03.10.2007 17:03:30
C:\WINDOWS\System32\qt-dx331.dll -->28.09.2007 18:07:52
C:\WINDOWS\System32\dpl100.dll -->28.09.2007 18:05:50
C:\WINDOWS\System32\divx.dll -->28.09.2007 18:05:40
C:\WINDOWS\System32\ac3acm.acm -->21.09.2007 02:52:46
C:\WINDOWS\System32\unrar.dll -->04.09.2007 18:56:10
C:\WINDOWS\System32\TZLog.log -->29.08.2007 06:50:46
C:\WINDOWS\System32\nscompat.tlb -->26.08.2007 11:26:33
C:\WINDOWS\System32\amcompat.tlb -->26.08.2007 11:26:33
C:\WINDOWS\System32\dxva_sig.txt -->26.08.2007 10:53:38
C:\WINDOWS\System32\inetcomm.dll -->21.08.2007 07:15:44
C:\WINDOWS\System32\wininet.dll -->20.08.2007 11:04:43
C:\WINDOWS\System32\webcheck.dll -->20.08.2007 11:04:42
C:\WINDOWS\WindowsUpdate.log -->18.11.2007 17:39:36
C:\WINDOWS\0.log -->17.11.2007 20:05:50
C:\WINDOWS\wiadebug.log -->17.11.2007 20:05:37
C:\WINDOWS\wiaservc.log -->17.11.2007 20:05:32
C:\WINDOWS\bootstat.dat -->17.11.2007 20:05:04
C:\WINDOWS\SchedLgU.Txt -->17.11.2007 20:03:55
C:\WINDOWS\NeroDigital.ini -->17.11.2007 14:13:21
C:\WINDOWS\OEWABLog.txt -->17.11.2007 10:56:39
C:\WINDOWS\wmsetup.log -->17.11.2007 10:56:38
C:\WINDOWS\setupapi.log -->16.11.2007 06:35:50
C:\WINDOWS\pxisys.ini -->14.11.2007 18:11:39
C:\WINDOWS\pxiesys.ini -->14.11.2007 18:11:39
C:\WINDOWS\tsoc.log -->14.11.2007 08:02:40
C:\WINDOWS\tabletoc.log -->14.11.2007 08:02:40
C:\WINDOWS\ocmsn.log -->14.11.2007 08:02:40
winlogon.exe
Verified: Signed
svchost.exe
Verified: Signed
ws2_32.dll
Verified: Signed
user32.dll
Verified: Signed
tcpip.sys
Verified: Signed
ndis.sys
Verified: Signed
null.sys
Verified: Signed
ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals -
http://www.sysinternals.com
------------------------------------------------------------------------------
explorer.exe pid: 1888
Command line: C:\WINDOWS\Explorer.EXE
Base Size Version Path
0x42c10000 0xcf000 7.00.6000.16544 C:\WINDOWS\system32\WININET.dll
0x00400000 0x9000 6.00.5441.0000 C:\WINDOWS\system32\Normaliz.dll
0x42990000 0x45000 7.00.6000.16544 C:\WINDOWS\system32\iertutil.dll
0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll
0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL
0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll
0x10000000 0x13000 1.00.0002.0001 C:\WINDOWS\system32\MssShellExt.dll
0x5f800000 0xf2000 6.02.8071.0000 C:\WINDOWS\system32\MFC42u.DLL
0x76b20000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL
0x01e30000 0x16000 1.01.1593.0000 C:\PROGRA~1\WINDOW~4\MpShHook.dll
0x78130000 0x9b000 8.00.50727.0762 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll
0x7c420000 0x87000 8.00.50727.0762 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll
0x42cf0000 0x124000 7.00.6000.16544 C:\WINDOWS\system32\urlmon.dll
0x42ef0000 0x5cb000 7.00.6000.16544 C:\WINDOWS\system32\ieframe.dll
0x42e40000 0x3c000 7.00.6000.16544 C:\WINDOWS\system32\webcheck.dll
0x164a0000 0x23000 5.02.5721.5145 C:\WINDOWS\system32\WPDShServiceObj.dll
0x024d0000 0xd000 1.01.0000.0582 C:\Program Files\Microsoft Virtual PC\VPCShExH.DLL
0x109c0000 0x2c000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceTypes.dll
0x10930000 0x49000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceApi.dll
0x7d1e0000 0x2be000 3.01.4000.4039 C:\WINDOWS\system32\msi.dll
0x01f00000 0x11000 3.06.0002.0074 C:\Program Files\AllChars\ALLCHR32.DLL
0x01f20000 0x11000 7.00.0000.0010 C:\Program Files\Avira\AntiVir PersonalEdition Classic\shlext.dll
0x7c250000 0x102000 7.10.3077.0000 C:\Program Files\Avira\AntiVir PersonalEdition Classic\MFC71U.DLL
0x01f40000 0x56000 7.10.3052.0004 C:\Program Files\Avira\AntiVir PersonalEdition Classic\MSVCR71.dll
0x5d360000 0xe000 7.10.3077.0000 C:\WINDOWS\system32\MFC71ENU.DLL
0x00fe0000 0xf000 0.01.0000.0000 C:\Program Files\Notepad++\nppshellext.dll
0x7c3a0000 0x7b000 7.10.3077.0000 C:\WINDOWS\system32\MSVCP71.dll
0x01fa0000 0x1b000 1.09.0005.0022 C:\Program Files\GiPo@Utilities\GiPo@MoveOnBoot\mboot.dll
------------------------------------------------------------------------------
explorer.exe pid: 2980
Command line: "C:\WINDOWS\explorer.exe" /n,/e,C:\
Base Size Version Path
0x42c10000 0xcf000 7.00.6000.16544 C:\WINDOWS\system32\WININET.dll
0x00400000 0x9000 6.00.5441.0000 C:\WINDOWS\system32\Normaliz.dll
0x42990000 0x45000 7.00.6000.16544 C:\WINDOWS\system32\iertutil.dll
0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll
0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL
0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll
0x42ef0000 0x5cb000 7.00.6000.16544 C:\WINDOWS\system32\ieframe.dll
0x42cf0000 0x124000 7.00.6000.16544 C:\WINDOWS\system32\urlmon.dll
0x10000000 0x13000 1.00.0002.0001 C:\WINDOWS\system32\MssShellExt.dll
0x5f800000 0xf2000 6.02.8071.0000 C:\WINDOWS\system32\MFC42u.DLL
0x01920000 0xd5000 1.04.0000.0000 C:\PROGRA~1\SPYBOT~1\SDHelper.dll
0x76b20000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL
0x10930000 0x49000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceApi.dll
0x74320000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll
0x021a0000 0x17000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll
0x01dc0000 0x11000 3.06.0002.0074 C:\Program Files\AllChars\ALLCHR32.DLL
0x01e90000 0xd000 1.01.0000.0582 C:\Program Files\Microsoft Virtual PC\VPCShExH.DLL
0x01d20000 0x56000 7.10.3052.0004 C:\Program Files\Avira\AntiVir PersonalEdition Classic\MSVCR71.dll
0x7c3a0000 0x7b000 7.10.3077.0000 C:\WINDOWS\system32\MSVCP71.dll
0x02660000 0x16000 1.01.1593.0000 C:\PROGRA~1\WINDOW~4\MpShHook.dll
0x78130000 0x9b000 8.00.50727.0762 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll
0x7c420000 0x87000 8.00.50727.0762 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll
0x00c60000 0x11000 7.00.0000.0010 C:\Program Files\Avira\AntiVir PersonalEdition Classic\shlext.dll
0x7c250000 0x102000 7.10.3077.0000 C:\Program Files\Avira\AntiVir PersonalEdition Classic\MFC71U.DLL
0x5d360000 0xe000 7.10.3077.0000 C:\WINDOWS\system32\MFC71ENU.DLL
0x00c90000 0xf000 0.01.0000.0000 C:\Program Files\Notepad++\nppshellext.dll
ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals -
http://www.sysinternals.com
------------------------------------------------------------------------------
winlogon.exe pid: 1380
Command line: winlogon.exe
Base Size Version Path
0x01000000 0x80000 \??\C:\WINDOWS\system32\winlogon.exe
0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll
0x74320000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll
0x20000000 0x17000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll
0x01dd0000 0x3b000 1.07.0017.0000 C:\WINDOWS\system32\WgaLogon.dll
0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL
0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll
0x76b20000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL
0x76080000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll
Volume in drive C is System
Volume Serial Number is 80FD-EBC5
Directory of C:\WINDOWS\system
17.07.2002 16:22 3'535 Wowpost.exe
1 File(s) 3'535 bytes
0 Dir(s) 36'167'233'536 bytes free
Volume in drive C is System
Volume Serial Number is 80FD-EBC5
Directory of C:\WINDOWS\system32
04.08.2004 13:00 6'144 csrss.exe
1 File(s) 6'144 bytes
0 Dir(s) 36'167'233'536 bytes free
Contenu de Downloaded Program Files
Volume in drive C is System
Volume Serial Number is 80FD-EBC5
Directory of C:\WINDOWS\Downloaded Program Files
16.11.2007 19:03 <DIR> .
