AVAST N'EST PAS UNE APPLICATION WIN32 VALIDE

Résolu
kentin2nhm Messages postés 36 Statut Membre -  
 V-X -
Bonjour,
Je suis a parement victime d'une infection Beagle. Sur certain forum on m'a indiqué d'utiliser FINDKILL pour coller ensuite le rapport sur un forum. Quelqu'un peut-il m'aider voici le rapport de FINDKILL.

----------------- FindyKill V4.709 ------------------

* User : easy M67 - PC-DE-QUENTIN
* Emplacement : C:\Program Files\FindyKill
* Outils Mis a jours le 10/12/08 par Chiquitine29
* Recherche effectuée à 17:10:49 le 20/12/2008
* Windows Vista - Internet Explorer 7.0.6001.18000

((((((((((((((((( *** Recherche *** ))))))))))))))))))

--------------- [ Processus actifs ] ----------------

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\ATK Hotkey\ASLDRSrv.exe
C:\Program Files\ATK Hotkey\Hcontrol.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\ATK Hotkey\ATKOSD.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\StkCSrv.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\System32\wpcumi.exe
C:\Windows\ATK0100\HControl.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Users\easy M67\AppData\Roaming\Delivery\DeliveryManager.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\System32\rundll32.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe

--------------- [ Fichiers/Dossiers infectieux ] ----------------

»»»» Presence des fichiers dans C:

»»»» Presence des fichiers dans C:\Windows

»»»» Presence des fichiers dans C:\Windows\Prefetch

Found ! - C:\Windows\prefetch\337164.EXE-E59DA893.pf
Found ! - C:\Windows\prefetch\716496.EXE-0242FD30.pf

»»»» Presence des fichiers dans C:\Windows\system32

Found ! [20/12/2008 16:53] - C:\Windows\system32\mdelk.exe
Found ! [08/12/2008 06:37] - C:\Windows\system32\wintems.exe
Found ! [20/12/2008 16:49] - C:\Windows\system32\ban_list.txt
Found ! [05/09/2007 19:31] - C:\Windows\system32\AutoRun.inf

»»»» Presence des fichiers dans C:\Windows\system32\config\systemprofile\AppData\Roaming

»»»» Presence des fichiers dans C:\Windows\system32\drivers

Found ! [20/12/2008 16:49] - C:\Windows\system32\drivers\srosa.sys
Found ! [20/12/2008 16:49] - C:\Windows\system32\drivers\srosa2.sys
Found ! [01/08/2006 10:08] - C:\Windows\system32\drivers\winfilse.exe
Found ! [20/12/2008 17:02] - "C:\Windows\system32\drivers\downld"
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\128139.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\1464942.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\14831295.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\14834057.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\14856833.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\14858330.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\14869032.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\14890248.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\14910809.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\14947688.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\1497968.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\149823.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\15000868.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\15025095.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\15027389.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\15038979.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\15042942.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\15044237.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\15049900.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\15094703.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\15108821.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\151258.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\15136231.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\15181845.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\15220346.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\15239659.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\1525502.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\1541227.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\1640709.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\1645576.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\1677494.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\170836.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\1713312.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\17247127.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\17256206.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\17284442.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\17286626.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\173098.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\181491.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\1869484.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\1888969.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\193020.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\1936190.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\196108.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\2007186.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\2094781.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\216841.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\218479.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\2185527.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\219431.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\2223217.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\224001.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\226185.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\226451.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\227621.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\229883.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\2309579.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\2382275.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\2427359.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\2439762.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\244968.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\246512.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\252737.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\254640.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\2586886.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\260100.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\2616074.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\2689582.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\272814.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\273204.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\273407.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\2756974.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\280536.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\286043.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\288211.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\290629.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\294046.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29483830.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29487964.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29508259.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29509632.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29524094.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29539818.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29561955.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29636461.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29664370.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29665337.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29667178.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29684572.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29686194.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29687941.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29699017.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\297103.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29722184.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29744648.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29775146.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29826860.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29866937.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\29880400.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\301159.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\328928.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\332204.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\335651.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\338553.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\349052.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\350300.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\351782.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\361922.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\362156.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\368240.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\386430.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\387178.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\389066.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\392670.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\401234.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\402685.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\416959.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\426912.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\429283.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\440531.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\44119625.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\44129282.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\44130654.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\44140763.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\44177252.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\44211166.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\44237047.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\44245799.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\44285407.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\44298839.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\450218.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\453432.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\461716.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\462371.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\481075.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\494382.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\499905.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\507237.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\548608.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\552337.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\571322.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\577546.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\585346.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\586080.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\598279.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\634721.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\750645.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\804372.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\827881.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\884525.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\893090.exe
Found ! [20/12/2008 17:02] - C:\Windows\system32\drivers\downld\976441.exe

»»»» Presence des fichiers dans C:\Users\easy M67\AppData\Roaming

Found ! [11/12/2008 19:18] - "C:\Users\easy M67\AppData\Roaming\m\flec006.exe"
Found ! [20/12/2008 16:48] - "C:\Users\easy M67\AppData\Roaming\m\list.oct"
Found ! [20/12/2008 16:49] - "C:\Users\easy M67\AppData\Roaming\m\data.oct"
Found ! [20/12/2008 16:49] - "C:\Users\easy M67\AppData\Roaming\m\srvlist.oct"
Found ! [20/12/2008 16:51] - "C:\Users\easy M67\AppData\Roaming\m\shared"
Found ! [06/12/2008 23:27] - "C:\Users\easy M67\AppData\Roaming\m"

»»»» Presence des fichiers dans C:\Users\EASYM6~1\AppData\Local\Temp

»»»» Presence des fichiers dans C:\Users\easy M67\Local Settings\Temporary Internet Files\Content.IE5