16.11.2007 19:03 <DIR> ..
21.11.2005 17:21 65 desktop.ini
23.03.2007 11:17 1'292 erma.inf
03.11.2005 20:24 495 LegitCheckControl.inf
20.01.2000 15:25 1'162 Microsoft XML Parser for Java.osd
17.01.2007 23:27 345'512 MSDcode.dll
30.06.2005 15:19 227 MsnMessengerSetupDownloader.inf
14.08.2005 00:26 113'664 MsnMessengerSetupDownloader.ocx
17.05.2006 15:49 419'128 wlscBase.dll
17.05.2006 15:52 322 wlscBase.inf
9 File(s) 881'867 bytes
Total Files Listed:
9 File(s) 881'867 bytes
2 Dir(s) 36'167'233'536 bytes free
Recherche de rootkit! (Merci S!Ri)
Recherche d'infections connues
Export des clefs sensibles..
Liste des fichiers en exception sur le pare-feu XP SP2
"C:\\WINDOWS\\system32\\sessmgr.exe"="C:\\WINDOWS\\system32\\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\\WINDOWS\\system32\\dpvsetup.exe"="C:\\WINDOWS\\system32\\dpvsetup.exe:LocalSubNet:Enabled:Microsoft DirectPlay Voice Test"
"C:\\Program Files\\Cobian Backup 8\\cbInterface.exe"="C:\\Program Files\\Cobian Backup 8\\cbInterface.exe:*:Enabled:Cobian Backup Black Moon Interface"
"C:\\Program Files\\Macromedia\\Dreamweaver 8\\Dreamweaver.exe"="C:\\Program Files\\Macromedia\\Dreamweaver 8\\Dreamweaver.exe:*:Enabled:Dreamweaver 8"
"C:\\eMule\\emule.exe"="C:\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\FileZilla\\FileZilla.exe"="C:\\Program Files\\FileZilla\\FileZilla.exe:*:Enabled:FileZilla"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\WINDOWS\\system32\\dpnsvr.exe"="C:\\WINDOWS\\system32\\dpnsvr.exe:LocalSubNet:Enabled:Microsoft DirectPlay8 Server"
"C:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"="C:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe:LocalSubNet:Enabled:@xpsp3res.dll,-20000"
"C:\\WINDOWS\\system32\\rundll32.exe"="C:\\WINDOWS\\system32\\rundll32.exe:LocalSubNet:Enabled:Run a DLL as an App"
"C:\\Program Files\\GIGABYTE\\@BIOS\\gwflash.exe"="C:\\Program Files\\GIGABYTE\\@BIOS\\gwflash.exe:*:Disabled:gwflash"
"C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe"="C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"C:\\Program Files\\Zattoo\\zattood.exe"="C:\\Program Files\\Zattoo\\zattood.exe:*:Enabled:zattood"
"C:\\Program Files\\Maxtor\\ManagerApp\\MaxUtilities.exe"="C:\\Program Files\\Maxtor\\ManagerApp\\MaxUtilities.exe:*:Enabled:Maxtor EasyManage™"
"C:\\Program Files\\Zattoo\\Zattoo2.exe"="C:\\Program Files\\Zattoo\\Zattoo2.exe:*:Disabled: "
"C:\\Program Files\\BitComet\\BitComet.exe"="C:\\Program Files\\BitComet\\BitComet.exe:*:Disabled:BitComet - a BitTorrent Client"
"C:\\Program Files\\Remote Display Control\\cerhost.exe"="C:\\Program Files\\Remote Display Control\\cerhost.exe:*:Disabled:cerhost"
"C:\\Program Files\\EA SPORTS\\Tiger Woods PGA TOUR 07\\bin\\TW2007.exe"="C:\\Program Files\\EA SPORTS\\Tiger Woods PGA TOUR 07\\bin\\TW2007.exe:LocalSubNet:Disabled:Tiger Woods PGA TOUR® 07"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe"="C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
Export de la clef SharedTaskScheduler
[SharedTaskScheduler]
exports des policies
REGEDIT4
[system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
Export des clefs sensibles..
Rechercher adresses sensibles dans le fichier HOSTS...
catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2007-11-18 17:40:47
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:f8,64,e1,16,ea,9e,30,97,db,69,21,d7,66,67,80,5e,e8,87,56,74,4c,..
"p0"="C:\Program Files\DAEMON Tools\"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,01,d8,d0,38,ee,60,fd,4f,a1,ed,04,81,5f,60,22,ce,47,..
"khjeh"=hex:0d,40,a1,4b,68,ef,9c,bd,df,9c,48,2d,fe,8c,e7,8a,a7,f0,88,80,a7,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:ff,b9,bf,37,87,b5,70,90,21,d3,a3,53,16,07,75,2f,f5,46,0d,e8,37,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:e43ed5c0
"s2"=dword:7454f073
"h0"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:f8,64,e1,16,ea,9e,30,97,db,69,21,d7,66,67,80,5e,e8,87,56,74,4c,..
"p0"="C:\Program Files\DAEMON Tools\"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,01,d8,d0,38,ee,60,fd,4f,a1,ed,04,81,5f,60,22,ce,47,..
"khjeh"=hex:0d,40,a1,4b,68,ef,9c,bd,df,9c,48,2d,fe,8c,e7,8a,a7,f0,88,80,a7,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:d9,01,a7,e6,99,14,8c,4d,8a,ce,01,22,0e,b0,1f,91,e7,8d,06,31,8a,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:f8,64,e1,16,ea,9e,30,97,db,69,21,d7,66,67,80,5e,e8,87,56,74,4c,..
"p0"="C:\Program Files\DAEMON Tools\"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,01,d8,d0,38,ee,60,fd,4f,a1,ed,04,81,5f,60,22,ce,47,..