Found ! [08/12/2008 06:36] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1BWUMGFX\b64_2[1].jpg
Found ! [08/12/2008 06:37] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1BWUMGFX\b64_2[2].jpg
Found ! [08/12/2008 02:33] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1BWUMGFX\b64_3[1].jpg
Found ! [08/12/2008 08:45] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9HP8MAA2\b64[1].jpg
Found ! [08/12/2008 12:51] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9HP8MAA2\b64_1[1].jpg
Found ! [08/12/2008 12:52] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9HP8MAA2\b64_2[1].jpg
Found ! [20/12/2008 16:53] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AYEGR3KK\b64_3[1].jpg
Found ! [20/12/2008 16:53] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AYEGR3KK\b64_3[2].jpg
Found ! [20/12/2008 16:56] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BU9HPDJZ\b64[1].jpg
Found ! [09/12/2008 17:34] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BU9HPDJZ\b64_1[1].jpg
Found ! [09/12/2008 17:44] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQ7N1D6P\b64[1].jpg
Found ! [11/12/2008 19:18] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQ7N1D6P\b64[2].jpg
Found ! [20/12/2008 16:51] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQ7N1D6P\b64_1[1].jpg
Found ! [11/12/2008 19:09] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQ7N1D6P\b64_2[1].jpg
Found ! [08/12/2008 12:53] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBIYG676\b64[1].jpg
Found ! [08/12/2008 16:56] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBIYG676\b64[2].jpg
Found ! [08/12/2008 08:45] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBIYG676\b64_2[1].jpg
Found ! [08/12/2008 16:56] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBIYG676\b64_2[2].jpg
Found ! [08/12/2008 08:46] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K2NGKWS6\b64[1].jpg
Found ! [08/12/2008 12:52] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K2NGKWS6\b64[2].jpg
Found ! [08/12/2008 16:55] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K2NGKWS6\b64_1[1].jpg
Found ! [08/12/2008 16:55] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K2NGKWS6\b64_3[1].jpg
Found ! [08/12/2008 02:33] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KO9BZAHY\b64[1].jpg
Found ! [08/12/2008 02:33] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KO9BZAHY\b64_1[1].jpg
Found ! [08/12/2008 18:08] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LVQ79P2C\b64[1].jpg
Found ! [08/12/2008 18:04] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LVQ79P2C\b64_1[1].jpg
Found ! [11/12/2008 19:11] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OF1APILH\b64_1[1].jpg
Found ! [09/12/2008 17:46] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OF1APILH\b64_2[1].jpg
Found ! [09/12/2008 21:53] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OF1APILH\b64_2[2].jpg
Found ! [20/12/2008 16:55] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OF1APILH\b64_2[3].jpg
Found ! [11/12/2008 19:13] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OF1APILH\b64_3[1].jpg
Found ! [08/12/2008 16:57] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OKVVJM73\b64[1].jpg
Found ! [08/12/2008 06:38] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y9ID1DEF\b64[1].jpg
Found ! [08/12/2008 02:34] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y9ID1DEF\b64_2[1].jpg
Found ! [08/12/2008 06:37] - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y9ID1DEF\b64_3[1].jpg
Found ! [05/11/2008 11:25] - C:\Documents and Settings\easy M67\iWizz\Thumbnails\09FBBB78-B640-4E6A-BAC8-EC6C7ACFD286.jpg
Found ! [09/11/2008 19:17] - C:\Documents and Settings\easy M67\iWizz\Thumbnails\0FB64222-6AAE-4547-B262-B3DDC8376ED0.jpg
Found ! [27/07/2008 21:40] - C:\Documents and Settings\easy M67\iWizz\Thumbnails\28FDE204-FB64-4965-9903-4445C6EEAF2D.jpg
Found ! [29/10/2008 20:50] - C:\Documents and Settings\easy M67\iWizz\Thumbnails\52F77901-9462-4797-BB5E-0B648F8E9593.jpg
Found ! [09/11/2008 19:16] - C:\Documents and Settings\easy M67\iWizz\Thumbnails\5FC9BA70-5189-4A71-9B64-8F876947844D.jpg
Found ! [02/09/2008 19:53] - C:\Documents and Settings\easy M67\iWizz\Thumbnails\63B64114-7395-4337-9F62-42B17A1280FE.jpg
Found ! [09/11/2008 19:31] - C:\Documents and Settings\easy M67\iWizz\Thumbnails\77931EF2-BC8E-4A11-B9F5-FA0B64B12F0D.jpg
Found ! [05/11/2008 11:25] - C:\Documents and Settings\easy M67\iWizz\Thumbnails\80DA81AF-3CDE-4732-AC0D-BC9B6409692C.jpg
Found ! [05/11/2008 11:25] - C:\Documents and Settings\easy M67\iWizz\Thumbnails\8680CA5F-AEF4-4096-B64C-1FA9FA38B20B.jpg
Found ! [29/10/2008 20:49] - C:\Documents and Settings\easy M67\iWizz\Thumbnails\9E36B911-A493-4EB8-B64D-7C36F3B26E23.jpg
Found ! [29/10/2008 20:48] - C:\Documents and Settings\easy M67\iWizz\Thumbnails\A06AE301-CE2C-423E-954B-24996A9B647E.jpg
Found ! [08/12/2008 06:36] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1BWUMGFX\b64_2[1].jpg
Found ! [08/12/2008 06:37] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1BWUMGFX\b64_2[2].jpg
Found ! [08/12/2008 02:33] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1BWUMGFX\b64_3[1].jpg
Found ! [08/12/2008 08:45] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9HP8MAA2\b64[1].jpg
Found ! [08/12/2008 12:51] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9HP8MAA2\b64_1[1].jpg
Found ! [08/12/2008 12:52] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9HP8MAA2\b64_2[1].jpg
Found ! [20/12/2008 16:53] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AYEGR3KK\b64_3[1].jpg
Found ! [20/12/2008 16:53] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AYEGR3KK\b64_3[2].jpg
Found ! [20/12/2008 16:56] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BU9HPDJZ\b64[1].jpg
Found ! [09/12/2008 17:34] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BU9HPDJZ\b64_1[1].jpg
Found ! [09/12/2008 17:44] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQ7N1D6P\b64[1].jpg
Found ! [11/12/2008 19:18] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQ7N1D6P\b64[2].jpg
Found ! [20/12/2008 16:51] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQ7N1D6P\b64_1[1].jpg
Found ! [11/12/2008 19:09] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQ7N1D6P\b64_2[1].jpg
Found ! [08/12/2008 12:53] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBIYG676\b64[1].jpg
Found ! [08/12/2008 16:56] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBIYG676\b64[2].jpg
Found ! [08/12/2008 08:45] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBIYG676\b64_2[1].jpg
Found ! [08/12/2008 16:56] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBIYG676\b64_2[2].jpg
Found ! [08/12/2008 08:46] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K2NGKWS6\b64[1].jpg
Found ! [08/12/2008 12:52] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K2NGKWS6\b64[2].jpg
Found ! [08/12/2008 16:55] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K2NGKWS6\b64_1[1].jpg
Found ! [08/12/2008 16:55] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K2NGKWS6\b64_3[1].jpg
Found ! [08/12/2008 02:33] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KO9BZAHY\b64[1].jpg
Found ! [08/12/2008 02:33] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KO9BZAHY\b64_1[1].jpg
Found ! [08/12/2008 18:08] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LVQ79P2C\b64[1].jpg
Found ! [08/12/2008 18:04] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LVQ79P2C\b64_1[1].jpg
Found ! [11/12/2008 19:11] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OF1APILH\b64_1[1].jpg
Found ! [09/12/2008 17:46] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OF1APILH\b64_2[1].jpg
Found ! [09/12/2008 21:53] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OF1APILH\b64_2[2].jpg
Found ! [20/12/2008 16:55] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OF1APILH\b64_2[3].jpg
Found ! [11/12/2008 19:13] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OF1APILH\b64_3[1].jpg
Found ! [08/12/2008 16:57] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OKVVJM73\b64[1].jpg
Found ! [08/12/2008 06:38] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y9ID1DEF\b64[1].jpg
Found ! [08/12/2008 02:34] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y9ID1DEF\b64_2[1].jpg
Found ! [08/12/2008 06:37] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y9ID1DEF\b64_3[1].jpg
Found ! [04/11/2008 10:54] - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\BYS88GN9\NIKBRSCAN8T1OSCA20CZ21CAZJER0WCAKR6WV9CAVOENGTCAMU63IGCAQAVKHWCAEB64N8CAHLIZGICAYP4KO9CASH3FH2CA9QX1QHCACCMH90CAUNTZB6CADQXTT1CAPQIN1DCA8D3CQXCAHXDQUL.jpg
Found ! [05/11/2008 11:25] - C:\Users\easy M67\iWizz\Thumbnails\09FBBB78-B640-4E6A-BAC8-EC6C7ACFD286.jpg
Found ! [09/11/2008 19:17] - C:\Users\easy M67\iWizz\Thumbnails\0FB64222-6AAE-4547-B262-B3DDC8376ED0.jpg
Found ! [27/07/2008 21:40] - C:\Users\easy M67\iWizz\Thumbnails\28FDE204-FB64-4965-9903-4445C6EEAF2D.jpg
Found ! [29/10/2008 20:50] - C:\Users\easy M67\iWizz\Thumbnails\52F77901-9462-4797-BB5E-0B648F8E9593.jpg
Found ! [09/11/2008 19:16] - C:\Users\easy M67\iWizz\Thumbnails\5FC9BA70-5189-4A71-9B64-8F876947844D.jpg
Found ! [02/09/2008 19:53] - C:\Users\easy M67\iWizz\Thumbnails\63B64114-7395-4337-9F62-42B17A1280FE.jpg
Found ! [09/11/2008 19:31] - C:\Users\easy M67\iWizz\Thumbnails\77931EF2-BC8E-4A11-B9F5-FA0B64B12F0D.jpg
Found ! [05/11/2008 11:25] - C:\Users\easy M67\iWizz\Thumbnails\80DA81AF-3CDE-4732-AC0D-BC9B6409692C.jpg
Found ! [05/11/2008 11:25] - C:\Users\easy M67\iWizz\Thumbnails\8680CA5F-AEF4-4096-B64C-1FA9FA38B20B.jpg
Found ! [29/10/2008 20:49] - C:\Users\easy M67\iWizz\Thumbnails\9E36B911-A493-4EB8-B64D-7C36F3B26E23.jpg
Found ! [29/10/2008 20:48] - C:\Users\easy M67\iWizz\Thumbnails\A06AE301-CE2C-423E-954B-24996A9B647E.jpg

--------------- [ Registre / Startup ] ----------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
ehTray.exe=C:\Windows\ehome\ehTray.exe
swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
Sidebar=C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
E07FXLRD_368068="C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m
msnmsgr="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}="C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
Google Update="C:\Users\easy M67\AppData\Local\Google\Update\GoogleUpdate.exe" /c
SpybotSD TeaTimer=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
Buyertools Reminder="C:\Program Files\Buyertools Reminder\Reminder.exe" /autorun

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
Windows Defender=%ProgramFiles%\Windows Defender\MSASCui.exe -hide
SMSERIAL=C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
SynTPEnh=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
toolbar_eula_launcher=C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
NBKeyScan="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
Adobe Reader Speed Launcher="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
WPCUMI=C:\Windows\system32\WpcUmi.exe
SunJavaUpdateSched="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
HControl=C:\Windows\ATK0100\HControl.exe
NvSvc=RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
NvCplDaemon=RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
NvMediaCenter=RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
NeroFilterCheck=C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
HP Software Update=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
avast!=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
ISTray="C:\Program Files\Spyware Doctor\pctsTray.exe"
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
NoChange=1
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
Installed=1
<NO NAME>=

[HKEY_CURRENT_USER\software\local appwizard-generated applications\DestComp]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\GoogleToolbarNotifier]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\hprbui]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\patch]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\winfilse]

--------------- [ Registre / Clés infectieuses ] ----------------

Found ! - HKEY_USERS\S-1-5-21-4266048156-1978615420-2218163536-1000\Software\Local AppWizard-Generated Applications\patch
Found ! - HKEY_USERS\S-1-5-21-4266048156-1978615420-2218163536-1000\Software\Local AppWizard-Generated Applications\winfilse
Found ! - HKEY_USERS\S-1-5-21-4266048156-1978615420-2218163536-1000\Software\bisoft
Found ! - HKEY_USERS\S-1-5-21-4266048156-1978615420-2218163536-1000\Software\CHKPTR
Found ! - HKEY_USERS\S-1-5-21-4266048156-1978615420-2218163536-1000\Software\DateTime4
Found ! - HKEY_USERS\S-1-5-21-4266048156-1978615420-2218163536-1000\Software\FFC
Found ! - HKEY_USERS\S-1-5-21-4266048156-1978615420-2218163536-1000\Software\FirtR
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\patch
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winfilse
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SROSA
Found ! - HKEY_CURRENT_USER\Software\bisoft
Found ! - HKEY_CURRENT_USER\Software\DateTime4
Found ! - HKEY_CURRENT_USER\Software\FirtR
Found ! - HKEY_CURRENT_USER\Software\FFC
Found ! - HKEY_CURRENT_USER\Software\CHKPTR
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sK9Ou0s

--------------- [ Etat / Services ] ----------------

+- Services : [ Auto=2 / Demande=3 / Désactivé=4 ]

/!\ Ndisuio - Type de démarrage = 4

EapHost - Type de démarrage = 3

Wlansvc - Type de démarrage = 2

/!\ SharedAccess - Type de démarrage = 4

/!\ wuauserv - Type de démarrage = 4

/!\ wscsvc - Type de démarrage = 4

/!\ WinDefend - Type de démarrage = 4

--------------- [ Recherche dans supports amovibles] ----------------

+- Informations :

C: - Lecteur fixe
E: - Lecteur amovible
Q: - Lecteur fixe

+- Contenu de l'autorun : Q:\autorun.inf

[autorun]
ICON=AUTORUN\WDLOGO.ICO

+- presence des fichiers :

Found ! [15/11/2005 11:08][--ah-----] - Q:\autorun.inf

--------------- [ Registre / Mountpoint2 ] ----------------

-> Not found !

------------------- ! Fin du rapport ! --------------------
Configuration: Windows Vista
Firefox 3.0.4

27 réponses

  • 1
  • 2
Résumé de la discussion

La discussion porte sur une suspicion d'infection Beagle et sur l'intérêt de partager un rapport FindyKill, qui liste des processus système actifs et de multiples fichiers potentiellement malveillants. Plusieurs éléments du rapport montrent des entrées inhabituelles dans le dossier Windows et des fichiers dans AppData/Roaming et Temp, ainsi que des noms suspects comme downld\*.exe et AutoRun.inf. Des listes des processus et des chemins indiquent des services et des pilotes légitimes cohabitant avec potentiels modules malveillants, suggérant la nécessité d'une analyse antivirus mise à jour et d'une désinfection hors ligne. En cas de contexte technique, il convient d'éviter de publier des rapports bruts sans précautions et de privilégier des outils reconnus, puis d'évaluer les sauvegardes et la récupération du système.

Bobot (l'IA à votre service)
  1. V-X
     
    Salut,

    Findykill de chiquitine29 option 2:

    ▶ Branche tes disques amovibles à ton PC ( (clefs USB, disque dur externe, etc...) sans les ouvrir(

    ▶ Double-clique sur le raccourci FindyKill sur ton bureau

    ▶ Au menu principal, choisis( l'option 2 (Suppression)(

    /!\ Il y aura 2 redémarrages, laisse travailler l'outil jusqu'à l'apparition du message "nettoyage effectué" /!\

    𥭮nsuite, poste le rapport FindyKill.txt

    Note : le rapport FindyKill.txt est sauvegardé à la racine du disque.

    Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
    xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
    Désactive le « contrôle des comptes utilisateurs = UAC »
    (tu le réactiveras après ta désinfection): Ne pas oublier !!
    Désactiver l'UAC est nécessaire pour pouvoir faire fonctionner certains programmes sous Vista.
    - Vas dans Démarrer puis panneau de configuration
    - Double Clique sur l'icône "Comptes d'utilisateurs"
    - Clique ensuite sur désactiver et valide.

    ▶ Télécharge hijackthis

    ▶ Enregistre la cible sous .... "le bureau"

    ▶ Fais un double-clic sur "HJTInstall.exe" afin de lancer l'installation

    ▶ Clique sur Install ensuite sur "I Accept"

    ▶ Clique sur" Do a scan system and save log file"

    ▶ Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse

    ▶ Tuto hijackthis(Merci à Balltrap34)

    Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
    0
  2. kentin2nhm Messages postés 36 Statut Membre
     
    j'ai le rapport mais ca marche pas
    0
  3. kentin2nhm Messages postés 36 Statut Membre
     
    Et lui c'est celui de HijackThis

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18:10:26, on 20/12/2008
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\conime.exe
    C:\Windows\explorer.exe
    C:\Users\easy M67\AppData\Roaming\Delivery\DeliveryManager.EXE
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Windows\system32\wuauclt.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O1 - Hosts: ::1 localhost
    O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
    O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [WPCUMI] C:\Windows\system32\WpcUmi.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
    O4 - HKLM\..\Run: [HControl] C:\Windows\ATK0100\HControl.exe
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [E07FXLRD_368068] "C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
    O4 - HKCU\..\Run: [Google Update] "C:\Users\easy M67\AppData\Local\Google\Update\GoogleUpdate.exe" /c
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [Buyertools Reminder] "C:\Program Files\Buyertools Reminder\Reminder.exe" /autorun
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
    O4 - Global Startup: DeliveryManager.lnk = easy M67\AppData\Roaming\Delivery\DeliveryManager.EXE
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~2.0_0\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~2.0_0\bin\ssv.dll
    O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
    O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O13 - Gopher Prefix:
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase6662.cab
    O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
    O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
    O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\Windows\System32\StkCSrv.exe
    0
  4. V-X
     
    Re,

    Le rapport de findykill ce trouve sur ton disque.

    Double clic sur "ordinateur" et ensuite clic droit sur ton disque et "explorer"
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. kentin2nhm Messages postés 36 Statut Membre
     
    ----------------- FindyKill V4.709 ------------------

    * User : easy M67 - PC-DE-QUENTIN
    * executed from : C:\Program Files\FindyKill
    * Update on 10/12/08 par Chiquitine29
    * Start at 17:51:59 the 20/12/2008
    * Windows Vista - Internet Explorer 7.0.6001.18000

    ((((((((((((((( *** deleting *** ))))))))))))))))))

    --------------- [ Active Processes ] ----------------

    C:\Windows\System32\smss.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\services.exe
    C:\Windows\system32\lsass.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\winlogon.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\LogonUI.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\SLsvc.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Program Files\ATK Hotkey\ASLDRSrv.exe
    C:\Program Files\ATK Hotkey\Hcontrol.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe
    C:\Program Files\ATK Hotkey\ATKOSD.exe
    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    C:\Windows\system32\svchost.exe
    C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\System32\StkCSrv.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Windows\system32\WUDFHost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\DllHost.exe
    C:\Windows\system32\userinit.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\runonce.exe
    C:\Windows\system32\conime.exe

    --------------- [ Infected files / folders ] ----------------

    »»»» Supression files in C:

    »»»» Supression files in C:\Windows

    »»»» Supression files in C:\Windows\Prefetch

    Deleted ! - C:\Windows\prefetch\337164.EXE-E59DA893.pf
    Deleted ! - C:\Windows\prefetch\716496.EXE-0242FD30.pf

    »»»» Supression files in C:\Windows\system32

    Deleted ! - C:\Windows\system32\autorun.inf
    Deleted ! - C:\Windows\system32\mdelk.exe
    Deleted ! - C:\Windows\system32\wintems.exe
    Deleted ! - C:\Windows\system32\ban_list.txt

    »»»» Supression files in C:\Windows\system32\config\systemprofile\AppData\Roaming