"khjeh"=hex:0d,40,a1,4b,68,ef,9c,bd,df,9c,48,2d,fe,8c,e7,8a,a7,f0,88,80,a7,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:d9,01,a7,e6,99,14,8c,4d,8a,ce,01,22,0e,b0,1f,91,e7,8d,06,31,8a,..
scanning hidden registry entries ...
scanning hidden files ...
scan completed successfully
hidden services: 0
hidden files: 0
KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG2 (
http://www.security.org.sg)
Process list by traversal of KiWaitListHead
4 - System
312 - MsMpEng.exe
400 - svchost.exe
496 - svchost.exe
776 - sqlservr.exe
808 - svchost.exe
960 - avguard.exe
1236 - csrss.exe
1316 - svchost.exe
1380 - winlogon.exe
1544 - services.exe
1548 - msssort.exe
1580 - lsass.exe
1768 - avgnt.exe
1788 - sched.exe
1872 - nvsvc32.exe
1888 - explorer.exe
1904 - cbService.exe
1924 - svchost.exe
2016 - CALMAIN.exe
2028 - svchost.exe
2208 - cbInterface.exe
2284 - MaxBackService.
2364 - MaxMenuMgr.exe
2472 - svchost.exe
2572 - ctfmon.exe
2724 - RTHDCPL.exe
2980 - explorer.exe
2996 - alg.exe
3388 - MSASCui.exe
3876 - StartupMonitor.
14700 - emule.exe
14884 - winamp.exe
18704 - firefox.exe
20704 - wuauclt.exe
21472 - cmd.exe
Total number of processes = 36
NOTE: Under WinXP, this will not show all processes.
KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG2 (
http://www.security.org.sg)
Driver/Module list by traversal of PsLoadedModuleList
804D7000 - \WINDOWS\system32\ntkrnlpa.exe
806E2000 - \WINDOWS\system32\hal.dll
BADA8000 - \WINDOWS\system32\KDCOM.DLL
BACB8000 - \WINDOWS\system32\BOOTVID.dll
BA6D0000 - sptd.sys
BADAA000 - \WINDOWS\System32\Drivers\WMILIB.SYS
BA6B8000 - \WINDOWS\System32\Drivers\SCSIPORT.SYS
BA6A7000 - pci.sys
BA8A8000 - isapnp.sys
BA679000 - ACPI.sys
BAE70000 - pciide.sys
BAB28000 - \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
BA8B8000 - MountMgr.sys
BA65A000 - ftdisk.sys
BADAC000 - dmload.sys
BA634000 - dmio.sys
BAB30000 - PartMgr.sys
BA8C8000 - VolSnap.sys
BA61C000 - atapi.sys
BAB38000 - iteraid.sys
BA8D8000 - iteatapi.sys
BA8E8000 - disk.sys
BA8F8000 - \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
BA5FC000 - fltMgr.sys
BA5EA000 - sr.sys
BA908000 - PxHelp20.sys
BA5D3000 - KSecDD.sys
BA53D000 - nipalk.sys
BA510000 - \WINDOWS\System32\drivers\NDIS.SYS
BAB40000 - \WINDOWS\System32\drivers\TDI.SYS
BA483000 - Ntfs.sys
BA46B000 - snapman.sys
BA450000 - Mup.sys
BA998000 - \SystemRoot\system32\DRIVERS\intelppm.sys
B9FA6000 - \SystemRoot\system32\DRIVERS\nv4_mini.sys
B9F92000 - \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
B9F6D000 - \SystemRoot\system32\DRIVERS\HDAudBus.sys
B9F4C000 - \SystemRoot\system32\DRIVERS\b57xp32.sys
BAB78000 - \SystemRoot\system32\DRIVERS\usbuhci.sys
B9F29000 - \SystemRoot\system32\DRIVERS\USBPORT.SYS
BAB80000 - \SystemRoot\system32\DRIVERS\usbehci.sys
B9E62000 - \SystemRoot\system32\DRIVERS\hcwPVRP2.sys
BA9A8000 - \SystemRoot\system32\DRIVERS\STREAM.SYS
B9E3F000 - \SystemRoot\system32\DRIVERS\ks.sys
BAB98000 - \SystemRoot\system32\DRIVERS\fdc.sys
BA9B8000 - \SystemRoot\system32\DRIVERS\serial.sys
BA404000 - \SystemRoot\system32\DRIVERS\serenum.sys
B9E2B000 - \SystemRoot\system32\DRIVERS\parport.sys
BA9C8000 - \SystemRoot\system32\DRIVERS\i8042prt.sys
BABA8000 - \SystemRoot\system32\DRIVERS\mouclass.sys
BABB0000 - \SystemRoot\system32\DRIVERS\kbdclass.sys
BA9D8000 - \SystemRoot\system32\DRIVERS\imapi.sys
BABC0000 - \SystemRoot\System32\DRIVERS\dvd43llh.sys
BA9E8000 - \SystemRoot\system32\DRIVERS\cdrom.sys
BA9F8000 - \SystemRoot\system32\DRIVERS\redbook.sys
B9D41000 - \SystemRoot\System32\Drivers\aacldfzw.SYS
BAA08000 - \SystemRoot\system32\DRIVERS\VMNetSrv.sys
BAEAF000 - \SystemRoot\system32\DRIVERS\audstub.sys
BAA18000 - \SystemRoot\system32\DRIVERS\rasl2tp.sys
BA3C8000 - \SystemRoot\system32\DRIVERS\ndistapi.sys
B9D02000 - \SystemRoot\system32\DRIVERS\ndiswan.sys
BAA28000 - \SystemRoot\system32\DRIVERS\raspppoe.sys
BAA38000 - \SystemRoot\system32\DRIVERS\raspptp.sys
B9CF1000 - \SystemRoot\system32\DRIVERS\psched.sys
BAA48000 - \SystemRoot\system32\DRIVERS\msgpc.sys
BAC38000 - \SystemRoot\system32\DRIVERS\ptilink.sys
BAC48000 - \SystemRoot\system32\DRIVERS\raspti.sys
B9CC0000 - \SystemRoot\system32\DRIVERS\rdpdr.sys
BAA58000 - \SystemRoot\system32\DRIVERS\termdd.sys
BADB8000 - \SystemRoot\system32\DRIVERS\swenum.sys
B9C67000 - \SystemRoot\system32\DRIVERS\update.sys
BA3AC000 - \SystemRoot\system32\DRIVERS\mssmbios.sys
BAA68000 - \SystemRoot\System32\Drivers\NDProxy.SYS
B7740000 - \SystemRoot\system32\drivers\RtkHDAud.sys
B771E000 - \SystemRoot\system32\drivers\portcls.sys
BAA78000 - \SystemRoot\system32\drivers\drmk.sys
BAA98000 - \SystemRoot\system32\DRIVERS\usbhub.sys
BADC4000 - \SystemRoot\system32\DRIVERS\USBD.SYS
BAC80000 - \SystemRoot\system32\DRIVERS\flpydisk.sys
BADC8000 - \SystemRoot\System32\Drivers\Fs_Rec.SYS
BAF1A000 - \SystemRoot\System32\Drivers\Null.SYS
BADCC000 - \SystemRoot\System32\Drivers\Beep.SYS
BACA0000 - \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
BACA8000 - \SystemRoot\System32\drivers\vga.sys
BADD2000 - \SystemRoot\System32\Drivers\mnmdd.SYS
BADD6000 - \SystemRoot\System32\DRIVERS\RDPCDD.sys
BAB50000 - \SystemRoot\System32\Drivers\Msfs.SYS
BAB90000 - \SystemRoot\System32\Drivers\Npfs.SYS
BA3D4000 - \SystemRoot\system32\DRIVERS\rasacd.sys
B3623000 - \SystemRoot\system32\DRIVERS\ipsec.sys
B35CB000 - \SystemRoot\system32\DRIVERS\tcpip.sys
B35A3000 - \SystemRoot\system32\DRIVERS\netbt.sys
B3582000 - \SystemRoot\system32\DRIVERS\ipnat.sys
B3560000 - \SystemRoot\System32\drivers\afd.sys
BAAB8000 - \SystemRoot\system32\DRIVERS\netbios.sys
B353A000 - \??\C:\WINDOWS\system32\drivers\vmm.sys
BABC8000 - \SystemRoot\system32\DRIVERS\usbccgp.sys
B3513000 - \SystemRoot\System32\Drivers\omcamvid.sys
BABD8000 - \SystemRoot\System32\Drivers\OVTCAMD.SYS
BABE8000 - \SystemRoot\system32\drivers\habu.sys
BABF8000 - \SystemRoot\system32\DRIVERS\ssmdrv.sys
B9D25000 - \SystemRoot\system32\DRIVERS\hidusb.sys
BAAC8000 - \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