    »»»» Supression files in C:\Windows\system32\drivers

    Deleted ! - C:\Windows\system32\drivers\srosa.sys
    Deleted ! - C:\Windows\system32\drivers\srosa2.sys
    Deleted ! - C:\Windows\system32\drivers\winfilse.exe
    Deleted ! - C:\Windows\system32\drivers\downld\128139.exe
    Deleted ! - C:\Windows\system32\drivers\downld\1464942.exe
    Deleted ! - C:\Windows\system32\drivers\downld\14831295.exe
    Deleted ! - C:\Windows\system32\drivers\downld\14834057.exe
    Deleted ! - C:\Windows\system32\drivers\downld\14856833.exe
    Deleted ! - C:\Windows\system32\drivers\downld\14858330.exe
    Deleted ! - C:\Windows\system32\drivers\downld\14869032.exe
    Deleted ! - C:\Windows\system32\drivers\downld\14890248.exe
    Deleted ! - C:\Windows\system32\drivers\downld\14910809.exe
    Deleted ! - C:\Windows\system32\drivers\downld\14947688.exe
    Deleted ! - C:\Windows\system32\drivers\downld\1497968.exe
    Deleted ! - C:\Windows\system32\drivers\downld\149823.exe
    Deleted ! - C:\Windows\system32\drivers\downld\15000868.exe
    Deleted ! - C:\Windows\system32\drivers\downld\15025095.exe
    Deleted ! - C:\Windows\system32\drivers\downld\15027389.exe
    Deleted ! - C:\Windows\system32\drivers\downld\15038979.exe
    Deleted ! - C:\Windows\system32\drivers\downld\15042942.exe
    Deleted ! - C:\Windows\system32\drivers\downld\15044237.exe
    Deleted ! - C:\Windows\system32\drivers\downld\15049900.exe
    Deleted ! - C:\Windows\system32\drivers\downld\15094703.exe
    Deleted ! - C:\Windows\system32\drivers\downld\15108821.exe
    Deleted ! - C:\Windows\system32\drivers\downld\151258.exe
    Deleted ! - C:\Windows\system32\drivers\downld\15136231.exe
    Deleted ! - C:\Windows\system32\drivers\downld\15181845.exe
    Deleted ! - C:\Windows\system32\drivers\downld\15220346.exe
    Deleted ! - C:\Windows\system32\drivers\downld\15239659.exe
    Deleted ! - C:\Windows\system32\drivers\downld\1525502.exe
    Deleted ! - C:\Windows\system32\drivers\downld\1541227.exe
    Deleted ! - C:\Windows\system32\drivers\downld\1640709.exe
    Deleted ! - C:\Windows\system32\drivers\downld\1645576.exe
    Deleted ! - C:\Windows\system32\drivers\downld\1677494.exe
    Deleted ! - C:\Windows\system32\drivers\downld\170836.exe
    Deleted ! - C:\Windows\system32\drivers\downld\1713312.exe
    Deleted ! - C:\Windows\system32\drivers\downld\17247127.exe
    Deleted ! - C:\Windows\system32\drivers\downld\17256206.exe
    Deleted ! - C:\Windows\system32\drivers\downld\17284442.exe
    Deleted ! - C:\Windows\system32\drivers\downld\17286626.exe
    Deleted ! - C:\Windows\system32\drivers\downld\173098.exe
    Deleted ! - C:\Windows\system32\drivers\downld\181491.exe
    Deleted ! - C:\Windows\system32\drivers\downld\1869484.exe
    Deleted ! - C:\Windows\system32\drivers\downld\1888969.exe
    Deleted ! - C:\Windows\system32\drivers\downld\193020.exe
    Deleted ! - C:\Windows\system32\drivers\downld\1936190.exe
    Deleted ! - C:\Windows\system32\drivers\downld\196108.exe
    Deleted ! - C:\Windows\system32\drivers\downld\2007186.exe
    Deleted ! - C:\Windows\system32\drivers\downld\2094781.exe
    Deleted ! - C:\Windows\system32\drivers\downld\216841.exe
    Deleted ! - C:\Windows\system32\drivers\downld\218479.exe
    Deleted ! - C:\Windows\system32\drivers\downld\2185527.exe
    Deleted ! - C:\Windows\system32\drivers\downld\219431.exe
    Deleted ! - C:\Windows\system32\drivers\downld\2223217.exe
    Deleted ! - C:\Windows\system32\drivers\downld\224001.exe
    Deleted ! - C:\Windows\system32\drivers\downld\226185.exe
    Deleted ! - C:\Windows\system32\drivers\downld\226451.exe
    Deleted ! - C:\Windows\system32\drivers\downld\227621.exe
    Deleted ! - C:\Windows\system32\drivers\downld\229883.exe
    Deleted ! - C:\Windows\system32\drivers\downld\2309579.exe
    Deleted ! - C:\Windows\system32\drivers\downld\2382275.exe
    Deleted ! - C:\Windows\system32\drivers\downld\2427359.exe
    Deleted ! - C:\Windows\system32\drivers\downld\2439762.exe
    Deleted ! - C:\Windows\system32\drivers\downld\244968.exe
    Deleted ! - C:\Windows\system32\drivers\downld\246512.exe
    Deleted ! - C:\Windows\system32\drivers\downld\252737.exe
    Deleted ! - C:\Windows\system32\drivers\downld\254640.exe
    Deleted ! - C:\Windows\system32\drivers\downld\2586886.exe
    Deleted ! - C:\Windows\system32\drivers\downld\260100.exe
    Deleted ! - C:\Windows\system32\drivers\downld\2616074.exe
    Deleted ! - C:\Windows\system32\drivers\downld\2689582.exe
    Deleted ! - C:\Windows\system32\drivers\downld\272814.exe
    Deleted ! - C:\Windows\system32\drivers\downld\273204.exe
    Deleted ! - C:\Windows\system32\drivers\downld\273407.exe
    Deleted ! - C:\Windows\system32\drivers\downld\2756974.exe
    Deleted ! - C:\Windows\system32\drivers\downld\280536.exe
    Deleted ! - C:\Windows\system32\drivers\downld\286043.exe
    Deleted ! - C:\Windows\system32\drivers\downld\288211.exe
    Deleted ! - C:\Windows\system32\drivers\downld\290629.exe
    Deleted ! - C:\Windows\system32\drivers\downld\294046.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29483830.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29487964.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29508259.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29509632.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29524094.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29539818.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29561955.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29636461.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29664370.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29665337.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29667178.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29684572.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29686194.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29687941.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29699017.exe
    Deleted ! - C:\Windows\system32\drivers\downld\297103.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29722184.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29744648.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29775146.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29826860.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29866937.exe
    Deleted ! - C:\Windows\system32\drivers\downld\29880400.exe
    Deleted ! - C:\Windows\system32\drivers\downld\301159.exe
    Deleted ! - C:\Windows\system32\drivers\downld\328928.exe
    Deleted ! - C:\Windows\system32\drivers\downld\332204.exe
    Deleted ! - C:\Windows\system32\drivers\downld\335651.exe
    Deleted ! - C:\Windows\system32\drivers\downld\338553.exe
    Deleted ! - C:\Windows\system32\drivers\downld\349052.exe
    Deleted ! - C:\Windows\system32\drivers\downld\350300.exe
    Deleted ! - C:\Windows\system32\drivers\downld\351782.exe
    Deleted ! - C:\Windows\system32\drivers\downld\361922.exe
    Deleted ! - C:\Windows\system32\drivers\downld\362156.exe
    Deleted ! - C:\Windows\system32\drivers\downld\368240.exe
    Deleted ! - C:\Windows\system32\drivers\downld\386430.exe
    Deleted ! - C:\Windows\system32\drivers\downld\387178.exe
    Deleted ! - C:\Windows\system32\drivers\downld\389066.exe
    Deleted ! - C:\Windows\system32\drivers\downld\392670.exe
    Deleted ! - C:\Windows\system32\drivers\downld\401234.exe
    Deleted ! - C:\Windows\system32\drivers\downld\402685.exe
    Deleted ! - C:\Windows\system32\drivers\downld\416959.exe
    Deleted ! - C:\Windows\system32\drivers\downld\426912.exe
    Deleted ! - C:\Windows\system32\drivers\downld\429283.exe
    Deleted ! - C:\Windows\system32\drivers\downld\440531.exe
    Deleted ! - C:\Windows\system32\drivers\downld\44119625.exe
    Deleted ! - C:\Windows\system32\drivers\downld\44129282.exe
    Deleted ! - C:\Windows\system32\drivers\downld\44130654.exe
    Deleted ! - C:\Windows\system32\drivers\downld\44140763.exe
    Deleted ! - C:\Windows\system32\drivers\downld\44177252.exe
    Deleted ! - C:\Windows\system32\drivers\downld\44211166.exe
    Deleted ! - C:\Windows\system32\drivers\downld\44237047.exe
    Deleted ! - C:\Windows\system32\drivers\downld\44245799.exe
    Deleted ! - C:\Windows\system32\drivers\downld\44285407.exe
    Deleted ! - C:\Windows\system32\drivers\downld\44298839.exe
    Deleted ! - C:\Windows\system32\drivers\downld\450218.exe
    Deleted ! - C:\Windows\system32\drivers\downld\453432.exe
    Deleted ! - C:\Windows\system32\drivers\downld\461716.exe
    Deleted ! - C:\Windows\system32\drivers\downld\462371.exe
    Deleted ! - C:\Windows\system32\drivers\downld\481075.exe
    Deleted ! - C:\Windows\system32\drivers\downld\494382.exe
    Deleted ! - C:\Windows\system32\drivers\downld\499905.exe
    Deleted ! - C:\Windows\system32\drivers\downld\507237.exe
    Deleted ! - C:\Windows\system32\drivers\downld\548608.exe
    Deleted ! - C:\Windows\system32\drivers\downld\552337.exe
    Deleted ! - C:\Windows\system32\drivers\downld\571322.exe
    Deleted ! - C:\Windows\system32\drivers\downld\577546.exe
    Deleted ! - C:\Windows\system32\drivers\downld\585346.exe
    Deleted ! - C:\Windows\system32\drivers\downld\586080.exe
    Deleted ! - C:\Windows\system32\drivers\downld\598279.exe
    Deleted ! - C:\Windows\system32\drivers\downld\634721.exe
    Deleted ! - C:\Windows\system32\drivers\downld\750645.exe
    Deleted ! - C:\Windows\system32\drivers\downld\804372.exe
    Deleted ! - C:\Windows\system32\drivers\downld\827881.exe
    Deleted ! - C:\Windows\system32\drivers\downld\884525.exe
    Deleted ! - C:\Windows\system32\drivers\downld\893090.exe
    Deleted ! - C:\Windows\system32\drivers\downld\976441.exe
    Deleted ! - "C:\Windows\system32\drivers\downld"