BAC08000 - \SystemRoot\System32\Drivers\SCDEmu.SYS
B34C0000 - \SystemRoot\system32\DRIVERS\rdbss.sys
B3451000 - \SystemRoot\system32\DRIVERS\mrxsmb.sys
BAAD8000 - \SystemRoot\System32\Drivers\Fips.SYS
BAAE8000 - \SystemRoot\system32\DRIVERS\avipbb.sys
BADDA000 - \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys
B9C4F000 - \SystemRoot\System32\Drivers\ASPI32.SYS
BAAF8000 - \SystemRoot\system32\DRIVERS\wanarp.sys
B3666000 - \SystemRoot\system32\DRIVERS\mouhid.sys
B3662000 - \SystemRoot\system32\DRIVERS\kbdhid.sys
BAB18000 - \SystemRoot\System32\Drivers\Cdfs.SYS
B3411000 - \SystemRoot\System32\Drivers\dump_atapi.sys
BADE2000 - \SystemRoot\System32\Drivers\dump_WMILIB.SYS
BF800000 - \SystemRoot\System32\win32k.sys
BA3E4000 - \SystemRoot\System32\drivers\Dxapi.sys
BAC70000 - \SystemRoot\System32\watchdog.sys
BF9C3000 - \SystemRoot\System32\drivers\dxg.sys
BAF96000 - \SystemRoot\System32\drivers\dxgthk.sys
BF9D5000 - \SystemRoot\System32\nv4_disp.dll
BFFA0000 - \SystemRoot\System32\ATMFD.DLL
B1A74000 - \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys
B1A1F000 - \SystemRoot\system32\DRIVERS\mrxdav.sys
BAF35000 - \SystemRoot\System32\Drivers\cvintdrv.SYS
BADB4000 - \SystemRoot\System32\Drivers\ParVdm.SYS
B1A5C000 - \??\C:\WINDOWS\system32\drivers\EIO.sys
B1966000 - \SystemRoot\System32\Drivers\HTTP.sys
BAC28000 - \SystemRoot\system32\drivers\lvalarmk.dll
B1929000 - \SystemRoot\system32\drivers\wdmaud.sys
B1B10000 - \SystemRoot\system32\drivers\sysaudio.sys
B1631000 - \SystemRoot\system32\DRIVERS\srv.sys
B2568000 - \SystemRoot\system32\drivers\nimxpk.dll
B18F6000 - \SystemRoot\system32\drivers\niorbk.dll
B18B6000 - \SystemRoot\system32\drivers\usb6xxxk.dll
B14F5000 - \SystemRoot\system32\drivers\nidimk.dll
B149E000 - \SystemRoot\system32\drivers\nimdbgk.dll
B148D000 - \SystemRoot\system32\drivers\nimstsk.dll
B1453000 - \SystemRoot\system32\drivers\nimxdfk.dll
B141C000 - \SystemRoot\system32\drivers\nipxirmk.dll
B1397000 - \SystemRoot\system32\drivers\nidmxfk.dll
B137E000 - \SystemRoot\system32\drivers\nifslk.dll
B133D000 - \SystemRoot\system32\drivers\nimru2k.dll
B12F7000 - \SystemRoot\system32\drivers\nimsdrk.dll
B12C9000 - \SystemRoot\system32\drivers\nicdrk.dll
B126A000 - \SystemRoot\system32\drivers\niemrk.dll
B11E9000 - \SystemRoot\system32\drivers\niscdk.dll
B1182000 - \SystemRoot\system32\drivers\nisdigk.dll
B1066000 - \SystemRoot\system32\drivers\niswdk.dll
B0FA1000 - \SystemRoot\system32\drivers\nitiork.dll
B0DF0000 - \SystemRoot\system32\drivers\nixsrk.dll
AFE64000 - \SystemRoot\system32\drivers\kmixer.sys
BAEFA000 - \SystemRoot\System32\DRIVERS\KProcCheck.sys
Total number of drivers = 154
Liste des programmes installes
@BIOS B06.1124.01
3DMark03
Acronis Disk Director Suite
Ad-Aware SE Personal
Adobe Flash Player ActiveX
Adobe Photoshop 6.0
Adobe SVG Viewer
AllChars for Windows 3.6
Ant Movie Catalog
Application Suite
Araxis Merge 2001 Professional
ASF-AVI-RM-WMV Repair 1.82
ASUS nVidia Driver
Audacity 1.2.4
Avira AntiVir PersonalEdition Classic
BitComet 0.70
BlupiMania-2
CamStudio
Canon Camera Access Library
Canon Camera Support Core Library
Canon Camera Window DC_DV 5 for ZoomBrowser EX
Canon Camera Window DC_DV 6 for ZoomBrowser EX
Canon Camera Window MC 6 for ZoomBrowser EX
Canon CanoScan Toolbox 4.9
Canon G.726 WMP-Decoder
CANON iMAGE GATEWAY Task for ZoomBrowser EX
Canon Internet Library for ZoomBrowser EX
Canon MovieEdit Task for ZoomBrowser EX
Canon RAW Image Task for ZoomBrowser EX
Canon RemoteCapture Task for ZoomBrowser EX
Canon Utilities EOS Utility
Canon Utilities PhotoStitch
Canon Utilities ZoomBrowser EX
CartaGoGo v2.0.8
Catalog Wizard 2.0
CCleaner (remove only)
CDVista 1.46a
Chessmaster 10ème Edition
Chessmaster 10ème Edition
Cobian Backup 8
CodeStuff Starter
DriverMax 1.2
DropMyRights
DVD Data Rescue 2.1
DVD Identifier
DVD Region-Free 3.10
DVD Shrink 3.1.4
DVD43 v3.7.0
DynDNS Updater 3.0
EA SPORTS online 2007
EasyCleaner
EasyPHP 1.8
eMule
Enigma
EULAlyzer v1.2
EVEREST Home Edition v2.20
FaceGen Modeller 3.1
FileZilla (remove only)
Foxit Reader
GermaniX Transcoder LX v4.0
GeTax2005
GeTax2006
GiPo@MoveOnBoot 1.9.5
Google Earth
Google Video Player
GrapiNet 0.1.0.4
Hauppauge French Help Files and Resources
Hauppauge WinTV-PVR 150 Drivers
Hauppauge WinTV Infrared Remote
Hauppauge WinTV Scheduler
Hauppauge WinTV2000
HexEdit
High Definition Audio Driver Package - KB835221
High Definition Audio Driver Package - KB888111
HijackThis 2.0.2
HM NIS Edit 2.0.3
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Format SDK (KB902344)
Hotfix for Windows XP (KB896344)
Hotfix for Windows XP (KB909095)
Hotfix for Windows XP (KB909394)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB926239)
Hotfix for Windows XP (KB934428)
Hotfix for Windows XP (KB935448)
Hugin 0.6.1
IconArt
ImageCollection
InterVideo FilterSDK for Hauppauge
J2SE Runtime Environment 5.0 Update 11
J2SE Runtime Environment 5.0 Update 6
J2SE Runtime Environment 5.0 Update 9
Java(TM) 6 Update 2
Java(TM) SE Runtime Environment 6 Update 1
K-Lite Codec Pack 3.5.3 Full
KeePass Password Safe 1.07
Kyodai
Larousse Chambers Advanced Dictionary
Larry's Any Text File Indexer
Logitech Desktop Messenger
Logitech Harmony Remote Client
Logitech Harmony Remote Client
Macromedia Dreamweaver 8
Macromedia Extension Manager
Magic Button
Maxtor Quick Start
Maxtor Quick Start
MediaCoder 0.5.0
Microsoft .NET Compact Framework 1.0 SP3
Microsoft .NET Compact Framework 1.0 SP3 Developer
Microsoft .NET Compact Framework 2.0
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0
Microsoft .NET Framework 2.0
Microsoft .NET Framework 3.0
Microsoft .NET Framework 3.0
Microsoft ActiveSync
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Baseline Security Analyzer
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Device Emulator version 1.0 - ENU
Microsoft Document Explorer 2005
Microsoft Document Explorer 2005
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office 2000 Premium
Microsoft SQL Server 2005
Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)
Microsoft SQL Server 2005 Mobile [ENU] Developer Tools
Microsoft SQL Server 2005 Tools Express Edition
Microsoft SQL Server Native Client
Microsoft SQL Server Setup Support Files (English)
Microsoft SQL Server VSS Writer
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Virtual PC 2004
Microsoft Visual J# 2.0 Redistributable Package
Microsoft Visual J# 2.0 Redistributable Package
Microsoft Visual Studio 2005 Professional Edition - ENU
Microsoft Visual Studio 2005 Professional Edition - ENU
Microsoft Visual Studio 2005 Professional Edition - ENU Service Pack 1 (KB926601)
Mozilla Firefox (2.0.0.9)
MSDN Library for Visual Studio 2005
MSDN Library for Visual Studio 2005
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 6.0 Parser (KB933579)
Myst V End Of Ages
nanoPEG-Editor 2.3 Hauppauge Edition
National Instruments : logiciels
Nero 6 Ultra Edition
NI-653x Support 1.3.0
NI-APAL Error Files 1.1.0f1
NI-DAQ C and VB6 API
NI-DAQ CVI API
NI-DAQ Document Set
NI-DAQ INF Files
NI-DAQmx - LabVIEW shared documentation
NI-DAQmx 8.3
NI-DAQmx Documentation
NI-DAQmx DSA Support 1.7.0
NI-DAQmx MAX Support 1.6.0
NI-DAQmx OPC Support
NI-DAQmx Switch Core 1.9.0
NI-DIM 1.5.0f0
NI-MDBG 1.5.0f0
NI-MRU 2.6.0f0
NI-MXDF 1.6.0f0
NI-ORB 1.5.0f0
NI-PAL 1.12.0f0
NI-RPC 3.3.0f0
NI-RPC 3.3.0f0 for Phar Lap ETS
NI Assistant Framework
NI Assistant Framework LabVIEW Code Generator 6.1
NI Assistant Framework LabVIEW Code Generator 7.0
NI Assistant Framework LabVIEW Code Generator 7.1
NI Assistant Framework LabVIEW Code Generator 8.0
NI Assistant Framework LabVIEW Code Generator 8.2
NI Calibration Provider for MAX
NI Common Digital 1.2.0
NI CVI Instrument Driver Wizard Templates 8.1
NI DAQ Assistant 1.5.2
NI DataSocket 4.4.0
NI EULA Depot
NI Example Finder 8.2
NI Fusion Standard Library
NI LabVIEW Broker
NI LabVIEW Real-Time Error Dialog
NI LabVIEW Run-Time Engine 7.1.1
NI LabVIEW Run-Time Engine 8.0.1
NI LabVIEW Run-Time Engine 8.2
NI LabWindows/CVI 8.1 FDS Package
NI LabWindows/CVI 8.1 Full Development System Files
NI LabWindows/CVI 8.1 Help Files
NI LabWindows/CVI 8.1 Program Files
NI LabWindows/CVI 8.1 Run-Time Engine
NI LabWindows/CVI Advanced Analysis Libraries 8.1
NI LabWindows/CVI Code Generator
NI LabWindows/CVI FDS Sample Files 8.1
NI LabWindows/CVI Sample Files 8.1
NI LabWindows/CVI VS2005 AddIn
NI Legacy DAQmxRF
NI License Manager
NI Logos 4.7
NI LVBrokerAux1071
NI LVBrokerAux71
NI LVBrokerAux8.0
NI Math Kernel Libraries
NI MAX CVI Support
NI MDF Support
NI Measurement & Automation Explorer 4.1
NI Measurement Studio Recipe Processor
NI Measurements eXtensions for PAL 1.3.0
NI MIO Device Drivers 1.10.0
NI MXS
NI OPC Support
NI Portable Configuration
NI PXI Platform Services for Windows 2.1.0
NI PXI Platform Services Provider for MAX 2.1.0
NI Registration Wizard
NI Remote Provider for MAX
NI Remote PXI Provider for MAX
NI SCXI 1.7.0
NI Service Locator
NI Software Provider for MAX
NI STC 1.2.0
NI TDMS
NI Timing 1.8.0
NI Uninstaller
NI USI 1.4.0
NI Variable Engine
NI Variable Manager
NI Web Pipeline
NoniGPSPlot
Notepad++
Nullsoft Install System
NVIDIA Drivers
Oak Systems Sudoku
Opera 9.0
Paint Shop Pro 7 ESD
PDFCreator
PhotoFilter 1.0
Picasa 2
PicSizer
PlexTools Professional V2.26
Pocket Informant Calendar Rev 2
Pocket WakeUp
PowerDVD
PowerISO
QuickTime Alternative 1.67
RapidLetters v3.0.2
Razer Habu Config
Real Alternative 1.48
Realtek High Definition Audio Driver
Recover Files 2.1
Remote Display Control
Resco Picture Viewer
Second Copy 97
Security Update for Microsoft .NET Framework 2.0 (KB928365)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 (KB911565)
Security Update for Windows Media Player 9 (KB917734)
Security Update for Windows Media Player 9 (KB936782)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893066)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899589)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB938829)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB943460)
Simple Sudoku 4.2
SiteAdvisor for Internet Explorer
Skype 3.0
Skype Plugin Manager
Skype™ for Pocket PC 2.2
SmartClose 1.1
Solito
Spb Full Screen Keyboard
Spb Mobile Shell
Spybot - Search & Destroy 1.4
Sqirlz Morph
Standard SDK for Windows CE 5.0
StartupMonitor
SyncToy
SysExporter
TCPMP
Tiger Woods PGA TOUR 07
Tomb Raider: Legend 1.0
TomTom HOME
TubeMaster
TZ Connection Booster 2.6
UBSPay 5.0.004 (build 1, OFX)
UBSPay PayNet Extension 1.0.005 (b1)
UnderCoverXP 1.14
Uninstall Tool
Update for Windows XP (KB894391)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB910437)
Update for Windows XP (KB916595)
Update for Windows XP (KB920342)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB925720)
Update for Windows XP (KB925876)
Update for Windows XP (KB927891)
Update for Windows XP (KB929338)
Update for Windows XP (KB930916)
Update for Windows XP (KB931836)
Update for Windows XP (KB933360)
Update for Windows XP (KB936357)
Update for Windows XP (KB938828)
VTPlus32 pour WinTV (French)
WebFldrs XP
WebmailSync 1.02
Winamp (remove only)
WinAVI Video Converter
Windows Communication Foundation
Windows Defender
Windows Defender Signatures
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage v1.3.0254.0
Windows Genuine Advantage Validation Tool (KB892130)
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Live Messenger
Windows Live Safety Scanner
Windows Live Sign-in Assistant
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Format SDK Hotfix - KB891122
Windows Presentation Foundation
Windows Workflow Foundation
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891781
WinFF v0.2
WinRAR archiver
WinUAE 1.2.0
WinUpdatesList
WinZip
X264 H.264/AVC Video Codec (Sharktooth's build) (remove only)
XML Paper Specification Shared Components Pack 1.0
Zattoo 2.2.8 beta
Zoom Player (remove only)
Zune Desktop Theme
Volume in drive C is System
Volume Serial Number is 80FD-EBC5
Directory of C:\Program Files
17.11.2007 20:09 <DIR> .