    »»»» Supression files in C:\Users\easy M67\AppData\Roaming

    Deleted ! - "C:\Users\easy M67\AppData\Roaming\m\flec006.exe"
    Deleted ! - "C:\Users\easy M67\AppData\Roaming\m\list.oct"
    Deleted ! - "C:\Users\easy M67\AppData\Roaming\m\data.oct"
    Deleted ! - "C:\Users\easy M67\AppData\Roaming\m\srvlist.oct"
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\.minerva 2.0.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\0 Joy].zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\007 DVD Maker 3.92.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\1CLICK DVD MOVIE 3.1.0.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Active Q 1.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Active Tree 1.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Adsense Coder 1.0.0.0 Beta.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Advanced Banner Rotation 1.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Advanced RSS2Web Personal 3.5.69.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\AIM Ad Hack Light 3.66.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Amethyst DWG-2-Image 2.01.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Amethyst ShadowFX 1.08b.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\AMRandom 4.2.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\ANSINE 2.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Any List 1.0.1.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\AUAU MP4 Converter 4.5.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\AutorunMagick Studio 3.1.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\AVG.Anti-Spyware.7.5.keygen.updated-fixed.12-2006.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\AVI2SWF Converter 1.00.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\AviTools 1.2.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Babya Publisher 1.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\BitComet Acceleration Tool 2.3.2.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\BKPing 3.0.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Bookmark Magic 2.32.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\BuzzFeed 1.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\c-Wall 3.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Cartoon Character Screensaver 1.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Christmas arrives in 1.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Comodo i-Vault 3.0.0.1.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\CSpace 1.27.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Cubic Menu for Dreamweaver 1.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Custom Toolbar.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\D-Weather 2.02.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Data Export - DB22Paradox 1.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\DeerDays Software 1.1.1.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Displaying 102001 - 104000 of 107598.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\dToolz 1.02.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Edit Prep 1.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\EjectCD 1.1.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\EMO Newsletter Publisher 9.1.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Expert Website Monitor 2.1.0.8.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Fancy Movies Editor 4.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\FaveNotes 3.41.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Flash Effect Maker 2.8326.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Flowers 1 Screensaver.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\font-tester.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\GCS Budget 1.03.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Got All Media 6.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Grab and Send 2.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\HeavyMail 1.73.613.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\hergun fish menu toolbar for Firefox 1.5.0.4.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Hosts Editor 1.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\HTMLCapture ActiveX Control 2.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\IBLMRedo 1.0.0.6.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\IconLock 1.1.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\ICQ6 Picture Changer 1.0.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\iPod Encoder Filter 1.04.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\JC Wireless Key Generator 1.01.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Kaspersky Internet Security 2006 Build 6.0.10.121(anti virus _spam_hacker)AVP.6.0.10.121.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Kaspersky.6.0.key.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Link Checker 0.60 alpha.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Link Web Extractor 2.5.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Load Tester 1.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Lolipops Demo Screensaver 1.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Mapi2Pop3 1.2.3.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Mazes Effects 1.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Media Mall Toolbar 4.5.178.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\MegaCrammer 4.1.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Memory Stick Data Recovery Software 2.0.1.5.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\MITCalc - Bevel Gearing 1.14c.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Mitglieder.GB Remover 3.5.1.11.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\MR Tech Systray 3.0 alpha 3.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\MSDict Concise Oxford-Hachette French Dictionary 3.10.15.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Net Workshop 4.5.1.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Network Ping 2.3.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\NeuroSolutions 5.05.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Nod32.v2.crack.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\ODLog 2.3.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Omnibar 0.3.0b.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Oven Fresh Popup Maker 1.5.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Passfaces Personal 1.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Paste from Visual Studio 1.2.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\PC Video Converter Studio 5.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\PDF Decrypt 2009.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Photo-Album 2.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\PixaMSN 0.61.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\PKristen SQL Query 1.0b.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Plato DVD to iPhone Converter 8.87.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Power MP3 Cutter Joiner 1.12.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Project Planner PE lite 4.7.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\ProQuant 1.3.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\PSP Video Converter 2.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\PSQSL 2.00.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Romania 1.0.0.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Secure HTML Lock 1.3.6.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Security Check Scripts 2.0RC1.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\SereneSound 0.9.13.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\SimplyCam 1.57.9.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\SmartMOUSE 2.1.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\SmoothView 1.0.2.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Smub FireFox Toolbar 1.0.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\SocketTools Library Edition 6.0 Build 6000.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\SOHO Business Toolbar 1.5.0.5.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Spine Picture2Text Converter 1.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\SubRip 1.50 beta 4.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Temperion 0.5 Beta 1.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\The Giants Toothache 1.00.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Thumbstacks 0.1.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Tubeesview 1.0.7.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\UAmp Video Player 1.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\ULTIMATE BLUETOOTH MOBILE PHONE SPY SOFTWARE NEW EDITION 2008 (multilanguage).zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\UML Editor 3.1.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\United States ZIP Code Database (Premium Edition) December 2008.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\VVPhoto 1.8.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Wally 1.3.2.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Window Finder 1.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Windows Media Professional Exhibitor 2.0.1.3.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\WinXMedia DVD Audio Ripper 4.35.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Wondershare DVD to Wii Converter 3.2.54.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Worms Crazy Golf Nokia 240x320 v2.2.1.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\XingMPEG Encoder 2.2.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\ZeroWave 2.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\Zoner 3D Photo Maker 1.0.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\[APP.-.NOKIA].-.Norton_AntiVirus_Mobile.zip
    Deleted ! - C:\Users\easy M67\AppData\Roaming\m\shared\[HGame_XP][AVG][jpn_jpn][Sweetsï¼ï¼ï¼ã‚ªã‚·ã‚ªã‚­Sweetieファンディスクï¼].zip
    Deleted ! - "C:\Users\easy M67\AppData\Roaming\m\shared"
    Deleted ! - "C:\Users\easy M67\AppData\Roaming\m"
    Deleted ! - "C:\Users\easy M67\AppData\Roaming\inst.exe"

    »»»» Supression files in C:\Users\EASYM6~1\AppData\Local\Temp

    »»»» Supression files in C:\Users\easy M67\Local Settings\Temporary Internet Files\Content.IE5

    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1BWUMGFX\b64_2[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1BWUMGFX\b64_2[2].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1BWUMGFX\b64_3[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9HP8MAA2\b64[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9HP8MAA2\b64_1[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9HP8MAA2\b64_2[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AYEGR3KK\b64_3[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AYEGR3KK\b64_3[2].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BU9HPDJZ\b64[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BU9HPDJZ\b64_1[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQ7N1D6P\b64[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQ7N1D6P\b64[2].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQ7N1D6P\b64_1[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQ7N1D6P\b64_2[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBIYG676\b64[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBIYG676\b64[2].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBIYG676\b64_2[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBIYG676\b64_2[2].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K2NGKWS6\b64[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K2NGKWS6\b64[2].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K2NGKWS6\b64_1[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K2NGKWS6\b64_3[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KO9BZAHY\b64[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KO9BZAHY\b64_1[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LVQ79P2C\b64[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LVQ79P2C\b64_1[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OF1APILH\b64_1[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OF1APILH\b64_2[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OF1APILH\b64_2[2].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OF1APILH\b64_2[3].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OF1APILH\b64_3[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OKVVJM73\b64[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y9ID1DEF\b64[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y9ID1DEF\b64_2[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y9ID1DEF\b64_3[1].jpg
    Deleted ! - C:\Documents and Settings\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\BYS88GN9\NIKBRSCAN8T1OSCA20CZ21CAZJER0WCAKR6WV9CAVOENGTCAMU63IGCAQAVKHWCAEB64N8CAHLIZGICAYP4KO9CASH3FH2CA9QX1QHCACCMH90CAUNTZB6CADQXTT1CAPQIN1DCA8D3CQXCAHXDQUL.jpg
    Deleted ! - C:\Documents and Settings\easy M67\iWizz\Thumbnails\09FBBB78-B640-4E6A-BAC8-EC6C7ACFD286.jpg
    Deleted ! - C:\Documents and Settings\easy M67\iWizz\Thumbnails\0FB64222-6AAE-4547-B262-B3DDC8376ED0.jpg
    Deleted ! - C:\Documents and Settings\easy M67\iWizz\Thumbnails\28FDE204-FB64-4965-9903-4445C6EEAF2D.jpg
    Deleted ! - C:\Documents and Settings\easy M67\iWizz\Thumbnails\52F77901-9462-4797-BB5E-0B648F8E9593.jpg
    Deleted ! - C:\Documents and Settings\easy M67\iWizz\Thumbnails\5FC9BA70-5189-4A71-9B64-8F876947844D.jpg
    Deleted ! - C:\Documents and Settings\easy M67\iWizz\Thumbnails\63B64114-7395-4337-9F62-42B17A1280FE.jpg
    Deleted ! - C:\Documents and Settings\easy M67\iWizz\Thumbnails\77931EF2-BC8E-4A11-B9F5-FA0B64B12F0D.jpg
    Deleted ! - C:\Documents and Settings\easy M67\iWizz\Thumbnails\80DA81AF-3CDE-4732-AC0D-BC9B6409692C.jpg
    Deleted ! - C:\Documents and Settings\easy M67\iWizz\Thumbnails\8680CA5F-AEF4-4096-B64C-1FA9FA38B20B.jpg
    Deleted ! - C:\Documents and Settings\easy M67\iWizz\Thumbnails\9E36B911-A493-4EB8-B64D-7C36F3B26E23.jpg
    Deleted ! - C:\Documents and Settings\easy M67\iWizz\Thumbnails\A06AE301-CE2C-423E-954B-24996A9B647E.jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1BWUMGFX\b64_2[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1BWUMGFX\b64_2[2].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1BWUMGFX\b64_3[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9HP8MAA2\b64[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9HP8MAA2\b64_1[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9HP8MAA2\b64_2[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AYEGR3KK\b64_3[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AYEGR3KK\b64_3[2].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BU9HPDJZ\b64[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BU9HPDJZ\b64_1[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQ7N1D6P\b64[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQ7N1D6P\b64[2].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQ7N1D6P\b64_1[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQ7N1D6P\b64_2[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBIYG676\b64[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBIYG676\b64[2].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBIYG676\b64_2[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBIYG676\b64_2[2].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K2NGKWS6\b64[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K2NGKWS6\b64[2].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K2NGKWS6\b64_1[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K2NGKWS6\b64_3[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KO9BZAHY\b64[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KO9BZAHY\b64_1[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LVQ79P2C\b64[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LVQ79P2C\b64_1[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OF1APILH\b64_1[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OF1APILH\b64_2[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OF1APILH\b64_2[2].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OF1APILH\b64_2[3].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OF1APILH\b64_3[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OKVVJM73\b64[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y9ID1DEF\b64[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y9ID1DEF\b64_2[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y9ID1DEF\b64_3[1].jpg
    Deleted ! - C:\Users\easy M67\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\BYS88GN9\NIKBRSCAN8T1OSCA20CZ21CAZJER0WCAKR6WV9CAVOENGTCAMU63IGCAQAVKHWCAEB64N8CAHLIZGICAYP4KO9CASH3FH2CA9QX1QHCACCMH90CAUNTZB6CADQXTT1CAPQIN1DCA8D3CQXCAHXDQUL.jpg
    Deleted ! - C:\Users\easy M67\iWizz\Thumbnails\09FBBB78-B640-4E6A-BAC8-EC6C7ACFD286.jpg
    Deleted ! - C:\Users\easy M67\iWizz\Thumbnails\0FB64222-6AAE-4547-B262-B3DDC8376ED0.jpg
    Deleted ! - C:\Users\easy M67\iWizz\Thumbnails\28FDE204-FB64-4965-9903-4445C6EEAF2D.jpg
    Deleted ! - C:\Users\easy M67\iWizz\Thumbnails\52F77901-9462-4797-BB5E-0B648F8E9593.jpg
    Deleted ! - C:\Users\easy M67\iWizz\Thumbnails\5FC9BA70-5189-4A71-9B64-8F876947844D.jpg
    Deleted ! - C:\Users\easy M67\iWizz\Thumbnails\63B64114-7395-4337-9F62-42B17A1280FE.jpg
    Deleted ! - C:\Users\easy M67\iWizz\Thumbnails\77931EF2-BC8E-4A11-B9F5-FA0B64B12F0D.jpg
    Deleted ! - C:\Users\easy M67\iWizz\Thumbnails\80DA81AF-3CDE-4732-AC0D-BC9B6409692C.jpg
    Deleted ! - C:\Users\easy M67\iWizz\Thumbnails\8680CA5F-AEF4-4096-B64C-1FA9FA38B20B.jpg
    Deleted ! - C:\Users\easy M67\iWizz\Thumbnails\9E36B911-A493-4EB8-B64D-7C36F3B26E23.jpg
    Deleted ! - C:\Users\easy M67\iWizz\Thumbnails\A06AE301-CE2C-423E-954B-24996A9B647E.jpg

    --------------- [ Registry / Infected keys ] ----------------

    Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
    Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
    Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SROSA
    Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
    Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SK9OU0S
    Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SK9OU0S
    Deleted ! - HKEY_USERS\S-1-5-21-4266048156-1978615420-2218163536-1000\Software\Local AppWizard-Generated Applications\patch
    Deleted ! - HKEY_USERS\S-1-5-21-4266048156-1978615420-2218163536-1000\Software\Local AppWizard-Generated Applications\winfilse

    --------------- [ States / Restarting of services ] ----------------

    +- Services : [ Auto=2 / Request=3 / Disable=4 ]

    Ndisuio - Type of startup = 3

    EapHost - Type of startup = 2

    Wlansvc - Type of startup = 2

    SharedAccess - Type of startup = 2

    wuauserv - Type of startup = 2

    wscsvc - Type of startup = 2

    WinDefend - Type of startup = 2

    --------------- [ Cleaning removable drives ] ----------------

    +- Informations :

    C: - Lecteur fixe
    E: - Lecteur amovible
    Q: - Lecteur fixe

    +- deleting files :

    Deleted ! - Q:\autorun.inf

    --------------- [ Registry / Mountpoint2 ] ----------------

    -> Not found !

    --------------- [ Searching Cracks / Keygen ] ----------------

    ---------------- ! End of report ! ------------------
    0
  7. kentin2nhm Messages postés 36 Statut Membre
     
    je l'ai envoyé mais il ne s'affiche pas
    0
  8. V-X
     
    Re,

    Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
    0
    1. kentin2nhm Messages postés 36 Statut Membre
       
      c'est bon
      0
  9. kentin2nhm Messages postés 36 Statut Membre
     
    bonne nouvelle j'ai l'impression que le wi-fi marche de nouveau mais toujours pas avast!!!
    0
  10. V-X
     
    Re,

    Télécharge et installe MalwareByte's Anti-Malware
    Malwarebyte

    Mets le à jour

    ▶ Double clique sur le raccourci de MalwareByte's Anti-Malware qui est sur le bureau.

    ▶ Sélectionne Exécuter un examen complet si ce n'est pas déjà fait

    ▶ clique sur Rechercher

    ▶ Une fois le scan terminé, une fenêtre s'ouvre, clique sur sur Ok

    Si MalwareByte's n'a rien détecté, clique sur Ok Un rapport va apparaître ferme-le.

    Si MalwareByte's a détecté des infections, clique sur Afficher les résultats ensuite sur Supprimer la sélection

    Enregistre le rapport sur ton Bureau comme cela il sera plus facile à retrouver, poste ensuite ce rapport.

    Note : Si MalwareByte's a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok

    Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.

    Tutoriel pour MalwareByte's
    0
  11. kentin2nhm Messages postés 36 Statut Membre
     
    voici le rapport de MalwareByte's Anti-Malware

    Malwarebytes' Anti-Malware 1.30
    Version de la base de données: 1412
    Windows 6.0.6001 Service Pack 1

    20/12/2008 20:21:35
    mbam-log-2008-12-20 (20-21-35).txt

    Type de recherche: Examen complet (C:\|)
    Eléments examinés: 168042
    Temps écoulé: 1 hour(s), 24 minute(s), 36 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 0
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 0

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    (Aucun élément nuisible détecté)
    0
  12. V-X
     
    Re,

    ==>Télécharge random's system information tool (RSIT) et enregistre le sur ton bureau.

    ==>Double clique sur RSIT.exe pour lancer l'outil.

    ==>Clique sur ' continue ' à l'écran Disclaimer.

    ==>Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.

    ==>Une fois le scan fini , 2 rapports vont apparaitre. Poste le contenu des 2 rapports
    ( log.txt & info.txt )

    (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

    Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
    0
  13. kentin2nhm Messages postés 36 Statut Membre
     
    line-1:
    Error Subscript unsed with non-Array variable

    Et le logiciel se ferme
    0
  14. V-X
     
    Re,

    Télécharge toolscleaner sur ton Bureau :

    toolscleaner

    * Double-clique sur ToolsCleaner2.exe et laisse le travailler

    * Clique sur Recherche et laisse le scan se terminer.

    * Clique sur Suppression pour finaliser.

    * Tu peux, si tu le souhaites, te servir des Options facultatives.

    * Clique sur Quitter, pour que le rapport puisse se créer.

    * Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta réponse
    xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
    télécharge ZHPDiag :

    ZHP DIAG

    ▶Une fois le téléchargement achevé, dézippe le fichier obtenu et place ZHPDiag.exe sur ton Bureau.

    𥭭ouble-clique sur l'icône pour lancer le programme.

    ▶Si tu es d'accord avec les termes du disclaimer, clique sur Continue.

    ▶Vérifie que le bouton devant Last Files Created est coché.

    𥭪 la fin du scan, enregistre le rapport en cliquant sur Sauve.

    ▶Ouvre le fichier sauvegardé avec le Bloc-Notes et copie son contenu dans ta réponse.
    0
  15. kentin2nhm Messages postés 36 Statut Membre
     
    [ Rapport ToolsCleaner version 2.2.8 (par A.Rothstein & dj QUIOU) ]

    -->- Recherche:

    C:\FindyKill.txt: trouvé !
    C:\avenger: trouvé !
    C:\Qoobox: trouvé !
    C:\Rsit: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\All Users\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\All Users\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\All Users\Start Menu\Programs\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\All Users\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\easy M67\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Documents and Settings\easy M67\Desktop\HijackThis.lnk: trouvé !
    C:\Documents and Settings\easy M67\Desktop\HJTInstall.exe: trouvé !
    C:\Documents and Settings\easy M67\Desktop\Rsit.exe: trouvé !
    C:\Documents and Settings\Invité\Desktop\HijackThis.lnk: trouvé !
    C:\Program Files\FindyKill: trouvé !
    C:\Program Files\Trend Micro\HijackThis: trouvé !
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
    C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\ProgramData\Start Menu\Programs\HijackThis: trouvé !
    C:\ProgramData\Start Menu\Programs\FindyKill: trouvé !
    C:\ProgramData\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Application Data\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Application Data\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Application Data\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    C:\Users\All Users\Start Menu\Programs\HijackThis: trouvé !
    C:\Users\All Users\Start Menu\Programs\FindyKill: trouvé !
    C:\Users\All Users\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
    0
  16. V-X
     
    Re,

    Tu peut tout supprimer et faire (essayer) ZHPDiag
    0
  17. kentin2nhm Messages postés 36 Statut Membre
     
    Rapport de ZHPDiag v1.16 par Nicolas Coolman
    Enregistré le 22/12/2008 21:22:11
    Platform : Windows Vista (TM) Home Premium (6.0.6001) Service Pack 1
    MSIE: Internet Explorer v7.0.6001.18000
    MFIE: Mozilla Firefox (3.0.5)

    ---\\ Processus lancés
    %ProgramFiles%\Windows Defender\MSASCui.exe
    C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
    C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
    C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
    C:\Windows\system32\WpcUmi.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Windows\ATK0100\HControl.exe
    C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Spyware Doctor\pctsTray.exe
    C:\Windows\ehome\ehTray.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

    ---\\ Pages de recherche de Mozilla Firefox (M1)
    M1 - SPR:Search Page Redirection - C:\Program Files\Mozilla FireFox\extensions\google-cjk@partners.mozilla.com

    ---\\ Modification d'une valeur System.ini (F2)
    F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
    F2 - REG:system.ini: Shell=explorer.exe