17.11.2007 20:09 <DIR> ..
24.11.2005 18:07 <DIR> Acronis
20.05.2006 16:56 <DIR> Adobe
22.01.2006 09:32 <DIR> AdvancedBitrateCalculator
21.10.2006 17:24 <DIR> Ahead
22.02.2007 18:58 <DIR> AllChars
02.09.2006 18:21 <DIR> Alwil Software
06.08.2006 09:27 <DIR> Ant Movie Catalog
22.11.2005 19:17 <DIR> Araxis
28.12.2005 09:36 <DIR> ASF-AVI-RM-WMV Repair
15.09.2007 12:07 <DIR> Ashampoo
13.08.2006 10:44 <DIR> Audacity
12.11.2007 12:52 <DIR> Avira
04.08.2006 17:46 <DIR> AxiomX
03.10.2007 21:48 <DIR> BitComet
22.06.2006 08:55 <DIR> Bluewin
21.10.2006 18:26 <DIR> BlupiMania-2
12.10.2006 17:34 <DIR> BlupiMania2old
30.12.2006 12:09 <DIR> CamStudio
06.05.2007 10:13 <DIR> Canon
25.11.2005 19:19 <DIR> Cardfile
05.08.2006 09:13 <DIR> CartaGoGo
18.12.2005 00:15 <DIR> Catalog Wizard 2.0
12.11.2007 18:01 <DIR> CCleaner
20.02.2007 18:03 <DIR> CDex
08.04.2007 06:28 <DIR> CDex_150
08.11.2007 19:01 <DIR> CDVista 1.46a
23.11.2005 19:30 <DIR> CE Remote Tools
28.02.2007 06:28 <DIR> ClipTray
14.02.2007 23:27 <DIR> Cobian Backup 8
14.10.2006 15:27 <DIR> CodeStuff
06.05.2007 10:12 <DIR> Common Files
21.11.2005 17:19 <DIR> ComPlus Applications
11.11.2006 17:43 <DIR> ConWare
21.01.2006 20:04 <DIR> CyberLink
04.12.2006 18:12 <DIR> DAEMON Tools
28.02.2007 06:28 <DIR> DigiCat
28.02.2007 06:28 <DIR> Disclib
29.10.2006 11:10 <DIR> DVD Identifier
14.02.2007 23:27 <DIR> DVD Region-Free
10.03.2007 18:41 950'318 DVD Region-Free.zip
18.01.2006 20:10 <DIR> DVD Shrink
09.01.2006 18:34 <DIR> dvd43
28.12.2005 10:12 <DIR> dvddr
14.01.2006 18:27 <DIR> DynDNS Updater
14.01.2007 11:11 <DIR> EA SPORTS
04.12.2005 08:48 <DIR> Eac Mp3 ripper
12.11.2007 17:57 <DIR> EasyPHP1-8
18.01.2006 20:15 <DIR> Elaborate Bytes
21.02.2007 18:48 <DIR> Enigma
05.08.2006 18:33 <DIR> eRecall
10.02.2007 11:42 <DIR> EULAlyzer
13.03.2007 08:09 <DIR> FdW SoftWare
12.11.2007 17:57 <DIR> FileZilla
05.08.2006 17:52 <DIR> FilmUp
22.01.2006 09:59 <DIR> FlaskMpeg594
29.09.2007 09:12 <DIR> Foxit Software
21.04.2006 16:43 2'895'168 FoxitReader.exe
21.11.2005 19:24 <DIR> Futuremark
26.08.2007 11:29 <DIR> GermaniX Transcoder
05.06.2006 10:34 <DIR> GEtax
05.06.2006 10:34 <DIR> GEtax2002
05.06.2006 10:32 <DIR> GeTax2003
05.06.2006 10:32 <DIR> GeTax2004
05.06.2006 10:36 <DIR> GeTax2005
18.03.2007 11:25 <DIR> GeTax2006
06.01.2007 12:55 <DIR> GIGABYTE
22.06.2006 08:47 <DIR> GiPo@Utilities
01.09.2007 11:33 <DIR> Google
05.05.2006 09:25 <DIR> Gspot
23.03.2007 19:14 <DIR> HexEdit
14.11.2006 18:42 <DIR> HMSoft
23.11.2005 19:36 <DIR> HTML Help Workshop
13.11.2006 19:18 <DIR> hugin
04.11.2007 11:47 <DIR> ImageCollection
09.11.2006 18:43 <DIR> Innovative Solutions
21.11.2005 17:37 <DIR> Intel
10.10.2007 06:58 <DIR> Internet Explorer
30.11.2006 19:15 <DIR> ISO Creator
08.10.2007 21:53 <DIR> IVCsoft
23.11.2005 18:11 <DIR> Jasc Software Inc
26.07.2007 17:25 <DIR> Java
08.08.2007 17:30 <DIR> KeePass Password Safe
12.11.2007 18:54 <DIR> K-Lite Codec Pack
02.04.2006 16:48 <DIR> Kyodai
04.12.2005 09:20 <DIR> Lame
23.11.2005 18:22 <DIR> Larousse Multimédia
14.12.2005 17:50 <DIR> Larry's GDS Plugins
12.09.2006 17:20 <DIR> Lavalys
22.11.2005 19:48 <DIR> Lavasoft
28.01.2006 10:38 <DIR> Logitech
24.11.2005 07:39 <DIR> Macromedia
11.12.2006 18:40 <DIR> MarbleMadness
05.07.2007 17:02 <DIR> Maxtor
16.04.2006 09:56 <DIR> Media Player Classic
08.10.2007 17:49 <DIR> MediaCoder
17.11.2005 15:52 39'923 memtest86-3.2.iso.zip
05.08.2006 12:48 <DIR> Messenger
27.08.2006 07:45 <DIR> Microsoft
28.02.2007 18:45 <DIR> Microsoft .NET Compact Framework 1.0 SP3
15.11.2007 06:18 <DIR> Microsoft ActiveSync
26.07.2006 23:14 <DIR> Microsoft AntiSpyware
11.03.2006 12:45 <DIR> Microsoft Baseline Security Analyzer
23.11.2005 19:42 <DIR> Microsoft Device Emulator
26.11.2005 19:43 <DIR> microsoft frontpage
27.01.2007 09:51 <DIR> Microsoft Office
23.11.2005 19:45 <DIR> Microsoft SQL Server
23.11.2005 19:42 <DIR> Microsoft SQL Server 2005 Mobile Edition
14.10.2006 16:10 <DIR> Microsoft Virtual PC
07.03.2007 19:30 <DIR> Microsoft Visual Studio 8
23.11.2005 19:43 <DIR> Microsoft.NET
05.08.2006 08:59 <DIR> Mihov Link Checker
12.11.2007 18:46 <DIR> MKV
26.04.2003 09:35 130'048 moustique.exe
06.11.2006 19:11 <DIR> Movie Maker
18.11.2007 16:19 <DIR> Mozilla Firefox
02.07.2006 16:27 <DIR> Mp3DirectCut
04.12.2005 10:40 <DIR> MP3Gain
23.11.2005 19:37 <DIR> MSBuild
27.01.2007 10:05 <DIR> MSDN
21.11.2005 17:17 <DIR> MSN
21.11.2005 17:18 <DIR> MSN Gaming Zone
03.02.2007 10:33 <DIR> MSN Messenger
15.11.2006 08:09 <DIR> MSXML 4.0
15.08.2007 17:19 <DIR> MSXML 6.0
09.03.2007 18:29 <DIR> My Company Name
26.11.2005 14:50 <DIR> nanocosmos
30.04.2007 17:39 <DIR> National Instruments
21.11.2005 17:20 <DIR> NetMeeting
08.04.2007 16:57 <DIR> Notepad++
14.11.2006 19:03 <DIR> NSIS
21.12.2005 18:59 <DIR> Oak Systems
20.12.2005 18:24 <DIR> OGMuxer
21.11.2005 17:18 <DIR> Online Services
05.08.2006 10:24 <DIR> Opanda
01.01.2007 19:12 <DIR> Opera
13.06.2007 17:29 <DIR> Outlook Express
22.07.2006 12:15 <DIR> PackLoss
09.03.2007 19:18 <DIR> PDFCreator
04.11.2007 18:14 <DIR> Picasa2
21.09.2007 07:07 <DIR> PL folders
11.11.2007 19:14 <DIR> PLambert
16.01.2006 18:08 <DIR> Plextor
14.11.2006 18:51 <DIR> PLSoft
10.03.2007 11:23 <DIR> Pocket Informant Calendar
14.12.2006 23:24 <DIR> PowerISO
18.12.2005 11:23 <DIR> QuickTime Alternative
05.08.2006 09:12 <DIR> RapidLetters
28.12.2006 12:18 <DIR> Razer
05.08.2006 12:53 <DIR> Real Alternative
21.11.2005 18:26 <DIR> Realtek
03.11.2007 10:25 <DIR> Recover Files
04.03.2007 16:52 <DIR> Reference Assemblies
30.12.1997 15:11 837'632 RegClean.exe
14.10.2006 11:43 <DIR> RegSeeker
18.02.2007 12:04 <DIR> Remote Display Control
10.03.2007 11:45 <DIR> Resco
12.12.2006 18:36 <DIR> ResourceHacker
08.12.2006 18:40 <DIR> Restoration
03.12.2006 12:08 <DIR> RogueRemover
31.07.2006 18:12 <DIR> Screamer Radio
23.11.2005 18:16 <DIR> Second Copy 97
06.07.2006 17:45 <DIR> ShellExView
18.07.2006 17:21 <DIR> Simple Sudoku
31.12.2006 09:46 <DIR> Singular Inversions
14.02.2007 23:39 <DIR> SiteAdvisor
10.03.2007 11:57 <DIR> SKTools
18.12.2006 19:19 <DIR> Skype
19.12.2006 18:35 <DIR> SmartClose
24.02.2007 12:02 <DIR> SmartRipper
22.02.2007 18:53 <DIR> SNP Software
12.11.2007 18:21 <DIR> software4u
12.11.2007 18:15 <DIR> Spybot - Search & Destroy
11.08.2006 17:39 <DIR> Sqirlz Morph
17.11.2005 16:01 381'099 stabilitytest.exe
03.02.2006 18:12 <DIR> StabilityTests
05.08.2006 08:52 <DIR> Swf2Avi
21.10.2006 09:00 <DIR> SysExporter
15.12.2006 19:06 <DIR> Tomb Raider - Legend
03.03.2007 20:17 <DIR> TomTom HOME
12.11.2007 17:43 <DIR> ToniArts
21.10.2006 10:26 <DIR> Tools
12.11.2007 18:43 <DIR> Trend Micro
07.10.2007 12:09 <DIR> TubeMaster
19.08.2006 10:07 <DIR> Turbo Torrent
13.08.2006 17:02 <DIR> TZ Connection Booster
06.12.2006 18:29 <DIR> Ubisoft
25.11.2005 18:59 <DIR> UBS e-banking
16.06.2007 17:44 <DIR> UnderCoverXP
21.12.2005 18:59 56'892 Undo P4_2005 20051221 185902.Reg
03.02.2006 18:39 42'861 Undo P4_2005 20060203 183913.Reg
10.06.2006 08:55 46'744 Undo P4_2005 20060610 095525.Reg
22.06.2006 08:56 44'990 Undo P4_2005 20060622 095653.Reg
12.11.2006 13:12 49'831 Undo P4_2005 20061112 131247.Reg
28.02.2007 06:23 53'580 Undo P4_2005 20070228 062347.Reg
13.08.2006 11:37 <DIR> Uninstall Tool
09.06.2007 15:38 <DIR> VDownloader
25.11.2006 09:24 <DIR> Virtual CD v8
18.12.2005 18:50 <DIR> VirtualDub
12.05.2007 18:04 <DIR> VirtualDub 1.6.17
20.12.2005 18:13 <DIR> VirtualDubMod
26.11.2005 14:49 <DIR> vtplus
25.01.2006 18:06 <DIR> WebmailSync
02.02.2006 08:15 <DIR> WebWeaver
14.02.2007 23:41 <DIR> WhoLockMe
28.05.2007 09:39 <DIR> Winamp
08.10.2007 18:00 <DIR> WinAVI Video Converter
19.04.2006 17:12 <DIR> windirstat
18.02.2007 11:23 <DIR> Windows CE Tools
14.02.2007 23:41 <DIR> Windows Defender
05.08.2006 09:11 <DIR> Windows Live Safety Center
26.08.2007 11:01 <DIR> Windows Media Connect 2
26.08.2007 11:25 <DIR> Windows Media Player
21.11.2005 17:18 <DIR> Windows NT
01.10.2006 12:14 <DIR> WinFF
14.02.2007 23:41 <DIR> WinRAR
14.02.2007 23:41 <DIR> WinTV
19.03.2006 12:09 <DIR> WinUAE
21.10.2006 09:27 <DIR> WinUpdatesList
14.02.2007 23:41 <DIR> WinZip
19.04.2004 11:08 2'372'760 winzip90.exe
29.12.2005 17:03 <DIR> x264
21.11.2005 17:22 <DIR> xerox
07.05.2007 17:31 <DIR> Zattoo
28.02.2007 06:32 <DIR> Zeb-Utility
18.11.2007 12:10 <DIR> Zoom Player
13 File(s) 7'901'846 bytes
214 Dir(s) 36'150'689'792 bytes free
Volume in drive C is System
Volume Serial Number is 80FD-EBC5
Directory of C:\Program Files\common files
06.05.2007 10:12 <DIR> .