    ---\\ Pages de démarrage d'Internet Explorer (R0)
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/

    ---\\ Pages de recherche d'Internet Explorer (R1)
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

    ---\\ Redirection du fichier Hosts (O1)
    O1 - Hosts: ::1 localhost

    ---\\ Browser Helper Objects de navigateur (O2)
    O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    ---\\ Applications démarrées automatiquement par le registre (O4)
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
    O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [WPCUMI] C:\Windows\system32\WpcUmi.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [HControl] C:\Windows\ATK0100\HControl.exe
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
    O4 - HKLM\..\Run: [MRT] "C:\Windows\system32\MRT.exe" /R
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [E07FXLRD_368068] "C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection DVD\EDICT.EXE" -m
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
    O4 - HKCU\..\Run: [Google Update] "C:\Users\easy M67\AppData\Local\Google\Update\GoogleUpdate.exe" /c
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [Buyertools Reminder] "C:\Program Files\Buyertools Reminder\Reminder.exe" /autorun

    ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
    O5 - control.ini: inetcpl.cpl=no

    ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

    ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
    O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll,208
    O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll,210
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO

    ---\\ Objets ActiveX (Downloaded Program Files)(O16)
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase6662.cab
    O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab

    ---\\ Protocole additionnel et piratage de protocole (O18)
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL

    ---\\ Clé de Registre autorun SharedTaskScheduler (O22)
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030}

    ---\\ Composants installés (ActiveSetup Installed Components) (O40)
    O40 - ASIC: Microsoft Windows Media Player - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
    O40 - ASIC: Internet Explorer - {26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
    O40 - ASIC: Browser Customizations - {60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
    O40 - ASIC: YInstStarterUpgrade Class - {0291E591-EA41-4c82-8106-3DC6CE7F7664} - C:\PROGRA~1\Yahoo!\Common\yinsthelper.dll
    O40 - ASIC: Viewpoint Media Player - {03F998B2-0E00-11D3-A498-00104B6EB52E} - C:\Program Files\Viewpoint\Viewpoint Experience Technology\AxMetaStream.dll
    O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - (not file)
    O40 - ASIC: Viewpoint Media Player - {1B00725B-C455-4DE6-BFB6-AD540AD427CD} - C:\Program Files\Viewpoint\Viewpoint Experience Technology\AxMetaStream.dll
    O40 - ASIC: (no name) - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - (not file)
    O40 - ASIC: Microsoft Windows Media Player 11.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\System32\wmpdxm.dll
    O40 - ASIC: Adobe Shockwave Director 10.4 - {233C1507-6A77-46A4-9443-F871F945D258} - C:\Windows\System32\Adobe\Director\swdir.dll
    O40 - ASIC: Adobe Shockwave Director 10.4 - {2A202491-F00D-11cf-87CC-0020AFEECF20} - (not file)
    O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\Windows\system32\regsvr32.exe /s /n /i:/UserInstall C:\Windows\system32\themeui.dll
    O40 - ASIC: YInstStarter Class - {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} - C:\PROGRA~1\Yahoo!\Common\yinsthelper.dll
    O40 - ASIC: YSearchSetting2 Class - {347B0667-C7ED-429B-BDE3-CC8D3BACAA31} - C:\PROGRA~1\Yahoo!\Common\yinsthelper.dll
    O40 - ASIC: Offline Browsing Pack - {3af36230-a269-11d1-b5bf-0000f8051515} - (not file)
    O40 - ASIC: Microsoft .NET Framework 1.1 Service Pack 1 (KB867460) - {411EDCF7-755D-414E-A74B-3DCD6583F589} - (not file)
    O40 - ASIC: Microsoft Windows Mail 7 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
    O40 - ASIC: (no name) - {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - (not file)
    O40 - ASIC: DirectDrawEx - {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - (not file)
    O40 - ASIC: Internet Explorer Help - {45ea75a0-a269-11d1-b5bf-0000f8051515} - (not file)
    O40 - ASIC: Microsoft Windows Script 5.6 - {4f645220-306d-11d2-995d-00c04f98bbc9} - (not file)
    O40 - ASIC: Internet Explorer Setup Tools - {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - (not file)
    O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} - (not file)
    O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - C:\Windows\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI
    O40 - ASIC: MSN Site Access - {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - (not file)
    O40 - ASIC: Address Book 7 - {7790769C-0471-11d2-AF11-00C04FA35D02} - (not file)
    O40 - ASIC: .NET Framework - {7C028AF8-F614-47B3-82DA-BA94E41B1089} - (not file)
    O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
    O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
    O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
    O40 - ASIC: Dynamic HTML Data Binding - {9381D8F2-0288-11D0-9501-00AA00B911A5} - (not file)
    O40 - ASIC: Microsoft .NET Framework 1.1 Hotfix (KB929729) - {AAC3F1F0-5649-4670-A698-F1523729F015} - (not file)
    O40 - ASIC: .NET Framework - {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - (not file)
    O40 - ASIC: Internet Explorer Core Fonts - {C9E9A340-D1F1-11D0-821E-444553540600} - (not file)
    O40 - ASIC: .NET Framework - {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - (not file)
    O40 - ASIC: (no name) - {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - (not file)
    O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11CF-96B8-444553540000} - C:\Windows\system32\Macromed\Flash\Flash10a.ocx
    O40 - ASIC: HTML Help - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - (not file)
    O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} - (not file)

    ---\\ Logiciels installés (O42)
    O42 - Logiciel: Panda ActiveScan 2.0
    O42 - Logiciel: Adobe Flash Player 10 ActiveX
    O42 - Logiciel: Adobe Flash Player Plugin
    O42 - Logiciel: Adobe Shockwave Player
    O42 - Logiciel: Adobe Reader 8
    O42 - Logiciel: ALUpdate
    O42 - Logiciel: Audacity 1.2.6
    O42 - Logiciel: avast! Antivirus
    O42 - Logiciel: CartaGoGo v3.1.8
    O42 - Logiciel: CCleaner (remove only)
    O42 - Logiciel: cdrtfe 1.3pre2
    O42 - Logiciel: CloneDVD2
    O42 - Logiciel: D-max Syntek USB2.0 V6.32.3.1
    O42 - Logiciel: Delivery
    O42 - Logiciel: Directory Lister v0.9
    O42 - Logiciel: Dofus 1.26.0
    O42 - Logiciel: EPSON Logiciel imprimante
    O42 - Logiciel: Flash Player plugins 9
    O42 - Logiciel: Free Mp3 Wma Converter V 1.7.2
    O42 - Logiciel: ATK0100 ACPI UTILITY
    O42 - Logiciel: HP Imaging Device Functions 9.0
    O42 - Logiciel: HP Photosmart Essential 2.01
    O42 - Logiciel: HP Solution Center 9.0
    O42 - Logiciel: HP Customer Participation Program 9.0
    O42 - Logiciel: HP OCR Software 9.0
    O42 - Logiciel: Infocentre Rev. 2.0
    O42 - Logiciel: InfraRecorder
    O42 - Logiciel: iWizz
    O42 - Logiciel: Security Update for CAPICOM (KB931906)
    O42 - Logiciel: LimeWire 4.18.2
    O42 - Logiciel: Microsoft .NET Framework 1.1 Hotfix (KB929729)
    O42 - Logiciel: Malwarebytes' Anti-Malware
    O42 - Logiciel: Messenger Plus! Live
    O42 - Logiciel: Microsoft .NET Framework 1.1
    O42 - Logiciel: Microsoft .NET Framework 3.5
    O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 - fra
    O42 - Logiciel: Mozilla Firefox (3.0.5)
    O42 - Logiciel: NIS2007
    O42 - Logiciel: NVIDIA Drivers
    O42 - Logiciel: PhotoFiltre
    O42 - Logiciel: Picasa 2
    O42 - Logiciel: Microsoft Office Professional Plus 2007
    O42 - Logiciel: SetUp My PC
    O42 - Logiciel: Skype 2.5.2.151
    O42 - Logiciel: Motorola SM56 Data Fax Modem
    O42 - Logiciel: Spybot - Search & Destroy 1.5.2.20
    O42 - Logiciel: Spyware Doctor 6.0
    O42 - Logiciel: Synaptics Pointing Device Driver
    O42 - Logiciel: TightVNC 1.3.9
    O42 - Logiciel: Lauyan TOWeb V2
    O42 - Logiciel: Packard Bell Updator
    O42 - Logiciel: USB2.0 VGA WebCam
    O42 - Logiciel: Viewpoint Media Player
    O42 - Logiciel: VideoLAN VLC media player 0.8.6h
    O42 - Logiciel: PhotoDVD 2.9.6.1c
    O42 - Logiciel: Windows Live OneCare safety scanner
    O42 - Logiciel: Archiveur WinRAR
    O42 - Logiciel: Microsoft Encarta 2007 - Collection
    O42 - Logiciel: WD Diagnostics
    O42 - Logiciel: HDReg France
    O42 - Logiciel: Norton Security Scan
    O42 - Logiciel: Google Earth
    O42 - Logiciel: Java(TM) 6 Update 11
    O42 - Logiciel: Java(TM) 6 Update 5
    O42 - Logiciel: Java(TM) 6 Update 7
    O42 - Logiciel: SeaTools for Windows
    O42 - Logiciel: HP Product Assistant
    O42 - Logiciel: ATK Hotkey
    O42 - Logiciel: VCRedistSetup
    O42 - Logiciel: HP Smart Web Printing
    O42 - Logiciel: RTC Client API v1.2
    O42 - Logiciel: HPSSupply
    O42 - Logiciel: USB2.0 350K WebCam
    O42 - Logiciel: neroxml
    O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack - fra
    O42 - Logiciel: Nero 8
    O42 - Logiciel: Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)
    O42 - Logiciel: Windows Media Player Firefox Plugin
    O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable
    O42 - Logiciel: MSXML 4.0 SP2 (KB954430)
    O42 - Logiciel: Microsoft Silverlight
    O42 - Logiciel: VC_MergeModuleToMSI
    O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB956358)
    O42 - Logiciel: Update for Microsoft Office Outlook 2007 (KB952142)
    O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB951338)
    O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB954326)
    O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB958437)
    O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB958439)
    O42 - Logiciel: Security Update for Visio 2007 (KB947590)
    O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB951944)
    O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (kb958619)
    O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB956828)
    O42 - Logiciel: Update for Office 2007 (KB946691)
    O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB951550)
    O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1)
    O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB950114)
    O42 - Logiciel: Microsoft Office Access MUI (French) 2007
    O42 - Logiciel: Microsoft Office Excel MUI (French) 2007
    O42 - Logiciel: Update for Microsoft Office Excel 2007 Help (KB957242)
    O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007
    O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007
    O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007
    O42 - Logiciel: Update for Microsoft Office Outlook 2007 Help (KB957246)
    O42 - Logiciel: Microsoft Office Word MUI (French) 2007
    O42 - Logiciel: Microsoft Office Proof (Arabic) 2007
    O42 - Logiciel: Microsoft Office Proof (German) 2007
    O42 - Logiciel: Microsoft Office Proof (English) 2007
    O42 - Logiciel: Microsoft Office Proof (French) 2007
    O42 - Logiciel: Microsoft Office Proof (Dutch) 2007
    O42 - Logiciel: Microsoft Office Proof (Spanish) 2007
    O42 - Logiciel: Microsoft Office Proofing (French) 2007
    O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007
    O42 - Logiciel: Microsoft Office Shared MUI (French) 2007
    O42 - Logiciel: Microsoft Office Language Pack 2007 Service Pack 1 (SP1)
    O42 - Logiciel: Adobe Reader 8.1.2 - Français
    O42 - Logiciel: Adobe Reader 8.1.2 Security Update 1 (KB403742)
    O42 - Logiciel: Assistant de connexion Windows Live
    O42 - Logiciel: Spybot - Search & Destroy
    O42 - Logiciel: DivX Web Player
    O42 - Logiciel: PrintPratic
    O42 - Logiciel: Windows Live Messenger
    O42 - Logiciel: MSXML 4.0 SP2 (KB936181)
    O42 - Logiciel: MSXML 4.0 SP2 (KB941833)
    O42 - Logiciel: PC Inspector smart recovery
    O42 - Logiciel: OFFICE One Fonts v7
    O42 - Logiciel: DivX Content Uploader
    O42 - Logiciel: GdgAnglais4
    O42 - Logiciel: HP Photosmart All-In-One Software 9.0
    O42 - Logiciel: Traktor DJ Music Mix
    O42 - Logiciel: SoundMAX
    O42 - Logiciel: 32 Bit HP CIO Components Installer
    O42 - Logiciel: Windows Live installer
    O42 - Logiciel: HP Update
    O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

    ---\\ Contenu des dossiers Fichiers Communs (O43)
    O43 - CFD:Common File Directory - C:\Program Files\Common Files\Adobe
    O43 - CFD:Common File Directory - C:\Program Files\Common Files\aol
    O43 - CFD:Common File Directory - C:\Program Files\Common Files\aolshare
    O43 - CFD:Common File Directory - C:\Program Files\Common Files\Borland Shared
    O43 - CFD:Common File Directory - C:\Program Files\Common Files\DESIGNER
    O43 - CFD:Common File Directory - C:\Program Files\Common Files\Hewlett-Packard
    O43 - CFD:Common File Directory - C:\Program Files\Common Files\HP
    O43 - CFD:Common File Directory - C:\Program Files\Common Files\InstallShield
    O43 - CFD:Common File Directory - C:\Program Files\Common Files\Java
    O43 - CFD:Common File Directory - C:\Program Files\Common Files\microsoft shared
    O43 - CFD:Common File Directory - C:\Program Files\Common Files\Nero
    O43 - CFD:Common File Directory - C:\Program Files\Common Files\Nullsoft
    O43 - CFD:Common File Directory - C:\Program Files\Common Files\Services
    O43 - CFD:Common File Directory - C:\Program Files\Common Files\SpeechEngines
    O43 - CFD:Common File Directory - C:\Program Files\Common Files\Stardock
    O43 - CFD:Common File Directory - C:\Program Files\Common Files\Symantec Shared
    O43 - CFD:Common File Directory - C:\Program Files\Common Files\System
    O43 - CFD:Common File Directory - C:\Program Files\Common Files\WindowsLiveInstaller

    ---\\ Derniers fichiers modifiés ou crées sous System32 (O44)
    O44 - LFC:Last File Created - C:\Windows\System32\Apphlpdm.dll -->01/11/2008
    O44 - LFC:Last File Created - C:\Windows\System32\CF118.exe -->01/12/2008
    O44 - LFC:Last File Created - C:\Windows\System32\CF32560.exe -->01/12/2008
    O44 - LFC:Last File Created - C:\Windows\System32\config.nt -->05/11/2008
    O44 - LFC:Last File Created - C:\Windows\System32\connect.dll -->21/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\deploytk.dll -->21/12/2008
    O44 - LFC:Last File Created - C:\Windows\System32\FNTCACHE.DAT -->30/11/2008
    O44 - LFC:Last File Created - C:\Windows\System32\GameUXLegacyGDFs.dll -->01/11/2008
    O44 - LFC:Last File Created - C:\Windows\System32\gdi32.dll -->21/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\ieframe.dll -->16/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\iertutil.dll -->16/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\java.exe -->21/12/2008
    O44 - LFC:Last File Created - C:\Windows\System32\javaw.exe -->21/12/2008
    O44 - LFC:Last File Created - C:\Windows\System32\javaws.exe -->21/12/2008
    O44 - LFC:Last File Created - C:\Windows\System32\jsproxy.dll -->16/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\mrt.exe -->09/12/2008
    O44 - LFC:Last File Created - C:\Windows\System32\MRT.INI -->21/12/2008
    O44 - LFC:Last File Created - C:\Windows\System32\mshtml.dll -->12/12/2008
    O44 - LFC:Last File Created - C:\Windows\System32\mshtml.tlb -->02/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\mstime.dll -->16/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\msxml4.dll -->30/09/2008
    O44 - LFC:Last File Created - C:\Windows\System32\netapi32.dll -->16/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\perfc009.dat -->11/12/2008
    O44 - LFC:Last File Created - C:\Windows\System32\perfc00C.dat -->11/12/2008
    O44 - LFC:Last File Created - C:\Windows\System32\perfh009.dat -->11/12/2008
    O44 - LFC:Last File Created - C:\Windows\System32\perfh00C.dat -->11/12/2008
    O44 - LFC:Last File Created - C:\Windows\System32\PerfStringBackup.INI -->11/12/2008
    O44 - LFC:Last File Created - C:\Windows\System32\PortableDeviceApi.dll -->22/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\RECV.log -->07/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\SENT.log -->07/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\shell32.dll -->06/11/2008
    O44 - LFC:Last File Created - C:\Windows\System32\TEST.log -->07/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\tzres.dll -->22/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\urlmon.dll -->16/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\wininet.dll -->16/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\wuapi.dll -->16/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\wuapp.exe -->16/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\wuauclt.exe -->16/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\wuaueng.dll -->16/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\wucltux.dll -->16/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\wudriver.dll -->16/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\wups.dll -->16/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\wups2.dll -->16/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\wuwebv.dll -->16/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\drivers\mbam.sys -->22/10/2008
    O44 - LFC:Last File Created - C:\Windows\System32\drivers\mbamswissarmy.sys -->22/10/2008

    ---\\ Déni du service Local Security Authority (LSA) (O48)
    O48 - LSA:Local Security Authority Authentication Packages -
    O48 - LSA:Local Security Authority Notification Packages -

    End of the scan:
    0
  18. V-X
     
    Re,

    Comment va ton PC ?

    fait ceci maintenant:

    met à jour JAVA
    xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
    ▶ Télécharge CCleaner (N'installe pas la Yahoo Toolbar) :
    CCLEANER

    ▶ Lance-le. Va dans "Options" puis "Avancé",

    ▶ Tu décoches la case "Effacer uniquement les fichiers etc...".

    ▶ Tu vas dans "Nettoyeur", tu fais "Analyse". Une fois terminé, tu lances le nettoyage.

    ▶ Tu vas dans "Registre", tu fais "Chercher des erreurs".

    Une fois terminé, tu répares toutes les erreurs sans sauvegarder la base de registre.
    0
  19. kentin2nhm Messages postés 36 Statut Membre
     
    Bonjour,
    C'est bon j'ai tout fais mais avast ne marche toujours pas.
    0
  20. chimay8 Messages postés 7947 Statut Contributeur sécurité 60
     
    bagle dégomme les antivirus
    tes bon pour le réinstaller
    0
  21. V-X
     
    Re,

    désinstalle proprement AVAST

    Ensuite :

    Installe et configure correctement cet antivirus:

    ANTIVIR

    Ensuite tu le met à jour et tu passe en mode sans échec et tu scan ton PC avec et tu poste le rapport générer sur ce forum.

    Inclut également la recherche de rootkit.
    0
  • 1
  • 2