06.05.2007 10:12 <DIR> ..
24.11.2005 18:07 <DIR> Acronis
20.05.2006 17:05 <DIR> Adobe
21.10.2006 17:24 <DIR> Ahead
06.05.2007 10:12 <DIR> Canon
14.10.2006 15:46 <DIR> Cloanto
23.11.2005 19:30 <DIR> Designer
02.07.2006 16:32 <DIR> Gibinsoft Shared
22.11.2005 19:17 <DIR> InstallShield
26.11.2005 14:44 <DIR> IviSDK
05.11.2006 09:53 <DIR> Java
24.11.2005 07:40 <DIR> Macromedia
30.04.2007 17:27 <DIR> Merge Modules
07.03.2007 19:32 <DIR> Microsoft Shared
06.06.2006 12:32 <DIR> Motive
21.11.2005 17:20 <DIR> MSSoap
22.11.2005 01:03 <DIR> ODBC
21.11.2005 17:20 <DIR> Services
18.12.2006 19:19 <DIR> Skype
22.11.2005 01:03 <DIR> SpeechEngines
13.06.2007 17:31 <DIR> System
0 File(s) 0 bytes
22 Dir(s) 36'150'689'792 bytes free
Volume in drive C is System
Volume Serial Number is 80FD-EBC5
Directory of C:\
12.11.2004 09:41 57'344 DropMyRights.exe
1 File(s) 57'344 bytes
0 Dir(s) 36'150'689'792 bytes free
c:\Documents and Settings\All Users\Documents\SymNRT.exe
c:\Documents and Settings\All Users\Documents\Backup HTC\Program Files\Navigator\TomTom Navigator.exe
c:\Documents and Settings\All Users\Documents\Backup HTC\Program Files\PL_Test\PL_Test.exe
c:\Documents and Settings\All Users\Documents\Backup HTC\Program Files\Pocket Translator\Pocket Translator.Exe
c:\Documents and Settings\All Users\Documents\Backup HTC\Program Files\Spb Mobile Shell\MenuLauncher.exe
c:\Documents and Settings\All Users\Documents\Backup HTC\Program Files\Spb Mobile Shell\MobileShell.exe
c:\Documents and Settings\All Users\Documents\Backup HTC\Program Files\SuspendKillerDemo\SuspendKillerDemo.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\OziExplorer\OziCEgps.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\OziExplorer\OziExplorerCE.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\batty-arm.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\BoxMan\BoxMan_ARM.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\DEXplor\DEXPlor.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\FullScreenKeyboard\Full Screen Keyboard Options.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\FullScreenKeyboard\Full Screen Keyboard.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\FullScreenKeyboard\SpbServices.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\Jeux\Hitofri.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\Jeux\Chess\Chess.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\Jeux\Pocket Blocks\PocketBL.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\Jeux\Tetris\Tetris.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\KeePassPPC\KeePassPPC.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\Lemmings\isitar.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\Metro\MetroARM300WIN32_PLATFORM_PSPC.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\OmegaOne\1-Calc\1-Calc.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\PDASudoku\PDASudoku.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\PHM Tools\regedit.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\Resco\RCapture.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\Resco\RPicView.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\Skype\Skype.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\Spb Brain Evolution\SpbBrainEvolution.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\Spb Brain Evolution\SpbBrainEvolution-.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\Spb Pocket PC Tips And Tricks\SpbPocketPCTipsAndTricks.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\TCPMP\player.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\WebIS\PocketInformant\PITab.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\WebIS\PocketInformant\PIUpgrade.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\WebIS\PocketInformant\PocketInformant.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Program Files\WiFiFoFum\WiFiFoFum.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\sys\bin\TTMOBILE.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Temp\OziInstallers\img2ozf_setup.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Temp\OziInstallers\oziexplorer_PC\Img2ozf.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Temp\OziInstallers\oziexplorer_PC\oziexp_setup.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Temp\OziInstallers\oziexplorer_PC\oziexplorer 3d 1.6 setup.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Temp\OziInstallers\oziexplorer_PC\ozimrsid_dll_setup.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Temp\OziInstallers\oziexplore_PocketPC\Europe2001_setup.exe
c:\Documents and Settings\All Users\Documents\Backup HTC SD\Temp\OziInstallers\oziexplore_PocketPC\pocketpc_setup.exe
c:\Documents and Settings\All Users\Documents\Backup SD 2 gigas apres install Tomtom\InstallTomTomHOME.exe
c:\Documents and Settings\All Users\Documents\Backup SD 2 gigas apres install Tomtom\Start.exe
c:\Documents and Settings\All Users\Documents\Backup SD 2 gigas apres install Tomtom\2577\AutoRun.exe
c:\Documents and Settings\All Users\Documents\Backup SD 2 gigas apres install Tomtom\2577\autorun.exe-run
c:\Documents and Settings\All Users\Documents\Backup SD 2 gigas apres install Tomtom\CRACK\TomTom Navigator.exe
c:\Documents and Settings\All Users\Documents\Backup SD 2 gigas apres install Tomtom\Program Files\Lemmings\isitar.exe
c:\Documents and Settings\All Users\Documents\Backup SD 2 gigas apres install Tomtom\Program Files\Lode Runner\lodearm.exe
c:\Documents and Settings\All Users\Documents\Backup SD 2 gigas apres install Tomtom\Program Files\Metro\MetroARM300WIN32_PLATFORM_PSPC.exe
c:\Documents and Settings\All Users\Documents\Backup SD 2 gigas apres install Tomtom\Program Files\PDASudoku\PDASudoku.exe
c:\Documents and Settings\All Users\Documents\Backup SD 2 gigas apres install Tomtom\Program Files\Skype\Skype.exe
c:\Documents and Settings\All Users\Documents\Backup SD 2 gigas apres install Tomtom\Program Files\WiFiFoFum\WiFiFoFum.exe
c:\Documents and Settings\All Users\Documents\Backup SD 2 gigas apres install Tomtom\sys\bin\TTMOBILE.exe
c:\Documents and Settings\All Users\Documents\Backup SD 2 gigas apres install Tomtom\Windows\Menu Démarrer\Programmes\cerdisp.exe
c:\Documents and Settings\All Users\Documents\COPY_TO_SD_CARD\InstallTomTomHOME.exe
c:\Documents and Settings\All Users\Documents\COPY_TO_SD_CARD\Start.exe
c:\Documents and Settings\All Users\Documents\COPY_TO_SD_CARD\2577\AutoRun.exe
c:\Documents and Settings\All Users\Documents\COPY_TO_SD_CARD\2577\autorun.exe-install
c:\Documents and Settings\All Users\Documents\COPY_TO_SD_CARD\2577\autorun.exe-run
c:\Documents and Settings\All Users\Documents\COPY_TO_SD_CARD\CRACK\TomTom Navigator.exe
c:\Documents and Settings\All Users\Documents\COPY_TO_SD_CARD\sys\bin\TTMOBILE.exe
c:\Documents and Settings\All Users\Documents\Installers\winamp535_full_emusic-7plus.exe
Suite plus bas, trop long pour le forum.